last executing test programs:

3m45.00848997s ago: executing program 32 (id=984):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7, @private1}], 0x1c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xc3, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x500}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc6a8eb07aaa917e31a6f8e10a53bbf9c73e5d07"}}}}}, 0xd1)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e22, 0xe, @mcast2, 0x1}, {0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1, {[0xfffffffe, 0x3ff, 0x4, 0x10, 0x7fffffff, 0x9, 0x4, 0x5c3]}}, 0x5c)
setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, 0x0, 0x20008894)
syz_genetlink_get_family_id$nl80211(0x0, r4)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x3}, 0x80000000}], 0x4, 0x20, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r7, 0x0, 0xb9b}, 0x18)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m38.318903128s ago: executing program 2 (id=1706):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@const={0x0, 0x0, 0x0, 0xa, 0x5}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x0, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000100)=""/28, 0x3d, 0x1c, 0x0, 0x1, 0x10000, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f0000000340)={&(0x7f0000000200)=""/197, 0xc5, 0x0, &(0x7f0000000300)=""/38, 0x26}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x6e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x7, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m38.204550763s ago: executing program 2 (id=1708):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x62040200)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
ppoll(&(0x7f0000000480)=[{r1}, {r0, 0x8506}, {r0, 0x1000}, {r3, 0x5100}, {0xffffffffffffffff, 0x1000}, {r3, 0x200}, {r0, 0x20}, {0xffffffffffffffff, 0xb080}, {r0, 0x41c8}], 0x9, &(0x7f0000000540), &(0x7f0000000580)={[0xfffffffffffffffa]}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000006bf200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000005c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8c0}, 0x90)
syz_genetlink_get_family_id$tipc2(0x0, r6)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r10, 0x0, 0x0}, 0x10)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet6_tcp_buf(r11, 0x6, 0x12, 0x0, &(0x7f00000000c0))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0)
connect$qrtr(r10, &(0x7f0000000440)={0x2a, 0x4, 0x7ffe}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB="000000002f95abbe480012800e00010069703667726574617000000034000280", @ANYRES32=r12, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0)

2m33.586284577s ago: executing program 2 (id=1749):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000027bd703f5ee7de26f3e91daf3825ae0de44f1f090000b2eee0585c0500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m33.382734841s ago: executing program 2 (id=1750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000080))
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x44844)

2m33.285689292s ago: executing program 2 (id=1751):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002ab97000ffdbdf2504000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xc1, 0x0, 0xffffffffffffffff, 0x4b21e6b7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x38, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
pipe(&(0x7f0000000740)={<r9=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx  \x00'}, 0x20)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xa9ca}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@u}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x2c, &(0x7f0000000380)=""/44, 0x41000, 0x65, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x101, 0xf}, 0x10, r8, r9, 0x4, &(0x7f00000008c0)=[r10, r11], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x8}, {0x5, 0x2, 0xe, 0xa}, {0x0, 0x3, 0x7, 0x8}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0x7, @void, @value}, 0x94)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r3, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x30}, 0x4, 0x700000000000000}, 0x8850)
r12 = socket(0x10, 0x80003, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r13, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @multicast})
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'lo\x00', <r15=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x14000800}, 0x0)

2m32.976208911s ago: executing program 2 (id=1754):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x70}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/186, 0xba}, 0x2}], 0x2, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38)
sendto$inet6(r0, &(0x7f0000000140)="a4b0f94d050045afa67c3624f433fccc996f8e4e6b3e4223b6e076744b72d7202e537607f73ecc155fd65104595bd10a7ae34075a0ba4f10cb30d18fdb6e079e6594cd4efc019f1cc85a857e4ab4179da7b6a80dcb2f70eb88a51d725a2bfdd24195871a45e61e1804f7a0f5d9b36ae4b72a407876e6214c69c03e5400"/136, 0x88, 0x200440d5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x1c)
close(r0)

2m29.844824805s ago: executing program 0 (id=1773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000080))
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x44844)

2m29.75548474s ago: executing program 0 (id=1775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
write$cgroup_devices(r2, 0x0, 0xffdd) (async, rerun: 32)
recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="ed3a69ce83280408590bf34733ad84d446551f054e0dffb0e9b0157ce97e263db6b991946c804dad9325e11d734d7832923903c947eb", 0x36}], 0x1, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x82, 0x0, 0x3, [0x4, 0xe, 0x1]}, @timestamp_prespec={0x44, 0xc, 0x23, 0x3, 0x0, [{@empty, 0x8}]}, @rr={0x7, 0x7, 0xa0, [@rand_addr=0x64010101]}]}}}], 0x50}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000381c1300000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000f0120380ec1200800800034000000002d4120280c90001"], 0x13b0}}, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) (async)
syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0)
r4 = socket(0x18, 0x0, 0x0)
connect$pppoe(r4, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x1f, &(0x7f0000000780)=@raw=[@alu={0x7, 0x0, 0xa, 0x4, 0x7, 0x50, 0x1}, @call={0x85, 0x0, 0x0, 0x6b}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
sendto$inet(r7, &(0x7f0000000300)="9cc3090081", 0x5, 0x28028894, 0x0, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async, rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (rerun: 32)

2m29.396313064s ago: executing program 0 (id=1779):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x8880)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000640)={0x6, 0x18, '\x00', 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000640)={0x6, 0x18, '\x00', 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0]})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x4804c2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000000b0000005c"], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

2m29.254547253s ago: executing program 0 (id=1781):
unshare(0x480) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f0ff0000000000000000200085dfa3cbfeee000095fb2e2c946f551ae2ecd977528e65ebdec7a2fd18458e9af868d452b2"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x200}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}, 0x7}], 0x1, 0x40000103, &(0x7f0000000180)={0x0, 0x3938700}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000700000000000004050000000000005f61102e6100d33f2e5d000028c2a3a31d25ad7c515218c9"], 0x0, 0x2d, 0x0, 0x1, 0x7f, 0x0, @void, @value}, 0x28)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0x3, 0x0, 0x2, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8, 0x16e808e8, 0x7ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x4, 0x4863, 0xf2ef}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x4, 0x2, 0x5, 0x3}}]}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x150, 0x1403, 0x4, 0x70bd2b, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006"], 0x48}}, 0x0)
unshare(0x20000000)

2m28.90776046s ago: executing program 0 (id=1785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x24}}, 0x44844)

2m28.906159762s ago: executing program 0 (id=1788):
socket(0x1, 0x803, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair(0x22, 0x6, 0x1, &(0x7f00000000c0))
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m17.768354466s ago: executing program 33 (id=1754):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x70}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/186, 0xba}, 0x2}], 0x2, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38)
sendto$inet6(r0, &(0x7f0000000140)="a4b0f94d050045afa67c3624f433fccc996f8e4e6b3e4223b6e076744b72d7202e537607f73ecc155fd65104595bd10a7ae34075a0ba4f10cb30d18fdb6e079e6594cd4efc019f1cc85a857e4ab4179da7b6a80dcb2f70eb88a51d725a2bfdd24195871a45e61e1804f7a0f5d9b36ae4b72a407876e6214c69c03e5400"/136, 0x88, 0x200440d5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x1c)
close(r0)

2m13.903059825s ago: executing program 34 (id=1788):
socket(0x1, 0x803, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair(0x22, 0x6, 0x1, &(0x7f00000000c0))
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m15.206131352s ago: executing program 5 (id=2356):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r0, 0x1ad72f7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = accept4$netrom(r0, 0x0, 0x0, 0x80000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x7f, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', r5, 0x29, 0xa8, 0xff, 0xfffffa62, 0x1, @mcast1, @loopback, 0x0, 0x0, 0x3, 0x8}})
writev(r3, &(0x7f00000001c0), 0x7)

1m14.124126129s ago: executing program 5 (id=2364):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x40}}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8000, 0x7d}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)

1m13.826469891s ago: executing program 5 (id=2370):
r0 = socket$inet6_sctp(0xa, 0xc02e0dc8ea9ac7c2, 0x84)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x80000000}) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x80000000})
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x800)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0)

1m13.585961205s ago: executing program 5 (id=2373):
r0 = socket$inet6(0xa, 0x4, 0x3e)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd}}], 0x18}}], 0x1, 0x4000010)
r1 = socket(0x2, 0x3, 0x8)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300016e994fde440113e90005"], 0x14}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0)
sendto$inet(r1, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d8008000c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x405, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2042a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x4c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvfrom$l2tp6(r1, 0x0, 0x0, 0x40002140, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x20)

1m13.214346091s ago: executing program 5 (id=2375):
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x8040480)
unshare(0x2a020480)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg0\x00'})
recvfrom$unix(r0, &(0x7f0000000180)=""/148, 0x94, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4)
sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xcc, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6e0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9bd}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0xffffffce}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x5, 0x0, &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)={@fallback, 0xffffffffffffffff, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r8, 0x0)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x9)
bind$ax25(r9, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
writev(r9, &(0x7f0000002480)=[{0x0}], 0x1)

1m12.822482789s ago: executing program 5 (id=2379):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x24000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
socket(0x1, 0x803, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100021002cbd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="80310000000000001400030076657468315f6d61637674617000000014001680100001800c000300bd0000e0"], 0x48}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021803001b0000000000000000000000050005006c0000000a004e2000000003fe8000000000000000000000000000111b4300000000000008001200feff00000100000000000000060000000000000000000000000000007f000001000000000000000000000000fc01000000000000000000000000000005000600008000000a004e2100000005ff0200000000000000000000000000010300000000000000070019"], 0xd8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062013400000000009500000000000000ac8835e3c16711578e3116dae76c200b3ed5036d43c0517699be014078d664ddd8086ccb2ea835d78accd596d3978262bcd1710893ef44eafe8a7153d1646ed69ccac0b92b3dde3faa4aa5d36c9bd9c971f7e04a7f0c864edbcdf369988d1ec3218c809bc42798412470d8f8cc4c1c96dd02c3f73e39db534abe41b739f00f862dc8bbd8b00d423157b20e21f8cff5bb21c3753ca7dc5737b0a60856a8add8554b0e33da3ba7f1fcf4f13c528b421538432462e5be2edc2fd22ffb0abcbdfdf1e583e9918e4a2ddcd8"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)

1m9.958929203s ago: executing program 4 (id=2397):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c02000019000100000000000000000400000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

1m9.751941725s ago: executing program 4 (id=2400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="050000000000fdffffff08000300", @ANYRES32, @ANYBLOB="08000500060000000a00e800", @ANYRESHEX], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810)

1m9.558986101s ago: executing program 4 (id=2401):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
sendmsg$sock(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@xdp={0x2c, 0x1, r2, 0x16}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="1f088b8ebbd6110fe4bf50bcad902a26cf4db3fe8b95c7cbb486aa60d30e28ed83ab58e30a667fb8e78a5d17e9365e586097f4fd34fb9f06977fad93a4fdeb2e21a360fc5717dddeb3f4a5c28a8dd39bec81964ee376a0b67a454dac660964b77aab1061c6ba9005d4723f5f82c3f9c300dcb95373c9b87a23b27e1aad895d79121b7e6f13df56643abe0eaf9063c77dcdd689ad", 0x94}], 0x1, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}, 0x4000000)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x2010, r1}, 0x18)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000440)={r1, r3})

1m8.622380128s ago: executing program 4 (id=2408):
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0x8})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) (async)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@deltaction={0xe8, 0x31, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x11) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@deltaction={0xe8, 0x31, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
splice(r6, &(0x7f0000000480)=0x280000, r1, &(0x7f00000004c0)=0x4, 0xbb, 0x0) (async)
splice(r6, &(0x7f0000000480)=0x280000, r1, &(0x7f00000004c0)=0x4, 0xbb, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffff597, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffff597, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000580)={<r8=>0x0, @remote, @private}, &(0x7f00000005c0)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x7, 0x7, 0x6, 0x28844, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @value=r2, @void, @void, @value}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r3)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x170, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fd337ebd5f45d8611a921ac8e8c108b38fe137d5c616c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "7b1260a304657f6c7c964a8270e9046a1f947fde7f178bad55db44e2d3a1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8800}, 0x11)
r10 = socket$inet(0x2, 0xa, 0xeb2f)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r2)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xcc, r11, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}}, 0x20000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x3}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xd, 0x2}, {0xa, 0x4}]}]}, {0x0, [0x0]}}, &(0x7f0000000e80)=""/172, 0x5f, 0xac, 0x0, 0xfffffffb, 0x0, @void, @value}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x3}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xd, 0x2}, {0xa, 0x4}]}]}, {0x0, [0x0]}}, &(0x7f0000000e80)=""/172, 0x5f, 0xac, 0x0, 0xfffffffb, 0x0, @void, @value}, 0x28)
sendmsg$802154_dgram(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000001000)={&(0x7f0000000fc0)="a8a09b9707debea20073c4c62fe521c8425c5cc74b11b61c6079e8cb493a1e5c1d394a459e43f9c25690c4f5412e90c4137937ec1324bf85ce", 0x39}, 0x1, 0x0, 0x0, 0x808}, 0x2) (async)
sendmsg$802154_dgram(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000001000)={&(0x7f0000000fc0)="a8a09b9707debea20073c4c62fe521c8425c5cc74b11b61c6079e8cb493a1e5c1d394a459e43f9c25690c4f5412e90c4137937ec1324bf85ce", 0x39}, 0x1, 0x0, 0x0, 0x808}, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r2}, &(0x7f0000001080), &(0x7f00000010c0)=r1}, 0x20)
connect$inet(r10, &(0x7f0000001140)={0x2, 0x4e24, @broadcast}, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001180)={<r12=>0x0, 0x5, 0xfffffffffffffffc, 0x1})
bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r10}, 0x8) (async)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r10}, 0x8)
ioctl$EXT4_IOC_MIGRATE(r13, 0x6609)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, &(0x7f00000015c0)={r12, 0x800, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), r1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), r1)

1m8.529346033s ago: executing program 4 (id=2410):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c02000019000100000000000000000500000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

1m8.430883969s ago: executing program 4 (id=2412):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0xdc88c5ff2698ccd0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r3, 0x89e3)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
r4 = socket(0x5, 0x3, 0x0)
getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000008000003c0012800b00010062726964676500072c0002950c002200090001000000000008001d000300000005002900000000000c002e000100000000100000080003"], 0x6c}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd13, 0x3, 0x9}, 0xfffffffffffffd27)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002"], 0x2c}}, 0x0)

57.762611765s ago: executing program 35 (id=2379):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x24000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
socket(0x1, 0x803, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100021002cbd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="80310000000000001400030076657468315f6d61637674617000000014001680100001800c000300bd0000e0"], 0x48}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021803001b0000000000000000000000050005006c0000000a004e2000000003fe8000000000000000000000000000111b4300000000000008001200feff00000100000000000000060000000000000000000000000000007f000001000000000000000000000000fc01000000000000000000000000000005000600008000000a004e2100000005ff0200000000000000000000000000010300000000000000070019"], 0xd8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062013400000000009500000000000000ac8835e3c16711578e3116dae76c200b3ed5036d43c0517699be014078d664ddd8086ccb2ea835d78accd596d3978262bcd1710893ef44eafe8a7153d1646ed69ccac0b92b3dde3faa4aa5d36c9bd9c971f7e04a7f0c864edbcdf369988d1ec3218c809bc42798412470d8f8cc4c1c96dd02c3f73e39db534abe41b739f00f862dc8bbd8b00d423157b20e21f8cff5bb21c3753ca7dc5737b0a60856a8add8554b0e33da3ba7f1fcf4f13c528b421538432462e5be2edc2fd22ffb0abcbdfdf1e583e9918e4a2ddcd8"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)

53.053558783s ago: executing program 36 (id=2412):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0xdc88c5ff2698ccd0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r3, 0x89e3)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
r4 = socket(0x5, 0x3, 0x0)
getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000008000003c0012800b00010062726964676500072c0002950c002200090001000000000008001d000300000005002900000000000c002e000100000000100000080003"], 0x6c}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd13, 0x3, 0x9}, 0xfffffffffffffd27)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002"], 0x2c}}, 0x0)

38.214899645s ago: executing program 6 (id=2605):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100005, @void, @value}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036a8d500320180000020d98a61a90021e9bf00"/68, 0x0, 0x401, 0x44000000, 0x2f5, 0xa1, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51", 0x1, 0xfffffffd, 0x2}, 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000280)=""/168, 0xa8})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x8000000008) (rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='rdma.current\x00', 0x275a, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x4a0280, 0x0)
connect$vsock_stream(r2, &(0x7f0000000380)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r4, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x20000880)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20048040) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40010)

33.182582047s ago: executing program 6 (id=2653):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0x0)

32.933771078s ago: executing program 6 (id=2654):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r0, &(0x7f0000000f40)="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", 0x201, 0x4008001, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
listen(0xffffffffffffffff, 0x8001)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x4, 0x200, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x10001, 0x80000000, 0x6, 0x8, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x80}]}}}]}, 0x64}}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x26020480)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9)
sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="13092abd7000ffdbdf25210000000c000500000200000000000009001f00707420adfc"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r8)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRES8=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x24040840)

32.698335283s ago: executing program 6 (id=2657):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}, 0x29}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x20000000)
poll(&(0x7f0000000080)=[{r0, 0x46a8}], 0x1, 0x400)
shutdown(r0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x4030a00)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000400)=0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r6, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)

31.673304262s ago: executing program 6 (id=2665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0, 0x40, 0x10, 0x101, 0x1ff, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, {[@lsrr={0x83, 0xf, 0xfe, [@remote, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x3, [{@multicast2, 0xd}]}, @end, @timestamp={0x44, 0x1c, 0x22, 0x0, 0xa, [0x3, 0x968f, 0x100, 0x7, 0x2, 0x1c00000]}, @timestamp={0x44, 0x8, 0xfd, 0x0, 0xb, [0x1]}, @end, @noop, @timestamp_addr={0x44, 0x3c, 0x81, 0x1, 0x9, [{@empty, 0xba}, {@multicast2, 0x868c1c6}, {@multicast1, 0xfffffffc}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x389}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}]}, &(0x7f0000000140)=0x10) (async)
listen(r2, 0xfff)
accept$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0xfffffffffffffec6) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x4, 0xfb, 0x7f, 0x8001, 0x38, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7, 0x9, 0x44}})

31.416300679s ago: executing program 6 (id=2668):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r5=>r2})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x7f, 0x6, 0x2, 0x0, 0x3ff}, 0x14)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x0) (async)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x7f, 0x6, 0x2, 0x0, 0x3ff}, 0x14) (async)

22.562826868s ago: executing program 8 (id=2724):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0)

22.496982569s ago: executing program 8 (id=2725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017c094eb881e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x60}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
gettid()
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
r8 = socket(0x28, 0x805, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc050}, 0x4080)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003240)=@newqdisc={0x8c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0xae7}}]}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6}}, {0x4}}]}]}, 0x8c}}, 0x0)
recvmmsg$unix(r8, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/180, 0xb4}, {&(0x7f0000000600)=""/55, 0x37}], 0x9, &(0x7f0000002b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000640)}, {&(0x7f0000002c40)=""/144, 0x90}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000002d00)=""/227, 0xe3}, {&(0x7f0000002e00)=""/176, 0xb0}, {&(0x7f0000002ec0)=""/5, 0x5}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)=""/180, 0xb4}], 0x9, &(0x7f00000030c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x101, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES8=r8, @ANYRES32=0x0, @ANYRES8], 0x30}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000d5437f47a8062181fe52bce4b930dfe94284119c999313fb75389b2db241c16fa3d17e97cceb21ae46ed8cc859235c1c4529beff20ad1af11ad7b1a17851e065dc08c8a4edbf9651e4cdae19417bc7dab6a41f575acd4cc59afc0df67189276b20c7027fa1ba3d77c4297847b8befd373bafc5cd8a73"], 0x30, 0x8885}, 0x40041)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c0007800800094000000002"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xffff, 0x0, 0x7}, 0x8)

22.31725189s ago: executing program 8 (id=2726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x54}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/50, 0x32}], 0x5, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x60)

22.050819894s ago: executing program 8 (id=2728):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x4, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES8], 0xcc}, 0x1, 0x0, 0x0, 0x20000091}, 0x800) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000b0000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b30205006023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa8272f3eee97c0c3258918bd811db74b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a9433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0f34d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbdee00550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920386f14d12ca3c3431ee97471c7868dcdaffaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf974fcf36cbf6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a8022c8870f228787863a9e0885e238b44ae1c25c9fd8bb27083b8246829e64056000302bffff15405bd5f2eba2000000dd0000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb42305651152df60a3a05b89e760b60563c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9463f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d00000000ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf5ef06f7244dd357acd09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58aa9deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000004c0c1b4742fdb68a34370543d7aec4fbb67bfb3730af0c908d89029365378cca550f508e3699830028643ecfe9f79bd15db571c5420d9b60fa794cfbc7fd039856329b684216237ec55faf25fee7f1a838fc2399d67fe9b245fab52f7a8eb1aadbfbd8d203290f131965a41ca43bf5440e7b1425c15d39559e76384112b80dd0049280a1e9b63e3e7cadefa558b6d38ebe86b49e3f80204b5536f1bde80cb2dade46f6a1b8cc20a5a9b560e736235d518349599b8368bf1e360ecaa0bde20303eef789304761aca34b507fd66115ef36b2cec7629c7609283d1676bb3a018c0dad35189928abf9d06bc9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9ffb01001800000000000000280000002800000005000000030000000000000e02000000000000000000000001000005000000000000000001000000000000000000005f00"], &(0x7f0000000180)=""/161, 0x45, 0xa1, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r3, 0x5c2a7000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000966000/0x4000)=nil, 0x4000, 0x8, 0x8010, r1, 0x630fc000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r7, 0xac9d4000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xfffffffffffffdd8}]}, 0x18}}, 0x4050800)

21.887057786s ago: executing program 8 (id=2731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)

21.718722223s ago: executing program 8 (id=2732):
syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@canfd={0xd, {{0x1}, 0x1, 0x2, 0x0, 0x0, "e02b38c09af5314e1bbc5fe74a6871413f5e15e9aa03053b5998da7cd1c98c9c5296dc63c284f7242c8194736f81e75bd109f57f740d64d72e968b9faff3b852"}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0)
r4 = socket(0x2a, 0x1, 0xe0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8415}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74f8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000004)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000180)=0x5, 0x4)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00', @multicast})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

16.283384244s ago: executing program 37 (id=2668):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r5=>r2})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x7f, 0x6, 0x2, 0x0, 0x3ff}, 0x14)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x0) (async)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x7f, 0x6, 0x2, 0x0, 0x3ff}, 0x14) (async)

6.482673985s ago: executing program 38 (id=2732):
syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@canfd={0xd, {{0x1}, 0x1, 0x2, 0x0, 0x0, "e02b38c09af5314e1bbc5fe74a6871413f5e15e9aa03053b5998da7cd1c98c9c5296dc63c284f7242c8194736f81e75bd109f57f740d64d72e968b9faff3b852"}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0)
r4 = socket(0x2a, 0x1, 0xe0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8415}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74f8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000004)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000180)=0x5, 0x4)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00', @multicast})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

2.538990341s ago: executing program 3 (id=2869):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c02000019000100000000000000040000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

2.455737991s ago: executing program 3 (id=2871):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='pimreg1\x00')
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002400128009000100626f6e64000000001400028008000300f7ffffff05010100040000006de0bbc339"], 0x44}}, 0x28000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_newnexthop={0x84, 0x68, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_GROUP={0x14, 0x2, [{0x5, 0xf9}, {0x0, 0xb5}]}, @NHA_GROUP={0x14, 0x2, [{0x0, 0xa}, {}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x1c}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}]}, 0x84}}, 0x840)

2.182207889s ago: executing program 7 (id=2874):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0xb36a, 0x5, 0x8, 0x10001, 0xd]}, &(0x7f0000000300)=0x78)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r3, 0xe, 0x0, 0x8, &(0x7f0000000480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], <r5=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', <r6=>0x0}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup=r4, r4, 0xd, 0x30, 0x0, @void, @void, @void, @value=r6, r5}, 0x20)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x8, @private2, 0x988}, 0x1c, &(0x7f0000000880)}}], 0x1, 0x408c0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4024}, 0x4)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x8, 0x80, 0x0, r12}, [@IFA_FLAGS={0x8, 0x8, 0x4e0}]}, 0x20}, 0x1, 0x2}, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100027bd7000fedbdf250f0000000600280001000000050008002c00100000000800", @ANYRES32=0x0, @ANYBLOB="08003b00820b000008000600", @ANYRES32=r12, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x841)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x10)
recvfrom(r3, &(0x7f00000000c0)=""/240, 0xf0, 0x40002047, &(0x7f00000001c0)=@generic={0x1a, "69116ff59653c1c8b5cb77665db54eae132e3bb83c8487b2ec2ce23392e393e2166804037594421fb1cd05cd3bdbb9a2cdf2bddf50aa02828d8392fdf6ccdaf14e49a713709afc62546b9c5cb6cb5392c66262a6b9f4cefed894f134ef3c14a6e2e5ef931939fb904bce7d884e909cfb9f194bdc2943c2df7b1b1ec8c8a7"}, 0x80)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0)

2.115731621s ago: executing program 3 (id=2875):
unshare(0x20000400)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (fail_nth: 2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

1.768507608s ago: executing program 9 (id=2877):
unshare(0x20000400)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x4000000000080002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
r6 = accept4(r1, 0x0, 0x0, 0x80800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800010000000000f9dbdf250a00000500030000000000007318a18d417a1164ce2a9ea309ee8685e6ac96fcc45f6732589cc711739f267fdfbbc9"], 0x1c}}, 0x0)
r8 = accept4$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80000)
r9 = socket$kcm(0x1e, 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000240)='dvmrp0\x00')
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r10 = socket$kcm(0x1e, 0x0, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r10, 0x0, 0xfdef)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000140)={0x1, 'veth1_macvtap\x00', {}, 0xaa})
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c001980080001002c010000100001800c000280040001"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

1.700105688s ago: executing program 3 (id=2878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440), 0x10)
gettid()
listen(r5, 0x6d5)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0xfb, 0x78, 0x5, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7800, 0x0, 0x400, 0xa}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000180)={r12})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000700)={0x0, 0x1000, "032ba49a2d97669bd45485e3d3d8513f925177539c5b019526db01d576372b2db76771ae831cb3263c15ac4fb61a7ad9a007deb7ecd96651bc9f2a911f79e353f1e567ea553c610e413436e441bdded8a13308266e5d2861ee7a7dbfd122f46f3b55e43c4683ca55c52ff34a9b10d40570228ad11077a74dec5d9adb98a16ad009a468fbcfa1c230eba52619d84ad1f22ede2d338bc6711287db7f227aed77b4358e2dbe405901768b50fcee96f8bb0cba167d30de0ec11371dde1f65beb5051e3cc4008809e5f9f7b40e3c89f31010f319b4d6aa00e431265a5505b78fbe87651906158d33fad153d0a5d18c9d6674e9d51fe5b38b03bb73a626de6ce049e19e7432513b95bd492135773160021adcefe879eaa93c08d0fba40bf2b5381cbf6819bd712a5c1037448d59d183332d0b0d80a168ade2e7ac84f895f93cd3b6123bd1f5b87f6011b0f0cbd8c08a0c5fd9d01df6f511fcb822ec67868b3f2ca19ff418c3d843e5e7fea92146ee4169ad162b1f9ad19062ed7e9d16e271390b086ccea42225cb7d08297b1d190a4cce36b5db3825e7817ced20d15af40110c138a8dad1603e2f86653b203689a04aaf8ca9ca71c3d20433ba34493fd5e92647b913308c858db91c41574ba716c46e7c362e84d21f2c5a90bd5248a3f936dd5b1230960a3f630cd4ca9fca77aab102a8b51f9e3f9b554635a6ba833796378b38dd6c839ce3e5e1f2270a203dc658f388a24ae57af4811c22628ad1e71f07dcf5badbb166580b88452bf4d70c6b0d99e8d793ef86b401e2ba13381708b5e2d919680b86acf8126507a4670e91bc37367c5a6372f9a146c28dda43c868999c5cbb44f01c8a5799ce8866656824c5b3c8c430aab51b8e0d9e03ff4a6c593e9e51c42c789ca23a83036b95514ff7dbede2e0b8a27d4c8f90f351e213f36db62b01db0365c421b6db4b578dd13424b9382ceeaeb2bc1b53c714020c7412c80286c269f6705f18c5883a40e9069748747faa339800255939a6953381201d2554d04e751946c8db51cc2666b3cc0cab1596cb7a7a451e88dd782f63e5f30d8269c26fea140878711b7f5ae64d1f7f93068fa706e9991dfb7fe1d6de136e27fe4d3c07a88dc087b98b7c9af22c6a3ee013990afd16bdf5763cf20c7c76424f2c02228d48704cacf5ac4145ed8b6718bcea32703f8e41e09692bb9d68c3281d35602917705de8d7a54aecec8fd70b894f99f99e679824e88664f0c5c769621964178afbd57398c4729ca859ae4b43c7b63ab1d18edf2a094e1ad865fb082a59d5e118b1a8f2e47463050f011512e2efcc2e403751b4d383bb16c8c7f37a7a38cabff864de7ea2db7fe3a7ad0bf0b59569b653e06f80219ff9ea55fb17cf762d79c9ad7ab29066a4478ef513ad5d0c3d263f91ae753af47eeeb2e33913979516f0bc2657f42355167ec6fd0e94af06299722a471ec83ee8a3c431fb3152a964f458c2cd7501a2a25a389390e28255f154ec2abb84dc70292a6d5d61d4854651e3826e0f42d3dbcb824d949d6d70c30b9e9ed14cb42580e7c384af276eca81eaebef4657b4dac11eed48c74bdc472e355e38e63a1c9cb4363dc36670f4f1ab8e2985776ff5943498b3081ed35f1bc306e7461b163c379532f88848f526ce6524c7da913db399a55d701507fe01a5216bc061d17850c0c75ee25b9d79ceb68eb4b79587b0b8c51c15deb54e5513e68d29f0e7e78bc957933be598d81bbac465d1ed3f808281ce82cc3da7cfdb190690f6e0957ac9e33550db323e8824705b14069f351317ca1eaff2635ba0e3ac6e4dbb9d038d90506b6ef707a35daff0b08c1ce3c1df51e686ce2f74fc47d609c1bb1dec3b526507f504f735f4a1e6c8f4832846a1f0120c1849fddf4630c4cd114611023cee26b7e624c4595ad08adbcca09b313bc4cfeef4ac08f87b7a5e8c3fc17a1a54e9b6c54e6ca0d5eb65352c1229ae1931f960c2f8a42fcef58d1592bb95998f6316274060738bfc8329e59bc340b6c7096fef9d4002648dbc9ca7cedd3ff0f26b01953698b7afc69bcede8a3326f4c2c2f3497e2f4e41b2902965763e6e22ae572f6e293b14a47c2dc2aacba908246b6896a5e303e3db65b01d73ff6e01e134985d996f746f16adea2e2e8c9bab2e55f1219458117d970b822f99759e8a11c9843988331857eba4d0e8201a5312d9669c89da773a9826f6411e2d6ffc0ae2b74800e64ae89fcdce195bf952012493b98713fe8f0d5f49702446dbbc98b8568b3fbcd866bc5f37e90e79c1fe4662b61cc4a26e69ec378cb0c92ab9d5cb2e390e5b82e2982cdc50cc2a76abb035a4b6d2dd215fb867f1c6d8697b47b782037d9a44ec7d3d3322cf9d2c57629bd90c781bfe7258fa1b2bf6d9902096555fcedf54985623151e28c5e93de30b714fc72bdf39c2b670f7b6a4f78ee6aa25b968842da8fd0fe533668c0518011e5621cc98a825c625025ed4c7ad9b0121c68eb0ef6b877fd3dc7836db63ada644416493c9bbc6d6103315d1df2bb5e92fd4ad076c90276a72551f705ff2a8fcfd50035241a75134f14e4f2d35a0f225fc07a87d02c04e2853310b767ebece5dd8f2d4cdf72238ca81b4ccb5dc759ef574ffe3f704293450f634dfe89288f849b637d19f588c9e5786f715aec3938af1262f4b02ffb9a955f2dad7e33e300d791b6a61e811faedad6968665b504c1400806d6b5391f125432854bc5f26bb7a4f443b3baa491f8b57f99586310215cef02573e1ea0fb50a25293f1fdf8550aa1bfb63f6faff1b18684418c2262141639b6f4a33cae27fc9ef8805dc988c905cc313bc4f6782b62609c0088a623482922e93d9ebbb5cfbbe4c068576ead04bd6809de4074477f9da761d14dfddc498ff54742281558634bd5b0ca8eac4987bfa937363faa2c92f8370e9a2a46122f01b0e723cbf260098d7bf5e2c62f4aa63639df0a60fcce96b57f30b5615e6dc2edc425c47f3b602907fd13af524e262c7a3cd810fab114df54ac9a908b176f415b792be55c1e268dcc5278a9e4e0152937caa0c794124699c4283cc2d72fdd9804e3be8177543a05afad4f75108342a6aa70d538191ff0d180524d236b406d04b01550cddf4913689db63bdb6f5be1b108f8fef6cd59707d357798f1676ab8f4e7b64f0c7912f095b9dfa0070f412f34cb80f4ba5efe99cc0a028a7f0f7a371f50ca47a95bfcd02c6a3a446f32a590061d9f4c96ce664d75b6e174722b16cc4616b6dd6fcb2e699104ffe8c3b3da4c6017c0bc6c4e9ac35bff773cc035f8fbb2661a4b92dcb7fcf722c92561c0830673bf13a64940857cf265efcc1bc002aa1456584647f56ff3770ea2bd0848df1498ad42083c1dabd71c86690044fc6030e18b0d3a12e1618a17460bd1fc97811689d11b4e2c2a8038aba10b675dacc83a245b879b2b5f744e5b7c496b5d8a3f0bca8dd272dbde46c66d8257b89c406e5a9c85f1b0d367995284169fc59b21f468ec894b88dde7c4c1ed5e0625bd364b852a502b5bf3a6ed551b0284a5366f9b5db9dc796cf51b0a32af708076366cc455e074d397cb7f880dbc203c97d64501d5eeb4551dfb64009ec8d1d9d39cd252d6fce52fe68ab57f519e1819756660236bd6f7d67d0ccf7b201b17893164e625fe62a9ceb55f98ecc2cfeaf8079a89cec2018e9756108954d36f67bed9ae07e3db2fa6a8414505065528d73658237a7d17578c502696bc4cef812e60740b061518949de4842051761f12e247239ef145f7e08ab24369cd0e04824e5495fc32b9b0184ab84f0a2e9a99b61796fe2d8ce76e605e2a920c181e0af3dabcfedcabe7f1e98ea3a6e2173e7fde5aa5f71ada669ad4d95e12bb948c68b730b12040a28135c455b530d4fc0e528e3fc6b01a9d4b74ccf500f2f015fd7719334f577c664d3352ad9afae449550fd24cb00586b9bf6b00615a0ba0eb60698e0e7d6ff316a20695f41522ed4487692c8f1da532f8b413efe5e416a3d425ec9715a10adcd11928538d36e2f62fc000d9fac78040b6155ab9e3ae89145e22b8ccd275671704b0ee22dbc640a21d69714da9ac2e1c53a7f9e8cef34f1fab427c1c0a5ba8833a46c33e1e69cfe1c525dde481173437d5428530554a50d2cb24c20e9a2f076987fd085e0ac6452011ca05275b73b6567f392d7f2bf1019f9f9b8cffa5d3b2be30270bb4b89472877c0b95099687c537abc080af3b86efb49dee5af6475afaf38b0b5815e20371041d1ea3beb312adc7d1c91b06dfa3e16b5524b9f399a7245cd2d76fc054802c42645448f352ae9cd1bb7207c1352076d93b1fb2923a054c45f5144bf102222d734a3df4802dc40881e78f8e9fe17cf30ab20664b732a4cadb8e8dee741b31d7bd913930ff1bcae77a782ed304ccfa3c0df0526f816a60fdfd051c05df8d7b69f8ac5beee9096a4bbc18ea9f9277e9c1b4a2ac2243177d48f06f2a94df18b57df49f0cd084258fb218a6a62dbb048b669f6ce530e56dc27c2a5dc3b53eff1aa9e9bf9de4bcf6a1b991384a0e86f550e6de74f5296cd62511ce4a5a68d4277d360695f4c464360df73d3b477e9814ef2b2ec45b9cc37a0a82cb5cc4652e83cfb7312aad013d4d6ae9fc3972fbd2d8356d3e121190f203490ed07191d165cf1ebe0ff5eeeac18a87d4a1444147cdfae68c44606f4823b0517b48b9bd6b8664dc028e07aaee1d48312026bc9fe9255f14ddb20fb2f535314e14ab132d43e4452251ef190494a48de2cf6827034ad3750e31edbb1842743e73374db7bb81809fc7ee75530034bc416ff7b7ac701c6729992c456905e9ed56696d526e2f8093b7aac7063c1bd8b160ccb031b4730a7ab32f69522a8b93f635306c9321cf09baf1e781965f7dcf3bbcfe03323fb88da8dd883ef81c785ab7226db8ce52166cda5d4602f437e632d318f4317566344337c7669ce1490200cebfde813173fe758cf1e4d0f054a2402ddaae32681de1f4ca68e4928255fcbbab6c54d471f931c106a92d558f081748fc65b9af8e19af10fd66c0ae4d9b82ee80a54d4604d8400600527d7df85ff568eebb759917194a5c971d4490a07c62a135784324ab2204b5cb28c018ead0a371a847ef05f6643e342388268da703c2f82e4bb24fa23f96d3af63a1509642040ba512cb54f2bfcf7cc6a10691199515a27ec18db5ecdbe8611e89470c76836d8607b15efb54e1fcbf6210aaa5791c90d30b662ba84ebf92e715bc9aecfa8b6b7abfb12caae4b204d3c6a52de571f8ceff39acaaeb084e45880b144770db53fb5154216e19d1a8e1b8e4c41efab5a06a395a5051f490900b135bfd456b2bee2996265e71e727e791b98a1858743dd59587ade046c8903bd310f3d512de52104aa9b24d25e60ccbf7c8b6678ffbca8431841f118787e9d88273386a9cd744425fe7148e9c7a715c46d82aef8d9c4253ecb8d2f93e40e5eb7e68e056d485cb4d8dafee90623f6e1e2de78df0960e3b0c719574f146bf878845a3f34246268395ee8482b6106393e38754de95ffe5b1058a27cbf69e140eb01b45e192b394a8c47332eaafe1a4628cb50db02367090c397892c755d60a1e8235d0f4846289ce8db13560fe2583df520a766c23fe889812ddefa932f86a62a04395639e93a348823d7b3099946287785abcb194408ce9e13de8a7bd9ec087f12985608f8b2526c1791b9a270083a913aa85c67b569795a7821fdb56bb0518f6e14cab6199fec3aba4c134abe3890848b97bee7c141aeaca7b01dc1005e4381338d22"}, &(0x7f00000002c0)=0x1008)
sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r13, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r11], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r14 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r14, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r13, 0x1, 0x7}, 0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="010328bd7000030000001c00000018000180140002007663616e300000000000000000000000080009002199a9a308000500270000003c00018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="081e967415e73f7d9d000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="0500020000000000"], 0x80}}, 0x40006)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="5c007a800a000400a0d4e01051d62192460e15c50c37c14bff6714000100cb437b1ec31102799ec86372a23189a51c000200e688370317a9504d5bb1891084c372492674ee373ed70ad508000400010001001400020009e03627fc78"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94)

1.698819363s ago: executing program 7 (id=2879):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2)
recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.472038102s ago: executing program 9 (id=2882):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4)
accept4(r0, 0x0, 0x0, 0x80000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8000010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="85e3de50d5b66bd8f1ff08251a6c", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)

1.266973668s ago: executing program 3 (id=2883):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000014c0)=""/70, 0x46}], 0x1}, 0x1000}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000001, 0x0)
close(r1)

1.266756064s ago: executing program 1 (id=2884):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
socket$inet(0x2, 0x4, 0x8) (async)
unshare(0x10000080)

1.247458935s ago: executing program 9 (id=2885):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_emit_ethernet(0x9a, 0x0, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0xef, 0x10, 0x0, 0x10, 0x5})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.094001186s ago: executing program 3 (id=2886):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
syz_emit_ethernet(0x46, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

886.872139ms ago: executing program 1 (id=2887):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x5, &(0x7f0000000000)="c1", 0x1)
write(r5, &(0x7f0000000680)="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", 0x1000)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f900f500180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e035e008760ec3d6d2ad623cb3096e9cc493948a1117839803b16788a7af447e4eb674e87737d54e5"], 0x0)

819.414482ms ago: executing program 1 (id=2888):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x40)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x40) (async)

721.393025ms ago: executing program 7 (id=2889):
r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000000)=0x80)
recvfrom$unix(r0, &(0x7f0000000140)=""/244, 0xf4, 0x40000040, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="8a20bb7f25698086fff451dd167db69f", 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYRES8=r3, @ANYRESDEC, @ANYRES16=r4, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="3ff85c7c2512c9a83d75d067c0729b5c9de13f3dee2949376165f06f68d5b56d93db3c41a1bfd888d269e93ed4be289158e8865f141428d683ebb42a5072133c36fb7c894bc8f901aa3cc10c3c30f65d6367843122d6b6ddebe99be009aa66ecc2ed6d028cc77ceae2f16c4fcdd3b4aebb7cd19ae6b900b274e6c6e7ff73344e353eac87878758a1af2e5193c9de84b7995686dc36434495c46d6bd7ce7ec5e745a0f1f167853843b2e765e14b0105f2b68cceff85159cc75ca8b137795c09d7d067d88d743b022ce88e77c88a02d159792344a88cfd3794f616b6f5892fdea44da111c0d6d4fbb234f905b72e3ae8e50ba57a23128045049a4b2cb053f1015af96f917b8325894db6877bae537cfcdf06e449aa6977a751f3582548da91ef3b78d49ef6ee8b63c036be961ae17c460d87048d2b7259c2e927df1c0dd8f3cb8b1a6ad6d21c996dac0a2268be629b8c796b23c073dd262df06f107f2c9affbfddda00bbb39c8b636ac1349b362346f37ac59b8863e1dbafef9ac20859bb00e92546d789a0b0c9975a884ddc5c8d4a70fbea647c687b4fdb3124708702418cdece9c0a2ff902d5130477c791d42956d49f4419c1987c04cf18fd4c1d8843fea6182dbbf7c4b8d15e7826a14a47ae89505f8df44ec89b9a5a0532ecc68fd29fd7f53a92c6eeaaf4c69e051ce906319da3aab2616f6c242e4b5581a8950c8911b6dea097e54b2eac7c5527781e0d567475e909f3cc1b5adf8b579ef36030b0745d8d0a9721e465ce9b0096712398f6ea07308172e06b863b132e637943b47bcc559317a248ed352869abe2178e79fe3835b0daa3607e10523e595301efe8df05dacc71c7a0e686a6cf6a663f78409f355b5dbe1a3da9dde6c2c4cfb2a4030bd8b4865502dc2a23b96481598301dd17e491420ecd379eb5d9a01b453d782dcfa086a7f767edc7307551856de57cc33238e94236203b52d0b9b2ffed12a89a7e8f42968db21c4d5ff8eeb10a6a9cea5bf7ad6295ff55dd7eb883d25eec8949bae2d8869e397cd650f43c0a3383808f6d5757714cc16ffd32ef898a0c71f3b785f684e84ba353d6f15c71fe3de78ae10e8f046d6a6f966a60ca73d8fed9af9869604c4550e28140575d0b74e516bcea3382ced7b14e3faee19d6291164c66adc8d58f54d19232b64081ed4728693071ef64b2613991c55a6e7a2c04f60fc8e16bff922e206b1ee3a39aa0f5e0ceaf4264dce5e0b0bb720a5d2df7c2c38b8853d18f71d3315d112c3540a6f98266cc858052e63b8be32d4e83e5a38b607591d9d0e370abade49f53382285aa3dadfcdac85b1af1cab8dacaee5e65c096ed1217c2f215c442f1d4d8dd332374348849cce1720908311615fe280fe8897413c358eb451df33a1ea006a715120c203b4917942bdec3ea1aa2f8252b25607abb86c21b4b26f37b7bba72d245f300519e451d0e5995c9020c3bcfdac0756f4b5a6fcddfb5a8312961344f3bbe429a7a48205d21bac0d93a9faa1cdbb2623d61aba58e8a0b78096a783deaa2a83c68ad0053974a6b7f41b541fe56e48cd76fefbe75ba83a64252f81edcf306ead0547c151c1f56e0e99c22ec8779c32ff13fe840ff60b7c26aef77d19fd8d8f92d8e34e7247f3ed8bff24512c99767486f0a72c61b4752d6e5fdded3d06277ed9185a3efef8f1206934a4e0d62afa6767cd8ac2d95dce0a2278cb96b9e6071bec8ccff0f2db14d1e50d4de809bb2bfa0f7f326d88c54a496f85f0a0e4038b78c91410d75f0db3c7d872bc071bc55e047315849986818b71ad2d52ad8e2d26d76b09346f77eb8fa058e5c13b7ce8a2b8544e113fa39c4ac50f0237b1e599bc8c9717fd9e745cac58c173d317f3fb208bf91a1870492db40f9415e13b675fa1017bc96c1e13b12e6e17cc4cad9756fd92b3248d9a1b8d98dcf53cbe50817f0b3568a14567a9f84498714adc28f883dbe7ac3ce2d2bad8680a2263a7ea32ddfd6cea3d655a42b32e2859a1b3eb77f81753a8b44db9a95ec54cd2d918578c80a1955909873a3380bac04371e8fa32e3edda3f288946bd15a8fa434b4b56df10649476c5ca75c6ffab8c583d7472c75fc8e69808b578863ff41bef28232efacd0f2669a7a5af25e0da78bd28443385dc41e5a17f1b79e4fc1beac29340f60c4f57865f16f0646733174d10c9d8d05a3d030d3364781580e41ab0fc9d04ee790acbe4ffa786a5cc61a36b6582239911c81aab152e5929d40310fe280515bd186e6c81bcbb1dcd01b26061ebc2b79b5ae9a253678375148a4575e0cd4f840854b48b4cd2b84e61ebec633239855d720d8f2b029c5d66fc6477f39f1b93d0ff6dfc4fc00153e174e88ce40417c60d929bf0991390c0582fa33b53d5a8e04937ba22129b1a338442e32df57d40fe3d284cfad96f1c58056e95dbbb1ee57303d6b973429adf76e9db08b273a784057a03de6b4363b86549da6bc27bd22b5fba9e7044df6bcf7b4737b07a1d700b03894fb87141862700d41753ab1e38d88b057149bd4b2afe0bae1a62d61c752f67842720f6b6bf53e9e9c9c2253d49c5dc6082c66158ef99f3657af0a5c5ffbe3a750e9994f4cb5432051f7b16bb12e1663317acad40e3bf3605b82787dae960d41c21827662df973154a45e9d241d9f4e7045c881c11d6c9be2fd0019e5cec69e7b00e1077cef8ae3f7e1fe36b162447137430bca1bb22a89ebeb4900c0c512eebbd4ea9e7838ea19c42a929c9c881a090174f23cf214ecfcee6be0c1996b91f59dd09ea7c4d5cfa7cdafc08bfafaa9ff4ecea74830321051cfaf66da743c59c19c0c5a956afed7c25994a360cca60b3bfface1cbc83d912dcf9c9d99fac573df3b2286979888100d34f08675c6e059236b05d05a169a9fae3b07980e6b61bac175486537878a4377426b201bd06fb06ace5337959b2d752e6fa0c96da195774a5f27e28f47e0f85f6bebaae4b1a517d1597fdba8cb5e7309d13af0459f683b25a9b8e3ee82e252daafeaa433629d7cb1ca1870da0cc1f69795bbd765ea44d7682eca72db9ef471e4b173e11acad25bdb7cf40bacec6c871189b453a19226f4680a591b267520e083b3cfee6a0ee8ca28abc433471024f407e6c5dd02fe785ad1946c6e94906998620168a156b266bb25fde29529e4979e1e19b98c23be347007615c5dc24acc9f774e24175a798fd03ab10a089a656c42b93732219774d47c18de8bad7aef590de95d62d7e16fa3b5cd16f554a922b2bba440181e8be307de864ba7f0a9c922f2951cd0e3532d50d4ce983ebbb7d267012d425b1da3c354753a6eacbe8af95392cef8db73354fcce521e8df6cb1eb076c4f872c65b864ccb8911111e11d3ef25f471134d60e8e67e330a6f3662f0970ee00f512c0c0b89204f0d8fb1f379950bbe05157d114afb02137fae52bcbcb28e7e75fb219a71a791cd0da1698f078309e9c20f4db0eb4839d277fb6f65c0a2456e63beb47b9437fbcd65a2e4a9626b76648ac356301108dc6db276cee2fb20cf58b5f0182971578f53626deea02097f8b860017e03d95f2a5b75a7d16698465468b529734e81f8c7e8c0f9b9870d34f8606d3d9cece2f9edd7d8dc0b89f8fdc55ec553e34715d019953adb59d197ef26a8944109419769d071d54e2e020ebd984b23483bb579f871270daf2c426a6aa295ac1f5cbea59de9064d7407886c89a71526b86656e0ac3ac20546f67054a0b0491400d923ca8cde013a6f17c07a7cea09a4ea9434170492968790c2afdb94cf8306c153e912078fcd3441080ba551e7f1b911ac582aa170a806fdd7473bcb37853d2faa6cb4c325a7640a5cf645eeb4a7fc7214a6a76efb936e06395794e5d0f06d0e02eba56b02186fedb0847582d4f0c04839b4d55e7f5e5a59a387d2433e1b6ff302c4d797154722a328bd67e9091154a53c982548a6ab00065938b9a74e90a4b40f133c0e9b51a5032e2a8a5c7476cdcb0dccd368a7071e9ec6558f9283e57550684f6d80837874632df81b10d007442c034525de6a46869a2b53aed7b50c2d64bde24e76fb1d37ad39d2982f953509cf39d40bec5e76ee074cb67dfc683cec53377c511c080c325a91899c805af54b95e89854477442bcb979b352aaa53cd6b21fc60a24507c19734b40d54ba7a3a9b89c8f1f595a36b7002ab7a0df7ed67e70450055f9f38e35fcc9f6f8b29030f7048b30b9804d37b8831c2fe66be225ba4ad3fc8d25a20503a4692aeea3c6df429a1a0d74c6bb10a820e02a198141da063e5a83afd872ff0cad165f3a60c1b417908d736c686423e98c33304071d2cc20a15527e05e1b1ea66f6b19dbff15b24e592fa44b38dc01f489ad919601c1ff3a23fc1ed5afd5597eec81c1765fea39d68d79daa7fdd3e5e662044d9013c83009c230dca45039dfee5801c39a03406a36a1b33fdb155fbc16f035460791900373a5bb1ccdf9c43753fa9144b3425b2d8fcf9a4d4d6ab142e78b2c2978c228ee3655d7800224b94a91eabc8870eaf5c884116898be7c4c5e2b46b5b6aa77e053c30576412c0960a7aabf88964148f5a48fe4c725ac8fbcf9d52b6d1e96a9fba531d12755bd978287a6cf4397abd07487104e7fea0120bc2a96c65344bfbe26cca195832c140493f052b02c867b0072faecb29784251f8078fde4f4512b72e6fee4c1fd4237910fc92d4583781ff518cf3e3548fc96dbf28924e0c700feacf083c05045d4104e514beea50d23146bf1824773d8d17d550e2fb221745304b57b5a2cd8525072bc45f6890f1f6c3799241cd5455b55254bfb3ae64790bb6ae893e41e46b5f04d776705c0451bc0a37b085dcf80728f847501e3d6195021d63728d17ef81e07cdd0e325a61584473949ca6c1a3a9afc5e6d6b40e4bd3e6b6026f7232d42f4b60fba99830c64194ee540ade923fdda822e8a7f4eaff7750693a984e1f7c7611842b59bee5366b5099ef09e473a1a6a7b9d32da3e4120839641510c4b3a3015890f529cd59de206288f6661d0853d24a3866e3a4bf07c68cc65fad7f16a31b3ec7d19aeb675c7dbec03bba2de036ff2b7c384c9c84c4a7469e3011ad21a1232d52239e1f52d8d0ab6a3c58b321dda5dba9bcb5efa6ccfcf27a45545f7c1a1f788aaf0541bdcc980aeb4c66992ebba4cbeb9d7df2e83bc3f60dd096545be2b6d3bb44069a2a952606cba809be23e4eea00282a785b8e6dd7b2c1657a4281cb9f473f59ce7fcf57dbc681c170ff5ff8d3c505a1b6c988ab63145a0279d42f4a173f4c984d5998e581d86ea0902ec4e081cfcb6f77b07441ab20e07544208fde19a77cf3c1d249413b2849efd714b19214af83f3f8837a7f8f2dccc7dfd59d129a6da0567c6c29fda8f3803619905da2c9d3055bb0c81c5398b0a070ba25d5fc7f50ace616e50a7813aa145b9e67d63257607c3a1283e2e3e57195ff61d4b02ac4af4e450b6f9890e1203958892b219afd33f6df6377bc81d1ca74ca912dc7a10772be2ebbb0ab98554b28165031aa58261da82b6952ffd11aab209bc54e53e9fd8350c9a00d7306355e56f6d9a47b07280316a7c98d8370525f18aa045b328323fa4e7a7567019c90eb1db2e7c2b6599d1d9c4d8981a043abe07bfd1b9dd7b14945824a983fd8a8189aae7f1f4f198aa03c8a48d233a029a1ecc10285af7479d0cf46337437f58f014e9be8d313a1016d9d1d7dd698ec9963126071c0550dd099e18066199e98fec7c9779733fa10380ef8da0b9660296768091a785947d25258d98e9fdfbc2c"], 0x44}}, 0x20004805) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYRES8=r3, @ANYRESDEC, @ANYRES16=r4, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="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"], 0x44}}, 0x20004805)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
socket$inet6(0x10, 0x3, 0x0)

538.809984ms ago: executing program 1 (id=2890):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x75b92229734fabb}, 0x8001) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

538.436363ms ago: executing program 7 (id=2891):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c02000019000100000000000000200000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000000000000000000000000000000000000000000000000000301000000000000000000000000000000000000000000000000000000000000ff0000000000000001000000000000008401050000000000000000000000ffff0a010101000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000e0000002000000000000000000000000000004d43c00000000000000fe8000000000000000000000000000000000000000000000730000000000000001000000ff010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffac1414bb0300000003008100080000000000000000000000fe880000000000000000000000000001000004d43c0000000000000000000000000000000000ffff0a01012aa77742ac0109a6"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

399.497424ms ago: executing program 7 (id=2892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7a800158b35852a194bcf25fa2181d70782f1ac99e96a304"}], @mon_options]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0xc810)

313.524526ms ago: executing program 9 (id=2893):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x14, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="980000000102010400000000000000000a00000004000180440003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000c000000000000000000000000000000000006000340000000003c0002800c00028004000100000000002c0001801400030000000000000000000000000000000001140004"], 0x98}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x3, 0x84)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x110, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x5c}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x70}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x3}}, @common=@unspec=@mark={{0x30}, {0x401, 0x6, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0xc4, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x40880)

138.953267ms ago: executing program 7 (id=2894):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010902}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

138.101334ms ago: executing program 1 (id=2895):
r0 = socket(0x2b, 0x80801, 0x1)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r4)
sendto$inet6(r2, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r2, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000c0000000000000000009c3f0000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r5}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002000002000000000c9789db1d4af0a8911550f778c064b8f9ad25db791ba3616f42d0c372a6693392000b884e0f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

137.043429ms ago: executing program 9 (id=2896):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r0=>0x0, &(0x7f0000000200)=0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001001b0000000c00098008000200000000001c000980080002000e00000008000200e5d8000008000200060000005c0004800900010073797a31000000002c000780080002000300000008000400f50c00000800020005000000080001000000000008000100100000000900010073797a31000000001300010062726f6164636173742d6c696e6b0000e8000280080001000300000008000200020000004c000380080002008100000008000200ff01000008000100000400000800010008000000080002000000000008000100ffff00000800020005000000080002005d0000000800010001000100040004002c0003800800020007000000080001000000000008000100aede010008000100ff7f000008000100810000001c0003800800010007000000080001000600000008000200050000003c000380080002000200000008000100b73500000800010007000000080002000002000008000100ae0d0000080002000700000008000100090000001400028008000100fdffffff08000100060000000c000980080002005b000000600005800800010065746800080001006574680007000100696200003c000280080004000000004008000400040000000800010011000000080002007f000000080003"], 0x2ac}}, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x148, 0x10, 0x633, 0x0, 0x10, {{@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@loopback, 0xfffffffd, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x8, 0x5}, {}, 0x2, 0x3503, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffff8b2}]}, 0x148}}, 0x0)
ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000240)={0xffffffffffffffff})

39.860435ms ago: executing program 9 (id=2897):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x7f, 0x6254, 0x8, 0x10001, 0x43432706, 0x9, 0xfffffff7, 0x3, r2}}], 0x30, 0x2400e044}, 0x4008000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)

0s ago: executing program 1 (id=2898):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_getvlan={0x38, 0x72, 0x2, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x64}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000700)={0x4, 0x6, {0xffffffffffff93c6, @usage=0x4, 0x0, 0x4000000000000004, 0x0, 0x1, 0x2e, 0x8, 0x40, @usage=0x56f, 0xc0a61cb, 0xc6, [0xffffffffffffe748, 0x7f, 0x3, 0x91, 0x7, 0x45d]}, {0x8, @usage=0xfffffffffffffff1, 0x0, 0x33, 0x400, 0x3, 0x10000004, 0x8dbf, 0x46, @usage=0x7, 0x73, 0x7, [0x9, 0x5, 0x7, 0x9, 0x0, 0x3]}, {0x9, @struct={0x6, 0x6bbb}, <r5=>0x0, 0x7, 0xfffffffffffffff7, 0x7f, 0x40, 0x0, 0x8, @usage=0x8, 0x135, 0x2, [0x81, 0xfffffffffffffffc, 0xac46, 0x2, 0x2d, 0x8]}, {0x5, 0xab4, 0x9}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b00)={0x0, 0x1, {0x5, @usage, 0x0, 0x80000000, 0x1, 0x5, 0x10000, 0xfffffffffffffffb, 0x4e5, @struct={0x1, 0xf548d190}, 0xb, 0x2000000, [0x8001, 0x5, 0x4, 0x5, 0x8, 0xd044]}, {0x80, @struct={0x2, 0x6}, <r6=>0x0, 0x3, 0x0, 0x9, 0x7, 0x8001, 0x14, @struct={0x6, 0xffffffff}, 0x9, 0x9, [0x9, 0xb0e, 0x707, 0x7fff, 0x8, 0x9]}, {0x0, @struct={0xfffffe00, 0x1}, 0x0, 0x3, 0x9, 0x9, 0x8d, 0x4, 0x30, @struct={0x7, 0xfffffff8}, 0xf, 0x100, [0x3, 0x7, 0x9, 0x7ff, 0x7fff, 0x9]}, {0x9, 0x10, 0x4a}})
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x46, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c01"]}]}, 0x5c}], 0x1}, 0x300)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, <r8=>0x0}})
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001780)={0x0, 0x3, {0x9, @struct={0x3, 0x210}, r5, 0x1, 0xb25, 0x7fffffff, 0x9, 0x0, 0x8a1, @struct={0x4, 0xfffffffd}, 0x0, 0xf6f, [0x5, 0x0, 0x7, 0x6, 0x1, 0x3]}, {0x7, @usage, r6, 0x3, 0x7fffffff, 0x0, 0x4, 0x0, 0x8c, @struct={0x3, 0x6448}, 0x80, 0x4, [0x7ff, 0x7fffffffffffffff, 0x8, 0x0, 0x4, 0xff]}, {0x2000002c, @usage=0x7, r8, 0x0, 0xc, 0x1, 0x9, 0x80, 0x24, @struct={0x8, 0x13}, 0x7, 0xffffff47, [0x81, 0x7f, 0x9, 0x7, 0x5]}, {0x6, 0x6, 0x4}})
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB="895f15d22046300d52e7fb34e723f1fc9f082c18c0b0b2fab2757f48fffb12481ded583ca8b4883a60bbe3bc05c3691d9583454182c546e4195cc1dc1e72bb1ced842b2df989a31929dd1151e1fc3d77744898dda8df"])
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$team(&(0x7f0000000180), r7)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00001400080070696d367265673100000000000000000c0012"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000004c0)={r8, 0x75be, 0x6, 0x1})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001380)={0x0, 'erspan0\x00', {0x4}, 0x2})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0)

kernel console output (not intermixed with test programs):

ate hsr debugfs directory
[  325.013249][T12660] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.052993][T12660] 8021q: adding VLAN 0 to HW filter on device team0
[  325.190309][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.197674][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.250430][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.257654][ T8903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.344363][T12849] !
: renamed from dummy0 (while UP)
[  325.425938][T12852] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  325.859700][ T5840] Bluetooth: hci7: command tx timeout
[  326.025025][T12852] vxcan1 speed is unknown, defaulting to 1000
[  326.054064][T12660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.417871][T12705] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  326.443936][T12705] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  326.489120][T12705] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  326.543344][T12705] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  326.680338][T12660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.884701][T12870] vxcan1 speed is unknown, defaulting to 1000
[  326.928949][T12705] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.998220][T12705] 8021q: adding VLAN 0 to HW filter on device team0
[  327.073311][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.080628][ T8903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.127077][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.134332][ T8903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.273494][T12884] netlink: 'syz.1.1991': attribute type 4 has an invalid length.
[  327.308786][T12884] netlink: 'syz.1.1991': attribute type 4 has an invalid length.
[  327.527317][T12660] veth0_vlan: entered promiscuous mode
[  327.574370][T12660] veth1_vlan: entered promiscuous mode
[  327.686311][T12660] veth0_macvtap: entered promiscuous mode
[  327.719321][T12660] veth1_macvtap: entered promiscuous mode
[  327.789609][T12660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.833931][T12660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.878408][T12660] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.915094][T12660] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.934118][T12660] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.935172][ T5840] Bluetooth: hci7: command tx timeout
[  327.964970][T12660] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.033463][T12896] IPv6: syztnl2: Disabled Multicast RS
[  328.140187][T12705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.354081][ T8911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.369349][ T8911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.475770][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.483676][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.674566][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'.
[  329.120397][T12705] veth0_vlan: entered promiscuous mode
[  329.163819][T12705] veth1_vlan: entered promiscuous mode
[  329.181968][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2000'.
[  329.257258][T12926] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2000'.
[  329.260566][T12928] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2000'.
[  329.842200][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'.
[  329.924302][T12705] veth0_macvtap: entered promiscuous mode
[  329.957749][T12705] veth1_macvtap: entered promiscuous mode
[  329.968522][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'.
[  330.049676][T12705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.070815][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.071014][T12946] netlink: 'syz.6.2003': attribute type 1 has an invalid length.
[  330.102040][T12946] netlink: 784 bytes leftover after parsing attributes in process `syz.6.2003'.
[  330.123361][T12705] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.162257][T12705] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.163289][T12949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2004'.
[  330.183313][T12705] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.192205][T12705] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.565345][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2005'.
[  330.612190][ T7683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.659005][ T7683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.091631][T12960] vxcan1 speed is unknown, defaulting to 1000
[  331.109019][ T8911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.131777][ T8911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.815788][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2011'.
[  332.041746][T12993] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  332.890188][T13023] xt_l2tp: v2 doesn't support IP mode
[  333.348816][T13025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.390257][T13025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  333.420162][T13025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  333.623554][T13025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.688299][T13025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  333.738702][T13025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  333.921131][T13046] __nla_validate_parse: 6 callbacks suppressed
[  333.921153][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2028'.
[  333.938509][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2028'.
[  333.978001][T13039] bond2 (unregistering): Released all slaves
[  334.023051][T13051] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2029'.
[  334.157476][T13025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.200439][T13025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.219397][T13025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  334.398036][T13025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.435393][T13025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.447693][T13025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  334.494322][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'.
[  334.517880][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'.
[  334.529308][T13064] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2032'.
[  334.580747][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'.
[  334.631912][T13064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2032'.
[  334.694368][T13025] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  334.717165][T13025] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  334.732093][T13025] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  334.915906][T13070] netlink: 'syz.6.2033': attribute type 1 has an invalid length.
[  334.917419][T13025] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  334.947037][T13025] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  334.961331][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2034'.
[  334.970775][T13025] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  334.996602][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2033'.
[  335.022416][T13025] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  335.053113][T13025] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  335.073083][T13025] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  335.109936][T13072] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  335.209243][T13025] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  335.263877][T13025] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  335.293267][T13025] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  335.470955][T13076] vxcan1 speed is unknown, defaulting to 1000
[  335.471875][T13084] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  335.499158][T13084] No such timeout policy "syz0"
[  335.592004][T13093] netlink: 'syz.6.2041': attribute type 3 has an invalid length.
[  336.418190][T13127] nbd: couldn't find a device at index 65546
[  336.448120][T13129] ip6t_srh: unknown srh match flags  5294
[  336.727194][T13138] netlink: 'syz.7.2056': attribute type 1 has an invalid length.
[  336.994318][T13151] netlink: 'syz.7.2059': attribute type 7 has an invalid length.
[  337.048896][T13151] netlink: 'syz.7.2059': attribute type 8 has an invalid length.
[  337.655154][T13180] netlink: 'syz.6.2066': attribute type 29 has an invalid length.
[  337.679867][T13193] netlink: 'syz.5.2070': attribute type 10 has an invalid length.
[  337.727746][T13193] netlink: 'syz.5.2070': attribute type 10 has an invalid length.
[  337.737208][T13179] vxcan1 speed is unknown, defaulting to 1000
[  337.864598][T13196] hsr0: entered promiscuous mode
[  337.896232][T13196] macvtap2: entered promiscuous mode
[  337.901828][T13196] macvtap2: entered allmulticast mode
[  337.930264][T13196] hsr0: entered allmulticast mode
[  337.945141][T13196] hsr_slave_0: entered allmulticast mode
[  337.956395][T13196] hsr_slave_1: entered allmulticast mode
[  338.024668][T13196] hsr0: left allmulticast mode
[  338.061791][T13196] hsr_slave_0: left allmulticast mode
[  338.107667][T13196] hsr_slave_1: left allmulticast mode
[  338.596576][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.635786][T13230] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6), value rounded to 0 ms
[  338.671594][ T6964] IPVS: starting estimator thread 0...
[  338.747147][T13230] 8021q: adding VLAN 0 to HW filter on device bond1
[  338.781811][T13238] openvswitch: netlink: Flow actions attr not present in new flow.
[  338.821777][T13233] IPVS: using max 24 ests per chain, 57600 per kthread
[  338.857858][T13231] sctp: [Deprecated]: syz.4.2078 (pid 13231) Use of int in max_burst socket option.
[  338.857858][T13231] Use struct sctp_assoc_value instead
[  338.871598][T13243] netlink: 'syz.5.2083': attribute type 1 has an invalid length.
[  339.042478][T13247] netlink: 'syz.6.2084': attribute type 58 has an invalid length.
[  339.067671][T13249] __nla_validate_parse: 15 callbacks suppressed
[  339.067696][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'.
[  339.127996][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'.
[  339.292447][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'.
[  339.302155][T13228] vxcan1 speed is unknown, defaulting to 1000
[  340.030545][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2088'.
[  340.551225][T13283] xt_TPROXY: Can be used only with -p tcp or -p udp
[  341.298753][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2102'.
[  341.316335][T13306] netlink: 'syz.7.2102': attribute type 6 has an invalid length.
[  341.324296][T13306] netlink: 'syz.7.2102': attribute type 7 has an invalid length.
[  341.332936][T13306] netlink: 'syz.7.2102': attribute type 8 has an invalid length.
[  341.636012][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2105'.
[  343.251165][T13324] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  343.260943][T13324] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  343.270240][T13324] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  343.279299][T13324] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  343.302327][T13324] netdevsim netdevsim5 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  343.311222][T13324] netdevsim netdevsim5 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  343.321361][T13324] netdevsim netdevsim5 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  343.330458][T13324] netdevsim netdevsim5 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  343.342443][T13324] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  343.350961][T13324] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  343.360013][T13324] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  343.368437][T13324] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  343.495587][T13328] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.538860][T13328] 8021q: adding VLAN 0 to HW filter on device team0
[  343.575303][T13328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.623418][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2110'.
[  343.744570][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2112'.
[  344.028171][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2116'.
[  344.064414][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2116'.
[  344.087325][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'.
[  344.127215][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'.
[  344.344401][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'.
[  344.467477][T13373] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2120'.
[  344.508570][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'.
[  344.524147][T13375] netlink: 'syz.5.2122': attribute type 1 has an invalid length.
[  344.711890][T13384] vlan0: entered promiscuous mode
[  344.728654][T13386] netlink: 'syz.6.2124': attribute type 1 has an invalid length.
[  344.755450][T13386] netlink: 'syz.6.2124': attribute type 4 has an invalid length.
[  344.763264][T13386] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2124'.
[  344.993714][T13393] netlink: 'syz.4.2127': attribute type 10 has an invalid length.
[  345.022651][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2127'.
[  345.409703][T13406] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.458882][T13412] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2132'.
[  345.514309][T13406] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.554787][T13412] vxcan1 speed is unknown, defaulting to 1000
[  345.627330][T13406] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.836047][T13406] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.063723][T13404] SET target dimension over the limit!
[  346.090059][T13406] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.171197][T13406] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.233449][T13406] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.243913][T13416] netlink: 'syz.4.2132': attribute type 6 has an invalid length.
[  346.323068][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2132'.
[  346.390593][T13406] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.391367][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2134'.
[  346.738390][T13428] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  347.083392][T13437] sch_tbf: peakrate 5120 is lower than or equals to rate 624039529590857331 !
[  349.296338][T13487] __nla_validate_parse: 6 callbacks suppressed
[  349.296361][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2153'.
[  349.320403][T13483] xt_CT: You must specify a L4 protocol and not use inversions on it
[  349.369877][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2153'.
[  349.450941][T13483] netlink: 'syz.5.2151': attribute type 1 has an invalid length.
[  349.490131][T13488] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.702600][T13488] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.821687][T13488] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.014228][T13488] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.710874][T13510] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  350.756490][T13488] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.780046][T13378] Set syz1 is full, maxelem 65536 reached
[  350.814235][T13488] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.863565][T13488] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.939799][T13488] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.974614][T13510] vxcan1 speed is unknown, defaulting to 1000
[  350.974733][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.020435][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.057444][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.074310][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2162'.
[  351.093688][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.133854][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.161780][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.231343][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  351.310269][T13514] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.544538][T13536] sctp: [Deprecated]: syz.7.2167 (pid 13536) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.544538][T13536] Use struct sctp_sack_info instead
[  351.569977][T13514] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.751036][T13514] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.805963][T13539] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  352.007308][T13514] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.095830][T13556] FAULT_INJECTION: forcing a failure.
[  352.095830][T13556] name failslab, interval 1, probability 0, space 0, times 0
[  352.108872][T13556] CPU: 0 UID: 0 PID: 13556 Comm: syz.5.2172 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  352.108902][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  352.108915][T13556] Call Trace:
[  352.108924][T13556]  <TASK>
[  352.108933][T13556]  dump_stack_lvl+0x189/0x250
[  352.108973][T13556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.109003][T13556]  ? __pfx__printk+0x10/0x10
[  352.109030][T13556]  ? __pfx___might_resched+0x10/0x10
[  352.109049][T13556]  ? fs_reclaim_acquire+0x7d/0x100
[  352.109086][T13556]  should_fail_ex+0x414/0x560
[  352.109113][T13556]  ? __pfx_sock_alloc_inode+0x10/0x10
[  352.109136][T13556]  should_failslab+0xa8/0x100
[  352.109166][T13556]  ? __pfx_sock_alloc_inode+0x10/0x10
[  352.109187][T13556]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  352.109213][T13556]  ? sock_alloc_inode+0x28/0xc0
[  352.109238][T13556]  ? __pfx_sock_alloc_inode+0x10/0x10
[  352.109258][T13556]  sock_alloc_inode+0x28/0xc0
[  352.109279][T13556]  alloc_inode+0x6a/0x1b0
[  352.109308][T13556]  __sock_create+0x12d/0x9f0
[  352.109344][T13556]  udp_sock_create4+0xbe/0x4b0
[  352.109373][T13556]  ? __pfx_udp_sock_create4+0x10/0x10
[  352.109401][T13556]  ? __pfx___nla_validate_parse+0x10/0x10
[  352.109436][T13556]  fou_nl_add_doit+0x16c/0x690
[  352.109480][T13556]  ? __pfx_fou_nl_add_doit+0x10/0x10
[  352.109531][T13556]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  352.109564][T13556]  genl_family_rcv_msg_doit+0x212/0x300
[  352.109594][T13556]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  352.109632][T13556]  ? bpf_lsm_capable+0x9/0x20
[  352.109661][T13556]  ? security_capable+0x7e/0x2e0
[  352.109692][T13556]  genl_rcv_msg+0x60e/0x790
[  352.109723][T13556]  ? __pfx_genl_rcv_msg+0x10/0x10
[  352.109742][T13556]  ? ref_tracker_free+0x63a/0x7d0
[  352.109765][T13556]  ? __pfx_fou_nl_add_doit+0x10/0x10
[  352.109794][T13556]  ? __pfx_ref_tracker_free+0x10/0x10
[  352.109831][T13556]  netlink_rcv_skb+0x208/0x470
[  352.109857][T13556]  ? __lock_acquire+0xaac/0xd20
[  352.109887][T13556]  ? __pfx_genl_rcv_msg+0x10/0x10
[  352.109911][T13556]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  352.109960][T13556]  ? down_read+0x1ad/0x2e0
[  352.109988][T13556]  genl_rcv+0x28/0x40
[  352.110007][T13556]  netlink_unicast+0x75b/0x8d0
[  352.110047][T13556]  netlink_sendmsg+0x805/0xb30
[  352.110087][T13556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.110121][T13556]  ? aa_sock_msg_perm+0x94/0x160
[  352.110147][T13556]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.110170][T13556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.110201][T13556]  __sock_sendmsg+0x21c/0x270
[  352.110229][T13556]  ____sys_sendmsg+0x505/0x830
[  352.110267][T13556]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.110309][T13556]  ? import_iovec+0x74/0xa0
[  352.110343][T13556]  ___sys_sendmsg+0x21f/0x2a0
[  352.110377][T13556]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.110456][T13556]  ? __fget_files+0x2a/0x420
[  352.110482][T13556]  ? __fget_files+0x3a0/0x420
[  352.110522][T13556]  __x64_sys_sendmsg+0x19b/0x260
[  352.110557][T13556]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  352.110606][T13556]  ? do_syscall_64+0xba/0x210
[  352.110635][T13556]  do_syscall_64+0xf6/0x210
[  352.110660][T13556]  ? clear_bhb_loop+0x60/0xb0
[  352.110685][T13556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.110706][T13556] RIP: 0033:0x7f7799b8e969
[  352.110725][T13556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.110743][T13556] RSP: 002b:00007f779aa14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.110764][T13556] RAX: ffffffffffffffda RBX: 00007f7799db5fa0 RCX: 00007f7799b8e969
[  352.110780][T13556] RDX: 0000000000044844 RSI: 0000200000001040 RDI: 0000000000000003
[  352.110793][T13556] RBP: 00007f779aa14090 R08: 0000000000000000 R09: 0000000000000000
[  352.110806][T13556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.110818][T13556] R13: 0000000000000000 R14: 00007f7799db5fa0 R15: 00007ffe8f9b1f08
[  352.110851][T13556]  </TASK>
[  352.110862][T13556] socket: no more sockets
[  352.644254][T13514] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.694722][T13514] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.721673][T13568] !
: renamed from dummy0 (while UP)
[  352.735387][ T5835] Bluetooth: hci7: command 0x0405 tx timeout
[  352.784702][T13514] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.807471][T13514] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.977720][T13580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.039698][T13583] netlink: 'syz.1.2180': attribute type 1 has an invalid length.
[  353.517508][T13583] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.530985][T13579] vxcan1 speed is unknown, defaulting to 1000
[  353.534986][T13586] syz_tun: entered allmulticast mode
[  353.571908][T13586] bond0: (slave syz_tun): making interface the new active one
[  353.596816][T13586] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  354.042335][T13584] vxcan1 speed is unknown, defaulting to 1000
[  354.065857][T13610] FAULT_INJECTION: forcing a failure.
[  354.065857][T13610] name failslab, interval 1, probability 0, space 0, times 0
[  354.091553][T13610] CPU: 1 UID: 0 PID: 13610 Comm: syz.1.2186 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  354.091586][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  354.091599][T13610] Call Trace:
[  354.091608][T13610]  <TASK>
[  354.091617][T13610]  dump_stack_lvl+0x189/0x250
[  354.091655][T13610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.091685][T13610]  ? __pfx__printk+0x10/0x10
[  354.091713][T13610]  ? __pfx___might_resched+0x10/0x10
[  354.091740][T13610]  should_fail_ex+0x414/0x560
[  354.091768][T13610]  should_failslab+0xa8/0x100
[  354.091799][T13610]  kmem_cache_alloc_noprof+0x73/0x3c0
[  354.091826][T13610]  ? sk_prot_alloc+0x57/0x220
[  354.091861][T13610]  sk_prot_alloc+0x57/0x220
[  354.091888][T13610]  ? sk_alloc+0x24/0x370
[  354.091919][T13610]  sk_alloc+0x3a/0x370
[  354.091954][T13610]  inet_create+0x76b/0x1000
[  354.091984][T13610]  ? inet_create+0x97/0x1000
[  354.092013][T13610]  __sock_create+0x4b0/0x9f0
[  354.092050][T13610]  udp_sock_create4+0xbe/0x4b0
[  354.092079][T13610]  ? __pfx_udp_sock_create4+0x10/0x10
[  354.092108][T13610]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.092143][T13610]  fou_nl_add_doit+0x16c/0x690
[  354.092176][T13610]  ? __pfx_fou_nl_add_doit+0x10/0x10
[  354.092228][T13610]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  354.092268][T13610]  genl_family_rcv_msg_doit+0x212/0x300
[  354.092300][T13610]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.092338][T13610]  ? bpf_lsm_capable+0x9/0x20
[  354.092367][T13610]  ? security_capable+0x7e/0x2e0
[  354.092399][T13610]  genl_rcv_msg+0x60e/0x790
[  354.092429][T13610]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.092451][T13610]  ? __pfx_fou_nl_add_doit+0x10/0x10
[  354.092496][T13610]  netlink_rcv_skb+0x208/0x470
[  354.092523][T13610]  ? __lock_acquire+0xaac/0xd20
[  354.092552][T13610]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.092577][T13610]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.092626][T13610]  ? down_read+0x1ad/0x2e0
[  354.092655][T13610]  genl_rcv+0x28/0x40
[  354.092674][T13610]  netlink_unicast+0x75b/0x8d0
[  354.092714][T13610]  netlink_sendmsg+0x805/0xb30
[  354.092755][T13610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.092789][T13610]  ? aa_sock_msg_perm+0x94/0x160
[  354.092815][T13610]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.092839][T13610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.092870][T13610]  __sock_sendmsg+0x21c/0x270
[  354.092897][T13610]  ____sys_sendmsg+0x505/0x830
[  354.092935][T13610]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.092978][T13610]  ? import_iovec+0x74/0xa0
[  354.093011][T13610]  ___sys_sendmsg+0x21f/0x2a0
[  354.093046][T13610]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.093120][T13610]  ? __fget_files+0x2a/0x420
[  354.093153][T13610]  ? __fget_files+0x3a0/0x420
[  354.093193][T13610]  __x64_sys_sendmsg+0x19b/0x260
[  354.093227][T13610]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.093284][T13610]  ? do_syscall_64+0xba/0x210
[  354.093313][T13610]  do_syscall_64+0xf6/0x210
[  354.093337][T13610]  ? clear_bhb_loop+0x60/0xb0
[  354.093363][T13610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.093383][T13610] RIP: 0033:0x7f248c98e969
[  354.093401][T13610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.093419][T13610] RSP: 002b:00007f248d75a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.093441][T13610] RAX: ffffffffffffffda RBX: 00007f248cbb5fa0 RCX: 00007f248c98e969
[  354.093456][T13610] RDX: 0000000000044844 RSI: 0000200000001040 RDI: 0000000000000003
[  354.093468][T13610] RBP: 00007f248d75a090 R08: 0000000000000000 R09: 0000000000000000
[  354.093481][T13610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.093493][T13610] R13: 0000000000000000 R14: 00007f248cbb5fa0 R15: 00007ffc4a8ad668
[  354.093528][T13610]  </TASK>
[  354.305914][T13594] xt_bpf: check failed: parse error
[  354.610211][T13615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.923637][T13620] __nla_validate_parse: 44 callbacks suppressed
[  354.923660][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'.
[  355.130391][T13626] netlink: 'syz.5.2192': attribute type 21 has an invalid length.
[  355.149403][T13626] netlink: 'syz.5.2192': attribute type 15 has an invalid length.
[  355.165683][T13626] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2192'.
[  355.358780][T13633] vxcan1 speed is unknown, defaulting to 1000
[  355.658476][T13644] FAULT_INJECTION: forcing a failure.
[  355.658476][T13644] name failslab, interval 1, probability 0, space 0, times 0
[  355.681085][T13644] CPU: 0 UID: 0 PID: 13644 Comm: syz.1.2197 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  355.681118][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  355.681132][T13644] Call Trace:
[  355.681140][T13644]  <TASK>
[  355.681148][T13644]  dump_stack_lvl+0x189/0x250
[  355.681194][T13644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.681224][T13644]  ? __pfx__printk+0x10/0x10
[  355.681252][T13644]  ? __pfx___might_resched+0x10/0x10
[  355.681271][T13644]  ? fs_reclaim_acquire+0x7d/0x100
[  355.681308][T13644]  should_fail_ex+0x414/0x560
[  355.681337][T13644]  should_failslab+0xa8/0x100
[  355.681366][T13644]  __kmalloc_noprof+0xcb/0x4f0
[  355.681392][T13644]  ? security_sk_alloc+0x52/0x390
[  355.681427][T13644]  security_sk_alloc+0x52/0x390
[  355.681464][T13644]  sk_prot_alloc+0x101/0x220
[  355.681499][T13644]  sk_alloc+0x3a/0x370
[  355.681534][T13644]  inet_create+0x76b/0x1000
[  355.681564][T13644]  ? inet_create+0x97/0x1000
[  355.681593][T13644]  __sock_create+0x4b0/0x9f0
[  355.681630][T13644]  udp_sock_create4+0xbe/0x4b0
[  355.681659][T13644]  ? __pfx_udp_sock_create4+0x10/0x10
[  355.681687][T13644]  ? __pfx___nla_validate_parse+0x10/0x10
[  355.681723][T13644]  fou_nl_add_doit+0x16c/0x690
[  355.681756][T13644]  ? __pfx_fou_nl_add_doit+0x10/0x10
[  355.681807][T13644]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  355.681841][T13644]  genl_family_rcv_msg_doit+0x212/0x300
[  355.681872][T13644]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  355.681933][T13644]  ? bpf_lsm_capable+0x9/0x20
[  355.681957][T13644]  ? security_capable+0x7e/0x2e0
[  355.681987][T13644]  genl_rcv_msg+0x60e/0x790
[  355.682016][T13644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.682037][T13644]  ? __pfx_fou_nl_add_doit+0x10/0x10
[  355.682082][T13644]  netlink_rcv_skb+0x208/0x470
[  355.682110][T13644]  ? __lock_acquire+0xaac/0xd20
[  355.682140][T13644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.682164][T13644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.682230][T13644]  ? down_read+0x1ad/0x2e0
[  355.682256][T13644]  genl_rcv+0x28/0x40
[  355.682274][T13644]  netlink_unicast+0x75b/0x8d0
[  355.682309][T13644]  netlink_sendmsg+0x805/0xb30
[  355.682345][T13644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.682374][T13644]  ? aa_sock_msg_perm+0x94/0x160
[  355.682397][T13644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.682418][T13644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.682445][T13644]  __sock_sendmsg+0x21c/0x270
[  355.682470][T13644]  ____sys_sendmsg+0x505/0x830
[  355.682503][T13644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.682540][T13644]  ? import_iovec+0x74/0xa0
[  355.682570][T13644]  ___sys_sendmsg+0x21f/0x2a0
[  355.682600][T13644]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.682663][T13644]  ? __fget_files+0x2a/0x420
[  355.682687][T13644]  ? __fget_files+0x3a0/0x420
[  355.682722][T13644]  __x64_sys_sendmsg+0x19b/0x260
[  355.682753][T13644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.682797][T13644]  ? do_syscall_64+0xba/0x210
[  355.682822][T13644]  do_syscall_64+0xf6/0x210
[  355.682844][T13644]  ? clear_bhb_loop+0x60/0xb0
[  355.682866][T13644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.682884][T13644] RIP: 0033:0x7f248c98e969
[  355.682901][T13644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.682916][T13644] RSP: 002b:00007f248d75a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.682936][T13644] RAX: ffffffffffffffda RBX: 00007f248cbb5fa0 RCX: 00007f248c98e969
[  355.682949][T13644] RDX: 0000000000044844 RSI: 0000200000001040 RDI: 0000000000000003
[  355.682961][T13644] RBP: 00007f248d75a090 R08: 0000000000000000 R09: 0000000000000000
[  355.682972][T13644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.682983][T13644] R13: 0000000000000000 R14: 00007f248cbb5fa0 R15: 00007ffc4a8ad668
[  355.683012][T13644]  </TASK>
[  356.324046][T13649] x_tables: duplicate underflow at hook 3
[  356.340083][T13648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2198'.
[  357.186963][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'.
[  357.216194][T13666] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  357.224514][T13666] tipc: Enabled bearer <udp:syz1>, priority 10
[  357.330722][T13669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2202'.
[  357.635688][T13674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2205'.
[  357.699293][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'.
[  358.007859][T13684] syzkaller1: entered promiscuous mode
[  358.023840][T13684] syzkaller1: entered allmulticast mode
[  358.528921][T13700] batadv_slave_1: entered promiscuous mode
[  358.722452][T13701] batadv_slave_1: left promiscuous mode
[  359.529448][T13738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'.
[  359.542544][T13738] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  359.554323][T13738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2219'.
[  359.564574][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'.
[  359.578384][T13736] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  359.737291][T13739] team_slave_0: entered promiscuous mode
[  359.743158][T13739] team_slave_1: entered promiscuous mode
[  359.761111][T13739] vlan2: entered promiscuous mode
[  359.773447][T13739] team0: entered promiscuous mode
[  360.189406][T13750] vxcan1 speed is unknown, defaulting to 1000
[  360.250603][T13761] __nla_validate_parse: 1 callbacks suppressed
[  360.250625][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2225'.
[  360.665267][T13771] openvswitch: netlink: Actions may not be safe on all matching packets
[  360.822198][T13769] wireguard0: entered promiscuous mode
[  361.536972][T13749] vxcan1 speed is unknown, defaulting to 1000
[  363.719265][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2231'.
[  363.793072][T13783] syzkaller1: entered promiscuous mode
[  363.805583][T13783] syzkaller1: entered allmulticast mode
[  364.219866][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2235'.
[  364.731199][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2239'.
[  364.880754][T13810] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2239'.
[  364.941864][T13817] vxcan1 speed is unknown, defaulting to 1000
[  365.015749][T13828] xt_time: unknown flags 0x4
[  365.300880][T13843] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  365.377248][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.385844][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.394607][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.403648][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.560928][ T5840] block nbd0: Receive control failed (result -32)
[  365.604164][T13852] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2251'.
[  365.634497][T13852] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2251'.
[  365.693056][   T48] IPVS: starting estimator thread 0...
[  365.845677][T13861] IPVS: using max 30 ests per chain, 72000 per kthread
[  365.867331][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2252'.
[  366.005630][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2257'.
[  366.015932][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2257'.
[  366.052513][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2257'.
[  366.365862][   T48] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  366.382867][   T48] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  366.468209][   T48] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa
[  367.291420][T13915] tipc: Started in network mode
[  367.301007][T13915] tipc: Node identity dab537b340fe, cluster identity 4711
[  367.309001][T13915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.361332][T13915] syzkaller0: entered promiscuous mode
[  367.372011][T13915] syzkaller0: entered allmulticast mode
[  367.394192][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2270'.
[  367.424447][T13915] bridge_slave_0: mtu less than device minimum
[  367.448899][T13914] tipc: Resetting bearer <eth:syzkaller0>
[  367.592079][T13914] tipc: Disabling bearer <eth:syzkaller0>
[  367.859805][T13933] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  368.116146][T13941] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2276'.
[  368.172769][ T5840] Bluetooth: hci7: link tx timeout
[  368.179738][ T5840] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  368.192914][ T5835] Bluetooth: hci7: link tx timeout
[  368.198361][ T5835] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  368.206252][ T5835] Bluetooth: hci7: link tx timeout
[  368.211453][ T5835] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  368.305033][T13947] SET target dimension over the limit!
[  368.740984][T13953] tap0: tun_chr_ioctl cmd 1074812118
[  369.119535][T13978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.518386][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2292'.
[  369.544629][T13991] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  369.567890][T13991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.790580][T13996] pim6reg: entered allmulticast mode
[  369.901139][T14010] netlink: 'syz.4.2296': attribute type 1 has an invalid length.
[  369.991005][T14015] sctp: [Deprecated]: syz.4.2296 (pid 14015) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.991005][T14015] Use struct sctp_sack_info instead
[  370.255172][ T5835] Bluetooth: hci7: command 0x0405 tx timeout
[  370.300465][T14025] netlink: 'syz.6.2300': attribute type 303 has an invalid length.
[  370.310871][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2300'.
[  370.629350][T14045] __nla_validate_parse: 1 callbacks suppressed
[  370.629370][T14045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2305'.
[  370.648649][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2305'.
[  370.772945][T14057] veth0: entered promiscuous mode
[  370.781292][T14046] vxcan1 speed is unknown, defaulting to 1000
[  370.787010][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'.
[  370.881205][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'.
[  370.899431][T14057] bond0: (slave syz_tun): Releasing active interface
[  370.915218][T14061] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2309'.
[  371.005292][T14061] gretap2: entered promiscuous mode
[  371.033805][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  371.136336][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.144612][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.153460][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.162083][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.246041][T14068] hsr0: left promiscuous mode
[  372.342814][T14068] veth1_vlan: left allmulticast mode
[  372.408730][T14068] tipc: Resetting bearer <eth:macvtap0>
[  372.632002][T14068] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  372.746876][T14068] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.755730][T14068] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.764460][T14068] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.773363][T14068] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.838470][T14068] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.847802][T14068] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.856238][T14068] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.864621][T14068] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.917102][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  372.933472][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  372.965447][T14053] veth0: left promiscuous mode
[  372.992517][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  373.014636][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  373.063424][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  373.103952][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  373.124341][T14062] netlink: 'syz.7.2310': attribute type 29 has an invalid length.
[  373.270289][T14081] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  373.478187][T14090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input9
[  374.420113][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.437533][T14116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.499536][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.525117][T14116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.692652][T14115] vxcan1 speed is unknown, defaulting to 1000
[  375.234282][T14132] tipc: MTU too low for tipc bearer
[  375.451766][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2330'.
[  375.462984][T14144] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2330'.
[  375.473277][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2330'.
[  375.482345][T14143] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2330'.
[  375.635798][T14149] veth1_macvtap: left promiscuous mode
[  375.689821][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'.
[  376.240642][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'.
[  376.377609][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2339'.
[  376.387867][T14174] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  376.416961][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2339'.
[  376.443986][T14174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2339'.
[  376.446640][T14175] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  376.461809][T14176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2339'.
[  376.674386][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2341'.
[  376.904892][ T8923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.913551][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.921792][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.929946][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.991789][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'.
[  377.450102][T14203] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2347'.
[  378.044062][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'.
[  378.180584][T14232] vlan0: entered allmulticast mode
[  379.115817][T14261] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  379.182623][T14261] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  379.279981][T14273] vxcan1 speed is unknown, defaulting to 1000
[  379.849172][T14277] vxcan1 speed is unknown, defaulting to 1000
[  381.124375][T14339] __nla_validate_parse: 6 callbacks suppressed
[  381.124395][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2385'.
[  381.404056][T14348] validate_nla: 18 callbacks suppressed
[  381.404078][T14348] netlink: 'syz.4.2388': attribute type 1 has an invalid length.
[  381.437982][T14348] netlink: 'syz.4.2388': attribute type 1 has an invalid length.
[  381.636308][T14348] 8021q: adding VLAN 0 to HW filter on device bond6
[  381.688144][T14355] 8021q: adding VLAN 0 to HW filter on device bond6
[  381.696012][T14355] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  381.708508][T14355] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  381.828258][T14348] veth9: entered promiscuous mode
[  382.120241][T14362] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2390'.
[  382.268632][T14365] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2391'.
[  382.308735][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2391'.
[  382.471587][T14368] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  382.486091][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2393'.
[  382.624293][T14371] sch_tbf: burst 5 is lower than device bridge2 mtu (1514) !
[  382.660622][ T8905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.668849][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.677036][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.686057][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.753958][T14370] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2393'.
[  382.809693][T14370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2393'.
[  383.398249][T14393] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2400'.
[  383.425622][T14392] netlink: 22 bytes leftover after parsing attributes in process `syz.7.2398'.
[  383.751794][T14402] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2402'.
[  384.783592][T14441] bond0: entered promiscuous mode
[  384.790277][T14441] bond_slave_0: entered promiscuous mode
[  384.805488][T14441] bond_slave_1: entered promiscuous mode
[  384.823781][T14441] bond0: left promiscuous mode
[  384.830579][T14441] bond_slave_0: left promiscuous mode
[  384.837357][T14441] bond_slave_1: left promiscuous mode
[  384.993341][T14448] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  385.892586][T14475] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  385.932898][T14481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.936255][T14475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.941439][T14480] syzkaller0: entered promiscuous mode
[  385.954076][T14480] syzkaller0: entered allmulticast mode
[  385.955542][T14475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.975168][T14481] tipc: Resetting bearer <eth:syzkaller0>
[  385.975216][T14475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.998122][T14479] tipc: Resetting bearer <eth:syzkaller0>
[  385.998176][T14475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.015069][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  386.058329][T14479] tipc: Disabling bearer <eth:syzkaller0>
[  386.141779][T14488] __nla_validate_parse: 6 callbacks suppressed
[  386.141798][T14488] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2428'.
[  386.238321][T14492] vxcan1 speed is unknown, defaulting to 1000
[  388.163184][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'.
[  388.416867][   T73] net_ratelimit: 4 callbacks suppressed
[  388.416890][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.430643][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.438794][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.446953][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.582521][T14555] netlink: 'syz.7.2449': attribute type 1 has an invalid length.
[  388.590666][T14555] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2449'.
[  388.604501][T14555] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  388.737059][T14564] netlink: 'syz.7.2451': attribute type 1 has an invalid length.
[  388.754742][T14564] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  389.226527][T14581] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2457'.
[  389.274518][T14583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.283608][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.301922][T14581] vxcan1 speed is unknown, defaulting to 1000
[  391.842206][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2470'.
[  392.316768][T14635] dvmrp8: entered allmulticast mode
[  392.334314][T14634] dvmrp8: left allmulticast mode
[  392.458387][T14638] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2474'.
[  392.503569][T14638] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2474'.
[  392.543330][T14640] vxcan1 speed is unknown, defaulting to 1000
[  393.545540][ T8923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.554153][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.862138][T14657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'.
[  393.873667][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'.
[  393.901438][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'.
[  393.926174][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'.
[  393.950973][T14658] netlink: 'syz.1.2480': attribute type 3 has an invalid length.
[  393.984353][T14658] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2480'.
[  394.015389][T14657] netlink: 'syz.1.2480': attribute type 3 has an invalid length.
[  394.023196][T14657] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2480'.
[  394.176896][ T7683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.185894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.261734][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.284318][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.284476][T14667] vxcan1 speed is unknown, defaulting to 1000
[  394.310507][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.343607][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.369197][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.390308][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.434661][T14669] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[  394.969105][T14676] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  395.059359][T14680] netlink: 'syz.7.2485': attribute type 5 has an invalid length.
[  395.074971][T14680] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2485'.
[  395.544730][T14694] netlink: 'syz.6.2490': attribute type 21 has an invalid length.
[  395.575919][T14694] netlink: 'syz.6.2490': attribute type 6 has an invalid length.
[  395.929986][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  395.941321][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  395.952609][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  395.962528][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  395.971465][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  396.031150][T14706] vxcan1 speed is unknown, defaulting to 1000
[  397.073549][T14750] __nla_validate_parse: 5 callbacks suppressed
[  397.073569][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'.
[  397.167613][T14753] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  397.428356][T14757] syzkaller0: entered promiscuous mode
[  397.444180][T14757] syzkaller0: entered allmulticast mode
[  397.588516][T14765] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2510'.
[  397.624987][T14765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2510'.
[  398.015466][ T5835] Bluetooth: hci8: command tx timeout
[  398.086816][T14748] vxcan1 speed is unknown, defaulting to 1000
[  398.270504][T14780] netlink: 'syz.1.2515': attribute type 10 has an invalid length.
[  398.278978][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2515'.
[  398.394039][T14780] team0: No ports can be present during mode change
[  398.652580][T14791] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2517'.
[  398.884753][T14706] chnl_net:caif_netlink_parms(): no params data found
[  398.989561][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2519'.
[  399.151114][T14784] vxcan1 speed is unknown, defaulting to 1000
[  399.299159][ T7683] net_ratelimit: 108 callbacks suppressed
[  399.299183][ T7683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.314861][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.473951][T14706] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.482028][T14706] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.489734][T14706] bridge_slave_0: entered allmulticast mode
[  399.510122][T14706] bridge_slave_0: entered promiscuous mode
[  399.530784][T14706] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.546015][T14706] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.563570][T14706] bridge_slave_1: entered allmulticast mode
[  399.585059][T14706] bridge_slave_1: entered promiscuous mode
[  399.702210][T14706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.733641][T14706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.924081][T14706] team0: Port device team_slave_0 added
[  399.942375][ T7683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.950971][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.997411][T14706] team0: Port device team_slave_1 added
[  400.095627][ T5835] Bluetooth: hci8: command tx timeout
[  400.237012][T14706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.247625][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.274083][T14706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.349432][T14706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.365387][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.439290][T14706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.700736][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  400.710885][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  400.720316][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  400.733379][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  400.741716][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  400.803355][T14706] hsr_slave_0: entered promiscuous mode
[  400.817287][T14706] hsr_slave_1: entered promiscuous mode
[  400.853524][T14706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  400.861811][T14706] Cannot create hsr debugfs directory
[  400.989183][T14831] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2526'.
[  401.200099][T14818] vxcan1 speed is unknown, defaulting to 1000
[  402.088539][T14706] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  402.139413][T14706] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  402.175569][ T5840] Bluetooth: hci8: command tx timeout
[  402.187052][T14706] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  402.204744][T14706] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  402.212010][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.240846][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.295503][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.298767][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.344048][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.388008][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.414191][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.454357][T14706] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.463675][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.488268][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.502287][T14706] 8021q: adding VLAN 0 to HW filter on device team0
[  402.513998][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2529'.
[  402.539114][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.546402][ T8923] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.612801][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.620120][ T8923] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.815099][ T5840] Bluetooth: hci9: command tx timeout
[  403.274567][T14706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.472132][T14864] vxcan1 speed is unknown, defaulting to 1000
[  404.255699][ T5840] Bluetooth: hci8: command tx timeout
[  404.416845][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.425558][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.552395][T14874] vxcan1 speed is unknown, defaulting to 1000
[  404.583329][T14706] veth0_vlan: entered promiscuous mode
[  404.641969][T14706] veth1_vlan: entered promiscuous mode
[  404.688703][T14818] chnl_net:caif_netlink_parms(): no params data found
[  404.895988][ T5840] Bluetooth: hci9: command tx timeout
[  404.993407][T14706] veth0_macvtap: entered promiscuous mode
[  405.111413][T14706] veth1_macvtap: entered promiscuous mode
[  405.179048][T14818] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.186630][T14818] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.193906][T14818] bridge_slave_0: entered allmulticast mode
[  405.202104][T14818] bridge_slave_0: entered promiscuous mode
[  405.211326][T14818] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.220375][T14818] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.228339][T14818] bridge_slave_1: entered allmulticast mode
[  405.237637][T14818] bridge_slave_1: entered promiscuous mode
[  405.423814][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.459707][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.511921][T14706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.631742][T14706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.673995][T14818] team0: Port device team_slave_0 added
[  405.697271][ T8903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.706048][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.720390][T14818] team0: Port device team_slave_1 added
[  405.854177][T14818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.863769][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.890906][T14818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.912335][T14706] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.923458][T14706] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.941641][T14706] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.950642][T14706] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.972694][T14818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.982680][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.021752][T14818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.046021][T14906] batadv_slave_1: entered promiscuous mode
[  406.202873][T14909] netlink: 'syz.1.2544': attribute type 4 has an invalid length.
[  406.225227][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.261912][T14818] hsr_slave_0: entered promiscuous mode
[  406.284337][T14818] hsr_slave_1: entered promiscuous mode
[  406.291838][T14818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.300324][T14818] Cannot create hsr debugfs directory
[  406.325507][T14909] netlink: 'syz.1.2544': attribute type 4 has an invalid length.
[  406.554346][T14912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.567415][T14912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.576342][T14912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.590913][T14912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.615678][T14912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.992795][ T5840] Bluetooth: hci9: command tx timeout
[  407.122378][ T8901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.142102][ T8901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.549604][ T8911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.570956][ T8911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.817611][T14818] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  407.867009][T14818] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  407.902203][T14818] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  407.950176][T14818] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  408.160019][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.298139][T14818] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.363414][T14818] 8021q: adding VLAN 0 to HW filter on device team0
[  408.391729][T14931] __nla_validate_parse: 27 callbacks suppressed
[  408.391751][T14931] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2549'.
[  408.410893][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.418431][ T8913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.480171][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.487417][ T8903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.495395][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2549'.
[  408.739655][T14940] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2551'.
[  408.926781][T14943] vxcan1 speed is unknown, defaulting to 1000
[  409.055407][ T5840] Bluetooth: hci9: command tx timeout
[  409.276947][T14818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.666653][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2555'.
[  409.757036][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'.
[  409.805889][T14974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2556'.
[  409.913244][T14962] vxcan1 speed is unknown, defaulting to 1000
[  410.002461][T14981] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.123562][T14981] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.159071][T14818] veth0_vlan: entered promiscuous mode
[  410.183071][T14818] veth1_vlan: entered promiscuous mode
[  410.190136][   T73] net_ratelimit: 3 callbacks suppressed
[  410.190153][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.204460][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.264445][T14981] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.334271][T14985] 8021q: VLANs not supported on ip_vti0
[  410.351767][T14818] veth0_macvtap: entered promiscuous mode
[  410.376998][T14981] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.455351][T14818] veth1_macvtap: entered promiscuous mode
[  410.489507][T14818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.529828][T14818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.553831][T14818] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.573225][T14818] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.586659][T14818] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.607354][T14818] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.639093][T14990] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2561'.
[  410.671390][T14981] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.675342][T14990] nbd: illegal input index 65508
[  410.710085][T14981] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.821992][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.843265][T14981] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.914034][T14981] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.104345][T14995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2562'.
[  411.136733][ T8903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.148194][ T8903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.246646][ T8901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.275316][ T8901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.456198][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.464747][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.646754][T15000] 
@ÿ: renamed from veth1_macvtap (while UP)
[  411.820057][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2520'.
[  412.372493][T15020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.381473][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.722280][T15035] sctp: [Deprecated]: syz.1.2574 (pid 15035) Use of struct sctp_assoc_value in delayed_ack socket option.
[  412.722280][T15035] Use struct sctp_sack_info instead
[  413.386481][T15060] ipt_rpfilter: unknown options
[  413.623005][T15065] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2585'.
[  413.654227][T15065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.306366][T15087] netlink: 'syz.8.2592': attribute type 21 has an invalid length.
[  414.320398][T15087] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2592'.
[  414.343265][ T6960] IPVS: starting estimator thread 0...
[  414.436424][T15092] IPVS: using max 28 ests per chain, 67200 per kthread
[  414.476135][T15091] xt_CT: No such helper "netbios-ns"
[  414.641780][T15110] siw: device registration error -23
[  414.708580][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2602'.
[  414.720699][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'.
[  414.727787][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2602'.
[  414.736256][T15118] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2601'.
[  415.121271][T15142] vxcan1 speed is unknown, defaulting to 1000
[  415.435850][T15163] netlink: 'syz.9.2613': attribute type 1 has an invalid length.
[  415.443668][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2613'.
[  415.793595][T15180] raw_sendmsg: syz.1.2618 forgot to set AF_INET. Fix it!
[  415.868111][T15177] 8021q: adding VLAN 0 to HW filter on device bond2
[  416.325204][T15201] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2626'.
[  416.650885][T15212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2629'.
[  416.929919][T15216] vxcan1 speed is unknown, defaulting to 1000
[  417.329825][T15227] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2634'.
[  418.000386][T15241] vlan3: entered promiscuous mode
[  418.005659][T15241] bond0: entered promiscuous mode
[  418.010985][T15241] vlan3: entered allmulticast mode
[  418.016536][T15241] bond0: entered allmulticast mode
[  418.494262][T15254] netlink: 'syz.1.2644': attribute type 29 has an invalid length.
[  418.561672][T15255] netlink: 'syz.1.2644': attribute type 29 has an invalid length.
[  418.579396][T15255] netlink: 'syz.1.2644': attribute type 29 has an invalid length.
[  418.597406][T15255] netlink: 'syz.1.2644': attribute type 29 has an invalid length.
[  418.944046][T15261] vxcan1 speed is unknown, defaulting to 1000
[  419.381310][T15266] __nla_validate_parse: 5 callbacks suppressed
[  419.381332][T15266] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2648'.
[  420.550943][T15285] xt_CT: No such helper "pptp"
[  420.714259][T15310] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2658'.
[  420.779848][ T6966] IPVS: starting estimator thread 0...
[  420.785933][T15315] delete_channel: no stack
[  420.905896][T15316] IPVS: using max 24 ests per chain, 57600 per kthread
[  420.988767][T15323] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2662'.
[  421.011244][T15323] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2662'.
[  421.027774][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2658'.
[  421.078827][T15324] netlink: 'syz.9.2658': attribute type 1 has an invalid length.
[  421.124176][T15324] netlink: 'syz.9.2658': attribute type 2 has an invalid length.
[  421.195815][T15324] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2658'.
[  423.226496][T15381] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2675'.
[  423.581973][T15411] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2682'.
[  424.032046][T15417] IPVS: persistence engine module ip_vs_pe_ not found
[  424.216189][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  424.227325][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  424.236648][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  424.246986][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  424.258995][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  424.386528][T15429] vxcan1 speed is unknown, defaulting to 1000
[  424.600093][T15440] pim6reg1: entered promiscuous mode
[  424.610723][T15440] pim6reg1: entered allmulticast mode
[  425.597229][T15474] netlink: 324 bytes leftover after parsing attributes in process `syz.8.2698'.
[  425.914357][T15429] chnl_net:caif_netlink_parms(): no params data found
[  426.031301][T15483] sctp: [Deprecated]: syz.9.2703 (pid 15483) Use of int in max_burst socket option.
[  426.031301][T15483] Use struct sctp_assoc_value instead
[  426.134289][    T9] IPVS: starting estimator thread 0...
[  426.225055][T15492] IPVS: using max 27 ests per chain, 64800 per kthread
[  426.335040][ T5840] Bluetooth: hci3: command tx timeout
[  426.440451][T15491] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.448276][T15491] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.540598][T15495] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2705'.
[  426.774188][T15491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.799552][T15491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.049291][T15491] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.061466][T15491] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.071367][T15491] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.082368][T15491] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.203036][T15429] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.228286][T15429] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.254389][T15429] bridge_slave_0: entered allmulticast mode
[  427.279100][T15429] bridge_slave_0: entered promiscuous mode
[  427.318681][T15429] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.338601][T15429] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.365872][T15429] bridge_slave_1: entered allmulticast mode
[  427.374289][T15429] bridge_slave_1: entered promiscuous mode
[  427.500127][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.542971][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.683543][T15429] team0: Port device team_slave_0 added
[  427.721372][T15511] syz.7.2708 (15511) used obsolete PPPIOCDETACH ioctl
[  427.802654][T15429] team0: Port device team_slave_1 added
[  427.857544][T15510] syz.9.2709: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  427.873905][T15510] CPU: 1 UID: 0 PID: 15510 Comm: syz.9.2709 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  427.873938][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  427.873956][T15510] Call Trace:
[  427.873969][T15510]  <TASK>
[  427.873979][T15510]  dump_stack_lvl+0x189/0x250
[  427.874023][T15510]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.874055][T15510]  ? __pfx__printk+0x10/0x10
[  427.874077][T15510]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  427.874100][T15510]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  427.874126][T15510]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  427.874153][T15510]  warn_alloc+0x214/0x310
[  427.874192][T15510]  ? __pfx_warn_alloc+0x10/0x10
[  427.874223][T15510]  ? kasan_save_track+0x4f/0x80
[  427.874248][T15510]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  427.874274][T15510]  ? xskq_create+0x56/0x170
[  427.874298][T15510]  ? __x64_sys_setsockopt+0x18b/0x220
[  427.874327][T15510]  ? do_syscall_64+0xf6/0x210
[  427.874350][T15510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.874383][T15510]  __vmalloc_node_range_noprof+0x125/0x12c0
[  427.874450][T15510]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  427.874486][T15510]  ? __kasan_kmalloc+0x93/0xb0
[  427.874519][T15510]  vmalloc_user_noprof+0x74/0x80
[  427.874551][T15510]  ? xskq_create+0xbf/0x170
[  427.874571][T15510]  xskq_create+0xbf/0x170
[  427.874603][T15510]  xsk_init_queue+0xb0/0x110
[  427.874628][T15510]  xsk_setsockopt+0x43f/0x710
[  427.874653][T15510]  ? __pfx_xsk_setsockopt+0x10/0x10
[  427.874687][T15510]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  427.874712][T15510]  ? __pfx_xsk_setsockopt+0x10/0x10
[  427.874735][T15510]  do_sock_setsockopt+0x25a/0x3e0
[  427.874770][T15510]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  427.874803][T15510]  ? __fget_files+0x2a/0x420
[  427.874834][T15510]  ? __fget_files+0x3a0/0x420
[  427.874860][T15510]  ? __fget_files+0x2a/0x420
[  427.874896][T15510]  __x64_sys_setsockopt+0x18b/0x220
[  427.874930][T15510]  do_syscall_64+0xf6/0x210
[  427.874956][T15510]  ? clear_bhb_loop+0x60/0xb0
[  427.874982][T15510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.875003][T15510] RIP: 0033:0x7fda9d98e969
[  427.875023][T15510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.875042][T15510] RSP: 002b:00007fda9e899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  427.875065][T15510] RAX: ffffffffffffffda RBX: 00007fda9dbb6080 RCX: 00007fda9d98e969
[  427.875081][T15510] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  427.875093][T15510] RBP: 00007fda9da10ab1 R08: 0000000000000004 R09: 0000000000000000
[  427.875106][T15510] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.875119][T15510] R13: 0000000000000000 R14: 00007fda9dbb6080 R15: 00007fffb5331ea8
[  427.875154][T15510]  </TASK>
[  428.172201][T15510] Mem-Info:
[  428.176095][T15510] active_anon:8005 inactive_anon:0 isolated_anon:0
[  428.176095][T15510]  active_file:1835 inactive_file:39975 isolated_file:0
[  428.176095][T15510]  unevictable:768 dirty:97 writeback:0
[  428.176095][T15510]  slab_reclaimable:12910 slab_unreclaimable:186872
[  428.176095][T15510]  mapped:58690 shmem:4235 pagetables:823
[  428.176095][T15510]  sec_pagetables:0 bounce:0
[  428.176095][T15510]  kernel_misc_reclaimable:0
[  428.176095][T15510]  free:1187675 free_pcp:831 free_cma:0
[  428.222163][T15510] Node 0 active_anon:32020kB inactive_anon:0kB active_file:7340kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:234760kB dirty:384kB writeback:0kB shmem:15404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13776kB pagetables:3292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  428.232946][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.260200][T15510] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  428.295093][T15510] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.323394][T15510] lowmem_reserve[]: 0 2503 2503 2503 2503
[  428.329581][T15510] Node 0 DMA32 free:828140kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:32012kB inactive_anon:0kB active_file:7340kB inactive_file:159592kB unevictable:1536kB writepending:380kB present:3129332kB managed:2563940kB mlocked:0kB bounce:0kB free_pcp:3564kB local_pcp:284kB free_cma:0kB
[  428.330376][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.359753][T15510] lowmem_reserve[]: 0 0 0 0 0
[  428.359805][T15510] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.359863][T15510] lowmem_reserve[]: 0 0 0 0 0
[  428.359910][T15510] Node 1 Normal free:3906832kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.359969][T15510] lowmem_reserve[]: 0 0 0 0 0
[  428.360012][T15510] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  428.360151][T15510] Node 0 DMA32: 1*4kB (M) 9*8kB (E) 24*16kB (UE) 17*32kB (ME) 4*64kB (UE) 10*128kB (UME) 41*256kB (UME) 16*512kB (UM) 8*1024kB (UM) 0*2048kB 195*4096kB (UM) = 828140kB
[  428.360338][T15510] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  428.360460][T15510] Node 1 Normal: 224*4kB (UE) 66*8kB (UME) 42*16kB (UME) 231*32kB (UME) 108*64kB (UME) 32*128kB (UME) 15*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3906832kB
[  428.360664][T15510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  428.360683][T15510] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  428.360699][T15510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  428.360718][T15510] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  428.360736][T15510] 46042 total pagecache pages
[  428.360761][T15510] 0 pages in swap cache
[  428.360771][T15510] Free swap  = 124996kB
[  428.360781][T15510] Total swap = 124996kB
[  428.360791][T15510] 2097051 pages RAM
[  428.360801][T15510] 0 pages HighMem/MovableOnly
[  428.360809][T15510] 424408 pages reserved
[  428.360818][T15510] 0 pages cma reserved
[  428.455653][ T5840] Bluetooth: hci3: command tx timeout
[  428.599514][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.639226][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.648984][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.777527][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.941085][T15429] hsr_slave_0: entered promiscuous mode
[  428.956521][T15429] hsr_slave_1: entered promiscuous mode
[  428.963133][T15429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.005658][T15429] Cannot create hsr debugfs directory
[  429.365573][T15530] batadv_slave_0: entered promiscuous mode
[  429.396502][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2714'.
[  429.432455][T15429] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.458916][T15429] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.548566][T15530] bond1: entered promiscuous mode
[  429.554349][T15530] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.841258][T15530] bond1 (unregistering): Released all slaves
[  429.873996][T15429] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.885262][T15429] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.997398][T15429] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.008990][T15429] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.090788][T15429] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.101114][T15429] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.319720][T15429] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  430.332834][T15429] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  430.345862][T15429] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  430.384333][T15429] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  430.529846][T15429] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.579874][T15429] 8021q: adding VLAN 0 to HW filter on device team0
[  430.615560][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.622731][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.656557][ T5840] Bluetooth: hci3: command tx timeout
[  430.659743][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.669196][ T8913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.705729][T15568] netlink: 'syz.8.2725': attribute type 1 has an invalid length.
[  430.738567][T15429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  430.752959][T15429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  430.833790][T15570] gretap1: entered promiscuous mode
[  431.153925][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.229320][T15589] netlink: zone id is out of range
[  431.235034][T15589] netlink: zone id is out of range
[  431.250679][T15590] netlink: 'syz.9.2729': attribute type 7 has an invalid length.
[  431.274534][T15590] netlink: 'syz.9.2729': attribute type 8 has an invalid length.
[  431.367931][T15583] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2729'.
[  431.397477][T15429] veth0_vlan: entered promiscuous mode
[  431.459095][T15429] veth1_vlan: entered promiscuous mode
[  431.525499][T15429] veth0_macvtap: entered promiscuous mode
[  431.603817][T15429] veth1_macvtap: entered promiscuous mode
[  431.630248][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.648360][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.671023][T15429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.680375][T15429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.690915][T15429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.702371][T15429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.868252][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.882175][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.966200][ T8911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.974561][ T8911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.088545][T15611] netlink: 'syz.9.2738': attribute type 1 has an invalid length.
[  432.150493][T15611] 8021q: adding VLAN 0 to HW filter on device bond1
[  432.202997][T15616] bond1: (slave ip6gretap1): making interface the new active one
[  432.232776][T15616] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  432.509674][T15627] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2739'.
[  432.531902][T15626] pimreg: entered allmulticast mode
[  432.737965][ T5840] Bluetooth: hci3: command tx timeout
[  432.963039][T15644] netlink: 'syz.1.2743': attribute type 16 has an invalid length.
[  432.971864][T15644] netlink: 'syz.1.2743': attribute type 17 has an invalid length.
[  433.000556][T15644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.087835][T15650] netlink: 'syz.7.2747': attribute type 11 has an invalid length.
[  433.142170][T15651] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2747'.
[  433.246361][T15620] pimreg: left allmulticast mode
[  433.309141][T15658] netlink: 'syz.7.2749': attribute type 10 has an invalid length.
[  433.321340][T15658] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2749'.
[  433.332250][T15658] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.341756][T15658] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.350732][T15658] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.359546][T15658] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.374359][T15658] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.390826][T15658] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.399813][T15658] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.408486][T15658] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.431060][T15658] team0: Port device geneve0 added
[  433.464625][T15661] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  434.621590][T15690] SET target dimension over the limit!
[  434.628540][T15691] SET target dimension over the limit!
[  434.771610][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2763'.
[  434.790246][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2764'.
[  435.259862][T15720] vxcan1 speed is unknown, defaulting to 1000
[  435.396565][T15727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2772'.
[  435.701627][T15731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2774'.
[  435.842290][T15733] 8021q: adding VLAN 0 to HW filter on device bond1
[  435.876116][T15733] bridge0: port 3(bond1) entered blocking state
[  435.891639][T15733] bridge0: port 3(bond1) entered disabled state
[  435.912803][T15733] bond1: entered allmulticast mode
[  435.940948][T15733] bond1: entered promiscuous mode
[  435.957003][T15733] bridge0: port 3(bond1) entered blocking state
[  435.963824][T15733] bridge0: port 3(bond1) entered forwarding state
[  435.979620][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'.
[  435.999672][T15738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2775'.
[  436.022934][ T5835] Bluetooth: hci3: command 0x0405 tx timeout
[  436.406143][T15750] netlink: 'syz.1.2780': attribute type 1 has an invalid length.
[  436.442772][T15750] vlan2: entered allmulticast mode
[  436.448604][T15750] veth1: entered allmulticast mode
[  436.592637][ T8913] bridge0: port 3(bond1) entered disabled state
[  436.630732][T15759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2783'.
[  436.641947][T15759] vlan0: entered promiscuous mode
[  436.687814][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2782'.
[  436.702054][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2782'.
[  436.727239][T15760] lo: entered promiscuous mode
[  436.732099][T15760] lo: entered allmulticast mode
[  436.745744][T15760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.381362][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  437.395168][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  437.403861][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  437.432878][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  437.441463][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  437.529803][T15768] vxcan1 speed is unknown, defaulting to 1000
[  437.586601][T15772] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2786'.
[  437.908967][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2789'.
[  438.212417][T15787] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2793'.
[  438.222159][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2793'.
[  438.241542][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2793'.
[  438.264525][T15789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2794'.
[  438.275600][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2793'.
[  439.189202][T15768] chnl_net:caif_netlink_parms(): no params data found
[  439.344137][T15768] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.351780][T15768] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.359126][T15768] bridge_slave_0: entered allmulticast mode
[  439.369001][T15768] bridge_slave_0: entered promiscuous mode
[  439.378281][T15768] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.400825][T15768] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.412813][T15768] bridge_slave_1: entered allmulticast mode
[  439.432138][T15768] bridge_slave_1: entered promiscuous mode
[  439.497758][T15768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.512218][T15768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.535277][ T5840] Bluetooth: hci10: command tx timeout
[  439.611308][T15768] team0: Port device team_slave_0 added
[  439.745705][T15768] team0: Port device team_slave_1 added
[  439.752262][T15840] bond1: left allmulticast mode
[  439.757789][T15840] bond1: left promiscuous mode
[  439.763154][T15840] bridge0: port 3(bond1) entered disabled state
[  439.774081][T15840] bridge_slave_1: left allmulticast mode
[  439.785340][T15840] bridge_slave_1: left promiscuous mode
[  439.791280][T15840] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.801686][T15840] bridge_slave_0: left allmulticast mode
[  439.808073][T15840] bridge_slave_0: left promiscuous mode
[  439.814023][T15840] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.122291][T15849] FAULT_INJECTION: forcing a failure.
[  440.122291][T15849] name failslab, interval 1, probability 0, space 0, times 0
[  440.139749][T15768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.155143][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.192380][T15849] CPU: 1 UID: 0 PID: 15849 Comm: syz.1.2811 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  440.192412][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  440.192425][T15849] Call Trace:
[  440.192434][T15849]  <TASK>
[  440.192443][T15849]  dump_stack_lvl+0x189/0x250
[  440.192482][T15849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.192512][T15849]  ? __pfx__printk+0x10/0x10
[  440.192539][T15849]  ? __pfx___might_resched+0x10/0x10
[  440.192565][T15849]  should_fail_ex+0x414/0x560
[  440.192593][T15849]  should_failslab+0xa8/0x100
[  440.192624][T15849]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  440.192653][T15849]  ? __alloc_skb+0x112/0x2d0
[  440.192686][T15849]  __alloc_skb+0x112/0x2d0
[  440.192719][T15849]  netlink_sendmsg+0x5c6/0xb30
[  440.192756][T15849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.192788][T15849]  ? aa_sock_msg_perm+0x94/0x160
[  440.192816][T15849]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  440.192839][T15849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.192878][T15849]  __sock_sendmsg+0x21c/0x270
[  440.192905][T15849]  ____sys_sendmsg+0x505/0x830
[  440.192943][T15849]  ? __pfx_____sys_sendmsg+0x10/0x10
[  440.192984][T15849]  ? import_iovec+0x74/0xa0
[  440.193018][T15849]  ___sys_sendmsg+0x21f/0x2a0
[  440.193052][T15849]  ? __pfx____sys_sendmsg+0x10/0x10
[  440.193123][T15849]  ? __fget_files+0x2a/0x420
[  440.193150][T15849]  ? __fget_files+0x3a0/0x420
[  440.193189][T15849]  __x64_sys_sendmsg+0x19b/0x260
[  440.193219][T15849]  ? __might_fault+0xb0/0x130
[  440.193249][T15849]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  440.193292][T15849]  ? rcu_is_watching+0x15/0xb0
[  440.193322][T15849]  do_syscall_64+0xf6/0x210
[  440.193348][T15849]  ? clear_bhb_loop+0x60/0xb0
[  440.193374][T15849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.193393][T15849] RIP: 0033:0x7fa2d6b8e969
[  440.193411][T15849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.193427][T15849] RSP: 002b:00007fa2d7a44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.193449][T15849] RAX: ffffffffffffffda RBX: 00007fa2d6db5fa0 RCX: 00007fa2d6b8e969
[  440.193463][T15849] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  440.193476][T15849] RBP: 00007fa2d7a44090 R08: 0000000000000000 R09: 0000000000000000
[  440.193488][T15849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.193499][T15849] R13: 0000000000000000 R14: 00007fa2d6db5fa0 R15: 00007ffcd15d52c8
[  440.193533][T15849]  </TASK>
[  440.193785][T15768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.460842][T15851] netlink: 'syz.9.2813': attribute type 1 has an invalid length.
[  440.472372][T15851] netlink: 'syz.9.2813': attribute type 2 has an invalid length.
[  440.495896][T15768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.504973][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.596423][T15768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.834628][T15866] dvmrp8: entered allmulticast mode
[  440.864045][T15768] hsr_slave_0: entered promiscuous mode
[  440.872273][T15768] hsr_slave_1: entered promiscuous mode
[  440.878791][T15768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.886667][T15768] Cannot create hsr debugfs directory
[  440.895803][T15874] dvmrp8: left allmulticast mode
[  441.231424][T15886] tun0: tun_chr_ioctl cmd 1074025675
[  441.240108][T15886] tun0: persist enabled
[  441.263266][T15886] tun0: tun_chr_ioctl cmd 1074025675
[  441.268997][T15886] tun0: persist enabled
[  441.618614][ T5835] Bluetooth: hci10: command tx timeout
[  441.649799][T15902] vxcan1 speed is unknown, defaulting to 1000
[  441.687502][T15909] __nla_validate_parse: 8 callbacks suppressed
[  441.687522][T15909] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2829'.
[  441.893277][T15768] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  441.942010][T15768] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  441.971971][T15768] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  441.999333][T15768] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  442.180833][T15768] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.187122][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2831'.
[  442.222304][T15768] 8021q: adding VLAN 0 to HW filter on device team0
[  442.247310][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.254528][ T7683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.288256][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.295572][ T8903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.335303][ T5835] Bluetooth: hci6: command 0x0406 tx timeout
[  442.531871][T15928] FAULT_INJECTION: forcing a failure.
[  442.531871][T15928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.546485][T15928] CPU: 0 UID: 0 PID: 15928 Comm: syz.7.2834 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  442.546517][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  442.546530][T15928] Call Trace:
[  442.546538][T15928]  <TASK>
[  442.546547][T15928]  dump_stack_lvl+0x189/0x250
[  442.546580][T15928]  ? __lock_acquire+0xaac/0xd20
[  442.546614][T15928]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.546644][T15928]  ? __pfx__printk+0x10/0x10
[  442.546665][T15928]  ? __might_fault+0xb0/0x130
[  442.546705][T15928]  should_fail_ex+0x414/0x560
[  442.546734][T15928]  _copy_from_user+0x2d/0xb0
[  442.546765][T15928]  ___sys_sendmsg+0x158/0x2a0
[  442.546800][T15928]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.546872][T15928]  ? __fget_files+0x2a/0x420
[  442.546899][T15928]  ? __fget_files+0x3a0/0x420
[  442.546939][T15928]  __sys_sendmmsg+0x227/0x430
[  442.546976][T15928]  ? __pfx___sys_sendmmsg+0x10/0x10
[  442.547049][T15928]  ? rcu_is_watching+0x15/0xb0
[  442.547074][T15928]  __x64_sys_sendmmsg+0xa0/0xc0
[  442.547109][T15928]  do_syscall_64+0xf6/0x210
[  442.547135][T15928]  ? clear_bhb_loop+0x60/0xb0
[  442.547160][T15928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.547180][T15928] RIP: 0033:0x7f23ec38e969
[  442.547197][T15928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.547215][T15928] RSP: 002b:00007f23ea1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  442.547238][T15928] RAX: ffffffffffffffda RBX: 00007f23ec5b5fa0 RCX: 00007f23ec38e969
[  442.547254][T15928] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004
[  442.547267][T15928] RBP: 00007f23ea1f6090 R08: 0000000000000000 R09: 0000000000000000
[  442.547280][T15928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.547292][T15928] R13: 0000000000000000 R14: 00007f23ec5b5fa0 R15: 00007ffd2813d488
[  442.547325][T15928]  </TASK>
[  442.752533][T15910] vxcan1 speed is unknown, defaulting to 1000
[  443.081736][T15768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.232745][T15768] veth0_vlan: entered promiscuous mode
[  443.285808][T15768] veth1_vlan: entered promiscuous mode
[  443.371789][T15768] veth0_macvtap: entered promiscuous mode
[  443.400590][T15768] veth1_macvtap: entered promiscuous mode
[  443.410001][T15942] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2836'.
[  443.443778][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2836'.
[  443.486713][T15942] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2836'.
[  443.499883][T15768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.515044][T15942] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2836'.
[  443.533196][T15768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.570887][T15768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.620938][T15768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.654421][T15768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.674335][T15768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.695988][ T5840] Bluetooth: hci10: command tx timeout
[  443.705968][T15946] netlink: 'syz.7.2837': attribute type 10 has an invalid length.
[  443.713849][T15946] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2837'.
[  443.792191][T15946] bridge0: port 3(
0!
) entered blocking state
[  443.799529][T15946] bridge0: port 3(
0!
) entered disabled state
[  443.806260][T15946] !
: entered allmulticast mode
[  443.814337][T15946] !
: entered promiscuous mode
[  443.821526][T15946] bridge0: port 3(
0!
) entered blocking state
[  443.827902][T15946] bridge0: port 3(
0!
) entered forwarding state
[  444.191694][T15946] vxcan1 speed is unknown, defaulting to 1000
[  444.215528][ T8923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.223531][ T8923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.333476][ T8923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.362581][ T8923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.154138][T15965] netlink: 'syz.3.2839': attribute type 8 has an invalid length.
[  445.583767][T15970] FAULT_INJECTION: forcing a failure.
[  445.583767][T15970] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.605337][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.3.2841 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  445.605369][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.605381][T15970] Call Trace:
[  445.605389][T15970]  <TASK>
[  445.605398][T15970]  dump_stack_lvl+0x189/0x250
[  445.605430][T15970]  ? __lock_acquire+0xaac/0xd20
[  445.605464][T15970]  ? __pfx_dump_stack_lvl+0x10/0x10
[  445.605502][T15970]  ? __pfx__printk+0x10/0x10
[  445.605524][T15970]  ? __might_fault+0xb0/0x130
[  445.605564][T15970]  should_fail_ex+0x414/0x560
[  445.605593][T15970]  _copy_from_iter+0x1db/0x15a0
[  445.605628][T15970]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  445.605653][T15970]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  445.605682][T15970]  ? __pfx__copy_from_iter+0x10/0x10
[  445.605710][T15970]  ? __build_skb_around+0x257/0x3e0
[  445.605743][T15970]  ? netlink_sendmsg+0x642/0xb30
[  445.605771][T15970]  ? skb_put+0x11b/0x210
[  445.605804][T15970]  netlink_sendmsg+0x6b2/0xb30
[  445.605844][T15970]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.605876][T15970]  ? aa_sock_msg_perm+0x94/0x160
[  445.605902][T15970]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  445.605925][T15970]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.605954][T15970]  __sock_sendmsg+0x21c/0x270
[  445.605980][T15970]  ____sys_sendmsg+0x505/0x830
[  445.606017][T15970]  ? __pfx_____sys_sendmsg+0x10/0x10
[  445.606056][T15970]  ? import_iovec+0x74/0xa0
[  445.606090][T15970]  ___sys_sendmsg+0x21f/0x2a0
[  445.606124][T15970]  ? __pfx____sys_sendmsg+0x10/0x10
[  445.606196][T15970]  ? __fget_files+0x2a/0x420
[  445.606222][T15970]  ? __fget_files+0x3a0/0x420
[  445.606261][T15970]  __x64_sys_sendmsg+0x19b/0x260
[  445.606290][T15970]  ? __might_fault+0xb0/0x130
[  445.606317][T15970]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  445.606359][T15970]  ? rcu_is_watching+0x15/0xb0
[  445.606389][T15970]  do_syscall_64+0xf6/0x210
[  445.606415][T15970]  ? clear_bhb_loop+0x60/0xb0
[  445.606440][T15970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.606459][T15970] RIP: 0033:0x7f7efad8e969
[  445.606478][T15970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.606509][T15970] RSP: 002b:00007f7efbc6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.606531][T15970] RAX: ffffffffffffffda RBX: 00007f7efafb5fa0 RCX: 00007f7efad8e969
[  445.606547][T15970] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  445.606559][T15970] RBP: 00007f7efbc6e090 R08: 0000000000000000 R09: 0000000000000000
[  445.606572][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.606584][T15970] R13: 0000000000000000 R14: 00007f7efafb5fa0 R15: 00007ffe08ad3a08
[  445.606618][T15970]  </TASK>
[  445.967218][ T5840] Bluetooth: hci10: command tx timeout
[  446.211853][T15976] FAULT_INJECTION: forcing a failure.
[  446.211853][T15976] name failslab, interval 1, probability 0, space 0, times 0
[  446.225898][T15976] CPU: 0 UID: 0 PID: 15976 Comm: syz.3.2844 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  446.225930][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  446.225942][T15976] Call Trace:
[  446.225950][T15976]  <TASK>
[  446.225959][T15976]  dump_stack_lvl+0x189/0x250
[  446.225998][T15976]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.226028][T15976]  ? __pfx__printk+0x10/0x10
[  446.226052][T15976]  ? __pfx___might_resched+0x10/0x10
[  446.226073][T15976]  ? fs_reclaim_acquire+0x7d/0x100
[  446.226110][T15976]  should_fail_ex+0x414/0x560
[  446.226139][T15976]  should_failslab+0xa8/0x100
[  446.226181][T15976]  __kmalloc_noprof+0xcb/0x4f0
[  446.226206][T15976]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  446.226224][T15976]  ? sock_kmalloc+0xd6/0x160
[  446.226250][T15976]  sock_kmalloc+0xd6/0x160
[  446.226273][T15976]  hash_sendmsg+0x666/0x11d0
[  446.226323][T15976]  ? __pfx_hash_sendmsg+0x10/0x10
[  446.226347][T15976]  __sock_sendmsg+0x21c/0x270
[  446.226374][T15976]  ____sys_sendmsg+0x52d/0x830
[  446.226411][T15976]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.226459][T15976]  ? import_iovec+0x74/0xa0
[  446.226494][T15976]  ___sys_sendmsg+0x21f/0x2a0
[  446.226528][T15976]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.226601][T15976]  ? __fget_files+0x2a/0x420
[  446.226627][T15976]  ? __fget_files+0x3a0/0x420
[  446.226668][T15976]  __sys_sendmmsg+0x227/0x430
[  446.226706][T15976]  ? __pfx___sys_sendmmsg+0x10/0x10
[  446.226780][T15976]  ? rcu_is_watching+0x15/0xb0
[  446.226806][T15976]  __x64_sys_sendmmsg+0xa0/0xc0
[  446.226839][T15976]  do_syscall_64+0xf6/0x210
[  446.226865][T15976]  ? clear_bhb_loop+0x60/0xb0
[  446.226890][T15976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.226910][T15976] RIP: 0033:0x7f7efad8e969
[  446.226928][T15976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.226945][T15976] RSP: 002b:00007f7efbc6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  446.226967][T15976] RAX: ffffffffffffffda RBX: 00007f7efafb5fa0 RCX: 00007f7efad8e969
[  446.226982][T15976] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004
[  446.226995][T15976] RBP: 00007f7efbc6e090 R08: 0000000000000000 R09: 0000000000000000
[  446.227008][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.227020][T15976] R13: 0000000000000000 R14: 00007f7efafb5fa0 R15: 00007ffe08ad3a08
[  446.227054][T15976]  </TASK>
[  447.386521][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  447.397549][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  447.406371][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  447.423712][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  447.460405][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  447.612294][T15988] vxcan1 speed is unknown, defaulting to 1000
[  447.902133][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'.
[  447.911346][T15998] openvswitch: netlink: nsh attr 12 is out of range max 3
[  447.925126][T15998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.969266][T16005] FAULT_INJECTION: forcing a failure.
[  447.969266][T16005] name failslab, interval 1, probability 0, space 0, times 0
[  448.041926][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.9.2852 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  448.041960][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  448.041973][T16005] Call Trace:
[  448.041982][T16005]  <TASK>
[  448.041991][T16005]  dump_stack_lvl+0x189/0x250
[  448.042030][T16005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  448.042061][T16005]  ? __pfx__printk+0x10/0x10
[  448.042085][T16005]  ? __pfx___might_resched+0x10/0x10
[  448.042106][T16005]  ? fs_reclaim_acquire+0x7d/0x100
[  448.042142][T16005]  should_fail_ex+0x414/0x560
[  448.042171][T16005]  should_failslab+0xa8/0x100
[  448.042201][T16005]  __kmalloc_noprof+0xcb/0x4f0
[  448.042226][T16005]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  448.042267][T16005]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  448.042300][T16005]  genl_family_rcv_msg_doit+0xb8/0x300
[  448.042330][T16005]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  448.042357][T16005]  ? rcu_is_watching+0x15/0xb0
[  448.042393][T16005]  ? apparmor_capable+0x137/0x1b0
[  448.042425][T16005]  ? bpf_lsm_capable+0x9/0x20
[  448.042454][T16005]  ? security_capable+0x7e/0x2e0
[  448.042485][T16005]  genl_rcv_msg+0x60e/0x790
[  448.042516][T16005]  ? __pfx_genl_rcv_msg+0x10/0x10
[  448.042536][T16005]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  448.042554][T16005]  ? __pfx_nl80211_set_wiphy+0x10/0x10
[  448.042572][T16005]  ? __pfx_nl80211_post_doit+0x10/0x10
[  448.042607][T16005]  netlink_rcv_skb+0x208/0x470
[  448.042632][T16005]  ? __lock_acquire+0xaac/0xd20
[  448.042661][T16005]  ? __pfx_genl_rcv_msg+0x10/0x10
[  448.042684][T16005]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  448.042732][T16005]  ? down_read+0x1ad/0x2e0
[  448.042760][T16005]  genl_rcv+0x28/0x40
[  448.042780][T16005]  netlink_unicast+0x75b/0x8d0
[  448.042819][T16005]  netlink_sendmsg+0x805/0xb30
[  448.042859][T16005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.042893][T16005]  ? aa_sock_msg_perm+0x94/0x160
[  448.042918][T16005]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  448.042943][T16005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.042972][T16005]  __sock_sendmsg+0x21c/0x270
[  448.043001][T16005]  ____sys_sendmsg+0x505/0x830
[  448.043038][T16005]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.043078][T16005]  ? import_iovec+0x74/0xa0
[  448.043112][T16005]  ___sys_sendmsg+0x21f/0x2a0
[  448.043146][T16005]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.043219][T16005]  ? __fget_files+0x2a/0x420
[  448.043253][T16005]  ? __fget_files+0x3a0/0x420
[  448.043292][T16005]  __x64_sys_sendmsg+0x19b/0x260
[  448.043321][T16005]  ? __might_fault+0xb0/0x130
[  448.043349][T16005]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  448.043399][T16005]  ? rcu_is_watching+0x15/0xb0
[  448.043429][T16005]  do_syscall_64+0xf6/0x210
[  448.043453][T16005]  ? clear_bhb_loop+0x60/0xb0
[  448.043478][T16005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.043498][T16005] RIP: 0033:0x7fda9d98e969
[  448.043516][T16005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.043532][T16005] RSP: 002b:00007fda9e8ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.043554][T16005] RAX: ffffffffffffffda RBX: 00007fda9dbb5fa0 RCX: 00007fda9d98e969
[  448.043568][T16005] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  448.043581][T16005] RBP: 00007fda9e8ba090 R08: 0000000000000000 R09: 0000000000000000
[  448.043593][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.043604][T16005] R13: 0000000000000000 R14: 00007fda9dbb5fa0 R15: 00007fffb5331ea8
[  448.043638][T16005]  </TASK>
[  448.623330][T16014] netlink: 'syz.9.2855': attribute type 3 has an invalid length.
[  448.717384][T16018] netlink: 'syz.9.2855': attribute type 32 has an invalid length.
[  448.733485][T16018] netlink: 'syz.9.2855': attribute type 1 has an invalid length.
[  448.743123][T16018] syz_tun: entered allmulticast mode
[  449.046934][T16026] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  449.475899][T16041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.535611][ T5840] Bluetooth: hci11: command tx timeout
[  449.633769][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2863'.
[  449.693398][T16043] netlink: 'syz.9.2863': attribute type 1 has an invalid length.
[  449.715088][T16043] netlink: 184 bytes leftover after parsing attributes in process `syz.9.2863'.
[  449.732861][T16043] netlink: 'syz.9.2863': attribute type 1 has an invalid length.
[  449.745209][T16046] FAULT_INJECTION: forcing a failure.
[  449.745209][T16046] name failslab, interval 1, probability 0, space 0, times 0
[  449.759157][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.1.2865 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  449.759188][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  449.759201][T16046] Call Trace:
[  449.759209][T16046]  <TASK>
[  449.759217][T16046]  dump_stack_lvl+0x189/0x250
[  449.759254][T16046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.759285][T16046]  ? __pfx__printk+0x10/0x10
[  449.759308][T16046]  ? __pfx___might_resched+0x10/0x10
[  449.759329][T16046]  ? fs_reclaim_acquire+0x7d/0x100
[  449.759366][T16046]  should_fail_ex+0x414/0x560
[  449.759393][T16046]  should_failslab+0xa8/0x100
[  449.759422][T16046]  __kmalloc_noprof+0xcb/0x4f0
[  449.759447][T16046]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  449.759466][T16046]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  449.759497][T16046]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  449.759529][T16046]  genl_family_rcv_msg_doit+0xb8/0x300
[  449.759560][T16046]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  449.759586][T16046]  ? rcu_is_watching+0x15/0xb0
[  449.759609][T16046]  ? apparmor_capable+0x137/0x1b0
[  449.759643][T16046]  ? bpf_lsm_capable+0x9/0x20
[  449.759673][T16046]  ? security_capable+0x7e/0x2e0
[  449.759705][T16046]  genl_rcv_msg+0x60e/0x790
[  449.759737][T16046]  ? __pfx_genl_rcv_msg+0x10/0x10
[  449.759757][T16046]  ? ref_tracker_free+0x63a/0x7d0
[  449.759779][T16046]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  449.759799][T16046]  ? __pfx_nl80211_set_wiphy+0x10/0x10
[  449.759819][T16046]  ? __pfx_nl80211_post_doit+0x10/0x10
[  449.759841][T16046]  ? __pfx_ref_tracker_free+0x10/0x10
[  449.759879][T16046]  netlink_rcv_skb+0x208/0x470
[  449.759905][T16046]  ? __lock_acquire+0xaac/0xd20
[  449.759936][T16046]  ? __pfx_genl_rcv_msg+0x10/0x10
[  449.759961][T16046]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  449.760011][T16046]  ? down_read+0x1ad/0x2e0
[  449.760046][T16046]  genl_rcv+0x28/0x40
[  449.760066][T16046]  netlink_unicast+0x75b/0x8d0
[  449.760105][T16046]  netlink_sendmsg+0x805/0xb30
[  449.760143][T16046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.760184][T16046]  ? aa_sock_msg_perm+0x94/0x160
[  449.760209][T16046]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  449.760233][T16046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.760263][T16046]  __sock_sendmsg+0x21c/0x270
[  449.760292][T16046]  ____sys_sendmsg+0x505/0x830
[  449.760329][T16046]  ? __pfx_____sys_sendmsg+0x10/0x10
[  449.760371][T16046]  ? import_iovec+0x74/0xa0
[  449.760405][T16046]  ___sys_sendmsg+0x21f/0x2a0
[  449.760439][T16046]  ? __pfx____sys_sendmsg+0x10/0x10
[  449.760511][T16046]  ? __fget_files+0x2a/0x420
[  449.760538][T16046]  ? __fget_files+0x3a0/0x420
[  449.760577][T16046]  __x64_sys_sendmsg+0x19b/0x260
[  449.760605][T16046]  ? __might_fault+0xb0/0x130
[  449.760634][T16046]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  449.760677][T16046]  ? rcu_is_watching+0x15/0xb0
[  449.760704][T16046]  do_syscall_64+0xf6/0x210
[  449.760727][T16046]  ? clear_bhb_loop+0x60/0xb0
[  449.760754][T16046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.760773][T16046] RIP: 0033:0x7fa2d6b8e969
[  449.760792][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.760809][T16046] RSP: 002b:00007fa2d7a44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  449.760831][T16046] RAX: ffffffffffffffda RBX: 00007fa2d6db5fa0 RCX: 00007fa2d6b8e969
[  449.760845][T16046] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  449.760858][T16046] RBP: 00007fa2d7a44090 R08: 0000000000000000 R09: 0000000000000000
[  449.760870][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.760881][T16046] R13: 0000000000000000 R14: 00007fa2d6db5fa0 R15: 00007ffcd15d52c8
[  449.760915][T16046]  </TASK>
[  450.742977][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'.
[  450.822548][T16069] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  450.835733][T16069] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  450.885319][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2873'.
[  450.911734][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'.
[  451.018750][T16080] FAULT_INJECTION: forcing a failure.
[  451.018750][T16080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.043213][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.3.2875 Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  451.043250][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  451.043262][T16080] Call Trace:
[  451.043269][T16080]  <TASK>
[  451.043278][T16080]  dump_stack_lvl+0x189/0x250
[  451.043309][T16080]  ? __lock_acquire+0xaac/0xd20
[  451.043341][T16080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.043369][T16080]  ? __pfx__printk+0x10/0x10
[  451.043388][T16080]  ? __might_fault+0xb0/0x130
[  451.043425][T16080]  should_fail_ex+0x414/0x560
[  451.043452][T16080]  _copy_from_user+0x2d/0xb0
[  451.043480][T16080]  ____sys_sendmsg+0x2fe/0x830
[  451.043516][T16080]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.043553][T16080]  ? import_iovec+0x74/0xa0
[  451.043586][T16080]  ___sys_sendmsg+0x21f/0x2a0
[  451.043618][T16080]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.043654][T16080]  ? __lock_acquire+0xaac/0xd20
[  451.043726][T16080]  __sys_sendmmsg+0x227/0x430
[  451.043762][T16080]  ? __pfx___sys_sendmmsg+0x10/0x10
[  451.043828][T16080]  ? rcu_is_watching+0x15/0xb0
[  451.043853][T16080]  __x64_sys_sendmmsg+0xa0/0xc0
[  451.043886][T16080]  do_syscall_64+0xf6/0x210
[  451.043909][T16080]  ? clear_bhb_loop+0x60/0xb0
[  451.043933][T16080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.043952][T16080] RIP: 0033:0x7f7efad8e969
[  451.043968][T16080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.043985][T16080] RSP: 002b:00007f7efbc6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  451.044005][T16080] RAX: ffffffffffffffda RBX: 00007f7efafb5fa0 RCX: 00007f7efad8e969
[  451.044019][T16080] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004
[  451.044031][T16080] RBP: 00007f7efbc6e090 R08: 0000000000000000 R09: 0000000000000000
[  451.044043][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.044054][T16080] R13: 0000000000000000 R14: 00007f7efafb5fa0 R15: 00007ffe08ad3a08
[  451.044084][T16080]  </TASK>
[  451.345093][T15988] chnl_net:caif_netlink_parms(): no params data found
[  451.466758][T16089] netlink: 'syz.9.2877': attribute type 4 has an invalid length.
[  451.531290][T16096] netlink: 'syz.9.2877': attribute type 1 has an invalid length.
[  451.620221][ T5840] Bluetooth: hci11: command tx timeout
[  451.717343][T15988] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.737269][T15988] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.746773][T15988] bridge_slave_0: entered allmulticast mode
[  451.756633][T15988] bridge_slave_0: entered promiscuous mode
[  451.793901][T15988] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.815757][T15988] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.842318][T15988] bridge_slave_1: entered allmulticast mode
[  451.864302][T15988] bridge_slave_1: entered promiscuous mode
[  451.928047][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.979914][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.108863][T15988] team0: Port device team_slave_0 added
[  452.149062][T15988] team0: Port device team_slave_1 added
[  452.164117][T16123] vxcan1 speed is unknown, defaulting to 1000
[  452.193943][T16125] netlink: 'syz.1.2887': attribute type 21 has an invalid length.
[  452.202081][T16125] IPv6: NLM_F_CREATE should be specified when creating new route
[  452.291490][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.307128][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.370830][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.387661][T16127] smc: net device bond0 erased user defined pnetid SYZ
[  452.401346][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.416606][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.448986][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.594038][T15988] hsr_slave_0: entered promiscuous mode
[  452.613965][T15988] hsr_slave_1: entered promiscuous mode
[  452.634593][T15988] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  452.649753][T15988] Cannot create hsr debugfs directory
[  452.803559][T16145] netlink: 'syz.9.2893': attribute type 1 has an invalid length.
[  453.056368][   T31] INFO: task syz.2.1754:12081 blocked for more than 143 seconds.
[  453.064169][   T31]       Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  453.100466][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.115040][   T31] task:syz.2.1754      state:D stack:26200 pid:12081 tgid:12080 ppid:5832   task_flags:0x400140 flags:0x00000004
[  453.142341][   T31] Call Trace:
[  453.155051][   T31]  <TASK>
[  453.158067][   T31]  __schedule+0x16e2/0x4cd0
[  453.162628][   T31]  ? __lock_acquire+0xaac/0xd20
[  453.221698][   T31]  ? schedule+0x165/0x360
[  453.246226][   T31]  ? __pfx___schedule+0x10/0x10
[  453.271811][   T31]  ? schedule+0x91/0x360
[  453.293390][   T31]  schedule+0x165/0x360
[  453.304943][   T31]  schedule_preempt_disabled+0x13/0x30
[  453.316513][   T31]  __mutex_lock+0x724/0xe80
[  453.326679][   T31]  ? __mutex_lock+0x51b/0xe80
[  453.337010][   T31]  ? nfsd_nl_version_get_doit+0x16e/0xb60
[  453.348839][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  453.360782][   T31]  ? __nlmsg_put+0xef/0x1b0
[  453.391589][   T31]  ? genlmsg_put+0x137/0x2e0
[  453.400050][   T31]  nfsd_nl_version_get_doit+0x16e/0xb60
[  453.415152][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  453.420448][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  453.435003][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  453.441153][   T31]  ? kernel_text_address+0xa5/0xe0
[  453.454998][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  453.460636][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  453.485000][   T31]  genl_rcv_msg+0x60e/0x790
[  453.489609][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.496617][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  453.502792][   T31]  netlink_rcv_skb+0x208/0x470
[  453.508388][   T31]  ? __lock_acquire+0xaac/0xd20
[  453.513292][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.518558][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.523902][   T31]  ? down_read+0x1ad/0x2e0
[  453.528756][   T31]  genl_rcv+0x28/0x40
[  453.532760][   T31]  netlink_unicast+0x75b/0x8d0
[  453.537780][   T31]  netlink_sendmsg+0x805/0xb30
[  453.542599][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.548008][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  453.552978][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.558709][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.564012][   T31]  __sock_sendmsg+0x21c/0x270
[  453.569085][   T31]  ____sys_sendmsg+0x505/0x830
[  453.573897][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.579361][   T31]  ? import_iovec+0x74/0xa0
[  453.583904][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  453.588878][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.594120][   T31]  ? __fget_files+0x2a/0x420
[  453.599404][   T31]  ? __fget_files+0x3a0/0x420
[  453.604144][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  453.609378][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  453.616307][   T31]  ? do_syscall_64+0xba/0x210
[  453.621043][   T31]  do_syscall_64+0xf6/0x210
[  453.625662][   T31]  ? clear_bhb_loop+0x60/0xb0
[  453.630365][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.636343][   T31] RIP: 0033:0x7f0fe838e969
[  453.640778][   T31] RSP: 002b:00007f0fe9283038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.649694][   T31] RAX: ffffffffffffffda RBX: 00007f0fe85b5fa0 RCX: 00007f0fe838e969
[  453.657797][   T31] RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000006
[  453.665864][   T31] RBP: 00007f0fe8410ab1 R08: 0000000000000000 R09: 0000000000000000
[  453.673854][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.682252][   T31] R13: 0000000000000000 R14: 00007f0fe85b5fa0 R15: 00007ffc85f12858
[  453.690403][   T31]  </TASK>
[  453.693456][   T31] INFO: task syz.0.1788:12207 blocked for more than 143 seconds.
[  453.701887][   T31]       Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0
[  453.705970][ T5840] Bluetooth: hci11: command tx timeout
[  453.710091][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.723840][   T31] task:syz.0.1788      state:D stack:25656 pid:12207 tgid:12206 ppid:5826   task_flags:0x400140 flags:0x00000004
[  453.738005][   T31] Call Trace:
[  453.741308][   T31]  <TASK>
[  453.744246][   T31]  __schedule+0x16e2/0x4cd0
[  453.749116][   T31]  ? bpf_trace_run2+0x322/0x4b0
[  453.754033][   T31]  ? __pfx_bpf_trace_run2+0x10/0x10
[  453.759321][   T31]  ? schedule+0x165/0x360
[  453.763675][   T31]  ? __pfx___schedule+0x10/0x10
[  453.768808][   T31]  ? schedule+0x91/0x360
[  453.773170][   T31]  schedule+0x165/0x360
[  453.778331][   T31]  schedule_preempt_disabled+0x13/0x30
[  453.783842][   T31]  __mutex_lock+0x724/0xe80
[  453.788700][   T31]  ? __mutex_lock+0x51b/0xe80
[  453.793420][   T31]  ? nfsd_nl_listener_set_doit+0x12a/0x1650
[  453.800200][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  453.805347][   T31]  ? __asan_memset+0x22/0x50
[  453.809985][   T31]  ? ____sys_sendmsg+0x505/0x830
[  453.815053][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  453.819947][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  453.825352][   T31]  nfsd_nl_listener_set_doit+0x12a/0x1650
[  453.831082][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  453.836943][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  453.843138][   T31]  ? __nla_parse+0x40/0x60
[  453.847638][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  453.853985][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  453.860040][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  453.866319][   T31]  ? bpf_lsm_capable+0x9/0x20
[  453.871048][   T31]  ? security_capable+0x7e/0x2e0
[  453.876105][   T31]  genl_rcv_msg+0x60e/0x790
[  453.880642][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.885995][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  453.892214][   T31]  netlink_rcv_skb+0x208/0x470
[  453.897272][   T31]  ? __lock_acquire+0xaac/0xd20
[  453.902797][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.907986][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.913348][   T31]  ? down_read+0x1ad/0x2e0
[  453.918097][   T31]  genl_rcv+0x28/0x40
[  453.922114][   T31]  netlink_unicast+0x75b/0x8d0
[  453.926982][   T31]  netlink_sendmsg+0x805/0xb30
[  453.931800][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.937341][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  453.942329][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.947947][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.953250][   T31]  __sock_sendmsg+0x21c/0x270
[  453.958316][   T31]  ____sys_sendmsg+0x505/0x830
[  453.963135][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.968576][   T31]  ? import_iovec+0x74/0xa0
[  453.973144][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  453.978138][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.983409][   T31]  ? __fget_files+0x2a/0x420
[  453.988180][   T31]  ? __fget_files+0x3a0/0x420
[  453.992915][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  453.998080][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  454.003636][   T31]  ? do_syscall_64+0xba/0x210
[  454.009565][   T31]  do_syscall_64+0xf6/0x210
[  454.014188][   T31]  ? clear_bhb_loop+0x60/0xb0
[  454.019156][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.025140][   T31] RIP: 0033:0x7f55cf78e969
[  454.029596][   T31] RSP: 002b:00007f55d0696038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.038471][   T31] RAX: ffffffffffffffda RBX: 00007f55cf9b5fa0 RCX: 00007f55cf78e969
[  454.046573][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  454.054661][   T31] RBP: 00007f55cf810ab1 R08: 0000000000000000 R09: 0000000000000000
[  454.062683][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.071079][   T31] R13: 0000000000000000 R14: 00007f55cf9b5fa0 R15: 00007ffdc5ca9008
[  454.079209][   T31]  </TASK>
[  454.082342][   T31] 
[  454.082342][   T31] Showing all locks held in the system:
[  454.124104][   T31] 1 lock held by khungtaskd/31:
[  454.137464][T16160] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht'
[  454.168475][   T31]  #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  454.225507][   T31] 2 locks held by getty/5589:
[  454.230255][   T31]  #0: ffff888033fba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  454.264890][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  454.305305][   T31] 2 locks held by kworker/u8:11/8903:
[  454.310789][   T31] 2 locks held by syz.3.984/9482:
[  454.345085][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.353396][   T31]  #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  454.405323][   T31] 2 locks held by syz.2.1754/12081:
[  454.410597][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.455178][   T31]  #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60
[  454.485175][   T31] 2 locks held by syz.0.1788/12207:
[  454.490451][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.524896][   T31]  #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  454.545202][   T31] 2 locks held by syz.5.2379/14316:
[  454.550478][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.595230][   T31]  #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  454.641688][   T31] 3 locks held by syz.4.2412/14435:
[  454.656190][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.664495][   T31]  #1: ffff8880440e06d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  454.714913][   T31]  #2: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  454.744917][   T31] 2 locks held by syz.6.2668/15351:
[  454.750285][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.776614][   T31]  #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  454.787129][   T31] 2 locks held by syz.8.2732/15594:
[  454.792328][   T31]  #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.800990][   T31]  #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  454.811337][   T31] 1 lock held by syz-executor/15988:
[  454.817153][   T31]  #0: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730
[  454.829208][   T31] 1 lock held by syz.3.2886/16123:
[  454.834363][   T31]  #0: ffffffff8f2ee050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590
[  454.843899][   T31] 1 lock held by syz.1.2898/16160:
[  454.849541][   T31]  #0: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  454.860934][   T31] 4 locks held by syz.9.2897/16161:
[  454.866234][   T31]  #0: ffff8880392b8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500
[  454.876325][   T31]  #1: ffff8880392b8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  454.886422][   T31]  #2: ffffffff8f462b68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  454.896804][   T31]  #3: ffff88803afd4338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  454.906369][   T31] 
[  454.908721][   T31] =============================================
[  454.908721][   T31] 
[  454.918778][   T31] NMI backtrace for cpu 0
[  454.918794][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  454.918818][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  454.918829][   T31] Call Trace:
[  454.918837][   T31]  <TASK>
[  454.918845][   T31]  dump_stack_lvl+0x189/0x250
[  454.918876][   T31]  ? __wake_up_klogd+0xd9/0x110
[  454.918903][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.918931][   T31]  ? __pfx__printk+0x10/0x10
[  454.918965][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  454.918999][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  454.919026][   T31]  ? _printk+0xcf/0x120
[  454.919050][   T31]  ? __pfx__printk+0x10/0x10
[  454.919071][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  454.919096][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  454.919129][   T31]  watchdog+0xfee/0x1030
[  454.919157][   T31]  ? watchdog+0x1de/0x1030
[  454.919192][   T31]  kthread+0x70e/0x8a0
[  454.919220][   T31]  ? __pfx_watchdog+0x10/0x10
[  454.919245][   T31]  ? __pfx_kthread+0x10/0x10
[  454.919271][   T31]  ? __pfx_kthread+0x10/0x10
[  454.919295][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  454.919315][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  454.919337][   T31]  ? __pfx_kthread+0x10/0x10
[  454.919360][   T31]  ret_from_fork+0x4b/0x80
[  454.919381][   T31]  ? __pfx_kthread+0x10/0x10
[  454.919405][   T31]  ret_from_fork_asm+0x1a/0x30
[  454.919441][   T31]  </TASK>
[  454.919448][   T31] Sending NMI from CPU 0 to CPUs 1:
[  455.071997][    C1] NMI backtrace for cpu 1
[  455.072016][    C1] CPU: 1 UID: 0 PID: 15988 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  455.072038][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  455.072049][    C1] RIP: 0010:__lock_acquire+0x98/0xd20
[  455.072079][    C1] Code: 23 48 89 df 31 d2 45 89 ce 45 89 d5 e8 31 f0 ff ff 45 89 ea 45 89 f1 48 8b 3c 24 48 85 c0 0f 84 5c 0a 00 00 8b 8f e8 0a 00 00 <83> 3d d1 02 e4 17 00 0f 94 c2 83 f9 30 40 0f 93 c6 40 20 d6 40 80
[  455.072094][    C1] RSP: 0018:ffffc9001a14f3d8 EFLAGS: 00000082
[  455.072110][    C1] RAX: ffffffff931fbc58 RBX: ffffffff8df3dee0 RCX: 0000000000000000
[  455.072123][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802c54bc00
[  455.072133][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  455.072143][    C1] R10: 0000000000000000 R11: fffff52003429ed1 R12: 0000000000000000
[  455.072155][    C1] R13: ffffffff8df3dee0 R14: 0000000000000000 R15: 0000000000000002
[  455.072166][    C1] FS:  0000000000000000(0000) GS:ffff8881261b0000(0000) knlGS:0000000000000000
[  455.072180][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  455.072191][    C1] CR2: 00007fa2d6b74420 CR3: 000000000dd38000 CR4: 00000000003526f0
[  455.072207][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  455.072217][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  455.072227][    C1] Call Trace:
[  455.072233][    C1]  <TASK>
[  455.072244][    C1]  ? unwind_next_frame+0xa5/0x2390
[  455.072266][    C1]  lock_acquire+0x120/0x360
[  455.072289][    C1]  ? unwind_next_frame+0xa5/0x2390
[  455.072314][    C1]  ? __unwind_start+0xf8/0x760
[  455.072334][    C1]  ? unwind_next_frame+0xa5/0x2390
[  455.072353][    C1]  unwind_next_frame+0xc2/0x2390
[  455.072372][    C1]  ? unwind_next_frame+0xa5/0x2390
[  455.072395][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  455.072420][    C1]  ? get_stack_info_noinstr+0x1b/0x130
[  455.072448][    C1]  __unwind_start+0x5b9/0x760
[  455.072471][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  455.072490][    C1]  arch_stack_walk+0xe4/0x150
[  455.072515][    C1]  ? __unwind_start+0xf8/0x760
[  455.072536][    C1]  stack_trace_save+0x9c/0xe0
[  455.072554][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  455.072577][    C1]  save_stack+0xf5/0x1f0
[  455.072601][    C1]  ? __pfx_save_stack+0x10/0x10
[  455.072627][    C1]  ? page_ext_put+0x97/0xc0
[  455.072651][    C1]  __reset_page_owner+0x71/0x1f0
[  455.072673][    C1]  __free_frozen_pages+0xb14/0xce0
[  455.072702][    C1]  vfree+0x1a6/0x330
[  455.072726][    C1]  ? __pfx_kcov_close+0x10/0x10
[  455.072748][    C1]  kcov_close+0x28/0x50
[  455.072767][    C1]  __fput+0x449/0xa70
[  455.072787][    C1]  task_work_run+0x1d1/0x260
[  455.072812][    C1]  ? __pfx_task_work_run+0x10/0x10
[  455.072844][    C1]  ? kmem_cache_free+0x192/0x3f0
[  455.072868][    C1]  do_exit+0x8d6/0x2550
[  455.072894][    C1]  ? do_raw_spin_lock+0x121/0x290
[  455.072913][    C1]  ? __pfx_do_exit+0x10/0x10
[  455.072934][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  455.072962][    C1]  do_group_exit+0x21c/0x2d0
[  455.072983][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.073002][    C1]  get_signal+0x1286/0x1340
[  455.073028][    C1]  arch_do_signal_or_restart+0x95/0x780
[  455.073046][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  455.073069][    C1]  ? local_irq_enable_exit_to_user+0x5/0x10
[  455.073096][    C1]  syscall_exit_to_user_mode+0x8b/0x120
[  455.073115][    C1]  do_syscall_64+0x103/0x210
[  455.073135][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  455.073152][    C1]  ? clear_bhb_loop+0x60/0xb0
[  455.073171][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.073187][    C1] RIP: 0033:0x7efceb3907fc
[  455.073200][    C1] Code: Unable to access opcode bytes at 0x7efceb3907d2.
[  455.073209][    C1] RSP: 002b:00007ffeba853d00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  455.073225][    C1] RAX: 0000000000000058 RBX: 00007efcec0e4620 RCX: 00007efceb3907fc
[  455.073236][    C1] RDX: 0000000000000058 RSI: 00007efcec0e4670 RDI: 0000000000000003
[  455.073247][    C1] RBP: 0000000000000000 R08: 00007ffeba853d54 R09: 000000000000000c
[  455.073258][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  455.073267][    C1] R13: 0000000000000000 R14: 00007efcec0e4670 R15: 0000000000000000
[  455.073286][    C1]  </TASK>
[  455.584634][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  455.591573][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-01840-gf6bd8faeb113 #0 PREEMPT(full) 
[  455.603422][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  455.613517][   T31] Call Trace:
[  455.616838][   T31]  <TASK>
[  455.619802][   T31]  dump_stack_lvl+0x99/0x250
[  455.624443][   T31]  ? __asan_memcpy+0x40/0x70
[  455.629071][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.634321][   T31]  ? __pfx__printk+0x10/0x10
[  455.638964][   T31]  panic+0x2db/0x790
[  455.642906][   T31]  ? __pfx_panic+0x10/0x10
[  455.647365][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[  455.652776][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  455.658187][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  455.664394][   T31]  watchdog+0x102d/0x1030
[  455.668788][   T31]  ? watchdog+0x1de/0x1030
[  455.673252][   T31]  kthread+0x70e/0x8a0
[  455.677369][   T31]  ? __pfx_watchdog+0x10/0x10
[  455.682087][   T31]  ? __pfx_kthread+0x10/0x10
[  455.686715][   T31]  ? __pfx_kthread+0x10/0x10
[  455.691346][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  455.696587][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.701836][   T31]  ? __pfx_kthread+0x10/0x10
[  455.706463][   T31]  ret_from_fork+0x4b/0x80
[  455.710913][   T31]  ? __pfx_kthread+0x10/0x10
[  455.715567][   T31]  ret_from_fork_asm+0x1a/0x30
[  455.720368][   T31]  </TASK>
[  455.723705][   T31] Kernel Offset: disabled
[  455.728047][   T31] Rebooting in 86400 seconds..