last executing test programs:

1.139637991s ago: executing program 2 (id=975):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000000), &(0x7f0000000140)=""/173, &(0x7f0000000080)="4834f0af4c90c19ee4c3f101c129a56f94431eb6363d1a75e18df94dbe90e64dc44c702a127f5ee2b0b2c1ebb94041", &(0x7f0000000200)="ed1fea8ac7393dfb0617e9feb5411c0d1213668ac9783ff54823fd5f031217f5236aefdd18af43ff1858de3007ea94a63cde66380fc06b106b23f8160ba1a4c479af4b4ec2e41da53cf2752d5463944ca7caeae24eeb8503f18192f936087a95dc3f6414932a93044059e8eaa824e3dcf83e51493ab2b8f3d8d33235cf799c7483184ff1356c904cec0081e9ff73940423130e194aac5b1f5eb9e46c91ab4ec662277e293018fd369cd6e4a5dba455b4fe16a6141eb25ddf931a005752", 0x10001, r2}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="dd48a08bc4bfa26639580586ccd15704000000bac790bac78baf17e82db379f803dc5258c57624b67342a1350000000000007128e3a27541b3acecf289eeee9fd31b5bb59807c6b6ac6609b606", @ANYRES16=r0, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5450, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x5, "f42f7f"}, @exp_fastopen={0xfe, 0xb, 0xf989, "23c486d4219ab9"}]}}}}}}}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f0000000540)="61a54d8e8afc3f9c74cb507df7eac0ee09d047cfa6a1d73ddf434b90c896a053d5fc53e172", &(0x7f0000001840)=@udp6}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000500)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r7, &(0x7f0000000640)="2c590b5c25ff85ccea3fc161508651dfb1246f4d4da90c102b14d2578e27b03d2708df588fb4bbc0799ae48f07cf20ae93ad7f60d0b240f34634ecccf8b225850fd8f4c55db95d37c1fe8419e83282736bbe07cb874aa8b642185c8f881c335ef9c9e4", &(0x7f0000000ac0)=""/4096}, 0x20)
r8 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0xb0, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0xf, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc044)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$alg(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040), 0x0)

1.060062411s ago: executing program 2 (id=977):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.057478853s ago: executing program 0 (id=978):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0xc000)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x5, @empty, 0x5f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040041)

1.010398801s ago: executing program 2 (id=979):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451}, 0x28)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x150}}, 0x4880c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0x40af1d, 0x4)

1.009895228s ago: executing program 0 (id=980):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="d961aae479cc63cd48c9e513cde86c72cd4f903aa7dc1e743764cc1f1ca2362e38fe6ac1ac4d0c981ec1aba18e7e23f87894", 0x32}], 0x1)
sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x48800)
shutdown(r0, 0x1)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="36050000000000000a004e2000000001ff0100000000000000000000000000010400000000000000000000000000000000000000000000000000cf02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="d961aae479cc63cd48c9e513cde86c72cd4f903aa7dc1e743764cc1f1ca2362e38fe6ac1ac4d0c981ec1aba18e7e23f87894", 0x32}], 0x1) (async)
sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x48800) (async)
shutdown(r0, 0x1) (async)
socket$inet6(0xa, 0x802, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="36050000000000000a004e2000000001ff0100000000000000000000000000010400000000000000000000000000000000000000000000000000cf02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) (async)

960.416469ms ago: executing program 2 (id=981):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x75c0b73b241fbb35, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)
r4 = accept$netrom(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240))
accept$netrom(r4, &(0x7f00000004c0)={{0x3, @null}, [@null, @bcast, @null, @default, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000080)=0x48)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x83cff000)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

898.632131ms ago: executing program 0 (id=982):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000040)="c674ed63e46033c470d8d400eb00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

897.934599ms ago: executing program 2 (id=983):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0bae2b", 0x0, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x87}]}}}}}}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000), 0x300000, 0x800, 0x6, 0x3}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x14, 0x0, &(0x7f0000000080))
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000500)='wlan1\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r8, @ANYBLOB='\x00\x00', @ANYRES32=r10, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x480c0)

896.585312ms ago: executing program 0 (id=984):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
close(0x3)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

821.59176ms ago: executing program 0 (id=985):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
pipe(&(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x62040200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000004}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r9, 0x6, 0x12, 0x0, &(0x7f00000000c0))

806.872677ms ago: executing program 2 (id=986):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64], 0xb8}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x80000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000))
r2 = epoll_create1(0x0)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2000}, {r1, 0x400c}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0xecb0]}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c})

221.556202ms ago: executing program 1 (id=994):
r0 = socket(0x2b, 0x2, 0x7)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @empty, 'ipvlan1\x00'}}, 0x1e)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'vlan0\x00', 0x7}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{<r1=>0x0, 0x8, 0x83e9, 0x80000000, 0x7, 0x4, 0x3c55, 0x28b1, 0xf, 0x8, 0x9, 0x4, 0x8000000000000000, 0x5, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000140)={{r1, 0xecc2, 0xb1b, 0x2, 0x4, 0x80, 0x9, 0xffffff81, 0x7fff, 0x4, 0x5, 0x1, 0xa6, 0x2, 0x7}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r2) (async, rerun: 32)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000001180)) (async, rerun: 32)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000011c0)='syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000001200)='cgroup.controllers\x00', 0x0, 0x0) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001280)=<r6=>0x0)
sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f0000001240), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@RTM_NEWNSID={0x3c, 0x58, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, r6}]}, 0x3c}}, 0x4000010) (async, rerun: 64)
r7 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
recvmsg(r7, &(0x7f0000001840)={&(0x7f0000001380)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001400)=""/232, 0xe8}, {&(0x7f0000001500)=""/29, 0x1d}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/89, 0x59}, {&(0x7f0000001640)=""/102, 0x66}, {&(0x7f00000016c0)=""/93, 0x5d}, {&(0x7f0000001740)=""/117, 0x75}], 0x7}, 0x21) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001880)={<r9=>0x0, 0x8, 0x9, [0x7, 0x9, 0x4, 0x8001, 0xfa, 0x5, 0x9, 0x6, 0x8]}, &(0x7f00000018c0)=0x1a)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001900)={0x81, 0x8, 0x1ff, 0x82df, <r10=>r9}, &(0x7f0000001940)=0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001980)={0x0, r8}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000019c0)=@assoc_value={r9, 0x3}, &(0x7f0000001a00)=0x8)
r11 = accept4$inet(r0, 0x0, &(0x7f0000001a40), 0x800)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000001a80)={r10, 0x0, 0x30}, &(0x7f0000001ac0)=0xc)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreq(r12, 0x0, 0x23, &(0x7f0000001b00)={@rand_addr=0x64010102, @multicast2}, 0x8) (async, rerun: 32)
ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000001b40)="782db7bbbb09d24a6d7abd15e5392a6c90b6249a28162da8ae43ed710c0890c6e10da433696506a85aa2f70bb199b27559c6159d5fa906e22cd28fd8f97adce2d37c5f6bf65be13d05e6758b2f5ac646fbc78e8260825383795dbb4694cc89f0e783104646f0d4b7bc5f6297d236d0f99277e86949c9e7ec75d4aba772354e4bd7a46146a51dc36d894d595714a8a5268935668fc257c5ba140273ece1467f39999abb09b8064e3b858641d36453508e61e43051708fb374bf928ddfb60620f65c6277bca8b16b397a2d239f32b9835f9a0b2828a48fa15c43f886f5405c906d715a320b07ea549bff921a5f8dabb4af2c756764b95b3bcbba3bc117a1c77f1a4f7478243432cd95cf597204df732e2566ac97b3babf8d01b987b5c5f5397a8e91bf28e3fd71ff8922cb80eee40ba2e9303c74282ec6cadb1ee8ae0762db9326965939dd0f2c2ece2ebee4c21fb223f3b8ba528f93d2fc01957e182c7c6646e327676ea92d10b9a7e24d15f24f8f495f52e64f4c049deee51baa43ba52558263d504b4dc30fb56d2ccdbccc9c68a7d433094fcfb7d3e02bfbc302847afe609b24588221fde6c1e1a193309eb1a8f2debc5353a22887768de97e01e6c1f958b6efd74fc378bc5226f76ce715f67c06e897b1855f36752208309b2ec705a0151ce92e0052918033322201e46066a06802cc888b2649d7f50004f38fd28e9a57ca876a780a4781b216f3700613d2e091c47dd59134669bc2661fe69dcb28ef23409590dcc4aeece0aa79b30d446bca8738db5c4aa58d21d88239e70ac529b82745d38c2d622562297f0f272e85b90fc26b719e8006c8aadd4b4b1d641bbe16bbf9c2170750d99661c697b5293fd66a7d3d7994b0296bf5ab868ead0bf21fbe0562b6df61ab8b10a46488813b6f45405cadb29eba2138636dd83a45cb4c544a36d51c09000f3565e7c07a532bb58a1752c0579d40a82a231ef9778d47a9db7a37f156ed57b80135d2e243efa77f1a3ef8f1ee6e6de450072b198442276e395b50c452edc5ffa102bc0aad0630a01190028db03f96fc780ddbe4824940a284de94019c784916b6aebbbd686910b617b3a34de8ca6f9f1332c90e001c4df17434f0078a95416bbf8d5f5a18e22090f6b1252ce15823571da8f2a4d9f222514a24c16e4e7e7d0b24326b887b5b8cf3afe4f32a1d3a0278f7d92ed522cb38989230f16752c910d359e5843a30d23db212f0f902648b82330cd2668d6f130188936e0356497c22fff08bfe3da346bbfa32d9ec98667e11f497f7be66531371b18cfe72c603463c8b240b5050c42891ed3786796250b122094c6525f1186be5e38bee859546ce87d38925cd8d2e58dc7ca2c0003d2fcbe22801e014349cf81b4ca46255365229ac20e4157447e7411eb3d6e12f93cda2bd8dc3812eb7cdbf8aab9e722b26d6325194e349ff7d87b2e7f24b77bd5064f01a71ae2d2ca53b6a5fd2bf607a8325388de84b6569c06af722347d7b1d87c91ff477e0d1959ff547b926411bde0e4ae1aab4e750db24b6be629901b2279df6d9a4b6d32942707bfb2e0b9e07af8a84954449fab9e0124528df0b8933f57f3cf3fd876f2c5b9410dead56a146319ea34150312fed7cd0406c577d432a96eea29421a021c90e2814be1bd5a26a1fb02483e03756c176cd8d71992ab15f69f464935cf535f1469b6e38344003f3804b7958120b9fbe2bcdb641abbc4df91bff3a06f7f3d924bc4c3a2a5afc2aa832b71c91676d38a654acb5d867609d010017c50c5ad48451fdae9da28d72fe0db64bacddb1e2e3bb41a91af97514b2f14272c426ea8bc7f233670adf6cb36c8379043dcca82ba7710f7094d2e96a01b86258e1831cedef767eee1282656b8fce3f70659f1f958aacdc429635e7dac643999e4de1ee22c2b3355d7df760e76795c3c4063ff05b659ed6aae99cb145cf31459844f424577cc3b7f03e832a4330793b80047e5fad14ce766486316f9417c66312f6c6987dda229246d262cd91920498e55d2f9f45d29d518983a1b1bbbaa5842cfa270cd81085a69988c61a3b5bb2b6cccd7566b6daba2b876d9bea57310d05e4d70b9b2eddf63b9ad0c7ca4f2a515f657b5cf6e87fc7626f92e6249dc6074099353e860f54f71ca7b02789f46f1fd7136e01977edfe4a2b1c72f8fc4f9777016fcced6fe4819bc6a04f0ed00f3388699415bfa63b1858f61cfd74c1f837cc098c02fe4ba1bbba5ac78b02f9ddc66eeb4828da4010353ce562f21463c4cbf620d23131cd326b954a9f220d1765cf17a7fc09f76c16cb230bd1055e9ac5f14e628b420a19e7882340205496f70a639c46ac0d2dc7fcce68422f750c797be5df104aff8f6408eaa5e7bbc4f67b0bff5d4be04918b7fcea5474905350bcf43b9928fbef1e6626f250dcd74a1bd5fb36a2018c24e6107820097ebc257c1936f4121f3b0bb0cd5d3365e3c661af28bad729ba926373ccb0c4ad67bf728351d69c14001f99cfd28b18dff872daecbc6f7e5c7652d1575dcd0cbb49a2959523b43c9143ba6baf6cd60267010ea0b7f93b889c2f96f1eca76ac73d762aba0ad3afa0f37b090494fd3986dd1c99c2ac376b7b623dd2a378d2d6060586b74d010bc9edc7eb3b0dd623852f1025c08bc94443a02fb0edad505f08e78526fa3773594779f644e96bb1b3ec390293b8c8d09562fc81923e56c5c491f7802d8d4feb371291892a5fdedc0cbf64bc496b55ccc5765edde6693bf9e70ed6aecf4b1941a2df45984129fe2b44e330402b530661c6365078da8bfbf5d4c0145cff76a35e78c9108f2751cf695edcb4a00c67eec9b020caad13672106821a459aae47dc5bf0a521085927fcea506edae91a8eec4b9c721f2a69d2188e2dfb603077338df5a867c8c12c18c29fd865277654d603394adfdfa95d1b11d71d1879bbdedbcd462b090be6e99f50a3da87ce80ea83a75efd79c5974a31d9731cfaafacd64afb0b8897df84f690ba036e2147d181882fec47fdc65ffdcb5585c421d05a2d98b98818dcbba19f7ddb1c34e1a4ad25750807838dcfe28b59a911eccc45301e902d89c9cc2f060d943da166804c5248b88f48c8fe817cd1533a1eec42fb4a1f3b80b990916d7eaf189a082b52a3204ef25831a671f7ec944b206b4210063b1231b2a126b885b3031d9614dc5de4557d530d9a69dc65563b357f96662c44f6cf827468459600daf713f6850f6cbf2d55723d5766ef026ce9a240b4e63bc34e7a6ddea840d80c472659f07fb5204b3d08c24f63f0de0aca4d50ffd217f96fa63279531c6f3ff1fee469cbde34507e5d813f8af6010233c6794c121c549f34353f5d07f935998dc5b6e401abfe35d9a71fb037b87b07f455d7c8e818d07bdd9174171d53a0848e0a19697bc25cc689d169cd4fb2c4a079ea38916a8287fb1e1ad8e080dcb724804bec90eda74a73aa61c9e13d64f4442f6cd8b00d0f776d86d20995b99b12b6c56cb8df295da41b52200aab04c4fd31c01e6c5c68fa1113d8c91b8566b2781f683bd6fffdd4577c129af4da014704233918f259e25ba6d4dd11e3cc3e44acfa6590b61a118b56cae98d62254e3adea373e744320cde94e51b8f786eb3e037ab884496e7ce8598167cefa280cea5df9150e7d3214ec440c97c4bb3ab21c72c006e311b1cba5daecb997c0d2043033d3aed046605704df97aea2ca45e9a7b9b220b8cee7637628b2e884fc42ca9a46b55c3f798cf722ea65f6551dbaca6df1f44c8216e9967c07ef7f1316778506832802dec252b4098dad58167ac37147bbbcf87638989354409557c099e803f7d557cbbcb7cc50309a1fa2080acc4ecc6fcd3c925fd93b47c30be3f085b39820198d915c3380e65ed7f74767fb9c3331ca1b8d2609b47789cdbb5c0fe3f238ce93f4802f4948011eaa09dac312b2263ca14332947ac2ffa49dbf22625c9731507422e7737e3f038fecd511408c8e2dedfcb4c2222ffdf3b383138066a81d19f59512e981d8fb75310959e528e205422f55d644454046a362b22241ff99ec0458aa39257a9669ab3208af2c268fe8289889a3e15e4175c8b7fbab8a7409ee2b6006b9e8ff42f2e2b1e9e4f7d02bca3d5e97d789dea50894e274ff29d6e132a0f96bd290e15716d6b7ebaee9d23abba94c0a8247f1255f00a75e9593203a7372d157dee9601b09ca589e33e8bbc66a5797416e34271b07d70013e7ba23f31e37c67cdf129a0ede5ac85f70e4fb31f798c238627e32f2db3d0c1b40946e04d0975f7bd1aa30bf105ca0098fad099debf00440ec094ee8482275c5d4bff75126887570f439f02f7ba3e72b662c430bb830e28bd089b2f170c4edd1a20721fb3cca6db108b6a8f7e67d94d4b090121efe8831879ba6a6e1d8c8bab8ca8384768229c2618977c36ade6c5dc00ff3602c6dd05f28509220ec4782609ea737f248d4dbc672c0d255916243b2064d64820af52c2edacf3e225dcfdb3c3351a3e1f838b48b47bcd5f710c9f4e8ef1cb3d501934f13c972c5b29312bcb1a4a536aab44eebed2fb9528e518c53e03efd385d76141b3c937887b8478e7ff31b86c8d4fe8104ae5c9dadadb4022ac1761a4cc7decd7c39cac9512973a55a62a7de840b72c70e1bfa3b413085a6e4cab973571f318628431c7457d2c94264ad45514046f191d3c55c0c98b11b4878cc8567ecbab39ff2f832bd9699d96ac366f30f66a1f693d85a701d2ccd33e7cf9ce5291a02be2e7e94894e3eb05d7f704b5030b0840457cd1c2607caeffee2e762c4838da6469cbedb05941de2965a82fa1cf26250076dce44821fd4005fefc76f45aff7c48066c2c88b34f302438525c6c586a40caf14eac141c441071dc2f0e486287a85f73a680a618bf2263db42cb70b310c5dc115fbf95ceefd5c1c4e44c550d0cbc692ecd77581010794042a444f8bc971424ba17421e68c77daab2a3059d81356f4af3bdf9c75d67c52b648f4afb0afe12e0a7fc6e81c6baab8405a5d360181b0ceb72c0318ae323c669f865e43504ca38182b467701205d462dc83aaf2e12e0d06b1593925339033b3b8e2489ca43f9bdfd8fb667fc755579578242312e7d80aa8a98f6600bcee402fa870e3dadd79872ee3458dea76237efdd0ba1f79db0d4a5e60045c0e082f46b3381158ad47747aeecccf123fcf4f944d6e4a41ae6049356e1838404a151bc2d57124cda9114cd1e3014ad483d131ddeae8c129fa7765a8b30b2746726cf87b32dfe68da9bf09bcf108110cc993d95f6cf49a11fcb70e9138cb91752459ef1fd9a3aeaed36c98d3149b6eb35a366356990657dc4a9ce04b7c3777d05ee124aec5aa866673ab7c054f3d63b717595bcd8d1cbb31e3cc7474f2c15993806ad21e4dcafd0c01eb383c751da30932c200c08df2e3768d3098aa29a59de10af8a9be2be14c76c689aa030b87b5f795c2d13de7c5e3b3cea6f1076aad45353139287edb3ac296caf17be38d6fb7ab504c0e2ed5c68d3b9d5e3488c8a51b88aa5ecdf64830355764db1b443bf043c9b81a90e051fbb0ddee15243f3e8ecfb744fd55e96da831a144bdc6eb3c01e092c06741d8f6bd30b1a2c22b5f80017fef5dc21ff23b5a691c8a2b37f9bd0ad8436c7a27e86a15c749423d4cbff39dc6fc125db1bbe5c777942eef196e989699d5f7342dff6fc96b1de483545d538b6e373e9f2965aa2e2c1ea1d130fcea8122391213323bcc98ab6aec9c2601fc89957e18a34b720b3149623d14d8d24608cd42e07f683e3a8c1fb") (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r13, 0x89e1, &(0x7f0000002b40)=0x3) (async, rerun: 64)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) (rerun: 64)

220.889175ms ago: executing program 1 (id=995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003380), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x40}}, 0x40)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006100), 0x49f, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x38, 0x84, 0x47}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}}, 0x4020000)

108.790801ms ago: executing program 1 (id=996):
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1c844}, 0x48800)
getsockname(r1, &(0x7f0000000140)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000d40)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @broadcast}, 0x1b0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000d00)='vlan1\x00', 0x4, 0x2, 0x100})
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x701, 0x70bd29, 0x25dfdbfb, {0x2, 0x80, 0x10, 0xf9, 0xfd, 0x5, 0xfd, 0xb, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000844}, 0x4800)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
socket(0x26, 0x1, 0x3)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

107.878577ms ago: executing program 1 (id=997):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
read$alg(r2, &(0x7f0000000200)=""/96, 0x60)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r4, &(0x7f0000000700)="f574c3", 0x3)
splice(r4, &(0x7f0000000040), r3, 0x0, 0x6, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.480972ms ago: executing program 1 (id=998):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x183840, 0x0)

541.639µs ago: executing program 1 (id=999):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
write(r6, &(0x7f00000002c0)="23000000010006", 0x7)
r7 = socket$inet6(0xa, 0x4, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r7, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 0 (id=1000):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "eb8f2777c39a00", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_128={{0x303}, "87edde4a09f553de", "0000000061bd30762c8d9b181776dee6", "c5647869", "07908fa15101785b"}, 0x28)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, r1, 0x309, 0x2, 0x25dfdbfc, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x2}, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37344' (ED25519) to the list of known hosts.
syzkaller login: [   48.035643][ T5817] cgroup: Unknown subsys name 'net'
[   48.182525][ T5817] cgroup: Unknown subsys name 'cpuset'
[   48.186406][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.838817][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.002718][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.005613][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.008095][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.010938][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.013462][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.035100][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.037898][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.040750][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.043736][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.046388][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.110405][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.113689][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.120501][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.123580][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.126797][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.291073][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.321536][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.424110][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.426802][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.429115][ T5828] bridge_slave_0: entered allmulticast mode
[   54.431917][ T5828] bridge_slave_0: entered promiscuous mode
[   54.451664][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.453882][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.456033][ T5828] bridge_slave_1: entered allmulticast mode
[   54.458576][ T5828] bridge_slave_1: entered promiscuous mode
[   54.469438][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.471751][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.473895][ T5833] bridge_slave_0: entered allmulticast mode
[   54.476498][ T5833] bridge_slave_0: entered promiscuous mode
[   54.480641][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.482776][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.484940][ T5833] bridge_slave_1: entered allmulticast mode
[   54.487504][ T5833] bridge_slave_1: entered promiscuous mode
[   54.499731][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.506709][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.522233][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.534554][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.540409][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.598124][ T5833] team0: Port device team_slave_0 added
[   54.602369][ T5828] team0: Port device team_slave_0 added
[   54.605391][ T5833] team0: Port device team_slave_1 added
[   54.612806][ T5828] team0: Port device team_slave_1 added
[   54.646258][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.648375][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.655940][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.668381][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.671585][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.673754][ T5836] bridge_slave_0: entered allmulticast mode
[   54.676433][ T5836] bridge_slave_0: entered promiscuous mode
[   54.688589][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.690909][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.698453][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.702869][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.705036][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.707188][ T5836] bridge_slave_1: entered allmulticast mode
[   54.709993][ T5836] bridge_slave_1: entered promiscuous mode
[   54.721606][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.723669][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.731645][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.750395][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.753541][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.755688][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.764411][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.784146][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.830365][ T5836] team0: Port device team_slave_0 added
[   54.836239][ T5833] hsr_slave_0: entered promiscuous mode
[   54.838550][ T5833] hsr_slave_1: entered promiscuous mode
[   54.844597][ T5828] hsr_slave_0: entered promiscuous mode
[   54.846868][ T5828] hsr_slave_1: entered promiscuous mode
[   54.848950][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.852754][ T5828] Cannot create hsr debugfs directory
[   54.855527][ T5836] team0: Port device team_slave_1 added
[   54.927196][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.929320][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.937113][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.949924][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.952091][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.961188][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.060554][ T5836] hsr_slave_0: entered promiscuous mode
[   55.062978][ T5836] hsr_slave_1: entered promiscuous mode
[   55.065077][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.067276][ T5836] Cannot create hsr debugfs directory
[   55.122447][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.131612][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.144846][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.158575][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.208645][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.223681][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.236341][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.249363][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.277926][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.291554][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.302385][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.313937][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.366718][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.396483][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.407252][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.409660][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.421423][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.423713][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.433341][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.455993][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.460588][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.483036][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.485223][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.488743][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.491067][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.503796][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.517647][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.519934][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.528290][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.535509][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.537682][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.674699][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.707366][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.717409][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.739378][ T5833] veth0_vlan: entered promiscuous mode
[   55.755211][ T5833] veth1_vlan: entered promiscuous mode
[   55.784105][ T5828] veth0_vlan: entered promiscuous mode
[   55.794192][ T5836] veth0_vlan: entered promiscuous mode
[   55.800385][ T5828] veth1_vlan: entered promiscuous mode
[   55.804910][ T5836] veth1_vlan: entered promiscuous mode
[   55.807366][ T5833] veth0_macvtap: entered promiscuous mode
[   55.813883][ T5833] veth1_macvtap: entered promiscuous mode
[   55.827850][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.845593][ T5828] veth0_macvtap: entered promiscuous mode
[   55.849140][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.855763][ T5828] veth1_macvtap: entered promiscuous mode
[   55.865002][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.867689][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.874056][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.876636][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.884039][ T5836] veth0_macvtap: entered promiscuous mode
[   55.893345][ T5836] veth1_macvtap: entered promiscuous mode
[   55.905120][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.924206][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.932339][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.934917][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.937516][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.945035][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.956131][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.979278][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.981400][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.984194][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.996592][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.999263][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002682][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.005323][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.046847][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.057882][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.070437][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.072881][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.100822][ T5220] Bluetooth: hci1: command tx timeout
[   56.100827][   T54] Bluetooth: hci0: command tx timeout
[   56.101769][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.107893][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.122830][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.131463][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.135416][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.159285][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.169386][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.189876][ T5838] Bluetooth: hci2: command tx timeout
[   56.217933][ T5893] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.235645][ T5893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.241876][ T5893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.267257][ T5895] Zero length message leads to an empty skb
[   56.326686][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.407726][ T5913] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[   56.501209][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'.
[   56.602794][ T5934] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   56.605112][ T5934] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11'.
[   56.624426][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'.
[   56.686580][ T5941] Cannot find del_set index 1 as target
[   56.762800][ T5943] netlink: 'syz.2.15': attribute type 21 has an invalid length.
[   56.856636][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'.
[   56.866008][ T5956] netlink: 'syz.0.17': attribute type 20 has an invalid length.
[   56.898295][ T5958] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.940733][ T5960] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   56.986471][ T5964] IPVS: Unknown mcast interface: pimreg
[   57.025035][ T5968] netlink: 1 bytes leftover after parsing attributes in process `syz.2.24'.
[   57.039849][ T5968] syzkaller1: entered promiscuous mode
[   57.041884][ T5968] syzkaller1: entered allmulticast mode
[   57.048729][ T5971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.656908][ T5982] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   57.659386][ T5982] netlink: 'syz.0.28': attribute type 11 has an invalid length.
[   57.661929][ T5982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.28'.
[   57.808866][ T5993] delete_channel: no stack
[   57.852594][ T5999] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET)
[   58.179853][ T5220] Bluetooth: hci1: command tx timeout
[   58.181749][ T5838] Bluetooth: hci0: command tx timeout
[   58.259713][ T5838] Bluetooth: hci2: command tx timeout
[   58.584626][ T6009] netlink: 80 bytes leftover after parsing attributes in process `syz.1.37'.
[   58.634925][ T6013] nbd: must specify at least one socket
[   58.637997][ T6016] sctp: [Deprecated]: syz.0.40 (pid 6016) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.637997][ T6016] Use struct sctp_sack_info instead
[   58.687663][ T6020] tun0: tun_chr_ioctl cmd 1074025677
[   58.689296][ T6020] tun0: linktype set to 768
[   58.751930][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'.
[   58.859689][ T6032] tipc: Started in network mode
[   58.861391][ T6032] tipc: Node identity b64c1a44a578, cluster identity 4711
[   58.864166][ T6032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.874888][ T6031] tipc: Disabling bearer <eth:syzkaller0>
[   59.008169][ T6038] netlink: 'syz.1.49': attribute type 1 has an invalid length.
[   59.303090][ T6069] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   59.305542][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.328162][ T6069] netlink: 'syz.1.54': attribute type 5 has an invalid length.
[   59.501301][ T6092] netlink: 'syz.2.59': attribute type 21 has an invalid length.
[   59.524187][ T6092] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   59.569968][ T6090] nbd0: detected capacity change from 0 to 63
[   59.724323][   T56] block nbd0: Receive control failed (result -104)
[   59.836893][ T6122] syzkaller1: entered promiscuous mode
[   59.838591][ T6122] syzkaller1: entered allmulticast mode
[   60.056704][ T6141] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   60.076318][ T6124] tipc: Enabled bearer <ib:bond_slave_0>, priority 10
[   60.180689][ T6150] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   60.242307][ T6152] netlink: 'syz.2.72': attribute type 8 has an invalid length.
[   60.259840][ T5220] Bluetooth: hci0: command tx timeout
[   60.259865][   T54] Bluetooth: hci1: command tx timeout
[   60.303473][ T6158] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   60.304928][ T6161] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   60.340021][   T54] Bluetooth: hci2: command tx timeout
[   60.613052][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.630352][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.632774][ T6180] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   60.637764][ T6180] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   60.676154][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.686161][ T6186] batadv_slave_1: entered promiscuous mode
[   60.699806][ T6186] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.721968][ T6186] bond1: (slave batadv_slave_1): making interface the new active one
[   60.735703][ T6186] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link
[   60.743798][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.792671][ T6196] x_tables: duplicate underflow at hook 1
[   60.925725][ T6208] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.970172][ T6218] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   61.190798][ T5297] tipc: Node number set to 322181700
[   61.793504][ T6239] __nla_validate_parse: 20 callbacks suppressed
[   61.793522][ T6239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.98'.
[   61.955396][ T6252] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.103'.
[   62.346471][   T54] Bluetooth: hci1: command tx timeout
[   62.348132][   T54] Bluetooth: hci0: command tx timeout
[   62.430613][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   62.445854][ T6276] validate_nla: 4 callbacks suppressed
[   62.445877][ T6276] netlink: 'syz.0.107': attribute type 83 has an invalid length.
[   62.968583][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   63.094766][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'.
[   63.180613][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.183238][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.188834][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.218738][ T6329] : entered promiscuous mode
[   63.242398][ T6329] trusted_key: syz.1.122 sent an empty control message without MSG_MORE.
[   63.320900][ T6338] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[   63.324534][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.126'.
[   63.338123][ T6340] netlink: 'syz.1.125': attribute type 32 has an invalid length.
[   63.397914][ T6349] nlmon0: Master is either lo or non-ether device
[   63.637051][ T6370] netlink: 76 bytes leftover after parsing attributes in process `syz.0.132'.
[   63.644986][ T6370] pimreg: entered allmulticast mode
[   63.656118][ T6370] pimreg: left allmulticast mode
[   63.925003][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.134'.
[   64.110892][ T6411] xt_hashlimit: size too large, truncated to 1048576
[   64.164550][ T6413] delete_channel: no stack
[   64.500589][ T5838] Bluetooth: hci2: command 0x0419 tx timeout
[   65.119220][ T6421] netlink: 'syz.2.145': attribute type 64 has an invalid length.
[   65.553993][ T6435] netlink: 'syz.2.150': attribute type 23 has an invalid length.
[   65.571012][ T6437] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   65.640685][ T6443] SET target dimension over the limit!
[   65.643911][ T6443] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   65.868320][ T6463] openvswitch: netlink: IPv6 tunnel dst address is zero
[   66.043259][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.063634][ T6483] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.609073][ T6509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   66.746346][ T6521] tap0: tun_chr_ioctl cmd 1074025676
[   66.747990][ T6521] tap0: owner set to 0
[   66.788465][ T6518] wg2: entered promiscuous mode
[   66.795772][ T6518] wg2: entered allmulticast mode
[   66.895171][ T6534] __nla_validate_parse: 50 callbacks suppressed
[   66.895183][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   66.904692][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[   66.973220][ T6544] netlink: 'syz.0.187': attribute type 11 has an invalid length.
[   67.003674][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'.
[   67.030609][ T6549] syzkaller0: entered promiscuous mode
[   67.032358][ T6549] syzkaller0: entered allmulticast mode
[   67.035637][ T6549] syzkaller0: tun_chr_ioctl cmd 1074025677
[   67.040930][ T6549] syzkaller0: Linktype set failed because interface is up
[   67.049268][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[   67.052162][ T6549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'.
[   67.054773][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[   67.057920][ T6549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'.
[   67.080128][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.192'.
[   67.163993][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[   67.281783][ T6572] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   67.284276][ T6572] netlink: 180 bytes leftover after parsing attributes in process `syz.2.197'.
[   67.371884][ T6581] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   67.584229][ T6594] netlink: set zone limit has 8 unknown bytes
[   67.730185][ T6581] block nbd1: server does not support multiple connections per device.
[   67.733243][ T6581] block nbd1: shutting down sockets
[   67.780237][ T6608] netlink: 'syz.2.206': attribute type 13 has an invalid length.
[   67.783919][ T6607] syz.2.206 (6607) used greatest stack depth: 18616 bytes left
[   67.951422][ T6621] 8021q: VLANs not supported on ip6_vti0
[   67.954177][ T6620] 8021q: VLANs not supported on ip6_vti0
[   68.015905][ T6628] sctp: [Deprecated]: syz.2.209 (pid 6628) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.015905][ T6628] Use struct sctp_sack_info instead
[   68.247072][ T6655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.397197][ T6669] netlink: 'syz.0.221': attribute type 3 has an invalid length.
[   68.432030][ T6669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.447997][ T6672] Bluetooth: MGMT ver 1.23
[   68.450311][ T6672] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   68.503323][ T6669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.572398][ T6669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.685600][ T6669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.697091][ T6683] gretap1: entered promiscuous mode
[   68.698697][ T6683] gretap1: entered allmulticast mode
[   68.805989][ T6669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.816186][ T6669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.826400][ T6669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.834038][ T6669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.948707][ T6701] xt_CT: No such helper "snmp"
[   69.090116][ T6717] netlink: 'syz.1.238': attribute type 12 has an invalid length.
[   69.105033][ T6712] 0: renamed from hsr_slave_1 (while UP)
[   69.113962][ T6712] 0: entered allmulticast mode
[   69.116308][ T6712] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   69.215118][ T6721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.220965][ T6723] x_tables: duplicate underflow at hook 2
[   69.272137][ T6728] vlan0: entered promiscuous mode
[   69.273770][ T6728] bridge0: entered promiscuous mode
[   69.275535][ T6728] vlan0: entered allmulticast mode
[   69.277153][ T6728] bridge0: entered allmulticast mode
[   69.470463][    C1] Illegal XDP return value 16128 on prog  (id 116) dev lo, expect packet loss!
[   69.551044][ T6747] unsupported nlmsg_type 40
[   69.554722][ T6748] netlink: 'syz.0.248': attribute type 10 has an invalid length.
[   69.557401][ T6748] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   69.593533][ T6755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.595918][ T6755] IPv6: NLM_F_CREATE should be set when creating new route
[   69.598064][ T6755] IPv6: NLM_F_CREATE should be set when creating new route
[   69.602328][ T6755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.641601][ T6757] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   69.680762][ T6757] bond1: entered promiscuous mode
[   69.682334][ T6757] bond1: entered allmulticast mode
[   69.684171][ T6757] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.286617][ T6816] x_tables: duplicate underflow at hook 1
[   70.333657][ T6820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.340764][ T5700] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[   70.381189][ T6829] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   70.388348][ T6819] nbd: must specify at least one socket
[   70.658605][   T33] audit: type=1800 audit(1753010617.645:2): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.272" name="cgroup.controllers" dev="tmpfs" ino=503 res=0 errno=0
[   70.802186][ T6846] pimreg: entered allmulticast mode
[   70.824178][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.826201][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.195330][ T6871] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[   71.197847][ T6871] netlink: 'syz.1.284': attribute type 2 has an invalid length.
[   71.275113][ T6876] netlink: 'syz.1.285': attribute type 83 has an invalid length.
[   71.654605][ T6904] tipc: Started in network mode
[   71.656554][ T6904] tipc: Node identity 9af70e78bad4, cluster identity 4711
[   71.662579][ T6904] tipc: Enabled bearer <eth:netdevsim0>, priority 10
[   71.675553][ T6904] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   71.676188][ T6908] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   71.678751][ T6904] team0: Device ipvlan0 is already an upper device of the team interface
[   71.743027][ T6912] batadv_slave_0: entered promiscuous mode
[   71.757374][ T6913] batadv_slave_0: left promiscuous mode
[   71.764491][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.948570][ T6924] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   72.007343][ T6925] __nla_validate_parse: 37 callbacks suppressed
[   72.007354][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[   72.059784][ T6926] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   72.302802][ T6928] geneve1: entered promiscuous mode
[   72.304901][ T6928] geneve1: entered allmulticast mode
[   72.337561][ T6930] netlink: 'syz.2.304': attribute type 12 has an invalid length.
[   72.341388][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   72.350647][ T6930] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.353870][ T6930] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.356498][ T6930] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.359383][ T6930] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.365353][ T6930] netlink: 'syz.2.304': attribute type 12 has an invalid length.
[   72.368196][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   72.650596][ T5297] tipc: Node number set to 539168376
[   72.906565][ T6943] netlink: 44 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.974914][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.977822][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.981191][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.984050][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.987032][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.990149][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   73.087781][ T6965] atomic_op ffff88810bbde198 conn xmit_atomic 0000000000000000
[   73.779717][ T6989] xt_nat: multiple ranges no longer supported
[   74.523147][ T7034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.717286][ T7050] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   74.766453][ T7052] vlan2: entered promiscuous mode
[   74.768137][ T7052] vlan2: entered allmulticast mode
[   74.771379][ T7052] hsr_slave_1: entered allmulticast mode
[   74.812199][ T7059] team0: No ports can be present during mode change
[   74.979854][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   75.000203][ T7082] bond0: option mode: unable to set because the bond device has slaves
[   75.079002][ T7090] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   75.158048][ T7100] xt_time: invalid argument - start or stop time greater than 23:59:59
[   75.166129][ T7099] pimreg: entered allmulticast mode
[   75.274513][ T7106] tipc: Started in network mode
[   75.276176][ T7106] tipc: Node identity d228f61b0543, cluster identity 4711
[   75.278541][ T7106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.353801][ T7106] tipc: Disabling bearer <eth:syzkaller0>
[   76.061772][ T7143] caif0: Master is either lo or non-ether device
[   76.089900][ T7143] syzkaller0: entered allmulticast mode
[   76.308678][ T7151] validate_nla: 1 callbacks suppressed
[   76.308689][ T7151] netlink: 'syz.1.366': attribute type 1 has an invalid length.
[   76.313759][ T7151] netlink: 'syz.1.366': attribute type 4 has an invalid length.
[   76.316301][ T7151] NCSI netlink: No device for ifindex 3088861696
[   76.522200][ T7160] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   76.525040][ T7160] netlink: 'syz.1.372': attribute type 2 has an invalid length.
[   76.527472][ T7160] netlink: 'syz.1.372': attribute type 8 has an invalid length.
[   77.134110][ T7172] __nla_validate_parse: 61 callbacks suppressed
[   77.134123][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'.
[   77.227220][ T7178] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   77.230962][ T7178] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   77.245652][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.250858][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.312492][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.467257][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[   77.473636][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[   78.386210][ T7225] netlink: 'syz.1.389': attribute type 10 has an invalid length.
[   78.388611][ T7225] netem: change failed
[   78.396069][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'.
[   78.411713][ T7227] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   78.414253][ T7227] netlink: 228 bytes leftover after parsing attributes in process `syz.2.387'.
[   78.474903][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'.
[   78.474959][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'.
[   78.477751][ T7233] netlink: 'syz.1.393': attribute type 7 has an invalid length.
[   78.483466][ T7232] netlink: 'syz.1.393': attribute type 7 has an invalid length.
[   78.484070][ T7233] netlink: 'syz.1.393': attribute type 8 has an invalid length.
[   78.488219][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[   78.489589][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[   78.495790][ T7233] ip6gretap0: entered promiscuous mode
[   78.500623][ T7233] ip6gretap0: left promiscuous mode
[   78.511868][ T7232] ip6gretap0: entered promiscuous mode
[   78.515330][ T7232] ip6gretap0: left promiscuous mode
[   78.952635][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.955499][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.044243][ T7267] tipc: Resetting bearer <ib:bond_slave_0>
[   79.082964][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.093950][ T7267] batadv_slave_1: left promiscuous mode
[   79.184171][ T7267] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.190749][ T7267] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.194009][ T7267] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.197249][ T7267] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.205346][ T7267] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   79.269008][ T7267] vlan2: left promiscuous mode
[   79.271784][ T7267] vlan2: left allmulticast mode
[   79.273357][ T7267] hsr_slave_1: left allmulticast mode
[   79.317863][ T7284] IPv6: NLM_F_CREATE should be specified when creating new route
[   79.356001][ T7289] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.381438][ T7292] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   79.384268][ T7292] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   79.505428][ T7306] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004
[   79.663893][ T7321] veth3: entered promiscuous mode
[   79.684853][ T7321] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   79.697253][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'.
[   79.706385][ T7323] veth5: entered promiscuous mode
[   79.712691][ T7323] bond2: (slave veth5): Enslaving as a backup interface with a down link
[   79.723283][ T7321] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.862970][ T7345] dummy0: entered allmulticast mode
[   79.885913][ T7348] dummy0: left allmulticast mode
[   80.164647][ T7379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.167305][ T7379] syzkaller0: entered promiscuous mode
[   80.168967][ T7379] syzkaller0: entered allmulticast mode
[   80.177009][ T7379] tipc: Resetting bearer <eth:syzkaller0>
[   80.181180][ T7378] tipc: Resetting bearer <eth:syzkaller0>
[   80.189383][ T7378] tipc: Disabling bearer <eth:syzkaller0>
[   81.067212][   T10] cfg80211: failed to load regulatory.db
[   81.785948][ T7423] netem: incorrect ge model size
[   81.787958][ T7423] netem: change failed
[   82.198580][ T7463] validate_nla: 8 callbacks suppressed
[   82.198593][ T7463] netlink: 'syz.1.459': attribute type 1 has an invalid length.
[   82.229706][ T7463] __nla_validate_parse: 2 callbacks suppressed
[   82.229718][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'.
[   82.241132][ T7463] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.257107][ T7467] delete_channel: no stack
[   82.294881][ T7471] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[   82.297746][ T7471] netlink: 'syz.2.463': attribute type 2 has an invalid length.
[   82.410649][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[   82.557418][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'.
[   82.665621][ T7506] xt_l2tp: v2 doesn't support IP mode
[   82.798448][ T7516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.479'.
[   82.804272][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'.
[   82.836126][ T7520] xt_hashlimit: size too large, truncated to 1048576
[   82.908135][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.482'.
[   82.997132][ T7533] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   83.857011][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'.
[   83.921889][ T7567] sctp: [Deprecated]: syz.2.493 (pid 7567) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.921889][ T7567] Use struct sctp_sack_info instead
[   84.097605][ T7281] hid-generic 0005:07C0:5505.0001: item fetching failed at offset 0/1
[   84.112804][ T7281] hid-generic 0005:07C0:5505.0001: probe with driver hid-generic failed with error -22
[   84.155919][ T7593] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[   84.158399][ T7593] netlink: 88 bytes leftover after parsing attributes in process `syz.2.502'.
[   84.234118][   T10] IPVS: starting estimator thread 0...
[   84.251241][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.312856][ T5700] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[   84.342017][ T7607] IPVS: using max 61 ests per chain, 146400 per kthread
[   84.574960][ T7627] netlink: 'syz.0.507': attribute type 11 has an invalid length.
[   84.577818][ T7627] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   84.740067][ T7633] netlink: 'syz.0.509': attribute type 1 has an invalid length.
[   84.743228][ T7633] netlink: 'syz.0.509': attribute type 1 has an invalid length.
[   84.887533][ T7647] netlink: 256 bytes leftover after parsing attributes in process `syz.2.513'.
[   84.901650][ T7650] macvlan0: entered promiscuous mode
[   84.903547][ T7650] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[   84.906060][ T7650] netlink: 'syz.1.514': attribute type 2 has an invalid length.
[   84.988777][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.516'.
[   85.134701][ T7664] netlink: 'syz.2.519': attribute type 64 has an invalid length.
[   85.172417][ T7664] pimreg: left allmulticast mode
[   86.452336][ T7749] xt_cluster: node mask cannot exceed total number of nodes
[   86.507099][ T7749] netlink: 'syz.2.539': attribute type 1 has an invalid length.
[   86.636386][ T7763] syzkaller1: entered promiscuous mode
[   86.638261][ T7763] syzkaller1: entered allmulticast mode
[   86.702544][ T7772] tap0: tun_chr_ioctl cmd 1074025677
[   86.704263][ T7772] tap0: linktype set to 825
[   86.707507][ T7772] tap0: tun_chr_ioctl cmd 1074025673
[   86.776381][ T7777] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   86.822390][ T7781] chnl_net:caif_netlink_parms(): no params data found
[   86.948662][ T7798] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (39785) !
[   86.970617][ T7799] team0: Port device geneve0 added
[   86.978403][ T7799] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   88.401970][ T7845] __nla_validate_parse: 17 callbacks suppressed
[   88.401982][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'.
[   88.526478][ T7857] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   88.537747][ T7857] Cannot find add_set index 4 as target
[   88.537938][ T7859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.574'.
[   88.548476][ T7859] validate_nla: 1 callbacks suppressed
[   88.548486][ T7859] netlink: 'syz.1.574': attribute type 1 has an invalid length.
[   88.552921][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'.
[   88.718798][ T7872] netlink: 'syz.1.578': attribute type 9 has an invalid length.
[   88.728465][ T7873] netlink: 'syz.1.578': attribute type 9 has an invalid length.
[   88.733010][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[   88.767805][ T7875] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[   88.869332][ T7886] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   89.135724][ T7913] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[   89.150938][ T7913] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.164991][ T7913] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.167404][ T7913] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.171963][ T7913] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   89.261422][ T7913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.587'.
[   89.265574][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'.
[   89.268350][ T7913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.587'.
[   89.271710][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'.
[   89.274596][ T7913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.587'.
[   89.285983][ T7916] veth7: entered promiscuous mode
[   89.298771][ T7916] bond3: (slave veth7): Enslaving as an active interface with a down link
[   89.308068][ T7913] erspan0: entered allmulticast mode
[   89.327900][ T7913] bond3: (slave erspan0): making interface the new active one
[   89.332968][ T7913] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   89.353314][ T7921] netlink: 268 bytes leftover after parsing attributes in process `syz.1.589'.
[   89.438876][ T7936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.710617][ T7960] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[   89.732950][ T7960] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.749231][ T7960] bond3: (slave ip6erspan0): making interface the new active one
[   89.760553][ T7960] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[   89.909298][ T7983] syzkaller1: entered promiscuous mode
[   89.913683][ T7983] syzkaller1: entered allmulticast mode
[   90.021118][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 30 seconds
[   90.025052][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 30 seconds
[   90.028329][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 30 seconds
[   90.032620][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 30 seconds
[   90.196644][ T8007] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[   90.325702][ T8022] sctp: [Deprecated]: syz.1.619 (pid 8022) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.325702][ T8022] Use struct sctp_sack_info instead
[   90.462441][ T8038] sock: sock_set_timeout: `syz.2.623' (pid 8038) tries to set negative timeout
[   90.637743][ T8058] netlink: 'syz.2.630': attribute type 7 has an invalid length.
[   90.642100][ T8059] netlink: 'syz.2.630': attribute type 7 has an invalid length.
[   90.644647][ T8059] netlink: 'syz.2.630': attribute type 8 has an invalid length.
[   90.647152][ T8058] netlink: 'syz.2.630': attribute type 8 has an invalid length.
[   90.670982][ T8059] syz_tun: entered promiscuous mode
[   90.673485][ T8059] batadv_slave_1: entered promiscuous mode
[   90.675800][ T8059] erspan0: entered promiscuous mode
[   90.813112][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.870538][ T8074] 8021q: adding VLAN 0 to HW filter on device bond6
[   91.086200][ T8090] tipc: Resetting bearer <ib:ip6gre0>
[   91.095418][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.098213][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.129203][ T8090] wg2: left promiscuous mode
[   91.130923][ T8090] wg2: left allmulticast mode
[   91.142239][ T8090] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   91.575999][ T8137] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   91.579039][ T8137] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   91.604532][ T8139] bond7: entered promiscuous mode
[   91.606123][ T8139] bond7: entered allmulticast mode
[   91.953498][ T8169] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   91.974022][ T8169] nbd: socks must be embedded in a SOCK_ITEM attr
[   92.265457][ T8187] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.465358][ T8278] __nla_validate_parse: 92 callbacks suppressed
[   93.465370][ T8278] netlink: 3 bytes leftover after parsing attributes in process `syz.1.697'.
[   93.470375][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'.
[   93.473191][ T8278] netlink: 3 bytes leftover after parsing attributes in process `syz.1.697'.
[   93.476012][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'.
[   93.478806][ T8278] netlink: 3 bytes leftover after parsing attributes in process `syz.1.697'.
[   93.585595][ T8289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.700'.
[   93.588561][ T8288] netlink: 488 bytes leftover after parsing attributes in process `syz.0.700'.
[   93.644957][ T8297] xt_hashlimit: size too large, truncated to 1048576
[   93.653548][ T8297] syz.0.703: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.659184][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.0.703 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   93.659196][ T8297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.659202][ T8297] Call Trace:
[   93.659207][ T8297]  <TASK>
[   93.659227][ T8297]  dump_stack_lvl+0x189/0x250
[   93.659246][ T8297]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.659256][ T8297]  ? __pfx__printk+0x10/0x10
[   93.659291][ T8297]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.659304][ T8297]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.659316][ T8297]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.659327][ T8297]  warn_alloc+0x214/0x310
[   93.659339][ T8297]  ? __pfx_warn_alloc+0x10/0x10
[   93.659350][ T8297]  ? __get_vm_area_node+0x28f/0x300
[   93.659363][ T8297]  ? htable_create+0xfc/0x7a0
[   93.659375][ T8297]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   93.659400][ T8297]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.659415][ T8297]  ? rcu_is_watching+0x15/0xb0
[   93.659426][ T8297]  ? htable_create+0xfc/0x7a0
[   93.659433][ T8297]  ? htable_create+0xfc/0x7a0
[   93.659440][ T8297]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   93.659468][ T8297]  ? htable_create+0xfc/0x7a0
[   93.659475][ T8297]  ? hashlimit_pernet+0x23/0x240
[   93.659486][ T8297]  htable_create+0xfc/0x7a0
[   93.659497][ T8297]  hashlimit_mt_check_common+0x719/0xa10
[   93.659509][ T8297]  xt_check_match+0x3d1/0xab0
[   93.659523][ T8297]  ? __pfx___mutex_lock+0x10/0x10
[   93.659536][ T8297]  ? __pfx_xt_check_match+0x10/0x10
[   93.659549][ T8297]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[   93.659567][ T8297]  ? xt_find_match+0x1f7/0x250
[   93.659582][ T8297]  translate_table+0x1553/0x2040
[   93.659605][ T8297]  ? __pfx_translate_table+0x10/0x10
[   93.659618][ T8297]  ? __might_fault+0xb0/0x130
[   93.659639][ T8297]  ? _copy_from_user+0x94/0xb0
[   93.659655][ T8297]  do_ip6t_set_ctl+0x970/0xce0
[   93.659669][ T8297]  ? rcu_is_watching+0x15/0xb0
[   93.659678][ T8297]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   93.659699][ T8297]  ? __pfx___mutex_lock+0x10/0x10
[   93.659708][ T8297]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   93.659721][ T8297]  ? __lock_acquire+0xab9/0xd20
[   93.659733][ T8297]  nf_setsockopt+0x26f/0x290
[   93.659749][ T8297]  rawv6_setsockopt+0x23b/0x5b0
[   93.659759][ T8297]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   93.659766][ T8297]  ? aa_sock_opt_perm+0x74/0x110
[   93.659777][ T8297]  ? sock_common_setsockopt+0x36/0xc0
[   93.659787][ T8297]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   93.659798][ T8297]  do_sock_setsockopt+0x17c/0x1b0
[   93.659827][ T8297]  __x64_sys_setsockopt+0x13f/0x1b0
[   93.659841][ T8297]  do_syscall_64+0xfa/0x3b0
[   93.659852][ T8297]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.659860][ T8297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.659869][ T8297]  ? exc_page_fault+0x9f/0xf0
[   93.659878][ T8297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.659885][ T8297] RIP: 0033:0x7fb2de78e9a9
[   93.659894][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.659908][ T8297] RSP: 002b:00007fb2de5d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.659917][ T8297] RAX: ffffffffffffffda RBX: 00007fb2de9b6080 RCX: 00007fb2de78e9a9
[   93.659923][ T8297] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[   93.659928][ T8297] RBP: 00007fb2de810d69 R08: 00000000000005c0 R09: 0000000000000000
[   93.659933][ T8297] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[   93.659938][ T8297] R13: 0000000000000001 R14: 00007fb2de9b6080 R15: 00007ffde43308e8
[   93.659951][ T8297]  </TASK>
[   93.772987][ T8297] Mem-Info:
[   93.776288][ T8297] active_anon:5201 inactive_anon:0 isolated_anon:0
[   93.776288][ T8297]  active_file:1174 inactive_file:38223 isolated_file:0
[   93.776288][ T8297]  unevictable:1768 dirty:85 writeback:0
[   93.776288][ T8297]  slab_reclaimable:9338 slab_unreclaimable:54263
[   93.776288][ T8297]  mapped:18251 shmem:2445 pagetables:975
[   93.776288][ T8297]  sec_pagetables:0 bounce:0
[   93.776288][ T8297]  kernel_misc_reclaimable:0
[   93.776288][ T8297]  free:300966 free_pcp:18736 free_cma:0
[   93.792105][ T8297] Node 0 active_anon:12060kB inactive_anon:0kB active_file:3924kB inactive_file:6492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39520kB dirty:264kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7724kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.806515][ T8297] Node 1 active_anon:8744kB inactive_anon:0kB active_file:772kB inactive_file:146400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33484kB dirty:76kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4284kB pagetables:1788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.817536][ T8297] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.826628][ T8297] lowmem_reserve[]: 0 812 812 812 812
[   93.828392][ T8297] Node 0 DMA32 free:395904kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11992kB inactive_anon:0kB active_file:3924kB inactive_file:6492kB unevictable:3536kB writepending:264kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:37748kB local_pcp:24376kB free_cma:0kB
[   93.842927][ T8297] lowmem_reserve[]: 0 0 0 0 0
[   93.844500][ T8297] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   93.855380][ T8297] lowmem_reserve[]: 0 0 854 854 854
[   93.857158][ T8297] Node 1 Normal free:334108kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8744kB inactive_anon:0kB active_file:772kB inactive_file:146400kB unevictable:3536kB writepending:76kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37104kB local_pcp:15976kB free_cma:0kB
[   93.875809][ T8297] lowmem_reserve[]: 0 0 0 0 0
[   93.878498][ T8297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.885179][ T8297] Node 0 DMA32: 137*4kB (UME) 581*8kB (UME) 345*16kB (UME) 337*32kB (UME) 106*64kB (UME) 20*128kB (UM) 12*256kB (UM) 13*512kB (UM) 7*1024kB (UM) 4*2048kB (M) 83*4096kB (UM) = 395900kB
[   93.893137][ T8297] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   93.898414][ T8297] Node 1 Normal: 572*4kB (UME) 119*8kB (UME) 36*16kB (UM) 206*32kB (UME) 189*64kB (UME) 50*128kB (UM) 18*256kB (U) 15*512kB (UME) 14*1024kB (UME) 6*2048kB (UM) 65*4096kB (UM) = 334056kB
[   93.905368][ T8297] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   93.909405][ T8297] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[   93.911934][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'.
[   93.913470][ T8297] 41842 total pagecache pages
[   93.916592][ T8297] 0 pages in swap cache
[   93.917901][ T8297] Free swap  = 124996kB
[   93.919181][ T8297] Total swap = 124996kB
[   93.921907][ T8297] 786301 pages RAM
[   93.923096][ T8297] 0 pages HighMem/MovableOnly
[   93.924541][ T8297] 241056 pages reserved
[   93.925828][ T8297] 0 pages cma reserved
[   94.111901][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'.
[   94.217964][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'.
[   94.338466][ T8354] xt_cluster: node mask cannot exceed total number of nodes
[   94.569391][ T8371] validate_nla: 10 callbacks suppressed
[   94.569405][ T8371] netlink: 'syz.0.722': attribute type 3 has an invalid length.
[   94.641678][ T8373] bond8: entered promiscuous mode
[   94.643473][ T8373] 8021q: adding VLAN 0 to HW filter on device bond8
[   94.655283][ T8373] 8021q: adding VLAN 0 to HW filter on device bond8
[   94.657517][ T8373] bond8: (slave vcan0): The slave device specified does not support setting the MAC address
[   94.663839][ T8373] bond8: (slave vcan0): Error -95 calling set_mac_address
[   96.484732][ T8472] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   96.524183][ T8475] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[   96.712264][ T8491] block nbd1: Unsupported socket: shutdown callout must be supported.
[   97.205322][ T8553] bridge0: entered allmulticast mode
[   97.207724][ T8553] bridge_slave_1: left allmulticast mode
[   97.209447][ T8553] bridge_slave_1: left promiscuous mode
[   97.214104][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.221645][ T8553] bridge_slave_0: left allmulticast mode
[   97.224467][ T8553] bridge_slave_0: left promiscuous mode
[   97.226474][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.252560][ T8553] bridge0 (unregistering): left allmulticast mode
[   97.326494][ T8565] xfrm1: entered promiscuous mode
[   97.328162][ T8565] xfrm1: entered allmulticast mode
[   97.682817][ T8572] netlink: 'syz.2.783': attribute type 15 has an invalid length.
[   97.758187][ T8574] wg2: entered promiscuous mode
[   97.762495][ T8574] wg2: entered allmulticast mode
[   97.805605][ T8582] sit1: entered promiscuous mode
[   98.027576][ T8600] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   98.172301][ T8609] netlink: 'syz.0.794': attribute type 1 has an invalid length.
[   98.180855][ T8610] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   98.187350][ T8610] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   98.348781][ T8616] xt_CT: No such helper "syz0"
[   98.441386][ T8632] IPVS: Unknown mcast interface: veth1_macvtap
[   98.445853][ T8633] IPVS: Unknown mcast interface: veth1_macvtap
[   98.523301][ T8642] vlan0: entered promiscuous mode
[   99.485089][ T8670] __nla_validate_parse: 29 callbacks suppressed
[   99.485109][ T8670] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.812'.
[   99.593101][ T8667] netlink: 'syz.0.811': attribute type 2 has an invalid length.
[   99.846264][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.815'.
[   99.888242][ T8686] netlink: 104 bytes leftover after parsing attributes in process `syz.1.816'.
[  100.137151][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.1.822'.
[  100.141121][ T8701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.143392][ T8701] IPv6: NLM_F_CREATE should be set when creating new route
[  100.324619][ T8713] bridge0: entered promiscuous mode
[  100.327152][ T8712] openvswitch: netlink: Flow key attribute not present in set flow.
[  100.462100][ T8725] netlink: 'syz.0.829': attribute type 3 has an invalid length.
[  100.694829][ T8654] Set syz1 is full, maxelem 65536 reached
[  100.696880][ T8731] Cannot find add_set index 2 as target
[  100.795038][ T8747] xt_bpf: check failed: parse error
[  100.851619][ T8750] ip6tnl3: entered promiscuous mode
[  100.857105][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  100.915067][ T1087] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  100.926722][ T8754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.138163][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.843'.
[  101.143024][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'.
[  101.152312][ T8766] syzkaller1: entered promiscuous mode
[  101.154128][ T8766] syzkaller1: entered allmulticast mode
[  101.285534][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[  101.295183][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'.
[  101.464401][ T8773] netlink: 'syz.2.845': attribute type 10 has an invalid length.
[  101.466830][ T8773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'.
[  101.471632][ T8773] bridge0: port 3(dummy0) entered blocking state
[  101.473687][ T8773] bridge0: port 3(dummy0) entered disabled state
[  101.475679][ T8773] dummy0: entered allmulticast mode
[  101.478191][ T8773] dummy0: entered promiscuous mode
[  102.094205][ T8803] xt_nat: multiple ranges no longer supported
[  102.215779][ T8808] xt_l2tp: missing protocol rule (udp|l2tpip)
[  102.334634][ T8818] vlan0: left allmulticast mode
[  102.336258][ T8818] bridge0: left allmulticast mode
[  102.348367][ T8818] netlink: 'syz.2.859': attribute type 1 has an invalid length.
[  102.357333][ T8818] netlink: 'syz.2.859': attribute type 2 has an invalid length.
[  102.503400][ T8823] _Z`Ԁ@: entered promiscuous mode
[  102.617539][ T8835] tipc: Can't bind to reserved service type 2
[  102.625344][   T51] IPVS: starting estimator thread 0...
[  102.711259][ T8836] IPVS: using max 61 ests per chain, 146400 per kthread
[  102.730039][ T8844] netlink: 'syz.1.867': attribute type 83 has an invalid length.
[  102.734797][ T8844] netlink: 'syz.1.867': attribute type 1 has an invalid length.
[  103.001499][ T8864] netlink: 'syz.0.875': attribute type 3 has an invalid length.
[  103.162825][ T8885] vxcan1 speed is unknown, defaulting to 1000
[  103.168237][ T8885] vxcan1 speed is unknown, defaulting to 1000
[  103.172075][ T8885] vxcan1 speed is unknown, defaulting to 1000
[  103.234719][ T8891] xt_CT: No such helper "snmp"
[  103.335177][ T8885] infiniband syz2: set active
[  103.337721][   T51] vxcan1 speed is unknown, defaulting to 1000
[  103.340464][ T8885] infiniband syz2: added vxcan1
[  103.369228][ T8885] RDS/IB: syz2: added
[  103.371992][ T8885] smc: adding ib device syz2 with port count 1
[  103.374299][ T8885] smc:    ib device syz2 port 1 has pnetid 
[  103.377373][ T5297] vxcan1 speed is unknown, defaulting to 1000
[  103.383910][ T8885] vxcan1 speed is unknown, defaulting to 1000
[  103.573805][ T8885] vxcan1 speed is unknown, defaulting to 1000
[  103.612126][ T8915] netlink: 'syz.1.888': attribute type 21 has an invalid length.
[  103.752930][ T8913] netlink: 'syz.2.887': attribute type 5 has an invalid length.
[  103.782895][ T8885] vxcan1 speed is unknown, defaulting to 1000
[  104.015105][ T8934] vxcan1 speed is unknown, defaulting to 1000
[  104.126232][ T8946] sit0: entered promiscuous mode
[  104.692976][ T8976] __nla_validate_parse: 8 callbacks suppressed
[  104.692988][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'.
[  104.858155][ T8987] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.905'.
[  105.119373][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'.
[  105.183906][ T9005] netlink: 172 bytes leftover after parsing attributes in process `syz.0.913'.
[  105.362225][ T9020] netlink: 'syz.2.918': attribute type 6 has an invalid length.
[  105.371596][ T9020] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.918'.
[  105.477225][ T9028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.481970][ T9028] tipc: Resetting bearer <ib:bond_slave_0>
[  105.484645][ T9028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.487772][ T9028] bond0 (unregistering): Released all slaves
[  106.541162][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'.
[  106.544151][ T9055] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  106.546395][ T9055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.555489][ T9056] sctp: [Deprecated]: syz.2.929 (pid 9056) Use of int in max_burst socket option.
[  106.555489][ T9056] Use struct sctp_assoc_value instead
[  106.578223][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.929'.
[  106.631162][ T9061] syzkaller1: entered promiscuous mode
[  106.632911][ T9061] syzkaller1: entered allmulticast mode
[  106.659533][ T9067] netlink: 'syz.0.934': attribute type 1 has an invalid length.
[  106.721867][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'.
[  107.551331][   T33] audit: type=1804 audit(1753010654.545:3): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.939" name="/newroot/381/cgroup.controllers" dev="tmpfs" ino=1956 res=1 errno=0
[  107.558497][   T33] audit: type=1800 audit(1753010654.545:4): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.939" name="cgroup.controllers" dev="tmpfs" ino=1956 res=0 errno=0
[  107.767084][ T9106] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[  107.808322][ T9107] 8021q: adding VLAN 0 to HW filter on device bond10
[  107.812975][ T9107] bond9: (slave bond10): making interface the new active one
[  107.820515][ T9107] bond9: (slave bond10): Enslaving as an active interface with an up link
[  107.838732][ T9106] 8021q: adding VLAN 0 to HW filter on device bond11
[  107.841788][ T9106] bond9: (slave bond11): Enslaving as a backup interface with an up link
[  107.850854][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'.
[  107.853757][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'.
[  107.983786][ T9136] netlink: 'syz.2.952': attribute type 8 has an invalid length.
[  108.166267][ T9143] pim6reg9: entered allmulticast mode
[  108.173108][ T9143] netdevsim netdevsim2: Direct firmware load for .
[  108.173108][ T9143]  failed with error -2
[  108.176368][ T9143] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  108.176368][ T9143] 
[  109.144149][ T9185] delete_channel: no stack
[  109.372864][ T9205] netlink: 'syz.0.970': attribute type 32 has an invalid length.
[  109.381752][ T9201] netlink: 'syz.2.969': attribute type 3 has an invalid length.
[  109.384308][ T9201] netlink: 'syz.2.969': attribute type 1 has an invalid length.
[  109.452418][ T9212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.518025][ T9216] ipt_ECN: cannot use operation on non-tcp rule
[  109.839347][ T9244] vxcan1 speed is unknown, defaulting to 1000
[  109.928039][ T9249] __nla_validate_parse: 2 callbacks suppressed
[  109.928051][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.985'.
[  109.933280][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'.
[  109.936221][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.985'.
[  109.938866][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.985'.
[  110.169218][ T9259] netlink: 'syz.1.989': attribute type 1 has an invalid length.
[  110.233596][ T9267] netlink: 'syz.1.991': attribute type 83 has an invalid length.
[  110.486728][ T9288] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  110.669718][ T9299] netlink: 'syz.1.999': attribute type 9 has an invalid length.
[  110.798790][ T9306] netlink: 'syz.0.1002': attribute type 1 has an invalid length.
[  110.802904][ T9306] netlink: 'syz.0.1002': attribute type 2 has an invalid length.
[  111.004948][ T9317] sctp: [Deprecated]: syz.2.1006 (pid 9317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.004948][ T9317] Use struct sctp_sack_info instead
[  120.111040][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 60 seconds
[  120.115615][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 60 seconds
[  120.120276][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 60 seconds
[  120.124774][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 60 seconds
[  122.074457][ T5279] udevd[5279]: worker [5829] /devices/virtual/block/nbd0 is taking a long time
[  132.264155][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.266153][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  143.299930][ T5297] page_pool_release_retry() stalled pool shutdown: id 19, 2 inflight 60 sec
[  150.182460][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 90 seconds
[  150.185855][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 90 seconds
[  150.189187][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 90 seconds
[  150.193048][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 90 seconds
[  180.260025][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 120 seconds
[  180.264271][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 120 seconds
[  180.268500][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 120 seconds
[  180.273230][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 120 seconds
[  180.419771][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  193.704402][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.706383][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  210.349899][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 150 seconds
[  210.354093][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 150 seconds
[  210.358361][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 150 seconds
[  210.362648][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 150 seconds
[  226.499854][ T5838] Bluetooth: hci2: command 0x0419 tx timeout
[  240.420344][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 180 seconds
[  240.424482][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 180 seconds
[  240.428736][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 180 seconds
[  240.434475][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 180 seconds
[  241.520690][ T5279] udevd[5279]: worker [5829] /devices/virtual/block/nbd0 timeout; kill it
[  241.524228][ T5279] udevd[5279]: seq 10361 '/devices/virtual/block/nbd0' killed
[  255.142421][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.144449][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  270.510231][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 210 seconds
[  270.513977][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 210 seconds
[  270.517360][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 210 seconds
[  270.522331][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 210 seconds
[  300.593262][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 240 seconds
[  300.596659][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 240 seconds
[  300.600427][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 240 seconds
[  300.603941][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 240 seconds
[  316.582694][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.584691][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  330.679868][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 270 seconds
[  330.683423][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 270 seconds
[  330.687745][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 270 seconds
[  330.691738][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 270 seconds
[  360.742197][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 300 seconds
[  360.746394][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 300 seconds
[  360.750833][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 300 seconds
[  360.755057][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 300 seconds
[  378.022047][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.024016][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  390.833758][   T60] block nbd0: Possible stuck request ffff888021170000: control (read@0,1024B). Runtime 330 seconds
[  390.837051][   T60] block nbd0: Possible stuck request ffff888021170200: control (read@1024,1024B). Runtime 330 seconds
[  390.840316][   T60] block nbd0: Possible stuck request ffff888021170400: control (read@2048,1024B). Runtime 330 seconds
[  390.843537][   T60] block nbd0: Possible stuck request ffff888021170600: control (read@3072,1024B). Runtime 330 seconds
[  395.939973][   T34] INFO: task udevd:5829 blocked for more than 143 seconds.
[  395.942203][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  395.947495][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  395.950249][   T34] task:udevd           state:D stack:19464 pid:5829  tgid:5829  ppid:5279   task_flags:0x400140 flags:0x00004006
[  395.953748][   T34] Call Trace:
[  395.954741][   T34]  <TASK>
[  395.955646][   T34]  __schedule+0x16f5/0x4d00
[  395.957006][   T34]  ? schedule+0x165/0x360
[  395.958283][   T34]  ? __pfx___schedule+0x10/0x10
[  395.959919][   T34]  ? schedule+0x91/0x360
[  395.961221][   T34]  schedule+0x165/0x360
[  395.962484][   T34]  io_schedule+0x80/0xd0
[  395.963738][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  395.965308][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  395.967038][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  395.968699][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  395.970459][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  395.972063][   T34]  do_read_cache_folio+0x1aa/0x590
[  395.973573][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  395.975212][   T34]  read_part_sector+0xb6/0x2b0
[  395.976650][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  395.978215][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  395.980012][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  395.981819][   T34]  bdev_disk_changed+0x75f/0x14b0
[  395.983309][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  395.984931][   T34]  ? wait_on_inode+0xc0/0x230
[  395.986313][   T34]  blkdev_get_whole+0x380/0x510
[  395.987777][   T34]  bdev_open+0x31e/0xd30
[  395.989030][   T34]  blkdev_open+0x3a8/0x510
[  395.990514][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  395.992034][   T34]  do_dentry_open+0xdf3/0x1970
[  395.993466][   T34]  vfs_open+0x3b/0x340
[  395.994661][   T34]  ? path_openat+0x2ecd/0x3830
[  395.996091][   T34]  path_openat+0x2ee5/0x3830
[  395.997549][   T34]  ? arch_stack_walk+0xfc/0x150
[  395.999021][   T34]  ? __pfx_path_openat+0x10/0x10
[  396.001324][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.003140][   T34]  do_filp_open+0x1fa/0x410
[  396.004512][   T34]  ? __lock_acquire+0xab9/0xd20
[  396.005940][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  396.007453][   T34]  ? _raw_spin_unlock+0x28/0x50
[  396.008911][   T34]  ? alloc_fd+0x64c/0x6c0
[  396.011066][   T34]  do_sys_openat2+0x121/0x1c0
[  396.012614][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  396.014258][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  396.015956][   T34]  ? rcu_is_watching+0x15/0xb0
[  396.017575][   T34]  __x64_sys_openat+0x138/0x170
[  396.019127][   T34]  do_syscall_64+0xfa/0x3b0
[  396.020826][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.022651][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  396.024504][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.026312][   T34] RIP: 0033:0x7f30fbd169a4
[  396.027675][   T34] RSP: 002b:00007ffdca5eb330 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  396.031174][   T34] RAX: ffffffffffffffda RBX: 0000558cba48a500 RCX: 00007f30fbd169a4
[  396.033663][   T34] RDX: 00000000000a0800 RSI: 0000558cba499a50 RDI: 00000000ffffff9c
[  396.036096][   T34] RBP: 0000558cba499a50 R08: 0000000000000001 R09: 7fffffffffffffff
[  396.038539][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  396.041085][   T34] R13: 0000558cba4a0bd0 R14: 0000000000000001 R15: 0000558cba48a910
[  396.043766][   T34]  </TASK>
[  396.044765][   T34] 
[  396.044765][   T34] Showing all locks held in the system:
[  396.047171][   T34] 1 lock held by khungtaskd/34:
[  396.048626][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  396.052177][   T34] 5 locks held by kworker/u10:2/69:
[  396.054164][   T34] 2 locks held by getty/5656:
[  396.055988][   T34]  #0: ffff8880294080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  396.059014][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  396.062174][   T34] 1 lock held by udevd/5829:
[  396.063583][   T34]  #0: ffff8880210da358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  396.066297][   T34] 
[  396.067042][   T34] =============================================
[  396.067042][   T34] 
[  396.069627][   T34] NMI backtrace for cpu 0
[  396.069636][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  396.069645][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.069650][   T34] Call Trace:
[  396.069654][   T34]  <TASK>
[  396.069658][   T34]  dump_stack_lvl+0x189/0x250
[  396.069671][   T34]  ? __wake_up_klogd+0xd9/0x110
[  396.069685][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.069695][   T34]  ? __pfx__printk+0x10/0x10
[  396.069711][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  396.069726][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  396.069737][   T34]  ? _printk+0xcf/0x120
[  396.069749][   T34]  ? __pfx__printk+0x10/0x10
[  396.069760][   T34]  ? debug_show_all_locks+0x2e/0x180
[  396.069769][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  396.069779][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  396.069791][   T34]  watchdog+0xfee/0x1030
[  396.069800][   T34]  ? watchdog+0x1de/0x1030
[  396.069810][   T34]  kthread+0x711/0x8a0
[  396.069824][   T34]  ? __pfx_watchdog+0x10/0x10
[  396.069831][   T34]  ? __pfx_kthread+0x10/0x10
[  396.069842][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  396.069855][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.069863][   T34]  ? __pfx_kthread+0x10/0x10
[  396.069875][   T34]  ret_from_fork+0x3fc/0x770
[  396.069885][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  396.069896][   T34]  ? __switch_to_asm+0x39/0x70
[  396.069906][   T34]  ? __switch_to_asm+0x33/0x70
[  396.069915][   T34]  ? __pfx_kthread+0x10/0x10
[  396.069927][   T34]  ret_from_fork_asm+0x1a/0x30
[  396.069943][   T34]  </TASK>
[  396.069947][   T34] Sending NMI from CPU 0 to CPUs 1:
[  396.119090][    C1] NMI backtrace for cpu 1
[  396.119104][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  396.119114][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.119119][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  396.119132][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  396.119139][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  396.119147][    C1] RAX: 731d458412cc2e00 RBX: ffffffff81976c78 RCX: 731d458412cc2e00
[  396.119152][    C1] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  396.119157][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  396.119163][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  396.119168][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d6000
[  396.119173][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  396.119178][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.119183][    C1] CR2: 00007ffdca5e2ff8 CR3: 00000000228e2000 CR4: 00000000000006f0
[  396.119207][    C1] Call Trace:
[  396.119213][    C1]  <TASK>
[  396.119217][    C1]  default_idle+0x13/0x20
[  396.119227][    C1]  default_idle_call+0x74/0xb0
[  396.119238][    C1]  do_idle+0x1e8/0x510
[  396.119250][    C1]  ? __pfx_do_idle+0x10/0x10
[  396.119263][    C1]  cpu_startup_entry+0x44/0x60
[  396.119271][    C1]  start_secondary+0x101/0x110
[  396.119278][    C1]  common_startup_64+0x13e/0x147
[  396.119295][    C1]  </TASK>
[  396.120210][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  396.120220][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  396.120230][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.120235][   T34] Call Trace:
[  396.120239][   T34]  <TASK>
[  396.120244][   T34]  dump_stack_lvl+0x99/0x250
[  396.120257][   T34]  ? __asan_memcpy+0x40/0x70
[  396.120270][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.120280][   T34]  ? __pfx__printk+0x10/0x10
[  396.120296][   T34]  panic+0x2db/0x790
[  396.120309][   T34]  ? __pfx_panic+0x10/0x10
[  396.120318][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  396.120331][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  396.120344][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  396.120360][   T34]  watchdog+0x102d/0x1030
[  396.120368][   T34]  ? watchdog+0x1de/0x1030
[  396.120379][   T34]  kthread+0x711/0x8a0
[  396.120393][   T34]  ? __pfx_watchdog+0x10/0x10
[  396.120401][   T34]  ? __pfx_kthread+0x10/0x10
[  396.120413][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  396.120447][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.120457][   T34]  ? __pfx_kthread+0x10/0x10
[  396.120468][   T34]  ret_from_fork+0x3fc/0x770
[  396.120479][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  396.120490][   T34]  ? __switch_to_asm+0x39/0x70
[  396.120500][   T34]  ? __switch_to_asm+0x33/0x70
[  396.120510][   T34]  ? __pfx_kthread+0x10/0x10
[  396.120522][   T34]  ret_from_fork_asm+0x1a/0x30
[  396.120539][   T34]  </TASK>
[  396.212939][   T34] Kernel Offset: disabled
[  396.214224][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:29:03  Registers:
info registers vcpu 0

CPU#0
RAX=6f78f17039888300 RBX=ffffffff81976c78 RCX=6f78f17039888300 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f35295dc348 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 000000003161616c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000021 00000000316e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888034720000 RBX=ffff888034722000 RCX=0000000000040002 RDX=0000000000040003
RSI=ffffea0000d1c800 RDI=ffffffff00000000 RBP=0000000000000000 RSP=ffffc9000291f6a0
R8 =0000000000000002 R9 =ffff888034720000 R10=0000000000000000 R11=ffffed1026cc7fa1
R12=0000000000000000 R13=0000000000040003 R14=0000000000000000 R15=0000000000040002
RIP=ffffffff82180380 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3ca4cb0380 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdca5e2ff8 CR3=00000000228e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
