last executing test programs:

4m54.318332155s ago: executing program 3 (id=175):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r1, 0x4}, 0x6)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0xffffffffffffffca) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
unshare(0x22020400) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3}, {@in=@multicast1, 0x0, 0x3c}, @in=@loopback, {}, {0xfffffffffffffffc, 0x200, 0x2000000000}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e21, @in6=@mcast1}}]}, 0x10c}}, 0x0) (async)
ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000002900))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
syz_emit_ethernet(0x7c, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, 0x0, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7aa3b272}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r5, 0x0, 0x0, 0x4}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r9=>0x0}) (async, rerun: 32)
r10 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000140)=0x8, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0}) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000008601ce9100"/28], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r13, &(0x7f00000002c0)="eab5de4d"}, 0x20) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB="178e09fd7d3144111c3b6985eccc5c99ad49b62f627fd5918780914529e9e25a072b8721f502be0ff2dc62fa8a3417f4cccc2d0ffbb283e83097db67"], 0x66}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
r15 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt$inet6_int(r15, 0x29, 0x3c, &(0x7f00000000c0)=0x25, 0x4)

4m54.071761255s ago: executing program 3 (id=178):
socket$nl_netfilter(0x10, 0x3, 0xc)

4m53.753313713s ago: executing program 3 (id=181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000002ac0)="09adda0000006dce87b100568f51", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
socket(0x25, 0x2, 0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

4m52.746225046s ago: executing program 3 (id=184):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='cpuhp_enter\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='cpuhp_enter\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_state_release\x00', r1, 0x0, 0x1843}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000689b2fbb54dd4fcc0000000095586d5578b2ff4b368ad54d226ee0930529551b53e0aa79401630280432d08dbf3c0c6dce5a8213ebebf4cc02411941cd632501acc16bbaf2866f8ef2fa5d25f545f50472981f7dcc3eb3dabcbd1dda40b2c6c5dc7608c8b4595696e8b36b358e271c9346b6854d9106dd374bd16b530f0b4ae7"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000689b2fbb54dd4fcc0000000095586d5578b2ff4b368ad54d226ee0930529551b53e0aa79401630280432d08dbf3c0c6dce5a8213ebebf4cc02411941cd632501acc16bbaf2866f8ef2fa5d25f545f50472981f7dcc3eb3dabcbd1dda40b2c6c5dc7608c8b4595696e8b36b358e271c9346b6854d9106dd374bd16b530f0b4ae7"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x1b, 0x0, @void}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x240088c1}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'})
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2186}]}, 0x24}}, 0x44090)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x200448d9)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
socket(0x840000000002, 0x3, 0x100) (async)
r9 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r9, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000000240), 0x0, 0xa090) (async)
sendmmsg$inet(r9, &(0x7f0000000240), 0x0, 0xa090)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gretap0\x00'})
socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

4m52.460898667s ago: executing program 3 (id=188):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x28}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="44f3000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a00000038cf449f6070d6315e019af32fa5200a9fd85d3a541c25e21947926d431d963ac24751bcc10bbb23a92eb0596bd89cff8ac0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f"], 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1ffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x48)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ebb8e3", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r11}, 0x20)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x54, r9, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x5}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x44)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

4m52.013566503s ago: executing program 3 (id=194):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x64}}, 0x810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c000)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x6b}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2c89dacbfcd61e38db22ad8864b60a6e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x40}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfffe}, @NL80211_ATTR_SSID={0xa, 0x34, @random="675913a9cb24"}, @NL80211_ATTR_SSID={0x21, 0x34, @random="942834eae1225f8ba1af45b3a99728f7c676b70b936f8343b9f8dffcc6"}]}, 0x74}}, 0xdc73b4b4330262fa)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@private=0xd, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x2, 0x5, 0x7)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r7}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004012}, 0x0)

4m51.42449179s ago: executing program 32 (id=194):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x64}}, 0x810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c000)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x6b}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2c89dacbfcd61e38db22ad8864b60a6e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x40}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfffe}, @NL80211_ATTR_SSID={0xa, 0x34, @random="675913a9cb24"}, @NL80211_ATTR_SSID={0x21, 0x34, @random="942834eae1225f8ba1af45b3a99728f7c676b70b936f8343b9f8dffcc6"}]}, 0x74}}, 0xdc73b4b4330262fa)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@private=0xd, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x2, 0x5, 0x7)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r7}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004012}, 0x0)

4m26.053715647s ago: executing program 1 (id=377):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r1 = socket(0x400000000010, 0x2, 0x0) (async, rerun: 64)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x170, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x140, 0x2, [@TCA_FLOW_ACT={0x13c, 0x9, 0x0, 0x1, [@m_mirred={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0xe9, 0x6, "23dff8d0dc1e3271756616ee9fe7192a2f247b4b5e876de2adad2ec659e9a3a5c82808eaccbbcdfd2bf0e6f1b9cb20700183ffeb9cbc6eaff8e2ae341881ac7f5cd2948083cf9b87eba1e26376335d9984a14dbf716fcacc37ec9b69cf9cebffdd792aed4c09fa0aaaf2438e13a23f9b8eaffb6482a3a3f7c34513804a4f91e4fd7c9bba7b41848ecee60c611656706da38a7c04585f337548f8197052050bb4dcc7753d1aa2b1859a5105902a3bff2a18ffba1b37806f90654b1dadfe94735148530581f57a062190725005ed8f31375ace6a05b73fef886a367dc447f1bbeaf11f677e2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20}, 0x0)

4m25.641413895s ago: executing program 1 (id=382):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}]}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x21, 0x7105, 0x6, 0xe1, 0x70507, 0xffffffffffffffff, 0xeca4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xb}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x21, 0x7105, 0x6, 0xe1, 0x70507, 0xffffffffffffffff, 0xeca4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xb}, 0x50)
r5 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000300000048000000910076657468305f6d616376746170000000626f6e6430000000000000000000000070696d7265670000000000000000000067726530000000000000000000000000ffffffffffff00ff00ffffff0180c200000100ff0000ff006e0000006e000000ef779e00000000000000000000000000000000000000000000000000000000000000000000000800000000000000fcff"]}, 0x142)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

4m25.25517876s ago: executing program 1 (id=389):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x709d2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3246e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20084001}, 0x20040040)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4040850}, 0x40)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x18, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'vlan0\x00', <r8=>0x0})
r9 = gettid()
r10 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="049c01000750050008001300", @ANYRES32=r9, @ANYBLOB="140003007600"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

4m25.026985399s ago: executing program 5 (id=392):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0)
bind$802154_raw(r1, &(0x7f00000001c0)={0x24, @none={0x0, 0x3}}, 0x14)
socket$inet_smc(0x2b, 0x1, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$rxrpc(r1, &(0x7f0000000200)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, 0x24)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = socket(0x2b, 0x80801, 0x1)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffd79}, 0x1, 0x0, 0x0, 0x50}, 0xd19f10a3338029a8)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0xffff8000, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x200408c0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)

4m23.966013957s ago: executing program 1 (id=399):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000801)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda2}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)

4m23.863306976s ago: executing program 5 (id=401):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x88, 0xf, 0x8000ff, 0xf7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x8, 0x11, 0x2080}}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000070000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff2065b8d3f9465bf100b700000000000000850000007b0000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x35, 0xfffffff9, 0x7, 0x46c8}, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0xa4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '@}\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xee8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}}, 0x811) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) (async)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r7, 0x0, 0x0, 0x1a, 0x0, &(0x7f0000000700)=""/26, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}, 0x4c)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r8, 0x0, 0x8, 0xffffffffffffffff, &(0x7f00000004c0)=0x3d)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500400008000b4000000000300004a02c0001800b00010074756e6e656c00001c000280080001400000000108000340000000f5080002400000000c0900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
close(0x3)

4m23.693811869s ago: executing program 5 (id=403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)}, 0x2002)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r2, &(0x7f00000000c0)={0x2d, 0x1, 0x1}, 0xc)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x6, @private1, 0x8}, @in6={0xa, 0x4e23, 0x3, @private1, 0x1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xbe5, @remote, 0x6}, @in={0x2, 0x4e23, @remote}], 0xac)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900021373797a31000000000c000780080012400000000211000300"/88], 0x58}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x12, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r10], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x40c0080)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="300d2b000406010400000000000000000f0000010900020073797a3100000000050001040007000300050001000700000096252ee90a5c820de479be2f374396674bcf3f1611d938c3cf656690e5ef8e83ae1064dfd714fccc937824d7fc28f13c6e3ee047ea80c39884996aa8f529263922d8af37ab62146fef2d823498e81274c70c118ad38c6400740aaaf0cf465f5515bf5b8e0a3d3795502563d4c1fb8a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a346fe89aae", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461000400028008000a00000000a078a600f2ab94358457cccbf25b32046ba60d8bbca1d74bd47e08f54d5274dd4ee0bb07edabed2f325429ea73f99ead9cce8ef60183ea71a121492d82c7bf70a270cd5e8b5469f42aad", @ANYRES32=r14, @ANYBLOB="7c5aa286e479f71eb8dd0489ed5cbf591f222622f4e14d3bfbbe3c9d68656792e782bc20576efb0fc2f4771a3d10e84cbaf03f0e2e29394c78873b90"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

4m22.80596564s ago: executing program 5 (id=409):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4)
r1 = socket$inet6(0xa, 0xa, 0x976)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000a00)={&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="00000000a39e3f091b94c6b41e26e7683a9a4c4f93e8852495bf5bbf20c40ef99ef9c96217067303bc8563f6abe985a8812ef3a46baf460c81dd9b277adac56a60f6013f39d782e6876b5a08bc021d8cad97249e4769b2730ee1aff242b1cbefe775d6d21ff8c3e5c0b37782de1b81a4fb929d82fec35581a049f3da43c3cf73e3fac88731ac021dd1370c54a738019423ca2fc537a08f8c0736c99eac121adc2c0b8cd3e54a9bab56a4ecf17947f5543c"], 0x18, 0x40488d1}, 0x8000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r7, 0x0, 0x21, &(0x7f0000000080)=0xffffffff, 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff4b)
ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'})
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80)
sendmmsg$inet(r1, &(0x7f0000000700), 0x0, 0x0)

4m22.785227471s ago: executing program 1 (id=410):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
close(r0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf252100000005002000fe00000009001f0070687931000000000c000500000000000000000066840d1c15381963b47dd61bc04e3b05048aef0e109b92dd749606c163bda582b805b19e534393e81638c686379e8ffb8367c4f27ff1fab5b0ebd2710a01c198bea3c6b5acba78054adfafec3b07cbabf689be47e294408bf5deffa8bc4c894b13eef784623032e0fa0c9c35dce8166348a80761c963f6ef"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8c00)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010001f7f00000000010000000a0d0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009006f68010062f5c564000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x1)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet6(0xa, 0x2, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newqdisc={0x114, 0x24, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x2}, {0xffe0, 0xd}, {0xd, 0xb}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xfc, 0x4, 0x1, 0x1, 0x0, 0xf4fe, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xa, 0xfa, 0x2, 0x0, 0x1, 0x3, 0x0, 0x4}}, {0xc, 0x2, [0xf, 0xf626, 0x7, 0x4]}}, {{0x1c, 0x1, {0x5, 0x1, 0x2, 0x38fa, 0x1, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x7, 0xee, 0x1, 0x3, 0x1, 0x80, 0x20b, 0x5}}, {0xe, 0x2, [0x14, 0xaed, 0x5, 0xf43d, 0x11c5]}}, {{0x1c, 0x1, {0x1, 0xbf, 0xffff, 0x3, 0x2, 0x5e7, 0xe, 0x2}}, {0x8, 0x2, [0x7fff, 0x80]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x114}}, 0x24048081)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)

4m22.627160846s ago: executing program 5 (id=411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r1, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="48000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000100180012800e0001006970366772657461700000000400028005de0f000200000008000d00ffffff7f"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x4, 0x6, 0xff, 0x10, 0x4, 0x81}, &(0x7f0000000100)=0x9c)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000140)=""/108, &(0x7f0000000240)=0x6c)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/36, 0x24}, &(0x7f00000003c0), 0x6}}], 0x30}, 0x0)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x2004})
epoll_wait(r9, &(0x7f0000000340)=[{}, {}], 0x2, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x7, @private1, 0xa86}, @in6={0xa, 0x4e21, 0x3b23, @mcast1, 0xd1f0}, @in={0x2, 0x4e02, @private=0xa010102}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4, 0x6, @local, 0x80000001}], 0x84)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x4)
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000200)={0x281, 0x1})
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
unshare(0x8000080)

4m22.324477503s ago: executing program 1 (id=414):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000880)=@ethtool_eeprom={0xc, 0x2, 0xfffffff8, 0xf8, "b4076112bea26e6315032e9e7ba562c5bbbb3176aae8c39cd050c98e0a17bb526f4573c6e9c730e3b8f5df138c849e5cd1f347f30fec7aa11c18af743d05827093b44628b3e2f0c1fd6da0e5764bd1455516461bc8cd851f47f988ab48f6f8ec83616c42bc5ca0ef124eef2f29bd94434182fc1f2ec2fa221cede0ba69bc8cc51b6b4e35ef74345b33020b940da52a2f57c6baeb4b1ab94b2230aeb073719931c9df060676354e95f7a89ff8e85a9a90a9aab86b32a74b3468679d041b42e630bc94562490da1e4c596f38212ddbf881ab75e67008b54036df6a3c80ddc8247251b47b0edc114b3edefb850b08c67813c3038729f48466bf"}}) (async)
r3 = socket(0x15, 0x5, 0x0)
unshare(0x22020400) (async)
bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x9, 0x5, 0x100, 0xfffffffffffffff0}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x500000, 0xc7, &(0x7f0000000580)=""/199, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x2, 0x3, 0xd, 0x6}], 0x10, 0x8}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r5], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1fc}, 0x10}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) (async)
accept$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c)

4m21.928969269s ago: executing program 33 (id=414):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000880)=@ethtool_eeprom={0xc, 0x2, 0xfffffff8, 0xf8, "b4076112bea26e6315032e9e7ba562c5bbbb3176aae8c39cd050c98e0a17bb526f4573c6e9c730e3b8f5df138c849e5cd1f347f30fec7aa11c18af743d05827093b44628b3e2f0c1fd6da0e5764bd1455516461bc8cd851f47f988ab48f6f8ec83616c42bc5ca0ef124eef2f29bd94434182fc1f2ec2fa221cede0ba69bc8cc51b6b4e35ef74345b33020b940da52a2f57c6baeb4b1ab94b2230aeb073719931c9df060676354e95f7a89ff8e85a9a90a9aab86b32a74b3468679d041b42e630bc94562490da1e4c596f38212ddbf881ab75e67008b54036df6a3c80ddc8247251b47b0edc114b3edefb850b08c67813c3038729f48466bf"}}) (async)
r3 = socket(0x15, 0x5, 0x0)
unshare(0x22020400) (async)
bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x9, 0x5, 0x100, 0xfffffffffffffff0}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x500000, 0xc7, &(0x7f0000000580)=""/199, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x2, 0x3, 0xd, 0x6}], 0x10, 0x8}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r5], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1fc}, 0x10}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) (async)
accept$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c)

4m21.655657796s ago: executing program 5 (id=418):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
syz_emit_ethernet(0x66, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x30, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty}}}}}}}, 0x0)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/177, 0xb1}], 0x1, &(0x7f0000000c80)=""/68, 0x44}, 0xcce1}], 0x1, 0x20, 0x0)
sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="b5", 0x1}, {&(0x7f0000000180)="ab5c3aecf3632747", 0x8}], 0x2}}], 0x2, 0x0)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, 0x0)
sendto$netrom(r2, &(0x7f0000000140)="d387410b26689b837a37113f24f97669569bbaaa01eae6e5fb1cc80b55c4581a4c09f6f2d2568146", 0x28, 0x800, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x23, 0x6, 0x9)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="a65eef25c81cf0ca02b0cdaae1e2c6573e331e7f94c2cafe817d6026876843983d35d42b0bdb9abbe8b70a1898d8e311ab8144263211f94dd82d21e99696eba813a88aaed1cbdb75e19aafb493067854fad77b7239b3f2c0aee0ed54dea33a32e21d7bb4499b57c0fa9cc5a8fc2315cd10896bedc4b18519bdd0f2a3c7d6be0e44b447dd16a3c02d72b3619aaa19311e009bfe241ca933ff6fd5ce9a4a7e83599f239397f370e998fbe854fad7d80bcb331b929a0fe83d7801d7e85b88eee93ec2e47536a48d3969b7360681b6989553e4dc3bb81c06", 0xd6)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000500012800e0001006970366772657461700000003c000280060018000200000005000b0002000000080014000900000006000f00ff01000008000c000e00000008000d000700000008000400ff"], 0x78}}, 0x0)

4m21.162823384s ago: executing program 34 (id=418):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
syz_emit_ethernet(0x66, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x30, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty}}}}}}}, 0x0)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/177, 0xb1}], 0x1, &(0x7f0000000c80)=""/68, 0x44}, 0xcce1}], 0x1, 0x20, 0x0)
sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="b5", 0x1}, {&(0x7f0000000180)="ab5c3aecf3632747", 0x8}], 0x2}}], 0x2, 0x0)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, 0x0)
sendto$netrom(r2, &(0x7f0000000140)="d387410b26689b837a37113f24f97669569bbaaa01eae6e5fb1cc80b55c4581a4c09f6f2d2568146", 0x28, 0x800, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x23, 0x6, 0x9)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="a65eef25c81cf0ca02b0cdaae1e2c6573e331e7f94c2cafe817d6026876843983d35d42b0bdb9abbe8b70a1898d8e311ab8144263211f94dd82d21e99696eba813a88aaed1cbdb75e19aafb493067854fad77b7239b3f2c0aee0ed54dea33a32e21d7bb4499b57c0fa9cc5a8fc2315cd10896bedc4b18519bdd0f2a3c7d6be0e44b447dd16a3c02d72b3619aaa19311e009bfe241ca933ff6fd5ce9a4a7e83599f239397f370e998fbe854fad7d80bcb331b929a0fe83d7801d7e85b88eee93ec2e47536a48d3969b7360681b6989553e4dc3bb81c06", 0xd6)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000500012800e0001006970366772657461700000003c000280060018000200000005000b0002000000080014000900000006000f00ff01000008000c000e00000008000d000700000008000400ff"], 0x78}}, 0x0)

6.667941526s ago: executing program 4 (id=2430):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1)
r2 = socket(0x8, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
socket(0x80000000000000a, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e20, 0x51fadfce, @local}}}, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r7, 0x0, 0x0)
sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)

6.269702464s ago: executing program 4 (id=2433):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x6c, r2, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x400005}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ef33ddb98e6780e4b372ea54c7beef915d564c90c2006e246d39191a8e00991e3e112b4fa5cdbd909843acf94b002237da0f5ffdd17a60181df1a489383c158f30758ce6aec99cee2c38f16206e046f194b00650a91cdc09ef3a985a0bc399643dc22d", 0x6f)
r3 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000093c0)=@delchain={0x5c0, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x590, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_ACT={0x550, 0x3, [@m_connmark={0x54c, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x519, 0x6, "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"}, {0xc}, {0xc}}}]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x4080}, 0xc810)
recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)

5.952631228s ago: executing program 4 (id=2436):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0x0, 0x6, 0x10000}, 0x28) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4cdf5024000000c3000100038234090000cb010500070003010000"], 0x4c}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20) (async)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x1, 0x4) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000"], 0x50) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000500)) (async)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
r8 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)

5.799422718s ago: executing program 6 (id=2437):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f001a00"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

5.725296035s ago: executing program 4 (id=2438):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@private=0xa010100, @multicast1})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xafbeec54da1e82f}, 0x40)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4000040)

5.649340219s ago: executing program 4 (id=2439):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000280)) (async, rerun: 32)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32)
sendto$inet6(r6, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async, rerun: 32)
sendmmsg$inet6(r6, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32)
shutdown(r6, 0x1) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000380)={0x4, 0x0, 0x8, 0x9d}, 0x10) (async)
close(r4) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffe0, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008800) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.593947295s ago: executing program 6 (id=2440):
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000200)={@any, 0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @remote}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f67}, 0x94)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000140)={0x1, 'gre0\x00', {}, 0x8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080))
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r9, &(0x7f00000000c0), 0x10)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
socket$inet6_mptcp(0xa, 0x1, 0x106)

4.509913388s ago: executing program 2 (id=2442):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c0004000000000028004380"], 0x48}}, 0x4040)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000680), 0x4}, {&(0x7f0000000800)=""/210, 0xfffffd28}], 0x5}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
sendto$rose(r1, &(0x7f0000000180)="d9013c0a942f753a8419cf384b84b2c0c9b141c230757c12640fc40b9f665a8f9b48be", 0x23, 0x800, &(0x7f00000003c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
socket(0x2, 0xa, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

3.156990479s ago: executing program 6 (id=2443):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
pwrite64(r0, 0x0, 0x0, 0xa)

3.152078737s ago: executing program 0 (id=2444):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close(0x3) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', <r1=>0x0, 0x7, 0x40, 0x3, 0x80, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x68, 0x0, 0x3, 0x2d, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0xf, [{@remote, 0x8}]}, @end, @lsrr={0x83, 0x13, 0x40, [@remote, @remote, @broadcast, @multicast2]}, @lsrr={0x83, 0x7, 0x6e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x71, 0x0, 0x1, [0x1, 0x2, 0x7, 0x4]}, @noop, @end, @noop, @timestamp_prespec={0x44, 0x2c, 0x73, 0x3, 0x3, [{@multicast1, 0x8}, {@broadcast}, {@local, 0x6}, {@empty, 0x2a65}, {@remote, 0x200000}]}]}}}}}) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@func={0x8, 0x0, 0x0, 0xc, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @ptr={0x6}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/113, 0x59, 0x71, 0x1}, 0x28)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000440)={@private0, 0x43, r1})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', r1, r2, 0x4, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.097936422s ago: executing program 4 (id=2445):
socket$inet6(0xa, 0x80002, 0x88)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580), 0x10, 0x0, 0x2, 0x0, 0x0, 0x24000954}, 0x8005)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4c014}, 0x20000404)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f4ffffffffffffff00000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01b8010000000000000000010000080900010073797a30000000000900030073797a320000000090000000060a01040000000000000000010080340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c00010062697477697365002000028008000340000000020800014000000014080002400000001204000400001100010000000000000000000700000a4dc20f7192c6a14347c826accc00"/259], 0x104}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '.]\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0xffffffff}, 0x10)
shutdown(r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

2.992212863s ago: executing program 2 (id=2447):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000340)=0x8a40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x514}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r11 = socket$inet(0x2, 0x3, 0xd)
getsockopt$inet_mreqsrc(r11, 0x0, 0x53, 0x0, &(0x7f0000000040))

2.921480569s ago: executing program 0 (id=2448):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010011641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_RATE64={0x0, 0x8, 0xc42}, @TCA_POLICE_RESULT, @TCA_POLICE_RATE={0x0, 0x2, [0x7f, 0x10000, 0x1ff, 0x3, 0xffffffff, 0x3, 0xb, 0x4, 0x1, 0x8, 0x58, 0xd, 0xff, 0x3, 0x7, 0xf, 0x4, 0xfb, 0x5, 0x7, 0x5, 0x8, 0x8, 0x9, 0xffffffff, 0x0, 0x1, 0xc78, 0x6, 0x2, 0x5, 0x6, 0x8, 0x3, 0x80, 0xdfc, 0x4, 0xfffff800, 0x1000, 0x8001, 0xda, 0xd8f7, 0x6, 0x4, 0x2, 0x6, 0x9, 0x6, 0x8001, 0x80000001, 0x1, 0x6, 0x8b, 0x0, 0x2, 0xffff, 0x7b0b, 0x3e8, 0xfffffffb, 0x0, 0xb, 0x6, 0x9, 0x9, 0x4, 0x1, 0x14, 0x1, 0x7, 0x6, 0x7, 0xfffffffa, 0x5, 0x401, 0x123, 0x9, 0xfffffff7, 0xb, 0xc6c7, 0xfff, 0x0, 0xa, 0x8, 0x40, 0x3ec800, 0x5, 0x6, 0x2, 0x441e, 0x82d, 0x9, 0x9, 0xffff, 0x6, 0x6, 0x9, 0x6, 0x100000, 0xe787f09, 0x7, 0x7, 0x5, 0xe, 0x3, 0xffffffff, 0xffffffff, 0x9, 0x1, 0x8, 0x2, 0xc000000, 0x6, 0xff, 0x7, 0x8, 0x891, 0x8000000, 0xbc000000, 0x40, 0xffff, 0x7, 0x4, 0x4, 0x4, 0x5, 0x0, 0x3, 0x8, 0x2, 0x7, 0x4, 0x590b, 0x0, 0x5, 0x7f, 0x6, 0xff, 0x6, 0x8, 0x8, 0x8, 0x3, 0x1000, 0x1, 0x80000000, 0x871, 0x1e, 0x7f, 0x1, 0xe, 0xfffffe00, 0x631, 0x0, 0x400000, 0xc, 0x2, 0x5, 0x5, 0x4, 0x3, 0xffff2c3b, 0x1, 0x7, 0x80000001, 0x3, 0x85, 0x100, 0x53, 0x5, 0x8, 0x100, 0x6, 0x9, 0x4, 0xdb, 0x7fff, 0x1, 0x6, 0xb06, 0xe36, 0x3, 0x7, 0x10000, 0x3a, 0x670, 0xe8d4, 0x1, 0xdb, 0x3, 0x401, 0x4, 0x1, 0x5, 0x3, 0x81, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x8, 0x0, 0x4, 0x2, 0xfffffeff, 0x3, 0x5, 0x3, 0xa8be, 0x4, 0x7fff, 0x1a19, 0x3, 0x4c42762b, 0x3, 0x3, 0x7, 0x0, 0x80000000, 0x1283, 0x5, 0xfffffffe, 0x6, 0x40, 0x0, 0x466, 0x5, 0x5, 0x443, 0x0, 0x8, 0x2, 0x9, 0x5, 0x1, 0x3, 0x1, 0x7, 0x800, 0x1ff, 0x0, 0xebed, 0x8ce5, 0xc9ad, 0x5, 0x9d1a, 0xb, 0x4, 0x9, 0x9, 0x821, 0xfffffff8, 0xb27, 0x6, 0x6, 0xe]}, @TCA_POLICE_RESULT={0x0, 0x5, 0x609}, @TCA_POLICE_RESULT={0x0, 0x5, 0xf}, @TCA_POLICE_TBF={0x0, 0x1, {0x1, 0x7, 0x8, 0x6, 0x0, {0x1, 0x0, 0x7, 0x6, 0xfffc, 0xffffffff}, {0x7, 0x1, 0x5, 0x10, 0x2, 0xfffffffb}, 0x2, 0x6, 0x5}}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x500}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x7, 0x1, {0x7, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
pwrite64(r12, &(0x7f0000000100)="09131187b26f78cb236d3248aff4a3ae75e513fd32048df7391f9560275ee6e025f60b51ee4073cac96191390aa4de74495c45352dcd2a445b151e84352ab77667c0da1f9137ea68c1dd10b1178246665c6ba17a0e1d5cafa54008731b169a066621704e3bd6b952b0423eac4237645e14db3420c5f51c721fc236094e8d3793b4675ab23f092cd1a9fb2e3b1bf8d4192d18d9519526db47894ed548e0a8827632e22af96b93c5f2d3d3b75465fdf95120247ba5872c39a6c10e911c85", 0xbd, 0x27e)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r13=>0x0})
sendto$packet(r1, &(0x7f0000000080)="330320000100140000007ef52f555f2a0c0900992802000000000000f79ddd3baa4b1f0f858c4632f470", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r13, 0x1, 0x62, 0x6, @local}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)

2.854003841s ago: executing program 7 (id=2449):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9)
r1 = socket$inet6(0xa, 0x6, 0xfb)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

2.525742963s ago: executing program 7 (id=2450):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040))
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x0, 0x2}, {0x0, 0x5}, {0x15, 0x2}, {0x6, 0x1}, {0x5, 0x2}, {0x5a, 0x4}, {0x1, 0x7}, {0x8, 0x3}, {0x2d, 0x6}, {0x8}, {0x0, 0x7}, {0xcb, 0x1}, {}, {0x2, 0x3}, {0x40, 0x7}, {0x8, 0x1}, {0x1, 0x5}, {0x4, 0x2}], "2c2171015e06a0b0"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x8, 0x4}, {0x0, 0x2}, {0x81, 0x5}, {0x4, 0x3}], "f75986692b01d7cc"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "61f5d1d052b1597a"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x36, 0x4}, {0x80, 0x1}], "d11e5b14fbe6bab1"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x7, 0x4}, {0x4, 0x3}, {0x7f, 0x6}, {0x6, 0x4}, {0xbb, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x4}, {0xe3, 0x2}, {0x9, 0x6}], "d6d45f94d97e369c"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc6, 0x2}, {0x34, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0x7}, {0x29, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x9, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0xb, 0x2}, {0x0, 0x6}, {0xd, 0x4}, {0xff, 0x7}, {0x6, 0x7}], "a0c609babc3af661"}}]}, 0xd0}}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aa4054fa30f6df50126fbf5f47efa4b9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x2008040)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000540)={0x0, 'syzkaller1\x00', {0x2}, 0xfff})
listen(r2, 0x0) (async)
listen(r2, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000880)={&(0x7f0000000580), 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x254, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc837, 0x12}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xffc0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x2, 0x8, 0x0, 0x2]}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="e5937708327c", {0xb, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x9, @val={0x8c, 0x18, {0xd3f, "59eb79cbc349", @long="be0b2d890b132073eebfdd879e5a6658"}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1162}, @NL80211_ATTR_FRAME={0x1a2, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x32a}, @device_b, @broadcast, @random="4ffcbf3a3055", {0x0, 0x8}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x2, @val={0x10, 0x1, 0x9f}, [{0xdd, 0x2b, "5d5d0588f410e2e8e8a0f6bdda450af7deee6a902e45336fd6cd6eebd5bda9a53eccf585810ac669792c15"}, {0xdd, 0x69, "903aa94c00f8ea297758acb90b91670c978b0324d6321ebe442e2766f6ed9dbdaa779019ab3c3926ad8473968bc62a8d77d70e103672e7f01335408f193d6524f07af2882a2d657efd435ce3299aa0d9db4bbc87fac02750fc7be3f6e5ec9fe4ad3cfb0a09cbbaaef7"}, {0xdd, 0x26, "905c3fcb64f33e6270ae4001284f9e5786f850694402ce1e4076071b7edd290a3eed489ffe36"}, {0xdd, 0x39, "e879b86b3844550fed0e2d66161eb4ecd35e8716b04f48cd0f63056f02f700177a3ac043987562f55358fb04f038fd3aaef0505749317cd6ba"}, {0xdd, 0x7c, "c07a46b55c4c27bcaab0a486cf189521b5a284ffb3809eba397592fb76c67e97fc3514c214cb2726e427b7651fc71d48c4f4761e7a2218c318aaf2cd82b78487a7a4ee94b00989dcbed3b5ca5b1c2a8cfc85cb50130faccdc7e8b4898aa53e33d9de8b2c98a19cd1f1c51fff6012f971f15ce8f0d8ef3d0f8ed73771"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x200]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40001}, 0x4) (async)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000880)={&(0x7f0000000580), 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x254, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc837, 0x12}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xffc0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x2, 0x8, 0x0, 0x2]}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="e5937708327c", {0xb, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x9, @val={0x8c, 0x18, {0xd3f, "59eb79cbc349", @long="be0b2d890b132073eebfdd879e5a6658"}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1162}, @NL80211_ATTR_FRAME={0x1a2, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x32a}, @device_b, @broadcast, @random="4ffcbf3a3055", {0x0, 0x8}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x2, @val={0x10, 0x1, 0x9f}, [{0xdd, 0x2b, "5d5d0588f410e2e8e8a0f6bdda450af7deee6a902e45336fd6cd6eebd5bda9a53eccf585810ac669792c15"}, {0xdd, 0x69, "903aa94c00f8ea297758acb90b91670c978b0324d6321ebe442e2766f6ed9dbdaa779019ab3c3926ad8473968bc62a8d77d70e103672e7f01335408f193d6524f07af2882a2d657efd435ce3299aa0d9db4bbc87fac02750fc7be3f6e5ec9fe4ad3cfb0a09cbbaaef7"}, {0xdd, 0x26, "905c3fcb64f33e6270ae4001284f9e5786f850694402ce1e4076071b7edd290a3eed489ffe36"}, {0xdd, 0x39, "e879b86b3844550fed0e2d66161eb4ecd35e8716b04f48cd0f63056f02f700177a3ac043987562f55358fb04f038fd3aaef0505749317cd6ba"}, {0xdd, 0x7c, "c07a46b55c4c27bcaab0a486cf189521b5a284ffb3809eba397592fb76c67e97fc3514c214cb2726e427b7651fc71d48c4f4761e7a2218c318aaf2cd82b78487a7a4ee94b00989dcbed3b5ca5b1c2a8cfc85cb50130faccdc7e8b4898aa53e33d9de8b2c98a19cd1f1c51fff6012f971f15ce8f0d8ef3d0f8ed73771"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x200]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40001}, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1c300000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x40081) (async)
sendmsg$NFNL_MSG_ACCT_GET(r11, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1c300000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x40081)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={<r12=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={<r13=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r14=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000c40), 0x8)
ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f0000000c80))
read$nci(r15, &(0x7f0000000cc0)=""/61, 0x3d)
ioctl$PPPIOCSPASS(r15, 0x40107447, &(0x7f0000000d40)={0x8, &(0x7f0000000d00)=[{0xacd7, 0x4, 0x8, 0x7fffffff}, {0xffdf, 0x46, 0x9d, 0x200}, {0x5, 0x0, 0x0, 0x3}, {0xfff, 0xa4, 0x80, 0x81}, {0x6, 0x80, 0xe9, 0x4}, {0x80, 0x7, 0x4, 0x7ff}, {0x5, 0x5, 0xe}, {0x7, 0x61, 0x10, 0xb}]})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r15)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r15, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000091}, 0x44000)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x47}]}, 0x40}}, 0x4000)

2.384306588s ago: executing program 0 (id=2451):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'gretap0\x00', <r0=>0x0, 0x700, 0x8000, 0x5, 0x5af, {{0x24, 0x4, 0x3, 0x7, 0x90, 0x67, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x89, 0x2}, @end, @generic={0x89, 0xd, "fcb89dbee699954ad60b7a"}, @noop, @lsrr={0x83, 0x7, 0x6e, [@broadcast]}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x5, 0x9, "ebe2fac7b4829a"}, {0x0, 0x2}, {0x0, 0x6, "496358d7"}, {0x2, 0x6, '\bN,<'}, {0x6, 0xf, "cd7dfa545c4df5296b91b11190"}, {0x2, 0x7, "51f6b43f94"}, {0x6, 0xa, "cd7c01ed3817f045"}, {0x2, 0x2}]}, @rr={0x7, 0x7, 0xea, [@broadcast]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x0, [0x4]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "9d56d24c0bdd7dcc"}]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={<r1=>0xffffffffffffffff, 0x645, 0x9, 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0700000000000000000015000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008001000000010000000000000000002f27440c6684e6660000"], 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="1812000006000000000000000036bc0300000042", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000006000000986a0c0001000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x7e, &(0x7f0000000100)=""/126, 0x41100, 0x20, '\x00', r0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x1, 0x44}, 0x10, 0x29635, r2, 0x6, &(0x7f0000000500)=[r3, r4, r5], &(0x7f0000000000)=[{0x1, 0x2, 0x3}, {0x2, 0x1, 0xa, 0xb}, {0x7, 0x3, 0xd, 0xc}, {0x3, 0x2, 0xa, 0xf3443efa3650cda0}, {0x1, 0x2, 0xf, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x8}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5cc53a083d9b761b000000000000000096f09ea4002f95da0a65abf893e5929f5c", 0x3a}], 0x1}}], 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000500000063018e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0xb}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
openat$cgroup_ro(r8, &(0x7f0000000840)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x318000, 0x800, 0xffffffff, 0x1}, 0x20)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000007c0)=0x3, 0x4)
connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
socket(0xa, 0x3, 0x3a)

2.33375684s ago: executing program 6 (id=2452):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [], {0x14, 0x10}}, 0x28}}, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x3, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66, 0x0, 0x0, 0x0, 0x800000}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0xfffffffffffffffe)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000000)={{r0}, "aea1a40bfce2e7d4746181c42bde68d7396ff7a9dd41baa35ecba2432b13ab571e81b0a7717cf1866f96e43ce7ed513ec35d2fc8622413cd18b46d9f7a39b19b600ab2f5dd07e834899a6b0f26e8edae980e55b8331ef80f4ee86e310b6b604ecc8a20b21a25993710feb32846242ca0bd73f50697d4a797ccf4bcde2c81cf355991d61040b4387bc29cb75ba825f46484a4f099f9f81daf7f818b00c11da995e9d00d6b8c182103669fe588a6a667de02b50c843957e0dd152ba65d84f29e3bc67221bdfd8c8d36e9e1ecd1c02b7db165922d3225b3a074fda3d9a5bc28c1fcd5a94cb882a2bba2b2ebd1184c7773bc1ec547a863a29ee3146ab54896e77c104d68120363d59d7eb5217054f45f8a1df7e477634945271e764501407290c043945a9a0b5d3e56760ce5308bec506ea4abdb8ddb7155b5650e1625792753868421b6bccad6165c5dce3cd6b24fb3624cd54b300fc97ef4b3ae1ac708a0bebbaf1b68be260bbd307277342a3e58284c829736d11396963ffb4643e3d794a2fb335e174d1cff384471221ba86126edfcfc930be4582c247916c74ffad7ef406e8dbc992de8fde7e94c4d6037ceadbe7e486bb3d3e28ca37969ac85d10b707e391f081f4764a40ea1f1702a6143cd686454739782adde2f42d4442655cbab84a738adc4777a6001b86825e26bf0d4b9272d7633c303e00339fdac944e11db1b19c0f857c06c5f2679f7e1e2d109286cb4afaa422344921936a03ae3f8e728668672ae84627d65fff67864c830baa7bca608f25a9f40b0fd32f4095dfc9390266d18477f235c8bc13e5a409f719aea8abceae35059d69d2dc8ae01745b010a7c4610ed7a572df2b152681430dff2e60896f41e13129b67c5608f3d1977565204806a0348dd4290871daf912b7fcbc4e5e1be908ee0b04112055c2690ba239bd7885c064501c260155803b1335e20c0dcee079c11516006f5f73734bc9243390e0c4ad28c65ee0725db8a6860ad17309d1ff792fe26de384ba66de52c098ec49c9dbde549a8c36216ab0470fc82fdf0a0e82cdc9d5e71727eb138eab0e22c0e7d4e10fe839e4f1c0206a09d911df5b743f91c7505dbfac43f038f23883f55fbc7a77a21ccff21d1204f208127b5b913a517ec05dbb688300673f41b3d6dece369b97bb13f1321e36ba0e5e0da75480b04e38cdd8e2786ff29a452c5f6e80882679b0952f654bcac3aab7dcf71c95060949a3df464dda0731acfc8ae15715282a74c2a4eb91f70d9be3c6c746da564a7c0a92c4691234f9846ec2cc5b6a4a71e4a6a02754d58b6c79d70d398fc4209d7fd245ea83755cb4054c8071d783bfedf7b8c0a705a375d1d37686e6c5ffaeb6b8690a481a4a0fc85472022cd4b3842ba2bd07d0edf1a25167cbdc8888e8e2f7cc19931c9c9a1d4e7db2c72536ad3713e5f2ea5c60a855b585bcbfe99227f90eb8cc6b9c4d1652af3956cb2256e9c8e74f062023bbc698009653074b985cc0dbe601b1a12a47add5113f49346d6f2613ebbddc4b17c561789e86e99d6872e41a50a962fae7542f4241d694c7a2feb516425c4dce49efb86ac7820863496ff11743616464c753ae6d6e3dbe661c859f1b6e70748c157e142a06a923491ded0180e28af3e85edfacf6e0cb345c97101358b15d8f0ab69edaf11d6a12ccb37518f31da354d53ce24f6e38f4b7148f4fd4d861d0d12d8ff65487c93bddc38fd6a22067570ab1d82f59f237ec7a688e4b64cefecf194ed5fe73083a3f6b14d4d16fd279cea610bee905b381cd9e35943b22907051da076ca8b01ea40dedda5b28b934d2c66cab6186a8c514f93ffba2c65b99ef8d799462ac06d50ce20d413d386cc2c93e8f401619ba1cbafd216a0c31390a95c1e0064ba67dcf4fc17658fc8d4e30227e7ba620fedc8963a21594ab9b33cbff31b94b24dc45ff72abd07dd9724a3945e413ae1bf99bfc6b007440e74ecfad81cb138124c960b0725035c0e17826c97ced30d2478df1248135eae72ffcbb382c7a4617e980fdd3b0ef194203fb90c396fa2b67ed3efecd8b6286623b43fd3f6cde48744a78bd0318f0c1be312445ee2205a0277b69fd8624c5c6cf2a94fedc952a0bf643df3cf5e60eb3c132d485d0d9918372511af7f7770cfbb68f1f43548919e5fae64a457f8a9f072e09c4d89262c63c6d8cc95cc56b248fc56e1b06b0eda37d624ee7588c4b9be005fb517d13f2f9d593de62646b471f0ed1f4b1541f8fc10f6d41b87b21e89785ba52ef28f51438de7ca068f4fb7216e6bd06339124230ccaec4e76a46246139ba7cc9499ec986addf661878b8f463dde3767a269994f7617df74a40a224f724c1c9da82ab5bf437c3dc8d2ae81efcb949330178c028759284897a9069fbb7ad3535a04170bd18f752d6c18d33fba55b6bc30c911e32fe4b865479599b65f93c5dfc22c6b30a0c1330fd7e8d62b30c766de33d04fa45ea691c5959f84042f581ed4bc2c25e15799125ad5f0c61dc11a6b4ad1562d472e689c4a013c0c055189d9bf3b980260f7ddff12ed25a88e6441b3866dde9d3a7333e3cc53d14115f138f80f9c003b7e17f8554591a8e99068c5f46e4150207be30c38ab82417aaeaaa233d3b36483ddde35d1ce56577c0cef76cd19e5758fa956fe304b15507799096ff141d5bf6873fa9fb83c62f74bb95b861f3e6e282e797a01ff30a2785c9861437f1b6fc46522c7cec62de92ec0b51f70dc585dd6b2b0779f59b7e44691ee43661491107e47be71030f593774326a41c10f7eee9dc0164d8adaaa09b20845eb8ad3803e8af257c74382d46ed39204c6d3e4bd2e81d9fcfbb44257d94899587b668848565aa9cc918f78d94386b4153a1a3f3ed16764426b9da0fbdbc3d4870cda5c6f467229c43149c0897900099777d7ec050328c77f3f4052399baa28b17f35ffe4baa3bcbf40235b6f36516775ebb80822a49aecd0a813eea924ceaecf9f1c873742c720fa0d668e99c67a38e1aba668b2f306b90ce7c430c8089bc7069be6a4c6dece17e26f835bbd046215e2cd89255f6cec70561767f20713cb7397553b8c1a9feb3c21734f95cda306e3a3a7702573ccc3d3f4f3d73c17d66440b95ca53b2f3786dbd6f9560bfa10d93213f52a231ac4a1a27acb3bef4dcfebd6888ddd78dc03888a58712b813c3195314e73c9b23b32a81431cddf1307886905e17702f072554937893067f21b3a77ca89141ff9b85fd26d2115c9d810824a266f801d7d9932e86335d1e0cb1d04af038eecb3969d28585549a8e9af181f12b6592b3db7ae316e69684062503a2271c55988d61433c50a581b65d1e8f10eba5586cdfa9cb44eca8c4469ba6eb499faec6fe9fa67688d700e5f52a9b09fd5c28f8a6b8555944b0567b0eae6e71dedb12a3b484f7d02a57bf88b26535fbf9e5588172bb598c16f985a884e7cbd83b00d5bec5d49a9cd6ab0671f3dabeb280f1da58e45db53d8e85091b22ac595826f4261302029cf10a4c72022c52991215a98624b83e67bf8da2d25ad0a736842351ba5320e9d1be6f43201f46a606c23a48e2da291f2d521ffa7caec0093fd0c26492e1552435b4e591809bf189a2fd651cc561dff38a11a36a790de2425130f84b4b468309f8c6c2702feb0c0ac8ad4df0ce4ef09b043d5282ab01c8d2bce1dfbb1178d3d0feae6300b5b552c92ca2982bbca40c0012e6a9e6ec6e99adebb2c87b2df9fa10d296e1bb31cf7e21ab64a786e71f94a4669bdeab7344fa92323399fdf59f762479a58cd1284a6f13d1072c816729961483437b6623b48ae81c28600f5cb73cf23d84d6c4c69029c2d15d2525edcfaf8e480ec949bba7485bc45b19247ff5124be9e56df916d89766b8d9e2e3648fd16d4e09deebcb99fb620e6a593707b3fd4b945d8e54a734d050c8a8c0db8a2fa7d8ab7abd220537533f02e0f3a8831d522c76691f5d39cbeb33cabd36076f27aca9d7292c524eef305248430bf93e05b48125365cbe9225c1a0362d2fb6b3d3245a96b8fe4a16b6fdc51d8bc7a005b68a8cbeb767d4c6c8dfba0234676f1928e902d82402f77849bcd2ebdf4915d44ee50b9c98e3cfb8feca362ef3d76ae225fad2e966c467ee8eed8bd27caf97bed5eace0e392063000dd29584b424c5638853529f5cbc7268ac519417732e49d7ffb7f758bf9320e7d912a8772c140668c997e6bd82717f880d2bcfad1afcd4ebec6f5604d1e5ca2fb1d1e464c1b7421c26ad67a42d95c475248605d797b5f4861913c93d79619d737efe315d084fb1b87a6e56d7aa5714fc2b1b9c2903a996994f0341758126c394f91212f283d1ce01677b086905ef28795c78448bf0b15d1a7229489ae1769e557b41c9645ded921ef6441b41b2d92e1863cdf8255a7fe909d3bdf61805fb1f6a5c5d038858d4aa7b2fd5b7dfdeb1e48286d11e8ac599f9516f4d1fb7bdb582926ad25fcf50fc0f76b341701c40035ddd9b401b67263f22b1652ff298acd6f453fb99b5381f6c7ee6af70ef0b60bbcc65c9e08e76636f353d37585200035c7227ba757e37af9febede3ffc9dd02a67f8f8186fd5b40a741ff63d9697c9e3da24e062ed73455a0e4f48090d6f1e37c590e29430417fdbfade2934b260d30ffbd0fe538580d04181c1d1d2e970cb9e08452fe661b59be17ac69f56cacdaae6e1ea426eeecfa4f29966649dd4c503ecbe16bdd54d66d0ba851c313b364edd7fe060110c2311e6dd316edece0785278cd413850de5034bd94f5451b41d879cf078062e9b395a0e6360918b0ac6871d5280156bd9c60e47b0157c7ce5b4c21fe3bebaf6eba9bdbc1cd0820fd182448e3100472c3bd1ba3db4a3a142a3567a679fe95829f3b774997ddf2f6d5bfc5ab97f6edab50c1b641ffc07234703b2fa7733481944583e3c3ddd2895e263a317602fad5bbe48c615e80c47439d3ef9c61c1d15f7e5ab8b5f033aa8a67fa35c2d041062c313b910153e3ed5fbade4e9f0f12477c67e1bec7b83bc2223535e5eb83caa2676a617a50cc3b4def1bd4148656a0dac85d64a6de476ec4807500db292f4c2ef62bcff69b06f7231482d69fe21d3609fb923dc1b998254ec578717b5892829c742b88169ac8d4625a3001b61ef2b31640bf37813c58846f4d6fb4721982d0e304ac7d85dc99497cd0591cf221ea9799bdfa69d08ee4b64903bf43d6c5511126b44727b3458c8d1ee87b4a46b306bf826580b38c2279906d6830584676197fa716f94f9761d2c880e6c6b3ccd8cba7b661490854490f15aa3ca10a281a0d5957b70866640da95cd623f9ab45f1ee2c858d408e435cb15b903b287b430bdc651eaffabe7520dc30555bef96edcd6ea6355928caf1ca20c061d40e2ace5affcbdeac464770352a287100598e87e6eedf3cca22e0dfb1ff6c263bd31b9ef288fc1f694ae461021eefb0c4e34e6a57c86dee7cfd5aa72af1a7dc179513ac91c6998f1724d641d8b757d23058c39889889240ac5963e1249ee1f07f775f98c2d7d238693e2652dbfa7030d842db614cc7f0ee872a9a69802bc2e0e31936684360b578049a4f403d9a8c080d1672a8c39d501728c50a59d2b360a40bd55bc2982cd300bab65e04c1e00e85b3847231bf4621000afface5384708d29997731c3dadf3a90d1ee66939c5116d720afd564a1848440725c20240cf7665f72111d08ed5ff30f750fdaae638fc95a4655de2ea84dafaa14e3636bfb7b9224c31af5c98656593e1aae98132cae13395444a5975cd34"})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001000)={<r4=>r0, 0x80000000, 0x8, 0x2})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r3, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000001100)=[0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdd, &(0x7f0000001180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x63, 0x8, 0x8, &(0x7f0000001240)}}, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, r9})
ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r9})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000092c000000000000000008500000053000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000001480)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x41802}, 0x4880)

2.328450835s ago: executing program 7 (id=2453):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={<r5=>r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x8}, &(0x7f00000000c0)=0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x9}}, 0x0, 0x0, 0x30, 0x0, "387a0ffc862d169b0da9eedbf5a062305d1c6a1b88ec828339671a81f103b0bf64e4928cb671cac5427fb824d03df544781dc451a2bee79627aea4ab4e0297720b2497f7d784afab82a5d44c9951aa46"}, 0xd8)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r6, r0, 0x29}, 0xc)

2.274604157s ago: executing program 2 (id=2454):
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x18, 0x0, 0x0, 0x500}, 0x9c)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0))
syz_emit_ethernet(0xe2, &(0x7f00000000c0)={@local, @local, @void, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}], @llc={@snap={0xab, 0x1, "8668", "3ce8c0", 0x3, "5b0b0172c8cb7444e646c1625f943b89ce0e8d288d98ef280114f1d2882ba16998bfe7c453bd943016852888699b77e7119f1d70478c8debdd2c0bb1ce764581c2f6e5a83d2c784e91f8f89ddf9a1f57e665b96a1b5e6ee908e759d9334b5039e7d5c9e27d8b3baea13bbf78bbf462d7483cf9276875144ddd627a771d20691422420f551574bf1662ad916bddae50c8d3a241738597120a70e085206516657a4f3b709f005b607a17209c1fc328c6ec3e6b9f0446b16c66b42c053f93dbb787b54a39fcf2e81b"}}}}}}, &(0x7f0000000000)={0x1, 0x1, [0x1ba, 0xa53, 0xdd8, 0x423]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
unshare(0x22020600)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0x4}, 0x6)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

2.121746901s ago: executing program 6 (id=2455):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56542, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x2, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="be32f00266f1", 0x6}, {0x0}], 0x2}}], 0x1, 0x40000)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140c, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xb, 0x9}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048030}, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
pipe(&(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
writev(r9, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2)
writev(r9, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2)
readv(r8, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)

2.114848103s ago: executing program 7 (id=2456):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff85000000a400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31000000a54087c9b1429c0314e637dffc807410b329ee3432c74e348940d9c41ba7311632358986e0ca60c1f41f68"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}}]}]}, 0xcc}}, 0x0)

1.905677765s ago: executing program 7 (id=2457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={<r2=>r1, 0xbfc, 0x0, 0x3})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRESHEX=r2], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080)={0xf}, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x305)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="441800001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001d00080000000500010004000000"], 0x44}, 0x1, 0xba01}, 0x0)

1.400058127s ago: executing program 2 (id=2458):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20008000)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pwritev(r7, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416ef", 0xfffffd91}], 0x1, 0x5e, 0xdc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x52, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r9, &(0x7f000000a340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="9c54987038a494fa7e52258f17d6c2cc", 0x10}, {0x0}], 0x2}}], 0x1, 0x4008010)
openat$cgroup_procs(r8, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

834.671429ms ago: executing program 7 (id=2459):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000d40)=@ethtool_perm_addr={0x4b, 0x50, "4376bf829df3599efad116dd06381cd282cc9e213a0d352a0000000000000000000000000000000000000000000810435fdd0523019ae812fddf3f04b8050000007645a32388ee9abc9e57cb38034d69"}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

775.219664ms ago: executing program 0 (id=2460):
syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x9, [@multicast2, @loopback, @empty, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x5, 0x0, 0x4, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x23, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x4, 0x2, 0xb, 0xfffffffffffffff8, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x401}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@u}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7662, 0x1000, &(0x7f0000000540)=""/4096, 0x41000, 0x10, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x8, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8)

385.777629ms ago: executing program 2 (id=2461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x46, 0x0, "84938cc82adb3eed9f2281b8a0d5064cf5d6a26a8515cb45f8abb31740f6d32be235a676bfeb244e97d23745b87103744a9ca1ab21697cab6fd37fddba7b96d522139b5e9b67f45dd008afa7c9b851e0"}, 0xd8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x18, 0xa, 0x6)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe6}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xfffffffe}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28)

378.720743ms ago: executing program 0 (id=2462):
r0 = socket(0x1d, 0x802, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0x0, 0x1a, 0x0, 0x8, 0x41}, 0x28)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2})
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000004240)=0x40000009, 0xfffffffffffffdb5)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x4f00)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)

157.414289ms ago: executing program 2 (id=2463):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x18)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r4, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x6}}}, &(0x7f0000000000)=0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r8}, 0xc)

69.77823ms ago: executing program 0 (id=2464):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(r0, &(0x7f0000001100)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x13, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000a6cc2f2eb400000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r3, 0x0, 0x10000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)

0s ago: executing program 6 (id=2465):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017090000fcffffffbf00000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000000a00)=""/4097, 0x41100, 0x5}, 0x94)
write$cgroup_type(r1, &(0x7f0000000180), 0x9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4)
getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0))
syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000069078ac141400ac1e0001890bc97f003264d05663fd9f1c05000000000500000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780800"], 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x2000000000032, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000002e11000069c6c501674978458dbda298d88e252090a7a183657e8edfd88a6c4c250000001af8ff000000004f4c23565773ed81b51a88094a4e6affe4a100000500000007010000fb725ba1b7020000080099000000181100914aaf2e0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94)
r7 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977720a89"], 0xa)

kernel console output (not intermixed with test programs):

g1 speed is unknown, defaulting to 1000
[  219.246373][ T9836] netlink: 'syz.6.932': attribute type 4 has an invalid length.
[  219.346036][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.0.937'.
[  220.111857][ T9870] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  220.207303][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.942'.
[  220.646982][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'.
[  220.837964][ T6221] udevd[6221]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  220.906643][ T9894] FAULT_INJECTION: forcing a failure.
[  220.906643][ T9894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.923043][ T9894] CPU: 1 UID: 0 PID: 9894 Comm: syz.6.947 Not tainted syzkaller #0 PREEMPT(full) 
[  220.923070][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  220.923080][ T9894] Call Trace:
[  220.923088][ T9894]  <TASK>
[  220.923097][ T9894]  dump_stack_lvl+0x189/0x250
[  220.923129][ T9894]  ? __pfx____ratelimit+0x10/0x10
[  220.923156][ T9894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.923182][ T9894]  ? __pfx__printk+0x10/0x10
[  220.923202][ T9894]  ? __might_fault+0xb0/0x130
[  220.923241][ T9894]  should_fail_ex+0x414/0x560
[  220.923284][ T9894]  _copy_from_user+0x2d/0xb0
[  220.923309][ T9894]  ___sys_sendmsg+0x158/0x2a0
[  220.923334][ T9894]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.923397][ T9894]  ? __fget_files+0x2a/0x420
[  220.923415][ T9894]  ? __fget_files+0x3a0/0x420
[  220.923445][ T9894]  __sys_sendmmsg+0x227/0x430
[  220.923473][ T9894]  ? __pfx___sys_sendmmsg+0x10/0x10
[  220.923506][ T9894]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  220.923544][ T9894]  ? ksys_write+0x22a/0x250
[  220.923574][ T9894]  ? __pfx_ksys_write+0x10/0x10
[  220.923606][ T9894]  __x64_sys_sendmmsg+0xa0/0xc0
[  220.923631][ T9894]  do_syscall_64+0xfa/0xfa0
[  220.923659][ T9894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.923677][ T9894]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.923695][ T9894]  ? clear_bhb_loop+0x60/0xb0
[  220.923719][ T9894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.923737][ T9894] RIP: 0033:0x7f1009b8f6c9
[  220.923755][ T9894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.923770][ T9894] RSP: 002b:00007f100aaa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  220.923791][ T9894] RAX: ffffffffffffffda RBX: 00007f1009de5fa0 RCX: 00007f1009b8f6c9
[  220.923805][ T9894] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  220.923816][ T9894] RBP: 00007f100aaa6090 R08: 0000000000000000 R09: 0000000000000000
[  220.923828][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.923838][ T9894] R13: 00007f1009de6038 R14: 00007f1009de5fa0 R15: 00007ffd7a8feb28
[  220.923871][ T9894]  </TASK>
[  221.184075][ T5896] IPVS: starting estimator thread 0...
[  221.192137][ T9889] team1: entered promiscuous mode
[  221.192162][ T9889] team1: entered allmulticast mode
[  221.298746][ T9896] IPVS: using max 23 ests per chain, 55200 per kthread
[  221.336885][ T9905] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  222.130487][ T9926] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  222.236790][ T9931] netlink: 'syz.0.957': attribute type 4 has an invalid length.
[  222.580315][ T9936] __nla_validate_parse: 14 callbacks suppressed
[  222.580338][ T9936] netlink: 32 bytes leftover after parsing attributes in process `syz.4.960'.
[  222.876638][ T9941] netlink: 240 bytes leftover after parsing attributes in process `syz.2.963'.
[  222.910666][ T9941] netlink: 'syz.2.963': attribute type 13 has an invalid length.
[  223.071905][ T9941] veth1_vlan: left allmulticast mode
[  223.223423][ T6182] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.233839][ T6182] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.245622][ T9959] syzkaller0: entered promiscuous mode
[  223.254432][ T9959] syzkaller0: entered allmulticast mode
[  223.263985][ T6182] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.328598][ T6182] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.379378][ T9955] syzkaller0: entered promiscuous mode
[  223.384919][ T9955] syzkaller0: entered allmulticast mode
[  223.433540][ T9955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  223.624038][ T9983] syzkaller1: entered promiscuous mode
[  223.630448][ T9983] syzkaller1: entered allmulticast mode
[  223.876223][ T9997] netlink: 244 bytes leftover after parsing attributes in process `syz.2.978'.
[  224.140181][T10013] sctp: [Deprecated]: syz.7.980 (pid 10013) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.140181][T10013] Use struct sctp_sack_info instead
[  224.187438][T10006] netlink: 'syz.7.980': attribute type 15 has an invalid length.
[  224.500219][T10033] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  224.798011][T10047] syzkaller0: Caught tx_queue_len zero misconfig
[  224.838138][ T6180] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.880675][ T6174] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.903729][ T6174] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.923290][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'.
[  224.978404][ T6174] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.380451][T10059] syz.0.993: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  225.418699][T10059] CPU: 0 UID: 0 PID: 10059 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) 
[  225.418730][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  225.418743][T10059] Call Trace:
[  225.418752][T10059]  <TASK>
[  225.418761][T10059]  dump_stack_lvl+0x189/0x250
[  225.418797][T10059]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.418823][T10059]  ? __pfx__printk+0x10/0x10
[  225.418845][T10059]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  225.418871][T10059]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  225.418897][T10059]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  225.418923][T10059]  warn_alloc+0x214/0x310
[  225.418951][T10059]  ? stack_depot_save_flags+0x40/0x860
[  225.418986][T10059]  ? __pfx_warn_alloc+0x10/0x10
[  225.419016][T10059]  ? kasan_save_track+0x3e/0x80
[  225.419042][T10059]  ? __kasan_kmalloc+0x93/0xb0
[  225.419068][T10059]  ? xsk_setsockopt+0x4dc/0x8d0
[  225.419091][T10059]  ? do_sock_setsockopt+0x17c/0x1b0
[  225.419111][T10059]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  225.419128][T10059]  ? do_syscall_64+0xfa/0xfa0
[  225.419152][T10059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.419184][T10059]  __vmalloc_node_range_noprof+0x125/0x12d0
[  225.419249][T10059]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  225.419283][T10059]  ? __kasan_kmalloc+0x93/0xb0
[  225.419316][T10059]  vmalloc_user_noprof+0xad/0xf0
[  225.419342][T10059]  ? xskq_create+0xbf/0x170
[  225.419369][T10059]  xskq_create+0xbf/0x170
[  225.419398][T10059]  xsk_init_queue+0xb0/0x110
[  225.419428][T10059]  xsk_setsockopt+0x4dc/0x8d0
[  225.419454][T10059]  ? __pfx_xsk_setsockopt+0x10/0x10
[  225.419482][T10059]  ? __pfx_aa_sk_perm+0x10/0x10
[  225.419508][T10059]  ? aa_sock_opt_perm+0xff/0x1b0
[  225.419537][T10059]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  225.419556][T10059]  ? __pfx_xsk_setsockopt+0x10/0x10
[  225.419589][T10059]  do_sock_setsockopt+0x17c/0x1b0
[  225.419617][T10059]  __x64_sys_setsockopt+0x13f/0x1b0
[  225.419646][T10059]  do_syscall_64+0xfa/0xfa0
[  225.419673][T10059]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.419702][T10059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.419719][T10059]  ? clear_bhb_loop+0x60/0xb0
[  225.419743][T10059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.419761][T10059] RIP: 0033:0x7fd6c7b8f6c9
[  225.419780][T10059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.419797][T10059] RSP: 002b:00007fd6c8ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  225.419817][T10059] RAX: ffffffffffffffda RBX: 00007fd6c7de6090 RCX: 00007fd6c7b8f6c9
[  225.419831][T10059] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  225.419843][T10059] RBP: 00007fd6c7c11f91 R08: 0000000000000004 R09: 0000000000000000
[  225.419854][T10059] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.419866][T10059] R13: 00007fd6c7de6128 R14: 00007fd6c7de6090 R15: 00007ffd277f66d8
[  225.419902][T10059]  </TASK>
[  225.419938][T10059] Mem-Info:
[  225.766464][T10059] active_anon:11452 inactive_anon:0 isolated_anon:0
[  225.766464][T10059]  active_file:3342 inactive_file:39943 isolated_file:0
[  225.766464][T10059]  unevictable:1177 dirty:281 writeback:0
[  225.766464][T10059]  slab_reclaimable:11498 slab_unreclaimable:146222
[  225.766464][T10059]  mapped:37780 shmem:7596 pagetables:1101
[  225.766464][T10059]  sec_pagetables:0 bounce:0
[  225.766464][T10059]  kernel_misc_reclaimable:0
[  225.766464][T10059]  free:1261547 free_pcp:22688 free_cma:0
[  225.869931][T10059] Node 0 active_anon:47108kB inactive_anon:0kB active_file:13368kB inactive_file:159572kB unevictable:3172kB isolated(anon):0kB isolated(file):0kB mapped:152420kB dirty:1120kB writeback:0kB shmem:30148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12672kB pagetables:4248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  225.910854][T10059] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  225.942195][T10059] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  225.974726][T10059] lowmem_reserve[]: 0 2505 2505 2505 2505
[  225.981157][T10059] Node 0 DMA32 free:1135784kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47408kB inactive_anon:0kB active_file:13368kB inactive_file:159572kB unevictable:3172kB writepending:1120kB zspages:0kB present:3129332kB managed:2565132kB mlocked:1636kB bounce:0kB free_pcp:71592kB local_pcp:16036kB free_cma:0kB
[  226.056276][T10059] lowmem_reserve[]: 0 0 0 0 0
[  226.084425][T10059] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  226.196865][T10059] lowmem_reserve[]: 0 0 0 0 0
[  226.204007][T10059] Node 1 Normal free:3892796kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19940kB local_pcp:6656kB free_cma:0kB
[  226.290149][T10059] lowmem_reserve[]: 0 0 0 0 0
[  226.295001][T10059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  226.313617][T10059] Node 0 DMA32: 366*4kB (UME) 333*8kB (UME) 143*16kB (UM) 213*32kB (UM) 187*64kB (UM) 111*128kB (UME) 60*256kB (UME) 39*512kB (UME) 6*1024kB (UME) 1*2048kB (M) 259*4096kB (M) = 1143792kB
[  226.334172][T10059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  226.354946][T10059] Node 1 Normal: 193*4kB (UME) 55*8kB (UME) 40*16kB (UME) 98*32kB (UME) 27*64kB (UME) 10*128kB (UME) 3*256kB (ME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892796kB
[  226.384846][T10059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.395988][T10059] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  226.450511][T10059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.508434][T10059] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  226.555042][T10087] netlink: 'syz.6.999': attribute type 29 has an invalid length.
[  226.565725][T10059] 47551 total pagecache pages
[  226.577079][T10087] netlink: 'syz.6.999': attribute type 29 has an invalid length.
[  226.602226][T10059] 0 pages in swap cache
[  226.606445][T10059] Free swap  = 124996kB
[  226.651570][T10089] ip6_vti0 speed is unknown, defaulting to 1000
[  226.651995][T10059] Total swap = 124996kB
[  226.663394][T10059] 2097051 pages RAM
[  226.667249][T10059] 0 pages HighMem/MovableOnly
[  226.673311][T10059] 424126 pages reserved
[  226.677596][T10059] 0 pages cma reserved
[  226.697999][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'.
[  226.905665][T10087] netlink: 168 bytes leftover after parsing attributes in process `syz.6.999'.
[  227.205328][T10089] wg1 speed is unknown, defaulting to 1000
[  227.301897][T10108] ip6_vti0 speed is unknown, defaulting to 1000
[  227.312070][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  227.787469][T10127] netlink: 'syz.6.1008': attribute type 83 has an invalid length.
[  227.832204][T10127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.860499][T10127] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1008'.
[  227.992923][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'.
[  228.061492][T10108] wg1 speed is unknown, defaulting to 1000
[  228.688964][T10151] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1017'.
[  228.984978][T10177] veth1_to_bridge: mtu less than device minimum
[  229.327036][T10185] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  230.097164][T10224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.116155][T10224] syzkaller0: entered promiscuous mode
[  230.121904][T10224] syzkaller0: entered allmulticast mode
[  230.156269][T10224] tipc: Resetting bearer <eth:syzkaller0>
[  230.240223][T10222] tipc: Resetting bearer <eth:syzkaller0>
[  230.289717][T10222] tipc: Disabling bearer <eth:syzkaller0>
[  230.303599][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1037'.
[  230.505181][T10240] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.792384][T10246] bond7 (unregistering): Released all slaves
[  230.803520][T10258] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[  231.304652][T10283] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  231.413156][T10287] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  231.435981][T10287] netlink: 'syz.6.1051': attribute type 83 has an invalid length.
[  231.902285][T10302] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  232.185484][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'.
[  232.414681][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'.
[  232.523458][T10323] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  232.807889][T10340] pim6reg1: entered promiscuous mode
[  232.859944][T10340] pim6reg1: entered allmulticast mode
[  232.995695][T10345] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  233.240888][T10354] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  233.275442][T10352] can: request_module (can-proto-5) failed.
[  233.352458][T10350] bond0: entered promiscuous mode
[  233.357564][T10350] bond_slave_0: entered promiscuous mode
[  233.459508][T10350] bond_slave_1: entered promiscuous mode
[  233.477292][T10350] batadv0: entered promiscuous mode
[  233.515025][T10350] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  233.559572][T10350] 8021q: adding VLAN 0 to HW filter on device hsr1
[  233.911227][T10366] macsec1: entered promiscuous mode
[  234.184063][T10377] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1075'.
[  234.236739][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'.
[  234.258983][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'.
[  235.203336][T10391] ip6_vti0 speed is unknown, defaulting to 1000
[  235.641884][T10391] wg1 speed is unknown, defaulting to 1000
[  236.213806][T10429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.221979][T10429] syzkaller0: entered promiscuous mode
[  236.227602][T10429] syzkaller0: entered allmulticast mode
[  236.497715][T10436] tipc: Resetting bearer <eth:syzkaller0>
[  236.523330][T10428] tipc: Resetting bearer <eth:syzkaller0>
[  236.817213][T10428] tipc: Disabling bearer <eth:syzkaller0>
[  236.855065][T10441] bridge_slave_0: left allmulticast mode
[  236.889035][T10441] bridge_slave_0: left promiscuous mode
[  236.894858][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1101'.
[  236.910868][T10441] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.973013][T10441] bridge_slave_1: left allmulticast mode
[  237.004899][T10441] bridge_slave_1: left promiscuous mode
[  237.012316][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'.
[  237.015269][T10441] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.043752][T10441] bond0: (slave bond_slave_0): Releasing backup interface
[  237.061036][T10441] bond0: (slave bond_slave_1): Releasing backup interface
[  237.074748][T10441] team_slave_0: left promiscuous mode
[  237.083009][T10441] team0: Port device team_slave_0 removed
[  237.094319][T10441] team_slave_1: left promiscuous mode
[  237.105187][T10441] team0: Port device team_slave_1 removed
[  237.113248][T10441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.123695][T10441] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.141040][T10441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.149704][T10441] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.165858][T10466] nbd: socks must be embedded in a SOCK_ITEM attr
[  237.176504][T10441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  237.273450][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'.
[  237.286595][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'.
[  237.334241][T10447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  237.423758][T10462] batman_adv: batadv0: Adding interface: vlan3
[  237.430366][T10462] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.523166][ T6221] udevd[6221]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory
[  237.573329][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.729379][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.764860][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1105'.
[  237.822416][T10477] netlink: 'syz.6.1106': attribute type 13 has an invalid length.
[  237.848825][T10462] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  237.859286][T10477] netlink: 'syz.6.1106': attribute type 17 has an invalid length.
[  237.935682][T10461] vxcan1: entered allmulticast mode
[  238.021939][T10477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.172883][T10483] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1108'.
[  238.581911][T10494] IPVS: rr: FWM 3 0x00000003 - no destination available
[  239.276963][T10505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  239.375278][T10512] netlink: 'syz.4.1116': attribute type 21 has an invalid length.
[  239.413530][T10512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1116'.
[  239.589387][T10518] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1119'.
[  239.670746][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1120'.
[  239.946793][T10528] ip6_vti0 speed is unknown, defaulting to 1000
[  240.041437][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'.
[  240.170027][T10530] syzkaller0: entered promiscuous mode
[  240.175654][T10530] syzkaller0: entered allmulticast mode
[  240.193369][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'.
[  240.344966][T10543] team_slave_0: left promiscuous mode
[  240.352883][T10543] team0 (unregistering): Port device team_slave_0 removed
[  240.361154][T10543] team_slave_1: left promiscuous mode
[  240.368036][T10543] team0 (unregistering): Port device team_slave_1 removed
[  240.397095][T10528] wg1 speed is unknown, defaulting to 1000
[  240.557677][T10546] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1127'.
[  240.845269][T10553] netlink: 'syz.6.1127': attribute type 1 has an invalid length.
[  240.855156][T10553] netlink: 'syz.6.1127': attribute type 4 has an invalid length.
[  240.878063][T10553] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1127'.
[  241.090407][T10564] netlink: 'syz.6.1127': attribute type 1 has an invalid length.
[  241.098515][T10564] netlink: 'syz.6.1127': attribute type 4 has an invalid length.
[  241.106394][T10564] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1127'.
[  242.605477][T10573] openvswitch: netlink: Message has 592 unknown bytes.
[  242.628510][T10575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1133'.
[  242.637770][T10573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.876020][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'.
[  243.829805][T10619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  243.973791][T10625] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  244.301364][T10642] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.454188][T10646] ip6_vti0 speed is unknown, defaulting to 1000
[  244.947265][T10679] netlink: 'syz.4.1165': attribute type 29 has an invalid length.
[  244.977355][T10679] netlink: 'syz.4.1165': attribute type 29 has an invalid length.
[  245.001484][T10679] __nla_validate_parse: 1 callbacks suppressed
[  245.001504][T10679] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1165'.
[  245.026098][T10683] tap0: tun_chr_ioctl cmd 35111
[  245.053519][T10679] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1165'.
[  245.060057][T10683] bridge4: the hash_elasticity option has been deprecated and is always 16
[  245.089138][T10683] bridge4: entered allmulticast mode
[  245.286792][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'.
[  245.322681][T10646] wg1 speed is unknown, defaulting to 1000
[  245.610817][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1171'.
[  245.885114][T10725] netlink: 'syz.4.1178': attribute type 28 has an invalid length.
[  246.081446][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1179'.
[  246.131103][T10729] blkio.reset_stats is deprecated
[  246.268960][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  246.299420][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1181'.
[  246.730533][T10752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.757063][T10752] syzkaller0: entered promiscuous mode
[  246.791223][T10752] syzkaller0: entered allmulticast mode
[  246.931438][T10757] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  247.019031][T10759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.054441][T10752] tipc: Resetting bearer <eth:syzkaller0>
[  247.085068][T10771] syzkaller0: entered promiscuous mode
[  247.092672][T10771] syzkaller0: entered allmulticast mode
[  247.136484][T10751] tipc: Resetting bearer <eth:syzkaller0>
[  247.165360][T10751] tipc: Disabling bearer <eth:syzkaller0>
[  247.222435][T10759] tipc: Resetting bearer <eth:syzkaller0>
[  247.240536][T10777] netlink: 'syz.7.1190': attribute type 28 has an invalid length.
[  247.248845][T10754] tipc: Resetting bearer <eth:syzkaller0>
[  247.320960][T10754] tipc: Disabling bearer <eth:syzkaller0>
[  247.703367][T10798] ip6_vti0 speed is unknown, defaulting to 1000
[  247.810083][T10796] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1196'.
[  247.834566][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1198'.
[  247.853950][T10807] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1198'.
[  248.142061][T10811] xt_TCPMSS: Only works on TCP SYN packets
[  248.170719][T10811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1200'.
[  248.189005][ T5834] Bluetooth: hci3: command 0x0405 tx timeout
[  248.304619][T10813] batadv1: entered promiscuous mode
[  248.427729][T10819] netlink: 'syz.7.1201': attribute type 13 has an invalid length.
[  248.559998][T10822] xt_ecn: cannot match TCP bits for non-tcp packets
[  248.641133][T10798] wg1 speed is unknown, defaulting to 1000
[  248.641195][T10818] ip6_vti0 speed is unknown, defaulting to 1000
[  248.754901][T10826] netlink: 'syz.4.1205': attribute type 28 has an invalid length.
[  249.535185][T10818] wg1 speed is unknown, defaulting to 1000
[  249.568650][T10856] tun0: tun_chr_ioctl cmd 1074025681
[  249.724788][T10865] netlink: 'syz.2.1218': attribute type 5 has an invalid length.
[  249.796439][T10865] netlink: 'syz.2.1218': attribute type 5 has an invalid length.
[  250.020046][T10873] __nla_validate_parse: 9 callbacks suppressed
[  250.020068][T10873] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1219'.
[  250.529512][T10892] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1224'.
[  250.892311][T10895] netlink: 'syz.6.1225': attribute type 1 has an invalid length.
[  251.144734][T10895] 8021q: adding VLAN 0 to HW filter on device bond2
[  251.184266][T10902] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0
[  251.253922][T10904] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  251.403346][T10906] 8021q: adding VLAN 0 to HW filter on device bond4
[  251.425534][T10906] bond0: (slave bond4): Enslaving as an active interface with an up link
[  251.634434][T10918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.961793][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1239'.
[  252.010612][T10938] openvswitch: netlink: Key type 58 is out of range max 32
[  252.059062][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'.
[  252.627382][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1248'.
[  252.654013][T10973] netlink: 'syz.2.1250': attribute type 3 has an invalid length.
[  252.882646][T10990] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1254'.
[  252.915928][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1251'.
[  253.038546][T10995] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  253.116037][T11000] bond5: Removing last arp target with arp_interval on
[  253.139152][T10997] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1257'.
[  253.414565][T11014] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  253.841594][T11034] netlink: 'syz.7.1265': attribute type 28 has an invalid length.
[  253.926372][T11032] ip6_vti0 speed is unknown, defaulting to 1000
[  254.004148][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079561c00: rx timeout, send abort
[  254.033318][T11037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.056691][T11037] syzkaller0: entered promiscuous mode
[  254.070708][T11037] syzkaller0: entered allmulticast mode
[  254.250679][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1268'.
[  254.251880][T11032] wg1 speed is unknown, defaulting to 1000
[  254.267229][T11035] ip6_vti0 speed is unknown, defaulting to 1000
[  254.294600][T11045] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1268'.
[  254.505393][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079562000: rx timeout, send abort
[  254.514647][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079561c00: abort rx timeout. Force session deactivation
[  255.013902][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079562000: abort rx timeout. Force session deactivation
[  255.246441][T11035] wg1 speed is unknown, defaulting to 1000
[  255.383981][T11095] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  255.746497][T11110] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1281'.
[  255.954471][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  256.528597][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1287'.
[  256.674189][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1290'.
[  256.820616][T11149] vlan2: entered allmulticast mode
[  256.825798][T11149] bridge0: entered allmulticast mode
[  256.990333][T11150] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode
[  257.001958][T11157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1295'.
[  257.023492][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'.
[  257.048265][T11155] bridge5: entered promiscuous mode
[  257.056291][T11155] bridge5: entered allmulticast mode
[  257.065181][T11155] team0: Port device bridge5 added
[  257.152565][T11157] netlink: 'syz.4.1295': attribute type 12 has an invalid length.
[  257.447349][T11174] netlink: 'syz.7.1302': attribute type 11 has an invalid length.
[  257.477111][T11169] vlan4: entered allmulticast mode
[  257.499049][T11169] bridge0: entered allmulticast mode
[  257.523023][T11177] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1302'.
[  257.592703][T11173] vlan4: entered allmulticast mode
[  257.994446][T11200] xt_TCPMSS: Only works on TCP SYN packets
[  258.056287][T11202] ip6_vti0 speed is unknown, defaulting to 1000
[  258.190305][T11214] netlink: 'syz.4.1312': attribute type 4 has an invalid length.
[  258.235236][T11214] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1312'.
[  258.317466][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1312'.
[  258.903548][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'.
[  259.195416][T11202] wg1 speed is unknown, defaulting to 1000
[  259.220493][T11206] ip6_vti0 speed is unknown, defaulting to 1000
[  259.228280][T11240] Cannot find add_set index 0 as target
[  259.342370][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'.
[  259.407323][T11248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  260.243520][T11266] sctp: [Deprecated]: syz.4.1324 (pid 11266) Use of int in maxseg socket option.
[  260.243520][T11266] Use struct sctp_assoc_value instead
[  260.320763][T11206] wg1 speed is unknown, defaulting to 1000
[  260.320803][T11239] ip6_vti0 speed is unknown, defaulting to 1000
[  260.724792][T11271] 8021q: adding VLAN 0 to HW filter on device bond2
[  260.761769][T11271] team0: Port device bond2 added
[  260.866081][T11274] bond2: option lp_interval: invalid value (0)
[  260.896722][T11274] bond2: option lp_interval: allowed values 1 - 2147483647
[  260.958739][T11274] bond2 (unregistering): Released all slaves
[  261.037246][T11239] wg1 speed is unknown, defaulting to 1000
[  261.669418][T11313] netlink: 'syz.4.1337': attribute type 28 has an invalid length.
[  262.084234][T11322] __nla_validate_parse: 1 callbacks suppressed
[  262.084253][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1341'.
[  262.218980][T11324] veth0: entered promiscuous mode
[  262.235922][T11323] ip6_vti0 speed is unknown, defaulting to 1000
[  262.676249][T11339] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  262.684737][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'.
[  262.696732][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'.
[  262.787928][T11332] ip6_vti0 speed is unknown, defaulting to 1000
[  262.792836][T11323] wg1 speed is unknown, defaulting to 1000
[  262.819293][T11344] ieee802154 phy0 wpan0: encryption failed: -22
[  262.897388][T11344] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.1349'.
[  262.907446][T11344] netlink: 'syz.7.1349': attribute type 10 has an invalid length.
[  262.955839][T11344] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  262.986014][T11324] veth0: left promiscuous mode
[  263.132750][T11350] netlink: 'syz.7.1351': attribute type 29 has an invalid length.
[  263.144167][T11350] netlink: 548 bytes leftover after parsing attributes in process `syz.7.1351'.
[  263.283548][T11333] ip6_vti0 speed is unknown, defaulting to 1000
[  263.709100][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1355'.
[  263.802711][T11346] ip6_vti0 speed is unknown, defaulting to 1000
[  263.868566][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  264.006378][T11346] wg1 speed is unknown, defaulting to 1000
[  264.050369][T11332] wg1 speed is unknown, defaulting to 1000
[  264.131477][T11333] wg1 speed is unknown, defaulting to 1000
[  264.178545][T11374] nbd3: detected capacity change from 0 to 127
[  264.210573][ T5834] block nbd3: Receive control failed (result -104)
[  264.226752][ T6221] block nbd3: Dead connection, failed to find a fallback
[  264.239214][ T6221] block nbd3: shutting down sockets
[  264.244639][ T6221] blk_print_req_error: 138 callbacks suppressed
[  264.244658][ T6221] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.286332][ T6221] buffer_io_error: 138 callbacks suppressed
[  264.286353][ T6221] Buffer I/O error on dev nbd3, logical block 1, async page read
[  264.334386][ T6221] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.362658][ T6221] Buffer I/O error on dev nbd3, logical block 2, async page read
[  264.387839][ T6221] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.397751][ T6221] Buffer I/O error on dev nbd3, logical block 3, async page read
[  264.476448][T11377] xfrm1: entered allmulticast mode
[  264.595555][T11379] 8021q: VLANs not supported on ip_vti0
[  264.957711][T11384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  264.980813][T11387] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1363'.
[  264.995256][T11389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.012082][T11387] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1363'.
[  265.215360][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'.
[  265.284690][T11400] netlink: 'syz.7.1365': attribute type 28 has an invalid length.
[  265.812782][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1371'.
[  266.004241][T11429] netlink: 'syz.0.1373': attribute type 298 has an invalid length.
[  266.140693][T11403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.344003][T11403] netlink: 'syz.2.1366': attribute type 5 has an invalid length.
[  266.650823][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.677195][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.701785][T11470] syzkaller1: entered promiscuous mode
[  266.707571][T11470] syzkaller1: entered allmulticast mode
[  266.730347][T11473] bridge0: entered promiscuous mode
[  266.752384][T11473] IPVS: length: 24 != 1272
[  267.214301][T11501] gretap1: entered promiscuous mode
[  267.552070][  T126] block nbd3: Connection timed out, retrying (0/1 alive)
[  267.563672][  T126] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.574400][  T126] Buffer I/O error on dev nbd3, logical block 0, async page read
[  267.585172][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.594498][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read
[  267.611107][ T6221] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.629179][ T6221] Buffer I/O error on dev nbd3, logical block 1, async page read
[  267.637554][ T6221] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.684854][ T6221] Buffer I/O error on dev nbd3, logical block 2, async page read
[  267.744674][ T6221] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.755159][ T6221] Buffer I/O error on dev nbd3, logical block 3, async page read
[  267.765342][ T6221] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.774577][ T6221] Buffer I/O error on dev nbd3, logical block 0, async page read
[  267.787285][ T6221] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.796733][ T6221] Buffer I/O error on dev nbd3, logical block 1, async page read
[  267.820884][ T6221] ldm_validate_partition_table(): Disk read failed.
[  267.831266][ T6221] Dev nbd3: unable to read RDB block 0
[  267.840864][ T6221]  nbd3: unable to read partition table
[  267.894519][ T6221] ldm_validate_partition_table(): Disk read failed.
[  267.911850][ T6221] Dev nbd3: unable to read RDB block 0
[  267.923168][ T6221]  nbd3: unable to read partition table
[  267.971662][T11499] ip6_vti0 speed is unknown, defaulting to 1000
[  268.285994][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  268.309889][T11521] macvlan2: entered promiscuous mode
[  268.386549][T11507] ip6_vti0 speed is unknown, defaulting to 1000
[  268.419266][T11499] wg1 speed is unknown, defaulting to 1000
[  268.784449][T11534] __nla_validate_parse: 3 callbacks suppressed
[  268.784522][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'.
[  269.026276][T11538] ip6_vti0 speed is unknown, defaulting to 1000
[  269.326595][T11538] wg1 speed is unknown, defaulting to 1000
[  269.374103][T11507] wg1 speed is unknown, defaulting to 1000
[  269.403350][T11539] ip6_vti0 speed is unknown, defaulting to 1000
[  269.448721][T11560] netlink: 'syz.0.1405': attribute type 62 has an invalid length.
[  270.011800][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'.
[  270.091122][T11569] syzkaller1: entered promiscuous mode
[  270.096651][T11569] syzkaller1: entered allmulticast mode
[  270.112792][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1408'.
[  270.300312][T11539] wg1 speed is unknown, defaulting to 1000
[  270.399570][T11588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.518303][T11583] ip6_vti0 speed is unknown, defaulting to 1000
[  270.720231][T11592] bridge6: entered promiscuous mode
[  270.725513][T11592] bridge6: entered allmulticast mode
[  270.736196][T11592] team0: Port device bridge6 added
[  270.742856][T11593] bridge0: port 1(team0) entered blocking state
[  270.749697][T11593] bridge0: port 1(team0) entered disabled state
[  270.756288][T11593] team0: entered allmulticast mode
[  270.765057][T11593] team0: entered promiscuous mode
[  271.019461][T11583] wg1 speed is unknown, defaulting to 1000
[  271.247158][T11605] bridge_slave_1: entered promiscuous mode
[  271.463253][T11614] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma?
[  272.171000][T11635] smc: removing ib device syz2
[  272.324025][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'.
[  272.388117][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'.
[  272.415733][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1425'.
[  272.453817][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'.
[  272.458931][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'.
[  272.660555][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'.
[  273.179052][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'.
[  273.508637][T11676] netlink: 'syz.6.1433': attribute type 1 has an invalid length.
[  273.541563][T11676] netlink: 'syz.6.1433': attribute type 3 has an invalid length.
[  273.683488][T11686] netlink: 'syz.6.1436': attribute type 28 has an invalid length.
[  273.694561][T11684] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.717867][T11684] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.884151][T11684] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.940156][T11684] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.075468][T11684] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.097461][T11684] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.190815][T11684] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.213393][T11684] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.488093][  T780] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.513491][  T780] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.527458][  T780] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.543139][  T780] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.555708][T11701] __nla_validate_parse: 1 callbacks suppressed
[  274.555728][T11701] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1439'.
[  274.582479][ T6176] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.591928][ T6176] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.766420][T11698] wg1 speed is unknown, defaulting to 1000
[  274.891785][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1442'.
[  275.098113][T11695] wg1 speed is unknown, defaulting to 1000
[  275.759265][T11731] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1445'.
[  276.003292][T11733] openvswitch: netlink: Missing valid actions attribute.
[  276.021575][T11733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.025827][T11740] netlink: 'syz.7.1447': attribute type 28 has an invalid length.
[  276.044909][T11733] netlink: 'syz.2.1446': attribute type 2 has an invalid length.
[  276.054272][T11733] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1446'.
[  276.244331][T11749] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  276.335891][T11688] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.358908][T11688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.471812][T11688] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.490240][T11688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.596268][T11688] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.607751][T11688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.970874][T11793] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1465'.
[  276.987194][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'.
[  277.043989][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1466'.
[  277.962074][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1474'.
[  277.999505][T11825] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  278.028677][T11826] netlink: 'syz.6.1474': attribute type 4 has an invalid length.
[  278.149730][T11832] xt_HMARK: spi-set and port-set can't be combined
[  278.219588][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1476'.
[  278.256463][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'.
[  278.305479][T11838] wg1 speed is unknown, defaulting to 1000
[  278.888890][ T6176] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.897453][ T6176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.962809][ T6176] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.981475][ T6176] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.037090][ T6174] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.056396][T11871] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  279.070877][ T6174] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.149681][ T6182] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.160928][ T6182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.707441][T11885] __nla_validate_parse: 1 callbacks suppressed
[  279.707464][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'.
[  279.733524][T11885] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.1490'.
[  279.750927][T11879] wg1 speed is unknown, defaulting to 1000
[  279.920197][T11896] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.113327][T11878] wg1 speed is unknown, defaulting to 1000
[  280.193098][T11903] dummy0: entered allmulticast mode
[  280.205269][T11904] pimreg3: entered allmulticast mode
[  280.234119][T11896] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.263314][T11900] wg1 speed is unknown, defaulting to 1000
[  280.366093][T11896] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.474234][T11909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1496'.
[  280.504766][T11910] pim6reg: entered allmulticast mode
[  280.513376][T11896] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.711793][T11913] bond6 (unregistering): Released all slaves
[  280.747655][T11899] dummy0: left allmulticast mode
[  280.807617][T11918] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.904850][ T6174] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.927414][ T6174] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.980161][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1499'.
[  281.005849][T11921] openvswitch: netlink: Message has 4 unknown bytes.
[  281.035749][ T6182] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.137679][ T6180] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.347943][T11937] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  281.502064][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'.
[  281.594519][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1509'.
[  281.916014][T11973] netlink: 'syz.7.1513': attribute type 1 has an invalid length.
[  282.012065][T11973] 8021q: adding VLAN 0 to HW filter on device bond3
[  282.020528][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'.
[  282.117774][T11983] wg1 speed is unknown, defaulting to 1000
[  282.304714][T11997] netlink: 'syz.2.1520': attribute type 13 has an invalid length.
[  282.313548][T11997] netlink: 'syz.2.1520': attribute type 17 has an invalid length.
[  282.341933][T11997] gretap0: refused to change device tx_queue_len
[  282.349472][T11997] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  282.386864][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'.
[  282.628211][T12002] x_tables: duplicate underflow at hook 1
[  282.662069][T12006] netlink: 'syz.2.1522': attribute type 15 has an invalid length.
[  282.686335][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'.
[  282.783769][T12006] netlink: 'syz.2.1522': attribute type 15 has an invalid length.
[  282.811678][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'.
[  283.292395][T12037] netlink: 'syz.2.1530': attribute type 4 has an invalid length.
[  283.345304][T12032] netlink: 'syz.2.1530': attribute type 4 has an invalid length.
[  283.378201][T12039] wg1 speed is unknown, defaulting to 1000
[  283.902344][T12067] syzkaller1: entered promiscuous mode
[  283.907997][T12067] syzkaller1: entered allmulticast mode
[  284.111296][T12080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.163893][T12083] veth1_to_bond: entered allmulticast mode
[  284.190838][T12086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.255969][T12083] bond0: (slave bond_slave_1): Releasing backup interface
[  284.278928][T12083] bond_slave_1 (unregistering): left promiscuous mode
[  284.302441][T12080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.415902][T12083] veth1_to_bond (unregistering): left allmulticast mode
[  284.819346][T12100] veth0: entered promiscuous mode
[  284.838858][T12098] veth0: left promiscuous mode
[  285.116168][T12108] __nla_validate_parse: 6 callbacks suppressed
[  285.116191][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'.
[  285.144816][T12108] syzkaller0: left promiscuous mode
[  285.152965][T12108] syzkaller0: left allmulticast mode
[  285.165710][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1547'.
[  285.430530][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'.
[  285.499177][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1553'.
[  285.520659][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1550'.
[  285.548201][T12119] wg1 speed is unknown, defaulting to 1000
[  286.169748][T12161] C: renamed from team_slave_0
[  286.201750][T12161] netlink: 'syz.6.1560': attribute type 4 has an invalid length.
[  286.239562][T12161] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1560'.
[  286.282144][T12161] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  286.479782][T12156] netlink: 'syz.0.1559': attribute type 1 has an invalid length.
[  286.692258][T12187] xt_CT: You must specify a L4 protocol and not use inversions on it
[  286.729828][T12156] bond6: (slave bridge7): making interface the new active one
[  286.747769][T12156] bond6: (slave bridge7): Enslaving as an active interface with an up link
[  286.875172][T12194] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1569'.
[  286.886696][T12193] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1569'.
[  286.898228][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'.
[  286.908107][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'.
[  286.917914][T12193] bridge_slave_1: left allmulticast mode
[  286.934441][T12193] bridge_slave_1: left promiscuous mode
[  286.949216][T12193] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.983668][T12193] bridge_slave_0: left allmulticast mode
[  286.992245][T12193] bridge_slave_0: left promiscuous mode
[  286.998386][T12193] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.327612][T12206] x_tables: duplicate entry at hook 3
[  288.178965][T12244] vxcan1: tx drop: invalid da for name 0x0000000020000000
[  288.965758][T12283] netlink: 'syz.6.1597': attribute type 1 has an invalid length.
[  289.055075][T12283] 8021q: adding VLAN 0 to HW filter on device bond3
[  289.259638][T12292] syzkaller0: entered promiscuous mode
[  289.265184][T12292] syzkaller0: entered allmulticast mode
[  289.498912][T12307] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  289.510784][T12303] netlink: 'syz.2.1604': attribute type 4 has an invalid length.
[  289.512051][T12313] delete_channel: no stack
[  289.522534][T12307] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  289.523902][T12313] delete_channel: no stack
[  289.535975][T12313] delete_channel: no stack
[  289.540921][T12313] delete_channel: no stack
[  289.545677][T12313] delete_channel: no stack
[  289.550789][T12313] delete_channel: no stack
[  289.555449][T12313] delete_channel: no stack
[  289.560247][T12313] delete_channel: no stack
[  289.565142][T12313] delete_channel: no stack
[  289.573402][T12313] delete_channel: no stack
[  289.579508][T12313] delete_channel: no stack
[  289.584188][T12313] delete_channel: no stack
[  289.591814][T12313] delete_channel: no stack
[  289.596492][T12313] delete_channel: no stack
[  289.635655][T12300] macvlan4: entered promiscuous mode
[  289.642632][T12300] macvlan4: entered allmulticast mode
[  289.654555][T12300] bond4: (slave macvlan4): Error -98 calling set_mac_address
[  289.661306][T12323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.699456][T12308] lo speed is unknown, defaulting to 1000
[  289.706596][T12308] lo speed is unknown, defaulting to 1000
[  289.728152][T12308] lo speed is unknown, defaulting to 1000
[  290.174856][T12347] netlink: 'syz.6.1614': attribute type 12 has an invalid length.
[  290.215441][T12347] netlink: 'syz.6.1614': attribute type 4 has an invalid length.
[  290.528954][T12358] wg1 speed is unknown, defaulting to 1000
[  290.560277][T12357] wg1 speed is unknown, defaulting to 1000
[  290.639766][T12308] infiniband syz0: set down
[  290.644473][  T899] lo speed is unknown, defaulting to 1000
[  290.661549][T12308] infiniband syz0: added lo
[  290.671235][T12308] syz0: rxe_create_cq: returned err = -12
[  290.680551][T12308] infiniband syz0: Couldn't create ib_mad CQ
[  290.690206][T12308] infiniband syz0: Couldn't open port 1
[  290.767205][T12308] RDS/IB: syz0: added
[  290.775023][T12308] smc: adding ib device syz0 with port count 1
[  290.790766][T12308] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  290.793012][T12368] __nla_validate_parse: 9 callbacks suppressed
[  290.793029][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'.
[  290.822396][   T24] lo speed is unknown, defaulting to 1000
[  290.838134][T12308] lo speed is unknown, defaulting to 1000
[  290.839000][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'.
[  291.200063][T12373] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1621'.
[  291.224042][T12372] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1621'.
[  291.446252][T12380] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1623'.
[  291.498935][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1623'.
[  291.542202][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1623'.
[  291.619386][T12384] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1624'.
[  291.682602][T12388] GUP no longer grows the stack in syz.2.1626 (12388): 200000003000-20000000a000 (200000001000)
[  291.708278][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1624'.
[  291.718472][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.2.1626 Not tainted syzkaller #0 PREEMPT(full) 
[  291.718503][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  291.718515][T12388] Call Trace:
[  291.718523][T12388]  <TASK>
[  291.718541][T12388]  dump_stack_lvl+0x189/0x250
[  291.718587][T12388]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.718612][T12388]  ? __pfx__printk+0x10/0x10
[  291.718628][T12388]  ? find_vma+0xe7/0x160
[  291.718669][T12388]  __get_user_pages+0x2470/0x2a00
[  291.718699][T12388]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[  291.718749][T12388]  ? rcu_is_watching+0x15/0xb0
[  291.718778][T12388]  __gup_longterm_locked+0xde4/0x1660
[  291.718809][T12388]  ? try_grab_folio_fast+0x1bf/0x6a0
[  291.718847][T12388]  ? gup_fast_fallback+0x1b86/0x22d0
[  291.718875][T12388]  gup_fast_fallback+0x1d65/0x22d0
[  291.718942][T12388]  ? __pfx_gup_fast_fallback+0x10/0x10
[  291.718963][T12388]  ? __mutex_lock+0x335/0x1350
[  291.718992][T12388]  ? is_valid_gup_args+0x11f/0x200
[  291.719018][T12388]  ? get_user_pages_fast+0x4d/0xb0
[  291.719044][T12388]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  291.719078][T12388]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  291.719097][T12388]  ? wait_for_space+0x248/0x2d0
[  291.719120][T12388]  iov_iter_get_pages2+0x5e/0xa0
[  291.719149][T12388]  __se_sys_vmsplice+0x548/0x10d0
[  291.719180][T12388]  ? futex_private_hash_put+0x4b/0x280
[  291.719212][T12388]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  291.719237][T12388]  ? __pfx_futex_wake+0x10/0x10
[  291.719339][T12388]  ? do_syscall_64+0xbe/0xfa0
[  291.719375][T12388]  do_syscall_64+0xfa/0xfa0
[  291.719400][T12388]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.719430][T12388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.719447][T12388]  ? clear_bhb_loop+0x60/0xb0
[  291.719468][T12388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.719484][T12388] RIP: 0033:0x7f39e678f6c9
[  291.719501][T12388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.719516][T12388] RSP: 002b:00007f39e75de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  291.719536][T12388] RAX: ffffffffffffffda RBX: 00007f39e69e5fa0 RCX: 00007f39e678f6c9
[  291.719548][T12388] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  291.719560][T12388] RBP: 00007f39e6811f91 R08: 0000000000000000 R09: 0000000000000000
[  291.719570][T12388] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  291.719581][T12388] R13: 00007f39e69e6038 R14: 00007f39e69e5fa0 R15: 00007ffedc2f0378
[  291.719613][T12388]  </TASK>
[  292.368038][T12384] tipc: Resetting bearer <eth:syzkaller0>
[  292.375039][T12384] syzkaller0: left promiscuous mode
[  292.382457][T12384] syzkaller0: left allmulticast mode
[  292.398173][T12384] ip6tnl2: left promiscuous mode
[  292.403309][T12384] ip6tnl2: left allmulticast mode
[  292.410580][T12384] vlan2: left allmulticast mode
[  292.415450][T12384] erspan0: left allmulticast mode
[  292.428416][T12308] lo speed is unknown, defaulting to 1000
[  292.447683][T12391] hsr_slave_0: left promiscuous mode
[  292.469103][T12391] hsr_slave_1: left promiscuous mode
[  292.541669][ T6176] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.588693][ T6176] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.641934][ T6176] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.669715][ T6176] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.833729][T12420] sctp: [Deprecated]: syz.7.1635 (pid 12420) Use of int in maxseg socket option.
[  292.833729][T12420] Use struct sctp_assoc_value instead
[  292.865188][T12423] openvswitch: netlink: Message has -2 unknown bytes.
[  292.872456][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.008122][T12308] lo speed is unknown, defaulting to 1000
[  293.104931][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1638'.
[  293.283445][T12439] netlink: 'syz.7.1642': attribute type 1 has an invalid length.
[  293.367473][T12439] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.411376][T12443] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.419149][T12443] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  293.435078][T12443] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  293.566232][T12308] lo speed is unknown, defaulting to 1000
[  293.915193][T12461] FAULT_INJECTION: forcing a failure.
[  293.915193][T12461] name failslab, interval 1, probability 0, space 0, times 1
[  293.928157][T12461] CPU: 0 UID: 0 PID: 12461 Comm: syz.2.1649 Not tainted syzkaller #0 PREEMPT(full) 
[  293.928185][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  293.928196][T12461] Call Trace:
[  293.928204][T12461]  <TASK>
[  293.928212][T12461]  dump_stack_lvl+0x189/0x250
[  293.928241][T12461]  ? __pfx____ratelimit+0x10/0x10
[  293.928270][T12461]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.928298][T12461]  ? __pfx__printk+0x10/0x10
[  293.928330][T12461]  ? __pfx___might_resched+0x10/0x10
[  293.928356][T12461]  should_fail_ex+0x414/0x560
[  293.928391][T12461]  should_failslab+0xa8/0x100
[  293.928411][T12461]  kmem_cache_alloc_node_noprof+0x77/0x710
[  293.928437][T12461]  ? __alloc_skb+0x112/0x2d0
[  293.928463][T12461]  __alloc_skb+0x112/0x2d0
[  293.928493][T12461]  netlink_ack+0x146/0xa50
[  293.928518][T12461]  ? is_bpf_text_address+0x26/0x2b0
[  293.928551][T12461]  netlink_rcv_skb+0x28c/0x470
[  293.928571][T12461]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  293.928602][T12461]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.928634][T12461]  ? bpf_lsm_capable+0x9/0x20
[  293.928656][T12461]  ? security_capable+0x7e/0x2e0
[  293.928690][T12461]  nfnetlink_rcv+0x282/0x2590
[  293.928722][T12461]  ? is_bpf_text_address+0x26/0x2b0
[  293.928749][T12461]  ? __kernel_text_address+0xd/0x40
[  293.928775][T12461]  ? unwind_get_return_address+0x4d/0x90
[  293.928797][T12461]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  293.928821][T12461]  ? arch_stack_walk+0xfc/0x150
[  293.928858][T12461]  ? stack_trace_save+0x9c/0xe0
[  293.928880][T12461]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  293.928908][T12461]  ? stack_depot_save_flags+0x40/0x860
[  293.928940][T12461]  ? __lock_acquire+0xab9/0xd20
[  293.928987][T12461]  ? __lock_acquire+0xab9/0xd20
[  293.929017][T12461]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.929044][T12461]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.929072][T12461]  netlink_unicast+0x82f/0x9e0
[  293.929109][T12461]  ? __pfx_netlink_unicast+0x10/0x10
[  293.929139][T12461]  ? netlink_sendmsg+0x642/0xb30
[  293.929156][T12461]  ? skb_put+0x11b/0x210
[  293.929180][T12461]  netlink_sendmsg+0x805/0xb30
[  293.929213][T12461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.929237][T12461]  ? aa_sock_msg_perm+0xf1/0x1d0
[  293.929267][T12461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  293.929286][T12461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.929308][T12461]  __sock_sendmsg+0x21c/0x270
[  293.929339][T12461]  ____sys_sendmsg+0x505/0x830
[  293.929369][T12461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.929403][T12461]  ? import_iovec+0x74/0xa0
[  293.929433][T12461]  ___sys_sendmsg+0x21f/0x2a0
[  293.929459][T12461]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.929533][T12461]  ? __fget_files+0x2a/0x420
[  293.929551][T12461]  ? __fget_files+0x3a0/0x420
[  293.929583][T12461]  __x64_sys_sendmsg+0x19b/0x260
[  293.929609][T12461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  293.929643][T12461]  ? __pfx_ksys_write+0x10/0x10
[  293.929676][T12461]  ? do_syscall_64+0xbe/0xfa0
[  293.929709][T12461]  do_syscall_64+0xfa/0xfa0
[  293.929735][T12461]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.929764][T12461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.929784][T12461]  ? clear_bhb_loop+0x60/0xb0
[  293.929808][T12461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.929827][T12461] RIP: 0033:0x7f39e678f6c9
[  293.929846][T12461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.929863][T12461] RSP: 002b:00007f39e75de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.929886][T12461] RAX: ffffffffffffffda RBX: 00007f39e69e5fa0 RCX: 00007f39e678f6c9
[  293.929901][T12461] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  293.929913][T12461] RBP: 00007f39e75de090 R08: 0000000000000000 R09: 0000000000000000
[  293.929926][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.929938][T12461] R13: 00007f39e69e6038 R14: 00007f39e69e5fa0 R15: 00007ffedc2f0378
[  293.929974][T12461]  </TASK>
[  294.397885][T12308] lo speed is unknown, defaulting to 1000
[  294.629769][T12465] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  294.671315][T12471] vxcan2: entered allmulticast mode
[  294.780562][T12470] bond5 (unregistering): Released all slaves
[  294.849465][T12308] lo speed is unknown, defaulting to 1000
[  294.903377][T12487] gtp0: entered promiscuous mode
[  294.928725][T12487] gtp0: entered allmulticast mode
[  295.505958][T12308] lo speed is unknown, defaulting to 1000
[  296.477374][T12537] __nla_validate_parse: 4 callbacks suppressed
[  296.477397][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'.
[  297.056090][T12555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.132507][T12564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1674'.
[  297.220877][T12555] tipc: Resetting bearer <eth:syzkaller0>
[  297.234107][T12550] tipc: Disabling bearer <eth:syzkaller0>
[  297.281446][T12570] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1677'.
[  297.435561][T12577] openvswitch: netlink: Duplicate key (type 21).
[  297.472140][T12576] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  297.481767][T12577] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1678'.
[  297.509353][T12577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1678'.
[  297.586413][T12581] 8021q: VLANs not supported on vxcan0
[  297.784410][T12590] netlink: 'syz.7.1683': attribute type 1 has an invalid length.
[  298.147874][T12593] bond5: entered promiscuous mode
[  298.168133][T12593] bond5: entered allmulticast mode
[  298.188865][T12593] 8021q: adding VLAN 0 to HW filter on device bond5
[  298.226486][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'.
[  298.251656][T12594] 8021q: adding VLAN 0 to HW filter on device bond6
[  298.263332][T12594] bond6: entered promiscuous mode
[  298.271448][T12594] bond6: entered allmulticast mode
[  298.277353][T12594] bond5: (slave bond6): Enslaving as a backup interface with a down link
[  298.286818][T12592] wg1 speed is unknown, defaulting to 1000
[  298.300921][T12614] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1688'.
[  298.301824][T12602] xfrm1: entered allmulticast mode
[  298.356757][T12592] lo speed is unknown, defaulting to 1000
[  298.720919][T12633] netlink: 'syz.2.1692': attribute type 1 has an invalid length.
[  298.766259][T12633] 8021q: adding VLAN 0 to HW filter on device bond7
[  298.802547][T12633] vlan2: entered promiscuous mode
[  298.807741][T12633] bond7: entered promiscuous mode
[  298.813080][T12633] vlan2: entered allmulticast mode
[  298.819166][T12633] bond7: entered allmulticast mode
[  298.958764][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1694'.
[  299.067463][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'.
[  299.088632][T12647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1696'.
[  299.216407][T12649] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  299.411043][T12663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.424810][T12663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.751851][T12675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.896795][T12673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.048090][T12653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.423803][T12667] wg1 speed is unknown, defaulting to 1000
[  301.443405][T12667] lo speed is unknown, defaulting to 1000
[  301.460312][T12682] netlink: 'syz.0.1703': attribute type 4 has an invalid length.
[  301.471752][T12683] netlink: 'syz.0.1703': attribute type 4 has an invalid length.
[  301.487471][ T5932] lo speed is unknown, defaulting to 1000
[  301.509209][ T5932] lo speed is unknown, defaulting to 1000
[  301.515045][   T45] lo speed is unknown, defaulting to 1000
[  301.551077][T12687] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  302.196074][T12710] SET target dimension over the limit!
[  302.324817][T12725] __nla_validate_parse: 2 callbacks suppressed
[  302.324840][T12725] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1714'.
[  302.480530][T12730] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  302.517477][T12733] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1717'.
[  302.527281][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'.
[  302.540439][T12734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'.
[  302.861900][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'.
[  302.978266][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1722'.
[  303.043757][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'.
[  303.119388][T12755] pim6reg1: entered promiscuous mode
[  303.158710][T12755] pim6reg1: entered allmulticast mode
[  303.179235][T12758] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  303.240146][T12762] xt_CT: You must specify a L4 protocol and not use inversions on it
[  303.518256][T12779] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1727'.
[  303.522000][T12769] wg1 speed is unknown, defaulting to 1000
[  303.557330][T12769] lo speed is unknown, defaulting to 1000
[  303.656764][T12785] xt_hashlimit: size too large, truncated to 1048576
[  303.660034][T12770] wg1 speed is unknown, defaulting to 1000
[  303.695938][T12783] wg1 speed is unknown, defaulting to 1000
[  303.989561][T12787] netlink: 'syz.0.1730': attribute type 13 has an invalid length.
[  304.030259][T12795] bond7: option arp_validate: invalid value (18446744073491447809)
[  304.091463][T12795] bond7 (unregistering): Released all slaves
[  304.304077][T12770] lo speed is unknown, defaulting to 1000
[  304.311351][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.386079][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.409252][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.442057][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.503794][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1733'.
[  304.617966][T12809] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1734'.
[  304.752648][T12814] openvswitch: netlink: Flow key attr not present in new flow.
[  304.897355][T12825] xt_nat: multiple ranges no longer supported
[  304.915698][T12825] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20004
[  304.947621][T12783] lo speed is unknown, defaulting to 1000
[  305.055803][T12827] netlink: 'syz.2.1739': attribute type 28 has an invalid length.
[  305.942441][T12849] geneve2: entered promiscuous mode
[  305.947712][T12849] geneve2: entered allmulticast mode
[  305.962678][ T6176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 38104 - 0
[  305.972790][ T6176] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 35560 - 0
[  306.135841][ T6176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 38104 - 0
[  306.147190][ T6176] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 35560 - 0
[  306.156770][ T6176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 38104 - 0
[  306.167620][ T6176] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 35560 - 0
[  306.216571][ T6176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 38104 - 0
[  306.246653][ T6176] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 35560 - 0
[  306.847328][T12875] netlink: 'syz.7.1751': attribute type 1 has an invalid length.
[  307.019108][T12875] bond7: entered promiscuous mode
[  307.038702][T12875] bond7: entered allmulticast mode
[  307.092635][T12874] bridge6: entered promiscuous mode
[  307.111949][T12874] bridge6: entered allmulticast mode
[  307.146642][T12885] wg1 speed is unknown, defaulting to 1000
[  307.157017][T12885] lo speed is unknown, defaulting to 1000
[  307.377038][T12896] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  307.782966][T12913] xt_TPROXY: Can be used only with -p tcp or -p udp
[  308.745926][T12913] ip6gre2: entered promiscuous mode
[  308.767646][T12913] ip6gre2: entered allmulticast mode
[  308.781625][ T6176] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  308.810031][ T6176] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  308.818254][ T1212] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  308.880028][T12931] syzkaller0: entered promiscuous mode
[  308.904098][T12931] syzkaller0: entered allmulticast mode
[  309.213052][T12937] __nla_validate_parse: 7 callbacks suppressed
[  309.213076][T12937] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1766'.
[  309.255893][ T5911] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  309.298585][ T5911] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  309.386488][T12937] veth7: entered promiscuous mode
[  309.875594][T12955] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1771'.
[  309.896424][T12955] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  310.009491][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1773'.
[  310.080594][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1773'.
[  310.114419][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1773'.
[  310.169022][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1773'.
[  310.182039][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1773'.
[  310.200278][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1773'.
[  310.326154][T12969] macvlan2: entered promiscuous mode
[  310.363846][T12969] vlan0: entered promiscuous mode
[  310.427375][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'.
[  310.485673][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1778'.
[  310.487437][   T30] audit: type=1804 audit(1762626265.891:2): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1778" name="memory.events" dev="tmpfs" ino=1296 res=1 errno=0
[  310.547145][   T30] audit: type=1800 audit(1762626265.891:3): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1778" name="memory.events" dev="tmpfs" ino=1296 res=0 errno=0
[  310.722516][T12969] vlan0 (unregistering): left promiscuous mode
[  311.136358][T12982] bond5 (unregistering): Released all slaves
[  311.596430][T13003] bond5 (unregistering): Released all slaves
[  311.721886][T13028] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  311.839875][T13022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  311.913808][T13010] wg1 speed is unknown, defaulting to 1000
[  311.922904][T13010] lo speed is unknown, defaulting to 1000
[  312.141242][T13040] netlink: 'syz.0.1789': attribute type 21 has an invalid length.
[  312.428266][T13046] dummy0: entered promiscuous mode
[  312.498821][T13046] dummy0: left promiscuous mode
[  312.800531][T13058] wg1 speed is unknown, defaulting to 1000
[  312.967621][T13058] lo speed is unknown, defaulting to 1000
[  313.037770][T13064] bond0: (slave dummy0): Releasing backup interface
[  313.068840][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  313.107466][T13064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  313.203117][T13066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  313.312721][T13071] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  313.388905][T13071] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  313.409586][T13071] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  313.470994][T13076] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16)
[  313.488830][T13076] openvswitch: netlink: Message has 8 unknown bytes.
[  313.541209][T13078] xt_TPROXY: Can be used only with -p tcp or -p udp
[  314.634771][T13102] bond7: entered promiscuous mode
[  314.653948][T13102] bond7: entered allmulticast mode
[  314.659915][T13102] 8021q: adding VLAN 0 to HW filter on device bond7
[  314.760584][T13101] wg1 speed is unknown, defaulting to 1000
[  314.771648][T13101] lo speed is unknown, defaulting to 1000
[  315.053673][T13109] netlink: 'syz.4.1808': attribute type 10 has an invalid length.
[  315.741919][T13131] netlink: 'syz.4.1811': attribute type 10 has an invalid length.
[  315.791908][T13131] __nla_validate_parse: 7 callbacks suppressed
[  315.792003][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1811'.
[  315.804563][T13139] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1816'.
[  315.923283][T13131] dummy0: entered promiscuous mode
[  315.931372][T13131] bridge0: port 4(dummy0) entered blocking state
[  315.993940][T13131] bridge0: port 4(dummy0) entered disabled state
[  316.025902][T13131] dummy0: entered allmulticast mode
[  316.075834][T13131] bridge0: port 4(dummy0) entered blocking state
[  316.082498][T13131] bridge0: port 4(dummy0) entered forwarding state
[  316.174339][T13164] openvswitch: netlink: ufid size 176 bytes exceeds the range (1, 16)
[  316.248262][T13162] wg1 speed is unknown, defaulting to 1000
[  316.257626][T13162] lo speed is unknown, defaulting to 1000
[  316.781921][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'.
[  316.823892][T13189] netlink: 'syz.6.1828': attribute type 1 has an invalid length.
[  316.967590][T13192] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  316.981623][T13192] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  317.027756][T13193] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  317.039756][T13193] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  320.221376][T13203] syzkaller1: entered promiscuous mode
[  320.237435][T13203] syzkaller1: entered allmulticast mode
[  320.250336][T13187] wg1 speed is unknown, defaulting to 1000
[  320.328662][T13187] lo speed is unknown, defaulting to 1000
[  321.024452][T13225] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1834'.
[  321.249040][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'.
[  321.274304][T13217] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  321.393426][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'.
[  321.404114][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'.
[  321.563502][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'.
[  321.801632][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'.
[  321.826861][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'.
[  321.857440][T13257] IPVS: set_ctl: invalid protocol: 11146 0.0.0.0:20000
[  321.878494][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  321.892294][T13252] pim6reg: entered allmulticast mode
[  321.901071][T13252] pim6reg: left allmulticast mode
[  322.100763][T13274] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1848'.
[  322.341689][T13277] netlink: 'syz.0.1848': attribute type 1 has an invalid length.
[  322.358934][T13277] netlink: 'syz.0.1848': attribute type 4 has an invalid length.
[  322.377282][T13277] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1848'.
[  322.441502][T13253] wg1 speed is unknown, defaulting to 1000
[  322.470556][T13253] lo speed is unknown, defaulting to 1000
[  322.483968][T13269] netlink: 'syz.0.1848': attribute type 1 has an invalid length.
[  322.518231][T13279] wg1 speed is unknown, defaulting to 1000
[  322.547094][T13269] netlink: 'syz.0.1848': attribute type 4 has an invalid length.
[  322.567521][T13269] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1848'.
[  322.690579][T13288] wg1 speed is unknown, defaulting to 1000
[  323.035261][T13298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.055613][T13298] syzkaller0: entered promiscuous mode
[  323.075511][T13298] syzkaller0: entered allmulticast mode
[  323.096850][T13279] lo speed is unknown, defaulting to 1000
[  323.151217][T13298] tipc: Resetting bearer <eth:syzkaller0>
[  323.191223][T13298] netlink: 'syz.4.1855': attribute type 9 has an invalid length.
[  323.633983][T13315] 8021q: VLANs not supported on caif0
[  323.724593][T13288] lo speed is unknown, defaulting to 1000
[  324.375452][T13318] wg1 speed is unknown, defaulting to 1000
[  324.448755][T13318] lo speed is unknown, defaulting to 1000
[  326.236755][T13397] syzkaller0: entered promiscuous mode
[  326.249691][T13397] syzkaller0: entered allmulticast mode
[  326.497211][T13416] __nla_validate_parse: 21 callbacks suppressed
[  326.497233][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1887'.
[  326.525213][T13418] netlink: 'syz.6.1886': attribute type 28 has an invalid length.
[  326.552372][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'.
[  326.743038][T13427] netlink: 24648 bytes leftover after parsing attributes in process `syz.4.1890'.
[  326.846114][T13430] syzkaller0: Caught tx_queue_len zero misconfig
[  327.112273][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'.
[  327.146429][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'.
[  327.230410][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1895'.
[  327.382864][T13468] netlink: 'syz.6.1902': attribute type 28 has an invalid length.
[  328.264759][T13493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1910'.
[  328.343992][T13497] netlink: 'syz.2.1911': attribute type 1 has an invalid length.
[  328.872242][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'.
[  329.180862][T13527] tipc: Resetting bearer <eth:syzkaller0>
[  329.283962][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'.
[  329.517037][T13538] netlink: 'syz.2.1920': attribute type 3 has an invalid length.
[  329.843529][T13549] netlink: 'syz.4.1923': attribute type 21 has an invalid length.
[  329.897191][T13551] Bluetooth: MGMT ver 1.23
[  329.920325][T13551] Bluetooth: hci1: too big key_count value 29096
[  329.928189][T13547] wg1 speed is unknown, defaulting to 1000
[  329.953070][T13547] lo speed is unknown, defaulting to 1000
[  330.502659][T13581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1932'.
[  331.869894][T13624] wg1 speed is unknown, defaulting to 1000
[  331.879593][T13624] lo speed is unknown, defaulting to 1000
[  332.444003][T13637] wg1 speed is unknown, defaulting to 1000
[  332.473531][T13637] lo speed is unknown, defaulting to 1000
[  332.495485][T13645] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  333.165916][T13651] wg1 speed is unknown, defaulting to 1000
[  333.175028][T13651] lo speed is unknown, defaulting to 1000
[  333.393663][T13661] wg1 speed is unknown, defaulting to 1000
[  333.566472][T13661] lo speed is unknown, defaulting to 1000
[  334.251375][T13669] wg1 speed is unknown, defaulting to 1000
[  334.342595][T13672] wg1 speed is unknown, defaulting to 1000
[  334.373110][T13672] lo speed is unknown, defaulting to 1000
[  334.661235][T13669] lo speed is unknown, defaulting to 1000
[  334.880549][T13684] netlink: 'syz.7.1955': attribute type 23 has an invalid length.
[  335.096886][T13693] __nla_validate_parse: 1 callbacks suppressed
[  335.096907][T13693] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1956'.
[  336.154597][T13704] wg1 speed is unknown, defaulting to 1000
[  336.188484][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  336.249815][T13704] lo speed is unknown, defaulting to 1000
[  336.343885][T13709] wg1 speed is unknown, defaulting to 1000
[  336.350792][T13711] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1960'.
[  336.434198][T13708] wg1 speed is unknown, defaulting to 1000
[  336.504207][T13717] bond0: option xmit_hash_policy: invalid value (9)
[  336.961347][T13709] lo speed is unknown, defaulting to 1000
[  337.128080][T13735] wg1 speed is unknown, defaulting to 1000
[  337.729524][T13749] wg1 speed is unknown, defaulting to 1000
[  337.767290][T13753] wg1 speed is unknown, defaulting to 1000
[  337.930659][T13708] lo speed is unknown, defaulting to 1000
[  338.191650][T13735] lo speed is unknown, defaulting to 1000
[  338.485454][T13749] lo speed is unknown, defaulting to 1000
[  338.827380][T13753] lo speed is unknown, defaulting to 1000
[  338.927335][T13771] netlink: 'syz.4.1973': attribute type 39 has an invalid length.
[  338.991030][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'.
[  339.148673][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  339.434264][T13777] netlink: 'syz.4.1974': attribute type 10 has an invalid length.
[  340.389040][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'.
[  340.502344][T13779] macsec2: entered allmulticast mode
[  340.510236][T13779] bridge0: port 5(macsec2) entered blocking state
[  340.516964][T13779] bridge0: port 5(macsec2) entered disabled state
[  340.830831][T13784] wg1 speed is unknown, defaulting to 1000
[  340.837504][T13791] nbd: must specify an index to disconnect
[  340.847370][T13784] lo speed is unknown, defaulting to 1000
[  341.237758][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1983'.
[  341.648063][T13828] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1988'.
[  342.034368][T13848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1993'.
[  342.254134][T13844] 8021q: VLANs not supported on sit0
[  342.312373][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'.
[  342.344565][T13844] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1992'.
[  342.394720][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'.
[  342.466354][T13864] netlink: 'syz.0.1997': attribute type 4 has an invalid length.
[  342.502858][T13864] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1997'.
[  342.594065][T13872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'.
[  342.608916][T13871] netlink: 'syz.7.2000': attribute type 28 has an invalid length.
[  342.944191][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2005'.
[  342.960473][T13894] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.001033][T13892] netlink: 'syz.2.2005': attribute type 10 has an invalid length.
[  343.173816][T13906] macvlan3: entered promiscuous mode
[  343.234029][T13908] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.248149][T13908] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.345033][T13908] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.366893][T13908] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.557201][T13908] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.588246][T13908] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.669334][T13908] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.680445][T13908] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.724873][T13929] SET target dimension over the limit!
[  343.899233][ T5936] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.913342][ T5936] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.950920][ T5936] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.964657][ T5936] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.974044][ T5936] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.982432][ T5936] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.009688][ T5936] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.019762][ T5936] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.136806][T13947] wg1 speed is unknown, defaulting to 1000
[  344.147679][T13947] lo speed is unknown, defaulting to 1000
[  344.177137][T13953] netlink: 'syz.4.2024': attribute type 13 has an invalid length.
[  345.173538][T13953] bridge0: port 4(dummy0) entered disabled state
[  345.180206][T13953] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.188039][T13953] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.247445][T13953] team_slave_0: left promiscuous mode
[  345.253240][T13953] team_slave_1: left promiscuous mode
[  345.546604][T13953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.578061][T13953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.063927][T13953] tipc: Resetting bearer <eth:syzkaller0>
[  346.145669][ T5936] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.180251][ T5936] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.208403][ T5936] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.227199][ T5936] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.295817][ T5936] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.314665][ T5936] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.360890][ T5936] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.389948][ T5936] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.402227][T13980] __nla_validate_parse: 3 callbacks suppressed
[  346.402248][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'.
[  346.549674][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'.
[  346.677509][T13989] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  346.969128][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2035'.
[  347.348155][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'.
[  347.368261][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'.
[  347.399517][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2039'.
[  347.540684][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'.
[  347.623049][T14031] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[  347.795811][T14009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.813326][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'.
[  348.140984][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'.
[  348.172960][T14049] netlink: 'syz.7.2045': attribute type 11 has an invalid length.
[  348.209111][T14049] netlink: 'syz.7.2045': attribute type 11 has an invalid length.
[  348.218658][T14049] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2045'.
[  349.101849][T14113] netlink: 'syz.0.2060': attribute type 1 has an invalid length.
[  349.507907][T14126] wg1 speed is unknown, defaulting to 1000
[  349.566743][T14146] openvswitch: netlink: Actions may not be safe on all matching packets
[  349.576201][T14126] lo speed is unknown, defaulting to 1000
[  349.925165][T14163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.960944][T14163] tap0: tun_chr_ioctl cmd 2147767507
[  349.982439][T14163] tap0: tun_chr_ioctl cmd 35106
[  350.136018][T14164] dummy0 (unregistering): left allmulticast mode
[  350.144064][T14164] bridge0: port 4(dummy0) entered disabled state
[  350.265236][T14167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.492031][T14182] netlink: 'syz.6.2076': attribute type 28 has an invalid length.
[  350.679806][T14186] netlink: 'syz.2.2077': attribute type 12 has an invalid length.
[  351.245101][T14200] netlink: 'syz.7.2082': attribute type 10 has an invalid length.
[  351.273741][T14200] dummy0: entered promiscuous mode
[  351.283242][T14200] team0: Port device dummy0 added
[  351.293389][T14200] netlink: 'syz.7.2082': attribute type 10 has an invalid length.
[  351.504560][T14208] netlink: 'syz.0.2084': attribute type 28 has an invalid length.
[  351.607309][T14209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  351.944498][T14223] wg1 speed is unknown, defaulting to 1000
[  352.004911][T14223] lo speed is unknown, defaulting to 1000
[  352.410532][T14237] wg1 speed is unknown, defaulting to 1000
[  352.730912][T14254] wg1 speed is unknown, defaulting to 1000
[  352.793799][T14263] netlink: 'syz.2.2096': attribute type 28 has an invalid length.
[  353.054288][T14237] lo speed is unknown, defaulting to 1000
[  353.374881][T14264] netlink: 'syz.6.2094': attribute type 6 has an invalid length.
[  353.433840][T14274] wg1 speed is unknown, defaulting to 1000
[  353.740405][T14275] wg1 speed is unknown, defaulting to 1000
[  353.900667][T14254] lo speed is unknown, defaulting to 1000
[  354.191383][T14283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  354.394784][T14274] lo speed is unknown, defaulting to 1000
[  354.653747][T14294] xt_l2tp: wrong L2TP version: 1
[  354.689694][T14294] __nla_validate_parse: 8 callbacks suppressed
[  354.689715][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'.
[  354.767335][ T6178] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.790902][ T6178] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.836548][ T6178] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.863785][ T6178] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.897834][T14275] lo speed is unknown, defaulting to 1000
[  355.140788][T14301] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2104'.
[  355.303974][T14301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2104'.
[  356.348474][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.435237][T14311] wg1 speed is unknown, defaulting to 1000
[  356.474461][T14311] lo speed is unknown, defaulting to 1000
[  357.080580][T14332] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2110'.
[  357.223951][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'.
[  357.284877][T14345] netlink: 'syz.6.2113': attribute type 1 has an invalid length.
[  357.307719][T14342] : entered promiscuous mode
[  357.339050][T14342] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2113'.
[  357.348052][T14345] bond6: entered promiscuous mode
[  357.354617][T14345] 8021q: adding VLAN 0 to HW filter on device bond6
[  357.388374][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.439395][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2113'.
[  357.450300][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2113'.
[  357.511676][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2113'.
[  357.942997][T14364] C: renamed from team_slave_0
[  357.978074][T14364] netlink: 'syz.2.2116': attribute type 4 has an invalid length.
[  357.996205][T14364] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2116'.
[  358.024812][T14364] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  358.198063][T14344] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  358.374638][T14371] netlink: 'syz.2.2118': attribute type 28 has an invalid length.
[  358.428390][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.643131][T14377] bond7: entered promiscuous mode
[  358.648253][T14377] bond7: entered allmulticast mode
[  358.679200][T14377] 8021q: adding VLAN 0 to HW filter on device bond7
[  358.752940][T14387] netlink: 'syz.4.2119': attribute type 5 has an invalid length.
[  358.976505][T14377] bond7 (unregistering): Released all slaves
[  359.468383][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.515320][T14417] bond0: Device is already in use.
[  359.584223][T14420] netlink: 'syz.7.2131': attribute type 28 has an invalid length.
[  359.717008][T14426] netlink: 'syz.0.2129': attribute type 33 has an invalid length.
[  359.767030][T14426] __nla_validate_parse: 4 callbacks suppressed
[  359.767125][T14426] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2129'.
[  360.050246][T14429] wg1 speed is unknown, defaulting to 1000
[  360.090415][T14429] lo speed is unknown, defaulting to 1000
[  360.508355][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.078239][T14457] wg1 speed is unknown, defaulting to 1000
[  361.153782][T14457] lo speed is unknown, defaulting to 1000
[  361.289160][T14473] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.303389][T14473] 8021q: adding VLAN 0 to HW filter on device team0
[  361.315771][T14473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.334844][T14480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.548382][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.899860][T14496] xfrm2: entered allmulticast mode
[  361.954418][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2148'.
[  362.053516][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2148'.
[  362.079326][T14499] wg1 speed is unknown, defaulting to 1000
[  362.088660][   T67] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  362.097435][   T67] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  362.111346][T14499] lo speed is unknown, defaulting to 1000
[  362.117612][ T6170] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  362.130518][ T6170] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  362.146689][T14501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2150'.
[  362.588356][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.882384][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2155'.
[  363.053634][T14523] netlink: 'syz.2.2155': attribute type 2 has an invalid length.
[  363.628371][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.902744][T14560] wg1 speed is unknown, defaulting to 1000
[  363.916651][T14560] lo speed is unknown, defaulting to 1000
[  363.971710][T14562] wg1 speed is unknown, defaulting to 1000
[  364.304436][T14562] lo speed is unknown, defaulting to 1000
[  364.668366][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.333077][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2174'.
[  365.390783][T14614] wg1 speed is unknown, defaulting to 1000
[  365.422167][T14614] lo speed is unknown, defaulting to 1000
[  365.501209][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2174'.
[  365.708376][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.786628][T14637] batadv_slave_0: entered promiscuous mode
[  365.797493][T14636] batadv_slave_0: left promiscuous mode
[  366.250870][T14657] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2181'.
[  366.285226][T14654] batadv0: entered promiscuous mode
[  366.647988][T13250] udevd[13250]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory
[  366.748394][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.955897][T14667] pim6reg: entered allmulticast mode
[  367.214120][T14666] pim6reg: left allmulticast mode
[  367.271100][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2187'.
[  367.303141][T14673] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[  367.347303][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'.
[  367.604608][T14696] netlink: 'syz.6.2190': attribute type 2 has an invalid length.
[  367.687490][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'.
[  367.733294][T14699] sctp: [Deprecated]: syz.7.2193 (pid 14699) Use of int in maxseg socket option.
[  367.733294][T14699] Use struct sctp_assoc_value instead
[  367.780851][T14699] netlink: 'syz.7.2193': attribute type 3 has an invalid length.
[  367.788380][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.837055][T14709] netlink: 'syz.7.2193': attribute type 1 has an invalid length.
[  367.845494][T14704] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2192'.
[  367.896397][T14709] 8021q: adding VLAN 0 to HW filter on device bond8
[  367.930975][T14699] bond8: (slave ip6erspan0): making interface the new active one
[  367.943036][T14699] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link
[  368.799445][T14745] wg1 speed is unknown, defaulting to 1000
[  368.807739][T14745] lo speed is unknown, defaulting to 1000
[  368.828438][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.942566][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2207'.
[  369.105739][T14753] wg1 speed is unknown, defaulting to 1000
[  369.344822][T14753] lo speed is unknown, defaulting to 1000
[  369.346850][T14764] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.724181][T14782] netlink: 'syz.4.2214': attribute type 28 has an invalid length.
[  369.868386][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.980294][T14788] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  370.532640][T14788] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.646381][T14788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.703306][T14814] bridge0: port 2(erspan0) entered blocking state
[  370.715337][T14814] bridge0: port 2(erspan0) entered disabled state
[  370.724810][T14814] erspan0: entered allmulticast mode
[  370.746232][T14814] erspan0: entered promiscuous mode
[  370.908354][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.919727][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'.
[  371.097513][T14832] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2229'.
[  371.136380][T14837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  371.238239][T14836] wg1 speed is unknown, defaulting to 1000
[  371.341047][T14836] lo speed is unknown, defaulting to 1000
[  371.374500][T14831] wg1 speed is unknown, defaulting to 1000
[  371.605171][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2233'.
[  371.948401][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.242789][T14831] lo speed is unknown, defaulting to 1000
[  372.428824][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  372.642128][T14869] smc: net device team_slave_0 applied user defined pnetid SYZ2
[  372.988368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.028377][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.428675][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'.
[  375.068408][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.104134][T14918] wg1 speed is unknown, defaulting to 1000
[  375.157056][T14918] lo speed is unknown, defaulting to 1000
[  375.334144][T14923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2250'.
[  375.720251][T14928] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  375.752825][T14928] bond10 (unregistering): Released all slaves
[  376.108423][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.130184][T14939] wg1 speed is unknown, defaulting to 1000
[  376.140386][T14939] lo speed is unknown, defaulting to 1000
[  376.157243][T14944] netlink: 'syz.2.2255': attribute type 13 has an invalid length.
[  376.179129][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2255'.
[  376.203269][T14944] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  376.432436][T14943] netlink: 'syz.0.2256': attribute type 14 has an invalid length.
[  377.148360][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.317498][T14966] FAULT_INJECTION: forcing a failure.
[  377.317498][T14966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.332229][T14966] CPU: 1 UID: 0 PID: 14966 Comm: syz.2.2260 Not tainted syzkaller #0 PREEMPT(full) 
[  377.332258][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  377.332270][T14966] Call Trace:
[  377.332278][T14966]  <TASK>
[  377.332286][T14966]  dump_stack_lvl+0x189/0x250
[  377.332318][T14966]  ? __pfx____ratelimit+0x10/0x10
[  377.332344][T14966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.332370][T14966]  ? __pfx__printk+0x10/0x10
[  377.332390][T14966]  ? __might_fault+0xb0/0x130
[  377.332429][T14966]  should_fail_ex+0x414/0x560
[  377.332463][T14966]  _copy_from_user+0x2d/0xb0
[  377.332487][T14966]  ___sys_sendmsg+0x158/0x2a0
[  377.332513][T14966]  ? __pfx____sys_sendmsg+0x10/0x10
[  377.332586][T14966]  ? __fget_files+0x2a/0x420
[  377.332604][T14966]  ? __fget_files+0x3a0/0x420
[  377.332634][T14966]  __x64_sys_sendmsg+0x19b/0x260
[  377.332659][T14966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  377.332692][T14966]  ? __pfx_ksys_write+0x10/0x10
[  377.332723][T14966]  ? do_syscall_64+0xbe/0xfa0
[  377.332755][T14966]  do_syscall_64+0xfa/0xfa0
[  377.332779][T14966]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.332803][T14966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.332817][T14966]  ? clear_bhb_loop+0x60/0xb0
[  377.332835][T14966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.332850][T14966] RIP: 0033:0x7f39e678f6c9
[  377.332868][T14966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.332884][T14966] RSP: 002b:00007f39e75de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.332906][T14966] RAX: ffffffffffffffda RBX: 00007f39e69e5fa0 RCX: 00007f39e678f6c9
[  377.332920][T14966] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000006
[  377.332932][T14966] RBP: 00007f39e75de090 R08: 0000000000000000 R09: 0000000000000000
[  377.332944][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.332955][T14966] R13: 00007f39e69e6038 R14: 00007f39e69e5fa0 R15: 00007ffedc2f0378
[  377.332990][T14966]  </TASK>
[  378.188412][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.365943][T14980] wg1 speed is unknown, defaulting to 1000
[  378.428192][T14988] wg1 speed is unknown, defaulting to 1000
[  378.428534][T14980] lo speed is unknown, defaulting to 1000
[  378.445958][T15003] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2271'.
[  378.462109][T15004] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:20001
[  378.573537][T15007] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2272'.
[  379.228349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.460006][T14988] lo speed is unknown, defaulting to 1000
[  380.033355][T15071] ip6t_REJECT: ECHOREPLY is not supported
[  380.169543][T15071] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2287'.
[  380.225474][T15069] wg1 speed is unknown, defaulting to 1000
[  380.268405][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.340556][T15080] netlink: 'syz.4.2289': attribute type 10 has an invalid length.
[  380.388536][T15069] lo speed is unknown, defaulting to 1000
[  380.510654][T15086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2290'.
[  380.937752][T15101] netlink: 'syz.0.2293': attribute type 28 has an invalid length.
[  381.071997][T15106] bridge3: entered allmulticast mode
[  381.181198][T15108] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2294'.
[  381.201015][T15102] wg1 speed is unknown, defaulting to 1000
[  381.308378][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.352307][T15102] lo speed is unknown, defaulting to 1000
[  381.774719][T15120] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002
[  382.003415][T15123] netlink: 'syz.0.2298': attribute type 1 has an invalid length.
[  382.069814][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'.
[  382.183137][T15125] bond8: (slave bridge9): making interface the new active one
[  382.198233][T15125] bond8: (slave bridge9): Enslaving as an active interface with an up link
[  382.348374][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.783744][T15143] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2302'.
[  382.793112][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2302'.
[  382.804701][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2302'.
[  382.814012][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2302'.
[  383.120841][T15155] netlink: 'syz.7.2306': attribute type 28 has an invalid length.
[  383.388387][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.401612][T15166] wg1 speed is unknown, defaulting to 1000
[  383.440797][T15166] lo speed is unknown, defaulting to 1000
[  383.493144][T15176] netlink: 'syz.2.2312': attribute type 10 has an invalid length.
[  383.502949][T15176] bond0: (slave wlan1): Opening slave failed
[  383.576092][T15178] tipc: Started in network mode
[  383.594249][T15178] tipc: Node identity b2e5b9c987b2, cluster identity 4711
[  383.611056][T15186] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20004
[  383.617014][T15178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.627603][T15181] syzkaller0: entered promiscuous mode
[  383.634639][T15180] x_tables: duplicate underflow at hook 1
[  383.641908][T15181] syzkaller0: entered allmulticast mode
[  383.722744][T15181] tipc: Resetting bearer <eth:syzkaller0>
[  383.785707][T15181] tipc: Disabling bearer <eth:syzkaller0>
[  383.920148][T15190] wg1 speed is unknown, defaulting to 1000
[  384.100938][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'.
[  384.211953][T15190] lo speed is unknown, defaulting to 1000
[  384.291311][T15206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.326432][T15206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.428389][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.533728][T15210] wg1 speed is unknown, defaulting to 1000
[  384.706168][T15210] lo speed is unknown, defaulting to 1000
[  384.834381][T15220] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  384.910208][T15222] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2324'.
[  385.067473][T15226] netlink: 'syz.7.2325': attribute type 1 has an invalid length.
[  385.097900][T15226] netlink: 'syz.7.2325': attribute type 1 has an invalid length.
[  385.468392][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.741357][T15236] wg1 speed is unknown, defaulting to 1000
[  385.791404][T15236] lo speed is unknown, defaulting to 1000
[  385.923496][T15249] xfrm0: left promiscuous mode
[  385.934090][T15249] veth5: left promiscuous mode
[  385.940827][T15249] bond2: left promiscuous mode
[  385.945792][T15249] bond3: left promiscuous mode
[  385.954476][T15249] bond6: left promiscuous mode
[  385.960982][T15249] tipc: Resetting bearer <eth:syzkaller0>
[  385.984838][T15249] vlan2: left promiscuous mode
[  385.990780][T15249] bond7: left promiscuous mode
[  385.996644][T15249] ip6gre2: left promiscuous mode
[  386.048785][T14619] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.058016][T14619] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.079724][T14619] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.089875][T14619] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.508447][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.796302][T15268] wg1 speed is unknown, defaulting to 1000
[  386.822324][T15268] lo speed is unknown, defaulting to 1000
[  386.991989][T15273] tap0: tun_chr_ioctl cmd 1074025681
[  387.020854][T15280] tap0: tun_chr_ioctl cmd 35111
[  387.190354][T15287] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  387.350067][T15292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  387.428632][T15298] netlink: 'syz.4.2342': attribute type 1 has an invalid length.
[  387.437162][T15298] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2342'.
[  387.548607][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.752569][T15300] team0 (unregistering): left allmulticast mode
[  387.759039][T15300] team0 (unregistering): left promiscuous mode
[  387.765594][T15300] bridge0: port 1(team0) entered disabled state
[  387.775521][T15300] team0 (unregistering): Port device bridge5 removed
[  387.784029][T15300] team0 (unregistering): Port device bridge6 removed
[  388.317161][T15320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  388.345269][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'.
[  388.588358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.617787][T15318] netlink: 1372 bytes leftover after parsing attributes in process `syz.7.2350'.
[  389.023390][T15347] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2356'.
[  389.087747][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2356'.
[  389.126956][T15351] block nbd4: Unsupported socket: should be TCP or UNIX.
[  389.311342][T15349] syzkaller0: left promiscuous mode
[  389.317514][T15349] syzkaller0: left allmulticast mode
[  389.549194][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  389.628353][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.668356][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.036040][T15347] bridge1: left promiscuous mode
[  391.085035][T15347] macsec1: left promiscuous mode
[  391.098954][T15347] macvtap1: left promiscuous mode
[  391.110910][T15347] bridge2: left promiscuous mode
[  391.134643][T15347] bond1: left promiscuous mode
[  391.140302][T15347] bridge3: left promiscuous mode
[  391.230007][T15347] bond5: left promiscuous mode
[  391.238698][T15347] bond6: left promiscuous mode
[  391.257086][T15347] bond7: left promiscuous mode
[  391.265827][T15347] bridge6: left promiscuous mode
[  391.274793][T15347] macvlan3: left promiscuous mode
[  391.402704][T15359] dummy0: mtu less than device minimum
[  391.430366][ T6178] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.440358][ T6178] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.470812][ T6178] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.497301][ T6178] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.515293][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2361'.
[  391.624626][ T6178] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.636147][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  391.659605][ T6178] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.684923][ T6178] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.695910][ T6178] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.708396][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.794936][T15379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2367'.
[  391.842897][T15374] 8021q: adding VLAN 0 to HW filter on device bond7
[  391.978182][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2368'.
[  392.103101][T15402] netlink: 'syz.4.2370': attribute type 1 has an invalid length.
[  392.200170][T15408] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2371'.
[  392.279841][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2373'.
[  392.291206][T15413] nbd: socks must be embedded in a SOCK_ITEM attr
[  392.370855][T15415] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  392.447123][T15419] openvswitch: netlink: Actions may not be safe on all matching packets
[  392.473030][T15421] __nla_validate_parse: 1 callbacks suppressed
[  392.473049][T15421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2375'.
[  392.597850][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2378'.
[  392.748381][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.075558][T15457] pimreg: entered allmulticast mode
[  393.104154][T15457] pimreg: left allmulticast mode
[  393.256955][T15478] wg1 speed is unknown, defaulting to 1000
[  393.321943][T15478] lo speed is unknown, defaulting to 1000
[  393.411306][T15485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.507628][T15485] wg1 speed is unknown, defaulting to 1000
[  393.788357][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.903502][T15503] No such timeout policy "syz0"
[  393.947336][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2395'.
[  394.069582][T15485] lo speed is unknown, defaulting to 1000
[  394.540624][T15521] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2399'.
[  394.543767][T15520] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2400'.
[  394.828376][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.194798][T15530] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2401'.
[  395.233470][T15516] wg1 speed is unknown, defaulting to 1000
[  395.234509][T15534] netlink: 'syz.6.2402': attribute type 10 has an invalid length.
[  395.317785][T15534] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  395.341400][T15516] lo speed is unknown, defaulting to 1000
[  395.868332][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.298177][T15545] wg1 speed is unknown, defaulting to 1000
[  396.423605][T15545] lo speed is unknown, defaulting to 1000
[  396.591035][T15554] bond0: (slave rose0): Error: Device can not be enslaved while up
[  396.908408][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.232523][T15564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2409'.
[  397.248367][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2409'.
[  397.333803][T15566] wg1 speed is unknown, defaulting to 1000
[  397.342055][T15566] lo speed is unknown, defaulting to 1000
[  397.948341][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.585973][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.611979][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.630655][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.652315][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.689884][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.707841][T15600] sctp: [Deprecated]: syz.4.2417 (pid 15600) Use of int in max_burst socket option.
[  398.707841][T15600] Use struct sctp_assoc_value instead
[  398.753542][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.794182][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.835109][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.864946][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.906428][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'.
[  398.988360][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.664149][T15637] IPVS: Unknown mcast interface: vlan1
[  400.028336][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.341995][T15649] bond0: (slave netdevsim0): Releasing backup interface
[  400.467373][T15649] bond1: (slave macvlan2): Releasing backup interface
[  400.586378][T15659] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  400.695758][T15665] syzkaller0: entered promiscuous mode
[  400.737916][T15665] syzkaller0: entered allmulticast mode
[  401.068374][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.112065][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.148525][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.383585][T15673] netlink: 'syz.0.2435': attribute type 6 has an invalid length.
[  403.393341][T15686] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  403.866032][T15719] __nla_validate_parse: 61 callbacks suppressed
[  403.866054][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2448'.
[  404.081278][T15728] netlink: 548 bytes leftover after parsing attributes in process `syz.2.2447'.
[  404.086639][T15724] netlink: 'syz.2.2447': attribute type 29 has an invalid length.
[  404.100831][T15727] netlink: 'syz.2.2447': attribute type 29 has an invalid length.
[  404.188342][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.393760][T15738] sctp: [Deprecated]: syz.7.2453 (pid 15738) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.393760][T15738] Use struct sctp_sack_info instead
[  404.554024][ T5834] Bluetooth: hci3: link tx timeout
[  404.560684][ T5834] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  404.755274][T15744] wg1 speed is unknown, defaulting to 1000
[  404.763802][T15744] lo speed is unknown, defaulting to 1000
[  404.849960][T15753] tap0: tun_chr_ioctl cmd 1074025677
[  404.867711][T15753] tap0: linktype set to 773
[  405.228351][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.268337][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.412617][T15773] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2462'.
[  406.423144][T15773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  406.551064][T15779] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2464'.
[  406.562443][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'.
[  406.573293][T15779] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2464'.
[  406.584075][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'.
[  406.598247][ T5834] Bluetooth: hci3: command 0x0405 tx timeout
[  406.611737][T15779] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2464'.
[  406.635163][ T5837] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  406.647151][ T5837] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  406.655617][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  406.665073][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  406.675144][ T5837] Workqueue: hci3 hci_cmd_sync_work
[  406.680555][ T5837] RIP: 0010:klist_remove+0x14a/0x340
[  406.685941][ T5837] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 6e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a 6e e8 f6 49 8b 44 24 58 48 89 44 24 08
[  406.706091][ T5837] RSP: 0018:ffffc900041cf6a0 EFLAGS: 00010202
[  406.712174][ T5837] RAX: 000000000000000b RBX: ffff88802929dac0 RCX: 0000000000000000
[  406.720146][ T5837] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  406.728115][ T5837] RBP: ffffc900041cf7a0 R08: ffffffff8f639383 R09: 1ffffffff1ec7270
[  406.736122][ T5837] R10: dffffc0000000000 R11: fffffbfff1ec7271 R12: 0000000000000000
[  406.744099][ T5837] R13: 1ffff1100608dd0c R14: ffff88803046e860 R15: dffffc0000000000
[  406.752071][ T5837] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  406.761002][ T5837] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  406.767584][ T5837] CR2: 000055a7db6205e0 CR3: 00000000355ee000 CR4: 00000000003526f0
[  406.775554][ T5837] Call Trace:
[  406.779006][ T5837]  <TASK>
[  406.781939][ T5837]  ? __pfx_klist_remove+0x10/0x10
[  406.786969][ T5837]  ? __pfx_kobject_move+0x10/0x10
[  406.791990][ T5837]  ? do_raw_spin_unlock+0x122/0x240
[  406.797194][ T5837]  ? get_device_parent+0x366/0x3a0
[  406.802373][ T5837]  device_move+0x193/0x700
[  406.806814][ T5837]  hci_conn_del_sysfs+0xb8/0x170
[  406.811753][ T5837]  hci_conn_del+0xc33/0x11b0
[  406.816349][ T5837]  ? hci_abort_conn_sync+0x24e/0xe30
[  406.821631][ T5837]  hci_abort_conn_sync+0x658/0xe30
[  406.826762][ T5837]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  406.832398][ T5837]  ? hci_conn_valid+0x21/0x230
[  406.837163][ T5837]  ? hci_conn_valid+0x21/0x230
[  406.841923][ T5837]  ? hci_conn_valid+0x21/0x230
[  406.846693][ T5837]  ? hci_conn_valid+0x211/0x230
[  406.851542][ T5837]  ? __pfx_abort_conn_sync+0x10/0x10
[  406.857001][ T5837]  hci_cmd_sync_work+0x213/0x3a0
[  406.861937][ T5837]  ? process_scheduled_works+0x9ef/0x17b0
[  406.868092][ T5837]  process_scheduled_works+0xae1/0x17b0
[  406.873645][ T5837]  ? __pfx_process_scheduled_works+0x10/0x10
[  406.879713][ T5837]  worker_thread+0x8a0/0xda0
[  406.884309][ T5837]  kthread+0x711/0x8a0
[  406.888386][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  406.893596][ T5837]  ? __pfx_kthread+0x10/0x10
[  406.898300][ T5837]  ? _raw_spin_unlock_irq+0x23/0x50
[  406.903544][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  406.909010][ T5837]  ? __pfx_kthread+0x10/0x10
[  406.913772][ T5837]  ret_from_fork+0x4bc/0x870
[  406.918359][ T5837]  ? __pfx_ret_from_fork+0x10/0x10
[  406.923472][ T5837]  ? __switch_to_asm+0x39/0x70
[  406.928303][ T5837]  ? __switch_to_asm+0x33/0x70
[  406.933062][ T5837]  ? __pfx_kthread+0x10/0x10
[  406.937739][ T5837]  ret_from_fork_asm+0x1a/0x30
[  406.942503][ T5837]  </TASK>
[  406.945521][ T5837] Modules linked in:
[  406.951357][ T5837] ---[ end trace 0000000000000000 ]---
[  406.960738][ T5837] RIP: 0010:klist_remove+0x14a/0x340
[  406.966346][ T5837] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 6e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a 6e e8 f6 49 8b 44 24 58 48 89 44 24 08
[  406.988181][ T5837] RSP: 0018:ffffc900041cf6a0 EFLAGS: 00010202
[  406.995868][ T5837] RAX: 000000000000000b RBX: ffff88802929dac0 RCX: 0000000000000000
[  407.006898][ T5837] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  407.016351][ T5837] RBP: ffffc900041cf7a0 R08: ffffffff8f639383 R09: 1ffffffff1ec7270
[  407.025701][ T5837] R10: dffffc0000000000 R11: fffffbfff1ec7271 R12: 0000000000000000
[  407.034701][ T5837] R13: 1ffff1100608dd0c R14: ffff88803046e860 R15: dffffc0000000000
[  407.044387][ T5837] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  407.054741][ T5837] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  407.063012][ T5837] CR2: 000055a7db6205e0 CR3: 00000000355ee000 CR4: 00000000003526f0
[  407.072796][ T5837] Kernel panic - not syncing: Fatal exception
[  407.079125][ T5837] Kernel Offset: disabled
[  407.083615][ T5837] Rebooting in 86400 seconds..