last executing test programs:

4.941666561s ago: executing program 0 (id=4724):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010029bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="020000e8"], 0x1c}}, 0x2000c000)
unshare(0x6020480) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0})
nanosleep(&(0x7f00000002c0)={r2, r3+10000000}, 0x0) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x9, 0x3}, {0x5, 0x2, 0x3}, {0x4, 0x78}, {0xc, 0xa, 0xd302}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) (rerun: 32)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), 0x4) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) (async, rerun: 32)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8) (rerun: 32)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000003c0))
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x54, 0x29, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0xffe0, 0x9}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xba}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0xfe, 0x8}}, @TCA_RATE={0x6, 0x5, {0x1d, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4040}, 0x4080) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32)
read(r7, &(0x7f00000044c0)=""/22, 0x16) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r6}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000003791069000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

4.78931802s ago: executing program 0 (id=4727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r1, &(0x7f0000000000)=""/23, 0x17)
read(r1, 0x0, 0x0)
write$ppp(r1, &(0x7f0000000200)="bc72", 0x2)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRESOCT=r0, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000044)

3.712153557s ago: executing program 0 (id=4738):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', 0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0)
socket(0x15, 0x5, 0x0)
nanosleep(0x0, 0x0)

3.611712589s ago: executing program 2 (id=4741):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, &(0x7f0000000000)="b214d63da80bcefead6214dd162bbd", 0xf, 0x1, &(0x7f0000000040)={0xa, 0x0, 0xe0e5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet(0x2, 0x5, 0x7fff)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x10d, 0x0, 0x0, 0x0, 0x273b, 0x0, 0xfffffffffffffe00, 0x3f14, 0xb44b})
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100))
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000280)={0x3, @null, r5})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x3e, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0, <r11=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pi6   \x00'}, 0x20)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0, <r13=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x2, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x1, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0x15}, @jmp={0x5, 0x0, 0xa, 0xa, 0x5, 0x50, 0x10}], &(0x7f0000000300)='syzkaller\x00', 0x81, 0x1a, &(0x7f0000000340)=""/26, 0x41100, 0x1d, '\x00', r6, @fallback=0x34, r7, 0x8, &(0x7f0000000480)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x5, 0x800, 0x2}, 0x10, r8, r9, 0x2, &(0x7f0000000ac0)=[r10, r11, r12, r13], &(0x7f0000000b00)=[{0x2, 0x3, 0xe, 0x3}, {0x0, 0x1, 0x2, 0x9}]}, 0x94)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}}}, 0x3a)
r14 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6_vti0\x00', r6, 0x29, 0x1, 0x7, 0x890, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x1, 0x700, 0x3, 0xaa0}})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x7fff, <r15=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d40)=r15, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan1\x00'})
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000dc0)={'bond_slave_1\x00', {0x2, 0x0, @loopback}})
r16 = socket$rds(0x15, 0x5, 0x0)
close(r16)

3.300190001s ago: executing program 2 (id=4743):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@fwd={0xf}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0xfffffffb, [{0x9, 0x5, 0x7}, {0x10, 0x5, 0x101}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x61]}}, &(0x7f0000000280)=""/128, 0x4e, 0x80, 0x1, 0x40}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x1, '\x00', r0, r1, 0x1, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@fwd={0xf}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0xfffffffb, [{0x9, 0x5, 0x7}, {0x10, 0x5, 0x101}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x61]}}, &(0x7f0000000280)=""/128, 0x4e, 0x80, 0x1, 0x40}, 0x28) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x1, '\x00', r0, r1, 0x1, 0x5, 0x3}, 0x50) (async)

3.26347381s ago: executing program 3 (id=4744):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r3) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x14, &(0x7f00000003c0)=@raw=[@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x4}, 0x18) (async)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) (async)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
sendmmsg$inet_sctp(r7, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000006000802ff00000008000000", @ANYRES32], 0x20, 0x4c004}], 0x1, 0xc811)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000f80)={0x0, 0x1}, 0x0) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000600)={@multicast, @random="73fd8541f8e6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3e, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x6, '\x00', {0x0, 0x6, "fd7609", 0x8, 0x32, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "37ff49a30a299d88e9d04bd0f569"}}}}}}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c010000"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) (async)
accept4(r8, 0x0, 0x0, 0x800)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000100)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe4, 0x4004, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0xa003, 0x6558, 0xd0, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x0, @val=0x80}, "28e6fa961a13c76db4dc6a8cc63c9811dbd8488e8479132a1c225033c3649bf245df42bb226f40b84c7ceed30169cc34c1bef089434435bb3fda62df889f123b199c99446e888d4631994d388c772fea694e5c2376b4f32d1f64ef69bea98bda6fd298a33366baee222313175ca7b531665dba91b23facd5e30f2abe4a436aa1d984e08801c32dc1ca1e97cb9f7f1c6eeaf94e1d5789331ef52c8ae3750d3246b9ba0a28827e8624e5953216bca5a14a860acd4d8adcfe63ec65eb18fb40931f"}}}}}}}, 0xfa)

3.202181855s ago: executing program 2 (id=4745):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20)
r2 = socket(0x10, 0x3, 0x5de)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
sendto$inet6(r6, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x263, &(0x7f0000000840)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @gre={{0x1c, 0x4, 0x3, 0x1, 0x251, 0x67, 0x0, 0x63, 0x2f, 0x0, @loopback, @private=0xa010100, {[@timestamp={0x44, 0x10, 0x15, 0x0, 0x6, [0x3, 0x5, 0xfffffffa]}, @generic={0x86, 0x8, "5b30972b6b72"}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x7, 0x9a, [@local]}, @cipso={0x86, 0x37, 0x0, [{0x1, 0xb, "9a1b9d8400ead5bb3e"}, {0x2, 0x11, "4684e516ae43c4ad8eca33cc5de26b"}, {0x0, 0x2}, {0x2, 0x4, 'rt'}, {0xb, 0xf, "1895532c6575f4097fba35b2ba"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1, 0x0, [0xfc00, 0x1], "e9"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1], "a91badcc60817df7ebf96d4b29d2650d720fbfceac64adf492506fe2ae18c3f63724b507cb75339987c4d2cfd4f598fbffbb43595596f8194bfab66493a412013a10b6ebe981a8b5817dea59d0fab2059eac5d99be5d5daf0b006999a02cfc777ce09ff52286630351db965b68ada1fb56e5f02fe1bc2c04d659b4ce2a44a20255d158c87aaf6f1f77eb6db16dc1d569d7854e5c22e5f6e0eaa2749d348847e73add6816e8ba4a3a26d8f42649021e28d765faf44b1feb92f6aa5d7eceeb2e855ea955fe3d5b35ef56cb864ee0ca9008b1c1518a3e8565724351b4c6066819d0f6361a586bdb"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xc], "c8cf811969b1a4c1f1f2a18fbe518e2510ee2957307b1ab00cec6bbf556f89e8f7ec6d5eabf758b0fb2e82951d7599d27cf91fe298684bb533dcec62817d9c9c8483d199aeb150c080c345c77eb840bfcea62bd74b88d97ef3a2a24baa944f0dfc0f5352d48379180096"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x10, 0x2, 0x0, 0x3, 0x2, 0x2}, 0x1, {0x101}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x6, 0x0, 0x1, 0x1, 0x7, 0x47}, 0x2, {0xaa, 0x8, 0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "f05a2fc2084b8c4baf1c2ddbc77a56d1908bbf6443d8d6e6052337cab15fc1da56a6a2cea6ba631b8ecc2485996b429e2559e3d9900517798dacc7c6df72f0a9e24951f1"}}}}}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r7})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xabc58ca7eb7d5283}, {0x9, 0xf}, {0x4}}}, 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000280)={0x8, [0x1, 0xf37, 0xa16, 0x2, 0x9, 0x584, 0x6, 0xff]}, &(0x7f00000002c0)=0x14)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$packet(0x11, 0x2, 0x300)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
socket$inet(0x2, 0x800, 0x7)
getsockname$ax25(r10, &(0x7f0000000480)={{0x3, @null}, [@null, @null, @bcast, @netrom, @rose, @default, @netrom, @bcast]}, &(0x7f0000000300)=0x48)

2.71953066s ago: executing program 3 (id=4747):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4018, 0x3, 0x240, 0xd0, 0x0, 0x148, 0x0, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x6c, 0x2, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000000c0), 0x10)
sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
recvfrom$l2tp(r2, 0x0, 0x0, 0x40012122, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0], 0x48)

2.651991459s ago: executing program 2 (id=4748):
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

2.600208403s ago: executing program 0 (id=4749):
ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80})
r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x1000)
r1 = socket$isdn(0x22, 0x3, 0x30)
recvfrom(r1, &(0x7f0000000140)=""/111, 0x6f, 0x1, &(0x7f00000001c0)=@llc={0x1a, 0x322, 0x8, 0x52, 0x6, 0x23, @multicast}, 0x80)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001500)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)='%pK    \x00'}, 0x20)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001540)={&(0x7f0000000240)="fff2c0f4468382875ea94b9c77ffd0653b488cf2ae4352f81fa3e1eb79bcab22adaec8e516e7894dd34bb3759352fa10129cc901f01b49a66589e7686f75d6e55a7d886c8096b525c920f98a01d59d24bd8a6ddaff0a1a2a3ea363105b3de27fd39f7285aaf1eeb416b44a21c0937ee2061cae504bc648f58d0e55156102330375de5d067cf284a58c799af91370ad9f676b58abf1ea587cc666a874fe04c9665a46c2579874692a91684bb7", &(0x7f0000000300)=""/117, &(0x7f0000000380)="ffe2135dba8b2ec39b836ccd3ade5d1bc242f76cb2181bd5a6eed9074302d54446b598b8e68a98e975a005ea299b257803b00ddfff11acb00e0c16f56d18312f41bf3742acf891b47db59ffe959bf1bfcec20f670df0ebdf56aed6a19e6fb22fceb0826a7a761195c47428105b015c2fa1a2260d01bb30e849c309306dc60e9b4285023c2bf23fcd97a9cec7df9c4a17bc0c8837499d79ef856a8ec284615ff427ec6b16de46dcbfb522385c184cf04157a5b316143e63b2af3b1b56ab13fcb6059d3671297117a6545dd305fc697a03476c3ea420c314abda48d1bbcb2b3eab83", &(0x7f0000000480)="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", 0x100, r2, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000015c0)={0x42, 0x1, 0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000001600)={0x846c}, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001640)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000001740)=0xe8)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000017c0)={0x2, &(0x7f0000001780)=[{0x2, 0x5, 0x3, 0x38}, {0x3f, 0x4, 0xc1}]}, 0x10)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001800)={{}, 0x5, 0x5, 0x3})
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = epoll_create1(0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001840)=@req={0x7, 0xffff, 0x1e714155, 0x3}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000001880)=0x5, 0x4)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f00000018c0)=0x5, 0x4)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001980)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x54, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffd}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffc000}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8004040)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000001ac0)=0x4, 0x4)
r10 = accept4$bt_l2cap(r3, &(0x7f0000001b00), &(0x7f0000001b40)=0xe, 0x80000)
connect$bt_l2cap(r10, &(0x7f0000001b80)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe)
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000001bc0)=0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x1e182, 0x0)

2.473322503s ago: executing program 2 (id=4751):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
pipe(&(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x62040200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.308330732s ago: executing program 0 (id=4753):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001580)="a50a2a1460a86f93b7050a0111d0e1a5ae8923cfd988b99eb33f2bc34dad2930003d5c54a021191b266734c9d373dd1606af981caf656d8d7f937a01b20443fde4452131b0341945e3556ff5bd9922d27b942bc7d0a3efdc940b4f0a155d2ba615e7609b0c3001afff6061ed314fb1045f26feec609886362bcd650fd00a4d6588a8e3a29ec33b19ad3c670e31acf8f12fdf2f0e057369d9ff95ea767d5685694fc9a8448d12dfbd5b3e", 0xaa}, {&(0x7f0000003100)="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", 0x4cf}], 0x2}, 0x8940)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba9", 0xc}], 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x1, 0x4, 0x3}}, 0x26)

2.175093905s ago: executing program 0 (id=4754):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601023b85c8ce72b99a95022b7f9977cfaafd00000000000000000000000014000780080012400006000008001340ffffff7f14000300686173683a69702c706f72742c6970000500050d0a000000050004000000000009000200"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)

1.739756476s ago: executing program 3 (id=4757):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async, rerun: 64)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x1b, 0x8}, 0xc) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000280)}, 0x20) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x639, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x7, 0xa, 0x6, 0xfffffffffffffff4, 0xb6ec6e350d51dccc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd4}, @ldst={0x3, 0x3, 0x0, 0x4, 0x5, 0x1, 0xfffffffffffffffc}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94)

1.650223803s ago: executing program 1 (id=4758):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$l2tp(0x0, r0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010ed88129f157ec400370400000000000000000000008048632325165eea3dc8b8e260b3c20fff27d379389ca1ef38ca6dd88a7afb0c347b517733c6", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c00028008000300ffffffff080002007f0000010600080003000000"], 0x48}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

1.431876769s ago: executing program 4 (id=4760):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000017c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0x8, 0x6, 0x0, 0x8, 0x9, 0xa}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfb49, 0x8, 0x2, 0x400, 0x3, 0xb88200000000}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xf000000000000000, 0x4, 0x5, 0x7, 0x2, 0x100}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x46dd387626ccfe2}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x90}, 0x48004)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="f5d5e2f44e9e7888f1178ae73a6fb1aaba28812e0f4d4303933391643d7a5dda4788d9d0804041ffe82059294788955b951519cb197ae4fee00368537bc29e402ee503fa38dc0d4452236112984416cd208d37e514", 0x55}, {&(0x7f00000000c0)="7883", 0x2}, {&(0x7f0000000100)="794e86f57254dafb42c4340542312ff4cfc2e345cb90e8fd94b554d44ec7ac1c69939e1b3d35e2c004a368844c324ba105abc2b28406d97f458a2fe2b0ac4cd78a071ba18fde99c01822dc984aff97868d6e0d9db60de1815d93c024c198c5a7f7841f7cc2a34aa15532af1e58d0e1eb2afbc828569b10c045e2ce66e69928a8060c7019746f0af5347e", 0x8a}, {&(0x7f00000001c0)="beab05b3e09f2c1a508be3a27ac96848e76607db7a775bd89c42aba9fb009e004c462b78a7a07c8542f304b42efac431e656d3c5c1f80d9f", 0x38}, {&(0x7f0000000200)="0d681e80e6659d1b2ae72774b31ac62d578fc1177e3fd60d4d3f74ef78a23d1ab000240c5dd8941443d9bb22e6dd632fc666eddadc2f541699d0768fc1838fbccd95cbc58b280725b86b3b90e52fcc097267bdfb79183216bc4e1e2ef2c068431fc551fc3de78dcfd1aaa411727433f402d77dc3bd7592d978ba2094c1773904a165327bd424a38cb90ae5cda318bccbf69445e56f789fdae21f1981", 0x9c}], 0x5, &(0x7f0000000800)=[@ip_retopts={{0x124, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x0, [{@remote, 0x2}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x8d, 0x1, 0x3, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0x6}, {@multicast1, 0x9}, {@loopback, 0x4}, {@broadcast, 0x4}]}, @cipso={0x86, 0x54, 0x0, [{0x1, 0x10, "47d1fc29656a81be1c0d004ba9ee"}, {0x6, 0x10, "9cc22b498e64626e50319a82fb3a"}, {0x6, 0xf, "da2c02a74f580564c36ac3c743"}, {0x0, 0x2}, {0x2, 0x5, "8293b2"}, {0x7, 0x4, "50dd"}, {0x0, 0x8, "3448bddae228"}, {0x6, 0x6, "6e11d88a"}, {0x5, 0x6, "a124cf0e"}]}, @generic={0x89, 0x11, "9cf2a3ddb6bd60af1ddb3f0058217e"}, @timestamp_addr={0x44, 0x34, 0xca, 0x1, 0x7, [{@local, 0x1}, {@broadcast, 0x3ff}, {@broadcast, 0x480000}, {@empty, 0x1000}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @rr={0x7, 0x2b, 0xab, [@local, @private=0xa010100, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @rand_addr=0x64010101, @remote]}]}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xf0, 0x1, 0xa, [{@multicast2, 0x19}, {@multicast2, 0x9f96}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x8}]}, @rr={0x7, 0x17, 0x42, [@local, @broadcast, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x6, "9c0c8ace"}, @rr={0x7, 0x1f, 0x3d, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x21}]}, @lsrr={0x83, 0xb, 0xaa, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast]}, @end, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x0, 0x10, "b43236884634fb2fc4d5f7414100"}, {0x6, 0x2}, {0x0, 0x2}, {0x947e56ce1496d79d, 0x10, "439006604c13841c5ba8372d8b4b"}, {0x7, 0x10, "1e3e4b222aafdcf6d689e2cf35fe"}, {0x6, 0xc, "bcfb61e5c24e23656290"}]}, @end]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0xb, [0x3, 0x5]}, @ssrr={0x89, 0x17, 0x8, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @remote]}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @generic={0x44, 0x6, "c7753448"}, @ssrr={0x89, 0x7, 0x2f, [@rand_addr=0x64010102]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x290}}, {{&(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cf273d5a28083ef7ba389a937a43c2cef586c83b3caeea3306e78dc537632a5abcbe5a444807fb3adb399b37fbd3f9b72b7ab6fe046141a2f03e15805d536be9388d01defffa0acb806de006c3347db1e858cb3d9bc63e1cefccb1a53ba22bf97fb6bef30138fc6db0ef6897af736e2a8d77ea80f3b9220e1c407179", 0x7c}, {&(0x7f0000000400)}, {&(0x7f0000000440)="b745879c682b945d340a3aaa3f72b84a381e533db3c75f600dcc78e4a0ee81d1fb38f967384cbc52b8551ff40779d93663b889494b59c6ea564dee1c3ea589de84a47a77a92f3d2a4cef88c0910595143beb7281d79a78098c3d0bfc07cb5d86ff86a99bb95c07d1701174fd5e5ca66ba00e6ca081bf0232ae4a19fe8afa00f4fd142923608c284f67d1455e", 0x8c}, {&(0x7f0000000540)="9f69a3fefd0a534b8d317974abe5d658e241606bc26f", 0x16}, {&(0x7f0000000580)="83", 0x1}, {&(0x7f00000005c0)="827c6a22b367d4b1b102a0ba6a7e3d98df838648a667abfd8148fec7c4ed0b40a096ed6687a88428233d8be8e67c793a249fb7b9d1b2e4432d14b9212714fe6d6094635e7c445b8a4ecd5237def01e17c1943d2dc0a0a9b1751866c2bb9cc7a09528f0e13c423e7a93c19eed116640c2f1736ee70f0e15957eb4d179", 0x7c}, {&(0x7f0000000640)="93ac994bc5b658f567bf063740029b98affb67c5ecbb7f14328079e412ca77203ceda7a1a71ccfc6a426862513b42ebfbdbea94135e05832f03ed2fb5dcbdb60705f98f7921df4beb0ed18fc0ef5a49d103cb07ee5", 0x55}, {&(0x7f00000006c0)="384b76d155313f7bd17409f12a296c2cbcfdad1c515b964abe324320632b4dde09f9c29bb4da3a8597ffac4c8c2a66cfa44dff17821e900a4cd5e89f77b10cdee6da771706e5444f0a42ec94f3fd90b31a22ebddc000b916c7bc6fbd2bc0afb0c220de76257b60c03c091a2580f40e60cf7734fc46e65f7728c81d52bea2c44b56c42a06ed6fd9c317ceed0ff42cc401ea5466577c4318ef3389cdb5f2c03c3d4846132e7ff3d59bbe73dacc3924", 0xae}], 0x8, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}}, {{&(0x7f0000000bc0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000c00)="272a1fbc533359eda46c2fd0bae35a1eeed9fe3076f479533495e6b79d33092a44c0015fe069f2ca175cf7fda96ab5631498a58a16e7e19df514fa91116027a31f5bb976fee775cea3e3d6ec3ad86940e457dbc3c8585c4e9dceb5a372cc28f2e6378d625d334b13d401890155d18893938e68a97c543f851dad60a5dcaac651fe42d90543e0910827b313", 0x8b}, {&(0x7f0000001880)="459146178f53d30f27cebfadba156b6ca89ef00ca51262fc67e05fd0cf0bd6357f614cdbfaa5333f06257676fd5964e4716bad72a39b5435b55cd7c28232522d1b694f598fca76343d9a44646186d2fb14fc6d0fc05d2a939eeb09ef02686b8fa7971ca7c015f08acd4e1442dfbf26a7d490f5c8d19b17b6a0501660af4fa65f75f253c7bf47ac35709c2b1efff06fa8f5c05eb0cb729e5e048869ca149a891632c67fd76d9baba61f4bc07e1bfe34e96c51fcc3930d4f03a361b128957476232a9fc35b496118a5044595480a5d114e8c98ffa1168504fd38b4818e0d889fd097045357972559ef5040d284eea1fd63c62c31a4ca192761c00b3456f8d67731db06cdcfb7e3f76d0afd35e4b1c1c29c96dcdb044ad273373a74adc8a77db12046e224870c525eef26cdb0041ecf235854106c98b1e245aaf013045d5075716bc9b5bbb7b48f2f4833450ff2e56e10122ed47f1615ff88a1f5ec4a06853ffcf77775bca919da83ab88ad4cd8663664b276060e4570de68af2c929a6b0609c61416ae530d97beaa0ce3655101b415a622a28ee286518dfd9ef6acd97365131fee9cca5c1d24a53fd782b05cbd7c821b0c346c27006599ecb55fd8dcb2528bf4d4c11e61039c1dec0070529be868322eccaf52cae2189d947193a8b1c518c4406b6c7b71fed18d7a7e516d4a6846aabba8fbdbc454b6778f4cba689cc981980cb3c7dac5d72ee10109ffb6202fe809379ed4fb628746b5cb6c3cade10bd0eb9a2bdd7a33b6c8132ad086d843636c1a49d9122d1ab1e96985aa02face390573a1abece79ed4422d36852f0ec064022c1f37bcc8f795bdf770c1505bf9239830a956a475ec0e6ae90faf70b49a051cf0aba596678261bc7bd7ea8be87e1ce43c6be314c3e208eaa31e6ed5a30898c56bee3780c320f7a9ecf45f68bb27d4340743c28cf1e77150c7c23a383a113af9370e34ea09da1d7a4f39dec38c9f5f25e811c2a35114e7155623b903741abc727933c964b7e7329eb4d38d5087b34a370f91a4bf02198929c4d3040dbec7b1b6876d362ccb2c3d716feb7f06ba375e03cfc0ed6f7ab331f0611eaf977ae7b7c7b6817804c49e59e57ee4a46bb1deb6a35e2c623e9857abe85f5bcfb2d1f6eb68e23a27c3dd1c493ccd116385086750eb0beae0dd6584b1d64258d6ead47fbddb03d767d71e8b69ee698ff7906464b83b7a5dfb3e8a98ae78b4657abf853faae55bcc3f327f7937e1de214a231e7d4182cd10f288baee8eb41b6afeb83bec9dec0795bff4805b94eb2f4d0e81d900580d36d6b7ec3b7bd587d93528a578ad0d42451a72960c08fd71d869b82783419679f62f86a9a6b3f4f8fefac18c0f640695899b88c9b19684c67d054f4b9edf20c5388e4978b8c57ff148c0b7f2a2896760de323432a1886a172763c9b1e6322dc4d576090089e851e2b1476d2f6377b3e01edbf55a967b19cadc167d87742d3943bc8a439765c73b76d27e55f6069947e8d22bdbb4087a6f497dd0ee7864960fb0a94ea7a235dcedd6b64b62d0cf70adfaa7b4e5bca2ba3a29658e133e869e0155e7b69f429df6ba4aef738eadb1934cc1721832f7a011de634421a128a09110967f87aaba6536424a0caea8236681e95bcba7231fa26cd8f739c56df98774f1118db382a792559ec222b47d1d413e03852d6e9380e3d139cdf79a86839f9b453deb9bbee7831b72e78087da6dc1885d87259bc5ed2b086f6fcfe985a90a2c4842016daf4babba8127e4ecdaf35436a58cb3700e0d98af6e6be6a829721a76bd6fa4a0bf261a13d932da619c03c2212c64d2096012dba663a11c900af9cfc39c9cf2e07e476e7e916fee961af2a1309fb37685eefa7e9865ef4a5fcfdca950d1567976eaddce92a4341c81deac40154d971ddf7b72cf724d5dc235521c082e737dbb94236070d3aa9b4814268e263e65b7d760bb63e1f6db392e94de408c6737abeed557ca4f4cf93ebe13d4721e8cfaf2d0a74a87d6af720f5b6f33b08ab66cf446ac8588a354421a5010af4178444ff5e8f58ba133fc4307511945e181f97a7de329ac1d18924aee3272590cc24980a10a2bcd3e61bafd5008cbabf8ea030a2b98172480dcbabd8adacda2c195a81850d8c1622fa740a5b175f36db4f3ad44db626b5c4a896e3648a00e4da11f27b9028a1637cb2e1885b19c92891f45599a229459b307c5cf9e619bdd1c1a5ed55826377aaa30def3450f753ee2b9d2c2f6d741bffda6c0fe8aadb00151716511b1b088aea98c6639aacb97e532c5df6dd9220d27e0045a2055ffa53065b694bc0e9259b1efbadb899e87b2c59b9abb5f8122421af7202a1c6cadb8848ae4d9d34f09d6ca895f45be95760eac8c38092e3da440774a8063c486295bbd40032138b113a92b682742de7ea8a9634f36e0799a36ab88382897ee46337be0c7f775cebbec9615204c2ff7f58e10d39bfa9dd2e00028b5e63274a30509ffb1ee1179d35ed5d2bb37c6ecb4b1f65047c7293587b9a6035a69f4844502c766f210aef3f7327249f6ec401bc23b2ee32792ec3c6565a59d49febbe7a1ff063976ff4aa7a3e0bfbe5947df10353f6e4b21872747a7185a94e6c656ea5f1b29fb503137ef774eaa4750cd96562f697055d9736ce72381555048d4c39f3f6b842d33e9f5e60bd2ac2c6e39bcabbdc1718fb02a347931580173d8f85d386df88c1dcdb83dcb5a13f7a8311576b98f0cb60c87603435ab29c980c1a757f2e9f3b1f8ed59cc4d56c55b84bcea19f3b122485faeda493195b56ca8cc8cd8faec7ac6bdcff275754631719767eb191e722775c75921535fac79aac2ede070992935b4a1e446b98798c5b1a7733cbce2e7b36079326178c8e6c8a4815743da1b2fcf010700893f6e857ca29c8efb9cf1c74d54e1abd491a86d74169bf61404d265b06ea13c335436bd0670d16b875f75e4f208d1e46ee94db2ce78d7e2da2399cdbf193cede31dcf5ff7f01cf6156d969011901c680425e43452b015a49b56058d770a7fa37a9393a1250b6c881403dc24f00716b6522e4e812e6605e076ff8b4a1f5d4facca8809d2588f7c1d08d6517d7c6eca00868affc13255b7a6d7d574433dbdb85ef8c646e65bb277294d0e919cb58a962bb238392679d28265c1443a49b1c878c4646e0540270e1e9787676198732c8c596aadd5f768738b8e8716368b1fdff9523efa27afb650744b4d252e2ea044612d1c50e8c53c0629f1f4a08168110f1eba3682b07af971d0ea7e85b999d77865563669b908bc282ad4b6928a37fbc835a9a34a60645a0a2cbc4343fcc8f4c0413c37d02717be2f25b79efc037beef1b9bff6e8bdac88a0330ea9c6d84bc40f60031618a48806fb4b85eb99b2995877832c17f71c17a69ca701e4b61940bc5a311190b7f8f946c3556a43fba4db2a2a7e1601fad12f40ecc04cbf8634cbb86a7fd6d31230212cec764273f3366ca778befb3776014d6b7aa5853c2e04deb493962bcae0e9c73cacfb4cedec4dfc21e2be7f2198440bd2a641bc216c02fbbb4178a2f8dda05e429ae616f5c0d55a2591fa44963508e8ee10a4a00441a643422c665a8773a6517836111ca33f0f21df9931bbfa69a7ad21c0c2130be751a3b170bdf803671766e7a23e5cc37972335f954757cbacafea79538f16eed505b2acc32156fd02f7d90e1cf80c2cdc6c317d95a588f6bf68ecc866a2627380e4b7db67241b37bfce855109f777e9c4f5a84dcb0fe943859e212aa3894622dc61ffed392357bec064902d4292bb06b71ccaaf5d976466c675ff69172eddcab9e097e4fb0fec004fac9fa718cf9a705954f3e4f45862f3a372271149e38bb00a8347fcc4e1c2201baa53fe811f41dc42bb7be8333611bf5e810fd3a8340f4fc9113e04389911ad70197272d887b7bbadb622590bed432b02aff8eebeb7efed473e51c8ef9180ce95f73b3ea6b67c767985e401fa8a5e21ce5a0104f05f5e2a34dcc5ac75c4e3f333902180a32583584531026b2934226709a83f74053ac5c42411e660ebeeb205a0a3185e05e2172c25602491a6155f5124b1ad2a836745325b0a0d75dec3c1d8de85a5f2f2579702f5e9f5c7f9215a9de839c7f722f476fda25ecd20b3214653fc8d5a4a557840d9ac135cc723e2c6a11e25be9b59ffd5fe0280108bf09acf358dde332f8fcecdd9ce34cf899dba06d5bdfb343fdb26796049a4190344f86f7b982b78235ccfce2562a3dcbf7ff0f8ba3c3251f0a58304f7f58378d61a45c6c9b757c8d32913780af4a43c69824e9a0b7f9f5a5f3224473def786f8dd9e1c1555b23dce564012be224b3e5ca86ebc9f6cfe362b5e32bf3ab7a5739779826543f0b9596aeff3d4c4b7831fda86af5e67c383f63c7c15f47f05b40ec43e4cc2dff0767ead95b1b3085997f37775a2f85e70d88912903a6e759d369a251f7019dd3f77529e43b9f0b85427de9a6a699bd2b7f8ba665b505627e53999a6585f225c2b54e206a357fb7ef6fd5bd62680aecf203e707adda6b6615df5ec020e979dfc899f834db93652cb26b33fda63079908f9e7aa69ad2f1424dbe861037adb9f2c6a3434d3e3752103e56f1f1e4132e3bf419ba561baca3f1ab86629115e2d7afb91fcd6093836089bb14bf32d66d7fab8d3eb7c1e00206dd32eb8c8937786f4ee9b81e47732ecc95a092e35c64e53cd564c7833526c8f0b135666cafa9ab490ce5a123e2e4d424073667f6406daea9e5b2c01a693ee30e8c155cb63535417ba35695aab13b4e781bf4a67d9af73127f72faf0055a8914a0977c4eb482609dafd1bdf48c638df801c60deb76a9ddb56226b2df9791a4499c94062072a5f6b8a8df1bba00c4a8b385ea8b05604c39aa75a2e6af4c226a4fa43dc015535a9511a108d951b460c8ff2978c7604f0673549ca04794622b743d89887bc78a9dc6af1516f14436d98f269f33736b34d0a590856daff6b3a7033ad50b29c2311a406598238817305ab94ed7d9ebfe32ab4f8a879cedfde68b992585f8c3c254a23703db5396b72e750afcfe0ac66ba1526f27e440ce5ed5e229aa82dde45abe6a15c54b76e9040a692f5971514d9422b2f9aa4044818f2138767d81cfdb9dfcc5bb275739d0a89ed92515b1981ba981fb884dc8722f5f009e46095b60a6d160a73d9f37c52528ce5b9aabd2d2d2aa9b5cf11d2d1cdfe41feaa64d32b97b7172e02c330962d01c3a7785791e4417160af94555106c5301f68cda9d228b9e99c9ae98fc8a7629554ce1e41d580dd5b38cc8fd9d6021e1627444ab3774b6af51855e868d31cc279a32b5e574e5eda05a61f5076281dd1fbbaa9229e55e847d0d019d2fc7ecb0c2820d56fefea9dbf885a867aaff34b85208921e017fa025cfd7f03142dd77112c713b9fb1fbe0acac039cc7b9c01cc53b3120db942f11c9e3277f1c3dfe545e74f332c9675aae684cf3790f9d09848d129e75c5335e6429c776a580d074a5d2416788696e8f19431bdebb53ada5e02b255cb69ef982f8d040d43d09828d2c53f413c6338b1f53648eec97aefafaf5844d688b2aea95bf29499da5361191db773f0e126d3cf6c09928ef884dcaca8e356476b018a87e4a641f8a795f110f8a79c70e25ab745c5c7cf368394cb1087f75662ebfd60684a4c44c9a45ed66ad7f1e166dd5f24cacfd7292260b6303f8a3e4abbf3be6ff7218fc0e22f068ada031ad9720704355bfcfd989dd594b47956ac3501eb467a6a33c69e14be04d794c080e1a06695b1d2af8779", 0x1000}, {&(0x7f0000000cc0)="395df8dcea59eacbfcd4b746c7436916376ded70e09720abff223529535180814acc36bf44538aa35f44c55d82a7e1dc965353d0ca442f93f040b385017fa11f50b680183d027e3119ef477dd057080e267790976e253c1c18be78dbf4bf236ac3176cdfaa2d9f5ffde1ded47cf3d56bd744671ee8847c1aa845bf70ccd7c40aee051e66cf6503688eacec69c3725a5337511f45eddf35fd53e6a06561da18601acd971a9d8c7ac6ba4dfbd034e641f76dbe8dd94ae348a4a71d967877ee7f7370a83ba4f0236587c4f8f6678f4150637961d5b7400d626c1600dc62002092c45bdbe1c94bf8da", 0xe7}, {&(0x7f0000000dc0)="84b6e63537bf24", 0x7}], 0x4, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x18}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000ec0)="4f0d7aba558e8448224b33924b6d62ba8c608abf6c9b41434a540b7cfa236b527ec99743e86528fa9249e185e5dc2e5b8c8a9fd8f153660faaeb4310828183b54d282793e051bc7a50d7fa123e0a2483aa2843e44a8132f55e09db170e6bb1e64aa85c542ede5936d4a7c762a3b383cf3c708c3847d0e0d0508e875be7362fd2113863427d48ec99517f401e27ae28952e9554d29bb94925968273a573a5abb088ed93d75bd9f0b377b08344befe6031a71d16d2afd395f64e03102a115241e08d8e60af94d14a3857300289f587c62d0f22442cff", 0xd5}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)="1e5ba8b683d453837d392d52921a73cf54ed69c903cfab74771b2e873072d39d30d9c736b8b8b4a079457468097b1800473cdd48e615da4cc576494cf44043daf3747b74ec95907a6331739f769e4751a31ad0b81fccd476cd44d3aca364c510809aa4e006f04c0b807957e918e15972bc706f68bd13450412ecca1cb84f081ec155a8215bf09898237c6b2d311894332e688eedfcb28168a1a7b881b87a9a054a0a858f1a228f", 0xa7}, {&(0x7f00000010c0)="7663d011041388db885580899251a044fb79058998fd11762fbc4e0cbe2cc3f7d7d561e40f5e6865960f6ec7f5cc3e04fb38ed945684ff37936a38750e3bff562ced3d3b0d73dc01d65d2fe5abf53014983ad8e4449ac5fb50dafe7f2f68320c35a963d3936009f87308d1516c6e2009b4f40ddf1643033a2e6137c25d", 0x7d}], 0x4, &(0x7f0000001180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x11}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x68}}, {{&(0x7f0000001200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001240)="0c474e7e22fd37d8518fdc9ced8db95814dd35f350d633577bf2beb4882aa2895e083241ff73ef4e2645b8ca8e005aa071123f03829a6a2fb762adbb7b5705bfbdae788523102e52d4e16bc64ac45006d0b214025c1fea2639e11ba4", 0x5c}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f00000012c0)="dd69bb2b5a6853a0ba70c3ff153b18fdb7246a6aa8fef414429367504763d4013590f26b4e587bf83d6f6c5bcd5b6936ae7b85dec52f2c4d766bdee215dde7684ff34340e36e67abd2c5ec756bc2", 0x4e}, {&(0x7f0000001340)="fea5a159ee38c123a9112b490abd4518e0c0ccb0c3a9ab52710302977731f8a5e4b79927c3ca75a23f33a73e8bfe7bca6f219674e61c4b4b7e21417d8357e40d787c14f90c6c3b20e9cdd2de41c729d2eabd2ba81e51a4269395d6c1ef16bc68010f2c0b3c10c23bd860330c81f25350407d0e3bee509aa38d462a562ddfa891c85c6f30daa279d9f26a6b8a153e003c13a5a445dbd8155fdb01e414f31578a7757f89a671a9368e97d6a1e0ce0a61e46ab6a89bc9cbe095e899321e20d2112067e7be049d487f68759428aac31763d318cfba36cbb7", 0xd6}], 0x4, &(0x7f0000001480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x1c, 0xef, 0x0, 0x4, [0x7, 0x0, 0x9, 0x5, 0x800, 0x3]}, @timestamp_addr={0x44, 0x34, 0xb5, 0x1, 0x1, [{@local, 0x6}, {@empty, 0x6}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x2000000}, {@private=0xa010101, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x8f, 0x1, 0x9, [{@rand_addr=0x64010100, 0x80000001}, {@empty, 0xa}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xa}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4d5}}], 0xb8}}], 0x5, 0x20000080)

1.372251286s ago: executing program 1 (id=4761):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1)
listen(r2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e66256182f8962b4186ecf904910b7807987ae26df14c93c4caeabf12e76ab000000009500003b65e1cd99ca0b9f5c66ee73182997f8b7975f05403b3b7d7b0606e02d"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e66256182f8962b4186ecf904910b7807987ae26df14c93c4caeabf12e76ab000000009500003b65e1cd99ca0b9f5c66ee73182997f8b7975f05403b3b7d7b0606e02d"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000d060101000000000000000076f2728aca55a9cda2000010000c000300686191681a69700005000500000005000a080000"], 0x30}}, 0x40000)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa)
r7 = socket$tipc(0x1e, 0x1, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, 0x0}, 0x0) (async)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4$tipc(r0, 0x0, 0x0, 0x800)
syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaabb8279278e3999dca7b17ec9aa23340009aabbbbbbbbac1414aa0587bd8d3effe68cae89903aa1dc2fd6631ae1c46292ef26892dac5811f440f8dbc7b1986f8d0ed05d1df629bd8c9ccdc8099744083952618f942f26be59100100dab4712fa886b02f17c32d9e3158045dfcf23bbdb314ffc8378bafc70f65b17572c4a69a0c21ea34a492acc325806bc11e307e4709c98d023bc1a5bd25da4dbb642c4e8d8d98b44b6aa4a5b726e1684478ac6fcf47b9750834b714190db39d370d09b8c653ff1922143ff65c4102861b26df87287bb98684f6091ba3f268f323765a05a8378d0f56fff58d86810e8e02175cd876c07affaf099e26df668e1d70cdc75088f3660d11c887bd7ff20678383ea0956d36c99ff2f9e4ada0508309600300cbf6fbf4600240573abadc75e7949b57bb319539fb190f890ed1ae1348c71d59cf4e3566d90ca4f4fe995aaf604cd324eaefdf381da7bc8e6a6bb68d1743c4adce86096d91c52b6968a83b69d73cdbc9060d83243e6c5b91a6d0ddc1909ab40cfb89f32846b90aea267a95420cafcdb40fa536b3bd7e2509c038b27ffaccf8341415f27f3420838dd4a612f2c5155b9e5a465737bd71d107da735513a210b346e4119fcf0919d20de4f09cc6313793f7104bd9983020b8920985cb0fd7811b1331be16815a074efe6b2e0f1b72710a6c04d93009e3a8a74eee2e01e6dedf72bdbab7d0a8531f93f51dac6bd17def913384b0"], 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

1.240655146s ago: executing program 3 (id=4762):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x14}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x48}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141604089f034d2f87e5440c05ab845013f2325f1a39018603038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xe4bc3d37e6ff9bb9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x47, &(0x7f00000001c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x11, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}, "e7"}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2b7f349226df8597880fc060b2dcb1062ba058e321d012ddbc1a50516b5f"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
socket(0x1, 0x803, 0x0)

848.246586ms ago: executing program 4 (id=4763):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)

847.505563ms ago: executing program 3 (id=4764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x11b22}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0xfffd, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x4, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)=""/209, &(0x7f00000001c0)=0xd1)

791.505334ms ago: executing program 4 (id=4765):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@union={0x0, 0x2, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x5}, {0x4, 0x2, 0xd61}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@union={0x0, 0x2, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x5}, {0x4, 0x2, 0xd61}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)

735.631741ms ago: executing program 1 (id=4766):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x9, 0x0, 0x1, 0x100, 0x4, 0x2930310})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)

641.479245ms ago: executing program 4 (id=4767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x2, 0x0, 0xfffffffc}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a0000008f37fa4170ce2e89a236065bdaa895216822627736ea0b2ff0d03ed428f59928748ec2325c8dc957cea0c160b8e28bdfc03c9ae84f776dbc978f", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000800350005000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x404c844)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x2, 0x0, 0xfffffffc}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a0000008f37fa4170ce2e89a236065bdaa895216822627736ea0b2ff0d03ed428f59928748ec2325c8dc957cea0c160b8e28bdfc03c9ae84f776dbc978f", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000800350005000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x404c844) (async)

605.723793ms ago: executing program 2 (id=4768):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109400"/32], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70}, 0x48)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80001, 0x0, 0x3, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000007000)=[{{&(0x7f0000000240)=@nl=@proc, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/139, 0x8b}, 0xfce}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f00000004c0)=""/174, 0xae}], 0x3, &(0x7f00000005c0)=""/116, 0x74}, 0x5}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000001a80)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/133, 0x85}, {&(0x7f0000001780)=""/240, 0xf0}, {&(0x7f0000001880)=""/193, 0xc1}, {&(0x7f0000001980)=""/226, 0xe2}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x6, &(0x7f0000003e00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/164, 0xa4}, {&(0x7f0000001c40)=""/98, 0x62}, {&(0x7f0000001cc0)=""/160, 0xa0}], 0x5, &(0x7f0000006e00)=""/135, 0x87}, 0xec}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000006ec0)=""/79, 0x4f}, {&(0x7f0000006f40)=""/5, 0x5}, {&(0x7f0000006f80)=""/31, 0x1f}], 0x3}, 0x9}], 0x5, 0x20, &(0x7f0000007140))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100010081120100060000009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000e00)=@newtaction={0xa8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x94, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xa8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0)

533.206399ms ago: executing program 1 (id=4769):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xac}, [@alu={0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27821e20}, 0x94)

412.216966ms ago: executing program 4 (id=4770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0500380001"], 0x24}, 0x1, 0x1000000}, 0x4004a040)

375.38243ms ago: executing program 1 (id=4771):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000000000007b8af8ff00000000b708000000003510ac3ff0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fffffbb7020000ffffff1f18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x62}, 0x94) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8092}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x90)

345.643342ms ago: executing program 4 (id=4772):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0xfff)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x34, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x7, 0xfffffffffffffffc, 0xc}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc0600f8ae754ae2"}, 0x1}}]}, 0x34}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}]}], {0x14}}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4010000002000007911b0000000000006000000000000009500000c00000000aabcef7cf62747a7496294e6eba3daa2dd93e555161bc958b9e20916ec5c66164e342b07788afa2180ebb38313ad41adf33ae948e8582e43de2b67fbdd472511c398e4f2c2f0d320854919c3c36538e9f26c14a0a605cd01e16a1a431fa8c131f6d949a64cc8bae4f360d95d01dd2357ed8019bb88d0cbd0e15a7710d94f942263e9fef1bdfae0b28c0f8c9c364ef9e28fe4062b79e03dfa51d2221581ff97ce514e4e10ef6fc43d7864ffbb3cffd2d418bc568f40fa3a8f1e58629229b6f78cd501046519c442b952af518f748a87299cd4be319f5ba6a589125155986d4d5faf1cdc165903241917b2d26acad4731e4370a8d259aac1ce94c9bc49dafa6aa39663d9d706f7a1b55727f294dbc9bdc35b2121d6c4bfc183306ce4c3a152"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r3, 0xfff) (async)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x34, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x7, 0xfffffffffffffffc, 0xc}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc0600f8ae754ae2"}, 0x1}}]}, 0x34}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}]}], {0x14}}, 0x54}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async)

292.228687ms ago: executing program 3 (id=4773):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x418, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0xd, 0x5}, {0x3, 0xe299751dd164ea88}}}, 0x24}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x5, 0x40000008, 0x8, 0x0, 0x2, 0x8000000000000, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={[0x101]}, 0x8}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b7401a0fa6b", @ANYRES32, @ANYBLOB="08001b00000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="f60c32504c18d1db514f7833ade7", 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) (async)
sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000009c0)="38683f336ec70a", 0x7}], 0x1000000000000118}}], 0x1, 0x0)

0s ago: executing program 1 (id=4774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r2)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = socket(0x1e, 0x805, 0x0)
connect$tipc(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x4}, 0xc)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x4, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7, 0x10000000}, 0x10)
socket$inet6(0xa, 0x3, 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x492, 0x0, 0x0, 0x0, 0xc9, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008c00)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="64010100ffffffff0100000001000000ffffffff260129f6e6424e2c3916f2796cd6b34741c83b6f8fbdd8dc6bbe5a3c92a6a3a2bb9c1997dce0ff2166f90feffae5ff9c60d6b89ef106fa5a5e100050ab34db72e202bdb3df5c83db09634758c349faf33ba5cee7caa3d122e256346af9c1c3dc6120c8d811785cc4508f31249470396f80a04f80b3f1b657d3c1dcc9a2af197b36e77a26f3c61d07b744867b2477ba6c98bcbcc0de576981fcbc7600000000000000000000b1bed500000000000000"], 0x14)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000005c0)={'pimreg0\x00', 0x2})

kernel console output (not intermixed with test programs):

.869298][T18559] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3391'.
[  479.168578][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  479.267344][T18582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.554875][T18591] FAULT_INJECTION: forcing a failure.
[  479.554875][T18591] name failslab, interval 1, probability 0, space 0, times 0
[  479.596569][T18591] CPU: 1 UID: 0 PID: 18591 Comm: syz.0.3401 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  479.596603][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  479.596616][T18591] Call Trace:
[  479.596625][T18591]  <TASK>
[  479.596633][T18591]  dump_stack_lvl+0x189/0x250
[  479.596659][T18591]  ? __pfx____ratelimit+0x10/0x10
[  479.596690][T18591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.596712][T18591]  ? __pfx__printk+0x10/0x10
[  479.596741][T18591]  ? __pfx___might_resched+0x10/0x10
[  479.596774][T18591]  ? fs_reclaim_acquire+0x7d/0x100
[  479.596802][T18591]  should_fail_ex+0x414/0x560
[  479.596842][T18591]  should_failslab+0xa8/0x100
[  479.596864][T18591]  __kmalloc_noprof+0xcb/0x4f0
[  479.596894][T18591]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  479.596927][T18591]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  479.596961][T18591]  genl_family_rcv_msg_doit+0xb8/0x300
[  479.596995][T18591]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  479.597023][T18591]  ? rcu_is_watching+0x15/0xb0
[  479.597060][T18591]  ? apparmor_capable+0x137/0x1b0
[  479.597083][T18591]  ? bpf_lsm_capable+0x9/0x20
[  479.597113][T18591]  ? security_capable+0x7e/0x2e0
[  479.597148][T18591]  genl_rcv_msg+0x60e/0x790
[  479.597180][T18591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.597203][T18591]  ? __pfx_ip_vs_genl_set_daemon+0x10/0x10
[  479.597256][T18591]  ? __asan_memcpy+0x40/0x70
[  479.597284][T18591]  ? __pfx_ref_tracker_free+0x10/0x10
[  479.597316][T18591]  netlink_rcv_skb+0x205/0x470
[  479.597346][T18591]  ? __lock_acquire+0xab9/0xd20
[  479.597377][T18591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.597404][T18591]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.597460][T18591]  ? down_read+0x1ad/0x2e0
[  479.597484][T18591]  genl_rcv+0x28/0x40
[  479.597506][T18591]  netlink_unicast+0x82c/0x9e0
[  479.597547][T18591]  ? __pfx_netlink_unicast+0x10/0x10
[  479.597579][T18591]  ? netlink_sendmsg+0x642/0xb30
[  479.597609][T18591]  ? skb_put+0x11b/0x210
[  479.597634][T18591]  netlink_sendmsg+0x805/0xb30
[  479.597679][T18591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.597716][T18591]  ? aa_sock_msg_perm+0x94/0x160
[  479.597747][T18591]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.597793][T18591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.597828][T18591]  __sock_sendmsg+0x219/0x270
[  479.597861][T18591]  ____sys_sendmsg+0x505/0x830
[  479.597891][T18591]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.597926][T18591]  ? import_iovec+0x74/0xa0
[  479.597962][T18591]  ___sys_sendmsg+0x21f/0x2a0
[  479.597988][T18591]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.598056][T18591]  ? __fget_files+0x2a/0x420
[  479.598076][T18591]  ? __fget_files+0x3a0/0x420
[  479.598110][T18591]  __x64_sys_sendmsg+0x19b/0x260
[  479.598137][T18591]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.598173][T18591]  ? __pfx_ksys_write+0x10/0x10
[  479.598202][T18591]  ? rcu_is_watching+0x15/0xb0
[  479.598247][T18591]  ? do_syscall_64+0xbe/0x3b0
[  479.598284][T18591]  do_syscall_64+0xfa/0x3b0
[  479.598314][T18591]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.598344][T18591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.598365][T18591]  ? clear_bhb_loop+0x60/0xb0
[  479.598393][T18591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.598413][T18591] RIP: 0033:0x7f409998eb69
[  479.598433][T18591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.598452][T18591] RSP: 002b:00007f409a811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.598482][T18591] RAX: ffffffffffffffda RBX: 00007f4099bb5fa0 RCX: 00007f409998eb69
[  479.598498][T18591] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008
[  479.598511][T18591] RBP: 00007f409a811090 R08: 0000000000000000 R09: 0000000000000000
[  479.598525][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.598538][T18591] R13: 0000000000000000 R14: 00007f4099bb5fa0 R15: 00007ffe1de0ae28
[  479.598575][T18591]  </TASK>
[  480.115940][T18608] netlink: 'syz.1.3404': attribute type 10 has an invalid length.
[  480.209036][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  480.238243][T18608] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  480.279261][T18620] netlink: 'syz.2.3409': attribute type 1 has an invalid length.
[  480.458824][T18620] 8021q: adding VLAN 0 to HW filter on device bond1
[  480.490948][T18623] 8021q: adding VLAN 0 to HW filter on device bond1
[  480.499390][T18623] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  480.512989][T18623] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  480.577364][T18634] netlink: 'syz.2.3409': attribute type 11 has an invalid length.
[  480.711020][T18625] veth3: entered promiscuous mode
[  480.724687][T18625] bond1: (slave veth3): Enslaving as an active interface with a down link
[  480.786320][T18626] erspan0: entered allmulticast mode
[  481.248788][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  481.253235][T18661] netlink: 'syz.2.3418': attribute type 21 has an invalid length.
[  481.296431][T18661] netlink: 'syz.2.3418': attribute type 1 has an invalid length.
[  481.304575][T18661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3418'.
[  481.439104][T18661] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3418'.
[  481.498009][T18669] FAULT_INJECTION: forcing a failure.
[  481.498009][T18669] name failslab, interval 1, probability 0, space 0, times 0
[  481.618702][T18669] CPU: 0 UID: 0 PID: 18669 Comm: syz.1.3421 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  481.618736][T18669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  481.618750][T18669] Call Trace:
[  481.618759][T18669]  <TASK>
[  481.618768][T18669]  dump_stack_lvl+0x189/0x250
[  481.618795][T18669]  ? __pfx____ratelimit+0x10/0x10
[  481.618827][T18669]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.618849][T18669]  ? __pfx__printk+0x10/0x10
[  481.618890][T18669]  ? __pfx___might_resched+0x10/0x10
[  481.618921][T18669]  ? fs_reclaim_acquire+0x7d/0x100
[  481.618949][T18669]  should_fail_ex+0x414/0x560
[  481.618987][T18669]  should_failslab+0xa8/0x100
[  481.619017][T18669]  __kmalloc_noprof+0xcb/0x4f0
[  481.619046][T18669]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  481.619076][T18669]  ? sock_kmalloc+0xd6/0x160
[  481.619104][T18669]  sock_kmalloc+0xd6/0x160
[  481.619129][T18669]  hash_recvmsg+0x1d4/0x840
[  481.619169][T18669]  ? __pfx_hash_recvmsg+0x10/0x10
[  481.619202][T18669]  sock_recvmsg_nosec+0x186/0x1c0
[  481.619236][T18669]  ____sys_recvmsg+0x3aa/0x460
[  481.619270][T18669]  ? __pfx_____sys_recvmsg+0x10/0x10
[  481.619311][T18669]  ? import_iovec+0x74/0xa0
[  481.619344][T18669]  ___sys_recvmsg+0x1b5/0x510
[  481.619374][T18669]  ? __pfx____sys_recvmsg+0x10/0x10
[  481.619433][T18669]  ? __might_fault+0xb0/0x130
[  481.619469][T18669]  do_recvmmsg+0x307/0x770
[  481.619503][T18669]  ? __pfx_do_recvmmsg+0x10/0x10
[  481.619540][T18669]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  481.619593][T18669]  __x64_sys_recvmmsg+0x190/0x240
[  481.619619][T18669]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  481.619640][T18669]  ? rcu_is_watching+0x15/0xb0
[  481.619679][T18669]  ? do_syscall_64+0xbe/0x3b0
[  481.619715][T18669]  do_syscall_64+0xfa/0x3b0
[  481.619743][T18669]  ? lockdep_hardirqs_on+0x9c/0x150
[  481.619773][T18669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.619794][T18669]  ? clear_bhb_loop+0x60/0xb0
[  481.619820][T18669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.619841][T18669] RIP: 0033:0x7fc00858eb69
[  481.619860][T18669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.619878][T18669] RSP: 002b:00007fc0093a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  481.619902][T18669] RAX: ffffffffffffffda RBX: 00007fc0087b5fa0 RCX: 00007fc00858eb69
[  481.619935][T18669] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004
[  481.619950][T18669] RBP: 00007fc0093a3090 R08: 0000000000000000 R09: 0000000000000000
[  481.619963][T18669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  481.619975][T18669] R13: 0000000000000000 R14: 00007fc0087b5fa0 R15: 00007ffca81eb008
[  481.620018][T18669]  </TASK>
[  481.954950][T18679] geneve2: entered promiscuous mode
[  482.288643][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  482.307354][T18704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3429'.
[  482.331613][T18696] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3428'.
[  482.443692][T18704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3429'.
[  482.554677][T18711] FAULT_INJECTION: forcing a failure.
[  482.554677][T18711] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.574574][T18711] CPU: 1 UID: 0 PID: 18711 Comm: syz.4.3434 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  482.574608][T18711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  482.574621][T18711] Call Trace:
[  482.574629][T18711]  <TASK>
[  482.574638][T18711]  dump_stack_lvl+0x189/0x250
[  482.574667][T18711]  ? __pfx____ratelimit+0x10/0x10
[  482.574698][T18711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  482.574722][T18711]  ? __pfx__printk+0x10/0x10
[  482.574750][T18711]  ? __might_fault+0xb0/0x130
[  482.574796][T18711]  should_fail_ex+0x414/0x560
[  482.574836][T18711]  _copy_from_user+0x2d/0xb0
[  482.574867][T18711]  ___sys_recvmsg+0x12e/0x510
[  482.574897][T18711]  ? __pfx____sys_recvmsg+0x10/0x10
[  482.574967][T18711]  ? __might_fault+0xb0/0x130
[  482.575003][T18711]  do_recvmmsg+0x307/0x770
[  482.575038][T18711]  ? __pfx_do_recvmmsg+0x10/0x10
[  482.575075][T18711]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  482.575119][T18711]  __x64_sys_recvmmsg+0x190/0x240
[  482.575141][T18711]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  482.575160][T18711]  ? rcu_is_watching+0x15/0xb0
[  482.575194][T18711]  ? do_syscall_64+0xbe/0x3b0
[  482.575227][T18711]  do_syscall_64+0xfa/0x3b0
[  482.575257][T18711]  ? lockdep_hardirqs_on+0x9c/0x150
[  482.575287][T18711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.575308][T18711]  ? clear_bhb_loop+0x60/0xb0
[  482.575335][T18711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.575355][T18711] RIP: 0033:0x7fb1f178eb69
[  482.575375][T18711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.575393][T18711] RSP: 002b:00007fb1f2614038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  482.575417][T18711] RAX: ffffffffffffffda RBX: 00007fb1f19b5fa0 RCX: 00007fb1f178eb69
[  482.575445][T18711] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004
[  482.575458][T18711] RBP: 00007fb1f2614090 R08: 0000000000000000 R09: 0000000000000000
[  482.575470][T18711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  482.575482][T18711] R13: 0000000000000000 R14: 00007fb1f19b5fa0 R15: 00007fffa2b025a8
[  482.575515][T18711]  </TASK>
[  482.608699][T18713] netlink: 'syz.1.3435': attribute type 10 has an invalid length.
[  482.723100][T18714] netlink: 'syz.2.3433': attribute type 11 has an invalid length.
[  482.854885][T18713] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  482.927617][T18715] bond0: (slave dummy0): Releasing backup interface
[  482.952591][T18715] bridge_slave_0: left allmulticast mode
[  482.960559][T18715] bridge_slave_0: left promiscuous mode
[  482.968202][T18715] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.989965][T18715] bridge_slave_1: left allmulticast mode
[  482.998833][T18715] bridge_slave_1: left promiscuous mode
[  483.034352][T18715] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.117593][T18715] bond0: (slave bond_slave_0): Releasing backup interface
[  483.201093][T18715] bond0: (slave bond_slave_1): Releasing backup interface
[  483.247085][T18715] team0: Port device team_slave_0 removed
[  483.261188][T18715] team0: Port device team_slave_1 removed
[  483.268320][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.280619][T18715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.300168][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.307864][T18715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.328016][T18715] bond0: (slave wlan1): Releasing backup interface
[  483.338553][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  483.366994][T18715] team0: Port device bridge1 removed
[  483.388987][T18724] IPv6: syztnl1: Disabled Multicast RS
[  483.490548][T18738] netdevsim netdevsim3: Direct firmware load for 2Q failed with error -2
[  483.526651][T18738] netdevsim netdevsim3: Falling back to sysfs fallback for: 2Q
[  484.370693][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  484.401973][T18761] syzkaller0: entered promiscuous mode
[  484.415360][T18761] syzkaller0: entered allmulticast mode
[  484.550459][T18769] __nla_validate_parse: 65 callbacks suppressed
[  484.550483][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'.
[  484.896814][T18758] veth0_to_bond: entered allmulticast mode
[  485.223855][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'.
[  485.409658][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  486.461202][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  486.812941][T18743] syzkaller0: entered promiscuous mode
[  486.828044][T18743] syzkaller0: entered allmulticast mode
[  486.879769][T18790] sctp: [Deprecated]: syz.3.3451 (pid 18790) Use of int in maxseg socket option.
[  486.879769][T18790] Use struct sctp_assoc_value instead
[  487.498571][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  488.477011][T18788] tipc: Started in network mode
[  488.488148][T18788] tipc: Node identity 8213bbe2bb25, cluster identity 4711
[  488.495639][T18788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.528577][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  488.718849][T18799] netlink: 'syz.1.3455': attribute type 1 has an invalid length.
[  488.884711][T18807] netlink: 'syz.1.3459': attribute type 1 has an invalid length.
[  489.013019][T18817] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3461'.
[  489.067679][T18813] bond2: (slave gretap1): making interface the new active one
[  489.116904][T18813] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  489.169583][T18817] 0·: renamed from hsr0 (while UP)
[  489.202710][T18817] 0·: entered allmulticast mode
[  489.217676][T18817] hsr_slave_0: entered allmulticast mode
[  489.238165][T18817] hsr_slave_1: entered allmulticast mode
[  489.252811][T18817] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  489.281807][T18825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3462'.
[  489.306944][T18813] ip6gre1: entered allmulticast mode
[  489.497193][T12946] tipc: Node number set to 959888354
[  489.544490][T18835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3465'.
[  489.568589][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  489.606105][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'.
[  489.889964][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'.
[  490.608640][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  490.912952][T18884] netlink: 'syz.4.3480': attribute type 30 has an invalid length.
[  490.993551][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'.
[  491.112663][T18896] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3485'.
[  491.325196][T18896] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3485'.
[  491.366067][T18896] netlink: 'syz.3.3485': attribute type 1 has an invalid length.
[  491.374360][T18896] netlink: 'syz.3.3485': attribute type 2 has an invalid length.
[  491.407964][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3485'.
[  491.562569][T18917] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3491'.
[  491.648555][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  491.788001][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'.
[  491.829339][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3493'.
[  491.844108][T18923] siw: device registration error -23
[  492.070258][T18930] syzkaller0: entered promiscuous mode
[  492.075799][T18930] syzkaller0: entered allmulticast mode
[  492.102628][T18930] syzkaller0: tun_chr_ioctl cmd 1074025677
[  492.130389][T18930] syzkaller0: Linktype set failed because interface is up
[  492.151822][T18936] netlink: 'syz.3.3499': attribute type 1 has an invalid length.
[  492.323643][T18936] bond1: (slave gretap1): making interface the new active one
[  492.382239][T18936] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  492.488221][T18942] 8021q: adding VLAN 0 to HW filter on device bond2
[  492.533289][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3501'.
[  492.550084][T18942] bond1: (slave bond2): Enslaving as a backup interface with an up link
[  492.571901][T18960] netlink: 'syz.2.3501': attribute type 7 has an invalid length.
[  492.581641][T18960] netlink: 'syz.2.3501': attribute type 8 has an invalid length.
[  492.616926][T18949] netlink: 'syz.4.3500': attribute type 1 has an invalid length.
[  492.675060][T18964] 8021q: adding VLAN 0 to HW filter on device bond1
[  492.693150][T18957] pim6reg0: tun_chr_ioctl cmd 2148553947
[  492.698765][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  492.764219][T18960] syz_tun: entered promiscuous mode
[  492.771546][T18960] batadv_slave_1: entered promiscuous mode
[  492.781444][T18960] erspan0: entered promiscuous mode
[  492.795002][T18960] debugfs: 'hsr0' already exists in 'hsr'
[  492.821406][T18960] Cannot create hsr debugfs directory
[  492.828205][T18960] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  492.936099][T18972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  493.041816][ T6171] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  493.141685][ T6171] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  493.209531][ T6171] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  493.224164][T18980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.302528][T18980] syzkaller0: entered promiscuous mode
[  493.308160][T18980] syzkaller0: entered allmulticast mode
[  493.728558][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  493.930577][T19007] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  493.966375][T19007] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  494.016336][T19007] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  494.119665][T19017] netlink: 'syz.2.3516': attribute type 9 has an invalid length.
[  494.228808][ T5907] tipc: Node number set to 776569106
[  494.241815][T19024] erspan0: left allmulticast mode
[  494.247621][T19025] netlink: 'syz.3.3519': attribute type 6 has an invalid length.
[  494.274669][T19024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  494.333027][T19022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  494.490963][T19036] netlink: 'syz.3.3522': attribute type 11 has an invalid length.
[  494.768756][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  494.972003][T19050] netlink: 'syz.4.3525': attribute type 13 has an invalid length.
[  495.017871][T19050] netlink: 'syz.4.3525': attribute type 17 has an invalid length.
[  495.039769][T19056] netlink: 'syz.3.3528': attribute type 10 has an invalid length.
[  495.083344][T19056] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  495.165676][T19050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  495.213579][T19062] bond_slave_0: entered allmulticast mode
[  495.237505][T19065] __nla_validate_parse: 16 callbacks suppressed
[  495.237527][T19065] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3530'.
[  495.275307][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3530'.
[  495.350875][   T30] audit: type=1800 audit(1754007295.421:9): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3527" name="memory.events" dev="tmpfs" ino=362 res=0 errno=0
[  495.431899][T19072] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3532'.
[  495.441101][   T30] audit: type=1804 audit(1754007295.461:10): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3527" name="memory.events" dev="tmpfs" ino=362 res=1 errno=0
[  495.451108][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'.
[  495.612772][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  495.770930][T19084] macvlan2: entered allmulticast mode
[  495.782699][T19084] veth1_vlan: entered allmulticast mode
[  495.799809][T19087] netlink: 'syz.0.3538': attribute type 7 has an invalid length.
[  495.800146][T19084] veth1_vlan: left allmulticast mode
[  495.813365][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  495.826445][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'.
[  495.877205][T19089] veth1_macvtap: left promiscuous mode
[  495.886289][T19089] macsec0: entered allmulticast mode
[  495.951872][T19092] veth1_macvtap: entered promiscuous mode
[  496.020185][T19092] veth1_macvtap: entered allmulticast mode
[  496.037745][T19092] macsec0: left allmulticast mode
[  496.065629][T19092] veth1_macvtap: left allmulticast mode
[  496.196373][T19099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3541'.
[  496.848575][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  496.868182][T19120] netlink: 'syz.1.3549': attribute type 1 has an invalid length.
[  496.925388][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'.
[  497.068158][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'.
[  497.191793][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'.
[  497.888617][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  498.033100][T19173] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  498.220024][T19181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  498.394181][T19191] bpq0: left promiscuous mode
[  498.407066][T19191] bpq0: left allmulticast mode
[  498.426514][T19191] netlink: zone id is out of range
[  498.440519][T19191] netlink: zone id is out of range
[  498.938574][    C0] net_ratelimit: 1 callbacks suppressed
[  498.938595][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  499.397981][T19221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  499.405351][T19221] IPv6: NLM_F_CREATE should be set when creating new route
[  499.412872][T19221] IPv6: NLM_F_CREATE should be set when creating new route
[  499.605243][T19194] netlink: 'syz.2.3571': attribute type 13 has an invalid length.
[  499.792497][T19194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  499.846525][T19234] ip6gre1: entered allmulticast mode
[  499.968620][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  500.265739][T19239] netlink: 'syz.4.3585': attribute type 2 has an invalid length.
[  500.527727][T19250] __nla_validate_parse: 15 callbacks suppressed
[  500.527749][T19250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3589'.
[  500.554216][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  500.625168][T19253] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3589'.
[  500.907971][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'.
[  501.009542][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  501.057399][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3593'.
[  501.346825][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3598'.
[  501.547701][T19286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3600'.
[  502.048584][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  502.089699][T19303] raw_sendmsg: syz.4.3604 forgot to set AF_INET. Fix it!
[  502.372863][T19309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3606'.
[  502.406795][T19309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3606'.
[  502.825415][T19322] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3609'.
[  503.088592][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  503.252921][T19335] netlink: 'syz.2.3610': attribute type 10 has an invalid length.
[  503.312937][T19335] team0: Port device geneve0 added
[  503.369385][T19337] vxcan1 speed is unknown, defaulting to 1000
[  503.429998][T19337] vxcan1 speed is unknown, defaulting to 1000
[  503.438285][T19340] batadv_slave_1: entered promiscuous mode
[  503.476115][T19337] vxcan1 speed is unknown, defaulting to 1000
[  503.734699][T19346] netlink: 'syz.3.3615': attribute type 13 has an invalid length.
[  503.743085][T19346] netlink: 'syz.3.3615': attribute type 17 has an invalid length.
[  504.071306][T19346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  504.128613][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  504.151002][T19334] batadv_slave_1: left promiscuous mode
[  504.357897][ T5907] vxcan1 speed is unknown, defaulting to 1000
[  504.367213][T19337] infiniband syz2: set active
[  504.378949][T19337] infiniband syz2: added vxcan1
[  504.392908][T19337] syz2: rxe_create_cq: returned err = -12
[  504.439754][T19337] infiniband syz2: Couldn't create ib_mad CQ
[  504.442185][T19354] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002
[  504.467099][T19337] infiniband syz2: Couldn't open port 1
[  504.571183][T19337] RDS/IB: syz2: added
[  504.575391][T19337] smc: adding ib device syz2 with port count 1
[  504.598931][T19337] smc:    ib device syz2 port 1 has pnetid S (user defined)
[  504.606394][T12946] vxcan1 speed is unknown, defaulting to 1000
[  504.638976][T19337] vxcan1 speed is unknown, defaulting to 1000
[  505.168568][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  505.311792][T19363] vxcan1 speed is unknown, defaulting to 1000
[  505.581986][T19377] bond3: entered promiscuous mode
[  505.618042][T19377] bond3: entered allmulticast mode
[  505.637218][T19377] 8021q: adding VLAN 0 to HW filter on device bond3
[  505.728928][ T5161] Bluetooth: hci3: command 0x0405 tx timeout
[  505.949871][T19386] __nla_validate_parse: 2 callbacks suppressed
[  505.949901][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3625'.
[  506.004644][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3625'.
[  506.015065][T19387] vlan0: entered promiscuous mode
[  506.077050][T19337] vxcan1 speed is unknown, defaulting to 1000
[  506.208649][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  506.361791][T19392] netlink: zone id is out of range
[  506.367093][T19392] netlink: zone id is out of range
[  506.372994][T19392] netlink: zone id is out of range
[  506.378144][T19392] netlink: zone id is out of range
[  506.391213][T19392] netlink: zone id is out of range
[  506.396473][T19392] netlink: zone id is out of range
[  506.575267][T19395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3628'.
[  506.695077][T19337] vxcan1 speed is unknown, defaulting to 1000
[  506.779714][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3629'.
[  506.907108][T19403] netlink: 'syz.1.3631': attribute type 2 has an invalid length.
[  506.910775][T19404] netlink: 'syz.1.3631': attribute type 2 has an invalid length.
[  506.974695][T19403] sctp: [Deprecated]: syz.1.3631 (pid 19403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.974695][T19403] Use struct sctp_sack_info instead
[  506.993420][T19404] sctp: [Deprecated]: syz.1.3631 (pid 19404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.993420][T19404] Use struct sctp_sack_info instead
[  507.163176][T19337] vxcan1 speed is unknown, defaulting to 1000
[  507.342002][T19412] vlan0: entered promiscuous mode
[  507.347251][T19412] team0: entered promiscuous mode
[  507.351316][T19419] netlink: 'syz.0.3637': attribute type 21 has an invalid length.
[  507.406357][T19419] syzkaller1: entered promiscuous mode
[  507.414368][T19419] syzkaller1: entered allmulticast mode
[  507.593618][T19423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3638'.
[  507.606802][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'.
[  507.616295][T19337] vxcan1 speed is unknown, defaulting to 1000
[  507.708741][T19423] syzkaller1: entered promiscuous mode
[  507.714277][T19423] syzkaller1: entered allmulticast mode
[  507.886266][T19431] nbd1: detected capacity change from 0 to 127
[  507.932576][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'.
[  507.959218][ T5850] block nbd1: Receive control failed (result -32)
[  507.986456][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'.
[  508.059499][T19337] vxcan1 speed is unknown, defaulting to 1000
[  508.238389][T19446] tipc: New replicast peer: 255.255.255.255
[  508.270592][T19446] tipc: Enabled bearer <udp:syz2>, priority 10
[  508.317884][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3643'.
[  508.497940][T19337] vxcan1 speed is unknown, defaulting to 1000
[  509.245664][T19337] vxcan1 speed is unknown, defaulting to 1000
[  509.270926][T19453] batadv_slave_1: entered promiscuous mode
[  509.284207][T19451] netlink: 'syz.1.3647': attribute type 1 has an invalid length.
[  509.308655][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'.
[  509.339632][    C0] net_ratelimit: 168 callbacks suppressed
[  509.339654][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  509.374156][T19452] batadv_slave_1: left promiscuous mode
[  510.368593][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  511.202001][T19515] __nla_validate_parse: 3 callbacks suppressed
[  511.202021][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3667'.
[  511.227210][T19515] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3667'.
[  511.255994][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3666'.
[  511.302937][T19518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3665'.
[  511.418563][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  511.628113][T19538] bpq0: entered promiscuous mode
[  511.660816][T19538] bpq0: entered allmulticast mode
[  511.675020][T19538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3672'.
[  511.834063][T19550] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  512.197090][T19562] netlink: 'syz.1.3680': attribute type 12 has an invalid length.
[  512.263379][T19564] syzkaller0: entered promiscuous mode
[  512.277893][T19564] syzkaller0: entered allmulticast mode
[  512.448672][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  512.518429][T19574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3685'.
[  512.742523][T19586] netlink: 'syz.3.3690': attribute type 1 has an invalid length.
[  512.759806][T19586] netlink: 'syz.3.3690': attribute type 11 has an invalid length.
[  512.782353][T19586] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3690'.
[  512.917584][T19585] vlan0: entered promiscuous mode
[  512.941074][T19585] bridge0: entered promiscuous mode
[  512.950707][T19585] vlan0: entered allmulticast mode
[  512.964581][T19585] bridge0: entered allmulticast mode
[  513.000890][T19588] vxcan1 speed is unknown, defaulting to 1000
[  513.488622][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  514.175809][T19636] netlink: 'syz.0.3703': attribute type 30 has an invalid length.
[  514.425738][T19616] vxcan1 speed is unknown, defaulting to 1000
[  514.528545][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  514.936041][T19667] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3707'.
[  515.298185][T19676] tipc: New replicast peer: 255.255.255.255
[  515.349897][T19676] tipc: Enabled bearer <udp:syz2>, priority 10
[  515.514973][T19620] vxcan1 speed is unknown, defaulting to 1000
[  515.568638][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  515.615405][T19686] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3713'.
[  515.991868][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'.
[  516.608643][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  516.646488][ T5850] Bluetooth: hci3: link tx timeout
[  516.653882][ T5850] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  516.910298][T19719] vxcan1 speed is unknown, defaulting to 1000
[  517.659536][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  517.781808][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'.
[  518.639511][T19779] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3740'.
[  518.667701][T19779] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  518.687071][T19779] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  518.698544][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  518.708233][ T5850] Bluetooth: hci3: command 0x0405 tx timeout
[  518.732924][T19781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3738'.
[  519.728572][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  519.777879][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'.
[  519.817054][T19813] netlink: zone id is out of range
[  519.868938][T19813] netlink: zone id is out of range
[  519.876619][T19813] netlink: zone id is out of range
[  519.921525][T19813] netlink: zone id is out of range
[  519.959181][T19813] netlink: zone id is out of range
[  520.037283][T19813] netlink: zone id is out of range
[  520.089655][T19813] netlink: zone id is out of range
[  520.114465][T19813] netlink: zone id is out of range
[  520.123878][T19813] netlink: zone id is out of range
[  520.329844][T19838] batadv_slave_1: entered promiscuous mode
[  520.374512][T19836] batadv_slave_1: left promiscuous mode
[  520.525261][T19849] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3762'.
[  520.625840][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'.
[  520.677599][T19860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3766'.
[  520.698065][T19858] vxcan1 speed is unknown, defaulting to 1000
[  520.719694][T12712] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  520.733862][T12712] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  520.757155][T12712] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  520.763741][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3764'.
[  520.786909][T12712] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  520.811624][T19861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3764'.
[  520.875152][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3764'.
[  520.916571][T19867] netlink: 'syz.1.3769': attribute type 10 has an invalid length.
[  521.270699][ T6172] hid-generic 0005:10CF:0009.0003: item fetching failed at offset 0/2
[  521.310803][ T6172] hid-generic 0005:10CF:0009.0003: probe with driver hid-generic failed with error -22
[  521.806463][T19908] netlink: 'syz.0.3781': attribute type 10 has an invalid length.
[  521.929020][T19913] netlink: 'syz.0.3781': attribute type 10 has an invalid length.
[  521.959804][T19908] batman_adv: batadv0: Adding interface: virt_wifi0
[  521.978723][T19908] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.029738][T19908] batman_adv: batadv0: Interface activated: virt_wifi0
[  522.220812][T19910] vxcan1 speed is unknown, defaulting to 1000
[  522.316953][T19930] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  522.388072][T19915] syzkaller0: entered promiscuous mode
[  522.435382][T19915] syzkaller0: entered allmulticast mode
[  522.495879][T19934] batadv_slave_1: entered promiscuous mode
[  522.527306][T19933] batadv_slave_1: left promiscuous mode
[  522.792872][T19949] __nla_validate_parse: 8 callbacks suppressed
[  522.792894][T19949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3793'.
[  522.818346][T19951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3794'.
[  522.824145][T19948] netlink: 'syz.0.3792': attribute type 6 has an invalid length.
[  522.841200][T19948] netlink: 'syz.0.3792': attribute type 6 has an invalid length.
[  522.969673][T19957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3795'.
[  523.024942][T19958] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  523.104262][T19943] vxcan1 speed is unknown, defaulting to 1000
[  524.503505][T19991] batadv_slave_1: entered promiscuous mode
[  524.546764][T19990] batadv_slave_1: left promiscuous mode
[  524.695397][T19996] syzkaller0: left promiscuous mode
[  524.705822][T19996] syzkaller0: left allmulticast mode
[  524.731977][T19996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  524.745450][T19996] tipc: Resetting bearer <eth:syzkaller0>
[  524.828388][T20003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3806'.
[  524.861496][T20003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3806'.
[  524.938611][    C0] net_ratelimit: 103 callbacks suppressed
[  524.938633][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  524.970535][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3809'.
[  525.420376][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'.
[  525.438563][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'.
[  525.762835][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'.
[  525.781518][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.799053][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.816973][T20038] batadv_slave_1: entered promiscuous mode
[  525.882529][T20037] batadv_slave_1: left promiscuous mode
[  525.897363][T20032] vxcan1 speed is unknown, defaulting to 1000
[  525.946562][T20041] netlink: 'syz.4.3819': attribute type 3 has an invalid length.
[  525.978624][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  525.998389][T20041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  526.025315][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.038749][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3819'.
[  526.071526][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.090733][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.106117][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.115740][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.135137][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.198165][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.223321][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.241254][T20041] netlink: 'syz.4.3819': attribute type 1 has an invalid length.
[  526.320486][T20041] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  527.018698][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  527.563814][T20103] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  527.855965][T20105] vxcan1 speed is unknown, defaulting to 1000
[  528.048600][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  528.070621][T20113] __nla_validate_parse: 34 callbacks suppressed
[  528.070645][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3836'.
[  529.049717][T20133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3842'.
[  529.089103][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  529.427372][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'.
[  529.481610][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'.
[  529.940831][T20168] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3850'.
[  530.128566][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  530.613586][T20177] pimreg: entered allmulticast mode
[  530.631095][T20177] pimreg: left allmulticast mode
[  530.880192][T20179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3852'.
[  530.912343][T20179] openvswitch: netlink: EtherType 0 is less than min 600
[  531.168648][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  531.217351][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3856'.
[  531.246871][T20189] validate_nla: 23 callbacks suppressed
[  531.246894][T20189] netlink: 'syz.1.3856': attribute type 21 has an invalid length.
[  531.382193][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'.
[  531.426703][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'.
[  531.501490][T20191] vxcan1 speed is unknown, defaulting to 1000
[  532.218686][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  532.576374][T20215] syzkaller1: entered promiscuous mode
[  532.599530][T20215] syzkaller1: entered allmulticast mode
[  533.063042][T20220] vxcan1 speed is unknown, defaulting to 1000
[  533.248596][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  533.720508][T20238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3868'.
[  533.934216][T20246] netlink: 'syz.3.3873': attribute type 1 has an invalid length.
[  533.942187][T20246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3873'.
[  533.992015][T20246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3873'.
[  534.289238][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  534.363346][T20256] netlink: 'syz.3.3876': attribute type 2 has an invalid length.
[  534.725825][T20266] netlink: 'syz.0.3880': attribute type 1 has an invalid length.
[  534.987492][T20268] netlink: 'syz.2.3882': attribute type 39 has an invalid length.
[  535.328581][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  535.344842][ T6173] IPVS: starting estimator thread 0...
[  535.353193][T20270] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  535.438699][T20281] IPVS: using max 26 ests per chain, 62400 per kthread
[  535.836857][T20289] veth0_virt_wifi: renamed from veth0_vlan
[  535.849775][T20296] batadv_slave_1: entered promiscuous mode
[  535.934017][T20295] batadv_slave_1: left promiscuous mode
[  536.230624][T20315] IPVS: set_ctl: invalid protocol: 207 10.1.1.1:20001
[  536.368555][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  536.406171][T20323] siw: device registration error -23
[  536.425201][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'.
[  536.456786][T20323] wg1: entered promiscuous mode
[  536.467369][T20323] wg1: entered allmulticast mode
[  536.511418][T20325] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3894'.
[  536.544471][T20325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3894'.
[  536.573379][T20325] openvswitch: netlink: Key type 11782 is out of range max 32
[  536.826822][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3897'.
[  537.278647][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'.
[  537.373599][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'.
[  537.408535][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  537.457285][T20367] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  537.521491][T20367] tipc: Resetting bearer <eth:syzkaller0>
[  537.560957][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'.
[  537.759652][T20371] vxcan1 speed is unknown, defaulting to 1000
[  537.813992][T20381] tap0: tun_chr_ioctl cmd 1074025680
[  537.851804][T20383] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  537.926863][T20381] D: renamed from syzkaller0 (while UP)
[  537.998259][T20381] tipc: Disabling bearer <eth:syzkaller0>
[  538.016769][T20391] netlink: 'syz.0.3918': attribute type 2 has an invalid length.
[  538.037332][T20391] netlink: 'syz.0.3918': attribute type 1 has an invalid length.
[  538.280619][T20404] netlink: 'syz.1.3921': attribute type 1 has an invalid length.
[  538.336132][T20407] netlink: 'syz.3.3922': attribute type 1 has an invalid length.
[  538.344547][T20407] netlink: 'syz.3.3922': attribute type 2 has an invalid length.
[  538.356359][T20404] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  538.448550][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  538.854055][T20429] wg1: left promiscuous mode
[  538.866817][T20429] wg1: left allmulticast mode
[  539.115893][T20433] __nla_validate_parse: 12 callbacks suppressed
[  539.115913][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'.
[  539.161286][T20438] sctp: [Deprecated]: syz.3.3930 (pid 20438) Use of struct sctp_assoc_value in delayed_ack socket option.
[  539.161286][T20438] Use struct sctp_sack_info instead
[  539.164433][T20436] vxcan1 speed is unknown, defaulting to 1000
[  539.488533][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  539.580832][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'.
[  540.040189][T20462] bridge2: port 1(veth5) entered blocking state
[  540.048223][T20462] bridge2: port 1(veth5) entered disabled state
[  540.068376][T20462] veth5: entered allmulticast mode
[  540.103121][T20462] veth5: entered promiscuous mode
[  540.116254][T20460] veth0_to_bond: left allmulticast mode
[  540.125504][T20460] bridge2: port 2(veth0_to_bond) entered blocking state
[  540.133590][T20460] bridge2: port 2(veth0_to_bond) entered disabled state
[  540.154975][T20460] veth0_to_bond: entered allmulticast mode
[  540.177206][T20460] veth0_to_bond: entered promiscuous mode
[  540.204217][T20464] macvtap1: entered promiscuous mode
[  540.210318][T20464] dummy0: entered promiscuous mode
[  540.226595][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3934'.
[  540.264783][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3934'.
[  540.406518][T20480] siw: device registration error -23
[  540.528546][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  540.772814][T20494] netlink: 'syz.4.3945': attribute type 1 has an invalid length.
[  540.780965][T20494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3945'.
[  541.127895][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3946'.
[  541.471897][T20505] bond2: (slave gretap1): Releasing active interface
[  541.568673][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  541.763670][T20509] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  541.891856][T20521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3951'.
[  542.090621][T20529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3953'.
[  542.317235][T20531] vxcan1 speed is unknown, defaulting to 1000
[  542.386251][T20542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3957'.
[  542.404807][T20543] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  542.610644][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  542.726902][T20549] batadv_slave_1: entered promiscuous mode
[  542.831967][T20548] batadv_slave_1: left promiscuous mode
[  543.152757][T20564] netlink: 'syz.0.3965': attribute type 5 has an invalid length.
[  543.160083][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3963'.
[  543.658688][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  543.826940][T20585] netlink: 'syz.1.3970': attribute type 4 has an invalid length.
[  543.896570][T20585] netlink: 'syz.1.3970': attribute type 4 has an invalid length.
[  544.264211][T20613] syzkaller0: entered promiscuous mode
[  544.270096][T20613] syzkaller0: entered allmulticast mode
[  544.320562][T20620] __nla_validate_parse: 1 callbacks suppressed
[  544.320580][T20620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3980'.
[  544.371694][T20622] netlink: 'syz.2.3980': attribute type 10 has an invalid length.
[  544.463438][T20622] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.471288][T20622] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.507024][T20622] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.514351][T20622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.522009][T20622] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.529283][T20622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.543256][T20622] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  544.556555][T20631] netlink: 'syz.0.3983': attribute type 1 has an invalid length.
[  544.689924][T20547] Bluetooth: hci4: command 0x0406 tx timeout
[  544.698890][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  544.725258][T20638] IPv6: addrconf: prefix option has invalid lifetime
[  544.747890][T20645] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.3988'.
[  544.909875][T20652] netlink: 'syz.3.3991': attribute type 21 has an invalid length.
[  544.926723][T20652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3991'.
[  545.094188][T20658] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3990'.
[  545.512732][T20668] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3995'.
[  545.657408][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3997'.
[  545.738579][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  545.759348][T20675] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3996'.
[  545.855802][T20683] netlink: 'syz.3.3999': attribute type 1 has an invalid length.
[  546.265831][   T30] audit: type=1800 audit(1754007346.341:11): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4000" name="cgroup.controllers" dev="tmpfs" ino=922 res=0 errno=0
[  546.302690][T20689] vxcan1 speed is unknown, defaulting to 1000
[  546.654971][T20708] batadv_slave_1: Device is already in use.
[  546.768613][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  546.936032][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'.
[  547.808534][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  548.034624][T20742] netlink: 'syz.2.4014': attribute type 3 has an invalid length.
[  548.047544][T20742] netlink: 'syz.2.4014': attribute type 3 has an invalid length.
[  548.094352][T20747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4016'.
[  548.099613][T20748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4017'.
[  548.105540][T20742] netlink: 'syz.2.4014': attribute type 5 has an invalid length.
[  548.426706][T20763] veth1_macvtap: left promiscuous mode
[  548.444249][T20763] macsec0: entered allmulticast mode
[  548.482160][T20763] veth1_macvtap: entered promiscuous mode
[  548.488151][T20763] veth1_macvtap: entered allmulticast mode
[  548.512127][T20763] macsec0: left allmulticast mode
[  548.517370][T20763] veth1_macvtap: left allmulticast mode
[  548.582793][T20772] vlan2: entered promiscuous mode
[  548.597393][T20772] bond0: entered promiscuous mode
[  548.611338][T20772] vlan2: entered allmulticast mode
[  548.624292][T20772] bond0: entered allmulticast mode
[  548.662493][T20767] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.804315][T20767] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.858553][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  549.054481][T20770] vxcan1 speed is unknown, defaulting to 1000
[  549.092865][T20767] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.293845][T20767] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.364973][T20800] __nla_validate_parse: 4 callbacks suppressed
[  549.365732][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'.
[  549.433757][T20800] netlink: 'syz.1.4029': attribute type 5 has an invalid length.
[  549.467940][T20800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4029'.
[  549.535808][T20800] geneve4: entered promiscuous mode
[  549.541384][T20800] geneve4: entered allmulticast mode
[  549.555966][   T12] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0
[  549.567274][   T12] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0
[  549.619708][   T12] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0
[  549.654415][   T12] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0
[  549.771058][T20811] FAULT_INJECTION: forcing a failure.
[  549.771058][T20811] name failslab, interval 1, probability 0, space 0, times 0
[  549.806563][T20811] CPU: 0 UID: 0 PID: 20811 Comm: syz.1.4031 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  549.806597][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  549.806611][T20811] Call Trace:
[  549.806619][T20811]  <TASK>
[  549.806629][T20811]  dump_stack_lvl+0x189/0x250
[  549.806665][T20811]  ? __pfx____ratelimit+0x10/0x10
[  549.806696][T20811]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.806737][T20811]  ? __pfx__printk+0x10/0x10
[  549.806772][T20811]  ? __pfx___might_resched+0x10/0x10
[  549.806811][T20811]  should_fail_ex+0x414/0x560
[  549.806853][T20811]  should_failslab+0xa8/0x100
[  549.806876][T20811]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  549.806910][T20811]  ? __alloc_skb+0x112/0x2d0
[  549.806948][T20811]  __alloc_skb+0x112/0x2d0
[  549.806987][T20811]  netlink_sendmsg+0x5c6/0xb30
[  549.807034][T20811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.807071][T20811]  ? aa_sock_msg_perm+0x94/0x160
[  549.807103][T20811]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  549.807128][T20811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.807162][T20811]  __sock_sendmsg+0x219/0x270
[  549.807195][T20811]  ____sys_sendmsg+0x505/0x830
[  549.807225][T20811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  549.807260][T20811]  ? import_iovec+0x74/0xa0
[  549.807295][T20811]  ___sys_sendmsg+0x21f/0x2a0
[  549.807322][T20811]  ? __pfx____sys_sendmsg+0x10/0x10
[  549.807389][T20811]  ? __fget_files+0x2a/0x420
[  549.807409][T20811]  ? __fget_files+0x3a0/0x420
[  549.807443][T20811]  __x64_sys_sendmsg+0x19b/0x260
[  549.807470][T20811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  549.807506][T20811]  ? __pfx_ksys_write+0x10/0x10
[  549.807535][T20811]  ? rcu_is_watching+0x15/0xb0
[  549.807575][T20811]  ? do_syscall_64+0xbe/0x3b0
[  549.807613][T20811]  do_syscall_64+0xfa/0x3b0
[  549.807650][T20811]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.807680][T20811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.807702][T20811]  ? clear_bhb_loop+0x60/0xb0
[  549.807729][T20811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.807750][T20811] RIP: 0033:0x7fc00858eb69
[  549.807770][T20811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.807790][T20811] RSP: 002b:00007fc0093a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.807814][T20811] RAX: ffffffffffffffda RBX: 00007fc0087b5fa0 RCX: 00007fc00858eb69
[  549.807831][T20811] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000003
[  549.807844][T20811] RBP: 00007fc0093a3090 R08: 0000000000000000 R09: 0000000000000000
[  549.807858][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.807870][T20811] R13: 0000000000000000 R14: 00007fc0087b5fa0 R15: 00007ffca81eb008
[  549.807912][T20811]  </TASK>
[  550.078211][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  550.263532][ T6171] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  550.282006][T12714] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.321956][ T6171] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  550.404517][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.409057][ T6171] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  550.480279][T12712] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.536240][T12714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.629471][T20826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4034'.
[  550.643880][T20826] openvswitch: netlink: Flow actions attr not present in new flow.
[  550.696983][T20791] vxcan1 speed is unknown, defaulting to 1000
[  550.744509][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'.
[  550.996383][T20836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4036'.
[  551.088601][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  551.197926][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'.
[  551.502740][T20838] vxcan1 speed is unknown, defaulting to 1000
[  552.129254][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  552.180545][T20868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4041'.
[  552.191326][T20867] netlink: 'syz.3.4040': attribute type 10 has an invalid length.
[  552.199471][T20867] team0: Device dummy0 is up. Set it down before adding it as a team port
[  552.457811][   T30] audit: type=1800 audit(1754007352.531:12): pid=20879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4043" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=969 res=0 errno=0
[  552.754617][T20886] netlink: 'syz.3.4044': attribute type 1 has an invalid length.
[  553.029262][T20883] vxcan1 speed is unknown, defaulting to 1000
[  553.168804][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  553.346362][T20890] vxcan1 speed is unknown, defaulting to 1000
[  553.673388][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'.
[  553.798149][T20895] vxcan1 speed is unknown, defaulting to 1000
[  554.209167][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  554.294918][T20903] vxcan1 speed is unknown, defaulting to 1000
[  554.767800][T20910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.928797][ T5161] Bluetooth: hci5: command 0x0406 tx timeout
[  555.248688][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  555.388964][T20926] FAULT_INJECTION: forcing a failure.
[  555.388964][T20926] name failslab, interval 1, probability 0, space 0, times 0
[  555.427826][T20926] CPU: 1 UID: 0 PID: 20926 Comm: syz.0.4055 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  555.427860][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  555.427872][T20926] Call Trace:
[  555.427881][T20926]  <TASK>
[  555.427890][T20926]  dump_stack_lvl+0x189/0x250
[  555.427918][T20926]  ? __pfx____ratelimit+0x10/0x10
[  555.427947][T20926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  555.427969][T20926]  ? __pfx__printk+0x10/0x10
[  555.427997][T20926]  ? __lock_acquire+0xab9/0xd20
[  555.428038][T20926]  should_fail_ex+0x414/0x560
[  555.428077][T20926]  should_failslab+0xa8/0x100
[  555.428099][T20926]  kmem_cache_alloc_noprof+0x73/0x3c0
[  555.428128][T20926]  ? skb_clone+0x212/0x3a0
[  555.428164][T20926]  skb_clone+0x212/0x3a0
[  555.428191][T20926]  __netlink_deliver_tap+0x404/0x850
[  555.428237][T20926]  ? netlink_deliver_tap+0x2e/0x1b0
[  555.428269][T20926]  netlink_deliver_tap+0x19c/0x1b0
[  555.428302][T20926]  netlink_unicast+0x7fa/0x9e0
[  555.428340][T20926]  ? __pfx_netlink_unicast+0x10/0x10
[  555.428370][T20926]  ? netlink_sendmsg+0x642/0xb30
[  555.428399][T20926]  ? skb_put+0x11b/0x210
[  555.428423][T20926]  netlink_sendmsg+0x805/0xb30
[  555.428469][T20926]  ? __pfx_netlink_sendmsg+0x10/0x10
[  555.428523][T20926]  ? aa_sock_msg_perm+0x94/0x160
[  555.428554][T20926]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  555.428579][T20926]  ? __pfx_netlink_sendmsg+0x10/0x10
[  555.428612][T20926]  __sock_sendmsg+0x219/0x270
[  555.428652][T20926]  ____sys_sendmsg+0x505/0x830
[  555.428682][T20926]  ? __pfx_____sys_sendmsg+0x10/0x10
[  555.428716][T20926]  ? import_iovec+0x74/0xa0
[  555.428751][T20926]  ___sys_sendmsg+0x21f/0x2a0
[  555.428777][T20926]  ? __pfx____sys_sendmsg+0x10/0x10
[  555.428845][T20926]  ? __fget_files+0x2a/0x420
[  555.428865][T20926]  ? __fget_files+0x3a0/0x420
[  555.428898][T20926]  __x64_sys_sendmsg+0x19b/0x260
[  555.428920][T20926]  ? schedule+0x165/0x360
[  555.428949][T20926]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  555.428995][T20926]  ? do_syscall_64+0xbe/0x3b0
[  555.429031][T20926]  do_syscall_64+0xfa/0x3b0
[  555.429065][T20926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.429084][T20926]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  555.429106][T20926]  ? clear_bhb_loop+0x60/0xb0
[  555.429133][T20926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.429161][T20926] RIP: 0033:0x7f409998eb69
[  555.429181][T20926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  555.429201][T20926] RSP: 002b:00007f409a811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  555.429226][T20926] RAX: ffffffffffffffda RBX: 00007f4099bb5fa0 RCX: 00007f409998eb69
[  555.429242][T20926] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000003
[  555.429256][T20926] RBP: 00007f409a811090 R08: 0000000000000000 R09: 0000000000000000
[  555.429269][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.429282][T20926] R13: 0000000000000000 R14: 00007f4099bb5fa0 R15: 00007ffe1de0ae28
[  555.429317][T20926]  </TASK>
[  555.952008][T20919] vxcan1 speed is unknown, defaulting to 1000
[  556.289197][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  556.416675][T20938] vxcan1 speed is unknown, defaulting to 1000
[  556.869590][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4063'.
[  557.339310][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  557.850103][T20980] FAULT_INJECTION: forcing a failure.
[  557.850103][T20980] name failslab, interval 1, probability 0, space 0, times 0
[  557.893677][T20980] CPU: 1 UID: 0 PID: 20980 Comm: syz.4.4068 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  557.893710][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  557.893724][T20980] Call Trace:
[  557.893732][T20980]  <TASK>
[  557.893742][T20980]  dump_stack_lvl+0x189/0x250
[  557.893770][T20980]  ? __pfx____ratelimit+0x10/0x10
[  557.893801][T20980]  ? __pfx_dump_stack_lvl+0x10/0x10
[  557.893823][T20980]  ? __pfx__printk+0x10/0x10
[  557.893855][T20980]  ? __pfx___might_resched+0x10/0x10
[  557.893886][T20980]  ? fs_reclaim_acquire+0x7d/0x100
[  557.893915][T20980]  should_fail_ex+0x414/0x560
[  557.893967][T20980]  should_failslab+0xa8/0x100
[  557.893990][T20980]  kmem_cache_alloc_noprof+0x73/0x3c0
[  557.894021][T20980]  ? skb_clone+0x212/0x3a0
[  557.894050][T20980]  skb_clone+0x212/0x3a0
[  557.894071][T20980]  ? nfnetlink_rcv+0x486/0x2520
[  557.894102][T20980]  nfnetlink_rcv+0x4b4/0x2520
[  557.894133][T20980]  ? __dev_queue_xmit+0x1d79/0x3b50
[  557.894170][T20980]  ? __dev_queue_xmit+0x27b/0x3b50
[  557.894207][T20980]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  557.894255][T20980]  ? ref_tracker_free+0x63a/0x7d0
[  557.894277][T20980]  ? __asan_memcpy+0x40/0x70
[  557.894303][T20980]  ? __pfx_ref_tracker_free+0x10/0x10
[  557.894344][T20980]  ? skb_clone+0x246/0x3a0
[  557.894372][T20980]  ? __netlink_deliver_tap+0x807/0x850
[  557.894404][T20980]  ? netlink_deliver_tap+0x2e/0x1b0
[  557.894456][T20980]  netlink_unicast+0x82c/0x9e0
[  557.894494][T20980]  ? __pfx_netlink_unicast+0x10/0x10
[  557.894525][T20980]  ? netlink_sendmsg+0x642/0xb30
[  557.894555][T20980]  ? skb_put+0x11b/0x210
[  557.894579][T20980]  netlink_sendmsg+0x805/0xb30
[  557.894623][T20980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  557.894659][T20980]  ? aa_sock_msg_perm+0x94/0x160
[  557.894690][T20980]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  557.894714][T20980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  557.894747][T20980]  __sock_sendmsg+0x219/0x270
[  557.894779][T20980]  ____sys_sendmsg+0x505/0x830
[  557.894808][T20980]  ? __pfx_____sys_sendmsg+0x10/0x10
[  557.894841][T20980]  ? import_iovec+0x74/0xa0
[  557.894876][T20980]  ___sys_sendmsg+0x21f/0x2a0
[  557.894901][T20980]  ? __pfx____sys_sendmsg+0x10/0x10
[  557.894971][T20980]  ? __fget_files+0x2a/0x420
[  557.894990][T20980]  ? __fget_files+0x3a0/0x420
[  557.895023][T20980]  __x64_sys_sendmsg+0x19b/0x260
[  557.895049][T20980]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  557.895083][T20980]  ? __pfx_ksys_write+0x10/0x10
[  557.895110][T20980]  ? rcu_is_watching+0x15/0xb0
[  557.895150][T20980]  ? do_syscall_64+0xbe/0x3b0
[  557.895186][T20980]  do_syscall_64+0xfa/0x3b0
[  557.895217][T20980]  ? lockdep_hardirqs_on+0x9c/0x150
[  557.895246][T20980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.895267][T20980]  ? clear_bhb_loop+0x60/0xb0
[  557.895294][T20980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.895314][T20980] RIP: 0033:0x7fb1f178eb69
[  557.895334][T20980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  557.895352][T20980] RSP: 002b:00007fb1f2614038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  557.895377][T20980] RAX: ffffffffffffffda RBX: 00007fb1f19b5fa0 RCX: 00007fb1f178eb69
[  557.895392][T20980] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000003
[  557.895406][T20980] RBP: 00007fb1f2614090 R08: 0000000000000000 R09: 0000000000000000
[  557.895419][T20980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.895432][T20980] R13: 0000000000000000 R14: 00007fb1f19b5fa0 R15: 00007fffa2b025a8
[  557.895470][T20980]  </TASK>
[  558.332007][T20986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4070'.
[  558.379213][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  558.445829][T20986] netlink: 'syz.1.4070': attribute type 1 has an invalid length.
[  558.582111][T20986] 8021q: adding VLAN 0 to HW filter on device bond3
[  558.648234][T20990] bond3: (slave gretap2): making interface the new active one
[  558.666259][T20990] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  558.878000][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'.
[  558.916914][T21004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'.
[  558.927783][T21000] syzkaller0: entered promiscuous mode
[  558.933789][T21000] syzkaller0: entered allmulticast mode
[  558.956808][T21003] syzkaller0: entered promiscuous mode
[  558.984089][T21003] syzkaller0: entered allmulticast mode
[  558.987871][T21007] netlink: 'syz.0.4076': attribute type 4 has an invalid length.
[  559.011089][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'.
[  559.229739][T21009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.277463][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'.
[  559.403638][T21009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.414363][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  559.518018][T21009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.613295][T21029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4082'.
[  559.637189][T21009] batman_adv: batadv0: Removing interface: netdevsim0
[  559.652232][T21009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.804144][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'.
[  559.926904][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.008157][ T3470] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.118193][ T3470] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.139689][ T3470] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.342138][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4091'.
[  560.449182][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  561.230558][T21080] netlink: 'syz.0.4097': attribute type 1 has an invalid length.
[  561.260747][T21080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4097'.
[  561.423794][T21085] FAULT_INJECTION: forcing a failure.
[  561.423794][T21085] name failslab, interval 1, probability 0, space 0, times 0
[  561.487051][T21085] CPU: 0 UID: 0 PID: 21085 Comm: syz.4.4099 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  561.487086][T21085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  561.487100][T21085] Call Trace:
[  561.487109][T21085]  <TASK>
[  561.487119][T21085]  dump_stack_lvl+0x189/0x250
[  561.487146][T21085]  ? __pfx____ratelimit+0x10/0x10
[  561.487178][T21085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.487200][T21085]  ? __pfx__printk+0x10/0x10
[  561.487231][T21085]  ? __pfx___might_resched+0x10/0x10
[  561.487263][T21085]  ? fs_reclaim_acquire+0x7d/0x100
[  561.487293][T21085]  should_fail_ex+0x414/0x560
[  561.487334][T21085]  should_failslab+0xa8/0x100
[  561.487357][T21085]  __kmalloc_cache_noprof+0x70/0x3d0
[  561.487389][T21085]  ? nft_delrule+0x57/0xba0
[  561.487422][T21085]  nft_delrule+0x57/0xba0
[  561.487448][T21085]  ? nft_pernet+0x23/0x240
[  561.487470][T21085]  ? nft_pernet+0x23/0x240
[  561.487502][T21085]  ? nft_trans_commit_list_add_tail+0x179/0x520
[  561.487535][T21085]  nft_flush_table+0x291/0xea0
[  561.487570][T21085]  nf_tables_deltable+0x5cc/0xe10
[  561.487601][T21085]  ? __pfx_nf_tables_deltable+0x10/0x10
[  561.487623][T21085]  ? nfnl_pernet+0x23/0x240
[  561.487662][T21085]  ? __nla_parse+0x40/0x60
[  561.487693][T21085]  nfnetlink_rcv+0x112f/0x2520
[  561.487770][T21085]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  561.487819][T21085]  ? ref_tracker_free+0x63a/0x7d0
[  561.487876][T21085]  ? __netlink_deliver_tap+0x807/0x850
[  561.487909][T21085]  ? netlink_deliver_tap+0x2e/0x1b0
[  561.487963][T21085]  netlink_unicast+0x82c/0x9e0
[  561.488004][T21085]  ? __pfx_netlink_unicast+0x10/0x10
[  561.488037][T21085]  ? netlink_sendmsg+0x642/0xb30
[  561.488067][T21085]  ? skb_put+0x11b/0x210
[  561.488093][T21085]  netlink_sendmsg+0x805/0xb30
[  561.488138][T21085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  561.488175][T21085]  ? aa_sock_msg_perm+0x94/0x160
[  561.488207][T21085]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  561.488231][T21085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  561.488266][T21085]  __sock_sendmsg+0x219/0x270
[  561.488299][T21085]  ____sys_sendmsg+0x505/0x830
[  561.488328][T21085]  ? __pfx_____sys_sendmsg+0x10/0x10
[  561.488363][T21085]  ? import_iovec+0x74/0xa0
[  561.488399][T21085]  ___sys_sendmsg+0x21f/0x2a0
[  561.488425][T21085]  ? __pfx____sys_sendmsg+0x10/0x10
[  561.488495][T21085]  ? __fget_files+0x2a/0x420
[  561.488515][T21085]  ? __fget_files+0x3a0/0x420
[  561.488549][T21085]  __x64_sys_sendmsg+0x19b/0x260
[  561.488576][T21085]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  561.488611][T21085]  ? __pfx_ksys_write+0x10/0x10
[  561.488639][T21085]  ? rcu_is_watching+0x15/0xb0
[  561.488679][T21085]  ? do_syscall_64+0xbe/0x3b0
[  561.488723][T21085]  do_syscall_64+0xfa/0x3b0
[  561.488752][T21085]  ? lockdep_hardirqs_on+0x9c/0x150
[  561.488781][T21085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.488801][T21085]  ? clear_bhb_loop+0x60/0xb0
[  561.488828][T21085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.488848][T21085] RIP: 0033:0x7fb1f178eb69
[  561.488867][T21085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.488887][T21085] RSP: 002b:00007fb1f2614038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  561.488911][T21085] RAX: ffffffffffffffda RBX: 00007fb1f19b5fa0 RCX: 00007fb1f178eb69
[  561.488927][T21085] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000003
[  561.488940][T21085] RBP: 00007fb1f2614090 R08: 0000000000000000 R09: 0000000000000000
[  561.488954][T21085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.488967][T21085] R13: 0000000000000000 R14: 00007fb1f19b5fa0 R15: 00007fffa2b025a8
[  561.489002][T21085]  </TASK>
[  561.845502][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  562.111980][T21105] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  562.124308][T21105] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  562.140601][T21097] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4106'.
[  562.198253][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4103'.
[  562.505830][T21123] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  562.525680][T21123] Bluetooth: MGMT ver 1.23
[  562.596736][T21123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4113'.
[  562.608829][T21123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4113'.
[  562.848526][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  562.955033][T21139] vxcan1 speed is unknown, defaulting to 1000
[  563.271661][T21148] netlink: 'syz.0.4119': attribute type 10 has an invalid length.
[  563.283449][T21148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4119'.
[  563.831137][T21169] netlink: 'syz.3.4126': attribute type 1 has an invalid length.
[  563.872198][T21169] netlink: 'syz.3.4126': attribute type 1 has an invalid length.
[  563.888860][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  563.898994][T21169] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4126'.
[  563.950472][T21167] netlink: 'syz.2.4125': attribute type 1 has an invalid length.
[  563.965266][T21167] netlink: 'syz.2.4125': attribute type 1 has an invalid length.
[  564.029698][T21175] netlink: 'syz.2.4125': attribute type 1 has an invalid length.
[  564.045841][T21171] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  564.076020][T21175] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4125'.
[  564.227320][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'.
[  564.406976][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'.
[  564.424699][T21185] netlink: 'syz.2.4129': attribute type 23 has an invalid length.
[  564.424793][T21184] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  564.458640][T21187] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  564.469788][T21184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.498248][T21187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.616991][T20547] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  564.618744][ T5161] Bluetooth: hci2: command 0x0401 tx timeout
[  564.737061][T21199] FAULT_INJECTION: forcing a failure.
[  564.737061][T21199] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  564.789023][T21199] CPU: 0 UID: 0 PID: 21199 Comm: syz.3.4134 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  564.789058][T21199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  564.789072][T21199] Call Trace:
[  564.789081][T21199]  <TASK>
[  564.789090][T21199]  dump_stack_lvl+0x189/0x250
[  564.789118][T21199]  ? __pfx____ratelimit+0x10/0x10
[  564.789150][T21199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.789172][T21199]  ? __pfx__printk+0x10/0x10
[  564.789214][T21199]  should_fail_ex+0x414/0x560
[  564.789254][T21199]  _copy_to_user+0x31/0xb0
[  564.789288][T21199]  simple_read_from_buffer+0xe1/0x170
[  564.789327][T21199]  proc_fail_nth_read+0x1b3/0x220
[  564.789357][T21199]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  564.789395][T21199]  ? rw_verify_area+0x258/0x650
[  564.789425][T21199]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  564.789452][T21199]  vfs_read+0x1fd/0x980
[  564.789485][T21199]  ? fdget_pos+0x247/0x320
[  564.789511][T21199]  ? __pfx___mutex_lock+0x10/0x10
[  564.789545][T21199]  ? __pfx_vfs_read+0x10/0x10
[  564.789577][T21199]  ? __fget_files+0x2a/0x420
[  564.789603][T21199]  ? __fget_files+0x3a0/0x420
[  564.789622][T21199]  ? __fget_files+0x2a/0x420
[  564.789654][T21199]  ksys_read+0x145/0x250
[  564.789688][T21199]  ? __pfx_ksys_read+0x10/0x10
[  564.789716][T21199]  ? rcu_is_watching+0x15/0xb0
[  564.789756][T21199]  ? do_syscall_64+0xbe/0x3b0
[  564.789794][T21199]  do_syscall_64+0xfa/0x3b0
[  564.789824][T21199]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.789854][T21199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.789876][T21199]  ? clear_bhb_loop+0x60/0xb0
[  564.789904][T21199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.789924][T21199] RIP: 0033:0x7f245d18d57c
[  564.789944][T21199] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  564.789963][T21199] RSP: 002b:00007f245e016030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  564.789987][T21199] RAX: ffffffffffffffda RBX: 00007f245d3b5fa0 RCX: 00007f245d18d57c
[  564.790003][T21199] RDX: 000000000000000f RSI: 00007f245e0160a0 RDI: 0000000000000004
[  564.790016][T21199] RBP: 00007f245e016090 R08: 0000000000000000 R09: 0000000000000000
[  564.790030][T21199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  564.790042][T21199] R13: 0000000000000000 R14: 00007f245d3b5fa0 R15: 00007ffd7c3e6558
[  564.790079][T21199]  </TASK>
[  565.036534][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  565.254208][T21214] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  565.594344][T21223] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.4140'.
[  565.915055][T21236] netlink: 'syz.4.4144': attribute type 4 has an invalid length.
[  565.935256][T21238] netlink: 'syz.1.4145': attribute type 5 has an invalid length.
[  566.049274][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  566.189926][T21248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.493994][T21262] vlan2: entered allmulticast mode
[  566.509122][T21262] syz_tun: entered allmulticast mode
[  566.667922][T21274] veth1: entered promiscuous mode
[  566.695069][T21274] netlink: 'syz.2.4158': attribute type 8 has an invalid length.
[  566.954695][T21289] netlink: 'syz.2.4162': attribute type 3 has an invalid length.
[  567.088523][    C0] net_ratelimit: 1 callbacks suppressed
[  567.088544][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  567.555174][T21315] __nla_validate_parse: 10 callbacks suppressed
[  567.555196][T21315] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4170'.
[  567.562365][T21318] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4171'.
[  567.612899][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'.
[  567.634520][T21322] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  567.660562][T21324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4170'.
[  567.773347][T21329] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  567.805570][T21329] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  567.966167][T21339] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4176'.
[  568.055221][T21329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  568.129212][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  568.152035][T21322] vxcan1 speed is unknown, defaulting to 1000
[  568.192774][T21344] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4178'.
[  568.298741][T21344] netlink: zone id is out of range
[  568.320204][T21344] netlink: get zone limit has 8 unknown bytes
[  568.728923][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'.
[  568.751056][T21363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4183'.
[  568.767342][T21364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4184'.
[  568.782330][T21360] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  568.799957][T21360] macsec1: entered promiscuous mode
[  568.817219][T21360] macsec1: entered allmulticast mode
[  568.845055][T21360] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  569.168799][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  569.271988][T21390] openvswitch: netlink: Key type 16144 is out of range max 32
[  569.753809][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'.
[  570.021093][T21414] validate_nla: 2 callbacks suppressed
[  570.021113][T21414] netlink: 'syz.4.4200': attribute type 13 has an invalid length.
[  570.097453][T21414] netlink: 'syz.4.4200': attribute type 17 has an invalid length.
[  570.141910][T21414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  570.209359][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  570.482201][T21436] gtp0: entered promiscuous mode
[  570.487242][T21436] gtp0: entered allmulticast mode
[  570.510865][T21442] netlink: 'syz.4.4212': attribute type 5 has an invalid length.
[  570.707768][T21454] tipc: Enabled bearer <eth:gre0>, priority 10
[  570.968749][T21476] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  571.245635][T21493] netlink: 'syz.2.4225': attribute type 1 has an invalid length.
[  571.258739][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  571.357725][T21493] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  571.976653][T21528] lo speed is unknown, defaulting to 1000
[  572.031234][T21531] bridge0: port 3(vlan2) entered blocking state
[  572.085628][T21531] bridge0: port 3(vlan2) entered disabled state
[  572.093755][T21531] vlan2: entered allmulticast mode
[  572.100530][T21531] bridge0: entered allmulticast mode
[  572.109835][T21531] vlan2: left allmulticast mode
[  572.120988][T21531] bridge0: left allmulticast mode
[  572.153054][T21528] lo speed is unknown, defaulting to 1000
[  572.289248][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  572.341961][T21527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  572.377291][T21528] lo speed is unknown, defaulting to 1000
[  572.400515][T21542] netlink: 'syz.2.4240': attribute type 6 has an invalid length.
[  572.430422][T21542] netlink: 'syz.2.4240': attribute type 4 has an invalid length.
[  572.871415][T21528] infiniband syz0: set active
[  572.876253][T12946] lo speed is unknown, defaulting to 1000
[  572.904668][T21528] infiniband syz0: added lo
[  572.929535][T21528] syz0: rxe_create_cq: returned err = -12
[  572.962804][T21528] infiniband syz0: Couldn't create ib_mad CQ
[  572.978753][T21528] infiniband syz0: Couldn't open port 1
[  573.019285][T21562] __nla_validate_parse: 11 callbacks suppressed
[  573.019306][T21562] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4245'.
[  573.139764][T21528] RDS/IB: syz0: added
[  573.145312][T21528] smc: adding ib device syz0 with port count 1
[  573.151820][T21528] smc:    ib device syz0 port 1 has pnetid 
[  573.253831][T12946] lo speed is unknown, defaulting to 1000
[  573.299934][T21528] lo speed is unknown, defaulting to 1000
[  573.332897][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  573.347220][T21563] vxcan1 speed is unknown, defaulting to 1000
[  574.077357][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4252'.
[  574.200177][T21597] tap0: tun_chr_ioctl cmd 1074025680
[  574.229826][T21597] tipc: Started in network mode
[  574.234787][T21597] tipc: Node identity 1e811f463d2e, cluster identity 4711
[  574.273200][T21597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.324718][T21528] lo speed is unknown, defaulting to 1000
[  574.352265][T21595] tipc: Disabling bearer <eth:syzkaller0>
[  574.379154][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  574.409923][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'.
[  574.763908][ T6172] IPVS: starting estimator thread 0...
[  574.797702][T21626] netlink: 'syz.3.4257': attribute type 1 has an invalid length.
[  574.868561][T21621] IPVS: using max 26 ests per chain, 62400 per kthread
[  574.975625][T21528] lo speed is unknown, defaulting to 1000
[  575.408999][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  575.417528][T21571] Bluetooth: hci1: command 0x0406 tx timeout
[  575.424445][T21571] Bluetooth: hci2: command 0x0401 tx timeout
[  575.657628][T21528] lo speed is unknown, defaulting to 1000
[  575.830925][T21658] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  576.045706][T21665] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4271'.
[  576.057273][T21665] netlink: 'syz.0.4271': attribute type 1 has an invalid length.
[  576.232885][T21665] 8021q: adding VLAN 0 to HW filter on device bond5
[  576.294978][T21666] 8021q: adding VLAN 0 to HW filter on device bond5
[  576.307397][T21666] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  576.313813][T21665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4271'.
[  576.324692][T21666] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  576.377956][T21528] lo speed is unknown, defaulting to 1000
[  576.449063][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  576.966554][T21528] lo speed is unknown, defaulting to 1000
[  577.059844][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'.
[  577.079489][T21692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4279'.
[  577.088911][T21692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4279'.
[  577.097895][T21692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4279'.
[  577.128537][T21692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4279'.
[  577.393140][T21707] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  577.488528][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  577.592640][T21528] lo speed is unknown, defaulting to 1000
[  578.042952][T21739] __nla_validate_parse: 5 callbacks suppressed
[  578.042973][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4289'.
[  578.063220][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4289'.
[  578.176483][T21528] lo speed is unknown, defaulting to 1000
[  578.529192][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  578.552742][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4291'.
[  578.569882][T21743] 8021q: VLANs not supported on wg0
[  578.715277][T21528] lo speed is unknown, defaulting to 1000
[  578.836607][T21746] netlink: 448 bytes leftover after parsing attributes in process `syz.0.4292'.
[  579.079732][T21756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'.
[  579.137002][T21756] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4295'.
[  579.166201][T21756] netlink: 'syz.0.4295': attribute type 5 has an invalid length.
[  579.199586][T21764] netlink: 2900 bytes leftover after parsing attributes in process `syz.0.4295'.
[  579.205849][T21763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4298'.
[  579.228959][T21756] netlink: 'syz.0.4295': attribute type 6 has an invalid length.
[  579.236758][T21756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4295'.
[  579.240510][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'.
[  579.467892][T21772] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  579.496031][T21772] syzkaller0: entered promiscuous mode
[  579.518231][T21772] syzkaller0: entered allmulticast mode
[  579.568529][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  579.868073][T21785] netlink: 'syz.3.4304': attribute type 2 has an invalid length.
[  579.982410][T21785] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  580.210364][T21797] netlink: 'syz.4.4309': attribute type 1 has an invalid length.
[  580.609614][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  581.284995][T21831] vxcan1 speed is unknown, defaulting to 1000
[  581.649055][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  582.544435][T21860] vxcan1 speed is unknown, defaulting to 1000
[  582.545458][T21831] lo speed is unknown, defaulting to 1000
[  582.690212][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  582.716648][T21886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.739741][T21886] syzkaller0: entered promiscuous mode
[  582.746104][T21886] syzkaller0: entered allmulticast mode
[  582.864287][T21886] tipc: Resetting bearer <eth:syzkaller0>
[  582.992563][T21884] tipc: Resetting bearer <eth:syzkaller0>
[  583.109856][T21884] tipc: Disabling bearer <eth:syzkaller0>
[  583.428300][T21860] lo speed is unknown, defaulting to 1000
[  583.569780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.687368][T21902] netlink: 'syz.3.4338': attribute type 29 has an invalid length.
[  583.732738][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  584.328355][T21934] netlink: 'syz.1.4346': attribute type 1 has an invalid length.
[  584.409946][T21938] __nla_validate_parse: 9 callbacks suppressed
[  584.409967][T21938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4347'.
[  584.639517][T21949] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4350'.
[  584.681590][T21950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4349'.
[  584.708197][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4349'.
[  584.744804][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4351'.
[  584.757916][T21950] netlink: 'syz.2.4349': attribute type 2 has an invalid length.
[  584.766772][T21952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4351'.
[  584.776650][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  584.785033][T21952] netlink: 'syz.1.4351': attribute type 7 has an invalid length.
[  585.250911][T21971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4355'.
[  585.739487][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4359'.
[  585.778782][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4359'.
[  585.808538][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  586.072539][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4364'.
[  586.375755][T22019] 8021q: VLANs not supported on sit0
[  586.555581][T22020] vxcan1 speed is unknown, defaulting to 1000
[  586.849339][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  587.214991][T22020] lo speed is unknown, defaulting to 1000
[  587.215812][T22017] vxcan1 speed is unknown, defaulting to 1000
[  587.888575][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  587.919365][T22069] syzkaller0: entered promiscuous mode
[  587.925001][T22069] syzkaller0: entered allmulticast mode
[  587.957253][T22017] lo speed is unknown, defaulting to 1000
[  588.934498][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  589.978581][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  590.613257][T22108] __nla_validate_parse: 6 callbacks suppressed
[  590.613278][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4396'.
[  590.805906][T22113] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  591.009218][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  591.117876][T22121] netlink: 'syz.3.4401': attribute type 28 has an invalid length.
[  591.259891][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4401'.
[  591.380190][T22126] xfrm0: entered promiscuous mode
[  591.405978][T22126] xfrm0: entered allmulticast mode
[  591.627948][T22133] netlink: 'syz.3.4404': attribute type 1 has an invalid length.
[  591.717578][T22133] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  592.012053][T22150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.048678][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  592.112930][T22147] vxcan1 speed is unknown, defaulting to 1000
[  592.600399][T22165] vcan0: tx drop: invalid da for name 0x0000000000000001
[  592.819957][T22172] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003
[  593.089127][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  593.210200][T22147] lo speed is unknown, defaulting to 1000
[  594.128603][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  595.169246][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  596.208608][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  597.249164][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  598.288636][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  599.339115][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  600.368613][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  601.409236][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  602.448574][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  603.489217][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  604.528600][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  605.579123][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  606.608732][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  607.649268][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  608.688968][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  609.739176][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  610.778590][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  611.809204][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  612.363873][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4423'.
[  612.383900][T22194] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4424'.
[  612.438246][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'.
[  612.529298][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'.
[  612.852197][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  613.899068][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  614.525325][T22198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.533181][T22198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.542781][T22198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.552097][T22198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.582768][T22194] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  614.595144][T22205] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  614.602479][T22194] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  614.602522][T22194] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  614.690548][T22205] batman_adv: batadv0: Removing interface: virt_wifi0
[  614.730708][T22211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4428'.
[  614.755746][T22208] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  614.819127][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4428'.
[  614.879485][T22216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4428'.
[  614.928600][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  615.129711][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4434'.
[  615.178430][T22220] 
@ÿ: renamed from bond_slave_0
[  615.554793][T22228] hsr_slave_1 (unregistering): left promiscuous mode
[  615.656552][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4438'.
[  615.701266][T22243] bridge3: entered promiscuous mode
[  615.723265][T22243] bridge3: entered allmulticast mode
[  615.746925][T22243] team0: Port device bridge3 added
[  615.969346][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  616.034168][T22255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4442'.
[  616.287901][T22261] vxcan1 speed is unknown, defaulting to 1000
[  616.298610][T12712] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  616.835328][T22261] lo speed is unknown, defaulting to 1000
[  617.008512][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  617.247804][T22294] netlink: 'syz.4.4455': attribute type 10 has an invalid length.
[  617.309897][T22294] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  617.333957][T22296] netlink: 'syz.3.4456': attribute type 1 has an invalid length.
[  617.346428][T22297] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  617.355348][T22291] vxcan1 speed is unknown, defaulting to 1000
[  617.433144][T22299] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  617.625382][T22301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4457'.
[  617.689354][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4457'.
[  617.723426][T22304] bridge_slave_1: left allmulticast mode
[  617.739160][T22304] bridge_slave_1: left promiscuous mode
[  617.745617][T22304] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.779509][T22304] bridge_slave_0: left allmulticast mode
[  617.821655][T22304] bridge_slave_0: left promiscuous mode
[  617.827757][T22304] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.903074][T22304] bond0: (slave bridge0): Releasing backup interface
[  618.006591][T22291] lo speed is unknown, defaulting to 1000
[  618.049424][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  618.231714][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4459'.
[  618.251560][T22318] : entered promiscuous mode
[  618.403825][T22320] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4464'.
[  618.415157][T22320] netlink: zone id is out of range
[  618.441668][T22320] netlink: zone id is out of range
[  618.446867][T22320] netlink: zone id is out of range
[  618.461131][T22320] netlink: zone id is out of range
[  618.466395][T22320] netlink: get zone limit has 8 unknown bytes
[  618.631899][T22325] sctp: [Deprecated]: syz.2.4466 (pid 22325) Use of int in maxseg socket option.
[  618.631899][T22325] Use struct sctp_assoc_value instead
[  618.666698][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4466'.
[  618.707562][T22325] veth1_macvtap: left promiscuous mode
[  619.088527][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  619.168328][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4469'.
[  619.280114][T22340] macvlan3: entered allmulticast mode
[  619.294492][T22340] veth1_vlan: entered allmulticast mode
[  619.340979][T22340] veth1_vlan: left allmulticast mode
[  620.053399][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4477'.
[  620.082658][T22369] netlink: 'syz.1.4476': attribute type 29 has an invalid length.
[  620.097187][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4476'.
[  620.105003][T22370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4477'.
[  620.129132][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  620.594788][    C1] vcan0: j1939_tp_rxtimer: 0xffff888060fb1c00: rx timeout, send abort
[  620.785759][T22412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4492'.
[  620.801099][T22412] netlink: 'syz.3.4492': attribute type 10 has an invalid length.
[  620.827040][T22412] veth0_vlan: left promiscuous mode
[  620.835200][T22412] veth0_vlan: entered promiscuous mode
[  620.849937][T22412] team0: Device veth0_vlan failed to register rx_handler
[  621.094899][    C1] vcan0: j1939_tp_rxtimer: 0xffff888060fb2000: rx timeout, send abort
[  621.103761][    C1] vcan0: j1939_tp_rxtimer: 0xffff888060fb1c00: abort rx timeout. Force session deactivation
[  621.168655][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  621.185430][T22421] !
: renamed from dummy0 (while UP)
[  621.296149][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053d5dc00: rx timeout, send abort
[  621.603178][    C1] vcan0: j1939_tp_rxtimer: 0xffff888060fb2000: abort rx timeout. Force session deactivation
[  621.620802][T22435] netlink: 'syz.1.4499': attribute type 4 has an invalid length.
[  621.645967][ T5907] lo speed is unknown, defaulting to 1000
[  621.655190][T22435] netlink: 'syz.1.4499': attribute type 4 has an invalid length.
[  621.673184][ T5907] syz0: Port: 1 Link DOWN
[  621.677717][ T5907] lo speed is unknown, defaulting to 1000
[  621.688862][T22437] netlink: 'syz.1.4499': attribute type 4 has an invalid length.
[  621.711400][ T5907] lo speed is unknown, defaulting to 1000
[  621.717510][ T5907] syz0: Port: 1 Link ACTIVE
[  621.730295][T12948] lo speed is unknown, defaulting to 1000
[  621.732867][T22439] netlink: 'syz.2.4500': attribute type 10 has an invalid length.
[  621.755774][T22439] !
: entered promiscuous mode
[  621.764990][T22439] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  621.804477][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053d5dc00: abort rx timeout. Force session deactivation
[  622.209101][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  622.440221][T22479] siw: device registration error -23
[  622.479312][T22479] ipvlan1: entered promiscuous mode
[  622.491389][T22482] netlink: 'syz.3.4511': attribute type 4 has an invalid length.
[  622.506841][T22481] veth0_to_bridge: entered promiscuous mode
[  622.702658][T22487] __nla_validate_parse: 2 callbacks suppressed
[  622.702680][T22487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4514'.
[  623.200747][T22500] netlink: 'syz.4.4519': attribute type 9 has an invalid length.
[  623.210594][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4518'.
[  623.223217][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4519'.
[  623.258644][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  623.301894][T22500] netlink: 'syz.4.4519': attribute type 9 has an invalid length.
[  623.314527][T22503] netlink: 'syz.3.4520': attribute type 4 has an invalid length.
[  623.342580][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4519'.
[  623.387889][T22485] veth0_to_bridge: left promiscuous mode
[  623.405680][T22503] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.4520'.
[  623.451015][T22503] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4520'.
[  623.561061][T22505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4521'.
[  623.834740][T22524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4527'.
[  624.088204][T22533] erspan0: entered promiscuous mode
[  624.098086][T22533] vlan2: entered promiscuous mode
[  624.172189][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4530'.
[  624.289277][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  624.388523][T22546] netlink: 'syz.3.4534': attribute type 2 has an invalid length.
[  624.455998][T22538] netlink: 'syz.0.4531': attribute type 303 has an invalid length.
[  624.504340][T22550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4536'.
[  624.952356][T22565] vxcan1 speed is unknown, defaulting to 1000
[  625.328829][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  625.471668][T22585] : entered promiscuous mode
[  625.504340][T22572] vxcan1 speed is unknown, defaulting to 1000
[  625.504496][T22565] lo speed is unknown, defaulting to 1000
[  626.140311][T22572] lo speed is unknown, defaulting to 1000
[  626.140345][T22581] vxcan1 speed is unknown, defaulting to 1000
[  626.369568][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  626.758268][T22599] vxcan1 speed is unknown, defaulting to 1000
[  626.921935][T22600] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  626.957477][T22600] netlink: 'syz.1.4551': attribute type 1 has an invalid length.
[  627.005134][T22607] netlink: 'syz.4.4553': attribute type 12 has an invalid length.
[  627.125432][T22599] lo speed is unknown, defaulting to 1000
[  627.329074][T22581] lo speed is unknown, defaulting to 1000
[  627.408640][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  627.914965][T22614] __nla_validate_parse: 11 callbacks suppressed
[  627.914988][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4555'.
[  628.459296][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  628.969845][T22628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4557'.
[  629.021890][T22631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4557'.
[  629.040343][T22631] netlink: 'syz.4.4557': attribute type 1 has an invalid length.
[  629.085357][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4559'.
[  629.488963][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  629.952920][T22647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.997521][T22649] syzkaller0: entered promiscuous mode
[  630.038662][T22649] syzkaller0: entered allmulticast mode
[  630.307959][T22643] tipc: Resetting bearer <eth:syzkaller0>
[  630.391326][T22643] tipc: Disabling bearer <eth:syzkaller0>
[  630.462975][T22653] vxcan1 speed is unknown, defaulting to 1000
[  630.487369][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'.
[  630.529388][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  631.004076][T22670] syzkaller0: entered promiscuous mode
[  631.028746][T22670] syzkaller0: entered allmulticast mode
[  631.086718][T22670] macsec0: entered promiscuous mode
[  631.149858][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4572'.
[  631.469434][T22653] lo speed is unknown, defaulting to 1000
[  631.568673][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  632.252396][T22700] IPv6: addrconf: prefix option has invalid lifetime
[  632.508611][T22708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4578'.
[  632.609253][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  632.691626][T22712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4580'.
[  633.183484][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'.
[  633.203518][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'.
[  633.241447][T22733] netlink: 'syz.2.4586': attribute type 11 has an invalid length.
[  633.542432][T22745] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  633.648811][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  633.981776][T22758] vxcan1 speed is unknown, defaulting to 1000
[  634.088077][T22765] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4595'.
[  634.124509][T22765] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  634.147915][T22765] openvswitch: netlink: Message has 1 unknown bytes.
[  634.328216][T22758] lo speed is unknown, defaulting to 1000
[  634.689318][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  634.764154][T22780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4599'.
[  634.850093][T22780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4599'.
[  635.030045][T22790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4601'.
[  635.058636][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4601'.
[  635.729583][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  635.746137][T22800] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4604'.
[  636.310100][T22819] syzkaller1: entered promiscuous mode
[  636.320233][T22819] syzkaller1: entered allmulticast mode
[  636.378022][T22821] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4611'.
[  636.400556][T22822] netlink: 'syz.1.4611': attribute type 10 has an invalid length.
[  636.416909][T22822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4611'.
[  636.434070][T22822] dummy0: entered allmulticast mode
[  636.443372][T22822] bridge0: port 1(dummy0) entered blocking state
[  636.456192][T22822] bridge0: port 1(dummy0) entered disabled state
[  636.477794][T22822] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  636.636903][ T1114] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  636.779216][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  637.808631][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  637.947185][T22866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.954549][T22866] IPv6: NLM_F_CREATE should be set when creating new route
[  638.032230][T22871] siw: device registration error -23
[  638.215489][T22877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.265279][T22877] __nla_validate_parse: 5 callbacks suppressed
[  638.265304][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4627'.
[  638.713554][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4634'.
[  638.849113][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  639.385383][T22914] vxcan1 speed is unknown, defaulting to 1000
[  639.889675][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  640.387235][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4646'.
[  640.578249][T22914] lo speed is unknown, defaulting to 1000
[  640.929282][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  640.983435][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4649'.
[  641.288079][T22957] vxcan1 speed is unknown, defaulting to 1000
[  641.968724][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  642.118249][T22957] lo speed is unknown, defaulting to 1000
[  642.295383][T22966] netlink: 'syz.3.4653': attribute type 39 has an invalid length.
[  642.711628][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4654'.
[  642.890655][T22974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4656'.
[  643.009060][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  643.041557][T22976] netdevsim netdevsim3: Direct firmware load for 2Q failed with error -2
[  643.065120][T22976] netdevsim netdevsim3: Falling back to sysfs fallback for: 2Q
[  643.330922][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4659'.
[  643.409622][T22991] netlink: 'syz.3.4661': attribute type 10 has an invalid length.
[  643.491878][T22991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  643.590231][T22991] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  643.657391][T12946] hid-generic 0005:16C0:5507.0005: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa
[  644.048522][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  644.304496][T23009] ipvlan0: entered promiscuous mode
[  644.335553][T23009] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  644.423168][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'.
[  644.526053][T23022] netlink: 'syz.1.4669': attribute type 1 has an invalid length.
[  644.626288][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4671'.
[  644.995884][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'.
[  645.047093][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4674'.
[  645.089195][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  645.175008][T23056] netlink: 'syz.4.4678': attribute type 5 has an invalid length.
[  645.252834][T23058] netlink: 'syz.4.4678': attribute type 4 has an invalid length.
[  646.097623][T23078] sctp: [Deprecated]: syz.0.4684 (pid 23078) Use of int in max_burst socket option deprecated.
[  646.097623][T23078] Use struct sctp_assoc_value instead
[  646.138516][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  647.179177][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  648.224711][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  648.580859][T23046] vxcan1 speed is unknown, defaulting to 1000
[  648.607815][T23088] pimreg: entered allmulticast mode
[  648.624425][T23090] pimreg: left allmulticast mode
[  648.746138][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4687'.
[  648.916707][T23102] 8021q: VLANs not supported on vxcan1
[  649.181226][T23117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4688'.
[  649.198554][T20547] Bluetooth: hci3: link tx timeout
[  649.204450][T20547] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  649.231207][ T5161] Bluetooth: hci3: link tx timeout
[  649.236385][ T5161] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  649.249145][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  649.256682][ T5161] Bluetooth: hci3: link tx timeout
[  649.262018][ T5161] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  649.269952][ T5161] Bluetooth: hci3: link tx timeout
[  649.275113][ T5161] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  649.284507][ T5161] Bluetooth: hci3: link tx timeout
[  649.294091][ T5161] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  649.302262][ T5161] Bluetooth: hci3: link tx timeout
[  649.308309][ T5161] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  649.368659][T23117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4688'.
[  649.412312][T23112] vxcan1 speed is unknown, defaulting to 1000
[  649.415028][T23046] lo speed is unknown, defaulting to 1000
[  650.110756][T23137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4697'.
[  650.120078][T23136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4697'.
[  650.288500][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  650.519560][T23133] vxcan1 speed is unknown, defaulting to 1000
[  650.519758][T23112] lo speed is unknown, defaulting to 1000
[  650.817252][T23143] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4698'.
[  650.841013][T23143] netlink: 380 bytes leftover after parsing attributes in process `syz.2.4698'.
[  651.249303][ T5161] Bluetooth: hci3: command 0x0405 tx timeout
[  651.330248][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  651.456553][T23133] lo speed is unknown, defaulting to 1000
[  652.069563][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  652.158217][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  652.212520][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  652.368785][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  652.629087][T23174] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.638650][T23174] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.404440][T23174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.412972][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  653.494774][T23174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  653.785174][T23174] __nla_validate_parse: 47 callbacks suppressed
[  653.785198][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.819730][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.845964][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.870752][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.892841][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.921451][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.941012][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.963145][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  653.995937][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  654.006726][T23174] gre1: left allmulticast mode
[  654.012431][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4708'.
[  654.022966][T23174] tipc: Resetting bearer <eth:syzkaller0>
[  654.029424][T23174] syzkaller0: left promiscuous mode
[  654.034751][T23174] syzkaller0: left allmulticast mode
[  654.044968][T23174] veth3: left promiscuous mode
[  654.057288][T23174] hsr1: left allmulticast mode
[  654.066253][T23174] syz_tun: left allmulticast mode
[  654.072169][T23174] batadv_slave_0: left allmulticast mode
[  654.137109][T23174] ipvlan0: left promiscuous mode
[  654.214591][T12714] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  654.234751][T12714] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.246246][T12714] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  654.261583][T12714] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  654.271044][T12714] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.280450][T12714] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  654.342613][T12714] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  654.353701][T12714] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.364728][T12714] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  654.382416][T12714] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  654.398861][T12714] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  654.407882][T12714] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  654.448621][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  654.641250][T23218] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  655.199567][T23245] bridge_slave_0: left allmulticast mode
[  655.205373][T23245] bridge_slave_0: left promiscuous mode
[  655.227527][T23245] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.258977][T23245] bridge_slave_1: left allmulticast mode
[  655.276017][T23245] bridge_slave_1: left promiscuous mode
[  655.289192][T23245] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.311105][T23245] bond0: (slave bond_slave_0): Releasing backup interface
[  655.326155][T23245] bond0: (slave bond_slave_1): Releasing backup interface
[  655.337926][T23245] team0: Port device team_slave_0 removed
[  655.347833][T23245] team0: Port device team_slave_1 removed
[  655.354763][T23245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  655.369766][T23245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  655.380089][T23245] bond0: (slave wlan1): Releasing backup interface
[  655.390562][T23245] bond1: (slave veth3): Releasing active interface
[  655.499322][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  655.722822][T23263] vxcan1 speed is unknown, defaulting to 1000
[  656.275576][T23263] lo speed is unknown, defaulting to 1000
[  656.327340][T23297] netlink: 'syz.3.4733': attribute type 1 has an invalid length.
[  656.404196][T23297] 8021q: adding VLAN 0 to HW filter on device bond5
[  656.528936][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  656.683940][T23312] pim6reg1: entered promiscuous mode
[  656.708647][T23312] pim6reg1: entered allmulticast mode
[  656.933240][T23325] netlink: 'syz.0.4738': attribute type 13 has an invalid length.
[  656.943713][T23325] netlink: 'syz.0.4738': attribute type 17 has an invalid length.
[  657.096315][T23325] erspan0: entered promiscuous mode
[  657.352200][T23325] 8021q: adding VLAN 0 to HW filter on device team0
[  657.363050][T23325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  657.623834][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  658.244451][T23367] syzkaller1: entered promiscuous mode
[  658.266925][T23367] syzkaller1: entered allmulticast mode
[  658.346252][T23364] vxcan1 speed is unknown, defaulting to 1000
[  658.475678][T23377] netlink: 'syz.0.4754': attribute type 13 has an invalid length.
[  658.497392][T23377] netlink: 'syz.0.4754': attribute type 17 has an invalid length.
[  658.558368][T23377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  658.689110][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  659.026625][T23376] vxcan1 speed is unknown, defaulting to 1000
[  659.105987][T23364] lo speed is unknown, defaulting to 1000
[  659.355630][T23401] netlink: 'syz.3.4762': attribute type 1 has an invalid length.
[  659.520976][T23401] 8021q: adding VLAN 0 to HW filter on device bond6
[  659.657755][T23376] lo speed is unknown, defaulting to 1000
[  659.729211][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  659.780176][T23408] __nla_validate_parse: 39 callbacks suppressed
[  659.780202][T23408] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4764'.
[  659.842362][T23408] 0·: renamed from hsr0 (while UP)
[  659.870603][T23408] 0·: entered allmulticast mode
[  659.893393][T23408] hsr_slave_0: entered allmulticast mode
[  659.901621][T23408] hsr_slave_1: entered allmulticast mode
[  659.907993][T23408] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  660.199200][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4768'.
[  660.253736][T23431] bond0: entered promiscuous mode
[  660.263685][T23436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  660.269200][T23423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4768'.
[  660.292716][T23431] bond_slave_0: entered promiscuous mode
[  660.303249][T23431] bond_slave_1: entered promiscuous mode
[  660.324992][T23431] bond0: left promiscuous mode
[  660.345389][T23431] bond_slave_0: left promiscuous mode
[  660.361300][T23431] bond_slave_1: left promiscuous mode
[  660.383890][T23433] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  660.472313][T23437] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.480158][T23437] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.489690][T23437] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ea: 0000 [#1] SMP KASAN PTI
[  660.501631][T23437] KASAN: probably user-memory-access in range [0x00000000ffff0f50-0x00000000ffff0f57]
[  660.511323][T23437] CPU: 1 UID: 0 PID: 23437 Comm: syz.3.4773 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  660.523057][T23437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  660.533134][T23437] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  660.538882][T23437] Code: 89 e9 c4 f7 c6 05 13 97 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 da d3 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 44 0c 28 f8 4d 8b 2c 24 4d 39 f5
[  660.558502][T23437] RSP: 0018:ffffc90003646898 EFLAGS: 00010202
[  660.564589][T23437] RAX: ffffffff89fac6ee RBX: 000000001fffe1ea RCX: ffff888027120000
[  660.572569][T23437] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  660.580549][T23437] RBP: ffff888026a0f430 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4
[  660.588533][T23437] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0f50
[  660.596525][T23437] R13: dffffc0000000000 R14: ffff888026a0f200 R15: 1ffff11004d41e86
[  660.604506][T23437] FS:  00007f245dff56c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  660.613445][T23437] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  660.620051][T23437] CR2: 000000110c398464 CR3: 00000000956fe000 CR4: 00000000003526f0
[  660.628037][T23437] Call Trace:
[  660.631325][T23437]  <TASK>
[  660.634262][T23437]  br_multicast_leave_snoopers+0xb6/0x1c0
[  660.640005][T23437]  ? __pfx___timer_delete_sync+0x10/0x10
[  660.645646][T23437]  ? __pfx_br_multicast_leave_snoopers+0x10/0x10
[  660.651989][T23437]  br_dev_stop+0x8a/0x180
[  660.656330][T23437]  ? __pfx_br_dev_stop+0x10/0x10
[  660.661278][T23437]  __dev_close_many+0x361/0x6f0
[  660.666143][T23437]  ? __pfx___dev_close_many+0x10/0x10
[  660.671530][T23437]  __dev_change_flags+0x2c7/0x6d0
[  660.676565][T23437]  ? __pfx___dev_change_flags+0x10/0x10
[  660.682130][T23437]  ? netif_state_change+0x256/0x3a0
[  660.687359][T23437]  ? __pfx_netif_state_change+0x10/0x10
[  660.693034][T23437]  ? finish_task_switch+0x266/0x950
[  660.698255][T23437]  netif_change_flags+0x88/0x1a0
[  660.703221][T23437]  do_setlink+0xc55/0x41c0
[  660.707751][T23437]  ? __kernel_text_address+0xd/0x40
[  660.712989][T23437]  ? __lock_acquire+0xab9/0xd20
[  660.718212][T23437]  ? __pfx_do_setlink+0x10/0x10
[  660.723076][T23437]  ? __lock_acquire+0xab9/0xd20
[  660.727951][T23437]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  660.733868][T23437]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.739100][T23437]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  660.745005][T23437]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  660.751357][T23437]  ? rcu_is_watching+0x15/0xb0
[  660.756159][T23437]  ? __mutex_lock+0xd0d/0x1340
[  660.760937][T23437]  ? __mutex_lock+0x5b6/0x1340
[  660.765735][T23437]  ? rtnl_newlink+0x8db/0x1c70
[  660.770529][T23437]  ? __pfx___mutex_lock+0x10/0x10
[  660.775570][T23437]  ? ns_capable+0x8a/0xf0
[  660.779916][T23437]  ? rtnl_link_get_net_capable+0x16a/0x350
[  660.785731][T23437]  rtnl_newlink+0x149f/0x1c70
[  660.790427][T23437]  ? netlink_sendmsg+0x805/0xb30
[  660.795398][T23437]  ? __pfx_rtnl_newlink+0x10/0x10
[  660.798545][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  660.800537][T23437]  ? kasan_quarantine_put+0xdd/0x220
[  660.812659][T23437]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.817880][T23437]  ? nlmon_xmit+0xb0/0x100
[  660.822320][T23437]  ? kmem_cache_free+0x18f/0x400
[  660.827343][T23437]  ? __local_bh_enable_ip+0x12d/0x1c0
[  660.832733][T23437]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.838216][T23437]  ? __local_bh_enable_ip+0x12d/0x1c0
[  660.843610][T23437]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  660.849348][T23437]  ? __dev_queue_xmit+0x27b/0x3b50
[  660.854476][T23437]  ? __lock_acquire+0xab9/0xd20
[  660.859354][T23437]  ? __pfx_rtnl_newlink+0x10/0x10
[  660.864392][T23437]  rtnetlink_rcv_msg+0x7cc/0xb70
[  660.869346][T23437]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  660.874470][T23437]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  660.879948][T23437]  ? ref_tracker_free+0x63a/0x7d0
[  660.884985][T23437]  ? __asan_memcpy+0x40/0x70
[  660.889589][T23437]  ? __pfx_ref_tracker_free+0x10/0x10
[  660.894975][T23437]  netlink_rcv_skb+0x205/0x470
[  660.899813][T23437]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  660.905293][T23437]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  660.910602][T23437]  ? netlink_deliver_tap+0x2e/0x1b0
[  660.915823][T23437]  netlink_unicast+0x82c/0x9e0
[  660.920608][T23437]  ? __pfx_netlink_unicast+0x10/0x10
[  660.925909][T23437]  ? netlink_sendmsg+0x642/0xb30
[  660.930873][T23437]  ? skb_put+0x11b/0x210
[  660.935297][T23437]  netlink_sendmsg+0x805/0xb30
[  660.940259][T23437]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.945560][T23437]  ? aa_sock_msg_perm+0x94/0x160
[  660.950511][T23437]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  660.955807][T23437]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.961133][T23437]  __sock_sendmsg+0x219/0x270
[  660.965822][T23437]  ____sys_sendmsg+0x505/0x830
[  660.970598][T23437]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.975902][T23437]  ? import_iovec+0x74/0xa0
[  660.980444][T23437]  ___sys_sendmsg+0x21f/0x2a0
[  660.985157][T23437]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.990393][T23437]  ? __fget_files+0x2a/0x420
[  660.995004][T23437]  ? __fget_files+0x3a0/0x420
[  660.999697][T23437]  __x64_sys_sendmsg+0x19b/0x260
[  661.004660][T23437]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  661.010136][T23437]  ? rcu_is_watching+0x15/0xb0
[  661.015008][T23437]  ? do_syscall_64+0xbe/0x3b0
[  661.019704][T23437]  do_syscall_64+0xfa/0x3b0
[  661.024227][T23437]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.029536][T23437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.035613][T23437]  ? clear_bhb_loop+0x60/0xb0
[  661.040304][T23437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.046218][T23437] RIP: 0033:0x7f245d18eb69
[  661.050642][T23437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  661.070270][T23437] RSP: 002b:00007f245dff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  661.078699][T23437] RAX: ffffffffffffffda RBX: 00007f245d3b6080 RCX: 00007f245d18eb69
[  661.086810][T23437] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  661.094793][T23437] RBP: 00007f245d211df1 R08: 0000000000000000 R09: 0000000000000000
[  661.102788][T23437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  661.110779][T23437] R13: 0000000000000000 R14: 00007f245d3b6080 R15: 00007ffd7c3e6558
[  661.118772][T23437]  </TASK>
[  661.121813][T23437] Modules linked in:
[  661.127977][T23437] ---[ end trace 0000000000000000 ]---
[  661.134451][T23437] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  661.140524][T23437] Code: 89 e9 c4 f7 c6 05 13 97 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 da d3 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 44 0c 28 f8 4d 8b 2c 24 4d 39 f5
[  661.161057][T23437] RSP: 0018:ffffc90003646898 EFLAGS: 00010202
[  661.167360][T23437] RAX: ffffffff89fac6ee RBX: 000000001fffe1ea RCX: ffff888027120000
[  661.175780][T23437] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  661.185284][T23437] RBP: ffff888026a0f430 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4
[  661.194567][T23437] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0f50
[  661.202699][T23437] R13: dffffc0000000000 R14: ffff888026a0f200 R15: 1ffff11004d41e86
[  661.210944][T23437] FS:  00007f245dff56c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  661.220221][T23437] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  661.226849][T23437] CR2: 0000200000012000 CR3: 00000000956fe000 CR4: 00000000003526f0
[  661.235407][T23437] Kernel panic - not syncing: Fatal exception
[  661.241952][T23437] Kernel Offset: disabled
[  661.246381][T23437] Rebooting in 86400 seconds..