last executing test programs:

1m14.346645069s ago: executing program 2 (id=1149):
r0 = socket(0x2b, 0x1, 0x1)
getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f0000000440))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)

1m14.191676342s ago: executing program 2 (id=1152):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r2, r1, 0x25, 0x0, @void}, 0x6a)
syz_emit_ethernet(0xd81, &(0x7f0000002700)=ANY=[], 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
syz_emit_ethernet(0x24a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100400086dd6700000002103aff00000000000000000000ffffac1414aafe8000000000000000000000000000aa04019078000000096554c03a0402880100000000000000000000000000000001200100000000000000000000000000000c3a00000000000001040000000002d84fc4823421498ad5d3c37f1f7f2b84bcb5ab284b52c81287bfa970baf6f0c4cbe1b6a835017215445c63275b28bfd59659a3925be76476d00c84c3f6a70cfbdb5d4bdda03d036bdca7e0fe2790f0fd4f70951b87292108013be8ccc91257100ad48807a7850c43389c827fbf63f4736adb904d25c00844e9f2236b7a9a74606a4a1aa486f3a37e04a7bc86c1adb644e153940d4df1d502f83b463164bac922af8c890af5677408b9c0ff96e6f0f0e768013b8e4ba4a5cf034a01c7c7e84871203519d2cb4429a87336869a0c84fee5bd2c09b000000000000730000000020affff7f00000000000000000000000000000000bc91000000000000ffffffffffffffff00803f0000000000c910fe8800000000000000000000000000010720000000010681040001040000000000000500000000000000000000800000000005885e75a87691d3f7c94d3f65cb24e0c23624769dfc0fbdca48100798aa757399daaa58e1a1ca561587ac8dfb9daa9e3c4400eec7eb63ce3a0308a9ad2f3c26089411b1bc031c376921514f89ef53508b13ab193c14fa8ac0919594960b7153b2fa62fd60ab29a7a60695fe6f1a5838f255182f0db9c932f4b7ffdf162f8eba0a7ff9f8319c938f607e"], 0x0)

1m13.924235219s ago: executing program 2 (id=1157):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
unshare(0x8000400)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000000001010400000000000000000200000024000180140001"], 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r10, @ANYBLOB="140004006e696376663000000000000000000000080005000a00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890)

1m13.547198916s ago: executing program 2 (id=1160):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50)
r2 = socket(0x1d, 0x2, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4004040)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x80}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{r6}, 0x2a, 0x80000007ff, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbf56, 0x0, 0x0, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x75, &(0x7f0000000300)=""/117, 0x40f00, 0x28, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x9, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x2, 0x1, 0x6, 0x1}, {0x4, 0x3, 0x10, 0x9}, {0x5, 0x1, 0x9, 0x2}, {0x1, 0x5, 0x6, 0x7}], 0x10, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffa}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
socket(0x6, 0x5, 0x7fffffff)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000680)=0x7121fa8e795ef632)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000240)=0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)

1m12.603731067s ago: executing program 2 (id=1166):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x810)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, r5)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1c, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000100000000000000000000000018010000786c6c25000000ffffffe1e4029356aaa5d4883f3f7f007b1af8ff10000000bfa1000000000700000000000000ffffb700000000000000b7030000000000008500000273000000181159d778df3ab736618bcc346421310000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r7], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000008002c000000030a010100000000efffffff001000000900010473797a3000000000090003dd72797a3200000000840000003a0a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c08000340000000a20800044000000022050002000700000024000180090001006d6173710000000014000280080002400000000f08000340000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xf8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r11=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x9f, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={0x0, @qipcrtr={0x2a, 0x3, 0x7fff}, @ethernet={0x306}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, 0x2}, 0xff, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x3fd, 0x101, 0xbe})
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getpeername$llc(r13, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10)
sendmsg$nl_xfrm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e000000201139000000000000000000000ab3d8f9ca7058a0c000000f801", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1414aa00000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200"], 0x128}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1m12.34758851s ago: executing program 2 (id=1170):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/42, 0x2a}, 0x6}], 0x1, 0x2b, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0xfffffffc, 0x4) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0xfffffffc, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x178, 0xffffffff, 0x0, 0x230, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'veth0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x73, 0x2, 0x12}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id=0x2, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @port=0x4e20, @port=0x4e21}}}}, {{@ip={@loopback, @remote, 0xffffff00, 0xffffff00, 'veth0_to_batadv\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv4=@private=0xa010101, @ipv4=@remote, @port=0x4e24, @gre_key=0xc}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'wg2\x00', 'veth1_to_bond\x00', {}, {0x101}, 0x73, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x4, @gre_key=0xd44}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x3, 0x400122a0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1m11.799992624s ago: executing program 32 (id=1170):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/42, 0x2a}, 0x6}], 0x1, 0x2b, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0xfffffffc, 0x4) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0xfffffffc, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x178, 0xffffffff, 0x0, 0x230, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'veth0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x73, 0x2, 0x12}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id=0x2, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @port=0x4e20, @port=0x4e21}}}}, {{@ip={@loopback, @remote, 0xffffff00, 0xffffff00, 'veth0_to_batadv\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv4=@private=0xa010101, @ipv4=@remote, @port=0x4e24, @gre_key=0xc}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'wg2\x00', 'veth1_to_bond\x00', {}, {0x101}, 0x73, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x4, @gre_key=0xd44}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x3, 0x400122a0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

7.567495005s ago: executing program 5 (id=1788):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)
unshare(0x20000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f00000009c0)="076ce369c0eba97abc9a610d62919c30b62631fe6299f9baecc0a6fa59d6a898259f1c9e0de1bd205b69c0ae5b8a160dd8b261f95afd346e740db829dff4d5a6e1", &(0x7f0000000780)=@udp=r7}, 0x20)
sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0)
getpid()
sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x105}, {0x0}], 0x2}, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)

6.6140454s ago: executing program 0 (id=1798):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000005000400000000000900020073797a3100000000050005000a000000110003006f727400000000"], 0x4c}}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
r4 = epoll_create1(0x80000)
r5 = socket$unix(0x1, 0x1, 0x0)
close(r5)
socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa0028000})
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES8=0x0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r9, 0x12}, 0x10)
listen(r6, 0xfffffffd)
r10 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg(r10, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x9, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000)

6.549272498s ago: executing program 5 (id=1799):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}}, 0x4000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c841}, 0x20000048)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c004)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}}, 0x4000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) (async)
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c841}, 0x20000048) (async)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c004) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async)

6.207125827s ago: executing program 5 (id=1803):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x1000000000000, 0x2}, {0xd}, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000340)={0x0, 0x0}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r8 = socket(0x2, 0x3, 0x6)
bind$inet(r8, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002e000100000000000000000004000900000011800001cf80d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec63198f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972ed0cd363a65d19c73ac3e856dabeefdd7a775655ff99c2abdc650ece6458a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6fdffff000000ffffd49895a112f947e4d02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb"], 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300)

6.080723872s ago: executing program 0 (id=1805):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x23, 0x5, 0x776)
bind$rose(r0, &(0x7f0000000340)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x40)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000380)={'gre0\x00', 0x100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/16], 0x10}, 0x19}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x100000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x2dd}}}, 0xb8}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYBLOB="0100fb7c12f3f995a9491a8be7dcdc991fff00000000000901000000140000000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000300))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x12, r9, {}, {0x8, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, 0xfd], 0x0, [0x2, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x7, 0x8, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
unshare(0x6a040000)
socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="10002d297000fc2700c93ac76c8dbdc6fa77dbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="0400cc000400930004000501"], 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x10)
r12 = socket(0x14, 0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r12, 0x400261f3, 0x0)

5.517087622s ago: executing program 1 (id=1808):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0)
sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4885}, 0x8090)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$sock(r5, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @any, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x1c, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, &(0x7f0000003980)=[{&(0x7f00000025c0)="554c6bf09a07554ada4d286262ba851be52d6642d7d89f267acdbabf18d6026997f20c7197704e47858f551bea2dadb0c9565e6915f1c1d12a791769182df0d63a5cc3535ebb6307ee1e0485ae016792ddda805858daccffab804bdd0bf1aaa1dcfec143669b59f7054950b69ed88c9806", 0x71}], 0x1}}], 0x2, 0x20004084)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)="080001007c10bc24bc", 0x9}], 0x2}, 0x20008890)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000840))
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000050000030900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a01f3ff000000000000000500000008000b40000000002c000480280001800800824aace864001c0002800800034000000002080002400000000308000140000000060900010073797a300000"], 0xc8}}, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

5.454075568s ago: executing program 5 (id=1809):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', <r1=>0x0, 0x20, 0x7, 0x7f, 0x69baab82, {{0x2a, 0x4, 0x2, 0x6, 0xa8, 0x4, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x20, 0xc7, 0x0, 0x1, [0x5, 0x0, 0x7fffffff, 0xe0c, 0x0, 0x4, 0x47d2]}, @cipso={0x86, 0x56, 0x3, [{0x7, 0xa, "e0f29129f4ba4380"}, {0x2, 0xf, "3707e0d14eac13ed0412af2b97"}, {0x0, 0x4, "6e14"}, {0x5, 0xa, "f09c9d729cdc207c"}, {0x3, 0x10, "f53ed99734ff27133ae53e14383b"}, {0x6, 0x2}, {0x7, 0xe, "4b6c1d06be901d1fddabb54d"}, {0x1, 0x9, "1a9a6243c61577"}]}, @generic={0x89, 0x2}, @noop, @timestamp={0x44, 0x10, 0x4b, 0x0, 0x7, [0xffff, 0xc, 0x6]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="792fa4f391bc6594e24ba1494f7e21eb2da8eccdcfc27af72a5167194f7160a292b2566b1abfa86cc14aad659508adeabc24dbb4fc723496364177ce94f015c14c4611f1722f71d7b0685401c9207a53674f9be4e70ce48da91861882b16ee8a9f90e1445907036595eb8e37adc08c9f38400c52aebd4936d51ca9cceb3793d37bc1c7f518a69d3ebcf93276f0b229f2998186f9a57d1a212748d39a57dd0fd41ef51393311418aa", 0xa8}, {&(0x7f00000000c0)="43b7d0fb7a8c875b8ad7c0967d2adebaefcb3b60410c42d51676cdf304d8f3f3229391448759d3dfc61a9385de70f71550e28c485916e510acb8b408b6d3f82114b736b43abdbca665993074388e645d51a1165d33be17a7034045a6e3d067750953a8ce671acb2150404e6f2a4a8e423c95b2df0c36cb5d78eedbb522bbf51c6035df3540d69d", 0x87}, {&(0x7f0000000180)="ea35d1ff162dbea9b4f051b7", 0xc}, {&(0x7f00000001c0)="71ee77470e1f35682632d17dec0069478a07bb26fa93d1fecd69c5c6a51f597d4285a5839bdaa5", 0x27}], 0x4, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010102}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0xb, 0x19, [@dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010101]}, @rr={0x7, 0xb, 0x6c, [@empty, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @broadcast}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x7b, 0x3, 0x0, [{@remote, 0x401}, {@local, 0x6}, {@private=0xa010102, 0xe7}, {@multicast1, 0x3}]}, @ssrr={0x89, 0xb, 0x5c, [@multicast2, @remote]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0xa, [0x0, 0x15d]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x17a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x120}, 0x20000040)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_percpu\x00', 0x0, 0x0)
bind$packet(r3, &(0x7f00000005c0)={0x11, 0x0, r1, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000600))
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000640)={@dev}, &(0x7f0000000680)=0x14)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r3)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000940)={0x8, 0x30, '\x00', 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000009c0)={0x80000001, 0x10, '\x00', 0x1, &(0x7f0000000980)=[0x0, 0x0]})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000a40))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000a80)=0x1d, 0x4)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r6)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0xf24024110bd83ae9)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r3)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000a04}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xe4, r8, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa900000}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000010)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r3)
sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000001100)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={0x220, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xd}, @NL80211_ATTR_IE={0x1d0, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa, 0x5}}, @tim={0x5, 0x54, {0x10, 0xd8, 0x0, "911386633b42f668f6f838f95c882d398b6b86f32bb202b6c64c6c9158cc6889f5d065f8b262661a7d9d532b9fe5b2c79541ba7d0e1d9c3f3812d981e0c228509ecd959d9bcb6529dd969298bf52b0db85"}}, @random={0x3, 0x27, "d5ba0b0a34915da9c3e2c05841715ead693c5ddd0a81d32ead31e1aa11be25d0c118327f5ee5e5"}, @ibss={0x6, 0x2, 0x4}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @fast_bss_trans={0x37, 0x137, {0x1, 0x9, "097edc8b8ab6d385c59fbe1f74b43e3e", "d41e3818e3987bc19c15973411f02c21ed3d8594fe224397932cd2f056e11aca", "13cdf4e82458d292a7be0eb9d37bf6819c5d6cf1c07a53690706d280f2928115", [{0x4, 0x12, "a12f5d275b78cd6093bd2d54dbfe9de0dce3"}, {0x2, 0x7, "8468c282f59328"}, {0x3, 0x1b, "d6d1b8960a0e9fcf87c2d11f5275c17e85eb36a7571d742a0a91e4"}, {0x2, 0xc, "23dc8d4e4bc8d4f5c0a0f908"}, {0x1, 0xd, "2659499cd35234b68d765eb4a4"}, {0x3, 0x21, "3839370e40b1dbe895460720b61eba85d85701c0f92c4337faf4289f1408d8fda8"}, {0x1, 0x23, "c3e188a92d6097f1f49bfa025253e4d8cf2b4ee2a989410eabe32f6ffb57bdd7c69f05"}, {0x2, 0x1e, "a9154ffd8715b7958d07c17981883e81dc51d974e07492723f5a1c807d4c"}, {0x2, 0x24, "621109d55065a9f328203806d0a9bce2252fdf459819a5252d458511bd72bb31babb3e7c"}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x565}]}, 0x220}, 0x1, 0x0, 0x0, 0x8040}, 0x20008084)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r3, &(0x7f0000001140)={@void, @void, @ipv6=@tipc_packet={0x1, 0x6, 'O\"t', 0x59, 0x6, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, {[@routing={0x87, 0x4, 0x1, 0xff, 0x0, [@loopback, @mcast2]}, @dstopts={0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x8, {0x0, 0x0, 0x2, 0x6}}]}], @payload_conn={{{0x19, 0x0, 0x0, 0x1, 0x1, 0x6, 0x2, 0x2, 0xaf, 0x0, 0x3, 0x1, 0x4, 0x0, 0x1, 0x87, 0x4, 0x4e21, 0x4e20}}, [0x0]}}}}, 0x81)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001240), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r10, 0x710, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffeff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80001)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r3)
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x84, r11, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb2f}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2fc}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001500)={0x0, r0}, 0x8)

5.208028033s ago: executing program 5 (id=1811):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="000000000000000028001200"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x2c}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0x7}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x89000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x8, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000), 0x8)
setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000440)='cgroup.max.descendants\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000a01030000000000000000000000010900010073797a3100000000530006003727281a770bd72686887f302bfe606016e81be2d2455be59dc074730b59420024f193f4f24d42c65488f415531174dc16f4257d11da906d873ef3bae613037e97863bd16c1f289174cb19dc8e1122000900010073790930000000004c000000030a0101000000000000000001000008080007006e6107000000010073797a31000000002000048008000140000000011400030076657468305f766c616e00000000000004000880140000001100010000000000000000000000000a0000001506595873071cda8d3ab6a965fef1638ebd32cbcdb78c9509de9517bf1b6f3bb7500c770a03d2e38c895766afdcd7e53dd8fccf4c18d93516e058454a243fdd6dc2b32acd1fa08b59c7cdf4dd74841e2ca241ad7b027051c1c70467c6b9d0cabf5f4ab2e5a39d0d01b68033c5287d0a5401618fffd2e5"], 0xf4}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000300)={0xfffc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}, @in6={0xa, 0x4e23, 0x0, @local, 0x3}]}, &(0x7f0000000480)=0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x1800e, 0x6, 0x5e}, &(0x7f00000002c0)=0x10)
r7 = socket(0x1e, 0x4, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000001)
mmap(&(0x7f0000a46000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r1, 0x5bce5000)
syz_emit_ethernet(0x0, 0x0, 0x0)

5.207765454s ago: executing program 1 (id=1812):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @local}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xf}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000001ff0), 0x10)
sendmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x34}, 0xee, 0x0, 0x0, 0x48041}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@nested={0x8, 0x131, 0x0, 0x1, [@nested={0x4, 0x10f}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c089}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r4, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010001000000000000000300000a20000000000a01020000000000000000020000090900010073797a30000000006c000000160a030000000000000000000200000a400003802c000380140001006e696376663000000000000000000000140001006e696376663000000000000000000000080001400000000008000240000000020900020073797a31000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

4.88308595s ago: executing program 1 (id=1813):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x10001, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x3554ed44113974bc}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "d0a37917191592b7"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1d79, 0x4}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300020004a00030029bd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe880000000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x20000cd0}, 0x40)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r13 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

4.45385491s ago: executing program 5 (id=1814):
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @local, 0x6}, 0x1c)
unshare(0x400)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xd, &(0x7f0000000080)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @exit, @exit, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], 0x0, 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)

3.526398562s ago: executing program 3 (id=1822):
socket(0x27, 0x2, 0x3)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0xd, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x24)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000800060040020000080005000000006f"], 0x2c}}, 0x810)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)

3.371366642s ago: executing program 3 (id=1825):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}, 0xfdffffff}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000)

3.251626515s ago: executing program 3 (id=1826):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'veth1\x00', 0x100})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x300, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0x0, 0x2}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000c80)=[{&(0x7f0000000a80)="b250010ec73c1267d960de0d6fcfe9bb3cfa036c9a719b7691756b3fb9dd0d3029efab73b166e6252b1d20df7ca46ef29f2038e03b7ec36daf5d2a6a9aa2a63dabe89c23acd69552753b663bc783fada4a7e274b0a9160e4ae9f6af5f1b13a85e71f01f228b440da1c976eedafbdcfb6183c72f1f40a206eafff8493381e156b3edc78d2a707e6e198e22d367daf43e7386b97720782aff333e938c4f7ada0008062c74aeeaab3baf845b1acc8131947699f59fb5276fd5f0d07dae52efeec2094"}, {&(0x7f0000000440)="e515def07c7313a4e5bf402924900fe30c7840205294780ff36b51bd75bae7cd0b9675ae641a00ba6ab08e2776ce3aa47981e5dfd033741a4b507744ebca3e9a86f675dbaf0c5102e54e135fbed2b97ebd320b1694fef2058bc2f12c929e0bdfe530ecc342813355e911e7e9de3c744acee0a35fc427ea1f079e1b3f5e6a91d8ebd61bf4c3"}, {&(0x7f0000000340)="33fb16b53803c319ddee113605f9f1addaf377e587d5012c720b88efb5ee65dfc9ee8a603abbc8d82f265b11b035c6e79a63eac54e5710179a7b98865e1bd8cdf80437a8e90c25aa4ec064f1aa19bd9f327bbb35810406007935"}, {&(0x7f00000005c0)="e3b48dfe7b0499cf1cbca3c47bc995f11fd0325b16b6a616078a1bda42072956609cd27dc58373fa564f6f1a7cf009d84bb31d585313e3385caf9434b601b7d36d2a0ea1a30b056f848c3142ecf27b5411cae0a5dd7fd8ec3601f0768c1efe32692f4d76dbb4cfca4118e7f6995529438c8b002bebedacc0fbf76e655e5b29ac1815cf8d14d4fefa920666e9a1957817d1c992ed0e0dd9b7cc2b5edf3c93"}, {&(0x7f0000000b80)="60c538f9742f90f193e83f5601d9bb769b5869fb37281dd163a1274cbdfbf241f3f5197565125c194a6c6c2be89620dfdd10537b54708666d8e8b8875700004f56ffc8d6e2ad32feb43b81341e3fc3090474f0a4dbccfa5e478be51543ccccf598e5ea7db2e50eedc13e"}, {&(0x7f0000000700)="cbcd08d8a63e3901ecf700b932e8a294c9993ca7810000149d58ef2b18e734b9ba0ee2"}, {&(0x7f0000000d00)="25fbb0b629dbf4d5f19231c24f7229f776005e88eb068131cd9b3b4c4fcfcfb716e3aa35a00c3121bc41a48b6737cf7bdbf6a6ebc005bd93f4bf25e8784531546773eb2c060d4f5d4c62fc48fff8c6fefcd58ad19c563070c06c15113dcfdf03e7a57faebd2428083bdfd149b9e25f11fc5e4ff993178b33437b3684a7f2"}]}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
ioctl$sock_proto_private(r4, 0x89eb, &(0x7f0000000800)="b227d6aac3c51d33f220b406d311ea7eab2330a83d229ab4ac2132be517d54c14557491b8805c7e27d0de7e77eedf9333f97bb54b7bfa5f6582f24da715094c9bc65620043d521eebf02a6bff851863cde64c6bc4b9fdf4829d45b6c2a957e9776989c76bdf3829f857fe2980b70d84cb482333edb7f0c6d91ace75f7cde1f5e38f16d69cc46134cbafbeb093fa56f9b40c8427e039d17a059b0e6fedd690d00754a78f23fa6c721c90609678fca9676181e56c4f21b17d7bb7cc3da460a7bbff76d1d094b6b9dce81fc4cd90e391de6d1f1c32b59b61420bf46255c000190271c56cdd8c64dfcb537c5253c")
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x160, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xfff3}, {0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x130, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x40, 0x5, 0xfffffff5, 0x4, 0x6, 0x10}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x8, 0x1, 0xd, 0xf, 0x14, 0x6}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000c40)={0x0, 0xffffffffffffffff, 0x3, 0x5, 0x161, 0x3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
close(0x3)

3.197531793s ago: executing program 0 (id=1828):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r1=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r2=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r3)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b"], 0x250}}, 0x2000c000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="204855df23a5d891071b3300", @ANYRES32=0x0, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40)

2.719149551s ago: executing program 4 (id=1830):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000380)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48)

2.659818206s ago: executing program 0 (id=1831):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x14)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00')
socket$rds(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
socket$netlink(0x10, 0x3, 0xf)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)

2.607598648s ago: executing program 4 (id=1832):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffff7f850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f0000000000)=0x4, 0x4)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003d40)={&(0x7f0000003c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x7, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x5f, 0x0, 0x670b71ef8764820d, 0x0, 0x30, 0x0]}}, 0x0, 0x2c, 0x0, 0x1, 0x320}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x20, &(0x7f0000000180)={&(0x7f0000000240)=""/211, 0xd3, <r3=>0x0, &(0x7f0000000080)=""/39, 0x27}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)

2.550131549s ago: executing program 4 (id=1833):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "7346c551830e9d1b1fa18315e75491dcfcbba086c917f42d5649e6ed566e846be54d4edd5a526f2a538bb1b43cb37c7503e5ae9ad22a82786820d7106e4de08b"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x3}, 0x4, 0x0, 0x0, 0x0, "a14f611104f36bfc"}}, 0x48}}, 0x11)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

2.327384843s ago: executing program 4 (id=1834):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000800), 0x0}, 0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffe, @empty, 0x9d}}, 0x0, 0x8002}, 0x90)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x1b8, 0x0, 0x0, 0x1b8, 0x348, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x3}}}, {{@ip={@empty, @empty, 0xff, 0xff, 'veth1\x00', 'geneve0\x00', {}, {0xff}, 0x33, 0x0, 0x20}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10000, 0x7, @ipv6=@remote, 0x4e23}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3b}, 0xff, 0x0, 'lo\x00', 'ipvlan0\x00', {}, {0xff}, 0x6c, 0x3, 0x25}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0xfffffff8]}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x87, 0x5e1, @multicast1, 0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0x0, 'veth0_macvtap\x00', 'pim6reg\x00', {0xff}, {}, 0x62, 0x1, 0x18}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x8000}], 0x2, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x1fc, 0x4)
recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
r6 = socket(0x2, 0x400000000002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r7, 0x1000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=<r8=>0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, <r9=>0x0}, &(0x7f00000006c0)=0xc)
sendmmsg$unix(r6, &(0x7f0000001000)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000005c0)="5c51ca61065223b0eab687bde937d23caa1fb65c819ef467e33dcadb24ea2e896145cf266c9067e169ed7e5eec9523cc5f22a67877162c7bfef9f28d0648234a4a85079716d2b091b1ab3f51553d362821b5d4f5ca06e1bc0c8660f7aaaac4fa40453ba8bb50ed23d662ad293b466a8b5648c27e963f0fe20edfc5e3943c4893734b16591e1b26a8fa7c054f375baf804ebf163a0acefcce5e294f8afe26350fbf46bbe9dcb832f92e61b635f0fe02283d0482c5b0ac41eff1482af26f122f7c6218c33aeb16749fd981cbaedc528b00382a6f2f5b97b7d5f8f5c3014820cbf34e9d72bdfbe62bb6b552", 0xea}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x20, 0x6e113f8932d08dee}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000740)="01dfea73e5b7a5a2a7dcf75bc0c41cf6f97346221861d9748326da55e13c6db68b5eea47d43f", 0x26}, {&(0x7f0000000780)="d1a4617d760377d26f44d5bdf82aad2c2d57ac9b0dcd46fa4820bf86d9f1a8a78cdaceef", 0x24}, {&(0x7f00000007c0)="0d727bd966c79b528f9fd3e827f3937b353d4877246cbb54c6ed199894f7d25d263918ba94d8cb95fbbf2dc675303326097d19bb9b482ffd36ecf56b6cd3a5e5fbd584be2ee67e1678c7b820dba70eeed54be59422e1a125a0a01b56e217bc5f52dda677f2068e0284bb79a5a34608d1b5da3db68c78b928acfae99c3b615b", 0x7f}, {&(0x7f0000000840)="6ef0c4ec81174d6e1dd5ccff546f028794072aa388eaafa845b5a5e6e276d8dab2cfa8dc00f1caec9e591a1f0fbdb82176c087596f29b8775283f7d34d8a3a", 0x3f}, {&(0x7f0000000e40)="8f644659c75640953d2e248a2397df2220aa40138e1dc5ce65e4ab3fe92ac00465654f6ef1cd4dbf3a5d0ec276", 0x2d}, {&(0x7f0000000e80)="d1b5abfbb360612c2eedf72a98c5a92612a98adb5e2f4ac405c291ed9fc3cefc785b2e7f90597af8d3567df4c10564b5088c4e2541444b052eb7c33280cdb28fd1c154ca8eed4c330f987b7dab1014308e4cd9e0a8753e4ba8a2fbc69acfcb4fc40fa38b9dd8be62caa0a24f3310f4a0e5100477884eca569d4ca313a8145c3db601e89ce1499f0ee2ebd97b1dcc335bd1b220b4a4b24a21f8ebe2aa10df7a79bfc0bae0409df91cfc010f13b5bd7171c05d9db74b66dd35b3a70f1f7b5b9f627be9ccf13af4de0d6b4a9c72d67b5b62d6fbf849aa83252ed583d385b4aafa2fc4463a3e4e8b5889b6092272289654db084c61f56619a0d6", 0xf8}], 0x6, 0x0, 0x0, 0x44}}], 0x2, 0x20000841)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0)

1.972363351s ago: executing program 0 (id=1835):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
socket(0x11, 0x3, 0x0) (async)
socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvmmsg$unix(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) (async)
recvmmsg$unix(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000002c0)=ANY=[], 0x66)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2ffc0e9a", @ANYRES16=r11, @ANYBLOB="010000000000fedbdf25030000001c00018008000300060000000d0001007564703a73797a3000000000"], 0x30}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2ffc0e9a", @ANYRES16=r11, @ANYBLOB="010000000000fedbdf25030000001c00018008000300060000000d0001007564703a73797a3000000000"], 0x30}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0xb98}}, 0x0) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0xb98}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028005002d00010000000500250001000000050029000000000008000a00", @ANYRES32=r9, @ANYBLOB="738211d873"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44)
close(r2)

864.405134ms ago: executing program 4 (id=1836):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffffffffffeb0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000040)) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2000002, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000140)=[r2, r2, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x8, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x8}, 0x94) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
unshare(0x62040200)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0xb0}}], 0x1, 0x24004881) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
unshare(0x400) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_regs={0x12}})
close(0xffffffffffffffff) (async)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

793.810848ms ago: executing program 3 (id=1837):
r0 = socket$kcm(0x29, 0x7, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x0, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x0, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}}, 0xc8c0)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x77, &(0x7f00000004c0)={@remote, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@llc={0x4, {@llc={0xbc, 0xf4, "fd", "437518b55f0f5bd6c4ac1963fe4e74c3193208fea82f9b7dba5d36a16d95dfdc09ca8cdfda5a8313c82eb0ad26ef62925407963848c9fc51da9d42a74e0a770a094bb0b037a150980b0b9de8107faf5ff2299503fed8d5e7ac87c6bfeace2c1cebf8"}}}}}, &(0x7f0000000540)={0x0, 0x3, [0xcbd, 0x5c9, 0x9a1, 0x9cd]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}]}, &(0x7f0000000080)=0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
close(r0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRES32, @ANYBLOB="0800040000000010080003"], 0x2c}}, 0x0) (async)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRES32, @ANYBLOB="0800040000000010080003"], 0x2c}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="740581f604c559656d9e0b594a978be5ec0158356ad43972d60f67487a63f01f796bb3155a7fe62c2fc4d134fce158b182eae9bc56fec77474953d140308b1a96114e0446ddafd839965435bbcc285c5ff10f431b712488bd15c7e3503da9e9a47df43efc638cefc80ba5a71f3144b36239a412a5c6f82b163f17b2d88bb2ed4ba2851e24f009cb62b3461d7ee32ebe46d5e47e64510867e93724ee59e3f4e3a7566105bee9024c4df279425847800174ccda22bc68839504db36b4fdc724b9c1c813c4cc492f567fcb3cfec7db25865ab"], 0x4c}, 0x1, 0xba01}, 0x811)
accept$ax25(0xffffffffffffffff, &(0x7f00000005c0)={{}, [@rose, @remote, @bcast, @netrom, @remote, @bcast, @bcast]}, &(0x7f0000000640)=0x48)
bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e24, 0x4, @mcast2, 0x7b8}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e24, 0x4, @mcast2, 0x7b8}, 0x1c)
r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x45, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r6, 0x7, 0x10}, &(0x7f00000000c0)=0xc)

703.671031ms ago: executing program 4 (id=1838):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1, @ANYRESDEC=r0], 0x12f4}, 0x1, 0x0, 0x0, 0x44054}, 0x8010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000400007012bbd7000fedbdf25017c00000400c28004000800", @ANYRES32=0x0, @ANYBLOB="68e8f67c"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES8=r3], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES16=r7, @ANYRESDEC=r4, @ANYRES32=r8, @ANYRES8=r0], 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24040810)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x80000001}, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r11)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRESDEC=r9, @ANYRES32=r8], 0x32600)
socket$key(0xf, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socket$inet6(0xa, 0x5, 0x0)
r12 = socket$inet6(0xa, 0x5, 0x0)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r13, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r13, &(0x7f00000004c0)='W', 0x1, 0x40801, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback}, 0x1c)
connect$inet6(r12, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
connect$inet6(r13, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)

703.339554ms ago: executing program 0 (id=1839):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000c0007800500150009000000050001000600000005000100070000000500040000000000050001000700000011000300686173683a6e65742c6e657400000000000000800000000000000000a304892d296c688afd18e41fba456828cbcbe32be1badc8b86e0d12e51d514613bf7c483327e8acfa95766d458aa43cde0b5533e81d91603d93b8b"], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xf0, 0x12, 0x1, 0x70bd2a, 0x25dfdbfe, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000408c345a60f3a2443f00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x8, 0x8, &(0x7f00000002c0)="a8d652aaec5e0729", &(0x7f0000000300)=""/8, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, &(0x7f0000000080))
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

656.375727ms ago: executing program 3 (id=1840):
socket$netlink(0x10, 0x3, 0xb)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280080001"], 0x4c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)

478.32563ms ago: executing program 1 (id=1841):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000820)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="0ae24580de", @ANYRES32=r1, @ANYRES32=r3], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) (async)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000820) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="0ae24580de", @ANYRES32=r1, @ANYRES32=r3], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

227.772807ms ago: executing program 1 (id=1842):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet(0x2, 0x2, 0x0)
r0 = socket(0xa, 0x1, 0x84)
socket(0xa, 0x1, 0x80) (async)
socket(0x10, 0x803, 0x0) (async)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x1, 0x8}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)="0fdc22128e", 0x5}], 0x2}, 0x40) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={<r6=>0x0, @in={{0x2, 0x4e23, @loopback}}, 0x920, 0x7f, 0x4, 0x4, 0x40, 0x0, 0x1}, &(0x7f00000000c0)=0x9c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r6, 0x8}, 0x8)

146.113295ms ago: executing program 3 (id=1843):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
socket$alg(0x26, 0x5, 0x0)
unshare(0x6020400)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
unshare(0x8040600)
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xa7}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000efffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
sendmsg$unix(r8, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x194, r12, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xd7, 0xe, {{{}, {}, @device_b, @broadcast, @random="a5b7f732be4a"}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void, [{0xdd, 0x82, "dcbea41367deed98473a9142cc7c4c388853d7c391e398f62f241a81e9a99d3dcc9e832a7e761c258e60aab8281976f60192a7a01c9551d9b3124480358fa187372b910b309778b651efa7b1bdb3d2ef9869013228a817880d0f9ad6c9e0f9e6895029d20c598822dd9b542a6da05d3351b71a1912323c04c0f7db382d51245ce6e4"}, {0xdd, 0x12, "19806818bf28e09e9845a4fff1443da9583a"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x88, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x14, 0x3, "d9ffe84ec2e981aec5f448af1f160ccc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x64, 0x2, "d92592ffafa2c01c81d70a1dda72895d35b80a5425c5557a05b72405f99fb91fb36652ebf51b186675d6c9156629939e6677072b5033fba07d196f310fff52eebce088ec9951045ef3b5c84a093da977915cf4c6217bd7bbbbf9ea8d94e9d57f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x194}}, 0x0)

0s ago: executing program 1 (id=1844):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ac69e79d000000ffffffff0000000000000000000000000000000000000000bcf5b950582eafe7ee823bfc5d432439c8"], 0x50)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000000c0), 0x4) (async)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000000c0), 0x4)
pipe(&(0x7f0000000500)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0xffffffffffff8000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0xffffffffffff8000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4) (async)
close(0x4)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000fc3c9819b84235fbf100"/26], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

8.171659][ T8166] netlink: 152 bytes leftover after parsing attributes in process `syz.0.585'.
[  158.301711][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'.
[  158.381871][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'.
[  158.498896][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'.
[  158.553055][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'.
[  159.073737][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'.
[  159.087991][ T8200] netlink: 'syz.4.592': attribute type 3 has an invalid length.
[  159.150546][ T8200] netlink: 1292 bytes leftover after parsing attributes in process `syz.4.592'.
[  159.160585][ T8200] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  159.733981][ T8227] tipc: Started in network mode
[  159.744822][ T8227] tipc: Node identity 46c53af6896, cluster identity 4711
[  159.757405][ T8227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.774055][ T8227] syzkaller0: entered promiscuous mode
[  159.774460][ T8234] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  159.784431][ T8227] syzkaller0: entered allmulticast mode
[  159.875819][ T8227] tipc: Resetting bearer <eth:syzkaller0>
[  159.998971][ T8226] tipc: Resetting bearer <eth:syzkaller0>
[  160.097564][ T8226] tipc: Disabling bearer <eth:syzkaller0>
[  160.181691][ T8244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.603'.
[  160.442785][ T8257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.979075][ T8285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.612'.
[  161.509358][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'.
[  161.945801][ T8323] netlink: 'syz.3.624': attribute type 32 has an invalid length.
[  161.954008][ T8323] netlink: 'syz.3.624': attribute type 1 has an invalid length.
[  162.010463][ T8313] bond0: (slave bond_slave_0): Releasing backup interface
[  162.027350][ T8313] bond0: (slave bond_slave_1): Releasing backup interface
[  162.037254][ T8313] team0: Port device team_slave_0 removed
[  162.045172][ T8313] team0: Port device team_slave_1 removed
[  162.052038][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.069650][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.083652][ T8313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  162.141471][ T8323] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  162.167220][ T8323] bond1 (unregistering): Released all slaves
[  162.309572][ T8333] 0ªX¹¦À: renamed from caif0
[  162.332011][ T8333] 0ªX¹¦À: entered allmulticast mode
[  162.337280][ T8333] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  163.080537][ T8363] ipvlan0: entered allmulticast mode
[  163.092718][ T8363] veth0_vlan: entered allmulticast mode
[  163.108185][ T8365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.128850][ T8372] netlink: 'syz.0.639': attribute type 32 has an invalid length.
[  163.166805][ T8372] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  163.314936][ T8372] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  163.374175][ T8372] bond2 (unregistering): Released all slaves
[  163.581912][ T8397] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.841447][ T8412] __nla_validate_parse: 3 callbacks suppressed
[  163.841467][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'.
[  163.873785][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'.
[  163.882371][ T8404] netlink: 'syz.2.645': attribute type 1 has an invalid length.
[  163.900917][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'.
[  163.933038][ T8404] bond2: entered promiscuous mode
[  163.938641][ T8404] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.964182][ T8412] syz_tun: entered allmulticast mode
[  163.970536][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.1.649'.
[  163.980952][ T8418] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  164.012044][ T8407] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  164.115832][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'.
[  164.285262][ T8431] sctp: [Deprecated]: syz.2.652 (pid 8431) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.285262][ T8431] Use struct sctp_sack_info instead
[  164.302607][ T8431] sctp: [Deprecated]: syz.2.652 (pid 8431) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.302607][ T8431] Use struct sctp_sack_info instead
[  164.482119][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'.
[  164.524038][ T8438] syzkaller1: entered promiscuous mode
[  164.529830][ T8438] syzkaller1: entered allmulticast mode
[  164.555118][ T8444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.562768][ T8444] IPv6: NLM_F_CREATE should be set when creating new route
[  164.608086][ T8405] syz_tun: left allmulticast mode
[  164.856507][ T8456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.870439][ T8456] syzkaller0: entered promiscuous mode
[  164.890362][ T8456] syzkaller0: entered allmulticast mode
[  164.911551][ T8462] netlink: 'syz.2.659': attribute type 1 has an invalid length.
[  164.937587][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'.
[  164.950047][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'.
[  165.038844][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'.
[  165.068679][ T8460] bond3: (slave bridge2): making interface the new active one
[  165.078343][ T8460] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  165.083029][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'.
[  165.131218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.169757][ T8472] tipc: Resetting bearer <eth:syzkaller0>
[  165.209523][ T8472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.218414][ T8479] netlink: 'syz.4.661': attribute type 13 has an invalid length.
[  165.227306][ T8479] netlink: 'syz.4.661': attribute type 17 has an invalid length.
[  165.280635][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.294627][ T8479] 8021q: adding VLAN 0 to HW filter on device team0
[  165.306449][ T8479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.327641][ T8473] syzkaller1: entered promiscuous mode
[  165.335653][ T8473] syzkaller1: entered allmulticast mode
[  165.341517][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.372854][ T8455] tipc: Resetting bearer <eth:syzkaller0>
[  165.446374][ T8455] tipc: Disabling bearer <eth:syzkaller0>
[  165.464101][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.483179][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.514604][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.618811][ T8494] sctp: [Deprecated]: syz.3.668 (pid 8494) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.618811][ T8494] Use struct sctp_sack_info instead
[  165.792520][ T8502] ip6t_REJECT: ECHOREPLY is not supported
[  165.817399][ T8501] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  165.903923][ T8505] sctp: [Deprecated]: syz.3.671 (pid 8505) Use of int in maxseg socket option.
[  165.903923][ T8505] Use struct sctp_assoc_value instead
[  166.016043][ T8510] syz_tun: entered allmulticast mode
[  166.038860][ T8510] syz_tun (unregistering): left allmulticast mode
[  166.462395][ T8526] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[  167.093951][ T8551] netlink: 'syz.0.685': attribute type 4 has an invalid length.
[  167.129258][ T8556] netlink: 'syz.2.688': attribute type 21 has an invalid length.
[  167.143846][ T8551] netlink: 'syz.0.685': attribute type 4 has an invalid length.
[  167.144141][ T8556] netlink: 'syz.2.688': attribute type 22 has an invalid length.
[  167.163004][ T8556] netlink: 'syz.2.688': attribute type 23 has an invalid length.
[  167.178564][ T8556] netlink: 'syz.2.688': attribute type 25 has an invalid length.
[  167.186732][ T8556] netlink: 'syz.2.688': attribute type 26 has an invalid length.
[  167.287253][ T8566] Bluetooth: MGMT ver 1.23
[  167.377086][ T8570] vlan2: entered promiscuous mode
[  167.402416][ T8570] vlan2: entered allmulticast mode
[  167.419760][ T8570] hsr_slave_1: entered allmulticast mode
[  167.465599][ T8578] FAULT_INJECTION: forcing a failure.
[  167.465599][ T8578] name failslab, interval 1, probability 0, space 0, times 0
[  167.478495][ T8578] CPU: 1 UID: 0 PID: 8578 Comm: syz.2.692 Not tainted syzkaller #0 PREEMPT(full) 
[  167.478522][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  167.478535][ T8578] Call Trace:
[  167.478544][ T8578]  <TASK>
[  167.478553][ T8578]  dump_stack_lvl+0x189/0x250
[  167.478588][ T8578]  ? __pfx____ratelimit+0x10/0x10
[  167.478616][ T8578]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.478646][ T8578]  ? __pfx__printk+0x10/0x10
[  167.478665][ T8578]  ? htab_unlock_bucket+0x230/0x2e0
[  167.478697][ T8578]  ? __pfx_htab_unlock_bucket+0x10/0x10
[  167.478733][ T8578]  should_fail_ex+0x414/0x560
[  167.478771][ T8578]  should_failslab+0xa8/0x100
[  167.478795][ T8578]  kmem_cache_alloc_noprof+0x74/0x6e0
[  167.478825][ T8578]  ? skb_clone+0x212/0x3a0
[  167.478856][ T8578]  ? run_filter+0x23/0x270
[  167.478881][ T8578]  skb_clone+0x212/0x3a0
[  167.478903][ T8578]  ? packet_rcv+0x567/0x1730
[  167.478938][ T8578]  packet_rcv+0x65b/0x1730
[  167.478983][ T8578]  __netif_receive_skb_core+0x26b1/0x3060
[  167.479016][ T8578]  ? is_bpf_text_address+0x26/0x2b0
[  167.479046][ T8578]  ? is_bpf_text_address+0x292/0x2b0
[  167.479067][ T8578]  ? is_bpf_text_address+0x26/0x2b0
[  167.479094][ T8578]  ? kernel_text_address+0xa5/0xe0
[  167.479128][ T8578]  ? __kernel_text_address+0xd/0x40
[  167.479164][ T8578]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  167.479234][ T8578]  __netif_receive_skb_list_core+0x23f/0x800
[  167.479281][ T8578]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  167.479326][ T8578]  netif_receive_skb_list_internal+0x96f/0xcb0
[  167.479361][ T8578]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  167.479393][ T8578]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  167.479424][ T8578]  ? __phys_addr+0xd3/0x180
[  167.479453][ T8578]  ? build_skb_around+0x133/0x280
[  167.479490][ T8578]  ? __xdp_build_skb_from_frame+0x34b/0x730
[  167.479549][ T8578]  netif_receive_skb_list+0x54/0x450
[  167.479582][ T8578]  bpf_test_run_xdp_live+0x178b/0x1b10
[  167.479613][ T8578]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  167.479647][ T8578]  ? bpf_test_run_xdp_live+0x393/0x1b10
[  167.479681][ T8578]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  167.479705][ T8578]  ? 0xffffffffa0201780
[  167.479745][ T8578]  ? 0xffffffffa02016cc
[  167.479794][ T8578]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  167.479828][ T8578]  ? _copy_from_user+0x94/0xb0
[  167.479862][ T8578]  ? bpf_test_init+0x113/0x150
[  167.479894][ T8578]  ? xdp_convert_md_to_buff+0x5b/0x330
[  167.479918][ T8578]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  167.479957][ T8578]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  167.479984][ T8578]  ? __fget_files+0x2a/0x420
[  167.480011][ T8578]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  167.480033][ T8578]  bpf_prog_test_run+0x2c7/0x340
[  167.480061][ T8578]  __sys_bpf+0x562/0x860
[  167.480085][ T8578]  ? __pfx___sys_bpf+0x10/0x10
[  167.480125][ T8578]  ? ksys_write+0x22a/0x250
[  167.480158][ T8578]  ? __pfx_ksys_write+0x10/0x10
[  167.480196][ T8578]  __x64_sys_bpf+0x7c/0x90
[  167.480229][ T8578]  do_syscall_64+0xfa/0xfa0
[  167.480257][ T8578]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.480286][ T8578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.480307][ T8578]  ? clear_bhb_loop+0x60/0xb0
[  167.480333][ T8578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.480354][ T8578] RIP: 0033:0x7fd3be78f6c9
[  167.480372][ T8578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.480391][ T8578] RSP: 002b:00007fd3bf55c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.480414][ T8578] RAX: ffffffffffffffda RBX: 00007fd3be9e5fa0 RCX: 00007fd3be78f6c9
[  167.480429][ T8578] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  167.480443][ T8578] RBP: 00007fd3bf55c090 R08: 0000000000000000 R09: 0000000000000000
[  167.480456][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  167.480468][ T8578] R13: 00007fd3be9e6038 R14: 00007fd3be9e5fa0 R15: 00007fffb4a2c7f8
[  167.480505][ T8578]  </TASK>
[  167.510786][ T8584] IPVS: rr: FWM 3 0x00000003 - no destination available
[  168.477605][ T8614] xt_socket: unknown flags 0x50
[  168.604423][ T8610] ip6gretap0: entered promiscuous mode
[  168.622603][ T8610] ip6gretap0: entered allmulticast mode
[  168.833181][ T8596] syz.0.697 (8596) used greatest stack depth: 17832 bytes left
[  169.123143][ T8634] __nla_validate_parse: 22 callbacks suppressed
[  169.123162][ T8634] netlink: 224 bytes leftover after parsing attributes in process `syz.0.704'.
[  169.351229][ T5147] Bluetooth: hci2: command 0x0401 tx timeout
[  169.357899][   T52] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  169.452245][ T8645] FAULT_INJECTION: forcing a failure.
[  169.452245][ T8645] name failslab, interval 1, probability 0, space 0, times 0
[  169.491347][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(full) 
[  169.491376][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  169.491388][ T8645] Call Trace:
[  169.491396][ T8645]  <TASK>
[  169.491405][ T8645]  dump_stack_lvl+0x189/0x250
[  169.491437][ T8645]  ? __pfx____ratelimit+0x10/0x10
[  169.491477][ T8645]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.491504][ T8645]  ? __pfx__printk+0x10/0x10
[  169.491530][ T8645]  ? __pfx___might_resched+0x10/0x10
[  169.491551][ T8645]  ? fs_reclaim_acquire+0x7d/0x100
[  169.491587][ T8645]  should_fail_ex+0x414/0x560
[  169.491623][ T8645]  should_failslab+0xa8/0x100
[  169.491645][ T8645]  kmem_cache_alloc_node_noprof+0x77/0x710
[  169.491673][ T8645]  ? __alloc_skb+0x112/0x2d0
[  169.491696][ T8645]  __alloc_skb+0x112/0x2d0
[  169.491719][ T8645]  sctp_packet_transmit+0x2cc/0x2bb0
[  169.491758][ T8645]  ? sctp_outq_flush+0xbef/0x3140
[  169.491789][ T8645]  ? sctp_outq_flush+0xbef/0x3140
[  169.491810][ T8645]  ? sctp_outq_flush+0xbef/0x3140
[  169.491834][ T8645]  sctp_outq_flush+0xecb/0x3140
[  169.491855][ T8645]  ? is_bpf_text_address+0x26/0x2b0
[  169.491876][ T8645]  ? sctp_outq_flush+0xbef/0x3140
[  169.491909][ T8645]  ? kernel_text_address+0xa5/0xe0
[  169.491940][ T8645]  ? __kernel_text_address+0xd/0x40
[  169.491970][ T8645]  ? __pfx_sctp_outq_flush+0x10/0x10
[  169.492001][ T8645]  ? sctp_outq_tail+0x612/0x8c0
[  169.492024][ T8645]  ? sctp_outq_uncork+0x4d/0xa0
[  169.492050][ T8645]  sctp_do_sm+0x5332/0x5a20
[  169.492077][ T8645]  ? stack_depot_save_flags+0x40/0x860
[  169.492121][ T8645]  ? __pfx_sctp_do_sm+0x10/0x10
[  169.492143][ T8645]  ? sctp_setsockopt+0x98b/0x1200
[  169.492160][ T8645]  ? do_syscall_64+0xfa/0xfa0
[  169.492185][ T8645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.492243][ T8645]  ? kasan_quarantine_put+0xdd/0x220
[  169.492273][ T8645]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.492307][ T8645]  sctp_primitive_RECONF+0x98/0xc0
[  169.492333][ T8645]  sctp_send_reconf+0x3e/0x70
[  169.492360][ T8645]  sctp_send_reset_streams+0x9ba/0xd90
[  169.492399][ T8645]  sctp_setsockopt+0x98b/0x1200
[  169.492419][ T8645]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  169.492462][ T8645]  do_sock_setsockopt+0x17c/0x1b0
[  169.492489][ T8645]  __x64_sys_setsockopt+0x13f/0x1b0
[  169.492518][ T8645]  do_syscall_64+0xfa/0xfa0
[  169.492546][ T8645]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.492574][ T8645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.492595][ T8645]  ? clear_bhb_loop+0x60/0xb0
[  169.492621][ T8645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.492641][ T8645] RIP: 0033:0x7fc09e18f6c9
[  169.492659][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.492676][ T8645] RSP: 002b:00007fc09ef42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  169.492699][ T8645] RAX: ffffffffffffffda RBX: 00007fc09e3e5fa0 RCX: 00007fc09e18f6c9
[  169.492714][ T8645] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[  169.492725][ T8645] RBP: 00007fc09ef42090 R08: 000000000000000c R09: 0000000000000000
[  169.492738][ T8645] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  169.492749][ T8645] R13: 00007fc09e3e6038 R14: 00007fc09e3e5fa0 R15: 00007ffd9a105fa8
[  169.492782][ T8645]  </TASK>
[  169.862494][ T8646] FAULT_INJECTION: forcing a failure.
[  169.862494][ T8646] name failslab, interval 1, probability 0, space 0, times 0
[  169.875284][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.0.707 Not tainted syzkaller #0 PREEMPT(full) 
[  169.875313][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  169.875326][ T8646] Call Trace:
[  169.875334][ T8646]  <TASK>
[  169.875344][ T8646]  dump_stack_lvl+0x189/0x250
[  169.875378][ T8646]  ? __pfx____ratelimit+0x10/0x10
[  169.875407][ T8646]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.875443][ T8646]  ? __pfx__printk+0x10/0x10
[  169.875461][ T8646]  ? htab_unlock_bucket+0x230/0x2e0
[  169.875492][ T8646]  ? __pfx_htab_unlock_bucket+0x10/0x10
[  169.875525][ T8646]  should_fail_ex+0x414/0x560
[  169.875562][ T8646]  should_failslab+0xa8/0x100
[  169.875586][ T8646]  kmem_cache_alloc_noprof+0x74/0x6e0
[  169.875623][ T8646]  ? skb_clone+0x212/0x3a0
[  169.875645][ T8646]  ? run_filter+0x23/0x270
[  169.875669][ T8646]  skb_clone+0x212/0x3a0
[  169.875691][ T8646]  ? packet_rcv+0x567/0x1730
[  169.875725][ T8646]  packet_rcv+0x65b/0x1730
[  169.875768][ T8646]  __netif_receive_skb_core+0x26b1/0x3060
[  169.875800][ T8646]  ? is_bpf_text_address+0x26/0x2b0
[  169.875829][ T8646]  ? is_bpf_text_address+0x292/0x2b0
[  169.875851][ T8646]  ? is_bpf_text_address+0x26/0x2b0
[  169.875877][ T8646]  ? kernel_text_address+0xa5/0xe0
[  169.875908][ T8646]  ? __kernel_text_address+0xd/0x40
[  169.875941][ T8646]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  169.876008][ T8646]  __netif_receive_skb_list_core+0x23f/0x800
[  169.876054][ T8646]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  169.876098][ T8646]  netif_receive_skb_list_internal+0x96f/0xcb0
[  169.876133][ T8646]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  169.876165][ T8646]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  169.876197][ T8646]  ? __phys_addr+0xd3/0x180
[  169.876226][ T8646]  ? build_skb_around+0x133/0x280
[  169.876263][ T8646]  ? __xdp_build_skb_from_frame+0x34b/0x730
[  169.876296][ T8646]  netif_receive_skb_list+0x54/0x450
[  169.876329][ T8646]  bpf_test_run_xdp_live+0x178b/0x1b10
[  169.876361][ T8646]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  169.876394][ T8646]  ? bpf_test_run_xdp_live+0x393/0x1b10
[  169.876437][ T8646]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  169.876460][ T8646]  ? 0xffffffffa0201780
[  169.876500][ T8646]  ? 0xffffffffa0201750
[  169.876550][ T8646]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  169.876585][ T8646]  ? _copy_from_user+0x94/0xb0
[  169.876613][ T8646]  ? bpf_test_init+0x113/0x150
[  169.876643][ T8646]  ? xdp_convert_md_to_buff+0x5b/0x330
[  169.876666][ T8646]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  169.876707][ T8646]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  169.876734][ T8646]  ? __fget_files+0x2a/0x420
[  169.876759][ T8646]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  169.876781][ T8646]  bpf_prog_test_run+0x2c7/0x340
[  169.876808][ T8646]  __sys_bpf+0x562/0x860
[  169.876831][ T8646]  ? __pfx___sys_bpf+0x10/0x10
[  169.876870][ T8646]  ? ksys_write+0x22a/0x250
[  169.876904][ T8646]  ? __pfx_ksys_write+0x10/0x10
[  169.876941][ T8646]  __x64_sys_bpf+0x7c/0x90
[  169.876973][ T8646]  do_syscall_64+0xfa/0xfa0
[  169.877001][ T8646]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.877030][ T8646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.877051][ T8646]  ? clear_bhb_loop+0x60/0xb0
[  169.877076][ T8646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.877098][ T8646] RIP: 0033:0x7feca8b8f6c9
[  169.877116][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.877133][ T8646] RSP: 002b:00007feca9acd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  169.877156][ T8646] RAX: ffffffffffffffda RBX: 00007feca8de5fa0 RCX: 00007feca8b8f6c9
[  169.877171][ T8646] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  169.877184][ T8646] RBP: 00007feca9acd090 R08: 0000000000000000 R09: 0000000000000000
[  169.877197][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  169.877209][ T8646] R13: 00007feca8de6038 R14: 00007feca8de5fa0 R15: 00007ffe876acf98
[  169.877246][ T8646]  </TASK>
[  170.361808][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'.
[  170.421680][ T8653] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  170.574098][ T8661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.713'.
[  170.830418][ T8684] netlink: 428 bytes leftover after parsing attributes in process `syz.3.719'.
[  170.843863][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'.
[  171.024029][ T8692] validate_nla: 1 callbacks suppressed
[  171.024049][ T8692] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[  171.135972][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'.
[  171.146876][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.4.727'.
[  171.309533][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'.
[  171.472176][ T8720] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  171.480682][ T8724] FAULT_INJECTION: forcing a failure.
[  171.480682][ T8724] name failslab, interval 1, probability 0, space 0, times 0
[  171.495197][ T8724] CPU: 1 UID: 0 PID: 8724 Comm: syz.0.734 Not tainted syzkaller #0 PREEMPT(full) 
[  171.495226][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  171.495239][ T8724] Call Trace:
[  171.495248][ T8724]  <TASK>
[  171.495256][ T8724]  dump_stack_lvl+0x189/0x250
[  171.495291][ T8724]  ? __pfx____ratelimit+0x10/0x10
[  171.495319][ T8724]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.495349][ T8724]  ? __pfx__printk+0x10/0x10
[  171.495368][ T8724]  ? sctp_v6_xmit+0x65e/0x1350
[  171.495400][ T8724]  ? sctp_v6_xmit+0xb3d/0x1350
[  171.495442][ T8724]  should_fail_ex+0x414/0x560
[  171.495497][ T8724]  should_failslab+0xa8/0x100
[  171.495522][ T8724]  kmem_cache_alloc_node_noprof+0x77/0x710
[  171.495553][ T8724]  ? __alloc_skb+0x112/0x2d0
[  171.495579][ T8724]  __alloc_skb+0x112/0x2d0
[  171.495604][ T8724]  _sctp_make_chunk+0x5e/0x430
[  171.495642][ T8724]  sctp_make_strreset_resp+0x8e/0x370
[  171.495662][ T8724]  ? sctp_chunk_lookup_strreset_param+0x235/0x280
[  171.495693][ T8724]  ? __pfx_sctp_make_strreset_resp+0x10/0x10
[  171.495715][ T8724]  ? sctp_process_strreset_outreq+0x422/0x9c0
[  171.495754][ T8724]  sctp_sf_do_reconf+0x63d/0xac0
[  171.495788][ T8724]  ? __pfx_sctp_sf_do_reconf+0x10/0x10
[  171.495826][ T8724]  sctp_do_sm+0x1e7/0x5a20
[  171.495850][ T8724]  ? __pfx_sctp_cname+0x10/0x10
[  171.495882][ T8724]  ? sctp_outq_tail+0x612/0x8c0
[  171.495908][ T8724]  ? sctp_outq_uncork+0x4d/0xa0
[  171.495935][ T8724]  ? __pfx_sctp_do_sm+0x10/0x10
[  171.495960][ T8724]  ? __lock_acquire+0xab9/0xd20
[  171.496026][ T8724]  ? sctp_inq_pop+0xbd4/0xfb0
[  171.496060][ T8724]  sctp_assoc_bh_rcv+0x3f2/0x630
[  171.496102][ T8724]  sctp_backlog_rcv+0x167/0x3f0
[  171.496123][ T8724]  ? do_raw_spin_unlock+0x122/0x240
[  171.496158][ T8724]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  171.496178][ T8724]  __release_sock+0x297/0x3a0
[  171.496215][ T8724]  release_sock+0x5f/0x1f0
[  171.496250][ T8724]  sctp_setsockopt+0xaf9/0x1200
[  171.496270][ T8724]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  171.496303][ T8724]  do_sock_setsockopt+0x17c/0x1b0
[  171.496330][ T8724]  __x64_sys_setsockopt+0x13f/0x1b0
[  171.496359][ T8724]  do_syscall_64+0xfa/0xfa0
[  171.496388][ T8724]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.496417][ T8724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.496438][ T8724]  ? clear_bhb_loop+0x60/0xb0
[  171.496464][ T8724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.496485][ T8724] RIP: 0033:0x7feca8b8f6c9
[  171.496510][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.496528][ T8724] RSP: 002b:00007feca9acd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  171.496551][ T8724] RAX: ffffffffffffffda RBX: 00007feca8de5fa0 RCX: 00007feca8b8f6c9
[  171.496567][ T8724] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[  171.496579][ T8724] RBP: 00007feca9acd090 R08: 000000000000000c R09: 0000000000000000
[  171.496592][ T8724] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  171.496605][ T8724] R13: 00007feca8de6038 R14: 00007feca8de5fa0 R15: 00007ffe876acf98
[  171.496642][ T8724]  </TASK>
[  171.852632][ T8720] bond2 (unregistering): Released all slaves
[  171.908867][ T8728] bond4: option resend_igmp: invalid value (2878)
[  171.915525][ T8728] bond4: option resend_igmp: allowed values 0 - 255
[  171.926892][ T8728] bond4 (unregistering): Released all slaves
[  171.947824][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'.
[  172.265832][ T8738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.298171][ T8738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.440023][ T8738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.450684][ T8738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.479679][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.746'.
[  172.534514][ T8738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.586072][ T8738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.665546][ T8738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.676109][ T8738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.821909][ T7184] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.849379][ T7184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.929978][ T7184] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.938678][ T7184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.974495][ T7184] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.983140][ T7184] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.027692][ T7178] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.038167][ T7178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.204269][ T8781] wlan0 speed is unknown, defaulting to 1000
[  173.326887][ T8781] wlan0 speed is unknown, defaulting to 1000
[  173.408033][ T8781] wlan0 speed is unknown, defaulting to 1000
[  173.458025][ T8781] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  173.506781][ T8794] wlan0 speed is unknown, defaulting to 1000
[  173.579120][ T8781] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  173.609850][ T8814] FAULT_INJECTION: forcing a failure.
[  173.609850][ T8814] name failslab, interval 1, probability 0, space 0, times 0
[  173.624356][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.3.760 Not tainted syzkaller #0 PREEMPT(full) 
[  173.624385][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  173.624399][ T8814] Call Trace:
[  173.624407][ T8814]  <TASK>
[  173.624416][ T8814]  dump_stack_lvl+0x189/0x250
[  173.624451][ T8814]  ? __pfx____ratelimit+0x10/0x10
[  173.624480][ T8814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.624509][ T8814]  ? __pfx__printk+0x10/0x10
[  173.624535][ T8814]  ? kmalloc_reserve+0xbd/0x290
[  173.624558][ T8814]  ? rcu_is_watching+0x15/0xb0
[  173.624587][ T8814]  should_fail_ex+0x414/0x560
[  173.624627][ T8814]  should_failslab+0xa8/0x100
[  173.624651][ T8814]  kmem_cache_alloc_noprof+0x74/0x6e0
[  173.624682][ T8814]  ? _sctp_make_chunk+0x14e/0x430
[  173.624711][ T8814]  ? skb_put+0x11b/0x210
[  173.624736][ T8814]  _sctp_make_chunk+0x14e/0x430
[  173.624774][ T8814]  sctp_make_strreset_resp+0x8e/0x370
[  173.624794][ T8814]  ? sctp_chunk_lookup_strreset_param+0x235/0x280
[  173.624826][ T8814]  ? __pfx_sctp_make_strreset_resp+0x10/0x10
[  173.624847][ T8814]  ? sctp_process_strreset_outreq+0x422/0x9c0
[  173.624886][ T8814]  sctp_sf_do_reconf+0x63d/0xac0
[  173.624920][ T8814]  ? __pfx_sctp_sf_do_reconf+0x10/0x10
[  173.624958][ T8814]  sctp_do_sm+0x1e7/0x5a20
[  173.624982][ T8814]  ? __pfx_sctp_cname+0x10/0x10
[  173.625013][ T8814]  ? sctp_outq_tail+0x612/0x8c0
[  173.625038][ T8814]  ? sctp_outq_uncork+0x4d/0xa0
[  173.625064][ T8814]  ? __pfx_sctp_do_sm+0x10/0x10
[  173.625090][ T8814]  ? __lock_acquire+0xab9/0xd20
[  173.625155][ T8814]  ? sctp_inq_pop+0xbd4/0xfb0
[  173.625189][ T8814]  sctp_assoc_bh_rcv+0x3f2/0x630
[  173.625231][ T8814]  sctp_backlog_rcv+0x167/0x3f0
[  173.625251][ T8814]  ? do_raw_spin_unlock+0x122/0x240
[  173.625290][ T8814]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  173.625310][ T8814]  __release_sock+0x297/0x3a0
[  173.625353][ T8814]  release_sock+0x5f/0x1f0
[  173.625387][ T8814]  sctp_setsockopt+0xaf9/0x1200
[  173.625407][ T8814]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  173.625440][ T8814]  do_sock_setsockopt+0x17c/0x1b0
[  173.625466][ T8814]  __x64_sys_setsockopt+0x13f/0x1b0
[  173.625493][ T8814]  do_syscall_64+0xfa/0xfa0
[  173.625520][ T8814]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.625549][ T8814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.625571][ T8814]  ? clear_bhb_loop+0x60/0xb0
[  173.625598][ T8814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.625618][ T8814] RIP: 0033:0x7ff99758f6c9
[  173.625637][ T8814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.625655][ T8814] RSP: 002b:00007ff9983d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  173.625677][ T8814] RAX: ffffffffffffffda RBX: 00007ff9977e5fa0 RCX: 00007ff99758f6c9
[  173.625692][ T8814] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[  173.625704][ T8814] RBP: 00007ff9983d3090 R08: 000000000000000c R09: 0000000000000000
[  173.625716][ T8814] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002
[  173.625729][ T8814] R13: 00007ff9977e6038 R14: 00007ff9977e5fa0 R15: 00007ffd3c3065a8
[  173.625764][ T8814]  </TASK>
[  174.037555][ T8781] wlan0 speed is unknown, defaulting to 1000
[  174.075751][ T8781] wlan0 speed is unknown, defaulting to 1000
[  174.115933][ T8781] wlan0 speed is unknown, defaulting to 1000
[  174.134823][ T8781] wlan0 speed is unknown, defaulting to 1000
[  174.143219][ T8781] wlan0 speed is unknown, defaulting to 1000
[  174.415920][ T8844] wlan0 speed is unknown, defaulting to 1000
[  174.443620][ T8847] __nla_validate_parse: 4 callbacks suppressed
[  174.443639][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'.
[  174.476249][ T8829] syzkaller0: entered promiscuous mode
[  174.486810][ T8829] syzkaller0: entered allmulticast mode
[  174.642067][ T8849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.770'.
[  174.753566][ T8862] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  174.833056][ T8862] 8021q: adding VLAN 0 to HW filter on device bond4
[  174.865194][ T8864] ipvlan2: entered allmulticast mode
[  174.870681][ T8864] bond4: entered allmulticast mode
[  174.882292][ T8870] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  174.897800][ T8862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.003681][ T8876] syz_tun: entered promiscuous mode
[  175.012066][ T8876] macsec1: entered allmulticast mode
[  175.020489][ T8876] syz_tun: entered allmulticast mode
[  175.028693][ T8876] syz_tun: left allmulticast mode
[  175.038711][ T8876] syz_tun: left promiscuous mode
[  175.241863][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.273934][ T8894] xt_policy: neither incoming nor outgoing policy selected
[  175.454433][ T8902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.466802][ T8902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.588711][ T8902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.599868][ T8902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.639738][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.786'.
[  175.733808][ T8902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.744415][ T8902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.768472][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'.
[  175.818786][ T8915] Bluetooth: MGMT ver 1.23
[  175.866376][ T8902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.895191][ T8902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.331262][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'.
[  176.454772][ T8928] 8021q: adding VLAN 0 to HW filter on device bond3
[  176.496097][ T8926] wlan0 speed is unknown, defaulting to 1000
[  176.669462][   T50] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.678097][   T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.718633][ T7187] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.729623][ T7187] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.764360][ T7187] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.765290][ T8938] xt_hashlimit: max too large, truncated to 1048576
[  176.783318][ T7187] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.802653][ T7187] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.811137][ T7187] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.843512][ T8903] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.856652][ T8903] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.880334][ T8938] syz_tun: entered allmulticast mode
[  176.920017][ T8903] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.930222][ T8903] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.010371][ T8948] netlink: 224 bytes leftover after parsing attributes in process `syz.1.799'.
[  177.010932][ T8903] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.030077][ T8903] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.050883][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  177.095779][ T8903] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.106303][ T8903] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.376706][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'.
[  177.387634][ T8966] netlink: 36 bytes leftover after parsing attributes in process `syz.4.804'.
[  177.397609][ T8967] netlink: 36 bytes leftover after parsing attributes in process `syz.4.804'.
[  177.534671][ T8937] syz_tun: left allmulticast mode
[  177.761845][ T8988] netlink: 'syz.3.809': attribute type 39 has an invalid length.
[  177.985581][ T8995] wlan0 speed is unknown, defaulting to 1000
[  178.530106][ T9030] gtp0: entered promiscuous mode
[  178.739028][ T9043] netlink: 'syz.0.825': attribute type 32 has an invalid length.
[  178.747804][ T9043] netlink: 'syz.0.825': attribute type 1 has an invalid length.
[  178.912751][ T9043] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  178.934692][ T9043] bond2 (unregistering): Released all slaves
[  179.105533][ T9054] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received
[  179.135995][ T9058] openvswitch: netlink: Message has 536 unknown bytes.
[  179.155094][ T9058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.230313][ T9054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.256183][ T9054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.360386][ T9054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.371292][ T9054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.464944][ T9054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.479536][ T9054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.577427][ T9082] __nla_validate_parse: 14 callbacks suppressed
[  179.577448][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'.
[  179.577957][ T9054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.592977][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'.
[  179.611275][ T9054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.780787][ T7187] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.792964][ T7187] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.836064][ T7182] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.845913][ T7182] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.859275][ T9093] bridge0: port 1(erspan0) entered blocking state
[  179.866454][ T9093] bridge0: port 1(erspan0) entered disabled state
[  179.873468][ T9093] erspan0: entered allmulticast mode
[  179.882826][ T9093] erspan0: left allmulticast mode
[  179.909254][   T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.918911][   T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.945444][   T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.002868][   T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.115307][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'.
[  180.373282][ T9102] netlink: 'syz.0.840': attribute type 32 has an invalid length.
[  180.381186][ T9102] netlink: 'syz.0.840': attribute type 1 has an invalid length.
[  180.436442][ T9102] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  180.450797][ T9102] bond2 (unregistering): Released all slaves
[  180.496330][ T9100] bond5: entered allmulticast mode
[  180.502350][ T9100] 8021q: adding VLAN 0 to HW filter on device bond5
[  180.570204][ T9100] bridge4: entered allmulticast mode
[  180.598067][ T9100] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  180.719255][ T9110] netlink: 348 bytes leftover after parsing attributes in process `syz.0.842'.
[  180.728155][  T154] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.737207][  T154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.778036][  T154] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.788062][  T154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.836224][  T154] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.876733][  T154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.895656][  T154] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.921232][  T154] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.012933][ T1219] IPVS: starting estimator thread 0...
[  181.104854][ T9124] IPVS: using max 27 ests per chain, 64800 per kthread
[  181.292884][ T9137] netlink: 308 bytes leftover after parsing attributes in process `syz.1.849'.
[  181.330102][ T9143] netlink: 'syz.3.852': attribute type 32 has an invalid length.
[  181.340243][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'.
[  181.348824][ T9143] netlink: 'syz.3.852': attribute type 1 has an invalid length.
[  181.378169][ T9147] syzkaller0: entered promiscuous mode
[  181.384309][ T9147] syzkaller0: entered allmulticast mode
[  181.464487][ T9143] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  181.477131][ T9143] bond2 (unregistering): Released all slaves
[  181.560646][ T9156] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.853'.
[  181.801593][ T9172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.857'.
[  181.812179][ T9166] IPVS: Scheduler module ip_vs_sip not found
[  181.825971][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.858'.
[  181.888304][ T9172] netlink: 312 bytes leftover after parsing attributes in process `syz.2.857'.
[  182.354476][ T9200] syzkaller0: entered promiscuous mode
[  182.362260][ T9200] syzkaller0: entered allmulticast mode
[  182.597785][ T9222] delete_channel: no stack
[  183.198777][ T9254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.591636][   T30] audit: type=1800 audit(1762393289.206:2): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.882" name="$" dev="tmpfs" ino=975 res=0 errno=0
[  183.917403][ T9287] netlink: 'syz.4.887': attribute type 1 has an invalid length.
[  183.978072][ T9290] netlink: 'syz.3.886': attribute type 1 has an invalid length.
[  184.201254][ T9292] syz.0.888: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  184.259838][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.0.888 Not tainted syzkaller #0 PREEMPT(full) 
[  184.259867][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  184.259880][ T9292] Call Trace:
[  184.259889][ T9292]  <TASK>
[  184.259899][ T9292]  dump_stack_lvl+0x189/0x250
[  184.259937][ T9292]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.259967][ T9292]  ? __pfx__printk+0x10/0x10
[  184.259989][ T9292]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  184.260019][ T9292]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  184.260050][ T9292]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  184.260083][ T9292]  warn_alloc+0x214/0x310
[  184.260122][ T9292]  ? __pfx_warn_alloc+0x10/0x10
[  184.260165][ T9292]  ? __get_vm_area_node+0x28f/0x300
[  184.260195][ T9292]  ? nf_tables_newset+0x1330/0x2540
[  184.260232][ T9292]  __vmalloc_node_range_noprof+0x690/0x12d0
[  184.260298][ T9292]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  184.260328][ T9292]  ? nf_tables_newset+0x1330/0x2540
[  184.260359][ T9292]  ? rcu_is_watching+0x15/0xb0
[  184.260384][ T9292]  ? nf_tables_newset+0x1330/0x2540
[  184.260410][ T9292]  __kvmalloc_node_noprof+0x674/0x910
[  184.260444][ T9292]  ? nf_tables_newset+0x1330/0x2540
[  184.260474][ T9292]  ? nft_set_lookup+0x128/0x150
[  184.260503][ T9292]  ? nft_hash_privsize+0xdf/0xf0
[  184.260529][ T9292]  nf_tables_newset+0x1330/0x2540
[  184.260571][ T9292]  ? __pfx_nf_tables_newset+0x10/0x10
[  184.260623][ T9292]  ? __nla_parse+0x40/0x60
[  184.260652][ T9292]  nfnetlink_rcv+0x11d9/0x2590
[  184.260724][ T9292]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  184.260774][ T9292]  ? ref_tracker_free+0x63a/0x7d0
[  184.260833][ T9292]  ? __netlink_deliver_tap+0x807/0x850
[  184.260854][ T9292]  ? netlink_deliver_tap+0x2e/0x1b0
[  184.260895][ T9292]  netlink_unicast+0x82f/0x9e0
[  184.260936][ T9292]  ? __pfx_netlink_unicast+0x10/0x10
[  184.260970][ T9292]  ? netlink_sendmsg+0x642/0xb30
[  184.260988][ T9292]  ? skb_put+0x11b/0x210
[  184.261011][ T9292]  netlink_sendmsg+0x805/0xb30
[  184.261044][ T9292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.261069][ T9292]  ? aa_sock_msg_perm+0xf1/0x1d0
[  184.261103][ T9292]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.261123][ T9292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.261146][ T9292]  __sock_sendmsg+0x21c/0x270
[  184.261178][ T9292]  ____sys_sendmsg+0x505/0x830
[  184.261207][ T9292]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.261247][ T9292]  ? import_iovec+0x74/0xa0
[  184.261279][ T9292]  ___sys_sendmsg+0x21f/0x2a0
[  184.261305][ T9292]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.261370][ T9292]  ? __fget_files+0x2a/0x420
[  184.261389][ T9292]  ? __fget_files+0x3a0/0x420
[  184.261421][ T9292]  __x64_sys_sendmsg+0x19b/0x260
[  184.261448][ T9292]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.261490][ T9292]  ? do_syscall_64+0xbe/0xfa0
[  184.261525][ T9292]  do_syscall_64+0xfa/0xfa0
[  184.261552][ T9292]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.261581][ T9292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.261601][ T9292]  ? clear_bhb_loop+0x60/0xb0
[  184.261627][ T9292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.261647][ T9292] RIP: 0033:0x7feca8b8f6c9
[  184.261666][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.261683][ T9292] RSP: 002b:00007feca9acd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.261706][ T9292] RAX: ffffffffffffffda RBX: 00007feca8de5fa0 RCX: 00007feca8b8f6c9
[  184.261721][ T9292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  184.261734][ T9292] RBP: 00007feca8c11f91 R08: 0000000000000000 R09: 0000000000000000
[  184.261746][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.261758][ T9292] R13: 00007feca8de6038 R14: 00007feca8de5fa0 R15: 00007ffe876acf98
[  184.261794][ T9292]  </TASK>
[  184.640546][ T9292] Mem-Info:
[  184.644166][ T9292] active_anon:6817 inactive_anon:0 isolated_anon:0
[  184.644166][ T9292]  active_file:3351 inactive_file:39917 isolated_file:0
[  184.644166][ T9292]  unevictable:768 dirty:130 writeback:0
[  184.644166][ T9292]  slab_reclaimable:11676 slab_unreclaimable:150349
[  184.644166][ T9292]  mapped:29070 shmem:1358 pagetables:911
[  184.644166][ T9292]  sec_pagetables:0 bounce:0
[  184.644166][ T9292]  kernel_misc_reclaimable:0
[  184.644166][ T9292]  free:1273338 free_pcp:16632 free_cma:0
[  184.732442][ T9292] Node 0 active_anon:27368kB inactive_anon:0kB active_file:13404kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116280kB dirty:520kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12128kB pagetables:3628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  184.778674][ T9309] __nla_validate_parse: 7 callbacks suppressed
[  184.778694][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'.
[  184.831693][ T9292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  184.863056][ T9292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  184.898615][ T9292] lowmem_reserve[]: 0 2505 2505 2505 2505
[  184.904631][ T9292] Node 0 DMA32 free:1180212kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27468kB inactive_anon:0kB active_file:13404kB inactive_file:159468kB unevictable:1536kB writepending:520kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:49088kB local_pcp:19092kB free_cma:0kB
[  184.941193][ T9292] lowmem_reserve[]: 0 0 0 0 0
[  184.945997][ T9292] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  184.976018][ T9292] lowmem_reserve[]: 0 0 0 0 0
[  184.980791][ T9292] Node 1 Normal free:3897668kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:9184kB free_cma:0kB
[  185.013249][ T9292] lowmem_reserve[]: 0 0 0 0 0
[  185.018014][ T9292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  185.030912][ T9292] Node 0 DMA32: 406*4kB (UM) 76*8kB (UME) 32*16kB (M) 340*32kB (UME) 155*64kB (UME) 56*128kB (UM) 17*256kB (UME) 13*512kB (UM) 4*1024kB (UME) 6*2048kB (UM) 274*4096kB (UM) = 1180408kB
[  185.052430][ T9292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  185.064637][ T9292] Node 1 Normal: 115*4kB (UE) 29*8kB (UME) 35*16kB (UME) 83*32kB (UME) 26*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3897668kB
[  185.083016][ T9292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  185.096426][ T9292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  185.106002][ T9292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  185.120379][ T9292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  185.192079][ T9313] wlan0 speed is unknown, defaulting to 1000
[  185.221067][ T9292] 44623 total pagecache pages
[  185.225888][ T9292] 0 pages in swap cache
[  185.230157][ T9292] Free swap  = 124996kB
[  185.236653][ T9292] Total swap = 124996kB
[  185.243122][ T9292] 2097051 pages RAM
[  185.247397][ T9292] 0 pages HighMem/MovableOnly
[  185.252183][ T9292] 424119 pages reserved
[  185.256431][ T9292] 0 pages cma reserved
[  185.313159][ T9314] netlink: 'syz.4.894': attribute type 2 has an invalid length.
[  185.804880][ T9337] syzkaller0: entered promiscuous mode
[  185.806660][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'.
[  185.810416][ T9337] syzkaller0: entered allmulticast mode
[  185.895731][ T9346] netlink: 'syz.0.901': attribute type 3 has an invalid length.
[  185.906213][ T9346] netlink: 666 bytes leftover after parsing attributes in process `syz.0.901'.
[  185.926342][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  186.036176][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  186.193021][ T9357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.259623][ T9316] infiniband !yz!: set active
[  186.281094][ T9316] infiniband !yz!: added team_slave_0
[  186.293320][ T9316] !yz!: rxe_create_cq: returned err = -12
[  186.309855][ T9316] infiniband !yz!: Couldn't create ib_mad CQ
[  186.318149][ T9357] syzkaller0: entered promiscuous mode
[  186.331339][ T9316] infiniband !yz!: Couldn't open port 1
[  186.356159][ T9357] syzkaller0: entered allmulticast mode
[  186.414566][ T9353] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  186.427319][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'.
[  186.452348][ T9316] RDS/IB: !yz!: added
[  186.461734][ T9316] smc: adding ib device !yz! with port count 1
[  186.474593][ T9353] tipc: Resetting bearer <eth:syzkaller0>
[  186.478489][ T9316] smc:    ib device !yz! port 1 has no pnetid
[  186.959312][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'.
[  187.201147][ T1219] tipc: Node number set to 278510220
[  187.330512][ T9377] wlan0 speed is unknown, defaulting to 1000
[  187.363675][ T9392] bond0: entered promiscuous mode
[  187.368779][ T9392] bond_slave_0: entered promiscuous mode
[  187.374834][ T9392] bond_slave_1: entered promiscuous mode
[  187.382820][ T9392] batadv0: entered promiscuous mode
[  187.402838][ T9392] 8021q: adding VLAN 0 to HW filter on device hsr1
[  187.413672][ T9392] bond0: left promiscuous mode
[  187.418573][ T9392] bond_slave_0: left promiscuous mode
[  187.432720][ T9395] netlink: 'syz.4.915': attribute type 13 has an invalid length.
[  187.441174][ T9394] netlink: 'syz.4.915': attribute type 13 has an invalid length.
[  187.441361][ T9392] bond_slave_1: left promiscuous mode
[  187.456327][ T9392] batadv0: left promiscuous mode
[  187.520769][ T9394] wlan0 speed is unknown, defaulting to 1000
[  187.810410][ T9400] syzkaller1: entered promiscuous mode
[  187.817444][ T9400] syzkaller1: entered allmulticast mode
[  188.048651][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'.
[  188.135665][ T9411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.918'.
[  188.940498][ T9422] syzkaller0: entered promiscuous mode
[  188.946448][ T9422] syzkaller0: entered allmulticast mode
[  189.176251][ T9427] bridge5: the hash_elasticity option has been deprecated and is always 16
[  189.186136][ T9427] bridge5: entered allmulticast mode
[  189.333366][ T9418] wlan0 speed is unknown, defaulting to 1000
[  189.542226][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'.
[  189.831125][   T52] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  189.841412][   T52] Bluetooth: hci2: command 0x0401 tx timeout
[  190.124205][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.930'.
[  190.142532][ T9454] netlink: 64 bytes leftover after parsing attributes in process `syz.1.930'.
[  190.173593][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'.
[  190.185727][ T9453] block nbd0: Unsupported socket: should be TCP or UNIX.
[  190.207265][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.930'.
[  190.219886][ T9456] syzkaller0: entered promiscuous mode
[  190.227539][ T9456] syzkaller0: entered allmulticast mode
[  190.239864][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'.
[  190.268467][ T9453] netlink: 76 bytes leftover after parsing attributes in process `syz.2.931'.
[  190.464116][ T9472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.933'.
[  190.473094][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'.
[  190.495383][ T9472] netlink: 296 bytes leftover after parsing attributes in process `syz.3.933'.
[  190.618502][ T9477] wlan0 speed is unknown, defaulting to 1000
[  191.115979][ T9497] netlink: 'syz.2.941': attribute type 32 has an invalid length.
[  191.124117][ T9497] netlink: 'syz.2.941': attribute type 1 has an invalid length.
[  191.149053][ T9497] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  191.163098][ T9497] bond4 (unregistering): Released all slaves
[  191.982903][ T9517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.051876][ T9530] syzkaller1: entered promiscuous mode
[  192.058704][ T9530] syzkaller1: entered allmulticast mode
[  192.203992][ T9541] netlink: 64 bytes leftover after parsing attributes in process `syz.3.953'.
[  192.637491][ T9559] can: request_module (can-proto-4) failed.
[  194.154200][ T9550] wlan0 speed is unknown, defaulting to 1000
[  194.560165][ T9598] tun0: tun_chr_ioctl cmd 1074025675
[  194.577913][ T9598] tun0: persist enabled
[  194.588745][ T9598] tun0: tun_chr_ioctl cmd 1074025675
[  194.598174][ T9598] tun0: persist disabled
[  195.468800][ T9608] netlink: 'syz.2.966': attribute type 13 has an invalid length.
[  195.740124][ T9625] __nla_validate_parse: 4 callbacks suppressed
[  195.740147][ T9625] netlink: 84 bytes leftover after parsing attributes in process `syz.3.970'.
[  195.828626][ T9625] wlan0 speed is unknown, defaulting to 1000
[  195.893466][ T9627] syzkaller0: entered promiscuous mode
[  195.918766][ T9627] syzkaller0: entered allmulticast mode
[  196.199664][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'.
[  196.252777][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'.
[  196.287027][ T9641] vlan4: entered promiscuous mode
[  196.321229][ T9641] gretap0: entered promiscuous mode
[  196.374260][ T9644] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  196.561301][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.596477][ T9646] bond0: (slave rose0): Enslaving as an active interface with an up link
[  196.640642][ T9651] netlink: 'syz.4.977': attribute type 83 has an invalid length.
[  196.804801][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'.
[  197.043311][ T9666] netlink: 'syz.2.978': attribute type 4 has an invalid length.
[  197.087711][ T9663] netlink: 'syz.2.978': attribute type 12 has an invalid length.
[  198.114243][ T9703] netlink: 'syz.1.991': attribute type 1 has an invalid length.
[  198.335545][ T9709] tunl0: Caught tx_queue_len zero misconfig
[  198.518035][ T9709] geneve2: entered promiscuous mode
[  198.551319][ T9709] geneve2: entered allmulticast mode
[  198.564577][ T7178] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 50774 - 0
[  198.580025][ T7178] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 43293 - 0
[  198.600641][ T7178] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 50774 - 0
[  198.621342][ T7178] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 43293 - 0
[  198.634178][ T7178] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 50774 - 0
[  198.676006][ T7178] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 43293 - 0
[  198.701659][ T7178] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 50774 - 0
[  198.720256][ T7178] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 43293 - 0
[  198.866774][ T9728] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  199.102323][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.117509][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.208705][ T9728] batman_adv: batadv0: Interface deactivated: macvtap1
[  199.230523][ T9728] batman_adv: batadv0: Interface deactivated: gretap1
[  199.321293][  T154] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.334537][  T154] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.358600][  T154] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 50774 - 0
[  199.367473][  T154] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 43293 - 0
[  199.398325][  T154] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.408228][  T154] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.426517][  T154] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 50774 - 0
[  199.443282][  T154] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 43293 - 0
[  199.462585][  T154] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.467708][ T9748] tipc: Can't bind to reserved service type 2
[  199.477290][  T154] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.494735][  T154] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 50774 - 0
[  199.508768][  T154] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 43293 - 0
[  199.529498][  T154] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.605676][  T154] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.640787][  T154] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 50774 - 0
[  199.667687][  T154] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 43293 - 0
[  199.693455][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.699831][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  199.708349][ T9757] netlink: 2184 bytes leftover after parsing attributes in process `syz.2.1006'.
[  199.740052][ T9757] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1006'.
[  199.890444][ T9766] netlink: 'syz.4.1009': attribute type 23 has an invalid length.
[  199.917248][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'.
[  200.456136][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1017'.
[  200.456136][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1017'.
[  200.512123][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1017'.
[  200.803751][ T9819] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  200.921139][ T9816] wlan0 speed is unknown, defaulting to 1000
[  201.240657][ T9829] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1027'.
[  201.250925][ T9829] netlink: 'syz.2.1027': attribute type 9 has an invalid length.
[  201.279269][ T9829] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1027'.
[  201.288993][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1027'.
[  201.375092][ T9829] bond0: (slave bond_slave_0): Releasing backup interface
[  201.423906][ T9829] bond0: (slave bond_slave_1): Releasing backup interface
[  201.440332][ T9847] netlink: 'syz.2.1027': attribute type 6 has an invalid length.
[  201.467813][ T9847] netlink: 'syz.2.1027': attribute type 7 has an invalid length.
[  201.491132][ T9847] netlink: 'syz.2.1027': attribute type 8 has an invalid length.
[  201.491876][ T9829] team0: Port device team_slave_0 removed
[  201.583307][ T9829] team0: Port device team_slave_1 removed
[  201.596571][ T9829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.652281][ T9829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.681793][ T9829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  201.720524][ T9837] lo: Caught tx_queue_len zero misconfig
[  201.781808][ T9863] tipc: Started in network mode
[  201.790893][ T9863] tipc: Node identity fed7b5214ffa, cluster identity 4711
[  201.821768][ T9863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.837087][ T9850] syzkaller0: entered promiscuous mode
[  201.851751][ T9850] syzkaller0: entered allmulticast mode
[  201.928998][ T9850] tipc: Resetting bearer <eth:syzkaller0>
[  202.018017][ T9848] tipc: Resetting bearer <eth:syzkaller0>
[  202.064613][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1037'.
[  202.116779][ T9848] tipc: Disabling bearer <eth:syzkaller0>
[  202.512268][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1041'.
[  203.221795][ T9896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.455058][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1045'.
[  203.477461][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1046'.
[  203.650316][ T9910] netlink: 'syz.1.1048': attribute type 6 has an invalid length.
[  203.663616][ T9910] netlink: 612 bytes leftover after parsing attributes in process `syz.1.1048'.
[  203.686395][ T9910] netlink: 'syz.1.1048': attribute type 6 has an invalid length.
[  203.718755][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'.
[  203.754798][ T9912] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  203.956735][ T9922] wlan0 speed is unknown, defaulting to 1000
[  204.131312][ T9929] dvmrp8: entered allmulticast mode
[  204.161483][ T9929] wlan0 speed is unknown, defaulting to 1000
[  204.254227][ T9933] sctp: [Deprecated]: syz.4.1053 (pid 9933) Use of int in maxseg socket option.
[  204.254227][ T9933] Use struct sctp_assoc_value instead
[  204.590732][ T9944] bridge_slave_0: left allmulticast mode
[  204.606290][ T9944] bridge_slave_0: left promiscuous mode
[  204.616520][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.660260][ T9944] bridge_slave_1: left allmulticast mode
[  204.723753][ T9944] bridge_slave_1: left promiscuous mode
[  204.729732][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.742351][ T9951] netlink: 'syz.0.1057': attribute type 10 has an invalid length.
[  204.771444][ T9954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1059'.
[  204.794198][ T9944] bond0: (slave bond_slave_0): Releasing backup interface
[  204.830565][ T9944] bond0: (slave bond_slave_1): Releasing backup interface
[  204.880283][ T9944] team0: Port device team_slave_0 removed
[  204.900012][ T9944] team0: Port device team_slave_1 removed
[  204.908315][ T9944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.917036][ T9944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.937137][ T9944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.952119][ T9944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.965280][ T9944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  204.994688][ T9951] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.003487][ T9951] bond0: (slave wlan1): Opening slave failed
[  205.037174][ T9925] dvmrp8: left allmulticast mode
[  205.128700][ T9966] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  205.320353][ T9971] wlan0 speed is unknown, defaulting to 1000
[  205.426876][ T9977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  206.007920][ T9992] wlan0 speed is unknown, defaulting to 1000
[  206.160415][ T9997] wlan0 speed is unknown, defaulting to 1000
[  208.121611][T10022] wlan0 speed is unknown, defaulting to 1000
[  208.609886][T10032] __nla_validate_parse: 1 callbacks suppressed
[  208.609907][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'.
[  208.618042][T10029] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1082'.
[  208.626135][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'.
[  208.659039][T10029] hsr_slave_0: left promiscuous mode
[  208.665413][T10029] hsr_slave_1: left promiscuous mode
[  208.755692][T10032] syzkaller0: entered promiscuous mode
[  208.761400][T10032] syzkaller0: entered allmulticast mode
[  208.850837][T10035] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  210.874495][T10063] wlan0 speed is unknown, defaulting to 1000
[  210.927946][T10064] wlan0 speed is unknown, defaulting to 1000
[  211.093292][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'.
[  211.194443][T10077] wlan0 speed is unknown, defaulting to 1000
[  211.992379][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  211.998561][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  212.004756][ T5833] Bluetooth: hci2: command 0x0401 tx timeout
[  212.296601][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1102'.
[  212.312997][T10104] netlink: 'syz.3.1102': attribute type 15 has an invalid length.
[  213.308220][T10123] netlink: 'syz.4.1107': attribute type 9 has an invalid length.
[  213.331210][T10123] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1107'.
[  213.520772][T10135] netlink: 'syz.3.1109': attribute type 41 has an invalid length.
[  213.540138][T10136] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1110'.
[  213.855981][T10145] wlan0 speed is unknown, defaulting to 1000
[  214.185902][T10155] netlink: 'syz.3.1114': attribute type 9 has an invalid length.
[  214.744643][T10164] wlan0 speed is unknown, defaulting to 1000
[  214.838122][T10169] netlink: 'syz.0.1118': attribute type 21 has an invalid length.
[  214.847176][T10168] netlink: 'syz.0.1118': attribute type 21 has an invalid length.
[  214.855383][T10168] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1118'.
[  214.864874][T10169] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1118'.
[  214.874334][T10168] netlink: 'syz.0.1118': attribute type 5 has an invalid length.
[  214.882635][T10168] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1118'.
[  214.893401][T10169] netlink: 'syz.0.1118': attribute type 5 has an invalid length.
[  214.902135][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  214.912492][T10169] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1118'.
[  215.038046][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'.
[  215.055894][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'.
[  215.074177][T10172] tipc: Cannot configure node identity twice
[  215.247006][T10175] dvmrp0: entered allmulticast mode
[  215.487120][T10188] netlink: 'syz.4.1124': attribute type 11 has an invalid length.
[  215.881799][T10210] pim6reg: entered allmulticast mode
[  215.951897][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'.
[  216.306933][T10224] wlan0 speed is unknown, defaulting to 1000
[  216.462072][T10233] xt_hashlimit: overflow, try lower: 0/0
[  216.842660][T10246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1138'.
[  216.861332][T10248] sctp: [Deprecated]: syz.0.1139 (pid 10248) Use of int in max_burst socket option.
[  216.861332][T10248] Use struct sctp_assoc_value instead
[  216.881900][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'.
[  216.966274][T10252] netlink: 'syz.2.1138': attribute type 29 has an invalid length.
[  217.517554][T10277] ip6t_rpfilter: unknown options
[  217.528581][T10278] netlink: 'syz.1.1148': attribute type 21 has an invalid length.
[  217.609192][T10280] bridge0: Device is already in use.
[  217.938715][T10298] SET target dimension over the limit!
[  218.034056][T10306] netlink: 'syz.2.1157': attribute type 10 has an invalid length.
[  218.066514][T10306] team0: Port device geneve0 added
[  218.088283][ T7182] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.101118][ T7182] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.122686][ T7182] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.181254][ T7182] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.225184][T10312] wlan0 speed is unknown, defaulting to 1000
[  218.828673][T10319] openvswitch: netlink: Duplicate or invalid key (type 0).
[  218.858347][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.726949][T10354] veth0_to_team: entered promiscuous mode
[  219.866409][ T7187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.154455][ T7187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.287686][ T7187] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.486202][ T7187] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.859013][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.876702][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.886731][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.896671][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.914391][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.103975][T10388] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  221.225890][T10392] netlink: 'syz.3.1180': attribute type 1 has an invalid length.
[  221.285247][T10395] __nla_validate_parse: 21 callbacks suppressed
[  221.285269][T10395] netlink: 1012 bytes leftover after parsing attributes in process `syz.3.1180'.
[  221.307139][ T7187] batman_adv: batadv0: Removing interface: gretap1
[  221.594432][ T7187] team0: Port device geneve0 removed
[  221.728209][ T7187] bond3 (unregistering): (slave bridge2): Releasing active interface
[  221.923545][ T7187] bond0 (unregistering): Released all slaves
[  221.935850][ T7182] nci: nci_rx_work: unknown MT 0x1
[  222.023034][ T7187] bond1 (unregistering): Released all slaves
[  222.140112][ T7187] bond2 (unregistering): Released all slaves
[  222.143399][T10416] netlink: 'syz.4.1185': attribute type 1 has an invalid length.
[  222.158409][ T7187] bond3 (unregistering): Released all slaves
[  222.173122][T10392] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  222.236521][T10416] bond7: entered promiscuous mode
[  222.251168][T10416] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.260403][T10420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.267826][T10420] IPv6: NLM_F_CREATE should be set when creating new route
[  222.275144][T10420] IPv6: NLM_F_CREATE should be set when creating new route
[  222.319264][T10420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.330869][T10419] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.338368][T10419] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  222.349107][T10419] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  222.364179][T10419] bond7: (slave wireguard0): making interface the new active one
[  222.373852][T10419] wireguard0: entered promiscuous mode
[  222.381539][T10419] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  222.404545][T10422] pimreg: entered allmulticast mode
[  222.416375][T10420] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  222.436110][T10420] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  222.445510][T10422] x_tables: duplicate underflow at hook 1
[  222.494587][T10381] wlan0 speed is unknown, defaulting to 1000
[  222.501692][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'.
[  222.582985][T10427] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.622899][T10429] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.630261][T10429] bond5: (slave sit3): The slave device specified does not support setting the MAC address
[  222.641935][T10429] bond5: (slave sit3): Error -95 calling set_mac_address
[  222.683921][T10409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.897651][T10443] netlink: 'syz.3.1191': attribute type 9 has an invalid length.
[  222.952175][   T52] Bluetooth: hci4: command tx timeout
[  222.979606][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'.
[  223.239499][T10459] xt_hashlimit: size too large, truncated to 1048576
[  223.361878][T10460] syzkaller0: entered promiscuous mode
[  223.377612][T10460] syzkaller0: entered allmulticast mode
[  223.429254][T10381] chnl_net:caif_netlink_parms(): no params data found
[  223.533618][T10474] FAULT_INJECTION: forcing a failure.
[  223.533618][T10474] name failslab, interval 1, probability 0, space 0, times 0
[  223.550077][T10474] CPU: 1 UID: 0 PID: 10474 Comm: syz.3.1197 Not tainted syzkaller #0 PREEMPT(full) 
[  223.550107][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  223.550120][T10474] Call Trace:
[  223.550129][T10474]  <TASK>
[  223.550138][T10474]  dump_stack_lvl+0x189/0x250
[  223.550173][T10474]  ? __pfx____ratelimit+0x10/0x10
[  223.550202][T10474]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.550231][T10474]  ? __pfx__printk+0x10/0x10
[  223.550259][T10474]  ? __pfx___might_resched+0x10/0x10
[  223.550281][T10474]  ? fs_reclaim_acquire+0x7d/0x100
[  223.550319][T10474]  should_fail_ex+0x414/0x560
[  223.550357][T10474]  should_failslab+0xa8/0x100
[  223.550380][T10474]  kmem_cache_alloc_node_noprof+0x77/0x710
[  223.550411][T10474]  ? __alloc_skb+0x112/0x2d0
[  223.550437][T10474]  __alloc_skb+0x112/0x2d0
[  223.550460][T10474]  alloc_skb_with_frags+0xca/0x890
[  223.550483][T10474]  ? __lock_acquire+0xab9/0xd20
[  223.550512][T10474]  sock_alloc_send_pskb+0x84d/0x980
[  223.550569][T10474]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  223.550599][T10474]  ? dev_get_by_index+0x22/0x2e0
[  223.550625][T10474]  ? dev_get_by_index+0x22/0x2e0
[  223.550658][T10474]  packet_sendmsg+0x33a0/0x5080
[  223.550688][T10474]  ? match_mnt_path_str+0x7f1/0xb40
[  223.550735][T10474]  ? __pfx___might_resched+0x10/0x10
[  223.550757][T10474]  ? __lock_acquire+0xab9/0xd20
[  223.550792][T10474]  ? __pfx_packet_sendmsg+0x10/0x10
[  223.550821][T10474]  ? aa_sk_perm+0x81e/0x950
[  223.550875][T10474]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  223.550915][T10474]  ? aa_sock_msg_perm+0xf1/0x1d0
[  223.550948][T10474]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.550981][T10474]  ? __pfx_packet_sendmsg+0x10/0x10
[  223.551019][T10474]  __sock_sendmsg+0x21c/0x270
[  223.551051][T10474]  __sys_sendto+0x3bd/0x520
[  223.551074][T10474]  ? __pfx___sys_sendto+0x10/0x10
[  223.551090][T10474]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  223.551136][T10474]  ? __fget_files+0x3a0/0x420
[  223.551168][T10474]  ? ksys_write+0x22a/0x250
[  223.551201][T10474]  ? __pfx_ksys_write+0x10/0x10
[  223.551235][T10474]  __x64_sys_sendto+0xde/0x100
[  223.551260][T10474]  do_syscall_64+0xfa/0xfa0
[  223.551288][T10474]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.551316][T10474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.551337][T10474]  ? clear_bhb_loop+0x60/0xb0
[  223.551363][T10474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.551384][T10474] RIP: 0033:0x7ff99758f6c9
[  223.551403][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.551421][T10474] RSP: 002b:00007ff9983b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  223.551445][T10474] RAX: ffffffffffffffda RBX: 00007ff9977e6090 RCX: 00007ff99758f6c9
[  223.551460][T10474] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000007
[  223.551473][T10474] RBP: 00007ff9983b2090 R08: 00002000000001c0 R09: 0000000000000014
[  223.551488][T10474] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001
[  223.551501][T10474] R13: 00007ff9977e6128 R14: 00007ff9977e6090 R15: 00007ffd3c3065a8
[  223.551536][T10474]  </TASK>
[  223.945275][T10475] wlan0 speed is unknown, defaulting to 1000
[  224.052511][T10476] netlink: 'syz.1.1200': attribute type 4 has an invalid length.
[  224.066637][T10476] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1200'.
[  224.278475][T10500] xt_hashlimit: max too large, truncated to 1048576
[  224.292168][T10500] xt_bpf: check failed: parse error
[  224.309162][T10500] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1203'.
[  224.344576][T10381] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.353645][T10381] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.364748][T10381] bridge_slave_0: entered allmulticast mode
[  224.373209][T10381] bridge_slave_0: entered promiscuous mode
[  224.385472][T10381] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.392948][T10381] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.400366][T10381] bridge_slave_1: entered allmulticast mode
[  224.409845][T10381] bridge_slave_1: entered promiscuous mode
[  224.464489][T10508] netlink: 'syz.3.1205': attribute type 32 has an invalid length.
[  224.472825][T10508] netlink: 'syz.3.1205': attribute type 1 has an invalid length.
[  224.511964][T10508] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  224.524516][T10508] bond2 (unregistering): Released all slaves
[  224.549443][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.565434][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.585723][ T7187] tipc: Disabling bearer <udp:syz2>
[  224.593576][ T7187] tipc: Left network mode
[  224.695767][T10381] team0: Port device team_slave_0 added
[  224.714679][T10381] team0: Port device team_slave_1 added
[  224.816999][T10511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.853674][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.860686][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.898023][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.991547][T10511] syzkaller0: entered promiscuous mode
[  225.000604][T10511] syzkaller0: entered allmulticast mode
[  225.022659][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.029662][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.055894][   T52] Bluetooth: hci4: command tx timeout
[  225.087657][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.108114][T10520] tipc: Resetting bearer <eth:syzkaller0>
[  225.140928][T10510] tipc: Resetting bearer <eth:syzkaller0>
[  225.861157][   T43] tipc: Node number set to 3483712246
[  226.581753][T10510] tipc: Disabling bearer <eth:syzkaller0>
[  226.609830][T10533] syzkaller0: entered promiscuous mode
[  226.615888][T10533] syzkaller0: entered allmulticast mode
[  226.665808][ T7187] hsr_slave_0: left promiscuous mode
[  226.672949][ T7187] hsr_slave_1: left promiscuous mode
[  226.680195][ T7187] batman_adv: batadv0: Removing interface: macvtap1
[  226.705149][ T7187] pim6reg (unregistering): left allmulticast mode
[  227.067541][   T12] smc: removing ib device !yz!
[  227.112480][   T52] Bluetooth: hci4: command tx timeout
[  227.457706][T10381] hsr_slave_0: entered promiscuous mode
[  227.470153][T10381] hsr_slave_1: entered promiscuous mode
[  227.875116][T10554] syzkaller0: entered promiscuous mode
[  227.891735][T10554] syzkaller0: entered allmulticast mode
[  228.126360][T10563] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  228.280507][T10561] wlan0 speed is unknown, defaulting to 1000
[  228.635467][T10576] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.100681][T10381] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  229.150578][T10381] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  229.172547][T10381] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  229.191090][   T52] Bluetooth: hci4: command tx timeout
[  229.234878][T10381] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  229.274893][T10603] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.301961][T10603] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.383066][T10611] wlan0 speed is unknown, defaulting to 1000
[  229.409310][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1232'.
[  229.411513][T10619] : entered promiscuous mode
[  229.437836][T10603] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.452162][T10603] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.503127][T10603] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.513594][T10603] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.520625][T10622] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1234'.
[  229.533240][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'.
[  229.599042][ T7187] IPVS: stop unused estimator thread 0...
[  229.605135][T10624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1235'.
[  229.624534][T10603] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.634673][T10603] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.707878][T10627] netlink: 'syz.0.1236': attribute type 32 has an invalid length.
[  229.723039][T10627] netlink: 'syz.0.1236': attribute type 1 has an invalid length.
[  229.869933][T10627] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  229.891630][T10627] bond2 (unregistering): Released all slaves
[  229.936420][T10381] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.996976][ T7184] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  230.014718][ T7184] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.056103][ T7178] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  230.074379][ T7178] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.099052][T10381] 8021q: adding VLAN 0 to HW filter on device team0
[  230.122065][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'.
[  230.141613][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  230.153750][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.200793][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  230.209425][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.218504][T10643] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  230.243400][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.250698][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.295343][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.302629][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.494459][T10654] IPVS: set_ctl: invalid protocol: 103 172.30.1.4:20004
[  230.816682][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.995414][T10677] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1251'.
[  231.221543][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'.
[  231.265251][T10690] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1254'.
[  231.518026][T10708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1258'.
[  231.526832][T10381] veth0_vlan: entered promiscuous mode
[  231.576207][T10381] veth1_vlan: entered promiscuous mode
[  231.664957][T10717] netlink: 4460 bytes leftover after parsing attributes in process `syz.3.1258'.
[  231.724136][T10381] veth0_macvtap: entered promiscuous mode
[  231.770281][T10381] veth1_macvtap: entered promiscuous mode
[  231.840900][T10381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.925221][T10381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.970710][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.990390][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.020575][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.063685][T10731] netlink: 'syz.1.1263': attribute type 1 has an invalid length.
[  232.073014][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.179508][T10731] 8021q: adding VLAN 0 to HW filter on device bond6
[  232.200096][T10733] syzkaller0: entered promiscuous mode
[  232.221796][T10733] syzkaller0: entered allmulticast mode
[  232.244227][ T7182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.268985][ T7182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.402820][ T7182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.410804][ T7182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.686511][T10747] wlan0 speed is unknown, defaulting to 1000
[  232.917134][T10748] wlan0 speed is unknown, defaulting to 1000
[  233.037571][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  233.064375][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  233.083789][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  233.099701][T10757] batadv_slave_0: entered promiscuous mode
[  233.436488][T10756] infiniband syz2: set down
[  233.437544][   T43] ip6_vti0 speed is unknown, defaulting to 1000
[  233.449875][T10756] infiniband syz2: added ip6_vti0
[  233.642849][T10756] RDS/IB: syz2: added
[  233.646962][T10756] smc: adding ib device syz2 with port count 1
[  233.656264][T10756] smc:    ib device syz2 port 1 has no pnetid
[  233.663274][ T5917] ip6_vti0 speed is unknown, defaulting to 1000
[  233.686056][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  234.731327][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  234.816916][T10795] __nla_validate_parse: 6 callbacks suppressed
[  234.816937][T10795] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1277'.
[  235.165435][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  235.633575][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  235.680093][T10816] dvmrp1: entered allmulticast mode
[  235.933100][T10818] can: request_module (can-proto-5) failed.
[  236.091139][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  236.302896][T10832] syzkaller0: entered promiscuous mode
[  236.328833][T10832] syzkaller0: entered allmulticast mode
[  236.455957][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  236.725124][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  236.965659][T10849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1293'.
[  236.975919][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'.
[  236.982292][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  237.153093][T10756] ip6_vti0 speed is unknown, defaulting to 1000
[  237.342166][T10772] wlan0 speed is unknown, defaulting to 1000
[  237.350659][T10798] wlan0 speed is unknown, defaulting to 1000
[  237.745104][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'.
[  237.786222][T10865] : entered promiscuous mode
[  237.826041][T10862] netlink: 'syz.1.1297': attribute type 1 has an invalid length.
[  237.934965][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'.
[  237.948487][T10862] bond7: entered promiscuous mode
[  237.955402][T10862] 8021q: adding VLAN 0 to HW filter on device bond7
[  238.034169][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'.
[  238.137690][T10865] 8021q: adding VLAN 0 to HW filter on device bond7
[  238.152320][T10865] bond7: (slave gre1): The slave device specified does not support setting the MAC address
[  238.163887][T10865] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  238.189126][T10865] bond7: (slave gre1): Opening slave failed
[  238.438979][T10886] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1302'.
[  238.781777][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'.
[  239.124589][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'.
[  239.263229][T10928] bond2 (unregistering): Released all slaves
[  239.479628][T10943] netlink: 'syz.4.1317': attribute type 1 has an invalid length.
[  239.482907][T10945] Cannot find del_set index 4 as target
[  239.606570][T10943] bond8: entered promiscuous mode
[  239.634838][T10943] 8021q: adding VLAN 0 to HW filter on device bond8
[  239.847095][T10961] netlink: 'syz.3.1321': attribute type 2 has an invalid length.
[  239.885212][T10961] netlink: 'syz.3.1321': attribute type 1 has an invalid length.
[  239.936201][T10961] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1321'.
[  240.188282][T10982] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1324'.
[  240.273893][T10984] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  240.302446][T10982] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1324'.
[  240.319428][T10982] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1324'.
[  240.340182][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  240.349564][T10990] netlink: 'syz.3.1326': attribute type 30 has an invalid length.
[  240.494002][T10994] wlan0 speed is unknown, defaulting to 1000
[  240.497061][T11002] sctp: [Deprecated]: syz.0.1329 (pid 11002) Use of int in max_burst socket option.
[  240.497061][T11002] Use struct sctp_assoc_value instead
[  240.506310][T10994] ip6_vti0 speed is unknown, defaulting to 1000
[  240.516993][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  240.547652][T10990] netlink: 'syz.3.1326': attribute type 30 has an invalid length.
[  240.744930][T11014] netlink: 'syz.5.1334': attribute type 9 has an invalid length.
[  240.964167][T11027] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[  240.982556][T11025] wlan0 speed is unknown, defaulting to 1000
[  241.018745][T11025] ip6_vti0 speed is unknown, defaulting to 1000
[  241.263200][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1340'.
[  241.730669][T11048] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1342'.
[  241.781182][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1342'.
[  242.073020][T11052] block nbd0: shutting down sockets
[  242.318599][ T7182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.318652][T11061] wlan0 speed is unknown, defaulting to 1000
[  242.340765][ T7182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.346156][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  242.421922][T11057] wlan0 speed is unknown, defaulting to 1000
[  242.433106][T11061] ip6_vti0 speed is unknown, defaulting to 1000
[  243.018770][T11081] sctp: [Deprecated]: syz.0.1351 (pid 11081) Use of int in max_burst socket option.
[  243.018770][T11081] Use struct sctp_assoc_value instead
[  243.038851][T11057] ip6_vti0 speed is unknown, defaulting to 1000
[  243.076814][T11072] wlan0 speed is unknown, defaulting to 1000
[  243.543954][T11072] ip6_vti0 speed is unknown, defaulting to 1000
[  243.594199][T11088] syzkaller0: entered promiscuous mode
[  243.621810][T11088] syzkaller0: entered allmulticast mode
[  244.633260][T11123] syzkaller0: entered promiscuous mode
[  244.649918][T11123] syzkaller0: entered allmulticast mode
[  244.949984][T11139] syzkaller0: entered promiscuous mode
[  244.963656][T11139] syzkaller0: entered allmulticast mode
[  245.012935][T11143] __nla_validate_parse: 6 callbacks suppressed
[  245.012956][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'.
[  245.362706][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1371'.
[  245.371950][T11157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'.
[  245.432708][T11157] bond3: option primary_reselect: invalid value (255)
[  245.677498][T11157] bond3 (unregistering): Released all slaves
[  246.074736][T11188] vlan2: entered promiscuous mode
[  246.090518][T11188] ip6gretap0: entered promiscuous mode
[  246.407338][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'.
[  246.415614][T11211] bond0: (slave gre0): Error: Device type is different from other slaves
[  246.425863][T11215] openvswitch: netlink: Flow actions attr not present in new flow.
[  246.444251][T11215] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1384'.
[  246.455078][T11211] netlink: 'syz.4.1381': attribute type 39 has an invalid length.
[  246.509347][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'.
[  246.526979][T11221] netlink: zone id is out of range
[  246.541123][T11221] netlink: zone id is out of range
[  246.546309][T11221] netlink: zone id is out of range
[  246.576010][T11221] netlink: zone id is out of range
[  246.586134][T11221] netlink: zone id is out of range
[  246.597140][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1386'.
[  246.608456][T11221] netlink: zone id is out of range
[  246.613893][T11221] netlink: zone id is out of range
[  246.635588][T11221] netlink: zone id is out of range
[  246.652318][T11221] netlink: zone id is out of range
[  247.037201][T11248] Cannot find add_set index 2 as target
[  247.196155][T11252] syzkaller0: entered promiscuous mode
[  247.231664][T11252] syzkaller0: entered allmulticast mode
[  247.431740][T11272] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1396'.
[  247.593154][T11282] syzkaller0: entered promiscuous mode
[  247.598940][T11282] syzkaller0: entered allmulticast mode
[  247.823231][T11296] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1407'.
[  248.001762][T11303] vlan2: entered promiscuous mode
[  248.007071][T11303] dummy0: entered promiscuous mode
[  248.292181][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'.
[  248.308284][T11324] gretap0: entered promiscuous mode
[  248.327214][T11324] gretap0: left promiscuous mode
[  248.439866][T11331] batadv_slave_1: entered promiscuous mode
[  248.457729][T11331] batman_adv: batadv0: Adding interface: macvlan2
[  248.464432][T11331] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.492547][T11331] batman_adv: batadv0: Interface activated: macvlan2
[  248.679971][   T30] audit: type=1800 audit(1762393354.296:3): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1422" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=143 res=0 errno=0
[  249.026919][T11424] netlink: 'syz.3.1425': attribute type 32 has an invalid length.
[  249.046438][T11428] netlink: 'syz.1.1426': attribute type 10 has an invalid length.
[  249.047458][T11424] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  249.074949][T11428] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  249.102947][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.148747][T11424] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  249.165375][T11424] bond3 (unregistering): Released all slaves
[  249.174191][T11326] workqueue: Failed to create a rescuer kthread for wq "nfc32_nci_cmd_wq": -EINTR
[  249.675614][T11468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.735773][T11471] netlink: 'syz.4.1433': attribute type 1 has an invalid length.
[  249.795614][T11471] NCSI netlink: No device for ifindex 0
[  249.815038][T11480] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  250.159446][T11492] __nla_validate_parse: 6 callbacks suppressed
[  250.159466][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'.
[  250.284396][T11496] netlink: 'syz.4.1441': attribute type 2 has an invalid length.
[  250.307709][T11497] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1441'.
[  250.325254][T11496] netlink: 'syz.4.1441': attribute type 1 has an invalid length.
[  250.463326][T11501] wlan0 speed is unknown, defaulting to 1000
[  250.496986][T11501] ip6_vti0 speed is unknown, defaulting to 1000
[  250.508242][T11503] netlink: 'syz.3.1443': attribute type 10 has an invalid length.
[  250.562464][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'.
[  250.586132][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1442'.
[  250.859730][T11503] 8021q: adding VLAN 0 to HW filter on device bond3
[  250.883413][T11510] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  250.895009][T11510] bond3: (slave macvlan3): Enslaving as a backup interface with a down link
[  251.028406][T11518] ªªªªªª: renamed from wg2
[  251.313876][T11536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1452'.
[  251.327710][T11529] wlan0 speed is unknown, defaulting to 1000
[  251.336160][T11529] ip6_vti0 speed is unknown, defaulting to 1000
[  252.264901][T11550] team0: Port device team_slave_0 removed
[  252.271955][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'.
[  252.302609][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'.
[  252.321695][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'.
[  252.384487][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'.
[  252.407162][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'.
[  252.759212][T11577] wlan0 speed is unknown, defaulting to 1000
[  252.779034][T11577] ip6_vti0 speed is unknown, defaulting to 1000
[  252.944076][T11593] net_ratelimit: 9 callbacks suppressed
[  252.944097][T11593] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  253.103175][T11580] dvmrp0: entered allmulticast mode
[  253.298948][T11611] ieee802154 phy0 wpan0: encryption failed: -22
[  253.405504][T11615] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001
[  253.971310][T11642] netlink: 'syz.1.1473': attribute type 5 has an invalid length.
[  254.398154][T11660] bond3: option lacp_rate: invalid value (255)
[  254.407358][T11660] bond3 (unregistering): Released all slaves
[  254.635082][T11658] wlan0 speed is unknown, defaulting to 1000
[  254.651460][T11658] ip6_vti0 speed is unknown, defaulting to 1000
[  255.357619][T11688] __nla_validate_parse: 11 callbacks suppressed
[  255.357641][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'.
[  255.411764][T11688] openvswitch: netlink: Missing key (keys=40, expected=80)
[  255.642168][T11703] delete_channel: no stack
[  255.887649][T11713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'.
[  255.922901][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'.
[  255.989692][T11715] netlink: 'syz.5.1489': attribute type 1 has an invalid length.
[  256.197535][T11717] gretap1: entered allmulticast mode
[  256.218732][T11717] bond1: (slave gretap1): making interface the new active one
[  256.248788][T11717] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  256.265031][T11727] 8021q: VLANs not supported on ip6_vti0
[  256.289557][T11729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1493'.
[  256.321553][T11729] block nbd0: not configured, cannot reconfigure
[  256.632602][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'.
[  256.645655][T11744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.741781][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'.
[  256.857731][T11753] can: request_module (can-proto-0) failed.
[  256.930633][T11761] 8021q: adding VLAN 0 to HW filter on device bond3
[  257.384483][T11795] wlan0 speed is unknown, defaulting to 1000
[  257.456115][T11795] ip6_vti0 speed is unknown, defaulting to 1000
[  257.468552][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'.
[  257.769827][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  257.801146][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  257.844405][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  257.878385][T11816] netlink: 'syz.1.1517': attribute type 11 has an invalid length.
[  258.460032][T11839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.818851][T11852] netlink: 'syz.0.1527': attribute type 4 has an invalid length.
[  258.969078][T11854] netlink: 'syz.1.1528': attribute type 29 has an invalid length.
[  258.982084][T11854] netlink: 'syz.1.1528': attribute type 29 has an invalid length.
[  259.720641][T11883] 8021q: adding VLAN 0 to HW filter on device bond8
[  260.221902][T11913] netlink: 'syz.1.1540': attribute type 13 has an invalid length.
[  260.265705][T11913] netlink: 'syz.1.1540': attribute type 17 has an invalid length.
[  260.352606][T11913] bridge0: entered promiscuous mode
[  260.382075][T11918] __nla_validate_parse: 6 callbacks suppressed
[  260.382096][T11918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1540'.
[  260.384984][T11913] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.413682][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.425591][T11913] 8021q: adding VLAN 0 to HW filter on device team0
[  260.445811][T11921] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1541'.
[  260.460040][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1541'.
[  260.636218][T11913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.763276][ T5934] ip6_vti0 speed is unknown, defaulting to 1000
[  260.779289][T11915] wlan0 speed is unknown, defaulting to 1000
[  260.785796][ T5934] syz2: Port: 1 Link ACTIVE
[  260.793808][ T1219] ip6_vti0 speed is unknown, defaulting to 1000
[  260.803912][T11915] ip6_vti0 speed is unknown, defaulting to 1000
[  260.957050][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'.
[  261.118599][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  261.125045][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  261.287685][T11945] syzkaller0: entered promiscuous mode
[  261.304688][T11945] syzkaller0: entered allmulticast mode
[  261.314871][T11941] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1547'.
[  261.500039][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'.
[  261.842979][T11969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1557'.
[  261.874855][T11966] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1554'.
[  262.629917][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1563'.
[  262.647228][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1563'.
[  262.672294][T12005] wlan0 speed is unknown, defaulting to 1000
[  262.680376][T12005] ip6_vti0 speed is unknown, defaulting to 1000
[  262.783566][T12003] wlan0 speed is unknown, defaulting to 1000
[  263.021185][T12003] ip6_vti0 speed is unknown, defaulting to 1000
[  263.656364][T12032] macsec1: entered promiscuous mode
[  263.685480][T12032] macsec1: entered allmulticast mode
[  265.297935][T12105] wlan0 speed is unknown, defaulting to 1000
[  265.307644][T12105] ip6_vti0 speed is unknown, defaulting to 1000
[  266.229233][T12147] __nla_validate_parse: 9 callbacks suppressed
[  266.229254][T12147] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1601'.
[  266.428155][T12160] netlink: 1053 bytes leftover after parsing attributes in process `syz.5.1606'.
[  266.445450][T12153] wlan0 speed is unknown, defaulting to 1000
[  266.511669][T12153] ip6_vti0 speed is unknown, defaulting to 1000
[  266.537275][T12160] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1606'.
[  266.908068][T12183] wlan0 speed is unknown, defaulting to 1000
[  267.030328][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'.
[  267.140927][T12183] ip6_vti0 speed is unknown, defaulting to 1000
[  267.392520][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'.
[  267.546167][T12205] wlan0 speed is unknown, defaulting to 1000
[  267.579632][T12205] ip6_vti0 speed is unknown, defaulting to 1000
[  268.249659][T12229] netlink: 'syz.3.1626': attribute type 11 has an invalid length.
[  268.266434][T12229] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1626'.
[  268.324602][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'.
[  268.382268][T12235] netlink: 'syz.4.1625': attribute type 12 has an invalid length.
[  268.461249][T12235] netlink: 'syz.4.1625': attribute type 4 has an invalid length.
[  268.932246][T12240] wlan0 speed is unknown, defaulting to 1000
[  268.984685][T12240] ip6_vti0 speed is unknown, defaulting to 1000
[  269.677721][T12257] wlan0 speed is unknown, defaulting to 1000
[  269.883494][T12257] ip6_vti0 speed is unknown, defaulting to 1000
[  270.134385][T12282] bond0: option all_slaves_active: invalid value (7)
[  270.219827][T12287] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1640'.
[  270.452560][T12296] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  270.525004][T12298] netlink: 'syz.5.1642': attribute type 8 has an invalid length.
[  270.533283][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1642'.
[  270.575500][T12290] netlink: 'syz.5.1642': attribute type 8 has an invalid length.
[  270.597285][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1642'.
[  270.678121][T12298] bond0: entered promiscuous mode
[  270.691878][T12298] bond_slave_0: entered promiscuous mode
[  270.697893][T12298] bond_slave_1: entered promiscuous mode
[  270.726985][T12298] bond0: left promiscuous mode
[  270.741268][T12298] bond_slave_0: left promiscuous mode
[  270.755604][T12298] bond_slave_1: left promiscuous mode
[  270.866187][T12290] bond0: entered promiscuous mode
[  270.872478][T12290] bond_slave_0: entered promiscuous mode
[  270.879633][T12290] bond_slave_1: entered promiscuous mode
[  270.889942][T12290] bond0: left promiscuous mode
[  270.895795][T12290] bond_slave_0: left promiscuous mode
[  270.902438][T12290] bond_slave_1: left promiscuous mode
[  270.946013][T12307] syzkaller1: entered promiscuous mode
[  270.955506][T12307] syzkaller1: entered allmulticast mode
[  271.987054][T12333] wlan0 speed is unknown, defaulting to 1000
[  272.028742][T12333] ip6_vti0 speed is unknown, defaulting to 1000
[  272.570196][T12359] netlink: 'syz.0.1658': attribute type 13 has an invalid length.
[  272.749380][T12369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1659'.
[  272.892210][T12369] 8021q: VLANs not supported on ipvlan1
[  273.002907][T12380] erspan0: entered promiscuous mode
[  273.009121][T12380] erspan0: entered allmulticast mode
[  273.258815][T12389] netlink: 'syz.3.1665': attribute type 39 has an invalid length.
[  273.269952][T12389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'.
[  273.282905][T12389] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1665'.
[  273.292742][T12389] netlink: 'syz.3.1665': attribute type 5 has an invalid length.
[  273.305505][T12389] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1665'.
[  273.386549][T12389] vlan0: entered allmulticast mode
[  273.401087][T12389] bridge_slave_0: entered allmulticast mode
[  273.773023][T12412] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1669'.
[  273.864211][T12404] wlan0 speed is unknown, defaulting to 1000
[  273.872937][T12404] ip6_vti0 speed is unknown, defaulting to 1000
[  274.022444][T12418] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1670'.
[  274.273599][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'.
[  274.331090][T12429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1673'.
[  274.354049][T12429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1673'.
[  274.394075][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  274.498766][T12433] netlink: 'syz.0.1675': attribute type 21 has an invalid length.
[  274.533797][T12433] netlink: 'syz.0.1675': attribute type 5 has an invalid length.
[  274.742026][T12440] wlan0 speed is unknown, defaulting to 1000
[  274.769325][T12440] ip6_vti0 speed is unknown, defaulting to 1000
[  274.976229][T12453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.357573][T12512] netlink: 'syz.5.1691': attribute type 2 has an invalid length.
[  276.621688][T12516] netlink: 'syz.1.1692': attribute type 1 has an invalid length.
[  276.731830][T12524] netlink: 'syz.3.1695': attribute type 10 has an invalid length.
[  276.784345][T12524] dummy0: entered promiscuous mode
[  276.805324][T12524] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  276.855371][T12526] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  276.910813][T12537] netlink: 'syz.0.1698': attribute type 13 has an invalid length.
[  276.920333][T12537] netlink: 'syz.0.1698': attribute type 17 has an invalid length.
[  276.973409][T12526] bond9 (unregistering): Released all slaves
[  277.238075][T12537] ip6gretap0: left promiscuous mode
[  277.271419][T12537] ip6gretap0: left allmulticast mode
[  277.308702][T12537] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.332629][T12537] 0ªX¹¦À: left allmulticast mode
[  277.337820][T12537] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  277.451921][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  277.514638][T12543] vxcan3: entered allmulticast mode
[  277.525361][T12544] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.752425][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  277.834277][T12562] __nla_validate_parse: 12 callbacks suppressed
[  277.834298][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1704'.
[  277.862511][ T7182] bond3: (slave macvlan3): failed to get link speed/duplex
[  277.886222][T12562] netlink: 'syz.5.1704': attribute type 1 has an invalid length.
[  277.983109][ T7182] bond3: (slave macvlan3): failed to get link speed/duplex
[  278.101841][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  278.221767][ T7182] bond3: (slave macvlan3): failed to get link speed/duplex
[  278.348483][T12584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1711'.
[  278.361714][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  278.426383][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1713'.
[  278.528615][T12584] wlan0 speed is unknown, defaulting to 1000
[  278.541696][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  278.554465][T12584] ip6_vti0 speed is unknown, defaulting to 1000
[  278.606175][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'.
[  278.736865][T12607] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1719'.
[  278.817544][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'.
[  279.007025][T12619] netlink: 'syz.5.1723': attribute type 13 has an invalid length.
[  279.026017][T12619] netlink: 'syz.5.1723': attribute type 17 has an invalid length.
[  279.175439][ T1165] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  279.677503][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'.
[  279.991931][  T154] net_ratelimit: 11 callbacks suppressed
[  279.991953][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  280.133877][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  280.380361][T12680] bond2 (unregistering): Released all slaves
[  280.431094][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  280.571448][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  280.596568][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1742'.
[  280.635997][T12680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1742'.
[  280.711179][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  280.852587][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  280.970105][T12717] netlink: 'syz.3.1752': attribute type 2 has an invalid length.
[  281.021378][T12719] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  281.072962][ T7182] bond3: (slave macvlan3): failed to get link speed/duplex
[  281.194016][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  281.311617][ T7176] bond3: (slave macvlan3): failed to get link speed/duplex
[  281.421095][ T7176] bond3: (slave macvlan3): failed to get link speed/duplex
[  281.710847][T12745] vlan2: entered promiscuous mode
[  281.741714][T12745] hsr_slave_1: entered promiscuous mode
[  281.747564][T12745] vlan2: entered allmulticast mode
[  281.774485][T12745] hsr_slave_1: entered allmulticast mode
[  281.848683][T12745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1759'.
[  281.860332][T12751] wlan0 speed is unknown, defaulting to 1000
[  282.095406][T12751] ip6_vti0 speed is unknown, defaulting to 1000
[  282.513568][T12778] netlink: 'syz.3.1765': attribute type 32 has an invalid length.
[  282.548648][T12778] netlink: 'syz.3.1765': attribute type 1 has an invalid length.
[  282.672440][T12778] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  282.700838][T12778] bond4 (unregistering): Released all slaves
[  282.871173][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  283.008528][T12792] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  283.415236][T12803] __nla_validate_parse: 3 callbacks suppressed
[  283.415258][T12803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1772'.
[  283.785173][T12815] netlink: 'syz.4.1779': attribute type 32 has an invalid length.
[  283.799521][T12815] netlink: 'syz.4.1779': attribute type 1 has an invalid length.
[  283.835089][T12815] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  283.852958][T12815] bond9 (unregistering): Released all slaves
[  284.054185][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'.
[  284.077369][T12837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'.
[  284.086692][T12831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'.
[  284.243325][T12843] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20004
[  284.337896][T12849] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1789'.
[  284.473482][T12856] wlan0 speed is unknown, defaulting to 1000
[  284.482604][T12856] ip6_vti0 speed is unknown, defaulting to 1000
[  284.517284][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1791'.
[  284.603457][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'.
[  284.708281][ T5934] IPVS: starting estimator thread 0...
[  284.866481][T12869] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  284.867175][T12865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  284.971615][T12870] IPVS: using max 27 ests per chain, 64800 per kthread
[  285.033608][T12883] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1796'.
[  285.043650][  T154] net_ratelimit: 21 callbacks suppressed
[  285.043672][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  285.062915][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1796'.
[  285.121873][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1795'.
[  285.173807][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  285.287864][T12883] wlan0 speed is unknown, defaulting to 1000
[  285.378019][T12890] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  285.446584][T12883] ip6_vti0 speed is unknown, defaulting to 1000
[  285.465256][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  285.536538][T12899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.544818][T12899] syzkaller0: entered promiscuous mode
[  285.550349][T12899] syzkaller0: entered allmulticast mode
[  285.581971][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  285.691466][T12911] netlink: 'syz.5.1803': attribute type 39 has an invalid length.
[  285.727730][T12915] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  285.792207][T12899] Ïyzk: option downdelay: invalid value (18446744073709547007)
[  285.799998][T12899] Ïyzk: option downdelay: allowed values 0 - 2147483647
[  285.843725][T12899] Ïyzk (unregistering): Released all slaves
[  285.903978][T12909] tipc: Resetting bearer <eth:syzkaller0>
[  286.048947][T12897] tipc: Resetting bearer <eth:syzkaller0>
[  286.085724][T12897] tipc: Disabling bearer <eth:syzkaller0>
[  286.331362][T12926] wlan0 speed is unknown, defaulting to 1000
[  286.339740][T12926] ip6_vti0 speed is unknown, defaulting to 1000
[  286.408359][T12932] pimreg3: entered allmulticast mode
[  286.442056][ T7174] bond3: (slave macvlan3): failed to get link speed/duplex
[  286.471884][ T5844] Bluetooth: hci4: command 0x0405 tx timeout
[  286.692018][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  286.715078][T12945] sctp: [Deprecated]: syz.1.1812 (pid 12945) Use of int in maxseg socket option.
[  286.715078][T12945] Use struct sctp_assoc_value instead
[  286.813577][  T154] bond3: (slave macvlan3): failed to get link speed/duplex
[  287.104145][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  287.132815][T12957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.423250][ T7174] bond3: (slave macvlan3): failed to get link speed/duplex
[  287.446331][T12955] wlan0 speed is unknown, defaulting to 1000
[  287.508156][T12955] ip6_vti0 speed is unknown, defaulting to 1000
[  287.541436][T12963] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.573941][T12957] syzkaller1: entered promiscuous mode
[  287.594122][T12957] syzkaller1: entered allmulticast mode
[  287.622216][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  288.070053][T12961] wlan0 speed is unknown, defaulting to 1000
[  288.084509][T12961] ip6_vti0 speed is unknown, defaulting to 1000
[  288.753917][T13004] netlink: 'syz.4.1829': attribute type 32 has an invalid length.
[  288.762100][T13004] netlink: 'syz.4.1829': attribute type 1 has an invalid length.
[  288.790231][T13002] __nla_validate_parse: 6 callbacks suppressed
[  288.790253][T13002] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1828'.
[  288.808326][T13002] netlink: 'syz.0.1828': attribute type 9 has an invalid length.
[  288.818117][T13002] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1828'.
[  288.833653][T13002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1828'.
[  288.972895][T13004] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  288.985436][T13004] bond9 (unregistering): Released all slaves
[  289.036321][T12995] syzkaller0: entered promiscuous mode
[  289.042566][T12995] syzkaller0: entered allmulticast mode
[  289.835026][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  289.843123][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  290.553641][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.973346][ T1165] net_ratelimit: 9 callbacks suppressed
[  290.973368][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  291.122963][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'.
[  291.143082][ T7178] bond3: (slave macvlan3): failed to get link speed/duplex
[  291.251290][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  291.262917][T13045] netlink: 'syz.3.1840': attribute type 32 has an invalid length.
[  291.271458][T13045] netlink: 'syz.3.1840': attribute type 1 has an invalid length.
[  291.405001][T13045] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  291.459733][T13045] bond4 (unregistering): Released all slaves
[  291.578966][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'.
[  291.597005][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'.
[  291.731734][ T1165] bond3: (slave macvlan3): failed to get link speed/duplex
[  291.831534][    C0] ------------[ cut here ]------------
[  291.837381][    C0] ODEBUG: free active (active state 0) object: ffff88805476b490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  291.851225][    C0] WARNING: CPU: 0 PID: 5831 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  291.860761][    C0] Modules linked in:
[  291.864990][    C0] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  291.874539][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  291.884780][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  291.890668][    C0] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 32 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  291.910457][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296
[  291.916617][    C0] RAX: fc042933d1396400 RBX: dffffc0000000000 RCX: ffff88802a5a8000
[  291.924687][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  291.932736][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  291.940843][    C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a3925a0
[  291.948907][    C0] R13: ffffffff8bbf1100 R14: ffff88805476b490 R15: ffffffff8b6cf600
[  291.956971][    C0] FS:  0000555594af3500(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000
[  291.965994][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.972657][    C0] CR2: 00007fe1265b12f8 CR3: 00000000670e4000 CR4: 00000000003526f0
[  291.980677][    C0] Call Trace:
[  291.984036][    C0]  <IRQ>
[  291.986923][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  291.992573][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  291.997780][    C0]  kfree+0x115/0x6d0
[  292.001761][    C0]  rose_timer_expiry+0x4cb/0x600
[  292.006746][    C0]  ? call_timer_fn+0x155/0x5f0
[  292.011579][    C0]  call_timer_fn+0x17e/0x5f0
[  292.016199][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  292.021724][    C0]  ? call_timer_fn+0xbe/0x5f0
[  292.026434][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  292.031624][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.036878][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.042146][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  292.047681][    C0]  __run_timer_base+0x61a/0x860
[  292.052660][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  292.058081][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  292.064441][    C0]  run_timer_softirq+0xb7/0x180
[  292.069360][    C0]  handle_softirqs+0x286/0x870
[  292.074285][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  292.079090][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  292.084453][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  292.089699][    C0]  __irq_exit_rcu+0xca/0x1f0
[  292.094364][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  292.099607][    C0]  irq_exit_rcu+0x9/0x30
[  292.103923][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  292.109648][    C0]  </IRQ>
[  292.112658][    C0]  <TASK>
[  292.115618][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.121686][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  292.128228][    C0] Code: 74 05 e8 5b dc 7e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 53 0a 47 f6 65 8b 05 dc 48 25 07 85 c0 74 40 48 c7 04 24 0e 36
[  292.147913][    C0] RSP: 0018:ffffc9000413fc00 EFLAGS: 00000206
[  292.154052][    C0] RAX: fc042933d1396400 RBX: 0000000000000a02 RCX: fc042933d1396400
[  292.162090][    C0] RDX: 0000000000000000 RSI: ffffffff8d70da3a RDI: 0000000000000001
[  292.170088][    C0] RBP: ffffc9000413fc88 R08: ffffffff8f7cd777 R09: 1ffffffff1ef9aee
[  292.178138][    C0] R10: dffffc0000000000 R11: fffffbfff1ef9aef R12: dffffc0000000000
[  292.186185][    C0] R13: dffffc0000000000 R14: ffffffff999c4ee8 R15: 1ffff92000827f80
[  292.194251][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.200645][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  292.206001][    C0]  ? __pfx_tcp_keepalive_timer+0x10/0x10
[  292.211696][    C0]  timer_init_key+0x41/0x2d0
[  292.216419][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  292.221773][    C0]  ? __pfx_tcp_keepalive_timer+0x10/0x10
[  292.227438][    C0]  ? __pfx_tcp_delack_timer+0x10/0x10
[  292.232873][    C0]  inet_csk_init_xmit_timers+0x47/0xf0
[  292.238383][    C0]  tcp_init_xmit_timers+0x2a/0x70
[  292.243484][    C0]  tcp_init_sock+0x74/0xa20
[  292.248044][    C0]  tcp_v6_init_sock+0x21/0xa0
[  292.252800][    C0]  inet6_create+0xef4/0x1260
[  292.257443][    C0]  __sock_create+0x4b3/0x9f0
[  292.262121][    C0]  __sys_socket+0xd7/0x1b0
[  292.266591][    C0]  __x64_sys_socket+0x7a/0x90
[  292.271362][    C0]  do_syscall_64+0xfa/0xfa0
[  292.275909][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.281314][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.287416][    C0]  ? clear_bhb_loop+0x60/0xb0
[  292.292165][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.298087][    C0] RIP: 0033:0x7fe1263915e7
[  292.302585][    C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.322286][    C0] RSP: 002b:00007ffec0f2df58 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[  292.330740][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe1263915e7
[  292.338909][    C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a
[  292.346949][    C0] RBP: 00007ffec0f2e68c R08: 00007ffec0f2df7c R09: 0079746972756365
[  292.355024][    C0] R10: 00007ffec0f2dfe0 R11: 0000000000000206 R12: 00007fe1265b2ca0
[  292.363061][    C0] R13: 00000000000927c0 R14: 00000000000473a7 R15: 00007fe1265b4e60
[  292.371385][    C0]  </TASK>
[  292.374439][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  292.381787][    C0] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  292.391274][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  292.401356][    C0] Call Trace:
[  292.404657][    C0]  <IRQ>
[  292.407580][    C0]  dump_stack_lvl+0x99/0x250
[  292.412215][    C0]  ? __asan_memcpy+0x40/0x70
[  292.416840][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.422075][    C0]  ? __pfx__printk+0x10/0x10
[  292.426720][    C0]  vpanic+0x237/0x6d0
[  292.430749][    C0]  ? __pfx_vpanic+0x10/0x10
[  292.435305][    C0]  panic+0xb9/0xc0
[  292.439062][    C0]  ? __pfx_panic+0x10/0x10
[  292.443536][    C0]  __warn+0x31b/0x4b0
[  292.447559][    C0]  ? debug_print_object+0x16b/0x1e0
[  292.452806][    C0]  ? debug_print_object+0x16b/0x1e0
[  292.458038][    C0]  report_bug+0x2be/0x4f0
[  292.462406][    C0]  ? debug_print_object+0x16b/0x1e0
[  292.467647][    C0]  ? debug_print_object+0x16b/0x1e0
[  292.472882][    C0]  ? debug_print_object+0x16d/0x1e0
[  292.478119][    C0]  handle_bug+0x84/0x160
[  292.482386][    C0]  exc_invalid_op+0x1a/0x50
[  292.486917][    C0]  asm_exc_invalid_op+0x1a/0x20
[  292.491806][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  292.497661][    C0] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 32 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  292.517304][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296
[  292.523424][    C0] RAX: fc042933d1396400 RBX: dffffc0000000000 RCX: ffff88802a5a8000
[  292.531531][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  292.539548][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  292.547569][    C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a3925a0
[  292.555676][    C0] R13: ffffffff8bbf1100 R14: ffff88805476b490 R15: ffffffff8b6cf600
[  292.563677][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  292.569351][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  292.574929][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  292.580228][    C0]  kfree+0x115/0x6d0
[  292.584150][    C0]  rose_timer_expiry+0x4cb/0x600
[  292.589115][    C0]  ? call_timer_fn+0x155/0x5f0
[  292.593919][    C0]  call_timer_fn+0x17e/0x5f0
[  292.598518][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  292.603991][    C0]  ? call_timer_fn+0xbe/0x5f0
[  292.608681][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  292.613836][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.619050][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.624260][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  292.629739][    C0]  __run_timer_base+0x61a/0x860
[  292.634630][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  292.640024][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  292.646302][    C0]  run_timer_softirq+0xb7/0x180
[  292.651174][    C0]  handle_softirqs+0x286/0x870
[  292.655956][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  292.660739][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  292.666043][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  292.671266][    C0]  __irq_exit_rcu+0xca/0x1f0
[  292.675888][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  292.681134][    C0]  irq_exit_rcu+0x9/0x30
[  292.685416][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  292.691074][    C0]  </IRQ>
[  292.694012][    C0]  <TASK>
[  292.697003][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.702996][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  292.709610][    C0] Code: 74 05 e8 5b dc 7e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 53 0a 47 f6 65 8b 05 dc 48 25 07 85 c0 74 40 48 c7 04 24 0e 36
[  292.729239][    C0] RSP: 0018:ffffc9000413fc00 EFLAGS: 00000206
[  292.735356][    C0] RAX: fc042933d1396400 RBX: 0000000000000a02 RCX: fc042933d1396400
[  292.743470][    C0] RDX: 0000000000000000 RSI: ffffffff8d70da3a RDI: 0000000000000001
[  292.751467][    C0] RBP: ffffc9000413fc88 R08: ffffffff8f7cd777 R09: 1ffffffff1ef9aee
[  292.759466][    C0] R10: dffffc0000000000 R11: fffffbfff1ef9aef R12: dffffc0000000000
[  292.767479][    C0] R13: dffffc0000000000 R14: ffffffff999c4ee8 R15: 1ffff92000827f80
[  292.775484][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.781846][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  292.787147][    C0]  ? __pfx_tcp_keepalive_timer+0x10/0x10
[  292.792792][    C0]  timer_init_key+0x41/0x2d0
[  292.797408][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  292.802706][    C0]  ? __pfx_tcp_keepalive_timer+0x10/0x10
[  292.808387][    C0]  ? __pfx_tcp_delack_timer+0x10/0x10
[  292.813793][    C0]  inet_csk_init_xmit_timers+0x47/0xf0
[  292.819282][    C0]  tcp_init_xmit_timers+0x2a/0x70
[  292.824343][    C0]  tcp_init_sock+0x74/0xa20
[  292.828875][    C0]  tcp_v6_init_sock+0x21/0xa0
[  292.833580][    C0]  inet6_create+0xef4/0x1260
[  292.838198][    C0]  __sock_create+0x4b3/0x9f0
[  292.842817][    C0]  __sys_socket+0xd7/0x1b0
[  292.847260][    C0]  __x64_sys_socket+0x7a/0x90
[  292.851962][    C0]  do_syscall_64+0xfa/0xfa0
[  292.856486][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.861700][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.867781][    C0]  ? clear_bhb_loop+0x60/0xb0
[  292.872474][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.878377][    C0] RIP: 0033:0x7fe1263915e7
[  292.882818][    C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.902442][    C0] RSP: 002b:00007ffec0f2df58 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[  292.910899][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe1263915e7
[  292.918911][    C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a
[  292.926892][    C0] RBP: 00007ffec0f2e68c R08: 00007ffec0f2df7c R09: 0079746972756365
[  292.934877][    C0] R10: 00007ffec0f2dfe0 R11: 0000000000000206 R12: 00007fe1265b2ca0
[  292.942862][    C0] R13: 00000000000927c0 R14: 00000000000473a7 R15: 00007fe1265b4e60
[  292.950874][    C0]  </TASK>
[  292.954262][    C0] Kernel Offset: disabled
[  292.958596][    C0] Rebooting in 86400 seconds..