last executing test programs:

4.331298461s ago: executing program 4 (id=2250):
socket$inet(0xa, 0x801, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}], 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='mem_connect\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f70800c92d3f00"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3}, 0x10)
connect$tipc(0xffffffffffffffff, &(0x7f0000000480)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10)
recvfrom(r3, 0x0, 0x52, 0x6667b9fa4a4fda1, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000340)=0x28)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x64}}, 0x24000000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=0x0], 0x48)

3.979350522s ago: executing program 1 (id=2252):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) (async)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60)
getsockopt(r0, 0x1, 0x4, 0x0, 0x0) (async)
getsockopt(r0, 0x1, 0x4, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
socket$kcm(0xa, 0x5, 0x0) (async)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, 0x0, 0x41) (async)
sendmsg$kcm(r4, 0x0, 0x41)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x11, 0x0, 0x3, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x1, 0xca1, 0x8, 0x7e3, 0x6, 0xff, 0x9, 0x6, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r3], 0x270}, 0x1, 0x0, 0x0, 0x88d5}, 0x20000804)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
unshare(0x2c020400)
connect$rose(r6, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
r7 = socket$inet(0x2, 0x5, 0xfff)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000800000014000400200100010000000000000000000000020c000480050001"], 0x70}}, 0x4008000)
bind$inet(r7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffefffd}, 0x18)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x1000c081)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce47000d"], 0xfc}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce47000d"], 0xfc}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r10, 0x10e, 0x4, 0x0, 0x0)

3.848602846s ago: executing program 1 (id=2254):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e657400000000d19d76148c6eab8aa56ec7762ffdcde1f96f93ded141720d71524ed9"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) (async)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) (async)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500170000000800130000170000080014"], 0x4c}}, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)

3.739018535s ago: executing program 0 (id=2255):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x50) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x8, 0x1014}, 0x50) (rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20)
syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48)

3.523967506s ago: executing program 1 (id=2256):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8000)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}], 0x1, 0x0, 0x0, 0x4040010}], 0x1, 0x4048020)
recvmmsg$unix(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/226, 0xe2}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000800)=""/168, 0xa8}], 0x6, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}], 0x3, 0x100, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000881)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="20005164409001010000000000000000021dfa6a80f6c123cc797a3000000000"], 0x20}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r7, 0x89f2, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
socket$igmp6(0xa, 0x3, 0x2)

3.432167908s ago: executing program 2 (id=2257):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0xffffffff, 0x2, 0x3, [0x7fffffffffffffff, 0x1, 0x5]}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r4 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
getsockopt(r4, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x360, 0x7, 0x7f}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000000)=@udp=r6}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
unshare(0x6a040000)
r7 = socket(0x8, 0x3, 0x3)
ioctl$sock_netrom_SIOCADDRT(r7, 0x6180, 0x0)
sendmmsg$inet6(r7, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000240)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e7d448290a75456650c421ff8a3091b1c189", 0x2d}, {0x0, 0xfe10}], 0x2}}], 0x1, 0xc0000)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8)
sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)

3.357814929s ago: executing program 4 (id=2258):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r2, 0x100000000)
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000001180)="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", 0x103}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xb, 0x14, &(0x7f00000012c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000a14010d05000000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r5 = socket(0xf, 0x80805, 0x0)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000004000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000001000)=r3}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', <r10=>0x0, 0x40, 0x8, 0x2, 0xd6, {{0x8, 0x4, 0x3, 0x3c, 0x20, 0x65, 0x0, 0x7d, 0x2f, 0x0, @remote, @loopback, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "8ad6"}]}, @noop]}}}}})
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000800000000400000604006b3446287006e46eab00000000557b319c2941ffe7287a8fa87a7453c85b4f680ad66a8c530f20e84ccceb2cc83e27"], 0x0, 0x26}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], <r12=>0x0, 0x81, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18100000", @ANYRES32=r6, @ANYBLOB="5ef4df000000000000000083e0744ff0ffffff185400000900"/35], &(0x7f00000001c0)='GPL\x00', 0x99f7, 0x5e, &(0x7f00000002c0)=""/94, 0x40f00, 0x5, '\x00', r10, @cgroup_sysctl=0x12, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r8, 0x1, &(0x7f0000000700)=[r7, r6, r6, r6, r6, r13, r6, r7], &(0x7f0000000740)=[{0x1, 0x3, 0x2, 0x4}], 0x10, 0xab}, 0x94)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

2.451657133s ago: executing program 1 (id=2262):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c00028008000240"], 0x80}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8083}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000000e0000000002000000005f2e61"], 0x0, 0x2d, 0x0, 0x1}, 0x28)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20004044)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, 0x53)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0)

2.429746225s ago: executing program 0 (id=2263):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x28, 0x5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0x913, 0xfffffef8, 0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x804)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x0, 0x0, 0x8002}, 0x20)
close(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r3, &(0x7f0000000040), 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000004c0)={0x11, 0x7, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r8)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180175842020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r12, 0x0, 0x40000000000000}, 0x18)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r3, 0x0)

2.258039042s ago: executing program 2 (id=2264):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
shutdown(0xffffffffffffffff, 0x1) (async)
shutdown(0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000180)="0bbb268dd6ffa80800000000000000000000210d008e02668e942f95139380d412000000000000002900000004000000a197", 0x32) (async)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000180)="0bbb268dd6ffa80800000000000000000000210d008e02668e942f95139380d412000000000000002900000004000000a197", 0x32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='\\', 0x1, 0x80a4, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9edb53212e0da1daede1c667ed30594efcc13c5cd352bacf255eb0f56071f48bbe52bf061dc188812b6142183b0a197c9f7ada8dde79f09e33e135405d182eb21e84319b415364fbfe64cdb466294e141930eb36c369368644bb232d70e900b8bae20549f821ad9dc7a6fe729404e8deeea57d314928366720bf05bf7e5b690d94e1c1e97373ed21f2477134", 0x8c}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x80, @mcast1, 0xe511d9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="9ea92d233356c730fe6e805f74a2440eb09cbcbffc247c140a707d36cadd2680e2b70ad5bb0c1fe8031491df6a56adba1b76f2f81048f22ef03c2d4fa59ee3b1689d39a673a58ff247fdb162f3bcab4d58f4f6e285ce3f85f79d935d", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="8fee936e2e883fe67a71084d2be0dd539178fe92ba572af331ca32194a906069ea9ca271f7cc3a73f0cb52846fa9663b81e0ab8998eda37f88b260a0a96eb28dbf28b7c2ea86038ca53220115ab0e284897b2e36df1a37805cab845f8e78e7072e7b87ebb7ed490a6782bdeca21f0a4bfdd5ca95ca8d797a64de13ebf2fe64d494842a96815df0dbba88d39950a81f8dc03657a25e8da23b27573e70086a4d", 0x9f}, {&(0x7f0000000280)="5b9af3fb95156c245c2eceb46389c061dce09169701d0ee13e34421c633e7e74234eec3cf2f3d15e", 0x28}, {&(0x7f00000003c0)="d9c42dd078d4c9a17547cc2d5b76da825aee22a81836d14689516c93d647e7ab39ff48f3d24697eb4b0776d796e3bd54b6af287b79cc9a94d195c58a9ebc4fc21d8488988485164e22e92701a4a4bdea9d12cffdbb6ea2376dc627f196c4f142503314ca384cce0b8f8b89edd1bd6a6964c3f9d28f61fce7eba51565c5bd6af39a3266544bc792150bb5102e7f2002d7c29e13ded878f0733bee893b2cd1e21084d859fbba39daaabe0b0a92e9ad1f2fba5a14657a74456f576bf36a0312f520335b7d0347a2afc71c9e443fb5863866050e48dcd44f878e9550", 0xda}, {&(0x7f00000004c0)="9bf99435da3752a3e33ea03cf3b7c209ec032c404967729e50825dc2b298547602fd39019abea88c08050fd5af66e1f251aa340ffb55532e0058a68331a1e1386fe6700ef77a12333211fb258a42a9b8c4a3865566237c4a9a769559cb67eb79dbf16df1736f25a0f5e0a4044ecc9067c43c3279285943a5a46e1a63b3c89158525fd860900bdf46ad9c93749b15cc8f79765ae08ad98870c83e150940ed7da97d0bc25d5ba57ea0cee6f3847e03", 0xae}, {&(0x7f0000000580)="beae303ac155e8baf61b55f2308136cd4be3b5152f8bdc6a32479e2f1f546d451b7271eec3f59e2b30a7e431fcd5e46d1dc995f5dcf510030d3213d6f4a6caa4bc63d2c01ba5ba0a8d35cba9437660c7e1e8498a98c40a0b2fa1c516adb6f60d2a727b3d09b2da8e9a2be9465a3a80f58e22378b463c3c341a0fd63c16776861f4fc9ed62e43d3228962ffb1", 0x8c}], 0x5}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0xc, @private0, 0x9}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="f66606e69258eade2684582a2bdf0577da4829ae1e0dd12ff1e448eee21d97f81f2af32a9f16f7a6f8d2186e45e36130e1240732d5b9c6833923", 0x3a}, {&(0x7f0000000740)="26e4e12eeb147724af59297eacce07b3891d8017836067d1c17286d71f4b3b63b8894a09a1448b4edb32b8d246daff0918057cf4d525f4b7e9f58412eafa7fa2a00ec521b6195f886ca685b8fc426c36c0326d1fce934ed6828c8ec86b560ceaf8d8283cba63359756963915666c4d1f98ebdbd8c396639ea3865c69703cfb7f6b904f51d988d91eae4bd439c3ecb4385937f4d844e79f25487d4bf1c0b182a4727acaa71a8a5d8227571bd976e682eaa50043f11f75edf2a8619b7991db325ff53654310794193cad2bf6b38485ac6e620048fc00530a13d2a15151c5d5db88ee919ecb514b27e820a88fd77dec4dfeb7cdfe", 0xf3}, {&(0x7f0000000840)="9d5faf124cfa27d27015c81503121993eea3e3b041956c56271218b0268ae7afb8fd7a157ca5c847459d0d55846c915f52d5c234e2ab77152ce0670655db706680bec8038cfb77ea491a6ccbce0d4c2785cc1879006359989612173b2392b0308fb968f7800d29c480823f001feac94b9e1134dd310d683a3d006f77", 0x7c}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="38000000000000002900000039000000000402030000000000000000000000000000000000000000fc000000000000000000000000000001300000000000002e02000000000000c91000"/83], 0x68}}], 0x4, 0x24008080) (async)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9edb53212e0da1daede1c667ed30594efcc13c5cd352bacf255eb0f56071f48bbe52bf061dc188812b6142183b0a197c9f7ada8dde79f09e33e135405d182eb21e84319b415364fbfe64cdb466294e141930eb36c369368644bb232d70e900b8bae20549f821ad9dc7a6fe729404e8deeea57d314928366720bf05bf7e5b690d94e1c1e97373ed21f2477134", 0x8c}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x80, @mcast1, 0xe511d9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="9ea92d233356c730fe6e805f74a2440eb09cbcbffc247c140a707d36cadd2680e2b70ad5bb0c1fe8031491df6a56adba1b76f2f81048f22ef03c2d4fa59ee3b1689d39a673a58ff247fdb162f3bcab4d58f4f6e285ce3f85f79d935d", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="8fee936e2e883fe67a71084d2be0dd539178fe92ba572af331ca32194a906069ea9ca271f7cc3a73f0cb52846fa9663b81e0ab8998eda37f88b260a0a96eb28dbf28b7c2ea86038ca53220115ab0e284897b2e36df1a37805cab845f8e78e7072e7b87ebb7ed490a6782bdeca21f0a4bfdd5ca95ca8d797a64de13ebf2fe64d494842a96815df0dbba88d39950a81f8dc03657a25e8da23b27573e70086a4d", 0x9f}, {&(0x7f0000000280)="5b9af3fb95156c245c2eceb46389c061dce09169701d0ee13e34421c633e7e74234eec3cf2f3d15e", 0x28}, {&(0x7f00000003c0)="d9c42dd078d4c9a17547cc2d5b76da825aee22a81836d14689516c93d647e7ab39ff48f3d24697eb4b0776d796e3bd54b6af287b79cc9a94d195c58a9ebc4fc21d8488988485164e22e92701a4a4bdea9d12cffdbb6ea2376dc627f196c4f142503314ca384cce0b8f8b89edd1bd6a6964c3f9d28f61fce7eba51565c5bd6af39a3266544bc792150bb5102e7f2002d7c29e13ded878f0733bee893b2cd1e21084d859fbba39daaabe0b0a92e9ad1f2fba5a14657a74456f576bf36a0312f520335b7d0347a2afc71c9e443fb5863866050e48dcd44f878e9550", 0xda}, {&(0x7f00000004c0)="9bf99435da3752a3e33ea03cf3b7c209ec032c404967729e50825dc2b298547602fd39019abea88c08050fd5af66e1f251aa340ffb55532e0058a68331a1e1386fe6700ef77a12333211fb258a42a9b8c4a3865566237c4a9a769559cb67eb79dbf16df1736f25a0f5e0a4044ecc9067c43c3279285943a5a46e1a63b3c89158525fd860900bdf46ad9c93749b15cc8f79765ae08ad98870c83e150940ed7da97d0bc25d5ba57ea0cee6f3847e03", 0xae}, {&(0x7f0000000580)="beae303ac155e8baf61b55f2308136cd4be3b5152f8bdc6a32479e2f1f546d451b7271eec3f59e2b30a7e431fcd5e46d1dc995f5dcf510030d3213d6f4a6caa4bc63d2c01ba5ba0a8d35cba9437660c7e1e8498a98c40a0b2fa1c516adb6f60d2a727b3d09b2da8e9a2be9465a3a80f58e22378b463c3c341a0fd63c16776861f4fc9ed62e43d3228962ffb1", 0x8c}], 0x5}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0xc, @private0, 0x9}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="f66606e69258eade2684582a2bdf0577da4829ae1e0dd12ff1e448eee21d97f81f2af32a9f16f7a6f8d2186e45e36130e1240732d5b9c6833923", 0x3a}, {&(0x7f0000000740)="26e4e12eeb147724af59297eacce07b3891d8017836067d1c17286d71f4b3b63b8894a09a1448b4edb32b8d246daff0918057cf4d525f4b7e9f58412eafa7fa2a00ec521b6195f886ca685b8fc426c36c0326d1fce934ed6828c8ec86b560ceaf8d8283cba63359756963915666c4d1f98ebdbd8c396639ea3865c69703cfb7f6b904f51d988d91eae4bd439c3ecb4385937f4d844e79f25487d4bf1c0b182a4727acaa71a8a5d8227571bd976e682eaa50043f11f75edf2a8619b7991db325ff53654310794193cad2bf6b38485ac6e620048fc00530a13d2a15151c5d5db88ee919ecb514b27e820a88fd77dec4dfeb7cdfe", 0xf3}, {&(0x7f0000000840)="9d5faf124cfa27d27015c81503121993eea3e3b041956c56271218b0268ae7afb8fd7a157ca5c847459d0d55846c915f52d5c234e2ab77152ce0670655db706680bec8038cfb77ea491a6ccbce0d4c2785cc1879006359989612173b2392b0308fb968f7800d29c480823f001feac94b9e1134dd310d683a3d006f77", 0x7c}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="38000000000000002900000039000000000402030000000000000000000000000000000000000000fc000000000000000000000000000001300000000000002e02000000000000c91000"/83], 0x68}}], 0x4, 0x24008080)
accept(r0, 0x0, 0x0)

2.032422494s ago: executing program 4 (id=2265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x4004, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x30, 0x0, 0x1, 0x7}, 0x28)
recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)

1.676040259s ago: executing program 4 (id=2267):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c000000"], 0x44}}, 0x0)

1.6568216s ago: executing program 3 (id=2268):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000200), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0)

1.61974471s ago: executing program 1 (id=2269):
unshare(0x6a040000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e50ae80502070000000000000025b570d96c143e20835ce4f66bc12b1cc17010e2448767cc717e8a24a539ddff9216a25940b6395ddc4737b56d3f739b4674ccadb4d6341f63cead1a07383cae732e000000"], 0x10}}, 0x810)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, &(0x7f00000002c0)=ANY=[], 0xfdef)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.56216266s ago: executing program 4 (id=2270):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000ace5336f1e0cd6673591501400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0xe, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x7, 0x3, 0x3, 0xffffffffffffffc0, 0x10}, @exit, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

1.526532096s ago: executing program 2 (id=2271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a00000409000ecf77ba17d71a46000008000540000000020900020073797a310000000008000aaba37160fc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800018004000100140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000bd3615ef4cb68199ace35bf44b7000", @ANYRES16=r2, @ANYBLOB="000828bd7000fcdbdf251d0000000c009900ff0100005a0000000800010034000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a00000409000ecf77ba17d71a46000008000540000000020900020073797a310000000008000aaba37160fc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800018004000100140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000bd3615ef4cb68199ace35bf44b7000", @ANYRES16=r2, @ANYBLOB="000828bd7000fcdbdf251d0000000c009900ff0100005a0000000800010034000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)

1.468091326s ago: executing program 3 (id=2272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x34}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x100, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'})
r2 = accept4(r0, 0x0, &(0x7f00000002c0), 0x800)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0x3}, 0x6)
connect$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000380)="2e917548468020013fe5790273270e0b2003d9adb4d7fd291af712d898f8f04919e1922a5e6677224d9e1a3ff5d761dd138232e1f4ee09b5d413c3391b61887918b3e7b1fba7b3cfc29c9c423670d3a138a79a457c10f0bcb862dd5f386e30a1155dfecc1ba48d1f7ff9ddc6b1f18b91", &(0x7f0000000400)=""/213, 0x4}, 0x20)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000540)={0x984, 0x91, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FIONCLEX(r1, 0x5450)
pipe(&(0x7f000000e9c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f000000ea00), &(0x7f000000ea40)=0x4)
r6 = openat$cgroup_ro(r5, &(0x7f000000ea80)='blkio.bfq.empty_time\x00', 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f000000eac0)={@multicast2, @local, 0x0, "dc7b51ca450005923459cbf659b0b13857011f636d1d865d221d84d3f75373ce", 0x4, 0x7fffffff, 0xffff, 0x80000000}, 0x3c)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f000000eb40), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f000000eb80)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f000000ebc0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f000000ec80)={&(0x7f000000eb00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000ec40)={&(0x7f000000ec00)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x200088c1)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f000000ecc0)={'batadv_slave_1\x00'})
r11 = accept4$phonet_pipe(r6, &(0x7f000000fe00), &(0x7f000000fe40)=0x10, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f000000fe80)=<r13=>0x0)
sendmmsg$unix(r4, &(0x7f0000010380)=[{{0x0, 0x0, &(0x7f000000fdc0)=[{&(0x7f000000ed00)="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", 0x1000}, {&(0x7f000000fd00)}, {&(0x7f000000fd40)="da1f88eb4e691f94f9cfada71841150a11565c867ad6058186e315db31b0958d34e307f2011a0940024deb3af59188004bd0e7827e2cc826a4584fa3e183d9f73e8d2837643b67b799ae07c376bf466b3b80c66e62167dec1d1d3a039be79218bc", 0x61}], 0x3, &(0x7f0000010100)=[@rights={{0x34, 0x1, 0x1, [r11, r0, r3, r2, r6, r5, r6, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x4000810}}, {{&(0x7f00000101c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010340)=[{&(0x7f0000010240)="ba312ac1d798b1aa5f20bd0f4c64f19672d2e5eb4ee0376fecdec09b13a116b8c12f40a4b68e17184e34b32a8ea7194b148271d4d6269487c3f24e567d95b5b842509b17f325933ad88e435dd523d8338b83607cddf16363966b2d75ad299a5ecdf0ef8e633d5b80ae4dde648a7854ff0c3ff2d4229e22dab9bb1ce23d582612d95ea6cfb2405c412dfb7a76a9b1e282ebb33ec8a3a362a687509b673454b73a3c0851c0b7f0cfd64ee9544f7b0ad30e0dbc8f04548c5dd968b67e3ca0a6e2336522f83477431c7819955f", 0xcb}], 0x1, 0x0, 0x0, 0x4004010}}], 0x2, 0x44004)

1.349924044s ago: executing program 4 (id=2273):
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r5=>0x0})
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x0, r3}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x4000}, 0x18)
ppoll(&(0x7f00000010c0), 0x2e, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(r2)

1.329808002s ago: executing program 3 (id=2274):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0xfffffffa, @private0, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x7daa}, 0x1c) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, <r3=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', <r4=>0x0, 0x29, 0x0, 0x0, 0x0, 0x74, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, 0x700, 0x7800, 0xfffffff1, 0x2}}) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100e0000000000000000700000a20000000030a010100e4ffffff00000001000200050000000000000000000000140000001100010000000000000000000700000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x46f, <r7=>0x0}, 0x8) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0xe, 0x0, 0x2, 0x940, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000007020000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000b81fcff0000000018560000050000000000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000005538f0ff010000000583f8ff00000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x719, 0x8f, &(0x7f0000000400)=""/143, 0xc3200, 0x65, '\x00', r4, @fallback=0x14, r6, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r8], &(0x7f00000007c0), 0x10, 0x8}, 0x94)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) (async)
r10 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r10, 0x8) (async)
r11 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x2, @remote, 0x5}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) (async)
accept4(r10, 0x0, 0x0, 0x80000) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000940)={0x3, [0x0, 0x0, 0x0]}) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x50, r1, 0x92c6d000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fedbdf250511e2f7752aca39e11300a4fc50000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80001}, 0x4)

1.120516101s ago: executing program 2 (id=2275):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="197e47f7a8816c616492aabc161e38a34a8c9ae7a5dfe6cc0062f4327b75269751cc931c2b291f59186b91bc2a85c355fe500b086c7fcfba7d8f109df3c51d88345e3af6a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = socket$inet6(0x10, 0x4, 0x15263628)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x62040400)
unshare(0x4e040400)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x10010, r5, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
read(r6, &(0x7f0000000000)=""/147, 0x93)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = accept(r2, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000002060568d76b815f82d1d848f3e983a6000000000000000000000e5f2b044f9ace4098af48bb8c2a3b0c000780d2be0000000000000500014c8500080006000000050005000200000005000400000000000900020073797a3100000000100003002861"], 0x54}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="dbac06972d9fc2bdcc719c0e78c5846ea184e1aaa4647e989cf3c4f94880eaa8462430efca1800430e42204e71067d23defc89e3d6dd9092628c752c77757993231c16bf00ed52092c16cf36a4a6a02b768d8905d88ede0eb553d1db611b48b5a361d34056fd9840e829e85c82912bec95f0b9ecd9a07ed7889b7c74aaec2b9b73a7e379ad26d25d3ad5218118e8420c6256016483ca1a", @ANYRES64=r8, @ANYRES64=r4, @ANYRES8=r6], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback}, 0x1c)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

1.07412674s ago: executing program 0 (id=2276):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40084)

991.319725ms ago: executing program 3 (id=2277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='console\x00', r1}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='console\x00', r4}, 0x18)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

896.103196ms ago: executing program 0 (id=2278):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd2c, 0x25dedbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x63}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfb}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_IE={0x31, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x1, 0x5}}, @challenge={0x10, 0x1, 0xaf}, @sec_chan_ofs={0x3e, 0x1}, @ht={0x2d, 0x1a, {0xc, 0x3, 0x1, 0x0, {0x8, 0x6b5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x837, 0xfc}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x70, 0x2a}}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x60}}, 0x804)

618.007767ms ago: executing program 0 (id=2279):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1) (async)
clock_gettime(0x0, &(0x7f0000000300))
recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}, {&(0x7f0000000f00)=""/222, 0xde}], 0x3}, 0xfd}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/116, 0x74}, {&(0x7f0000000980)=""/39, 0x27}], 0x2, &(0x7f0000000a00)=""/52, 0x34}}, {{&(0x7f0000000a40)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @rose, @netrom, @rose, @rose, @rose, @rose]}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=""/227, 0xe3}, 0x453c701}], 0x3, 0x4282, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async)
sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@can={{}, 0x2, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x44880) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}]}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4083}]}, 0x28}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x9640e000)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async, rerun: 32)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
listen(r7, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x50, r8, 0xa7423000) (async)
setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000080), 0x4)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e23, 0xe, @remote, 0x173dbeba}}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x56}, &(0x7f0000000540)=0x9c)

616.740885ms ago: executing program 3 (id=2280):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
unshare(0x24020400)

386.950574ms ago: executing program 3 (id=2281):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000040)={@void, @val={0x1, 0x4, 0x9e6, 0x5f0, 0x7, 0x2}, @llc={@snap={0x154, 0x0, "7f18", '\x00\x00\b', 0x15}}}, 0x13)
bpf$PROG_LOAD(0x5, 0x0, 0xbc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={r10, 0x5, 0x20}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e24, 0x4, @private0, 0x8001}}, 0x768, 0x7fff}, 0x90)
r11 = socket$igmp(0x2, 0x3, 0x2)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r6, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES8=r6], 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x800)

353.17053ms ago: executing program 0 (id=2282):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x6b)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000e19487323988acfe09000100626f6e640000000054000280050001000600000005181b"], 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

133.860758ms ago: executing program 1 (id=2283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

123.523435ms ago: executing program 2 (id=2284):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="4c0191eb", @ANYRES16=r1, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d650000"], 0x44}}, 0x0)

0s ago: executing program 2 (id=2285):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) (async)
r1 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) (async)
bind$802154_raw(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110130000000000951600"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={<r2=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x7, 0x5, 0x2, 0x10000, 0x40}, &(0x7f0000000180)=0x14)

kernel console output (not intermixed with test programs):

ng bearer <eth:syzkaller0>
[  188.583273][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.4.753'.
[  188.607641][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.4.753'.
[  188.717933][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.759'.
[  188.875853][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[  189.103662][ T8789] dummy0: entered promiscuous mode
[  189.117670][ T8788] dummy0: left promiscuous mode
[  189.370216][ T8802] netlink: 'syz.2.771': attribute type 41 has an invalid length.
[  189.556823][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.641409][ T8816] netlink: 'syz.4.772': attribute type 4 has an invalid length.
[  189.684597][ T8806] netlink: 'syz.4.772': attribute type 4 has an invalid length.
[  190.210252][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'.
[  190.233347][ T8795] netlink: 'syz.0.770': attribute type 17 has an invalid length.
[  190.300291][ T8795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.365729][ T8795] SET target dimension over the limit!
[  190.701739][ T8866] FAULT_INJECTION: forcing a failure.
[  190.701739][ T8866] name failslab, interval 1, probability 0, space 0, times 0
[  190.722143][ T8866] CPU: 0 UID: 0 PID: 8866 Comm: syz.3.786 Not tainted syzkaller #0 PREEMPT(full) 
[  190.722172][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  190.722185][ T8866] Call Trace:
[  190.722194][ T8866]  <TASK>
[  190.722203][ T8866]  dump_stack_lvl+0x189/0x250
[  190.722238][ T8866]  ? __pfx____ratelimit+0x10/0x10
[  190.722269][ T8866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.722296][ T8866]  ? __pfx__printk+0x10/0x10
[  190.722320][ T8866]  ? __pfx___might_resched+0x10/0x10
[  190.722343][ T8866]  ? fs_reclaim_acquire+0x7d/0x100
[  190.722380][ T8866]  should_fail_ex+0x414/0x560
[  190.722417][ T8866]  should_failslab+0xa8/0x100
[  190.722440][ T8866]  __kvmalloc_node_noprof+0x158/0x910
[  190.722469][ T8866]  ? __kmalloc_cache_node_noprof+0x471/0x6f0
[  190.722497][ T8866]  ? page_pool_create_percpu+0x314/0xbc0
[  190.722526][ T8866]  ? page_pool_create_percpu+0xb2/0xbc0
[  190.722569][ T8866]  page_pool_create_percpu+0x314/0xbc0
[  190.722609][ T8866]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  190.722638][ T8866]  bpf_test_run_xdp_live+0x1cf/0x1b10
[  190.722659][ T8866]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  190.722694][ T8866]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  190.722734][ T8866]  ? synchronize_rcu+0x11a/0x310
[  190.722758][ T8866]  ? __pfx_synchronize_rcu+0x10/0x10
[  190.722786][ T8866]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  190.722810][ T8866]  ? 0xffffffffa02057c0
[  190.722846][ T8866]  ? 0xffffffffa02017e4
[  190.722893][ T8866]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  190.722927][ T8866]  ? _copy_from_user+0x94/0xb0
[  190.722953][ T8866]  ? bpf_test_init+0x113/0x150
[  190.722970][ T8866]  ? xdp_convert_md_to_buff+0x5b/0x330
[  190.722993][ T8866]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  190.723039][ T8866]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  190.723065][ T8866]  ? __fget_files+0x2a/0x420
[  190.723091][ T8866]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  190.723116][ T8866]  bpf_prog_test_run+0x2c7/0x340
[  190.723142][ T8866]  __sys_bpf+0x562/0x860
[  190.723163][ T8866]  ? __pfx___sys_bpf+0x10/0x10
[  190.723199][ T8866]  ? ksys_write+0x22a/0x250
[  190.723231][ T8866]  ? __pfx_ksys_write+0x10/0x10
[  190.723265][ T8866]  __x64_sys_bpf+0x7c/0x90
[  190.723303][ T8866]  do_syscall_64+0xfa/0xfa0
[  190.723331][ T8866]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.723360][ T8866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.723380][ T8866]  ? clear_bhb_loop+0x60/0xb0
[  190.723404][ T8866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.723423][ T8866] RIP: 0033:0x7f066ff8f6c9
[  190.723441][ T8866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.723457][ T8866] RSP: 002b:00007f066e1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  190.723478][ T8866] RAX: ffffffffffffffda RBX: 00007f06701e5fa0 RCX: 00007f066ff8f6c9
[  190.723492][ T8866] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  190.723504][ T8866] RBP: 00007f066e1f6090 R08: 0000000000000000 R09: 0000000000000000
[  190.723516][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.723526][ T8866] R13: 00007f06701e6038 R14: 00007f06701e5fa0 R15: 00007ffea145b5b8
[  190.723560][ T8866]  </TASK>
[  190.723649][ T8866] page_pool_create_percpu() gave up with errno -12
[  191.247009][ T8880] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  191.296950][ T8882] netlink: 'syz.1.791': attribute type 10 has an invalid length.
[  191.304759][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.791'.
[  191.335143][ T8880] bond1: entered promiscuous mode
[  191.346375][ T8880] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.435461][ T8889] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.460914][ T8889] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  191.471920][ T8889] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  191.501603][ T8889] bond1: (slave wireguard0): making interface the new active one
[  191.511536][ T8889] wireguard0: entered promiscuous mode
[  191.524169][ T8889] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  191.552674][ T8905] netlink: 'syz.1.797': attribute type 1 has an invalid length.
[  191.579216][ T8905] netlink: 248 bytes leftover after parsing attributes in process `syz.1.797'.
[  191.614199][ T8908] netlink: 'syz.2.798': attribute type 13 has an invalid length.
[  191.651938][ T8908] netlink: 'syz.2.798': attribute type 13 has an invalid length.
[  191.745646][ T8920] FAULT_INJECTION: forcing a failure.
[  191.745646][ T8920] name failslab, interval 1, probability 0, space 0, times 0
[  191.759770][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.1.800 Not tainted syzkaller #0 PREEMPT(full) 
[  191.759798][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  191.759809][ T8920] Call Trace:
[  191.759817][ T8920]  <TASK>
[  191.759826][ T8920]  dump_stack_lvl+0x189/0x250
[  191.759861][ T8920]  ? __pfx____ratelimit+0x10/0x10
[  191.759892][ T8920]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.759920][ T8920]  ? __pfx__printk+0x10/0x10
[  191.759942][ T8920]  ? __pfx___might_resched+0x10/0x10
[  191.759966][ T8920]  ? fs_reclaim_acquire+0x7d/0x100
[  191.760013][ T8920]  should_fail_ex+0x414/0x560
[  191.760048][ T8920]  should_failslab+0xa8/0x100
[  191.760070][ T8920]  __kmalloc_cache_noprof+0x6f/0x6f0
[  191.760099][ T8920]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  191.760149][ T8920]  ? __xdp_reg_mem_model+0x1d8/0x5a0
[  191.760181][ T8920]  __xdp_reg_mem_model+0x1d8/0x5a0
[  191.760216][ T8920]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  191.760242][ T8920]  ? page_pool_create_percpu+0x7ea/0xbc0
[  191.760275][ T8920]  xdp_reg_mem_model+0x22/0x40
[  191.760297][ T8920]  bpf_test_run_xdp_live+0x21a/0x1b10
[  191.760320][ T8920]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  191.760354][ T8920]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  191.760393][ T8920]  ? synchronize_rcu+0x11a/0x310
[  191.760418][ T8920]  ? __pfx_synchronize_rcu+0x10/0x10
[  191.760447][ T8920]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  191.760470][ T8920]  ? 0xffffffffa02057c0
[  191.760506][ T8920]  ? 0xffffffffa0201670
[  191.760553][ T8920]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  191.760588][ T8920]  ? _copy_from_user+0x94/0xb0
[  191.760615][ T8920]  ? bpf_test_init+0x113/0x150
[  191.760632][ T8920]  ? xdp_convert_md_to_buff+0x5b/0x330
[  191.760657][ T8920]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  191.760694][ T8920]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  191.760720][ T8920]  ? __fget_files+0x2a/0x420
[  191.760746][ T8920]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  191.760768][ T8920]  bpf_prog_test_run+0x2c7/0x340
[  191.760794][ T8920]  __sys_bpf+0x562/0x860
[  191.760816][ T8920]  ? __pfx___sys_bpf+0x10/0x10
[  191.760854][ T8920]  ? ksys_write+0x22a/0x250
[  191.760886][ T8920]  ? __pfx_ksys_write+0x10/0x10
[  191.760920][ T8920]  __x64_sys_bpf+0x7c/0x90
[  191.760951][ T8920]  do_syscall_64+0xfa/0xfa0
[  191.760981][ T8920]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.761020][ T8920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.761040][ T8920]  ? clear_bhb_loop+0x60/0xb0
[  191.761065][ T8920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.761085][ T8920] RIP: 0033:0x7f06a718f6c9
[  191.761104][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.761121][ T8920] RSP: 002b:00007f06a80b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  191.761143][ T8920] RAX: ffffffffffffffda RBX: 00007f06a73e5fa0 RCX: 00007f06a718f6c9
[  191.761158][ T8920] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  191.761170][ T8920] RBP: 00007f06a80b5090 R08: 0000000000000000 R09: 0000000000000000
[  191.761182][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.761194][ T8920] R13: 00007f06a73e6038 R14: 00007f06a73e5fa0 R15: 00007ffd4e449838
[  191.761229][ T8920]  </TASK>
[  192.131156][ T8916] pim6reg: entered allmulticast mode
[  192.173655][ T8925] pim6reg: left allmulticast mode
[  192.378990][ T8939] __nla_validate_parse: 2 callbacks suppressed
[  192.379013][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'.
[  192.546211][ T8949] netlink: 'syz.4.811': attribute type 10 has an invalid length.
[  192.562471][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.811'.
[  192.586717][ T8949] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  192.596287][ T8949] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  192.624645][ T8949] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  192.655156][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  192.661805][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'.
[  192.665598][ T8957] netlink: 'syz.2.812': attribute type 1 has an invalid length.
[  192.709132][ T8957] bond2: entered promiscuous mode
[  192.714858][ T8957] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.732722][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'.
[  192.867541][ T8967] batadv0: entered allmulticast mode
[  192.924982][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'.
[  192.968257][   T30] audit: type=1107 audit(1762590477.828:2): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  193.008387][ T8976] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  193.023980][ T8976] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  193.355690][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'.
[  193.602727][ T9001] FAULT_INJECTION: forcing a failure.
[  193.602727][ T9001] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  193.632333][ T9003] netlink: 14 bytes leftover after parsing attributes in process `syz.4.824'.
[  193.639636][ T9001] CPU: 1 UID: 0 PID: 9001 Comm: syz.2.825 Not tainted syzkaller #0 PREEMPT(full) 
[  193.639671][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.639685][ T9001] Call Trace:
[  193.639703][ T9001]  <TASK>
[  193.639713][ T9001]  dump_stack_lvl+0x189/0x250
[  193.639755][ T9001]  ? __pfx____ratelimit+0x10/0x10
[  193.639789][ T9001]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.639821][ T9001]  ? __pfx__printk+0x10/0x10
[  193.639860][ T9001]  should_fail_ex+0x414/0x560
[  193.639903][ T9001]  _copy_to_user+0x31/0xb0
[  193.639935][ T9001]  bpf_test_finish+0x1ab/0x700
[  193.639970][ T9001]  ? __pfx_bpf_test_finish+0x10/0x10
[  193.640001][ T9001]  ? bpf_test_init+0x113/0x150
[  193.640026][ T9001]  bpf_prog_test_run_xdp+0x88c/0x10e0
[  193.640071][ T9001]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  193.640106][ T9001]  ? __fget_files+0x2a/0x420
[  193.640136][ T9001]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  193.640160][ T9001]  bpf_prog_test_run+0x2c7/0x340
[  193.640191][ T9001]  __sys_bpf+0x562/0x860
[  193.640227][ T9001]  ? __pfx___sys_bpf+0x10/0x10
[  193.640269][ T9001]  ? ksys_write+0x22a/0x250
[  193.640305][ T9001]  ? __pfx_ksys_write+0x10/0x10
[  193.640344][ T9001]  __x64_sys_bpf+0x7c/0x90
[  193.640380][ T9001]  do_syscall_64+0xfa/0xfa0
[  193.640411][ T9001]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.640446][ T9001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.640468][ T9001]  ? clear_bhb_loop+0x60/0xb0
[  193.640496][ T9001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.640519][ T9001] RIP: 0033:0x7fc79558f6c9
[  193.640540][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.640558][ T9001] RSP: 002b:00007fc796351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  193.640588][ T9001] RAX: ffffffffffffffda RBX: 00007fc7957e5fa0 RCX: 00007fc79558f6c9
[  193.640605][ T9001] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  193.640618][ T9001] RBP: 00007fc796351090 R08: 0000000000000000 R09: 0000000000000000
[  193.640632][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  193.640645][ T9001] R13: 00007fc7957e6038 R14: 00007fc7957e5fa0 R15: 00007ffe5de7d4f8
[  193.640683][ T9001]  </TASK>
[  193.938022][ T9003] hsr_slave_0: left promiscuous mode
[  193.948596][ T9003] hsr_slave_1: left promiscuous mode
[  194.153025][ T9016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.201520][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.832'.
[  194.213322][ T9016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  194.231158][ T9016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  194.361339][ T9016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.385009][ T9016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  194.426850][ T9016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  194.701475][ T9016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.731550][ T9016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  194.748963][ T9016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  194.762640][ T9051] FAULT_INJECTION: forcing a failure.
[  194.762640][ T9051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.782127][ T9051] CPU: 0 UID: 0 PID: 9051 Comm: syz.0.839 Not tainted syzkaller #0 PREEMPT(full) 
[  194.782158][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  194.782170][ T9051] Call Trace:
[  194.782179][ T9051]  <TASK>
[  194.782188][ T9051]  dump_stack_lvl+0x189/0x250
[  194.782223][ T9051]  ? __pfx____ratelimit+0x10/0x10
[  194.782254][ T9051]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.782283][ T9051]  ? __pfx__printk+0x10/0x10
[  194.782319][ T9051]  should_fail_ex+0x414/0x560
[  194.782357][ T9051]  _copy_to_user+0x31/0xb0
[  194.782387][ T9051]  bpf_test_finish+0x24e/0x700
[  194.782420][ T9051]  ? __pfx_bpf_test_finish+0x10/0x10
[  194.782448][ T9051]  ? bpf_test_init+0x113/0x150
[  194.782471][ T9051]  bpf_prog_test_run_xdp+0x88c/0x10e0
[  194.782511][ T9051]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  194.782537][ T9051]  ? __fget_files+0x2a/0x420
[  194.782563][ T9051]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  194.782598][ T9051]  bpf_prog_test_run+0x2c7/0x340
[  194.782626][ T9051]  __sys_bpf+0x562/0x860
[  194.782648][ T9051]  ? __pfx___sys_bpf+0x10/0x10
[  194.782686][ T9051]  ? ksys_write+0x22a/0x250
[  194.782719][ T9051]  ? __pfx_ksys_write+0x10/0x10
[  194.782754][ T9051]  __x64_sys_bpf+0x7c/0x90
[  194.782785][ T9051]  do_syscall_64+0xfa/0xfa0
[  194.782814][ T9051]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.782852][ T9051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.782872][ T9051]  ? clear_bhb_loop+0x60/0xb0
[  194.782896][ T9051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.782922][ T9051] RIP: 0033:0x7f71beb8f6c9
[  194.782941][ T9051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.782957][ T9051] RSP: 002b:00007f71bf9fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  194.782978][ T9051] RAX: ffffffffffffffda RBX: 00007f71bede5fa0 RCX: 00007f71beb8f6c9
[  194.782993][ T9051] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  194.783006][ T9051] RBP: 00007f71bf9fd090 R08: 0000000000000000 R09: 0000000000000000
[  194.783017][ T9051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  194.783029][ T9051] R13: 00007f71bede6038 R14: 00007f71bede5fa0 R15: 00007ffe0eefceb8
[  194.783063][ T9051]  </TASK>
[  195.118734][ T9016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.132167][ T9016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  195.144262][ T9016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  195.262648][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  195.277053][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  195.297233][   T12] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  195.334197][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  195.376884][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  195.404878][   T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  195.456328][   T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  195.470593][   T50] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  195.494865][   T50] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  195.635816][ T8574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  195.644392][ T8574] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  195.661443][ T8574] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  195.708340][ T9079] delete_channel: no stack
[  195.743893][ T9084] netlink: 'syz.2.846': attribute type 10 has an invalid length.
[  195.760858][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'.
[  195.775989][ T9084] dummy0: entered promiscuous mode
[  195.789258][ T9084] bridge0: port 3(dummy0) entered blocking state
[  195.796112][ T9084] bridge0: port 3(dummy0) entered disabled state
[  195.812707][ T9084] dummy0: entered allmulticast mode
[  195.902408][ T9088] dvmrp1: entered allmulticast mode
[  196.583581][ T9134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.198457][ T8574] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.292979][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.305817][ T8574] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.368244][ T9173] netlink: 'syz.2.867': attribute type 2 has an invalid length.
[  197.500663][ T9176] FAULT_INJECTION: forcing a failure.
[  197.500663][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.520442][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.3.868 Not tainted syzkaller #0 PREEMPT(full) 
[  197.520484][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  197.520507][ T9176] Call Trace:
[  197.520515][ T9176]  <TASK>
[  197.520524][ T9176]  dump_stack_lvl+0x189/0x250
[  197.520557][ T9176]  ? __pfx____ratelimit+0x10/0x10
[  197.520584][ T9176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.520607][ T9176]  ? __pfx__printk+0x10/0x10
[  197.520636][ T9176]  should_fail_ex+0x414/0x560
[  197.520667][ T9176]  _copy_to_user+0x31/0xb0
[  197.520693][ T9176]  simple_read_from_buffer+0xe1/0x170
[  197.520726][ T9176]  proc_fail_nth_read+0x1b3/0x220
[  197.520753][ T9176]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  197.520779][ T9176]  ? rw_verify_area+0x2a6/0x4d0
[  197.520805][ T9176]  ? __lock_acquire+0xab9/0xd20
[  197.520820][ T9176]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  197.520847][ T9176]  vfs_read+0x200/0xa30
[  197.520873][ T9176]  ? fdget_pos+0x247/0x320
[  197.520893][ T9176]  ? __pfx___mutex_lock+0x10/0x10
[  197.520911][ T9176]  ? __pfx_vfs_read+0x10/0x10
[  197.520937][ T9176]  ? __fget_files+0x2a/0x420
[  197.520959][ T9176]  ? __fget_files+0x3a0/0x420
[  197.520974][ T9176]  ? __fget_files+0x2a/0x420
[  197.521002][ T9176]  ksys_read+0x145/0x250
[  197.521033][ T9176]  ? __pfx_ksys_read+0x10/0x10
[  197.521064][ T9176]  ? do_syscall_64+0xbe/0xfa0
[  197.521098][ T9176]  do_syscall_64+0xfa/0xfa0
[  197.521125][ T9176]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.521154][ T9176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.521180][ T9176]  ? clear_bhb_loop+0x60/0xb0
[  197.521204][ T9176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.521223][ T9176] RIP: 0033:0x7f066ff8e0dc
[  197.521241][ T9176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  197.521257][ T9176] RSP: 002b:00007f066e1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.521278][ T9176] RAX: ffffffffffffffda RBX: 00007f06701e5fa0 RCX: 00007f066ff8e0dc
[  197.521301][ T9176] RDX: 000000000000000f RSI: 00007f066e1f60a0 RDI: 0000000000000004
[  197.521313][ T9176] RBP: 00007f066e1f6090 R08: 0000000000000000 R09: 0000000000000000
[  197.521325][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.521336][ T9176] R13: 00007f06701e6038 R14: 00007f06701e5fa0 R15: 00007ffea145b5b8
[  197.521368][ T9176]  </TASK>
[  197.944625][ T9182] __nla_validate_parse: 19 callbacks suppressed
[  197.944648][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.871'.
[  197.961484][ T9182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.871'.
[  198.068938][ T9184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.117090][ T1219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.197291][ T1219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.350769][ T9203] netlink: 80 bytes leftover after parsing attributes in process `syz.1.875'.
[  198.453360][ T9207] netlink: 'syz.2.880': attribute type 10 has an invalid length.
[  198.469462][ T9207] bridge0: port 4(macsec0) entered blocking state
[  198.476299][ T9207] bridge0: port 4(macsec0) entered disabled state
[  198.483368][ T9207] macsec0: entered allmulticast mode
[  198.489028][ T9207] veth1_macvtap: entered allmulticast mode
[  198.497900][ T9207] macsec0: entered promiscuous mode
[  198.858240][ T9217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.882'.
[  198.904086][ T9227] ipt_rpfilter: unknown options
[  199.029902][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'.
[  199.080555][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'.
[  199.590167][ T9233] team0 (unregistering): Port device team_slave_0 removed
[  199.628566][ T9233] team0 (unregistering): Port device team_slave_1 removed
[  199.778806][ T9258] bond3 (unregistering): Released all slaves
[  199.894438][ T9265] sctp: [Deprecated]: syz.1.894 (pid 9265) Use of int in max_burst socket option.
[  199.894438][ T9265] Use struct sctp_assoc_value instead
[  200.011470][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.895'.
[  200.713332][ T9289] bridge0: port 3(syz_tun) entered blocking state
[  200.721521][ T9289] bridge0: port 3(syz_tun) entered disabled state
[  200.728662][ T9289] syz_tun: entered allmulticast mode
[  200.738784][ T9289] syz_tun: entered promiscuous mode
[  200.747966][ T9289] bridge0: port 3(syz_tun) entered blocking state
[  200.754643][ T9289] bridge0: port 3(syz_tun) entered forwarding state
[  201.234546][ T9303] netlink: 'syz.4.905': attribute type 13 has an invalid length.
[  201.261326][ T9303] netlink: 'syz.4.905': attribute type 17 has an invalid length.
[  201.302223][ T9303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.327102][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  201.477493][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  201.512743][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'.
[  201.587086][ T9323] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  201.691158][ T9334] xt_hashlimit: max too large, truncated to 1048576
[  201.784485][ T9323] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.925204][ T9329] bond2: (slave gretap1): making interface the new active one
[  201.945227][ T9329] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  202.080414][ T9351] x_tables: duplicate underflow at hook 1
[  202.224643][ T6807] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.245733][ T6807] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.282429][ T9368] netlink: 'syz.1.921': attribute type 8 has an invalid length.
[  202.355032][ T9370] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[  202.367522][ T5974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.403975][ T9370] 8021q: adding VLAN 0 to HW filter on device bond2
[  202.447443][ T9370] veth5: entered promiscuous mode
[  202.460336][ T9370] bond2: (slave veth5): Enslaving as an active interface with a down link
[  202.476088][ T9370] erspan0: entered allmulticast mode
[  202.511410][ T9370] bond2: (slave erspan0): making interface the new active one
[  202.521832][ T9370] erspan0: entered promiscuous mode
[  202.528709][ T9370] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  203.002431][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.012188][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  203.132035][ T9409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  203.142453][ T9409] IPv6: NLM_F_CREATE should be set when creating new route
[  203.149779][ T9409] IPv6: NLM_F_CREATE should be set when creating new route
[  203.831152][ T9437] netlink: 'syz.3.937': attribute type 13 has an invalid length.
[  203.859300][ T9437] netlink: 'syz.3.937': attribute type 17 has an invalid length.
[  204.081524][ T9437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.192953][ T9444] hsr0: entered promiscuous mode
[  204.209852][ T9444] hsr0: entered allmulticast mode
[  204.218946][ T9444] hsr_slave_0: entered allmulticast mode
[  204.224911][ T9444] hsr_slave_1: entered allmulticast mode
[  204.251144][ T9450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.942'.
[  204.274064][ T9448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.297285][ T9444] syzkaller0: entered promiscuous mode
[  204.303170][ T9444] syzkaller0: entered allmulticast mode
[  204.382741][ T9444] tipc: Resetting bearer <eth:syzkaller0>
[  204.421203][ T9457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.943'.
[  204.461956][ T9443] tipc: Resetting bearer <eth:syzkaller0>
[  204.489977][ T9443] tipc: Disabling bearer <eth:syzkaller0>
[  204.785257][ T9476] xt_ecn: cannot match TCP bits for non-tcp packets
[  204.869886][ T9478] syzkaller0: entered promiscuous mode
[  204.882603][ T9478] syzkaller0: entered allmulticast mode
[  205.075653][ T9486] syzkaller1: tun_chr_ioctl cmd 2147767520
[  205.125205][ T9486] syzkaller1: tun_chr_ioctl cmd 35123
[  205.138257][ T9490] netlink: 64 bytes leftover after parsing attributes in process `syz.3.954'.
[  205.454259][ T9508] pim6reg1: entered promiscuous mode
[  205.481509][ T9508] pim6reg1: entered allmulticast mode
[  205.503718][ T9508] sctp: [Deprecated]: syz.1.960 (pid 9508) Use of int in maxseg socket option.
[  205.503718][ T9508] Use struct sctp_assoc_value instead
[  205.925663][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'.
[  206.229725][ T9559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.970'.
[  206.265304][ T9561] netlink: 'syz.4.972': attribute type 63 has an invalid length.
[  206.273933][ T9542] syzkaller0: entered promiscuous mode
[  206.279744][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  206.284070][ T9560] netlink: 'syz.4.972': attribute type 63 has an invalid length.
[  206.288337][ T9542] syzkaller0: entered allmulticast mode
[  206.303866][ T9557] pimreg3: entered allmulticast mode
[  207.723348][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.978'.
[  207.787739][ T9586] netlink: 'syz.4.978': attribute type 1 has an invalid length.
[  207.942286][ T9601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.980'.
[  207.988794][ T9602] netlink: 140 bytes leftover after parsing attributes in process `syz.1.981'.
[  208.190558][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'.
[  208.301248][ T9614] blkio.reset_stats is deprecated
[  208.523094][ T9634] netlink: 'syz.4.988': attribute type 1 has an invalid length.
[  208.808382][ T9646] syzkaller0: entered promiscuous mode
[  208.813934][ T9646] syzkaller0: entered allmulticast mode
[  208.866233][ T9651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.037501][ T9651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  209.283988][ T9668] bond3: Unable to set up delay as MII monitoring is disabled
[  209.300833][ T9668] bond3 (unregistering): Released all slaves
[  209.330350][ T9674] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  209.340014][ T9674] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  209.364532][ T9682] bridge0: entered promiscuous mode
[  209.399606][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'.
[  209.538420][ T9690] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1002'.
[  209.585687][ T9699] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1004'.
[  209.611603][ T9698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1004'.
[  209.622714][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'.
[  209.910262][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'.
[  209.963886][ T9716] pim6reg1: entered promiscuous mode
[  209.983417][ T9716] pim6reg1: entered allmulticast mode
[  210.144000][ T9734] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  210.249715][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'.
[  210.276908][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'.
[  210.356896][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  210.429365][ T9749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1019'.
[  210.541647][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'.
[  210.898632][ T9780] batadv_slave_1: entered promiscuous mode
[  210.904736][ T9780] batadv_slave_1: entered allmulticast mode
[  211.003808][ T9787] sctp: [Deprecated]: syz.3.1028 (pid 9787) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.003808][ T9787] Use struct sctp_sack_info instead
[  211.298465][ T9811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  211.326420][ T9812] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  211.830222][ T9846] .11: entered promiscuous mode
[  212.713798][ T9891] batadv_slave_1: entered promiscuous mode
[  212.942952][ T9889] batadv_slave_1: left promiscuous mode
[  213.809207][ T9950] bridge0: entered promiscuous mode
[  213.821248][ T9950] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  213.876842][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  213.880400][ T9950] nr0: entered allmulticast mode
[  213.931804][ T9957] netlink: 'syz.1.1071': attribute type 1 has an invalid length.
[  214.052358][ T9957] 8021q: adding VLAN 0 to HW filter on device bond3
[  214.078498][   T14] erspan0: left promiscuous mode
[  214.254484][ T9975] netlink: 'syz.4.1076': attribute type 3 has an invalid length.
[  214.819774][T10001] __nla_validate_parse: 2 callbacks suppressed
[  214.819794][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'.
[  214.855374][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'.
[  214.935112][T10001] bond0: (slave sit0): Error: Device type is different from other slaves
[  214.935747][T10008] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002
[  214.965729][ T9997] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1081'.
[  215.064116][T10011] netlink: 'syz.2.1087': attribute type 7 has an invalid length.
[  215.072573][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'.
[  215.587432][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'.
[  215.606846][T10035] openvswitch: netlink: Missing key (keys=40, expected=80)
[  215.997483][T10052] syzkaller1: entered promiscuous mode
[  216.003020][T10052] syzkaller1: entered allmulticast mode
[  216.084356][T10054] veth1_virt_wifi: entered promiscuous mode
[  216.093255][T10054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1098'.
[  216.102758][T10054] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  216.122850][T10054] netlink: 'syz.4.1098': attribute type 6 has an invalid length.
[  216.165448][T10062] netlink: 'syz.0.1100': attribute type 11 has an invalid length.
[  216.223651][T10064] netlink: 'syz.4.1101': attribute type 1 has an invalid length.
[  216.256061][T10064] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.270832][T10067] macsec1: entered promiscuous mode
[  216.276078][T10067] macsec1: entered allmulticast mode
[  216.288332][T10064] ipvlan0: entered allmulticast mode
[  216.293667][T10064] bond4: entered allmulticast mode
[  216.620748][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'.
[  217.856331][T10146] netlink: 'syz.0.1123': attribute type 4 has an invalid length.
[  217.898774][T10144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1123'.
[  218.001771][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'.
[  218.492081][T10174] vlan2: entered promiscuous mode
[  218.503896][T10174] bond0: entered promiscuous mode
[  218.533778][T10174] bond_slave_0: entered promiscuous mode
[  218.552679][T10174] bond_slave_1: entered promiscuous mode
[  218.570343][T10187] veth1_virt_wifi: entered promiscuous mode
[  218.599917][T10187] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  218.724584][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1135'.
[  219.030560][T10197] 8021q: adding VLAN 0 to HW filter on device bond5
[  219.106282][T10205] 8021q: adding VLAN 0 to HW filter on device bond5
[  219.127047][T10205] bond5: (slave sit1): The slave device specified does not support setting the MAC address
[  219.145825][T10205] bond5: (slave sit1): Error -95 calling set_mac_address
[  219.751720][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.848767][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.861901][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.907575][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.927621][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.977211][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.994418][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.019662][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.057551][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.067232][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.657625][T10278] __nla_validate_parse: 1 callbacks suppressed
[  220.657660][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'.
[  220.792877][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  220.858155][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  220.940768][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  220.994538][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  221.050181][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  221.050812][T10298] netlink: 'syz.4.1161': attribute type 1 has an invalid length.
[  221.068212][T10298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1161'.
[  221.078101][T10298] NCSI netlink: No device for ifindex 0
[  221.087747][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'.
[  221.113344][T10298] gretap0: entered promiscuous mode
[  221.119315][T10298] macsec2: entered promiscuous mode
[  221.124839][T10298] macsec2: entered allmulticast mode
[  221.139398][T10298] gretap0: entered allmulticast mode
[  221.174985][T10298] gretap0: left allmulticast mode
[  221.181359][T10298] gretap0: left promiscuous mode
[  221.217478][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  221.266273][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  221.432331][T10309] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  221.725207][T10322] syzkaller0: entered promiscuous mode
[  221.733594][T10322] syzkaller0: entered allmulticast mode
[  222.195049][T10336] block nbd1: server does not support multiple connections per device.
[  222.230572][T10336] block nbd1: shutting down sockets
[  222.457735][T10360] vxcan2: entered allmulticast mode
[  222.936041][T10378] netlink: 'syz.3.1183': attribute type 2 has an invalid length.
[  222.989536][T10378] netlink: 'syz.3.1183': attribute type 2 has an invalid length.
[  223.026345][T10378] : entered promiscuous mode
[  223.551909][T10413] bridge2: the hash_elasticity option has been deprecated and is always 16
[  223.562335][T10413] bridge2: entered allmulticast mode
[  224.213730][T10441] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  224.701865][T10470] vlan3: entered allmulticast mode
[  225.362736][T10501] syzkaller0: entered promiscuous mode
[  225.381688][T10501] syzkaller0: entered allmulticast mode
[  225.523905][T10505] net_ratelimit: 56 callbacks suppressed
[  225.523941][T10505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.558227][ T5148] Bluetooth: hci2: command 0x0406 tx timeout
[  225.569853][ T5148] Bluetooth: hci3: command 0x0406 tx timeout
[  225.576153][ T5148] Bluetooth: hci1: command 0x0406 tx timeout
[  225.645354][T10509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.691508][T10509] syzkaller0: entered promiscuous mode
[  225.714956][T10505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.718745][T10509] syzkaller0: entered allmulticast mode
[  225.844533][T10518] netlink: 'syz.2.1218': attribute type 43 has an invalid length.
[  225.905737][T10509] tipc: Resetting bearer <eth:syzkaller0>
[  225.961982][T10506] tipc: Resetting bearer <eth:syzkaller0>
[  226.023780][T10506] tipc: Disabling bearer <eth:syzkaller0>
[  226.093726][T10531] __nla_validate_parse: 73 callbacks suppressed
[  226.094062][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  226.322331][T10531] team0: entered promiscuous mode
[  226.341674][T10531] team0: entered allmulticast mode
[  226.367177][T10531] 8021q: adding VLAN 0 to HW filter on device team0
[  226.381126][T10551] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000
[  226.578933][T10560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.729278][T10565] xt_TPROXY: Can be used only with -p tcp or -p udp
[  226.754227][T10565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1235'.
[  227.009077][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'.
[  227.117637][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.130229][T10592] netlink: 'syz.1.1241': attribute type 1 has an invalid length.
[  227.140225][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  227.215155][T10596] netlink: 'syz.1.1241': attribute type 15 has an invalid length.
[  227.238437][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'.
[  227.260341][T10587] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.328399][T10590] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  227.485012][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  227.645512][T10603] ieee802154 phy1 wpan1: encryption failed: -22
[  228.048007][T10615] netlink: 'syz.4.1248': attribute type 13 has an invalid length.
[  228.066936][T10615] netlink: 'syz.4.1248': attribute type 17 has an invalid length.
[  228.079431][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'.
[  228.107487][T10615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.124002][ T5974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  228.240834][T10619] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1252'.
[  228.254606][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'.
[  228.264512][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'.
[  228.600901][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  228.734721][T10652] FAULT_INJECTION: forcing a failure.
[  228.734721][T10652] name failslab, interval 1, probability 0, space 0, times 0
[  228.761209][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.2.1260 Not tainted syzkaller #0 PREEMPT(full) 
[  228.761238][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  228.761250][T10652] Call Trace:
[  228.761258][T10652]  <TASK>
[  228.761266][T10652]  dump_stack_lvl+0x189/0x250
[  228.761301][T10652]  ? __pfx____ratelimit+0x10/0x10
[  228.761331][T10652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.761356][T10652]  ? __pfx__printk+0x10/0x10
[  228.761381][T10652]  ? __pfx___might_resched+0x10/0x10
[  228.761415][T10652]  ? fs_reclaim_acquire+0x7d/0x100
[  228.761453][T10652]  should_fail_ex+0x414/0x560
[  228.761490][T10652]  should_failslab+0xa8/0x100
[  228.761513][T10652]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  228.761545][T10652]  ? __get_vm_area_node+0x13f/0x300
[  228.761579][T10652]  __get_vm_area_node+0x13f/0x300
[  228.761613][T10652]  __vmalloc_node_range_noprof+0x30c/0x12d0
[  228.761643][T10652]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  228.761668][T10652]  ? __lock_acquire+0xab9/0xd20
[  228.761703][T10652]  ? __lock_acquire+0xab9/0xd20
[  228.761730][T10652]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  228.761761][T10652]  ? __might_fault+0xb0/0x130
[  228.761798][T10652]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  228.761817][T10652]  __vmalloc_noprof+0xb1/0xf0
[  228.761846][T10652]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  228.761870][T10652]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  228.761898][T10652]  bpf_prog_alloc+0x3c/0x1a0
[  228.761921][T10652]  bpf_prog_load+0x735/0x19e0
[  228.761957][T10652]  ? __pfx_bpf_prog_load+0x10/0x10
[  228.762003][T10652]  ? bpf_lsm_bpf+0x9/0x20
[  228.762026][T10652]  ? security_bpf+0x7e/0x300
[  228.762057][T10652]  __sys_bpf+0x507/0x860
[  228.762079][T10652]  ? __pfx___sys_bpf+0x10/0x10
[  228.762125][T10652]  ? ksys_write+0x22a/0x250
[  228.762157][T10652]  ? __pfx_ksys_write+0x10/0x10
[  228.762193][T10652]  __x64_sys_bpf+0x7c/0x90
[  228.762235][T10652]  do_syscall_64+0xfa/0xfa0
[  228.762266][T10652]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.762296][T10652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.762317][T10652]  ? clear_bhb_loop+0x60/0xb0
[  228.762341][T10652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.762361][T10652] RIP: 0033:0x7fc79558f6c9
[  228.762380][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.762396][T10652] RSP: 002b:00007fc796351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  228.762426][T10652] RAX: ffffffffffffffda RBX: 00007fc7957e5fa0 RCX: 00007fc79558f6c9
[  228.762440][T10652] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  228.762452][T10652] RBP: 00007fc796351090 R08: 0000000000000000 R09: 0000000000000000
[  228.762464][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.762476][T10652] R13: 00007fc7957e6038 R14: 00007fc7957e5fa0 R15: 00007ffe5de7d4f8
[  228.762510][T10652]  </TASK>
[  228.762761][T10652] syz.2.1260: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  228.928996][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  229.092438][T10652] ,cpuset=/,mems_allowed=0-1
[  229.102260][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.2.1260 Not tainted syzkaller #0 PREEMPT(full) 
[  229.102291][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  229.102304][T10652] Call Trace:
[  229.102327][T10652]  <TASK>
[  229.102337][T10652]  dump_stack_lvl+0x189/0x250
[  229.102375][T10652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.102404][T10652]  ? __pfx__printk+0x10/0x10
[  229.102425][T10652]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  229.102460][T10652]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  229.102491][T10652]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  229.102526][T10652]  warn_alloc+0x214/0x310
[  229.102564][T10652]  ? __pfx_warn_alloc+0x10/0x10
[  229.102606][T10652]  ? __get_vm_area_node+0x2b5/0x300
[  229.102643][T10652]  __vmalloc_node_range_noprof+0x331/0x12d0
[  229.102676][T10652]  ? __lock_acquire+0xab9/0xd20
[  229.102712][T10652]  ? __lock_acquire+0xab9/0xd20
[  229.102739][T10652]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  229.102771][T10652]  ? __might_fault+0xb0/0x130
[  229.102808][T10652]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  229.102829][T10652]  __vmalloc_noprof+0xb1/0xf0
[  229.102858][T10652]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  229.102883][T10652]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  229.102910][T10652]  bpf_prog_alloc+0x3c/0x1a0
[  229.102934][T10652]  bpf_prog_load+0x735/0x19e0
[  229.102969][T10652]  ? __pfx_bpf_prog_load+0x10/0x10
[  229.103015][T10652]  ? bpf_lsm_bpf+0x9/0x20
[  229.103038][T10652]  ? security_bpf+0x7e/0x300
[  229.103067][T10652]  __sys_bpf+0x507/0x860
[  229.103095][T10652]  ? __pfx___sys_bpf+0x10/0x10
[  229.103133][T10652]  ? ksys_write+0x22a/0x250
[  229.103165][T10652]  ? __pfx_ksys_write+0x10/0x10
[  229.103199][T10652]  __x64_sys_bpf+0x7c/0x90
[  229.103238][T10652]  do_syscall_64+0xfa/0xfa0
[  229.103268][T10652]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.103302][T10652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.103327][T10652]  ? clear_bhb_loop+0x60/0xb0
[  229.103351][T10652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.103375][T10652] RIP: 0033:0x7fc79558f6c9
[  229.103404][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.103426][T10652] RSP: 002b:00007fc796351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  229.103459][T10652] RAX: ffffffffffffffda RBX: 00007fc7957e5fa0 RCX: 00007fc79558f6c9
[  229.103478][T10652] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  229.103491][T10652] RBP: 00007fc796351090 R08: 0000000000000000 R09: 0000000000000000
[  229.103504][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.103516][T10652] R13: 00007fc7957e6038 R14: 00007fc7957e5fa0 R15: 00007ffe5de7d4f8
[  229.103559][T10652]  </TASK>
[  229.103576][T10652] Mem-Info:
[  229.395150][T10652] active_anon:5142 inactive_anon:0 isolated_anon:0
[  229.395150][T10652]  active_file:3230 inactive_file:39933 isolated_file:0
[  229.395150][T10652]  unevictable:778 dirty:120 writeback:0
[  229.395150][T10652]  slab_reclaimable:11818 slab_unreclaimable:119003
[  229.395150][T10652]  mapped:30383 shmem:2556 pagetables:985
[  229.395150][T10652]  sec_pagetables:0 bounce:0
[  229.395150][T10652]  kernel_misc_reclaimable:0
[  229.395150][T10652]  free:1307767 free_pcp:15641 free_cma:0
[  229.530487][T10668] ipvlan0: entered promiscuous mode
[  229.546637][T10652] Node 0 active_anon:22524kB inactive_anon:0kB active_file:12920kB inactive_file:159528kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:127700kB dirty:524kB writeback:0kB shmem:11080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:3456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  229.603965][T10668] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  229.652776][T10652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  229.729812][T10652] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  229.791856][T10652] lowmem_reserve[]: 0 2505 2505 2505 2505
[  229.797961][T10652] Node 0 DMA32 free:1314356kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31824kB inactive_anon:0kB active_file:12920kB inactive_file:159528kB unevictable:1576kB writepending:524kB zspages:0kB present:3129332kB managed:2565140kB mlocked:40kB bounce:0kB free_pcp:37844kB local_pcp:8648kB free_cma:0kB
[  229.835388][T10652] lowmem_reserve[]: 0 0 0 0 0
[  229.876017][T10652] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  229.957949][T10652] lowmem_reserve[]: 0 0 0 0 0
[  229.968085][T10652] Node 1 Normal free:3900528kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14740kB local_pcp:5612kB free_cma:0kB
[  230.026890][T10652] lowmem_reserve[]: 0 0 0 0 0
[  230.042027][T10652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  230.076198][T10652] Node 0 DMA32: 1032*4kB (UME) 988*8kB (UME) 57*16kB (UM) 379*32kB (UM) 93*64kB (UME) 56*128kB (UME) 47*256kB (UM) 13*512kB (UM) 16*1024kB (UME) 6*2048kB (UM) 300*4096kB (UM) = 1314352kB
[  230.171317][T10652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  230.186150][T10652] Node 1 Normal: 158*4kB (UE) 35*8kB (UME) 40*16kB (UME) 119*32kB (UME) 30*64kB (UME) 8*128kB (UME) 8*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 948*4096kB (M) = 3900528kB
[  230.265862][T10652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  230.306826][T10652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.358638][T10652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  230.379750][T10652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.405212][T10652] 44564 total pagecache pages
[  230.417038][T10652] 0 pages in swap cache
[  230.426746][T10652] Free swap  = 124996kB
[  230.430964][T10652] Total swap = 124996kB
[  230.455625][T10652] 2097051 pages RAM
[  230.463377][T10652] 0 pages HighMem/MovableOnly
[  230.478103][T10652] 424124 pages reserved
[  230.493622][T10652] 0 pages cma reserved
[  231.271655][T10760] __nla_validate_parse: 7 callbacks suppressed
[  231.271689][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'.
[  231.590571][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'.
[  231.640301][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'.
[  231.665164][T10773] netlink: 'syz.0.1296': attribute type 5 has an invalid length.
[  231.793084][T10780] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1297'.
[  231.818102][T10776] syzkaller1: entered promiscuous mode
[  231.826680][T10776] syzkaller1: entered allmulticast mode
[  232.771906][T10826] netlink: 'syz.3.1308': attribute type 15 has an invalid length.
[  232.832134][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'.
[  232.926992][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'.
[  233.515759][T10864] ip6t_REJECT: ECHOREPLY is not supported
[  233.621686][T10867] netlink: 'syz.4.1320': attribute type 10 has an invalid length.
[  233.622873][T10864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.660334][T10870] netlink: 'syz.4.1320': attribute type 10 has an invalid length.
[  233.698221][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'.
[  233.707681][T10875] netlink: 'syz.3.1322': attribute type 1 has an invalid length.
[  233.755197][T10876] syzkaller0: entered promiscuous mode
[  233.761045][T10876] syzkaller0: entered allmulticast mode
[  233.801250][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1322'.
[  233.812138][T10875] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  233.827309][T10858] syzkaller0: entered promiscuous mode
[  233.832857][T10858] syzkaller0: entered allmulticast mode
[  233.922427][T10880] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1323'.
[  234.033515][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  234.446886][   T14] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.479904][ T6807] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.522128][ T6807] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.609114][ T6807] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.510981][T10949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.527643][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.730531][T10961] netlink: 'syz.1.1345': attribute type 1 has an invalid length.
[  235.751096][ T5916] IPVS: starting estimator thread 0...
[  235.834429][T10961] 8021q: adding VLAN 0 to HW filter on device bond4
[  235.846863][T10966] IPVS: using max 28 ests per chain, 67200 per kthread
[  236.356873][ T5974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  236.385992][T10993] __nla_validate_parse: 3 callbacks suppressed
[  236.386016][T10993] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1352'.
[  236.405694][T10993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1352'.
[  236.486029][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'.
[  236.604968][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1357'.
[  236.662356][T11009] netlink: 'syz.2.1357': attribute type 4 has an invalid length.
[  236.965842][T11021] IPVS: Scheduler module ip_vs_sip not found
[  236.982152][T11033] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  237.121262][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1367'.
[  237.594894][T11083] xt_socket: unknown flags 0xfc
[  237.711776][T11084] pim6reg1: entered promiscuous mode
[  237.722141][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1379'.
[  237.733965][T11084] pim6reg1: entered allmulticast mode
[  237.759639][T11091] netlink: 'syz.0.1381': attribute type 15 has an invalid length.
[  237.950736][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'.
[  238.015853][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'.
[  238.067035][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'.
[  238.235251][T11123] syzkaller0: entered promiscuous mode
[  238.241566][T11123] syzkaller0: entered allmulticast mode
[  238.273611][T11120] gretap1: entered promiscuous mode
[  238.297400][T11120] gretap1: entered allmulticast mode
[  238.513491][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'.
[  238.721370][T11147] netlink: 'syz.0.1395': attribute type 5 has an invalid length.
[  238.768904][T11150] xt_TCPMSS: Only works on TCP SYN packets
[  239.169685][T11180] netlink: 'syz.3.1401': attribute type 1 has an invalid length.
[  239.363149][T11180] 8021q: adding VLAN 0 to HW filter on device bond3
[  239.473246][T11181] 8021q: adding VLAN 0 to HW filter on device bond3
[  239.495330][T11181] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  239.507782][T11181] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  239.651799][T11191] syzkaller0: entered promiscuous mode
[  239.688134][T11191] syzkaller0: entered allmulticast mode
[  241.411266][T11232] FAULT_INJECTION: forcing a failure.
[  241.411266][T11232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.425039][T11232] CPU: 0 UID: 0 PID: 11232 Comm: syz.3.1412 Not tainted syzkaller #0 PREEMPT(full) 
[  241.425066][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  241.425079][T11232] Call Trace:
[  241.425088][T11232]  <TASK>
[  241.425097][T11232]  dump_stack_lvl+0x189/0x250
[  241.425136][T11232]  ? __pfx____ratelimit+0x10/0x10
[  241.425167][T11232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.425212][T11232]  ? __pfx__printk+0x10/0x10
[  241.425234][T11232]  ? __might_fault+0xb0/0x130
[  241.425279][T11232]  should_fail_ex+0x414/0x560
[  241.425319][T11232]  _copy_from_user+0x2d/0xb0
[  241.425347][T11232]  ___sys_recvmsg+0x12e/0x510
[  241.425382][T11232]  ? __pfx____sys_recvmsg+0x10/0x10
[  241.425433][T11232]  ? __fget_files+0x3a0/0x420
[  241.425467][T11232]  do_recvmmsg+0x307/0x770
[  241.425500][T11232]  ? __pfx_do_recvmmsg+0x10/0x10
[  241.425539][T11232]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  241.425605][T11232]  __x64_sys_recvmmsg+0x190/0x240
[  241.425632][T11232]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  241.425661][T11232]  ? do_syscall_64+0xbe/0xfa0
[  241.425713][T11232]  do_syscall_64+0xfa/0xfa0
[  241.425741][T11232]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.425783][T11232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.425811][T11232]  ? clear_bhb_loop+0x60/0xb0
[  241.425835][T11232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.425854][T11232] RIP: 0033:0x7f066ff8f6c9
[  241.425873][T11232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.425909][T11232] RSP: 002b:00007f066e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  241.425931][T11232] RAX: ffffffffffffffda RBX: 00007f06701e5fa0 RCX: 00007f066ff8f6c9
[  241.425946][T11232] RDX: 0000000000000002 RSI: 0000200000000a80 RDI: 0000000000000003
[  241.425959][T11232] RBP: 00007f066e1f6090 R08: 0000000000000000 R09: 0000000000000000
[  241.425972][T11232] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000001
[  241.425984][T11232] R13: 00007f06701e6038 R14: 00007f06701e5fa0 R15: 00007ffea145b5b8
[  241.426018][T11232]  </TASK>
[  241.990381][T11251] netlink: 'syz.3.1418': attribute type 10 has an invalid length.
[  242.035138][T11251] bridge0: port 1(macsec0) entered blocking state
[  242.067964][T11251] bridge0: port 1(macsec0) entered disabled state
[  242.126923][T11251] macsec0: entered allmulticast mode
[  242.150077][T11251] veth1_macvtap: entered allmulticast mode
[  242.226777][T11251] macsec0: entered promiscuous mode
[  242.271810][T11251] bridge0: port 1(macsec0) entered blocking state
[  242.278569][T11251] bridge0: port 1(macsec0) entered forwarding state
[  242.536111][T11269] __nla_validate_parse: 1 callbacks suppressed
[  242.536133][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'.
[  242.631814][T11275] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003
[  242.646849][T11262] syzkaller0: entered promiscuous mode
[  242.652469][T11262] syzkaller0: entered allmulticast mode
[  242.772339][T11278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1424'.
[  242.933219][T11281] FAULT_INJECTION: forcing a failure.
[  242.933219][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.954516][T11281] CPU: 0 UID: 0 PID: 11281 Comm: syz.2.1425 Not tainted syzkaller #0 PREEMPT(full) 
[  242.954553][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  242.954566][T11281] Call Trace:
[  242.954585][T11281]  <TASK>
[  242.954594][T11281]  dump_stack_lvl+0x189/0x250
[  242.954629][T11281]  ? __pfx____ratelimit+0x10/0x10
[  242.954660][T11281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.954688][T11281]  ? __pfx__printk+0x10/0x10
[  242.954723][T11281]  should_fail_ex+0x414/0x560
[  242.954761][T11281]  _copy_to_user+0x31/0xb0
[  242.954859][T11281]  simple_read_from_buffer+0xe1/0x170
[  242.954899][T11281]  proc_fail_nth_read+0x1b3/0x220
[  242.954931][T11281]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.954960][T11281]  ? rw_verify_area+0x2a6/0x4d0
[  242.954988][T11281]  ? __lock_acquire+0xab9/0xd20
[  242.955008][T11281]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.955035][T11281]  vfs_read+0x200/0xa30
[  242.955060][T11281]  ? fdget_pos+0x247/0x320
[  242.955084][T11281]  ? __pfx___mutex_lock+0x10/0x10
[  242.955106][T11281]  ? __pfx_vfs_read+0x10/0x10
[  242.955136][T11281]  ? __fget_files+0x2a/0x420
[  242.955161][T11281]  ? __fget_files+0x3a0/0x420
[  242.955178][T11281]  ? __fget_files+0x2a/0x420
[  242.955208][T11281]  ksys_read+0x145/0x250
[  242.955238][T11281]  ? __pfx_ksys_read+0x10/0x10
[  242.955271][T11281]  ? do_syscall_64+0xbe/0xfa0
[  242.955304][T11281]  do_syscall_64+0xfa/0xfa0
[  242.955427][T11281]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.955464][T11281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.955484][T11281]  ? clear_bhb_loop+0x60/0xb0
[  242.955509][T11281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.955529][T11281] RIP: 0033:0x7fc79558e0dc
[  242.955548][T11281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  242.955576][T11281] RSP: 002b:00007fc796351030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  242.955599][T11281] RAX: ffffffffffffffda RBX: 00007fc7957e5fa0 RCX: 00007fc79558e0dc
[  242.955615][T11281] RDX: 000000000000000f RSI: 00007fc7963510a0 RDI: 0000000000000005
[  242.955627][T11281] RBP: 00007fc796351090 R08: 0000000000000000 R09: 0000000000000000
[  242.955639][T11281] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000001
[  242.955698][T11281] R13: 00007fc7957e6038 R14: 00007fc7957e5fa0 R15: 00007ffe5de7d4f8
[  242.955733][T11281]  </TASK>
[  243.052060][T11296] netlink: 4460 bytes leftover after parsing attributes in process `syz.1.1424'.
[  244.420328][T11296] veth1_macvtap: left promiscuous mode
[  244.488423][T11300] ip6tnl1: entered allmulticast mode
[  244.695239][T11315] netlink: 'syz.0.1433': attribute type 10 has an invalid length.
[  244.704247][T11315] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1433'.
[  244.715356][T11315] team0: entered promiscuous mode
[  244.720497][T11315] team_slave_0: entered promiscuous mode
[  244.735404][T11315] team_slave_1: entered promiscuous mode
[  244.760738][T11315] bridge0: port 4(team0) entered blocking state
[  244.801616][T11315] bridge0: port 4(team0) entered disabled state
[  244.829175][T11315] team0: entered allmulticast mode
[  244.834361][T11315] team_slave_0: entered allmulticast mode
[  244.850830][T11315] team_slave_1: entered allmulticast mode
[  244.861367][T11315] bridge0: port 4(team0) entered blocking state
[  244.867931][T11315] bridge0: port 4(team0) entered forwarding state
[  244.900587][ T5841] Bluetooth: hci4: link tx timeout
[  244.905815][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  244.916304][ T5841] Bluetooth: hci4: link tx timeout
[  244.921766][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  244.931311][ T5841] Bluetooth: hci4: link tx timeout
[  244.938422][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  244.947011][ T5841] Bluetooth: hci4: link tx timeout
[  244.952271][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  244.976890][ T5841] Bluetooth: hci4: link tx timeout
[  244.982280][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  244.990142][ T5841] Bluetooth: hci4: link tx timeout
[  244.995313][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  245.036316][ T5841] Bluetooth: hci4: link tx timeout
[  245.042155][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  245.050060][ T5841] Bluetooth: hci4: link tx timeout
[  245.055226][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  245.637623][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1447'.
[  245.791960][T11370] netlink: 'syz.0.1449': attribute type 10 has an invalid length.
[  245.836238][T11370] bridge0: port 4(team0) entered disabled state
[  245.844382][T11370] team0: left allmulticast mode
[  245.874193][T11370] team_slave_0: left allmulticast mode
[  245.882885][T11370] team_slave_1: left allmulticast mode
[  245.906970][T11370] team0: left promiscuous mode
[  245.911939][T11370] team_slave_0: left promiscuous mode
[  245.926089][T11370] team_slave_1: left promiscuous mode
[  245.940904][T11370] bridge0: port 4(team0) entered disabled state
[  246.071035][T11370] 8021q: adding VLAN 0 to HW filter on device team0
[  246.080227][T11370] team0: entered promiscuous mode
[  246.085448][T11370] team_slave_0: entered promiscuous mode
[  246.094337][T11370] team_slave_1: entered promiscuous mode
[  246.101809][T11370] bond0: (slave team0): Enslaving as an active interface with an up link
[  246.208746][T11350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.350582][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'.
[  246.453740][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'.
[  246.824244][T11428] syz_tun: left promiscuous mode
[  246.844654][T11433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1464'.
[  246.845848][T11428] syz_tun: entered allmulticast mode
[  246.924336][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  247.022406][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'.
[  247.118754][T11445] netlink: 'syz.1.1470': attribute type 28 has an invalid length.
[  247.199697][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'.
[  247.630871][T11465] netlink: 'syz.0.1477': attribute type 2 has an invalid length.
[  250.309263][T11529] netlink: 'syz.3.1494': attribute type 15 has an invalid length.
[  250.329207][T11528] __nla_validate_parse: 2 callbacks suppressed
[  250.329232][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1495'.
[  250.400355][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'.
[  250.511452][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'.
[  250.574794][T11541] netlink: 'syz.0.1499': attribute type 33 has an invalid length.
[  250.603462][T11541] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1499'.
[  250.640125][T11554] FAULT_INJECTION: forcing a failure.
[  250.640125][T11554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.653776][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.3.1504 Not tainted syzkaller #0 PREEMPT(full) 
[  250.653805][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.653818][T11554] Call Trace:
[  250.653827][T11554]  <TASK>
[  250.653836][T11554]  dump_stack_lvl+0x189/0x250
[  250.653877][T11554]  ? __pfx____ratelimit+0x10/0x10
[  250.653911][T11554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.653936][T11554]  ? __pfx__printk+0x10/0x10
[  250.653957][T11554]  ? __might_fault+0xb0/0x130
[  250.653998][T11554]  should_fail_ex+0x414/0x560
[  250.654035][T11554]  _copy_from_user+0x2d/0xb0
[  250.654062][T11554]  __sys_bpf+0x1e3/0x860
[  250.654086][T11554]  ? __pfx___sys_bpf+0x10/0x10
[  250.654122][T11554]  ? ksys_write+0x22a/0x250
[  250.654156][T11554]  ? __pfx_ksys_write+0x10/0x10
[  250.654191][T11554]  __x64_sys_bpf+0x7c/0x90
[  250.654223][T11554]  do_syscall_64+0xfa/0xfa0
[  250.654253][T11554]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.654284][T11554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.654307][T11554]  ? clear_bhb_loop+0x60/0xb0
[  250.654332][T11554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.654352][T11554] RIP: 0033:0x7f066ff8f6c9
[  250.654373][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.654471][T11554] RSP: 002b:00007f066e1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  250.654494][T11554] RAX: ffffffffffffffda RBX: 00007f06701e5fa0 RCX: 00007f066ff8f6c9
[  250.654507][T11554] RDX: 0000000000000039 RSI: 0000200000000280 RDI: 000000000000000a
[  250.654521][T11554] RBP: 00007f066e1f6090 R08: 0000000000000000 R09: 0000000000000000
[  250.654534][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.654545][T11554] R13: 00007f06701e6038 R14: 00007f06701e5fa0 R15: 00007ffea145b5b8
[  250.654586][T11554]  </TASK>
[  250.913502][T11541] `: renamed from team0
[  251.090773][T11566] netlink: 'syz.2.1505': attribute type 4 has an invalid length.
[  251.237066][T11579] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1510'.
[  251.285717][T11579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1510'.
[  251.449838][T11594] FAULT_INJECTION: forcing a failure.
[  251.449838][T11594] name failslab, interval 1, probability 0, space 0, times 0
[  251.492649][T11594] CPU: 0 UID: 0 PID: 11594 Comm: syz.1.1516 Not tainted syzkaller #0 PREEMPT(full) 
[  251.492680][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  251.492693][T11594] Call Trace:
[  251.492701][T11594]  <TASK>
[  251.492710][T11594]  dump_stack_lvl+0x189/0x250
[  251.492744][T11594]  ? __pfx____ratelimit+0x10/0x10
[  251.492773][T11594]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.492801][T11594]  ? __pfx__printk+0x10/0x10
[  251.492825][T11594]  ? __pfx___might_resched+0x10/0x10
[  251.492851][T11594]  ? fs_reclaim_acquire+0x7d/0x100
[  251.492889][T11594]  should_fail_ex+0x414/0x560
[  251.492926][T11594]  should_failslab+0xa8/0x100
[  251.492946][T11594]  __kmalloc_noprof+0xcb/0x7f0
[  251.492969][T11594]  ? bpf_test_init+0x9f/0x150
[  251.492994][T11594]  bpf_test_init+0x9f/0x150
[  251.493014][T11594]  bpf_prog_test_run_xdp+0x503/0x10e0
[  251.493046][T11594]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  251.493068][T11594]  ? __fget_files+0x2a/0x420
[  251.493092][T11594]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  251.493113][T11594]  bpf_prog_test_run+0x2c7/0x340
[  251.493138][T11594]  __sys_bpf+0x562/0x860
[  251.493160][T11594]  ? __pfx___sys_bpf+0x10/0x10
[  251.493197][T11594]  ? ksys_write+0x22a/0x250
[  251.493228][T11594]  ? __pfx_ksys_write+0x10/0x10
[  251.493259][T11594]  __x64_sys_bpf+0x7c/0x90
[  251.493285][T11594]  do_syscall_64+0xfa/0xfa0
[  251.493314][T11594]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.493344][T11594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.493364][T11594]  ? clear_bhb_loop+0x60/0xb0
[  251.493400][T11594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.493419][T11594] RIP: 0033:0x7f06a718f6c9
[  251.493438][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.493455][T11594] RSP: 002b:00007f06a80b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  251.493476][T11594] RAX: ffffffffffffffda RBX: 00007f06a73e5fa0 RCX: 00007f06a718f6c9
[  251.493491][T11594] RDX: 0000000000000039 RSI: 0000200000000280 RDI: 000000000000000a
[  251.493583][T11594] RBP: 00007f06a80b5090 R08: 0000000000000000 R09: 0000000000000000
[  251.493595][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.493607][T11594] R13: 00007f06a73e6038 R14: 00007f06a73e5fa0 R15: 00007ffd4e449838
[  251.493659][T11594]  </TASK>
[  251.493935][T11586] tipc: Enabled bearer <udp:™>, priority 10
[  251.734503][T11604] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1517'.
[  252.124783][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'.
[  252.197998][T11614] ipt_REJECT: TCP_RESET invalid for non-tcp
[  252.240702][T11603] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  252.255142][T11603] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  252.327969][T11603] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  252.607024][   T49] tipc: Node number set to 339491526
[  253.021481][T11642] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 3, id = 0
[  253.542750][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'.
[  253.642128][T11659] ip6tnl2: entered promiscuous mode
[  253.647526][T11659] ip6tnl2: entered allmulticast mode
[  253.675250][T11671] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.1537'.
[  253.703561][T11671] openvswitch: netlink: Message has 6 unknown bytes.
[  253.730179][T11671] openvswitch: netlink: Message has 6 unknown bytes.
[  253.772002][T11669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.783784][T11669] syzkaller0: entered promiscuous mode
[  253.789488][T11669] syzkaller0: entered allmulticast mode
[  253.819278][T11669] tipc: Resetting bearer <eth:syzkaller0>
[  253.835652][T11667] tipc: Resetting bearer <eth:syzkaller0>
[  253.883694][T11667] tipc: Disabling bearer <eth:syzkaller0>
[  253.997475][T11681] netlink: 'syz.4.1539': attribute type 33 has an invalid length.
[  254.100759][T11690] FAULT_INJECTION: forcing a failure.
[  254.100759][T11690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.131232][T11690] CPU: 1 UID: 0 PID: 11690 Comm: syz.1.1542 Not tainted syzkaller #0 PREEMPT(full) 
[  254.131265][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  254.131278][T11690] Call Trace:
[  254.131287][T11690]  <TASK>
[  254.131296][T11690]  dump_stack_lvl+0x189/0x250
[  254.131333][T11690]  ? __pfx____ratelimit+0x10/0x10
[  254.131364][T11690]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.131392][T11690]  ? __pfx__printk+0x10/0x10
[  254.131422][T11690]  ? __might_fault+0xb0/0x130
[  254.131464][T11690]  should_fail_ex+0x414/0x560
[  254.131502][T11690]  _copy_from_user+0x2d/0xb0
[  254.131530][T11690]  ___sys_sendmsg+0x158/0x2a0
[  254.131559][T11690]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.131622][T11690]  ? __fget_files+0x2a/0x420
[  254.131640][T11690]  ? __fget_files+0x3a0/0x420
[  254.131672][T11690]  __x64_sys_sendmsg+0x19b/0x260
[  254.131699][T11690]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.131731][T11690]  ? __pfx_ksys_write+0x10/0x10
[  254.131763][T11690]  ? do_syscall_64+0xbe/0xfa0
[  254.131871][T11690]  do_syscall_64+0xfa/0xfa0
[  254.131900][T11690]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.131931][T11690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.131951][T11690]  ? clear_bhb_loop+0x60/0xb0
[  254.131977][T11690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.131997][T11690] RIP: 0033:0x7f06a718f6c9
[  254.132016][T11690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.132034][T11690] RSP: 002b:00007f06a80b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.132057][T11690] RAX: ffffffffffffffda RBX: 00007f06a73e5fa0 RCX: 00007f06a718f6c9
[  254.132072][T11690] RDX: 0000000000008000 RSI: 0000200000001b80 RDI: 0000000000000003
[  254.132085][T11690] RBP: 00007f06a80b5090 R08: 0000000000000000 R09: 0000000000000000
[  254.132098][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.132110][T11690] R13: 00007f06a73e6038 R14: 00007f06a73e5fa0 R15: 00007ffd4e449838
[  254.132145][T11690]  </TASK>
[  254.662818][T11699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.718104][T11699] tipc: Resetting bearer <eth:syzkaller0>
[  254.788098][T11698] tipc: Disabling bearer <eth:syzkaller0>
[  256.090085][T11720] bond0 (unregistering): left promiscuous mode
[  256.106839][T11720] bond_slave_0: left promiscuous mode
[  256.112553][T11720] bond_slave_1: left promiscuous mode
[  256.161068][T11720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.183146][T11720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.208086][T11720] bond0 (unregistering): Released all slaves
[  256.589484][T11757] __nla_validate_parse: 3 callbacks suppressed
[  256.589507][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  256.824964][T11763] netlink: 1311 bytes leftover after parsing attributes in process `syz.0.1556'.
[  257.022886][T11774] raw_sendmsg: syz.4.1558 forgot to set AF_INET. Fix it!
[  257.357891][T11792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1559'.
[  257.397206][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  257.625834][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'.
[  257.689870][T11800] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  257.803329][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1562'.
[  258.104042][T11831] netlink: 'syz.4.1564': attribute type 1 has an invalid length.
[  258.154138][T11831] netlink: 'syz.4.1564': attribute type 3 has an invalid length.
[  258.189564][T11831] netlink: 'syz.4.1564': attribute type 2 has an invalid length.
[  258.206952][T11831] netlink: 'syz.4.1564': attribute type 3 has an invalid length.
[  258.215064][T11831] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1564'.
[  258.245964][T11838] netlink: 'syz.0.1568': attribute type 10 has an invalid length.
[  258.274221][T11838] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1568'.
[  258.342092][T11849] xfrm1: entered allmulticast mode
[  258.770196][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  259.101740][T11881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.379400][T11883] tipc: Resetting bearer <eth:syzkaller0>
[  259.453029][T11882] syzkaller0: entered promiscuous mode
[  259.495520][T11882] syzkaller0: entered allmulticast mode
[  259.841484][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1583'.
[  260.233673][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'.
[  260.243882][T11913] netlink: 'syz.1.1588': attribute type 1 has an invalid length.
[  260.534081][T11920] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.550931][T11920] bond0: (slave bond5): Enslaving as an active interface with an up link
[  261.356091][T11969] pimreg: entered allmulticast mode
[  261.391273][T11969] pimreg: left allmulticast mode
[  261.531350][T11975] 8021q: adding VLAN 0 to HW filter on device bond4
[  261.539458][T11975] bridge0: port 2(bond4) entered blocking state
[  261.546045][T11975] bridge0: port 2(bond4) entered disabled state
[  261.552870][T11975] bond4: entered allmulticast mode
[  261.561415][T11975] bond4: entered promiscuous mode
[  261.567515][T11975] bridge0: port 2(bond4) entered blocking state
[  261.573961][T11975] bridge0: port 2(bond4) entered forwarding state
[  261.799937][T11984] ip6erspan0: entered allmulticast mode
[  261.833561][   T14] bridge0: port 2(bond4) entered disabled state
[  262.173924][T12014] netlink: 'syz.3.1613': attribute type 1 has an invalid length.
[  262.303624][T12019] netlink: 'syz.3.1613': attribute type 13 has an invalid length.
[  262.428192][T12027] netlink: 'syz.3.1613': attribute type 1 has an invalid length.
[  262.717770][T12016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.737237][T12018] syzkaller0: entered promiscuous mode
[  262.754808][T12018] syzkaller0: entered allmulticast mode
[  262.796101][T12015] tipc: Resetting bearer <eth:syzkaller0>
[  262.870716][T12015] tipc: Disabling bearer <eth:syzkaller0>
[  263.671898][T12067] __nla_validate_parse: 5 callbacks suppressed
[  263.671919][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1624'.
[  264.395535][T12095] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  264.424265][T12095] bond6 (unregistering): Released all slaves
[  264.462133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  265.104205][T12122] netlink: 'syz.4.1637': attribute type 10 has an invalid length.
[  265.123571][T12122] netlink: 'syz.4.1637': attribute type 10 has an invalid length.
[  265.280719][T12133] vxcan3: entered allmulticast mode
[  265.530520][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'.
[  265.573993][T12150] netlink: 'syz.2.1647': attribute type 1 has an invalid length.
[  265.622706][T12150] bond0: entered promiscuous mode
[  265.647159][T12150] bond0: entered allmulticast mode
[  265.736214][T12151] bond0: (slave ip6gretap1): making interface the new active one
[  265.763439][T12151] ip6gretap1: entered promiscuous mode
[  265.777329][T12151] ip6gretap1: entered allmulticast mode
[  265.802147][T12151] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  265.936089][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'.
[  266.034337][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'.
[  266.046875][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1649'.
[  266.074868][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'.
[  266.105336][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1649'.
[  266.330374][T12176] batadv1: entered allmulticast mode
[  266.365920][T12176] 8021q: adding VLAN 0 to HW filter on device batadv1
[  266.762028][T12194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1656'.
[  266.786683][T12197] ipt_REJECT: TCP_RESET invalid for non-tcp
[  266.811325][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'.
[  266.866903][T12199] syzkaller0: Caught tx_queue_len zero misconfig
[  266.905688][T12202] x_tables: duplicate underflow at hook 1
[  266.978241][   T30] audit: type=1804 audit(1762590551.808:3): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1658" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1699 res=1 errno=0
[  267.047028][   T30] audit: type=1800 audit(1762590551.808:4): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1658" name="cgroup.controllers" dev="tmpfs" ino=1699 res=0 errno=0
[  267.051289][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1660'.
[  267.114384][   T30] audit: type=1800 audit(1762590551.808:5): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1658" name="cgroup.controllers" dev="tmpfs" ino=1699 res=0 errno=0
[  267.863464][T12262] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  267.877450][T12262] netem: change failed
[  267.884892][T12259] Bluetooth: hci0: Opcode 0x080f failed: -22
[  267.902543][T12263] bond0: Caught tx_queue_len zero misconfig
[  268.460188][T12281] xt_TPROXY: Can be used only with -p tcp or -p udp
[  268.495521][T12281] xt_TPROXY: Can be used only with -p tcp or -p udp
[  268.557928][T12292] nbd: device at index 64 is going down
[  268.579021][T12284] nbd: device at index 64 is going down
[  268.701767][T12306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.719327][T12306] syzkaller0: entered promiscuous mode
[  268.725034][T12306] syzkaller0: entered allmulticast mode
[  268.850185][T12306] tipc: Resetting bearer <eth:syzkaller0>
[  268.864826][T12305] tipc: Resetting bearer <eth:syzkaller0>
[  268.887282][T12318] __nla_validate_parse: 7 callbacks suppressed
[  268.887316][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'.
[  268.909850][T12305] tipc: Disabling bearer <eth:syzkaller0>
[  269.156686][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  269.535881][T12357] netlink: 'syz.0.1698': attribute type 3 has an invalid length.
[  269.939752][T12375] Cannot find add_set index 3 as target
[  269.966937][ T5830] Bluetooth: hci0: command tx timeout
[  270.065574][T12380] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  270.078459][T12380] x_tables: ip_tables: osf match: only valid for protocol 6
[  270.494438][T12414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1711'.
[  270.511572][T12415] netlink: 'syz.2.1710': attribute type 10 has an invalid length.
[  270.572177][T12421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.581917][T12416] bond5: option arp_validate: invalid value (18446744073491447809)
[  270.593815][T12416] bond5 (unregistering): Released all slaves
[  270.694864][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'.
[  271.322748][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  271.414917][T12442] netlink: 'syz.1.1719': attribute type 1 has an invalid length.
[  271.484762][T12442] bond6: entered promiscuous mode
[  271.503428][T12442] 8021q: adding VLAN 0 to HW filter on device bond6
[  271.531038][T12449] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  271.568401][T12449] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1722'.
[  271.607751][T12457] 8021q: adding VLAN 0 to HW filter on device bond7
[  271.619906][T12457] bond6: (slave bond7): making interface the new active one
[  271.627601][T12457] bond7: entered promiscuous mode
[  271.633758][T12457] bond6: (slave bond7): Enslaving as an active interface with an up link
[  271.720792][T12460] veth1_to_team: entered allmulticast mode
[  271.777100][T12463] netlink: 'syz.4.1724': attribute type 3 has an invalid length.
[  271.784809][T12466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1727'.
[  271.816850][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'.
[  272.035172][T12463] tc_dump_action: action bad kind
[  272.121727][T12473] dummy0: left allmulticast mode
[  272.136740][T12473] bridge0: port 3(dummy0) entered disabled state
[  272.160369][T12473] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  272.249035][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'.
[  272.340691][T12485] tipc: Resetting bearer <eth:syzkaller0>
[  272.384780][T12485] syzkaller0: left promiscuous mode
[  272.397953][T12485] syzkaller0: left allmulticast mode
[  272.420031][T12492] netlink: 'syz.1.1733': attribute type 3 has an invalid length.
[  272.448479][T12492] netlink: 'syz.1.1733': attribute type 7 has an invalid length.
[  272.457219][T12492] netlink: 'syz.1.1733': attribute type 8 has an invalid length.
[  272.469705][T12492] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1733'.
[  272.491988][T12492] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1733'.
[  273.273279][T12503] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  273.280721][T12514] openvswitch: netlink: IP tunnel dst address not specified
[  285.283209][T12531] __nla_validate_parse: 2 callbacks suppressed
[  285.283239][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'.
[  285.301491][T12534] netlink: 'syz.2.1746': attribute type 33 has an invalid length.
[  285.305570][T12531] netlink: 'syz.1.1745': attribute type 30 has an invalid length.
[  285.312557][T12534] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1746'.
[  285.332278][T12535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.341056][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'.
[  285.361663][T12535] syzkaller0: entered promiscuous mode
[  285.371461][T12535] syzkaller0: entered allmulticast mode
[  285.388350][T12539] IPVS: set_ctl: invalid protocol: 186 224.0.0.1:20001
[  285.403165][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'.
[  286.192124][T12579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1757'.
[  286.375689][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'.
[  286.518170][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'.
[  287.105416][T12622] hsr0: entered allmulticast mode
[  287.127342][T12622] hsr_slave_0: entered allmulticast mode
[  287.133148][T12622] hsr_slave_1: entered allmulticast mode
[  287.174587][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1769'.
[  287.197135][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1769'.
[  287.306028][T12628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1770'.
[  287.531765][T12640] netlink: 'syz.0.1773': attribute type 6 has an invalid length.
[  288.057607][T12655] netlink: 'syz.4.1777': attribute type 83 has an invalid length.
[  288.095904][T12660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.105027][T12660] syzkaller0: entered promiscuous mode
[  288.112363][T12660] syzkaller0: entered allmulticast mode
[  288.124697][T12663] netlink: 'syz.0.1779': attribute type 4 has an invalid length.
[  288.171014][T12660] tipc: Resetting bearer <eth:syzkaller0>
[  288.198272][T12663] netlink: 'syz.0.1779': attribute type 4 has an invalid length.
[  288.217465][T12656] tipc: Resetting bearer <eth:syzkaller0>
[  288.259917][T12656] tipc: Disabling bearer <eth:syzkaller0>
[  288.271069][T12669] ip6t_rpfilter: unknown options
[  288.486976][T12680] sctp: [Deprecated]: syz.4.1783 (pid 12680) Use of int in maxseg socket option.
[  288.486976][T12680] Use struct sctp_assoc_value instead
[  288.551552][T12681] netlink: 'syz.1.1785': attribute type 9 has an invalid length.
[  288.626157][T12690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.707715][T12695] syzkaller0: mtu greater than device maximum
[  289.176877][T12721] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  289.213940][T12721] Cannot find set identified by id 0 to match
[  289.526319][T12735] vlan3: entered allmulticast mode
[  290.002196][T12765] netlink: 'syz.2.1807': attribute type 39 has an invalid length.
[  290.330250][T12783] syzkaller0: entered promiscuous mode
[  290.335999][T12783] syzkaller0: entered allmulticast mode
[  290.339553][T12776] block nbd1: server does not support multiple connections per device.
[  290.353256][T12776] block nbd1: shutting down sockets
[  290.418615][T12775] block nbd1: server does not support multiple connections per device.
[  290.427654][T12775] block nbd1: shutting down sockets
[  290.589728][T12796] __nla_validate_parse: 6 callbacks suppressed
[  290.589755][T12796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'.
[  290.645130][T12799] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  290.652776][T12796] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  290.764395][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1814'.
[  290.799758][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1817'.
[  290.815270][T12809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1817'.
[  290.887490][T12799] 8021q: adding VLAN 0 to HW filter on device bond5
[  290.905522][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'.
[  291.177208][T12825] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1820'.
[  291.193884][T12819] syzkaller0: entered promiscuous mode
[  291.200669][T12819] syzkaller0: entered allmulticast mode
[  291.735323][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1828'.
[  292.136308][T12878] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  292.208182][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'.
[  292.211196][T12887] netlink: 'syz.1.1835': attribute type 21 has an invalid length.
[  292.238194][T12885] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1836'.
[  292.255045][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  292.294060][T12887] netlink: 'syz.1.1835': attribute type 21 has an invalid length.
[  292.296684][ T8574] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  292.356938][ T8574] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  292.374240][ T8574] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  292.393056][ T8574] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  292.658106][T12902] syzkaller0: entered promiscuous mode
[  292.664627][T12902] syzkaller0: entered allmulticast mode
[  293.186463][T12930] netlink: 'syz.4.1846': attribute type 13 has an invalid length.
[  293.209746][T12930] netlink: 'syz.4.1846': attribute type 17 has an invalid length.
[  293.478936][ T1219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.490532][T12930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.947208][ T1219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.567021][T12987] netlink: 'syz.3.1862': attribute type 27 has an invalid length.
[  295.451595][T13036] veth1_to_bond: entered promiscuous mode
[  295.479573][T13028] sctp: [Deprecated]: syz.1.1872 (pid 13028) Use of int in max_burst socket option.
[  295.479573][T13028] Use struct sctp_assoc_value instead
[  295.490043][T13036] veth1_to_bond: entered allmulticast mode
[  295.923042][T13050] netlink: 'syz.4.1883': attribute type 2 has an invalid length.
[  296.504245][T13071] __nla_validate_parse: 10 callbacks suppressed
[  296.504269][T13071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1886'.
[  296.527126][T13071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1886'.
[  297.528106][T13116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1897'.
[  297.793190][T13127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1899'.
[  298.417713][T13138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1903'.
[  298.668904][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'.
[  298.724731][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'.
[  298.845907][T13173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.947693][T13173] tipc: Disabling bearer <eth:syzkaller0>
[  299.057548][T13186] bridge3: entered promiscuous mode
[  299.069320][T13186] bridge3: entered allmulticast mode
[  299.148537][T13192] netlink: 'syz.1.1917': attribute type 1 has an invalid length.
[  299.196802][T13192] netlink: 'syz.1.1917': attribute type 10 has an invalid length.
[  299.226670][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1917'.
[  299.273199][T13197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1916'.
[  299.289141][T13198] wg1 speed is unknown, defaulting to 1000
[  299.295519][T13198] wg1 speed is unknown, defaulting to 1000
[  299.310801][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'.
[  299.401147][T13198] wg1 speed is unknown, defaulting to 1000
[  299.456014][T13198] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  299.475518][T13198] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  299.521426][T13198] wg1 speed is unknown, defaulting to 1000
[  299.530882][T13198] wg1 speed is unknown, defaulting to 1000
[  299.540818][T13198] wg1 speed is unknown, defaulting to 1000
[  299.549043][T13198] wg1 speed is unknown, defaulting to 1000
[  299.557402][T13198] wg1 speed is unknown, defaulting to 1000
[  299.571810][T13198] wg1 speed is unknown, defaulting to 1000
[  299.645510][T13198] wg1 speed is unknown, defaulting to 1000
[  300.331140][T13219] bond6: option all_slaves_active: invalid value (13)
[  300.377461][T13241] netlink: 'syz.0.1925': attribute type 9 has an invalid length.
[  300.389956][T13219] bond6 (unregistering): Released all slaves
[  300.398756][T13242] sctp: [Deprecated]: syz.3.1926 (pid 13242) Use of int in maxseg socket option.
[  300.398756][T13242] Use struct sctp_assoc_value instead
[  300.515803][T13222] bond6: option all_slaves_active: invalid value (13)
[  300.529773][T13222] bond6 (unregistering): Released all slaves
[  300.607766][T13227] wg1 speed is unknown, defaulting to 1000
[  301.304175][T13282] wg1 speed is unknown, defaulting to 1000
[  301.515672][T13295] __nla_validate_parse: 8 callbacks suppressed
[  301.515694][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1938'.
[  301.599409][T13294] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  301.611455][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'.
[  301.612682][T13294] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  301.696193][T13291] dvmrp6: entered allmulticast mode
[  301.714751][T13294] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  301.730111][T13294] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  301.790316][T13294] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  301.801362][T13294] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  301.889710][T13294] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  301.900687][T13294] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  302.078152][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.095084][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  302.138422][ T6807] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.147675][ T6807] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  302.176361][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.190810][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  302.238969][ T8574] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.265844][ T8574] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  302.295685][T13310] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1945'.
[  302.465199][T13321] wg1 speed is unknown, defaulting to 1000
[  302.624190][T13332] netlink: 'syz.2.1948': attribute type 1 has an invalid length.
[  302.756874][T13325] nbd1: detected capacity change from 0 to 127
[  302.786986][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'.
[  302.797060][T13332] bond3: entered promiscuous mode
[  302.802639][T13332] 8021q: adding VLAN 0 to HW filter on device bond3
[  302.804349][T13326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  302.816760][T13326] IPv6: NLM_F_CREATE should be set when creating new route
[  302.824098][T13326] IPv6: NLM_F_CREATE should be set when creating new route
[  302.896226][T13326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.044585][T13338] 8021q: adding VLAN 0 to HW filter on device bond3
[  303.056448][T13338] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  303.069670][T13338] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  303.086405][T13338] bond3: (slave wireguard0): making interface the new active one
[  303.100222][T13338] wireguard0: entered promiscuous mode
[  303.108685][T13338] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  303.147117][ T5830] block nbd1: Receive control failed (result -32)
[  303.481766][T13358] syzkaller0: entered promiscuous mode
[  303.493917][T13371] can: request_module (can-proto-0) failed.
[  303.497482][T13358] syzkaller0: entered allmulticast mode
[  303.524658][T13376] ieee802154 phy1 wpan1: encryption failed: -90
[  303.536955][T13376] ieee802154 phy1 wpan1: encryption failed: -90
[  303.563245][T13376] ieee802154 phy1 wpan1: encryption failed: -90
[  304.587916][T13391] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1958'.
[  304.597869][T13391] unsupported nlmsg_type 40
[  305.811899][T13429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1970'.
[  306.169992][T13444] wg1 speed is unknown, defaulting to 1000
[  306.427978][T13448] wg1 speed is unknown, defaulting to 1000
[  306.475849][T13451] wg1 speed is unknown, defaulting to 1000
[  306.533348][T13454] syzkaller0: entered promiscuous mode
[  306.539018][T13454] syzkaller0: entered allmulticast mode
[  306.585847][T13457] netlink: 'syz.3.1977': attribute type 4 has an invalid length.
[  306.725744][ T6806] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.745673][ T6806] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.757730][ T6806] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.774566][ T6806] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  306.988379][T13472] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.008938][T13472] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.128103][T13479] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1983'.
[  307.179503][T13472] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.225718][T13472] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.342563][T13472] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.366754][T13472] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.411632][T13496] netlink: 'syz.0.1986': attribute type 1 has an invalid length.
[  307.533990][T13496] 8021q: adding VLAN 0 to HW filter on device bond3
[  307.555968][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'.
[  307.576227][T13472] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.602588][T13472] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.665498][T13508] ipvlan2: entered allmulticast mode
[  307.674259][T13508] bond3: entered allmulticast mode
[  307.697869][T13509] erspan0: entered promiscuous mode
[  307.704210][T13509] macvtap1: entered promiscuous mode
[  307.710573][T13509] macvtap1: entered allmulticast mode
[  307.716435][T13509] erspan0: entered allmulticast mode
[  307.731759][T13506] erspan0: left allmulticast mode
[  307.737874][T13506] erspan0: left promiscuous mode
[  307.802669][T13519] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  307.906192][T13515] wg1 speed is unknown, defaulting to 1000
[  308.088056][T13528] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  308.178930][ T8574] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.193640][ T8574] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.284517][ T8574] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.294545][ T8574] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.349521][ T8574] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.358582][ T8574] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.374774][T13530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1994'.
[  308.394041][ T8574] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.423728][ T8574] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.735111][T13547] wg1 speed is unknown, defaulting to 1000
[  308.869975][T13557] netlink: 'syz.1.1998': attribute type 1 has an invalid length.
[  308.883496][T13557] netlink: 'syz.1.1998': attribute type 2 has an invalid length.
[  309.169299][T13566] netlink: 'syz.4.2004': attribute type 1 has an invalid length.
[  309.177684][T13566] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2004'.
[  309.396941][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  309.414389][T13585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.417300][T13583] sctp: [Deprecated]: syz.0.2008 (pid 13583) Use of struct sctp_assoc_value in delayed_ack socket option.
[  309.417300][T13583] Use struct sctp_sack_info instead
[  309.691128][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'.
[  309.692030][T13600] ieee802154 phy1 wpan1: encryption failed: -22
[  309.725406][T13594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2010'.
[  309.756742][T13594] pim6reg1: tun_chr_ioctl cmd 1074025677
[  309.769423][T13594] pim6reg1: linktype set to 805
[  309.870555][T13607] wg1 speed is unknown, defaulting to 1000
[  310.263811][T13613] wg1 speed is unknown, defaulting to 1000
[  310.311820][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'.
[  311.134403][T13651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2025'.
[  311.682816][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2032'.
[  311.694469][T13671] netlink: 'syz.2.2032': attribute type 12 has an invalid length.
[  311.918248][T13680] netlink: 'syz.0.2033': attribute type 4 has an invalid length.
[  312.349578][T13697] C: renamed from team_slave_0
[  312.383743][T13697] netlink: 'syz.1.2040': attribute type 4 has an invalid length.
[  312.419180][T13697] netlink: 'syz.1.2040': attribute type 1 has an invalid length.
[  312.438114][T13697] netlink: 'syz.1.2040': attribute type 2 has an invalid length.
[  312.464477][T13697] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2040'.
[  312.490538][T13697] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  312.731491][T13715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2043'.
[  312.768858][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'.
[  312.841102][T13718] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.900999][T13719] vlan0: entered allmulticast mode
[  312.906302][T13719] bond1: entered allmulticast mode
[  312.924267][T13718] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  312.938732][T13718] bond1: (slave macvlan0): Enslaving as an active interface with a down link
[  312.957867][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.022012][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.093628][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.130266][T13732] syzkaller1: entered promiscuous mode
[  313.146078][T13732] syzkaller1: entered allmulticast mode
[  313.163130][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.248606][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.334954][T13738] netlink: 'syz.3.2049': attribute type 1 has an invalid length.
[  313.350023][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.540076][T13738] bond6: entered promiscuous mode
[  313.580785][T13738] 8021q: adding VLAN 0 to HW filter on device bond6
[  313.615731][T13718] bond1: (slave macvlan1): Error -98 calling set_mac_address
[  313.999639][T13756] netlink: 'syz.0.2055': attribute type 39 has an invalid length.
[  314.248260][T13754] syzkaller1: entered promiscuous mode
[  314.254321][T13754] syzkaller1: entered allmulticast mode
[  314.795891][T13793] wg1 speed is unknown, defaulting to 1000
[  314.841306][T13801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2065'.
[  315.402358][T13814] Àÿ: renamed from team_slave_1
[  315.548535][T13819] wg1 speed is unknown, defaulting to 1000
[  315.670105][T13818] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2068'.
[  315.697496][T13818] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2068'.
[  315.709896][T13818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.161990][T13795] netlink: 'syz.2.2065': attribute type 1 has an invalid length.
[  316.213853][T13795] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  316.582975][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'.
[  316.724320][T13836] kthread_run failed with err -4
[  317.044365][T13864] wg1 speed is unknown, defaulting to 1000
[  317.069552][T13867] sctp: [Deprecated]: syz.4.2081 (pid 13867) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.069552][T13867] Use struct sctp_sack_info instead
[  317.289705][T13867] syzkaller0: entered promiscuous mode
[  317.295242][T13867] syzkaller0: entered allmulticast mode
[  317.426444][T13878] wg1 speed is unknown, defaulting to 1000
[  317.879215][T13896] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2089'.
[  317.897763][T13889] wg1 speed is unknown, defaulting to 1000
[  317.993911][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2089'.
[  318.089886][T13897] wg1 speed is unknown, defaulting to 1000
[  318.158719][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'.
[  318.914963][T13927] wg1 speed is unknown, defaulting to 1000
[  318.946693][T13929] "syz.1.2098" (13929) uses obsolete ecb(arc4) skcipher
[  319.005427][T13939] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2100'.
[  319.071582][T13940] dvmrp8: entered allmulticast mode
[  319.149789][T13944] netlink: zone id is out of range
[  319.156881][T13944] netlink: zone id is out of range
[  319.162491][T13944] netlink: set zone limit has 8 unknown bytes
[  319.201838][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'.
[  319.236426][T13940] wg1 speed is unknown, defaulting to 1000
[  319.640021][T13938] dvmrp8: left allmulticast mode
[  319.941487][T13977] netlink: 'syz.2.2112': attribute type 1 has an invalid length.
[  319.950163][T13977] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2112'.
[  319.988936][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'.
[  320.013004][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'.
[  320.048581][T13977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.234839][T13996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2114'.
[  320.274853][T13980] wg1 speed is unknown, defaulting to 1000
[  320.756828][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.886237][T14010] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2120'.
[  320.922273][T14010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  321.238756][T14031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.117967][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  322.397020][T14059] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  323.058284][T14081] __nla_validate_parse: 5 callbacks suppressed
[  323.058307][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'.
[  323.233295][T14090] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  323.360593][T14069] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.907060][T14069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.939326][T14114] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2147'.
[  323.961343][T14069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.328386][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'.
[  324.630183][   T49] wg1 speed is unknown, defaulting to 1000
[  324.636916][   T14] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.660476][   T49] syz0: Port: 1 Link DOWN
[  324.661028][   T14] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.762606][   T14] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.773162][   T14] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.805770][T14092] wg1 speed is unknown, defaulting to 1000
[  324.805797][   T14] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.822002][   T14] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.830897][   T14] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.841891][   T14] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.059748][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'.
[  325.273048][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'.
[  325.530347][T14183] netlink: 'syz.4.2159': attribute type 1 has an invalid length.
[  325.572014][T14183] 8021q: adding VLAN 0 to HW filter on device bond6
[  325.700070][T14191] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2160'.
[  325.766232][T14195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2161'.
[  325.818272][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'.
[  325.851277][T14195] macvlan0: entered allmulticast mode
[  325.882078][T14195] veth1_vlan: entered allmulticast mode
[  325.894442][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  326.151414][T14219] wg1 speed is unknown, defaulting to 1000
[  326.183431][T14227] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2171'.
[  326.196014][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'.
[  326.334093][T14232] wg1 speed is unknown, defaulting to 1000
[  326.678490][T14236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.690801][T14236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.816026][T14236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.828184][T14236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.031154][T14236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.041979][T14236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.260839][T14236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.334652][T14236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.916413][   T61] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.936074][   T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.990766][ T6807] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  328.007595][ T6807] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.054412][   T61] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  328.067177][   T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.153387][   T61] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  328.165450][   T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.184925][T14271] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  328.479387][T14296] syzkaller0: entered promiscuous mode
[  328.482726][T14297] __nla_validate_parse: 47 callbacks suppressed
[  328.482754][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'.
[  328.495308][T14296] syzkaller0: entered allmulticast mode
[  328.605007][T14284] wg1 speed is unknown, defaulting to 1000
[  328.611552][T14303] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2190'.
[  328.819747][T14306] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  328.887783][T14308] wg1 speed is unknown, defaulting to 1000
[  329.099113][T14328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.182738][T14328] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.240747][T14284] netlink: 'syz.0.2186': attribute type 13 has an invalid length.
[  329.285876][T14284] netlink: 'syz.0.2186': attribute type 17 has an invalid length.
[  329.290535][T14335] netlink: 'syz.4.2196': attribute type 30 has an invalid length.
[  329.329275][T14336] netlink: 'syz.4.2196': attribute type 30 has an invalid length.
[  329.340577][T14284] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  329.792491][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'.
[  329.902727][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'.
[  329.936740][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'.
[  329.953184][T14370] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.966756][T14368] netlink: 'syz.3.2202': attribute type 12 has an invalid length.
[  329.987551][T14368] netlink: 'syz.3.2202': attribute type 11 has an invalid length.
[  330.104766][T14374] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  330.122319][T14383] sit0: entered promiscuous mode
[  330.149703][T14383] netlink: 'syz.0.2206': attribute type 1 has an invalid length.
[  330.177262][T14383] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2206'.
[  330.530916][T14405] pimreg: entered allmulticast mode
[  330.599298][T14414] wg1 speed is unknown, defaulting to 1000
[  330.870775][T14420] bond9: option min_links: invalid value (18446744073709551612)
[  330.879098][T14420] bond9: option min_links: allowed values 0 - 2147483647
[  330.935383][T14420] bond9 (unregistering): Released all slaves
[  331.096438][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'.
[  331.115157][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'.
[  331.274590][T14433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2219'.
[  331.275559][T14444] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2221'.
[  331.360828][T14444] hsr_slave_0: left promiscuous mode
[  331.375768][T14444] hsr_slave_1: left promiscuous mode
[  331.474825][T14454] netlink: 'syz.4.2223': attribute type 13 has an invalid length.
[  331.484722][T14454] netlink: 'syz.4.2223': attribute type 17 has an invalid length.
[  331.503839][T14454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  331.527437][   T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  331.604302][T14454] wg1 speed is unknown, defaulting to 1000
[  331.882057][T14474] wg1 speed is unknown, defaulting to 1000
[  332.194217][T14486] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.406061][T14507] netlink: 'syz.1.2233': attribute type 58 has an invalid length.
[  332.437711][   T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.160245][T14543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.248343][T14563] wg1 speed is unknown, defaulting to 1000
[  347.310537][T14568] wg1 speed is unknown, defaulting to 1000
[  348.211469][T14601] __nla_validate_parse: 9 callbacks suppressed
[  348.211491][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.240150][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.259935][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.290996][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.305593][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.316711][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.387596][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.424816][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.440026][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.450458][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  348.461679][T14601] bridge0: port 4(macsec0) entered blocking state
[  348.468443][T14601] bridge0: port 4(macsec0) entered forwarding state
[  348.475535][T14601] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.482770][T14601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.490343][T14601] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.497641][T14601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.515410][T14601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.544012][T14616] syzkaller0: left promiscuous mode
[  348.550103][T14616] syzkaller0: left allmulticast mode
[  348.589738][T14613] wg1 speed is unknown, defaulting to 1000
[  348.717625][T14620] batadv0 (unregistering): left allmulticast mode
[  349.139291][T14625] openvswitch: netlink: Message has 16 unknown bytes.
[  349.435206][T14631] wg1 speed is unknown, defaulting to 1000
[  349.472473][T14637] wg1 speed is unknown, defaulting to 1000
[  349.654063][T14647] geneve2: entered promiscuous mode
[  349.673589][ T6807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.692807][ T6807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.751269][ T6807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.765163][ T6807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.945651][T14654] wg1 speed is unknown, defaulting to 1000
[  350.293807][T14664] nbd: socks must be embedded in a SOCK_ITEM attr
[  350.509318][T14679] wg1 speed is unknown, defaulting to 1000
[  350.664103][T14690] netlink: 'syz.3.2277': attribute type 10 has an invalid length.
[  350.754830][T14682] wg1 speed is unknown, defaulting to 1000
[  351.241402][T14707] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  351.478234][    C1] ------------[ cut here ]------------
[  351.484152][    C1] ODEBUG: free active (active state 0) object: ffff888056350090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  351.498403][    C1] WARNING: CPU: 1 PID: 14708 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  351.508087][    C1] Modules linked in:
[  351.512285][    C1] CPU: 1 UID: 0 PID: 14708 Comm: syz.0.2282 Not tainted syzkaller #0 PREEMPT(full) 
[  351.521749][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  351.531895][    C1] RIP: 0010:debug_print_object+0x16b/0x1e0
[  351.537818][    C1] Code: 4c 89 ff e8 67 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 17 3e ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  351.557538][    C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296
[  351.563660][    C1] RAX: 1983be16d6fdf700 RBX: dffffc0000000000 RCX: ffff88804f768000
[  351.571731][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  351.579798][    C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  351.587892][    C1] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a395360
[  351.595999][    C1] R13: ffffffff8bbf1280 R14: ffff888056350090 R15: ffffffff8b6cf7a0
[  351.604070][    C1] FS:  00007f71bf9fd6c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  351.613095][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  351.619767][    C1] CR2: 000020000000c038 CR3: 000000005a2a4000 CR4: 00000000003526f0
[  351.627837][    C1] Call Trace:
[  351.631151][    C1]  <IRQ>
[  351.634048][    C1]  debug_check_no_obj_freed+0x3a2/0x470
[  351.639727][    C1]  ? rose_timer_expiry+0x4cb/0x600
[  351.645407][    C1]  kfree+0x115/0x6d0
[  351.649415][    C1]  rose_timer_expiry+0x4cb/0x600
[  351.654475][    C1]  ? call_timer_fn+0x155/0x5f0
[  351.659331][    C1]  call_timer_fn+0x17e/0x5f0
[  351.663967][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  351.669535][    C1]  ? call_timer_fn+0xbe/0x5f0
[  351.674254][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  351.679503][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  351.684759][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.690052][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  351.695567][    C1]  __run_timer_base+0x61a/0x860
[  351.700625][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  351.706119][    C1]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  351.712483][    C1]  run_timer_softirq+0xb7/0x180
[  351.717451][    C1]  handle_softirqs+0x286/0x870
[  351.722288][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  351.727152][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  351.732514][    C1]  __irq_exit_rcu+0xca/0x1f0
[  351.737311][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  351.742573][    C1]  irq_exit_rcu+0x9/0x30
[  351.746945][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  351.752631][    C1]  </IRQ>
[  351.755591][    C1]  <TASK>
[  351.758521][T14720] netlink: 'syz.1.2283': attribute type 13 has an invalid length.
[  351.758544][T14720] netlink: 'syz.1.2283': attribute type 17 has an invalid length.
[  351.774266][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  351.780446][    C1] RIP: 0010:ip_finish_output2+0xa81/0x1160
[  351.786341][    C1] Code: 80 3c 28 00 74 08 48 89 df e8 ab b9 71 f8 48 8b 1b 48 8b 44 24 40 42 80 3c 28 00 4c 8b 74 24 48 74 08 4c 89 f7 e8 8f b9 71 f8 <41> 2b 1e 83 e3 f0 31 ff 48 89 de e8 2f 09 0c f8 85 db 0f 84 ef 00
[  351.806058][    C1] RSP: 0018:ffffc9001a437380 EFLAGS: 00000246
[  351.812235][    C1] RAX: 1ffff1100eff310a RBX: ffff888028a05090 RCX: 0000000000000002
[  351.820413][    C1] RDX: ffff88804f768000 RSI: 000000000000000e RDI: 0000000000000011
[  351.828503][    C1] RBP: ffffc9001a4374a8 R08: ffffffff8f7ce577 R09: 1ffffffff1ef9cae
[  351.836580][    C1] R10: dffffc0000000000 R11: fffffbfff1ef9caf R12: 0000000000000000
[  351.844608][    C1] R13: dffffc0000000000 R14: ffff888077f98850 R15: 000000000000000e
[  351.852800][    C1]  ? ip_finish_output2+0x452/0x1160
[  351.858126][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  351.863654][    C1]  ? ip_skb_dst_mtu+0x18d/0xb70
[  351.868623][    C1]  ? ip_skb_dst_mtu+0x917/0xb70
[  351.873532][    C1]  ? ip_finish_output+0x33a/0x3f0
[  351.878658][    C1]  ip_send_skb+0x74/0x100
[  351.883088][    C1]  udp_send_skb+0xaf1/0x14c0
[  351.887885][    C1]  udp_sendmsg+0x195a/0x2170
[  351.892892][    C1]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  351.898585][    C1]  ? __pfx_udp_sendmsg+0x10/0x10
[  351.903574][    C1]  ? do_wp_page+0x22eb/0x5800
[  351.908397][    C1]  ? sock_rps_record_flow+0x19/0x410
[  351.913749][    C1]  ? inet_sendmsg+0x29c/0x370
[  351.918548][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.923885][    C1]  __sock_sendmsg+0x19c/0x270
[  351.928684][    C1]  ____sys_sendmsg+0x52d/0x830
[  351.933507][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.938905][    C1]  ? import_iovec+0x74/0xa0
[  351.941101][T14727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.943468][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  351.957157][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.962460][    C1]  ? __might_fault+0xb0/0x130
[  351.967237][    C1]  __sys_sendmmsg+0x227/0x430
[  351.971976][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  351.977301][    C1]  ? __pfx_do_futex+0x10/0x10
[  351.982191][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  351.987164][    C1]  do_syscall_64+0xfa/0xfa0
[  351.991740][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.997891][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.004083][    C1]  ? clear_bhb_loop+0x60/0xb0
[  352.008867][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.012678][T14727] rdma_op ffff88804cd301f0 conn xmit_rdma 0000000000000000
[  352.014820][    C1] RIP: 0033:0x7f71beb8f6c9
[  352.026484][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.046246][    C1] RSP: 002b:00007f71bf9fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  352.054972][    C1] RAX: ffffffffffffffda RBX: 00007f71bede5fa0 RCX: 00007f71beb8f6c9
[  352.063041][    C1] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004
[  352.071093][    C1] RBP: 00007f71bec11f91 R08: 0000000000000000 R09: 0000000000000000
[  352.079244][    C1] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000
[  352.087310][    C1] R13: 00007f71bede6038 R14: 00007f71bede5fa0 R15: 00007ffe0eefceb8
[  352.095437][    C1]  </TASK>
[  352.098600][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  352.105920][    C1] CPU: 1 UID: 0 PID: 14708 Comm: syz.0.2282 Not tainted syzkaller #0 PREEMPT(full) 
[  352.115330][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  352.125411][    C1] Call Trace:
[  352.128728][    C1]  <IRQ>
[  352.131588][    C1]  dump_stack_lvl+0x99/0x250
[  352.136314][    C1]  ? __asan_memcpy+0x40/0x70
[  352.140929][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.146189][    C1]  ? __pfx__printk+0x10/0x10
[  352.150840][    C1]  vpanic+0x237/0x6d0
[  352.154836][    C1]  ? __pfx_vpanic+0x10/0x10
[  352.159400][    C1]  panic+0xb9/0xc0
[  352.163156][    C1]  ? __pfx_panic+0x10/0x10
[  352.167594][    C1]  __warn+0x31b/0x4b0
[  352.171592][    C1]  ? debug_print_object+0x16b/0x1e0
[  352.176922][    C1]  ? debug_print_object+0x16b/0x1e0
[  352.182148][    C1]  report_bug+0x2be/0x4f0
[  352.186497][    C1]  ? debug_print_object+0x16b/0x1e0
[  352.191767][    C1]  ? debug_print_object+0x16b/0x1e0
[  352.196995][    C1]  ? debug_print_object+0x16d/0x1e0
[  352.202203][    C1]  handle_bug+0x84/0x160
[  352.206458][    C1]  exc_invalid_op+0x1a/0x50
[  352.210985][    C1]  asm_exc_invalid_op+0x1a/0x20
[  352.215846][    C1] RIP: 0010:debug_print_object+0x16b/0x1e0
[  352.221673][    C1] Code: 4c 89 ff e8 67 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 17 3e ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  352.241286][    C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296
[  352.247362][    C1] RAX: 1983be16d6fdf700 RBX: dffffc0000000000 RCX: ffff88804f768000
[  352.255343][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  352.263332][    C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  352.271354][    C1] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a395360
[  352.279495][    C1] R13: ffffffff8bbf1280 R14: ffff888056350090 R15: ffffffff8b6cf7a0
[  352.287481][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  352.293145][    C1]  debug_check_no_obj_freed+0x3a2/0x470
[  352.298723][    C1]  ? rose_timer_expiry+0x4cb/0x600
[  352.303855][    C1]  kfree+0x115/0x6d0
[  352.307768][    C1]  rose_timer_expiry+0x4cb/0x600
[  352.312742][    C1]  ? call_timer_fn+0x155/0x5f0
[  352.317521][    C1]  call_timer_fn+0x17e/0x5f0
[  352.322114][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  352.327598][    C1]  ? call_timer_fn+0xbe/0x5f0
[  352.332306][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  352.337448][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.342756][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.347966][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  352.353439][    C1]  __run_timer_base+0x61a/0x860
[  352.358333][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  352.363745][    C1]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  352.370015][    C1]  run_timer_softirq+0xb7/0x180
[  352.374886][    C1]  handle_softirqs+0x286/0x870
[  352.379672][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  352.384448][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  352.389751][    C1]  __irq_exit_rcu+0xca/0x1f0
[  352.394395][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  352.399656][    C1]  irq_exit_rcu+0x9/0x30
[  352.403907][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  352.409560][    C1]  </IRQ>
[  352.412514][    C1]  <TASK>
[  352.415458][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.421449][    C1] RIP: 0010:ip_finish_output2+0xa81/0x1160
[  352.427296][    C1] Code: 80 3c 28 00 74 08 48 89 df e8 ab b9 71 f8 48 8b 1b 48 8b 44 24 40 42 80 3c 28 00 4c 8b 74 24 48 74 08 4c 89 f7 e8 8f b9 71 f8 <41> 2b 1e 83 e3 f0 31 ff 48 89 de e8 2f 09 0c f8 85 db 0f 84 ef 00
[  352.446912][    C1] RSP: 0018:ffffc9001a437380 EFLAGS: 00000246
[  352.452987][    C1] RAX: 1ffff1100eff310a RBX: ffff888028a05090 RCX: 0000000000000002
[  352.460963][    C1] RDX: ffff88804f768000 RSI: 000000000000000e RDI: 0000000000000011
[  352.468956][    C1] RBP: ffffc9001a4374a8 R08: ffffffff8f7ce577 R09: 1ffffffff1ef9cae
[  352.476930][    C1] R10: dffffc0000000000 R11: fffffbfff1ef9caf R12: 0000000000000000
[  352.484906][    C1] R13: dffffc0000000000 R14: ffff888077f98850 R15: 000000000000000e
[  352.492908][    C1]  ? ip_finish_output2+0x452/0x1160
[  352.498130][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  352.503603][    C1]  ? ip_skb_dst_mtu+0x18d/0xb70
[  352.508466][    C1]  ? ip_skb_dst_mtu+0x917/0xb70
[  352.513334][    C1]  ? ip_finish_output+0x33a/0x3f0
[  352.518383][    C1]  ip_send_skb+0x74/0x100
[  352.522728][    C1]  udp_send_skb+0xaf1/0x14c0
[  352.527351][    C1]  udp_sendmsg+0x195a/0x2170
[  352.531984][    C1]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  352.537557][    C1]  ? __pfx_udp_sendmsg+0x10/0x10
[  352.542496][    C1]  ? do_wp_page+0x22eb/0x5800
[  352.547295][    C1]  ? sock_rps_record_flow+0x19/0x410
[  352.552589][    C1]  ? inet_sendmsg+0x29c/0x370
[  352.557277][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.562609][    C1]  __sock_sendmsg+0x19c/0x270
[  352.567305][    C1]  ____sys_sendmsg+0x52d/0x830
[  352.572086][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.577419][    C1]  ? import_iovec+0x74/0xa0
[  352.582024][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  352.586718][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.591963][    C1]  ? __might_fault+0xb0/0x130
[  352.596680][    C1]  __sys_sendmmsg+0x227/0x430
[  352.601378][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  352.606600][    C1]  ? __pfx_do_futex+0x10/0x10
[  352.611330][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  352.616199][    C1]  do_syscall_64+0xfa/0xfa0
[  352.620718][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.626789][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.632944][    C1]  ? clear_bhb_loop+0x60/0xb0
[  352.637689][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.643609][    C1] RIP: 0033:0x7f71beb8f6c9
[  352.648035][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.667648][    C1] RSP: 002b:00007f71bf9fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  352.676186][    C1] RAX: ffffffffffffffda RBX: 00007f71bede5fa0 RCX: 00007f71beb8f6c9
[  352.684164][    C1] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004
[  352.692151][    C1] RBP: 00007f71bec11f91 R08: 0000000000000000 R09: 0000000000000000
[  352.700128][    C1] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000
[  352.708109][    C1] R13: 00007f71bede6038 R14: 00007f71bede5fa0 R15: 00007ffe0eefceb8
[  352.716207][    C1]  </TASK>
[  352.719571][    C1] Kernel Offset: disabled
[  352.723988][    C1] Rebooting in 86400 seconds..