last executing test programs:

3.6455286s ago: executing program 4 (id=968):
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0)
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x5aa)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000140)=0xc)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000010140)={{0xa, 0x4, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}}, 0x800, {[0x10000006, 0x0, 0xe2, 0x2, 0x0, 0x1, 0x3]}}, 0x5c)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28)
sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x80, 0x1, 0x2, {r7, r4}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x40, 0x20008880}}], 0x2, 0x4c054)

2.671932602s ago: executing program 4 (id=980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @sack_perm, @timestamp], 0x8)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x3a)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
pselect6(0x40, &(0x7f0000000240)={0x9, 0x9e, 0xfbfc, 0xee, 0x8, 0x6, 0xa0c, 0xd}, 0x0, 0x0, &(0x7f00000003c0), 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x74}}, 0x0)

2.607557987s ago: executing program 1 (id=981):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000006f55f3a029d4610d1d9a628eee8e38f6e0c411195b518451a1eb806fc0fac004d6d982f0440fad1b4c95cbcf6bdaa20679fa6d35624b57dff07b72aa93157c2f9120465392a04eec23b25cc60469d10dfae021218317aa27a4d5a77912d85ab9fb258e040020f55da3562f031f3f511b35983493df031320"], 0x48)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ffffff0000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
write$cgroup_subtree(r6, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.430367427s ago: executing program 1 (id=985):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000061128c000000000095000000d892361b7a00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000001b000000080000004000000042000000", @ANYRES32, @ANYBLOB="000000000000000000c83325fc750000000011c442e667264babd5631d373d950a5028758202ab7b4930f08733b910a5f50eee27b675cee55b503c592ff1bab3210dc6cdece1053d07a0329db3e2c47036b3a1ef45688a1c59bf28f74043685a38fe30ae0ffb433f6003fad866882e37b4d53be2638afbe00427f17a3ad2c4594476d381b028995d9816b062e1cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x94, 0x0, 0x0, 0x4}, {0x6}]}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000400), &(0x7f0000000540)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000000)={@multicast1, @loopback, @empty}, &(0x7f00000000c0)=0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)}, 0x0)
unshare(0x200)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000006800010000f40100000000000a0000000400000004000b"], 0x1c}}, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000000c0)={'pimreg\x00', {0x2, 0x4e20, @multicast2}})
setsockopt$inet_mreqn(r7, 0x0, 0x0, &(0x7f0000000080)={@broadcast, @remote, r9}, 0xc)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

2.399595017s ago: executing program 4 (id=987):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x8001)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "250669de1943aa5b", "647c8bbcf7eff888ad7e0fab1bc9a2a9ebc80f317e1fdc54173d8db957d54198", 'VQuM', "7836e5e229bc04d2"}, 0x38)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r6, 0x0, 0x20000000}, 0x20)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4010000160011040000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000fffffd08001f0004000000e4000600e0000001000000000000000000000000000000000000000000000000000000004e2300004e2000800a00208000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000004d23300000000000000000000000000000000000001000000000000eb0a070000000000000001000000000000000700000000000000ff01000000000000e05b0000000000003937732600000000b100000000000000500100000000000079030000000000000500000000000000ff7f0000000000007400000000000000040000002abd7000013500000a0001015000000000000000"], 0x1e4}}, 0x0)

2.275449806s ago: executing program 1 (id=989):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
sendto$inet(r4, &(0x7f0000002640)="01", 0x1, 0x0, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x1, 0x4)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x8, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@xdp={0x2c, 0x2, 0x0, 0x3e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="ea7ea94b4c57cc4c6e04c7f58a85541b073c3c6d90b716ff", 0x18}], 0x1, &(0x7f0000000580)=[{0x110, 0x124, 0x3, "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"}, {0x1010, 0x115, 0x3, "10280d5a195c771d96b02e94d14e3915bc693510f652493f68f53d2acd7a595510048c9622163e298c7337b91f4ffc7b55ee0cc9cfa2e62b4f1e626415e636254f8384e0a4a04c4a637c18eddfbe29986f967ecf28d49a2180a0f8a272c145ea30bea0e691bab0909f35fa4edd687d8e581ee264ee348c266afaf2a09440d3d79ef24cdeb9015b8f2978156201539118c656ea139f6cf149192a73f28d5f06a2d53d679064cb8bb964ae1a95bfd03f17ea921295b49dcc272b54783d20d77ad021980e0bae0c2d5be269a126cc74825a5c1f450eb38d9d88694c2337ffa2f98701213c4ba704ab7e33c0b956c0235d0ef6af560313127ca069111d9c8137ab2c537631592b0858ede002bb412b870194e4d75c681b893de865b5b7a503deb97a5086d6a5a49cde839d1127f117ff9343d4b94fd8eeef62ad2d5368c23f736a03b8915b9d81e5a16830d473d0949475596ce54562380820aa6d5e7b33cd9bb380291d4b7f8591e638f96e8baff477aa435eb8762c21e067ecca99708eece7eafe2bcd790be50cd0014065dedd304f39cc3c34a119ad6b7c8ef1fc8d43e9f43aab916ae3ae10ebac7e3e03fa3ca6750a188dd32720ce292da5ad4865df2b46ffd6cfa54ad28b83432c4e772caca72f05aab86e9d6be6fccdce51af88d1c0744a4d567395bce15c0b4c9d6763c718859fcae265978e228f2b1ba68c18f8c38207e73f278f19c739d271e651764446621312370f3d494abaab072c94f203855aaae97dee58d56db0609a9afdf21354df88e6c97b96e93ef48b260bdd6f5bd088e2da10f7b7d4f504af566350d5ba086756b236aeadc6f2e233e1b96155b98ff4398582793f5ebeb025b65a9cf34d8106b070ea5e2e41d1ced04e2e3798582a4dcdba47eb4f98435f09f35f02538fdde9623fec389649adcc38201fa2c9f4c467748850c11545b9f9b5df0b09ea6c02138daa4210390b82ab0c2c1f36a56cfeeb5f3ad62dbab9db7fb9ccdaa7964248a9d458f4b209380618a9ae274018c0ec7a06a39c044d576d428bf74666128a24518c11a340863529d2a52477105af1261e2775084af5fc59ae498fcac021d7c90299f27951bc44b79361fec55e8e971bc03235ab461beb5678158d71cebabf7807b50609c3fc0c620a38c9e6bd34f2b64d668a0706c63eedea72bee7c433307f2e97d98a66facbe671a4196880ed57f1b393aa286807d8cf4bd014e374a3814091881d5ddee15be8fb988a6c1241f62b3b8101f6c003d2ddaf526e605528af57bd91a27496c43e87a60d3747c8c5930348ec1ad148d6172f4f3468f593735e8939c0e06d95234d4ed9a4223d873cb707b594b6c88d8fbe9c69e3069aaae699e4a82fbef34c5adb99426b84664a35832a32a700256ebdef45d719ea13051d4910264743d73d1dfbc2e9d07cf3d3aafc7e5ffd1e7b86ee9720d551e427714c00663037b5482f6bc4268753f6d830a04d1dc8d96997c42448c7fac0af76f20a35c6216beaa448b201e82446663dfa9f7b33c3550b799e7fde686d57d6314a844c77561849ef9f94e9cd1905184affbdf6b38615d6001a80c205b9e28a6bdfc533b905c6cbba65b252927a52fda8d57829dbeb7a060bb6b34f0b499532875f2695d6b4214a7c8daa42c669d65e4bd0b1f8383a97a1992c6bb94237fd70881d83cefa59fa23c87f0fc8fa6230edca4a4c0252c2bf425aadf3e2fe7390ffbf31d4bebeb8267e14f6cf618d6db8123d330311e7b26376a942e59d3ba335cb87bada136d8c729438bbb76abc7ef7398cddf9e2b084ae9704ec83d7f477c9dc86de3fad0f0b0a3f2eb59271422d02711bcdde4bebc66b0de202e94643df542d9d6f72e8f7f220ce1ca1fd2a6071a8e7f08eb2f7b0cdc408eff19f1f43731b8dcd4f84c4ccbfd4f84b00d4a9b00e91cfe68b3baa6b9fcb2093e49cee9717a9d0d96cd687f94d798f28bd5e375667b7a8e9f976e0f4ec3b7111d55109caa808c3cb6295f13091f184c908c2155a44127cf0bc51dde33d3e285042cc982c3927bd227e013027d013210894f8522ae65165f1757475818d04228bd058de14ca7613626dcc8d93dbdf1c203c09dcdd97fefc120027fff93fb91c3f18c8ad11e0db186866e35bce7854d80d6d806c4448db7d934d4dde5c5aa744dd0fd3e6b9f0e7eccc003b821b70651c2c273ad1b1999a0663c3964762a4c2d2cdbe732eda26339d1c0167c3f41a855e5a3cde8288af63ba78d3f39d1b9ff2463cd99143017a5bbbec0ed8c21ef7109c460ced610914ef0f61784c0224cadd507f3a97f57f01f2b940338ba1dba3541450fea8c275eb0d81007abaf450d3b711534c05263116162d9af42f3d025fd7dfbac3d6392d110f46be6adec8b4859c6a2349e62b83b21a44c67409c933fc862ec8e52c9ab1325272bce075b4b73ca6143b8957fd0b0d71bc45b6a92d7a4759be883e22eb5966c71fe9db97a7780ee1ebd3d48c142573c9865b3896feb41a8a36aae95a8f16e73e26e81a5f1c96661aed047927c3a441b9639a161b4737567d6fc4ecd8cd49e9deb13718038e45dab3bfca2009384541985938388154008922d7c99d1f019b923971d11f124e7558912fa140da1926be7beb7453e760298e332a02f4444dc1f8b3e898e6f08947cc8f1589c9e3e1d9d2f075eda0255b0e2e0a0c0511acda2281730d861f7e766846b137163944eca2c918abf17362b2e671a1d3b251776598d9fd07bc4dece00ac768c6d159e31aac499edc95422faa88887ee86af7f29739158100cf011f7569fe1c191264d4c4b15a022bdf93686f0230cbcfd19ac0ad64c3b55ab5bc979d1ab6b96a93d947ed93612a92817eccc7396992abf495eae65938efba42ac16793bf343db79768187c83ea461a5ea4a86eca9882382fccb51a9f6a7aad90e8c9cd53c7909401ccbec97c0fd411f03a5976a25f7d4fbd3fce7cf433daa5a60377b94baa561ef924a30e177aba1d7b47ae1c7c9309f9d22ad1e61013b0f38c23143bad0d3103ad5dbfe3ea9e580e8d4690cf9ace9bb3cc39b947a74d9543883e88800d001d7cb78408601561e8f0fede27391eda40c73f5bccd9c0684917fe4107e51d8b7dead439478dff395ea1595100ad71b63aed2bebbec2e9c58ff55e145537566d9fe2302ec71992ccec2345aa3fa18be126d18bb2749afbedc03a59a87b842b9411f1bd7c1f2c37bf1504fe5f999fdf195732e6a1375ffa2a7e8fd5f46814dd5d4b6f4dac06d99747cb62e4c764975c1210bc1a51133b91ab160421b9e02c293bec4acd9fad65f1bb2ec61823c06e42efa0247630824525fdfe61db6ab1ea54c10caa887e8225b99ca99e3f05eec961ff0504b4a216117209d94bb36d01047e1b73518c4e5515f1b64d526530a699a384097fd12a325e81d5a1c99eb62aee6ad6bb3dc46fce0d613ce118cbad8e91122a7ca75eb79db193ac7efae223c58cb231d454c4e0ee28b17f1f9e566443a0c8503b9d3f191567193dc2ed1061e57d66630ec78b6a095be1f1245a07a3d54827f73de0fcfdd0ff20c3a55e2b2d10b40caf529a75da7c913c869cd76084c6e29e38cf470923d59cbc182ad9d3bc5046065b766cd1184bfbe9d7f3d2b2d0acf0accbe3eade671fa831a754bb74ec1df4892db33709569c28dbb4691f4aa8aa1338e628f5e6c865f99147668a8f82056bc9e998edc8f509c867df16165ea7ee48738f70560926e415a4b540d46f96a99dfd9fa69c7ccd1eaa0bc81437e06bdbdbad0053932e4168e4707c53de4b2f0dfa5144181b4c8fe3ae5e55e7a203f82cdd3de816787d82ecc2414be2871c4366ca3b784965dc01b5b52c5db9ea428040321fcc2ba67f96c70e3c72629bb16aaff0bdf963d8faff0cfff5713c4023a121803bf226db0134b1b0a97734ac989033d2484573e574f56de65119b4943c42663f9e4d6691e642a44cf9759e8b187869d47e1c23a38050b1d4d61ac9842ad459d1fc4148a2588fdb35c169dd41f70818035e3cae2419a570b2652dda9a65b48da9d5b00f3ee97de19806abeeb2b7c62cc5a75ad7e67205e4adb8a65c54da2921d485211c7f8ef044f3f2e66eec1ac6bcbba5beeebdf200008b5d6018359bc42e05b00e5bb0fd8ff8a04511dc35e1d0980507894b1132cbb75a9faf327c021b8d40ea01789e4bced5099c4cc7c30cb5d2819e4a92aef6ffb8965eeada119cfb0cc8b9307cfe17e21337bf05997d575394ce5d931db7f4c4bcc8b489c4c7dc68044374c76935032d4d8ec5a73acb065e9f9c56f73feb4acf4212ed8a80005a1721460cc4fcc29d12b70182c01496c7f1cf286172a22b72d46b65bc0913f4ff6c193234b9a952bc95b7db029907d9f60051c0450b18d40c51ebcd36e5c3e4f5dc403ffa8c1d9b11ea94a1760a7bf5c786789a49384a7519660f2e1ea3735f477ea8cb0e7691e11a4792a0b5d38020012a6f383ffb9dfd97dafc2edbe6c911ccb7b7597799a9cd2511b84232a22b9d11b9c8b7237345550799a8d454be2116ee9be3c0eb208f31e998c558a1f629c20e0787573a82ef318345874ce8b253166afb0e46111e909bd5eb155d4bafbf49b836990a686fdcf9bb269c2effd34d79d9232f41cea1263bf95db92d3518681fe6da5265979cd2b5c4e6cb9be4bd493ec3333bdd846d7fad7e2781935ec0119c43b0d15cce463ac8c452c7e35f4cba67270823eee48d1921b239e2a7e82ea4d55f9f5cd73b98929441c985bd4c4ee92b8b17908dc26bd61a18ce1285347b925c7529be98856e7182908fd0f5cb2aaea8482db616e7afca30b7cda308a3bd3e9bc7b15326d7221a2231cc1c68cb8f67bb045b0c6b8988ade68d7310bd98b938c029d4bb158615bdb372a5c42d600d4c8141af53ae6732b23ed2f921bf804370e8dd1b619b2bc306f137de467dfefe5b03eb2fec0c8857026e21d8497a3347ae6ddd27a6a3f4ffdc92abe66662cd63d55b1de64c4918b410da79b3c6d140dc193f5a613836cb09b26907a0a858cc77847a2b742b4c67002b1e74a9f067e8bc7055f495b4ca18171c76ad26cde08e38e1be9750899a9d3b3442bae78a86f8e8ba01bacbc6717202450df66f02a731acf6713d63e2c19ea4dd95b18f484b648719ff8a1ab3e784f25720d95ad1001fb47bec63966fcb5d72310e95578163b5efc1669a1746178989db3d1523336f01b7a23df7e0e387d08074d6b7f9a71f01c3595dcb561b4176925cba48693047935c9e2eac7a04b5a1a3b0dfae17574a37ec030407ca39acd6a1a7cba4d21730630392b86785d66001cda42148ca7efc518f2e5c3e5a682c0816449a492df72550fc596b2594712e4daeccf1b454289914e8f0e704d69d6fbc5e19286422982b9f71e2f7cb4e3223575a3b9c01dcf95a5ef6398271a2db55cf4641be63fbe6d91a4bd2db40f2dbc5e8b8a2e251b28409803d7299e5206af1fa7a34ff6947068a5a36629334ea0d8512a84e3e5baf9c37bfa9ccdd5b9fc98a6e615a927c8d2b3cf8adb5dd22b5f8385504afc5486afe3fd03150cfad44f33e01883af5516d3ad0b06046e87ece063aa492bb8d76f7cb1b8db68d01dd54b82f206324c6903da6e36dfafee4755be3ddad4cac65785afe64b325a903485b028a241326515f8f0d1264d6844b21cdd1114c90e26f8947eacaeda19f6a79baacbd921befe5fd55334a8bb94a32b73ab5e1a4a60cc21d59db8fde99cc733fe0aa0743fb623f97887188a6517a42866874f4a26e8cec1185d2186f005ac0033cd95de66e5b6"}], 0x1120}, 0x44803)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8b040500000004002c00128008000100736974002000028014000b0000000000000000000000ffffe000000108000200ac1414bb"], 0x4c}}, 0x0)

1.867625805s ago: executing program 1 (id=992):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x2000000000000024, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611008000000000063010e00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/189, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)

1.800200364s ago: executing program 1 (id=994):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20)
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0xb, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c000000000001907800000000e00000010800000000000000"], 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa3184f5b3ad12be5, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
close(r9)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

1.630826978s ago: executing program 3 (id=995):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

1.481591075s ago: executing program 2 (id=997):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r7=>0x0, @dev, @dev}, &(0x7f0000000440)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', r7, 0x7, 0x10, 0x7, 0xfffffffc, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @multicast2, {[@noop, @rr={0x7, 0x17, 0xdd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @rand_addr=0x64010101, @multicast2]}]}}}}})
sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)
unshare(0x2a020400)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r0, 0x5e04000)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x802)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)

1.455818671s ago: executing program 3 (id=998):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async)
listen(r1, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000600)=""/151, 0x97}], 0x6, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xaf}, 0x10000) (async)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="53d964", 0x3}], 0x1)

1.395372554s ago: executing program 4 (id=999):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$nfc_llcp(r1, 0x6, 0xc, 0x0, 0x2000e881)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54051}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
write$cgroup_int(r8, &(0x7f00000001c0), 0xfffffdef)
write$cgroup_int(r8, &(0x7f0000000280)=0xffffffff, 0x12)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES32=r9, @ANYRES16=r4, @ANYBLOB="100027bd7000000000000200000008000c01050000000400"], 0x20}}, 0x40004)
sendmsg$NL80211_CMD_SET_COALESCE(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$inet6(0xa, 0x80002, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet6_udp_int(r10, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4)
sendmmsg$inet(r10, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10)

1.326426575s ago: executing program 3 (id=1000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x6}]}, 0x48}}, 0x0)

1.304077638s ago: executing program 0 (id=1001):
r0 = socket(0x10, 0xa, 0x1)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4020081}, 0x40804) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8) (async)
unshare(0x600) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FICLONE(r3, 0x40049409, r3) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002400)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0xc, 0x5, 0x4da, 0x1, @mcast1, @mcast2={0xff, 0x5}, 0x1, 0x18898a8b793625a8, 0x0, 0x6}}) (rerun: 64)

1.087474234s ago: executing program 2 (id=1002):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x7, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x24) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100000f54ffffff04000000f5ffffff55f30b000000030000000000000f020000007d703a00000000305f002e3000b0a67843068a023d19b5aa07c580080e60a9a72e9a6c621bc246b5dfd6b37a9fd54ad167d3527c9cec48cadba0a423c1fcf6ef4e55ae65a14dc06a8ebdacd4e47c41d1d1"], 0x0, 0x47, 0x0, 0x9, 0x84, 0x0, @void, @value}, 0x6a) (async)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0141044b0100406d0098000010ffff1c3b9d0bb9288a5088385dc8ba0ef68b6d6a21975a0e94e385477491cf5a6ea9c472ce654535c39e2579e3c1bc0f333a070f5d6aff913f49107b87abcffa9e3a4a8fcc06b834d626cf118925ce4c5b9f939f4257"], 0xf) (async, rerun: 32)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400"/28], 0x50) (rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) (async, rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) (rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000e3ff000400010000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r6, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000500)='lo\x00', 0x3) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x4c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16=r5], 0x58}, 0x1, 0x2, 0x0, 0x4048824}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
write$cgroup_int(r1, &(0x7f0000000400)=0x6, 0x12) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r7}, 0x8)
socket$netlink(0x10, 0x3, 0x0)

1.056897518s ago: executing program 3 (id=1003):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.min\x00', 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x7ab99000)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x1, 0x1, 0x0, {0x6, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x1, 0x3d8, 0x7}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x1, 0x7, 0x0, {0x1, 0x8, 0x0, 0x8, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x9}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="74d801c8fea6"}, @NL80211_ATTR_KEYS={0x58, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c30fc03b77"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6cc9b6881d778732bb258b2c21"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "b85d31643ce49165901914"}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0x2, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x1}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffe8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x24, 0x1}, {0x16, 0x1}, {0x16, 0x1}]}]}, 0x12c}}, 0x41)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x1, 0x9}, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000340)={0x3, 'syzkaller1\x00', {0x7}, 0x2})
openat$cgroup_int(r1, &(0x7f0000000380)='blkio.throttle.read_iops_device\x00', 0x2, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', <r6=>0x0, 0x20, 0x78a1, 0x3, 0x0, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x66, 0x0, 0x0, 0x4, 0x0, @empty, @remote, {[@end, @rr={0x7, 0x23, 0xdc, [@remote, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010100, @loopback, @remote]}, @end, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x2, [{@rand_addr=0x64010100, 0x40}, {@loopback, 0x800}]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x13, 0xff, [@private=0xa010102, @broadcast, @remote, @rand_addr=0x64010100]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x0, 0x4, 0x0, 0x69, @mcast2, @loopback, 0x8, 0x10, 0xfffffffa, 0x80000000}})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000640)=0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000680)={'gre0\x00', <r9=>0x0, 0x8000, 0x7800, 0xfffff800, 0x5, {{0x1f, 0x4, 0x3, 0x1d, 0x7c, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x1b, [@rand_addr=0x64010101, @private=0xa010100, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xb, "aa03c38ec7f1536992"}, @timestamp_addr={0x44, 0x34, 0x43, 0x1, 0x5, [{@broadcast, 0x1}, {@local}, {@remote, 0x8}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0x2}, {@private=0xa010100, 0x2}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000a80)=<r11=>0x0, &(0x7f0000000ac0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', <r12=>0x0, 0x8000, 0x1, 0x616, 0x401, {{0xf, 0x4, 0x1, 0x11, 0x3c, 0x67, 0x0, 0x1, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x12, 0x1, [{0x1, 0x7, "62b5f3eb6b"}, {0x2, 0x2}, {0x6, 0x3, '\b'}]}, @timestamp={0x44, 0x14, 0xd, 0x0, 0x0, [0x2, 0x5a08, 0x8001, 0x80000000]}, @end]}}}}})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000bc0)=<r13=>0x0, &(0x7f0000000c00)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6_vti0\x00', <r14=>0x0, 0x29, 0x0, 0xa, 0x401, 0x0, @private1, @mcast2, 0x20, 0x8, 0xfffffff7, 0x5}})
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x174, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
sendmsg$can_j1939(r1, &(0x7f0000001040)={&(0x7f0000000f00)={0x1d, r9, 0x3, {0x1, 0xff, 0x3}, 0x2}, 0x18, &(0x7f0000001000)={&(0x7f0000000f40)="a337473d9a7f135b06bf351f7579f94e1124b880dd795f09a679c3c84aa1d17da5eb71285a7414ee8d766ef38496d1371f50a73717408db2fd10a801693ce93a003fdb88a785b37947c69a2c4e612da77a014876d0cc9441e534815a070fa5aa0a36eafe7c094f0bcb851f17108757c16013a79598d53519fadd4f8615c73e24808e77a7e281ca62338582806103d788694267cb08cd4b43ae312ad92c8f", 0x9e}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
openat$cgroup_freezer_state(r1, &(0x7f0000001080), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r1, 0x0, 0x4d, 0x1000, &(0x7f00000010c0)="a5e5e5de3b863770407b6520392daa3e7df9e2c7a77e37d092b7627a4519f4472035a9a3ae7cd787e9de14932455edf24a4dc0fe281f2304c62c8919652e92f44b21abbdfea5836c39a59cc5b7", &(0x7f0000001140)=""/4096, 0x3, 0x0, 0x34, 0x12, &(0x7f0000002140)="2e6feb906bfae3ef971c02c07e2f33ec133b1363db788fc99304464879182f2dd54707b8e63a9c1f3010b7c916f61383dc7f34a5", &(0x7f0000002180)="58418d04e591c05094331b0db8a0420d9527", 0x5, 0x0, 0xfffffffc}, 0x50)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000022c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000002300)={r1}, 0x8)
connect$unix(r15, &(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_inet_SIOCGIFPFLAGS(r15, 0x8935, &(0x7f00000023c0)={'macvlan1\x00'})
ioctl$int_in(r2, 0x5452, &(0x7f0000002400)=0xa86)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

962.422644ms ago: executing program 0 (id=1004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711129000000000085000000000000009500000000000000a400a50500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x0, 0x805, {{0x2a, 0x4, 0x3, 0x9, 0xa8, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @empty, {[@generic={0x86, 0x7, "14ca77a65e"}, @end, @generic={0x44, 0x5, "c8bba4"}, @lsrr={0x83, 0xf, 0xdf, [@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, @local]}, @generic={0x44, 0xb, "3e1858d23aeb437fc5"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x45, [@loopback, @private=0xa010102, @empty, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xe, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1]}, @cipso={0x86, 0x34, 0x1, [{0xed5e1fcc2e0bf295, 0xb, "f759682c864ed1826b"}, {0x5, 0x11, "4c223d325cf8a043405dfbceba17f9"}, {0x6, 0x12, "da0f79325fc405f6d7c150c2c6b1b937"}]}]}}}}})
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x34, r5, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x34}}, 0x0)

799.456811ms ago: executing program 3 (id=1005):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4e784ea94d6a3dd3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4e784ea94d6a3dd3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r2, &(0x7f0000000080)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) (async)

798.953278ms ago: executing program 2 (id=1006):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000000880000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x20, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x20, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0) (async)
r5 = accept4(r0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
accept$ax25(r6, 0x0, 0x0) (async)
accept$ax25(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/58, 0x3a}, 0x7ff}], 0x1, 0x60010020, 0x0) (async)
recvmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/58, 0x3a}, 0x7ff}], 0x1, 0x60010020, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
close(r8)
sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000040)}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ife={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)

710.452418ms ago: executing program 0 (id=1007):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async)
connect$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) (async)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010000001000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="19820300000000003800128008000100687372002c00028008000200", @ANYRES32=r9, @ANYBLOB="0840e4852d20e3c00100", @ANYRES32=r12, @ANYBLOB="050006000400000005000300000000000500070000000000"], 0x58}}, 0x0) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(r13, 0x0, 0x4c881) (async)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r15, 0x0, 0x101}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001080)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', <r16=>0x0, 0x2f, 0x9, 0xd0, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x8000, 0x0, 0x80000000}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl1\x00', <r17=>0x0, 0x7, 0x8000, 0x8, 0x4, {{0x16, 0x4, 0x2, 0x8, 0x58, 0x64, 0x0, 0x90, 0x29, 0x0, @multicast1, @loopback, {[@end, @timestamp_prespec={0x44, 0x3c, 0x87, 0x3, 0x6, [{@multicast1, 0xffff70cc}, {@broadcast, 0x8}, {@empty, 0xe4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}]}, @ra={0x94, 0x4}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001180)={0x3c0, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3a0000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r15}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0xfffffffa, 0x4000, 0x2000008, 0x0, 0x0, 0x0, 0x1}}) (async)
r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000660000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='net_dev_start_xmit\x00', r18}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0xf, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

618.208995ms ago: executing program 3 (id=1008):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x82, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x1d}, {0x8000000000, 0x7, 0x800, 0x3000000, 0x80, 0x0, 0xffffffffffffffff, 0x7ffffffffe}, {0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff80, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 0x0, 0x5, 0x81}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c80)=ANY=[@ANYBLOB="601400001900010000000000000000000000000000ffffffff000000000000000000000000000000004e23000002000000000000004be052dc574d0696edeb7972ccc07ec9d459d139cbcc2df1238c43e72a5aab3203a2da9e39f111a8cb5927aab5fb7494c64ba7feaa38cf78b0087b51e888ac8347a2d3b43a2736c401a0f0291bf3db6c1c45d59373d7c5b107349ad917689e1082c025f91dc7be31d41422555192ae285b27da60810754af42301df8f3f4728e89dbfdd6f11fe269c58d783c7cd1d09990562da0c9117b53f777", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1460}}, 0x0)

581.489626ms ago: executing program 2 (id=1009):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x29, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x8001}, 0x90)
r6 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r0, 0x0, r6, 0x0, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000000000000400500010006000000050005000200000005000400000000000900020073797a3100000000110003173f2bbce94b906b2edc6f389756e96100686173683a69702c6d61726b000000005665da9f973f4fa08e0a4d02e6ce5335f490fcb6d3de36a533b36f678141eacac58feedaa95f0bcc91a8bf61acdfa0eabdaf8e7e4de0bc"], 0x4c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00f57b25e33c3415552da1018008000140e000000208000a400000000205000300020000000900020073797a310000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000f1030000ffffffffffff0085000000d30000009500000000000090"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
read(r11, &(0x7f0000005f40)=""/175, 0xaf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

383.500816ms ago: executing program 4 (id=1010):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'rose0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000001080)="d2", 0x1, 0x20044881, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c)
shutdown(r3, 0x1)
getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}}}, 0x24}}, 0x0)

378.253249ms ago: executing program 0 (id=1011):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000000011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1f, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r12=>0x0}) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r12, @ANYBLOB="0500350000000000050033000300000005001200"], 0x3c}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f91765ab1756148516c9ddf6d6d4b135ed7d6086b840fed2186a6388028d526d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "086f606e57809a0582ea4b9e2905db60184af6c1aa874f4fc65752ef276d135e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c6fdccea09c7608ab039b523990b92be60246c15d8450ea6a27fddf1f1d1d4c3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b4baaa6d86a5b4aaa576f8ef3ddfc001ef7cd66008e6fdb7fe1fa5784278d4a6"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
close(r1) (async)
r14 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x80}}, 0x2e) (async)
ioctl$PPPIOCGMRU(r14, 0x80047453, &(0x7f0000000200)) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00001400"], 0x30}}, 0x0)

376.744727ms ago: executing program 2 (id=1012):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0x2e, 0x6, 0xffffffffffffffff, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/520]}, 0x280)
close(r3)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$LINK_DETACH(0x22, &(0x7f0000000400)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}]}]}, 0x1fc}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000060000000000000007000000d78580dedd000000852000000400000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0700f089008500000006000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f0000000e40)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x19, r3, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xa, 0x5fe, 0x2f2}, 0x10, 0x1fd8a, r3, 0x3, &(0x7f00000001c0)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000240)=[{0x0, 0x2, 0x4, 0x3}, {0x5, 0x5, 0xb, 0xb}, {0x2, 0x5, 0xb, 0x9}], 0x10, 0x4b17, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="360000211aff8ea128000000", @ANYRES32, @ANYRES64=0x0], 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)

282.593024ms ago: executing program 4 (id=1013):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448df, &(0x7f0000000040)={0x0, 0x0, '\x00\b\x00'})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0)

211.871801ms ago: executing program 0 (id=1014):
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x9, 0x8}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x7, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2]}, 0x8c)

127.48917ms ago: executing program 2 (id=1015):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x40fb)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)
socket$inet6(0xa, 0x4, 0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x2d}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x7, 0x7f, 0x48, @rand_addr=' \x01\x00', @mcast1, 0x7, 0x80, 0x7ff, 0x3}})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$packet(0x11, 0xa, 0x300)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000300)=0xc)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x2, 0xf, 0x2, 0x474}]}, 0x10)
ioctl$TUNSETGROUP(r7, 0x400454ce, r8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffe96, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3)
bind$bt_hci(r5, 0x0, 0x0)

37.069444ms ago: executing program 1 (id=1016):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async, rerun: 32)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
ioctl$int_in(r3, 0x5421, &(0x7f0000000480)=0x200) (async, rerun: 64)
accept4(r3, 0x0, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000070c114172b4cc58610d4ce75", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50243}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}) (rerun: 64)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000a00)={'pim6reg1\x00', @broadcast})

0s ago: executing program 0 (id=1017):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket(0x10, 0x803, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0) (async)
syz_emit_ethernet(0x4a, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async, rerun: 64)
close(r0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x55}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts.
[   54.456503][ T5816] cgroup: Unknown subsys name 'net'
[   54.629634][ T5816] cgroup: Unknown subsys name 'cpuset'
[   54.637474][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   55.914591][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.068533][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.103187][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.114341][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.122843][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.123340][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.130973][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.138861][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.144799][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.159750][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.168736][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.169242][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.178060][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.184605][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.192142][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   58.198075][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.206406][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.212159][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.220454][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   58.232631][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.232669][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.242506][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.249918][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   58.254529][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.261656][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.269129][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.283858][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   58.293519][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.338582][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.355567][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   58.362964][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.636076][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   58.789921][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   58.846191][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   58.883221][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   58.905713][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   58.962496][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.970477][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.978595][ T5833] bridge_slave_0: entered allmulticast mode
[   58.985946][ T5833] bridge_slave_0: entered promiscuous mode
[   59.000485][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.007723][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.014905][ T5833] bridge_slave_1: entered allmulticast mode
[   59.022008][ T5833] bridge_slave_1: entered promiscuous mode
[   59.062242][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.072291][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.079746][ T5831] bridge_slave_0: entered allmulticast mode
[   59.086815][ T5831] bridge_slave_0: entered promiscuous mode
[   59.141846][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.149271][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.156831][ T5831] bridge_slave_1: entered allmulticast mode
[   59.163449][ T5831] bridge_slave_1: entered promiscuous mode
[   59.185509][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.197943][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.247743][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.254870][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.262476][ T5842] bridge_slave_0: entered allmulticast mode
[   59.270058][ T5842] bridge_slave_0: entered promiscuous mode
[   59.298934][ T5833] team0: Port device team_slave_0 added
[   59.313861][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.321682][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.329777][ T5842] bridge_slave_1: entered allmulticast mode
[   59.336643][ T5842] bridge_slave_1: entered promiscuous mode
[   59.343573][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.351209][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.358778][ T5830] bridge_slave_0: entered allmulticast mode
[   59.365477][ T5830] bridge_slave_0: entered promiscuous mode
[   59.374458][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.385211][ T5833] team0: Port device team_slave_1 added
[   59.413087][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.420424][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.427912][ T5830] bridge_slave_1: entered allmulticast mode
[   59.434516][ T5830] bridge_slave_1: entered promiscuous mode
[   59.443022][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.473563][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.480964][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.488811][ T5826] bridge_slave_0: entered allmulticast mode
[   59.495557][ T5826] bridge_slave_0: entered promiscuous mode
[   59.505528][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.532795][ T5831] team0: Port device team_slave_0 added
[   59.539622][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.547021][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.573331][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.587104][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.594217][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.601887][ T5826] bridge_slave_1: entered allmulticast mode
[   59.608739][ T5826] bridge_slave_1: entered promiscuous mode
[   59.617201][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.643948][ T5831] team0: Port device team_slave_1 added
[   59.650434][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.657482][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.683591][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.727156][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.755362][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.762680][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.792117][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.805720][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.817797][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.829362][ T5842] team0: Port device team_slave_0 added
[   59.837809][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.849585][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.857031][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.892074][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.912502][ T5842] team0: Port device team_slave_1 added
[   59.973217][ T5830] team0: Port device team_slave_0 added
[   59.992366][ T5826] team0: Port device team_slave_0 added
[   60.003021][ T5826] team0: Port device team_slave_1 added
[   60.009781][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.016956][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.043823][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.057416][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.064402][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.090435][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.112599][ T5830] team0: Port device team_slave_1 added
[   60.139062][ T5833] hsr_slave_0: entered promiscuous mode
[   60.145322][ T5833] hsr_slave_1: entered promiscuous mode
[   60.163445][ T5831] hsr_slave_0: entered promiscuous mode
[   60.172446][ T5831] hsr_slave_1: entered promiscuous mode
[   60.179005][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.187047][ T5831] Cannot create hsr debugfs directory
[   60.219091][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.226069][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.252954][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.265479][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.272953][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.299543][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.311567][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.318855][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.344974][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.357323][ T5829] Bluetooth: hci4: command tx timeout
[   60.357442][   T54] Bluetooth: hci2: command tx timeout
[   60.363409][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.368796][   T54] Bluetooth: hci0: command tx timeout
[   60.375574][ T5829] Bluetooth: hci3: command tx timeout
[   60.386921][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.413185][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.436361][ T5829] Bluetooth: hci1: command tx timeout
[   60.465756][ T5842] hsr_slave_0: entered promiscuous mode
[   60.472744][ T5842] hsr_slave_1: entered promiscuous mode
[   60.479611][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.487540][ T5842] Cannot create hsr debugfs directory
[   60.521055][ T5830] hsr_slave_0: entered promiscuous mode
[   60.527815][ T5830] hsr_slave_1: entered promiscuous mode
[   60.533966][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.541597][ T5830] Cannot create hsr debugfs directory
[   60.611227][ T5826] hsr_slave_0: entered promiscuous mode
[   60.617540][ T5826] hsr_slave_1: entered promiscuous mode
[   60.623518][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.631270][ T5826] Cannot create hsr debugfs directory
[   60.954057][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   60.969460][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   60.980049][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   60.998571][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.033831][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.049824][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.059586][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.090847][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.130723][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.152119][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.163602][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.185311][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.234018][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.244362][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.262328][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.272503][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.341032][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.360304][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.370040][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.379552][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.463079][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.498161][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.518977][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   61.553371][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.560708][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.573296][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   61.597973][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.605038][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.620612][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.627742][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.666864][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.673967][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.694757][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.724515][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.764356][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   61.790199][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.797938][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.818144][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   61.830587][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.837731][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.868628][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.875983][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.888461][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.895590][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.913673][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.924647][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.002072][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.099446][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   62.161127][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.168283][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.199626][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.243134][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.250320][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.332802][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.391070][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.437740][ T5829] Bluetooth: hci0: command tx timeout
[   62.437777][ T5834] Bluetooth: hci3: command tx timeout
[   62.443172][ T5829] Bluetooth: hci4: command tx timeout
[   62.450726][   T54] Bluetooth: hci2: command tx timeout
[   62.474358][ T5831] veth0_vlan: entered promiscuous mode
[   62.484517][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.521012][ T5831] veth1_vlan: entered promiscuous mode
[   62.527318][   T54] Bluetooth: hci1: command tx timeout
[   62.552029][ T5830] veth0_vlan: entered promiscuous mode
[   62.562385][ T5833] veth0_vlan: entered promiscuous mode
[   62.604372][ T5833] veth1_vlan: entered promiscuous mode
[   62.639748][ T5831] veth0_macvtap: entered promiscuous mode
[   62.649825][ T5830] veth1_vlan: entered promiscuous mode
[   62.658581][ T5831] veth1_macvtap: entered promiscuous mode
[   62.689504][ T5826] veth0_vlan: entered promiscuous mode
[   62.712532][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.724343][ T5826] veth1_vlan: entered promiscuous mode
[   62.738079][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.748232][ T5833] veth0_macvtap: entered promiscuous mode
[   62.784389][ T5833] veth1_macvtap: entered promiscuous mode
[   62.797859][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.832075][ T5830] veth0_macvtap: entered promiscuous mode
[   62.860606][ T5826] veth0_macvtap: entered promiscuous mode
[   62.886778][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.895743][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.905062][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.915061][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.928877][ T5830] veth1_macvtap: entered promiscuous mode
[   62.945073][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.956311][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.967702][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.009309][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.025040][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.043833][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.052498][ T5826] veth1_macvtap: entered promiscuous mode
[   63.073265][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.084839][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.095876][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.106828][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.117744][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.151188][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.161014][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.170620][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.179371][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.209981][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.221861][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.232939][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.243535][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.255074][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.271135][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.281909][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.292238][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.302976][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.313123][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.325992][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.337496][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.365058][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.373978][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.382996][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.391863][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.419057][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.430639][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.442351][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.453111][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.463196][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.473709][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.487501][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.508033][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.517859][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.518174][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.525927][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.535182][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.552739][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.575342][ T5842] veth0_vlan: entered promiscuous mode
[   63.640921][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.653830][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.669902][ T5842] veth1_vlan: entered promiscuous mode
[   63.697235][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.705693][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.775728][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.778465][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.800084][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.852466][ T5842] veth0_macvtap: entered promiscuous mode
[   63.861873][ T5842] veth1_macvtap: entered promiscuous mode
[   63.880138][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.891835][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.902008][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.912758][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.922772][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.933393][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.943386][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.953890][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.965564][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.022347][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.033547][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.054607][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.067203][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.077329][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.088182][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.099767][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.110529][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.122544][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.143659][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.168109][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.198506][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.206801][ T5911] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   64.209402][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.216521][ T5911] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   64.224841][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.242355][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.271789][ T2208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.284075][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.285270][ T2208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.292974][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.344374][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.418996][ T2208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.441779][ T2208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.488841][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   64.535876][   T54] Bluetooth: hci4: command tx timeout
[   64.537015][ T5829] Bluetooth: hci2: command tx timeout
[   64.541420][   T54] Bluetooth: hci3: command tx timeout
[   64.547008][ T5829] Bluetooth: hci0: command tx timeout
[   64.590394][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.598751][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.609284][ T5829] Bluetooth: hci1: command tx timeout
[   64.722379][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.730470][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.828665][ T5930] pim6reg0: tun_chr_ioctl cmd 1074025694
[   64.834756][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.013297][ T5935] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.074854][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   65.188659][ T5943] tipc: Started in network mode
[   65.195855][ T5943] tipc: Node identity ac14140f, cluster identity 4711
[   65.216012][ T5943] tipc: New replicast peer: 255.255.255.255
[   65.228602][ T5943] tipc: Enabled bearer <udp:syz2>, priority 10
[   65.378289][ T5948] ip6gretap0: entered promiscuous mode
[   65.432778][ T5948] batadv_slave_0: entered promiscuous mode
[   65.511848][ T5949] netdevsim netdevsim1: Direct firmware load for /
[   65.511848][ T5949]  failed with error -2
[   65.547251][ T5949] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[   65.547251][ T5949] 
[   65.601703][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   65.675900][ T5954] Zero length message leads to an empty skb
[   66.018250][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   66.064712][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   66.348803][ T5881] tipc: Node number set to 2886997007
[   66.596634][ T5834] Bluetooth: hci3: command tx timeout
[   66.596783][   T54] Bluetooth: hci0: command tx timeout
[   66.602758][ T5835] Bluetooth: hci2: command tx timeout
[   66.619566][ T5840] Bluetooth: hci4: command tx timeout
[   66.681584][   T54] Bluetooth: hci1: command tx timeout
[   66.997937][ T5979] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   67.237018][ T3517] wlan1: Trigger new scan to find an IBSS to join
[   67.303538][ T5984] pim6reg0: tun_chr_ioctl cmd 1074025694
[   67.310566][ T5985] netlink: 'syz.2.30': attribute type 39 has an invalid length.
[   67.347999][ T5986] netlink: 'syz.2.30': attribute type 39 has an invalid length.
[   67.369368][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.408193][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.428703][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.442942][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.746654][ T5988] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   67.824115][ T5990] tipc: Started in network mode
[   67.830233][ T5990] tipc: Node identity ac14140f, cluster identity 4711
[   67.862386][ T5990] tipc: New replicast peer: 255.255.255.255
[   67.885793][ T5990] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.916439][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   67.937009][ T5997] xt_TCPMSS: Only works on TCP SYN packets
[   68.304448][ T5937] Set syz1 is full, maxelem 65536 reached
[   68.542700][ T5988] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   68.685839][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[   68.812011][ T6011] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET)
[   68.890001][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   68.999456][    T8] tipc: Node number set to 2886997007
[   69.957502][ T5829] Bluetooth: hci0: command 0x0c20 tx timeout
[   70.185944][ T6043] __nla_validate_parse: 4 callbacks suppressed
[   70.185964][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'.
[   70.203374][ T3517] wlan1: Trigger new scan to find an IBSS to join
[   70.203377][ T6067] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   70.217322][ T5881] IPVS: starting estimator thread 0...
[   70.218093][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'.
[   70.242705][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'.
[   70.268262][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'.
[   70.346313][ T6071] IPVS: using max 24 ests per chain, 57600 per kthread
[   70.402715][ T6043] syz.4.36 (6043) used greatest stack depth: 18000 bytes left
[   70.799995][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'.
[   70.917391][ T6092] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   70.935243][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'.
[   70.951995][ T6098] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   71.180870][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53'.
[   71.195616][ T6113] netlink: 224 bytes leftover after parsing attributes in process `syz.2.54'.
[   71.197768][ T6114] netdevsim netdevsim4: Direct firmware load for /
[   71.197768][ T6114]  failed with error -2
[   71.209736][ T6113] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.240262][ T6109] xt_recent: hitcount (4294967167) is larger than allowed maximum (65535)
[   71.248031][ T6114] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[   71.248031][ T6114] 
[   71.314524][ T6120] sctp: [Deprecated]: syz.1.53 (pid 6120) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.314524][ T6120] Use struct sctp_sack_info instead
[   71.483126][ T6125] netlink: 'syz.3.57': attribute type 2 has an invalid length.
[   71.490850][ T6125] netlink: 'syz.3.57': attribute type 9 has an invalid length.
[   71.499426][ T6125] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.57'.
[   71.650539][ T6129] IPVS: set_ctl: invalid protocol: 47 172.20.20.16:20002
[   71.721061][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[   71.728521][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[   72.153323][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.164347][ T6102] wlan1: Creating new IBSS network, BSSID 32:2b:a7:60:4c:ab
[   73.438714][ T6177] sock: sock_set_timeout: `syz.1.70' (pid 6177) tries to set negative timeout
[   76.095976][ T6251] __nla_validate_parse: 4 callbacks suppressed
[   76.103817][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'.
[   76.190251][ T6253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.347299][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'.
[   76.437834][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'.
[   76.853879][ T6291] IPv6: sit1: Disabled Multicast RS
[   77.566484][ T6310] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   77.824792][ T6310] : entered promiscuous mode
[   78.020644][ T6323] raw_sendmsg: syz.4.101 forgot to set AF_INET. Fix it!
[   78.046497][ T6320] netlink: 76 bytes leftover after parsing attributes in process `syz.3.102'.
[   78.155038][ T6326] vlan2: entered promiscuous mode
[   78.205481][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'.
[   78.505377][ T6339] netlink: 'syz.0.105': attribute type 3 has an invalid length.
[   78.619192][ T6339] netlink: 'syz.0.105': attribute type 10 has an invalid length.
[   78.723353][ T6339] team0: Port device netdevsim0 added
[   78.922789][ T6346] syzkaller0: entered promiscuous mode
[   78.935916][ T6350] sctp: [Deprecated]: syz.4.106 (pid 6350) Use of int in maxseg socket option.
[   78.935916][ T6350] Use struct sctp_assoc_value instead
[   78.948576][ T6346] syzkaller0: entered allmulticast mode
[   79.574497][ T6243] Set syz1 is full, maxelem 65536 reached
[   80.930789][ T6361] ip6tnl1: entered promiscuous mode
[   80.946484][ T6361] ip6tnl1: entered allmulticast mode
[   81.097822][ T6378] bridge2: the hash_elasticity option has been deprecated and is always 16
[   81.369306][ T6387] tun0: tun_chr_ioctl cmd 1074025680
[   81.373180][ T6389] IPVS: length: 251 != 24
[   81.543824][ T6406] netlink: 256 bytes leftover after parsing attributes in process `syz.2.119'.
[   81.612309][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'.
[   81.632386][ T6406] tipc: Enabling of bearer <dth:t> rejected, media not registered
[   81.641009][ T6411] netlink: 'syz.3.120': attribute type 2 has an invalid length.
[   81.691769][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'.
[   81.824013][ T6422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.123'.
[   81.889947][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   81.902067][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'.
[   81.961415][   T25] cfg80211: failed to load regulatory.db
[   82.224135][ T6436] nbd: must specify a device to reconfigure
[   82.297656][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.338953][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.395008][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.454950][ T6463] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7)
[   82.472010][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'.
[   82.477255][ T6453] netlink: 'syz.4.135': attribute type 10 has an invalid length.
[   82.537674][ T6453] 8021q: adding VLAN 0 to HW filter on device team0
[   82.559165][ T6453] bond0: (slave team0): Enslaving as an active interface with an up link
[   82.589712][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.722384][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.772057][ T6469] netlink: 124 bytes leftover after parsing attributes in process `syz.3.139'.
[   82.790505][ T6469] netlink: 111 bytes leftover after parsing attributes in process `syz.3.139'.
[   82.825061][ T6469] netlink: 104 bytes leftover after parsing attributes in process `syz.3.139'.
[   82.853644][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.897043][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.949511][ T6446] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   82.969593][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.985230][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.068249][ T6475] syzkaller1: entered promiscuous mode
[   83.123427][ T6475] syzkaller1: entered allmulticast mode
[   83.230887][ T6491] xt_policy: output policy not valid in PREROUTING and INPUT
[   83.242932][ T6491] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   83.588708][ T6507] netlink: 'syz.3.146': attribute type 1 has an invalid length.
[   83.603501][ T6506] netlink: 'syz.0.149': attribute type 298 has an invalid length.
[   83.612495][ T6507] netlink: 'syz.3.146': attribute type 3 has an invalid length.
[   83.711137][ T6516] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   85.182780][ T6574] xt_time: unknown flags 0x4
[   86.300510][ T6604] bond0: (slave team0): Releasing backup interface
[   86.338231][ T6604] team0 (unregistering): Port device team_slave_0 removed
[   86.365570][ T6604] team0 (unregistering): Port device team_slave_1 removed
[   86.620446][ T6625] netlink: 'syz.1.181': attribute type 4 has an invalid length.
[   86.809703][ T6636] netlink: 'syz.1.186': attribute type 9 has an invalid length.
[   87.336724][ T6666] bond_slave_0: entered promiscuous mode
[   87.342709][ T6666] bond_slave_1: entered promiscuous mode
[   87.367760][ T6669] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   87.391055][ T6666] vlan2: entered promiscuous mode
[   87.398973][ T6666] bond0: entered promiscuous mode
[   87.402946][   T25] IPVS: starting estimator thread 0...
[   87.507394][ T6673] IPVS: using max 23 ests per chain, 55200 per kthread
[   87.643142][ T6683] __nla_validate_parse: 8 callbacks suppressed
[   87.643161][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'.
[   87.700107][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'.
[   87.766634][ T6683] ip6gretap1: entered allmulticast mode
[   87.948752][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.203'.
[   87.996855][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   88.304853][ T6722] netlink: 'syz.4.206': attribute type 7 has an invalid length.
[   88.368741][ T6718] syzkaller0: entered promiscuous mode
[   88.391763][ T6718] syzkaller0: entered allmulticast mode
[   88.481933][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[   89.321834][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   91.035681][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'.
[   91.091895][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'.
[   91.332287][ T6814] netlink: 84 bytes leftover after parsing attributes in process `syz.0.230'.
[   91.577876][ T6826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   91.822984][ T6842] ieee802154 phy0 wpan0: encryption failed: -22
[   92.498207][ T6868] netlink: 'syz.4.246': attribute type 4 has an invalid length.
[   92.505930][ T6868] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.246'.
[   92.719720][ T6872] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   92.835233][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.954803][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.027187][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'.
[   93.079700][ T6882] tipc: Failed to obtain node identity
[   93.096350][ T6882] tipc: Enabling of bearer <ib:erspan0> rejected, failed to enable media
[   93.125100][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.176417][ T6905] dccp_invalid_packet: P.Data Offset(10) too large
[   93.400855][ T6927] netlink: 44 bytes leftover after parsing attributes in process `syz.4.263'.
[   93.429673][ T6930] batadv1: entered promiscuous mode
[   93.436834][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv1
[   93.455404][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'.
[   93.484935][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'.
[   93.513729][ T6929] Bluetooth: MGMT ver 1.23
[   93.543610][ T6933] syzkaller1: entered promiscuous mode
[   93.557077][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[   93.563539][ T6933] syzkaller1: entered allmulticast mode
[   93.731552][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[   93.903983][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'.
[   93.989949][ T6959] tap0: tun_chr_ioctl cmd 2184212994
[   94.099568][ T6963] Driver unsupported XDP return value 0 on prog  (id 169) dev N/A, expect packet loss!
[   94.242443][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'.
[   94.258550][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'.
[   94.643281][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'.
[   95.016336][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'.
[   95.074005][ T7040] netlink: 'syz.4.290': attribute type 1 has an invalid length.
[   95.096436][ T7031] erspan0: entered promiscuous mode
[   95.098480][ T7039] SET target dimension over the limit!
[   95.126721][ T7031] erspan0: left promiscuous mode
[   97.013818][ T7068] tap0: tun_chr_ioctl cmd 1074025677
[   97.026363][ T7068] tap0: linktype set to 805
[   97.094447][ T7074] bridge_slave_0: left allmulticast mode
[   97.129174][ T7074] bridge_slave_0: left promiscuous mode
[   97.150084][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.193911][ T7074] bridge_slave_1: left allmulticast mode
[   97.215845][ T7074] bridge_slave_1: left promiscuous mode
[   97.226704][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.252532][ T7074] bond0: (slave bond_slave_0): Releasing backup interface
[   97.271465][ T7074] bond0: (slave bond_slave_1): Releasing backup interface
[   97.310775][ T7074] team0: Port device team_slave_0 removed
[   97.335727][ T7074] team0: Port device team_slave_1 removed
[   97.349786][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.362132][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.374028][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.383057][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.405641][ T7074] team0: Port device netdevsim0 removed
[   97.701818][ T7103] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (16)
[   97.774956][ T7113] tipc: Can't bind to reserved service type 1
[   97.955338][ T7123] sctp: [Deprecated]: syz.4.315 (pid 7123) Use of int in max_burst socket option.
[   97.955338][ T7123] Use struct sctp_assoc_value instead
[   98.041411][ T7123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.160041][ T7131] __nla_validate_parse: 12 callbacks suppressed
[   98.160062][ T7131] netlink: 68 bytes leftover after parsing attributes in process `syz.4.317'.
[   98.204136][ T7134] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   98.243034][ T7134] batman_adv: batadv0: Adding interface: ip6gretap1
[   98.256310][ T7134] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.294635][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'.
[   98.311155][ T7134] batman_adv: batadv0: Interface activated: ip6gretap1
[   98.414053][ T7148] lo: entered allmulticast mode
[   98.555819][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.573094][ T7159] netlink: 'syz.1.323': attribute type 10 has an invalid length.
[   98.573246][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'.
[   98.611664][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'.
[   98.725967][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'.
[   99.125630][ T7183] netlink: 'syz.0.330': attribute type 10 has an invalid length.
[   99.183058][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.212688][ T7183] team0: Port device batadv0 added
[   99.451932][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[   99.594118][ T7167] lo speed is unknown, defaulting to 1000
[   99.612264][ T7167] lo speed is unknown, defaulting to 1000
[   99.633956][ T7167] lo speed is unknown, defaulting to 1000
[   99.661548][ T7167] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.694639][ T7167] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.802815][ T7167] lo speed is unknown, defaulting to 1000
[   99.819167][ T7167] lo speed is unknown, defaulting to 1000
[   99.841885][ T7167] lo speed is unknown, defaulting to 1000
[   99.850781][ T7167] lo speed is unknown, defaulting to 1000
[   99.870465][ T7167] lo speed is unknown, defaulting to 1000
[   99.929705][ T7167] lo speed is unknown, defaulting to 1000
[  100.134788][ T7204] ip6tnl0: entered promiscuous mode
[  100.166287][ T7204] ip6tnl0: entered allmulticast mode
[  100.479072][ T7220] xt_hashlimit: Unknown mode mask 40030000, kernel too old?
[  100.584456][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[  100.622168][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[  100.672898][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[  100.705408][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[  100.917164][ T7240] tipc: Started in network mode
[  100.923114][ T7240] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  100.932147][ T7240] tipc: Enabled bearer <eth:vlan0>, priority 18
[  101.331878][ T7253] tipc: Enabling of bearer <ib:team0> rejected, failed to enable media
[  101.376007][   T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  101.494323][ T7261] netlink: 'syz.1.350': attribute type 1 has an invalid length.
[  101.606195][ T7270] netlink: 'syz.4.351': attribute type 9 has an invalid length.
[  102.048797][ T5881] tipc: Node number set to 10005162
[  102.675243][ T7344] dvmrp1: entered allmulticast mode
[  103.846888][ T7400] __nla_validate_parse: 70 callbacks suppressed
[  103.846907][ T7400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.389'.
[  103.974329][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'.
[  104.294827][ T7425] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  104.416595][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.397'.
[  104.532190][ T7435] netlink: 'syz.3.397': attribute type 1 has an invalid length.
[  104.541023][ T7435] netlink: 224 bytes leftover after parsing attributes in process `syz.3.397'.
[  104.718292][ T7441] x_tables: duplicate underflow at hook 2
[  106.110695][ T7428] netlink: 'syz.3.397': attribute type 4 has an invalid length.
[  106.301500][ T7452] netlink: 104 bytes leftover after parsing attributes in process `syz.4.403'.
[  106.323603][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'.
[  106.336757][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'.
[  106.563222][ T7469] netlink: 21 bytes leftover after parsing attributes in process `syz.3.408'.
[  106.594428][ T7469] netlink: 21 bytes leftover after parsing attributes in process `syz.3.408'.
[  107.232275][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[  107.826723][ T7547] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.200159][ T6102] wlan1: Trigger new scan to find an IBSS to join
[  108.521260][ T7585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.943741][ T7608] __nla_validate_parse: 6 callbacks suppressed
[  108.943763][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'.
[  109.129929][ T7618] netlink: 165 bytes leftover after parsing attributes in process `syz.0.447'.
[  109.293012][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'.
[  109.393479][ T7616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.433019][ T7616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.450201][ T7616] bond0 (unregistering): Released all slaves
[  109.495841][ T7638] lo speed is unknown, defaulting to 1000
[  109.529313][ T7638] lo speed is unknown, defaulting to 1000
[  109.568329][ T7638] lo speed is unknown, defaulting to 1000
[  109.637993][ T7638] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  109.690114][ T7638] lo speed is unknown, defaulting to 1000
[  109.728933][ T7638] lo speed is unknown, defaulting to 1000
[  109.755732][ T7652] netlink: 'syz.3.453': attribute type 21 has an invalid length.
[  109.792564][ T7652] netlink: 'syz.3.453': attribute type 1 has an invalid length.
[  109.812426][ T7638] lo speed is unknown, defaulting to 1000
[  109.827382][ T7638] lo speed is unknown, defaulting to 1000
[  109.858197][ T7638] lo speed is unknown, defaulting to 1000
[  109.874883][ T7638] lo speed is unknown, defaulting to 1000
[  110.007501][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'.
[  110.052901][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'.
[  110.114960][ T7667] 
: renamed from bond0 (while UP)
[  110.182624][ T7664] veth0: entered promiscuous mode
[  110.216771][ T7664] veth0: left promiscuous mode
[  110.414435][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'.
[  110.827333][ T7702] netlink: 92 bytes leftover after parsing attributes in process `syz.0.467'.
[  111.146429][ T7724] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  112.169150][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'.
[  112.288758][ T7776] netlink: 96 bytes leftover after parsing attributes in process `syz.0.486'.
[  112.344834][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'.
[  112.389104][ T7778] ip6gretap2: entered allmulticast mode
[  112.423635][ T7778] GUP no longer grows the stack in syz.3.488 (7778): 20004000-20005000 (20002000)
[  112.435397][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.3.488 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  112.446037][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  112.456144][ T7778] Call Trace:
[  112.459458][ T7778]  <TASK>
[  112.462420][ T7778]  dump_stack_lvl+0x241/0x360
[  112.467168][ T7778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.472425][ T7778]  ? __pfx__printk+0x10/0x10
[  112.477059][ T7778]  ? find_vma+0xf9/0x170
[  112.481359][ T7778]  __get_user_pages+0x4385/0x49e0
[  112.486433][ T7778]  ? __pfx_lock_acquire+0x10/0x10
[  112.491505][ T7778]  ? mark_lock+0x9a/0x360
[  112.495883][ T7778]  ? __lock_acquire+0x1397/0x2100
[  112.500981][ T7778]  ? __pfx___get_user_pages+0x10/0x10
[  112.506385][ T7778]  ? __gup_longterm_locked+0xd2f/0x17f0
[  112.511934][ T7778]  ? __pfx_down_read_killable+0x10/0x10
[  112.517483][ T7778]  ? __pfx_lock_acquire+0x10/0x10
[  112.522540][ T7778]  ? try_get_folio+0xf1/0x6f0
[  112.527383][ T7778]  ? __pfx_lock_release+0x10/0x10
[  112.532453][ T7778]  __gup_longterm_locked+0xe64/0x17f0
[  112.537887][ T7778]  ? mark_lock+0x9a/0x360
[  112.542259][ T7778]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  112.548267][ T7778]  ? __pfx___gup_longterm_locked+0x10/0x10
[  112.554082][ T7778]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  112.560428][ T7778]  ? gup_fast_fallback+0x207e/0x29c0
[  112.565735][ T7778]  gup_fast_fallback+0x2266/0x29c0
[  112.570871][ T7778]  ? __pfx_gup_fast_fallback+0x10/0x10
[  112.576360][ T7778]  ? __mutex_trylock_common+0x183/0x2e0
[  112.581912][ T7778]  ? __pfx___might_resched+0x10/0x10
[  112.587204][ T7778]  ? is_valid_gup_args+0x124/0x200
[  112.592323][ T7778]  get_user_pages_fast+0xcc/0x160
[  112.597356][ T7778]  ? __pfx_get_user_pages_fast+0x10/0x10
[  112.602989][ T7778]  ? rcu_is_watching+0x15/0xb0
[  112.607766][ T7778]  ? trace_contention_end+0x3c/0x120
[  112.613060][ T7778]  ? __mutex_lock+0x37f/0xee0
[  112.617745][ T7778]  __iov_iter_get_pages_alloc+0x3b4/0x8e0
[  112.623479][ T7778]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.629822][ T7778]  iov_iter_get_pages2+0xcf/0x130
[  112.634856][ T7778]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  112.640519][ T7778]  __se_sys_vmsplice+0x740/0x1490
[  112.645558][ T7778]  ? plist_del+0x3f1/0x410
[  112.650022][ T7778]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  112.655506][ T7778]  ? __pfx_futex_wake+0x10/0x10
[  112.660413][ T7778]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  112.666415][ T7778]  ? do_syscall_64+0x100/0x230
[  112.671188][ T7778]  ? do_syscall_64+0xb6/0x230
[  112.675875][ T7778]  do_syscall_64+0xf3/0x230
[  112.680422][ T7778]  ? clear_bhb_loop+0x35/0x90
[  112.685129][ T7778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.691049][ T7778] RIP: 0033:0x7f495f785d29
[  112.695477][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.715181][ T7778] RSP: 002b:00007f495d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  112.723618][ T7778] RAX: ffffffffffffffda RBX: 00007f495f975fa0 RCX: 00007f495f785d29
[  112.731625][ T7778] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000008
[  112.739624][ T7778] RBP: 00007f495f801b08 R08: 0000000000000000 R09: 0000000000000000
[  112.747611][ T7778] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  112.755594][ T7778] R13: 0000000000000000 R14: 00007f495f975fa0 R15: 00007ffd79561af8
[  112.763603][ T7778]  </TASK>
[  112.936497][ T7795] netlink: 'syz.4.493': attribute type 8 has an invalid length.
[  113.085712][ T7806] bridge_slave_1: left allmulticast mode
[  113.094242][ T7806] bridge_slave_1: left promiscuous mode
[  113.102995][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.119370][ T7806] bridge_slave_0: left allmulticast mode
[  113.130618][ T7806] bridge_slave_0: left promiscuous mode
[  113.146730][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.156503][   T52] wlan1: Trigger new scan to find an IBSS to join
[  113.412750][ T7824] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  113.455598][ T7818] lo speed is unknown, defaulting to 1000
[  113.499546][ T7819] lo speed is unknown, defaulting to 1000
[  113.701736][ T7848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.871578][ T7852] bridge_slave_1: left allmulticast mode
[  113.894530][ T7852] bridge_slave_1: left promiscuous mode
[  113.905575][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.943800][ T7852] bridge_slave_0: left allmulticast mode
[  113.967479][ T7852] bridge_slave_0: left promiscuous mode
[  113.987892][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.071215][ T3549] wlan1: Creating new IBSS network, BSSID 6e:a9:22:78:b5:4b
[  114.109254][ T7868] __nla_validate_parse: 7 callbacks suppressed
[  114.109270][ T7868] netlink: 56 bytes leftover after parsing attributes in process `syz.1.510'.
[  114.264696][ T7856] netlink: 96 bytes leftover after parsing attributes in process `syz.4.506'.
[  114.538037][ T7875] netlink: 80 bytes leftover after parsing attributes in process `syz.3.513'.
[  114.557929][ T7876] ieee802154 phy1 wpan1: encryption failed: -22
[  114.616557][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'.
[  114.634878][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  114.731065][ T7877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.512'.
[  114.802698][ T7877] gtp0: entered promiscuous mode
[  114.822607][ T7877] gtp0: entered allmulticast mode
[  115.105962][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'.
[  115.249994][ T7904] sch_fq: defrate 511 ignored.
[  115.757613][ T7921] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  115.914633][ T7927] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  115.938027][ T5916] IPVS: starting estimator thread 0...
[  115.991418][ T7936] netlink: 'syz.4.530': attribute type 10 has an invalid length.
[  115.999556][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'.
[  116.010070][ T7936] veth0_vlan: entered allmulticast mode
[  116.021875][ T7936] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  116.047116][ T7933] IPVS: using max 28 ests per chain, 67200 per kthread
[  116.079696][ T7938] xt_addrtype: ipv6 does not support BROADCAST matching
[  116.153383][ T7943] netlink: 'syz.1.533': attribute type 1 has an invalid length.
[  116.181705][ T7943] netlink: 6 bytes leftover after parsing attributes in process `syz.1.533'.
[  116.385977][ T7958] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  116.406714][ T7629] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.560714][ T7967] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.542'.
[  116.591884][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.606270][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.617416][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.625299][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.806488][ T7984] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16)
[  116.814752][ T7984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.848432][ T7988] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003
[  117.236560][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  117.480276][ T8009] netlink: 'syz.0.552': attribute type 10 has an invalid length.
[  117.583905][ T8009] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  118.085848][ T8048] netlink: 'syz.3.561': attribute type 1 has an invalid length.
[  118.217802][ T8058] netlink: 'syz.4.562': attribute type 1 has an invalid length.
[  118.230607][ T8060] netlink: 'syz.0.560': attribute type 4 has an invalid length.
[  118.297231][ T8061] netlink: 'syz.0.560': attribute type 4 has an invalid length.
[  118.525751][ T8068] netlink: 'syz.4.565': attribute type 1 has an invalid length.
[  118.540387][ T8075] netlink: 'syz.4.565': attribute type 1 has an invalid length.
[  118.748268][ T8093] vlan0: entered promiscuous mode
[  118.756007][ T8093] vlan0: entered allmulticast mode
[  119.036923][ T8111] ax25_connect(): syz.2.578 uses autobind, please contact jreuter@yaina.de
[  119.092624][ T8113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.125728][ T8111] lo speed is unknown, defaulting to 1000
[  119.132216][ T8115] __nla_validate_parse: 17 callbacks suppressed
[  119.132234][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.579'.
[  119.159580][ T8113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.576'.
[  119.716467][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  119.735853][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.578'.
[  120.040064][ T8151] dvmrp1: left allmulticast mode
[  120.206341][   T11] wlan1: Trigger new scan to find an IBSS to join
[  120.488046][ T8171] netlink: 'syz.3.594': attribute type 1 has an invalid length.
[  120.699316][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  121.142968][ T8205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.601'.
[  121.212554][ T8211] netlink: 'syz.3.604': attribute type 1 has an invalid length.
[  121.264436][ T8211] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.315463][ T8216] bond1: (slave ip6gretap3): making interface the new active one
[  121.351032][ T8216] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  121.395247][ T8216] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  121.410897][ T8216] bond1: (slave ip6gretap3): Enslaving as an active interface with an up link
[  121.425458][ T8218] netlink: 'syz.2.606': attribute type 4 has an invalid length.
[  121.438919][ T6793] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  121.456504][ T7629] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  121.481749][ T8223] netlink: 'syz.2.606': attribute type 4 has an invalid length.
[  121.691064][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'.
[  121.819617][ T8239] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.613'.
[  121.856456][ T8239] openvswitch: netlink: Flow actions attr not present in new flow.
[  121.966401][ T5916] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  122.356921][ T6102] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  122.369101][ T6793] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  122.473058][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.623'.
[  122.505026][ T8281] smc: net device bond0 applied user defined pnetid SYZ2
[  122.651319][ T8289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.627'.
[  122.737026][ T8297] netlink: 'syz.3.626': attribute type 2 has an invalid length.
[  122.800328][ T8297] : entered promiscuous mode
[  122.989220][ T8306] FAULT_INJECTION: forcing a failure.
[  122.989220][ T8306] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  123.006911][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.4.632 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  123.017560][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  123.027828][ T8306] Call Trace:
[  123.031135][ T8306]  <TASK>
[  123.034090][ T8306]  dump_stack_lvl+0x241/0x360
[  123.039531][ T8306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.044761][ T8306]  ? __pfx__printk+0x10/0x10
[  123.049388][ T8306]  ? __pfx_lock_release+0x10/0x10
[  123.054465][ T8306]  should_fail_ex+0x3b0/0x4e0
[  123.059184][ T8306]  _copy_from_user+0x2f/0xc0
[  123.063790][ T8306]  __sys_bpf+0x1a4/0x810
[  123.068051][ T8306]  ? __pfx___sys_bpf+0x10/0x10
[  123.072825][ T8306]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  123.078810][ T8306]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  123.085236][ T8306]  ? do_syscall_64+0x100/0x230
[  123.090629][ T8306]  __x64_sys_bpf+0x7c/0x90
[  123.095063][ T8306]  do_syscall_64+0xf3/0x230
[  123.099571][ T8306]  ? clear_bhb_loop+0x35/0x90
[  123.104267][ T8306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.110158][ T8306] RIP: 0033:0x7f8434385d29
[  123.114697][ T8306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.134305][ T8306] RSP: 002b:00007f84351d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  123.142735][ T8306] RAX: ffffffffffffffda RBX: 00007f8434575fa0 RCX: 00007f8434385d29
[  123.150716][ T8306] RDX: 0000000000000094 RSI: 0000000020000380 RDI: 0000000000000005
[  123.158697][ T8306] RBP: 00007f84351d2090 R08: 0000000000000000 R09: 0000000000000000
[  123.166672][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.174644][ T8306] R13: 0000000000000000 R14: 00007f8434575fa0 R15: 00007fff26954328
[  123.182643][ T8306]  </TASK>
[  123.190682][ T6793] wlan1: Trigger new scan to find an IBSS to join
[  123.246377][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  123.445238][   T11] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  123.460481][   T11] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  123.473390][ T8319] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  123.495707][ T8322] nr0: entered promiscuous mode
[  123.639526][   T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  123.744825][ T8299] dccp_close: ABORT with 28 bytes unread
[  123.948667][ T8342] tipc: Started in network mode
[  123.954612][ T8342] tipc: Node identity ac14140f, cluster identity 4711
[  123.965560][ T8342] tipc: Enabled bearer <udp:syz2>, priority 10
[  123.975162][ T8340] netlink: 'syz.3.642': attribute type 2 has an invalid length.
[  123.989201][ T8340] f�����: entered promiscuous mode
[  124.105966][ T8348] FAULT_INJECTION: forcing a failure.
[  124.105966][ T8348] name failslab, interval 1, probability 0, space 0, times 1
[  124.119471][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.3.645 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  124.130100][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  124.140317][ T8348] Call Trace:
[  124.143602][ T8348]  <TASK>
[  124.146531][ T8348]  dump_stack_lvl+0x241/0x360
[  124.151216][ T8348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.156421][ T8348]  ? __pfx__printk+0x10/0x10
[  124.161022][ T8348]  ? __kmalloc_cache_node_noprof+0x47/0x3a0
[  124.166919][ T8348]  ? __pfx___might_resched+0x10/0x10
[  124.172206][ T8348]  should_fail_ex+0x3b0/0x4e0
[  124.176898][ T8348]  should_failslab+0xac/0x100
[  124.181585][ T8348]  ? __get_vm_area_node+0x132/0x2d0
[  124.186791][ T8348]  __kmalloc_cache_node_noprof+0x6f/0x3a0
[  124.192517][ T8348]  __get_vm_area_node+0x132/0x2d0
[  124.197566][ T8348]  __vmalloc_node_range_noprof+0x344/0x1380
[  124.203461][ T8348]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.209015][ T8348]  ? mark_lock+0x9a/0x360
[  124.213362][ T8348]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.219693][ T8348]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.225236][ T8348]  __vmalloc_noprof+0x79/0x90
[  124.229939][ T8348]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.235582][ T8348]  bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.240956][ T8348]  ? bpf_prog_alloc+0x28/0x1b0
[  124.245720][ T8348]  bpf_prog_alloc+0x3a/0x1b0
[  124.250312][ T8348]  bpf_prog_load+0x7f7/0x20f0
[  124.254999][ T8348]  ? __pfx_bpf_prog_load+0x10/0x10
[  124.260108][ T8348]  ? __pfx___might_resched+0x10/0x10
[  124.265405][ T8348]  ? __might_fault+0xc6/0x120
[  124.270083][ T8348]  __sys_bpf+0x4ee/0x810
[  124.274324][ T8348]  ? __pfx___sys_bpf+0x10/0x10
[  124.279099][ T8348]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  124.285084][ T8348]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  124.291501][ T8348]  ? do_syscall_64+0x100/0x230
[  124.296281][ T8348]  __x64_sys_bpf+0x7c/0x90
[  124.300700][ T8348]  do_syscall_64+0xf3/0x230
[  124.305205][ T8348]  ? clear_bhb_loop+0x35/0x90
[  124.309908][ T8348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.315801][ T8348] RIP: 0033:0x7f495f785d29
[  124.320216][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.339916][ T8348] RSP: 002b:00007f495d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.348333][ T8348] RAX: ffffffffffffffda RBX: 00007f495f975fa0 RCX: 00007f495f785d29
[  124.356303][ T8348] RDX: 0000000000000094 RSI: 0000000020000380 RDI: 0000000000000005
[  124.364276][ T8348] RBP: 00007f495d5f6090 R08: 0000000000000000 R09: 0000000000000000
[  124.372252][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.380227][ T8348] R13: 0000000000000000 R14: 00007f495f975fa0 R15: 00007ffd79561af8
[  124.388247][ T8348]  </TASK>
[  124.400966][ T5917] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  124.417589][ T8348] syz.3.645: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  124.457187][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.3.645 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  124.468095][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  124.478155][ T8348] Call Trace:
[  124.481436][ T8348]  <TASK>
[  124.484366][ T8348]  dump_stack_lvl+0x241/0x360
[  124.489056][ T8348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.494280][ T8348]  ? __pfx__printk+0x10/0x10
[  124.498876][ T8348]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  124.505314][ T8348]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  124.511822][ T8348]  warn_alloc+0x278/0x410
[  124.516168][ T8348]  ? __pfx_warn_alloc+0x10/0x10
[  124.521027][ T8348]  ? __kasan_kmalloc+0x23/0xb0
[  124.525790][ T8348]  ? __kmalloc_cache_node_noprof+0x25d/0x3a0
[  124.531865][ T8348]  ? __get_vm_area_node+0x280/0x2d0
[  124.537072][ T8348]  __vmalloc_node_range_noprof+0x369/0x1380
[  124.542966][ T8348]  ? mark_lock+0x9a/0x360
[  124.547329][ T8348]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.553750][ T8348]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.559298][ T8348]  __vmalloc_noprof+0x79/0x90
[  124.563978][ T8348]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.569537][ T8348]  bpf_prog_alloc_no_stats+0x4d/0x4d0
[  124.574911][ T8348]  ? bpf_prog_alloc+0x28/0x1b0
[  124.579768][ T8348]  bpf_prog_alloc+0x3a/0x1b0
[  124.584361][ T8348]  bpf_prog_load+0x7f7/0x20f0
[  124.589062][ T8348]  ? __pfx_bpf_prog_load+0x10/0x10
[  124.594188][ T8348]  ? __pfx___might_resched+0x10/0x10
[  124.599495][ T8348]  ? __might_fault+0xc6/0x120
[  124.604225][ T8348]  __sys_bpf+0x4ee/0x810
[  124.608498][ T8348]  ? __pfx___sys_bpf+0x10/0x10
[  124.613453][ T8348]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  124.619448][ T8348]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  124.625791][ T8348]  ? do_syscall_64+0x100/0x230
[  124.630565][ T8348]  __x64_sys_bpf+0x7c/0x90
[  124.634990][ T8348]  do_syscall_64+0xf3/0x230
[  124.639504][ T8348]  ? clear_bhb_loop+0x35/0x90
[  124.644186][ T8348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.650082][ T8348] RIP: 0033:0x7f495f785d29
[  124.654500][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.674116][ T8348] RSP: 002b:00007f495d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.682534][ T8348] RAX: ffffffffffffffda RBX: 00007f495f975fa0 RCX: 00007f495f785d29
[  124.690513][ T8348] RDX: 0000000000000094 RSI: 0000000020000380 RDI: 0000000000000005
[  124.698491][ T8348] RBP: 00007f495d5f6090 R08: 0000000000000000 R09: 0000000000000000
[  124.706470][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.714441][ T8348] R13: 0000000000000000 R14: 00007f495f975fa0 R15: 00007ffd79561af8
[  124.722434][ T8348]  </TASK>
[  124.731029][ T8348] Mem-Info:
[  124.734384][ T8348] active_anon:5841 inactive_anon:0 isolated_anon:0
[  124.734384][ T8348]  active_file:1489 inactive_file:38273 isolated_file:0
[  124.734384][ T8348]  unevictable:768 dirty:222 writeback:0
[  124.734384][ T8348]  slab_reclaimable:10323 slab_unreclaimable:103181
[  124.734384][ T8348]  mapped:28526 shmem:1446 pagetables:701
[  124.734384][ T8348]  sec_pagetables:0 bounce:0
[  124.734384][ T8348]  kernel_misc_reclaimable:0
[  124.734384][ T8348]  free:1339599 free_pcp:528 free_cma:0
[  124.784628][ T8348] Node 0 active_anon:23364kB inactive_anon:0kB active_file:5956kB inactive_file:153016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114104kB dirty:888kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:2804kB sec_pagetables:0kB all_unreclaimable? no
[  124.821057][ T8348] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  124.910302][ T8348] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.946001][ T8348] lowmem_reserve[]: 0 2465 2466 0 0
[  124.951977][ T8348] Node 0 DMA32 free:1431296kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:23128kB inactive_anon:0kB active_file:5956kB inactive_file:152176kB unevictable:1536kB writepending:888kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1568kB local_pcp:688kB free_cma:0kB
[  125.006423][ T1912] tipc: Node number set to 2886997007
[  125.018882][ T8348] lowmem_reserve[]: 0 0 0 0 0
[  125.023767][ T8348] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.088752][ T8348] lowmem_reserve[]: 0 0 0 0 0
[  125.093555][ T8348] Node 1 Normal free:3912972kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.125966][ T8348] lowmem_reserve[]: 0 0 0 0 0
[  125.132308][ T8348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  125.150849][ T8348] Node 0 DMA32: 1*4kB (E) 54*8kB (UM) 82*16kB (UM) 55*32kB (UM) 275*64kB (UME) 135*128kB (UME) 62*256kB (UME) 25*512kB (UM) 7*1024kB (UM) 8*2048kB (UME) 327*4096kB (UM) = 1430004kB
[  125.170842][ T8348] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  125.183755][ T8348] Node 1 Normal: 197*4kB (UE) 57*8kB (UME) 29*16kB (UME) 159*32kB (UME) 84*64kB (UME) 25*128kB (UME) 21*256kB (UME) 12*512kB (UME) 7*1024kB (UME) 6*2048kB (UE) 944*4096kB (M) = 3912972kB
[  125.203666][ T8348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  125.214340][ T8348] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.224619][ T8348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  125.236692][ T8369] __nla_validate_parse: 4 callbacks suppressed
[  125.236711][ T8369] netlink: 160 bytes leftover after parsing attributes in process `syz.0.651'.
[  125.238869][   T11] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  125.242891][ T8369] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  125.296037][ T8348] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.316308][ T8348] 41183 total pagecache pages
[  125.321136][ T8348] 0 pages in swap cache
[  125.349517][ T8348] Free swap  = 124996kB
[  125.353896][ T8348] Total swap = 124996kB
[  125.369692][ T8348] 2097051 pages RAM
[  125.373637][ T8348] 0 pages HighMem/MovableOnly
[  125.397132][ T8348] 427011 pages reserved
[  125.406266][ T8348] 0 pages cma reserved
[  125.409168][ T8376] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.595011][ T8390] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  125.904301][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.661'.
[  125.915909][ T8427] xt_addrtype: ipv6 does not support BROADCAST matching
[  125.923218][ T8436] xt_addrtype: ipv6 does not support BROADCAST matching
[  125.923485][ T8435] netlink: 96 bytes leftover after parsing attributes in process `syz.2.659'.
[  125.945016][ T8435] netlink: 96 bytes leftover after parsing attributes in process `syz.2.659'.
[  126.511282][ T8416] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  127.317862][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  127.647059][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  127.966996][ T8455] netlink: 'syz.0.667': attribute type 4 has an invalid length.
[  128.092407][ T8464] netlink: 'syz.2.670': attribute type 3 has an invalid length.
[  128.132177][ T8464] netlink: 666 bytes leftover after parsing attributes in process `syz.2.670'.
[  128.369961][ T8481] netlink: 48 bytes leftover after parsing attributes in process `syz.3.676'.
[  128.475712][ T8492] netlink: 'syz.3.679': attribute type 1 has an invalid length.
[  128.505346][ T8493] syzkaller1: entered promiscuous mode
[  128.511326][ T8493] syzkaller1: entered allmulticast mode
[  128.700973][ T8503] pim6reg: entered allmulticast mode
[  128.722132][ T8503] pim6reg: left allmulticast mode
[  128.776895][ T8506] netlink: 'syz.4.686': attribute type 9 has an invalid length.
[  128.778795][ T8476] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  128.811885][ T8506] netlink: 'syz.4.686': attribute type 7 has an invalid length.
[  128.843119][ T8506] netlink: 'syz.4.686': attribute type 8 has an invalid length.
[  128.868201][ T8508] netlink: 'syz.3.685': attribute type 4 has an invalid length.
[  129.056725][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'.
[  129.094096][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'.
[  129.275700][ T8532] netlink: 'syz.4.693': attribute type 64 has an invalid length.
[  129.312336][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.693'.
[  129.713787][ T8547] netlink: 148 bytes leftover after parsing attributes in process `syz.4.698'.
[  129.922632][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  130.099505][ T8555] batadv_slave_1: entered promiscuous mode
[  130.235363][ T8555] batadv_slave_1: left promiscuous mode
[  130.492058][ T5916] hid-generic 0005:0C45:0058.0001: item fetching failed at offset 0/1
[  130.531836][ T5916] hid-generic 0005:0C45:0058.0001: probe with driver hid-generic failed with error -22
[  130.572779][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'.
[  130.629795][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'.
[  130.839529][ T8579] bridge_slave_0: left allmulticast mode
[  130.845481][ T8579] bridge_slave_0: left promiscuous mode
[  130.851536][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.883729][ T8579] bridge_slave_1: left allmulticast mode
[  130.890100][ T8579] bridge_slave_1: left promiscuous mode
[  130.895986][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.921146][ T8579] 
: (slave bond_slave_0): Releasing backup interface
[  130.937954][ T8579] bond_slave_0: left promiscuous mode
[  130.964698][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'.
[  130.989869][ T8579] 
: (slave bond_slave_1): Releasing backup interface
[  131.024639][ T8579] bond_slave_1: left promiscuous mode
[  131.070003][ T8579] team0: Port device team_slave_0 removed
[  131.112003][   T63] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  131.121249][ T8579] team0: Port device team_slave_1 removed
[  131.129647][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.138069][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.147761][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.155476][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.466519][ T8600] netlink: 'syz.4.715': attribute type 1 has an invalid length.
[  131.474426][ T8600] netlink: 'syz.4.715': attribute type 4 has an invalid length.
[  131.482600][ T8600] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.715'.
[  131.523349][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.714'.
[  131.603236][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.718'.
[  131.663781][ T8609] netlink: 548 bytes leftover after parsing attributes in process `syz.0.719'.
[  131.857028][ T8628] netlink: 277 bytes leftover after parsing attributes in process `syz.2.720'.
[  132.093458][ T8634] xt_bpf: check failed: parse error
[  132.266884][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  132.354948][ T8647] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  132.523290][ T8652] tap0: tun_chr_ioctl cmd 2147767517
[  132.677291][ T8662] bridge0: port 1(ipvlan0) entered blocking state
[  132.683857][ T8662] bridge0: port 1(ipvlan0) entered disabled state
[  132.690765][ T8662] ipvlan0: entered allmulticast mode
[  132.696286][ T8662] bridge0: entered allmulticast mode
[  132.702994][ T8662] ipvlan0: left allmulticast mode
[  132.708725][ T8662] bridge0: left allmulticast mode
[  132.859322][ T8674] netlink: 244 bytes leftover after parsing attributes in process `syz.1.739'.
[  132.966703][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'.
[  133.172355][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  133.194854][ T8684] team0: Port device batadv0 removed
[  133.229909][ T8695] batadv_slave_1: entered promiscuous mode
[  133.307128][ T8694] batadv_slave_1: left promiscuous mode
[  133.417225][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  133.450345][ T8706] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.464184][ T8706] bond0: (slave bond1): Enslaving as an active interface with an up link
[  134.012047][ T8737] gretap1: entered promiscuous mode
[  134.547377][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  134.818494][ T8770] lo speed is unknown, defaulting to 1000
[  135.076331][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  135.413277][ T8799] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  135.621615][ T8806] __nla_validate_parse: 5 callbacks suppressed
[  135.621634][ T8806] netlink: 240 bytes leftover after parsing attributes in process `syz.4.778'.
[  135.659270][ T8804] bond0: entered promiscuous mode
[  135.698481][ T8476] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  135.711149][ T8804] bond_slave_0: entered promiscuous mode
[  135.743879][ T8804] bond_slave_1: entered promiscuous mode
[  136.199276][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  136.846715][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  137.956892][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  139.076906][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  140.206555][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  141.336725][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  142.477922][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  143.577157][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  144.072763][ T8412] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  144.706660][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  145.826595][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  146.947036][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  148.066733][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  149.197311][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  150.318845][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  150.436437][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  151.426711][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  152.547473][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  152.985835][ T8830] xt_l2tp: v2 tid > 0xffff: 150994944
[  153.149111][ T8822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.782'.
[  153.254708][ T8842] pim6reg: entered allmulticast mode
[  153.286334][ T8842] pim6reg: left allmulticast mode
[  153.372220][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'.
[  153.542862][ T8854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.793'.
[  153.562701][ T8854] xt_time: unknown flags 0x4
[  153.569710][ T8855] validate_nla: 2 callbacks suppressed
[  153.569731][ T8855] netlink: 'syz.2.792': attribute type 4 has an invalid length.
[  153.597986][ T8855] netlink: 17 bytes leftover after parsing attributes in process `syz.2.792'.
[  153.665692][ T8855] lo speed is unknown, defaulting to 1000
[  153.687551][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  154.102338][ T8869] dvmrp0: entered allmulticast mode
[  154.318313][ T8855] ipt_rpfilter: unknown options
[  154.502853][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'.
[  154.535959][ T8890] vlan3: entered allmulticast mode
[  154.541581][ T8887] netlink: 'syz.4.804': attribute type 2 has an invalid length.
[  154.675691][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'.
[  154.737742][ T8902] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  154.754695][ T8906] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  154.779496][ T8904] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  154.810754][ T8476] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  155.096021][ T8928] netlink: 'syz.4.818': attribute type 3 has an invalid length.
[  155.243383][ T8936] lo speed is unknown, defaulting to 1000
[  155.243488][ T8937] netlink: 56 bytes leftover after parsing attributes in process `syz.2.819'.
[  155.268743][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'.
[  155.288043][ T8938] bridge_slave_1: left allmulticast mode
[  155.301901][ T8938] bridge_slave_1: left promiscuous mode
[  155.315033][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.403297][ T8938] bridge_slave_0: left allmulticast mode
[  155.416870][ T8938] bridge_slave_0: left promiscuous mode
[  155.422680][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.561971][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'.
[  155.575507][ T8952] netlink: 'syz.3.824': attribute type 6 has an invalid length.
[  155.755295][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'.
[  155.933545][ T8924] netlink: 'syz.1.817': attribute type 10 has an invalid length.
[  155.945476][ T8924] syz_tun: entered promiscuous mode
[  155.951786][ T3517] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  155.989847][ T8924] 
: (slave syz_tun): Enslaving as an active interface with an up link
[  156.408375][ T8979] netdevsim netdevsim1: Direct firmware load for .
[  156.408375][ T8979]  failed with error -2
[  156.423348][ T8979] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  156.423348][ T8979] 
[  156.609312][ T8995] bridge2: the hash_elasticity option has been deprecated and is always 16
[  156.640152][ T9000] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[  156.950017][ T9018] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  156.962164][ T9015] xt_CT: No such helper "snmp"
[  157.088824][ T8412] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  157.310756][ T9033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.469458][ T9000] syz.0.837 (9000) used greatest stack depth: 17296 bytes left
[  157.548144][ T9043] lo speed is unknown, defaulting to 1000
[  157.596641][ T9044] nr0: left promiscuous mode
[  157.775584][ T9057] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  157.775594][ T9061] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  158.258850][ T9066] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  158.276986][ T9092] netlink: 'syz.0.865': attribute type 10 has an invalid length.
[  158.343928][ T9096] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  158.357082][ T9092] IPVS: stopping master sync thread 9096 ...
[  158.390839][ T9103] __nla_validate_parse: 13 callbacks suppressed
[  158.390858][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'.
[  158.454028][ T9094] can: request_module (can-proto-4) failed.
[  158.595164][ T9103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.698127][ T9122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.871'.
[  159.155844][ T9133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'.
[  159.201516][ T9133] netlink: 'syz.3.875': attribute type 10 has an invalid length.
[  159.237866][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  159.297637][ T9133] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  159.399984][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[  159.417597][ T2208] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  159.604301][ T9179] bridge0: port 1(ipvlan2) entered blocking state
[  159.618643][ T9179] bridge0: port 1(ipvlan2) entered disabled state
[  159.625587][ T9179] ipvlan2: entered allmulticast mode
[  159.633668][ T9179] bridge0: entered allmulticast mode
[  159.642838][ T9179] ipvlan2: left allmulticast mode
[  159.651594][ T9179] bridge0: left allmulticast mode
[  159.761531][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'.
[  160.049527][ T9206] xt_l2tp: v2 sid > 0xffff: 262144
[  160.060367][ T9208] xt_l2tp: v2 sid > 0xffff: 262144
[  160.097482][ T9216] xt_hashlimit: size too large, truncated to 1048576
[  160.105338][ T9215] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  160.113064][ T9215] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  160.236912][ T9218] netlink: 516 bytes leftover after parsing attributes in process `syz.2.888'.
[  160.586336][ T8407] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  160.793195][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.894'.
[  161.301016][ T9257] syzkaller1: entered promiscuous mode
[  161.342891][ T9257] syzkaller1: entered allmulticast mode
[  161.754964][ T9273] netlink: 5384 bytes leftover after parsing attributes in process `syz.3.902'.
[  161.905556][ T9277] netem: change failed
[  161.920585][ T9066] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  161.959227][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.904'.
[  162.507489][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'.
[  162.947881][ T9339] netlink: 'syz.2.919': attribute type 32 has an invalid length.
[  163.057795][ T8417] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  163.099684][ T9343] ipvlan1: entered promiscuous mode
[  163.105862][ T9343] ipvlan1: left promiscuous mode
[  163.112687][ T9337] can: request_module (can-proto-3) failed.
[  163.276564][ T9347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.445790][ T9357] __nla_validate_parse: 2 callbacks suppressed
[  163.445809][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.922'.
[  163.450830][ T9359] xt_TCPMSS: Only works on TCP SYN packets
[  163.488195][ T9349] ������: renamed from ip6gre0 (while UP)
[  163.527504][ T9346] tipc: Disabling bearer <eth:syzkaller0>
[  163.597768][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.922'.
[  163.646672][ T9363] nbd: device at index 64 is going down
[  163.851250][ T9370] netlink: 'syz.3.925': attribute type 10 has an invalid length.
[  164.221855][ T9066] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  165.348551][ T9066] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  166.049159][ T9366] lo speed is unknown, defaulting to 1000
[  166.128334][ T9374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.269772][ T9374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.368860][ T9374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.457751][ T8410] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  166.552125][ T9374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.566717][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[  166.582006][ T9399] lo speed is unknown, defaulting to 1000
[  166.819147][ T9374] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.861534][ T9426] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0
[  166.877913][ T9374] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.896044][ T9424] lo speed is unknown, defaulting to 1000
[  166.943260][ T9374] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.039956][ T9374] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.050954][ T9399] netlink: 'syz.4.931': attribute type 10 has an invalid length.
[  167.168843][ T9399] syz_tun: entered promiscuous mode
[  167.193799][ T9399] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  167.227375][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.313432][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'.
[  167.357302][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'.
[  167.517548][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'.
[  167.553378][ T9443] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  167.581547][ T9443] macsec1: entered promiscuous mode
[  167.598662][ T8407] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  167.635493][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'.
[  167.680774][ T9451] netlink: 'syz.4.944': attribute type 10 has an invalid length.
[  168.020002][ T9476] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[  168.241994][ T9485] syz.1.953: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  168.274235][ T9485] CPU: 0 UID: 0 PID: 9485 Comm: syz.1.953 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  168.284887][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  168.295011][ T9485] Call Trace:
[  168.298320][ T9485]  <TASK>
[  168.301274][ T9485]  dump_stack_lvl+0x241/0x360
[  168.306034][ T9485]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.311351][ T9485]  ? __pfx__printk+0x10/0x10
[  168.315958][ T9485]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  168.322385][ T9485]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  168.328913][ T9485]  warn_alloc+0x278/0x410
[  168.333276][ T9485]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  168.339361][ T9485]  ? __pfx_warn_alloc+0x10/0x10
[  168.344234][ T9485]  ? kasan_save_track+0x3f/0x80
[  168.349098][ T9485]  ? __kasan_kmalloc+0x98/0xb0
[  168.353900][ T9485]  ? xsk_setsockopt+0x4ea/0x950
[  168.358791][ T9485]  ? do_sock_setsockopt+0x3af/0x720
[  168.364032][ T9485]  ? __x64_sys_setsockopt+0x1ee/0x280
[  168.369439][ T9485]  ? do_syscall_64+0xf3/0x230
[  168.374178][ T9485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.380272][ T9485]  __vmalloc_node_range_noprof+0x126/0x1380
[  168.386234][ T9485]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  168.392590][ T9485]  ? __kasan_kmalloc+0x98/0xb0
[  168.397390][ T9485]  vmalloc_user_noprof+0x74/0x80
[  168.402371][ T9485]  ? xskq_create+0xb6/0x170
[  168.406926][ T9485]  xskq_create+0xb6/0x170
[  168.411388][ T9485]  xsk_init_queue+0xa1/0x100
[  168.416019][ T9485]  xsk_setsockopt+0x4ea/0x950
[  168.420720][ T9485]  ? __pfx_xsk_setsockopt+0x10/0x10
[  168.425960][ T9485]  ? __pfx_aa_sk_perm+0x10/0x10
[  168.430848][ T9485]  ? aa_sock_opt_perm+0x79/0x120
[  168.435824][ T9485]  ? __pfx_xsk_setsockopt+0x10/0x10
[  168.441097][ T9485]  do_sock_setsockopt+0x3af/0x720
[  168.446190][ T9485]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  168.451792][ T9485]  ? __fget_files+0x395/0x410
[  168.456530][ T9485]  ? __fget_files+0x2a/0x410
[  168.461186][ T9485]  __x64_sys_setsockopt+0x1ee/0x280
[  168.466501][ T9485]  do_syscall_64+0xf3/0x230
[  168.471033][ T9485]  ? clear_bhb_loop+0x35/0x90
[  168.475807][ T9485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.481723][ T9485] RIP: 0033:0x7fa3d5785d29
[  168.486183][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.505907][ T9485] RSP: 002b:00007fa3d64e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  168.514358][ T9485] RAX: ffffffffffffffda RBX: 00007fa3d5975fa0 RCX: 00007fa3d5785d29
[  168.522378][ T9485] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  168.530374][ T9485] RBP: 00007fa3d5801b08 R08: 0000000000000004 R09: 0000000000000000
[  168.538371][ T9485] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  168.546550][ T9485] R13: 0000000000000000 R14: 00007fa3d5975fa0 R15: 00007ffd6e47b428
[  168.554578][ T9485]  </TASK>
[  168.591550][ T9485] Mem-Info:
[  168.600351][ T9492] netlink: 'syz.1.953': attribute type 1 has an invalid length.
[  168.608599][ T9485] active_anon:5766 inactive_anon:0 isolated_anon:0
[  168.608599][ T9485]  active_file:1506 inactive_file:38293 isolated_file:0
[  168.608599][ T9485]  unevictable:768 dirty:211 writeback:0
[  168.608599][ T9485]  slab_reclaimable:10856 slab_unreclaimable:104486
[  168.608599][ T9485]  mapped:28546 shmem:1410 pagetables:690
[  168.608599][ T9485]  sec_pagetables:0 bounce:0
[  168.608599][ T9485]  kernel_misc_reclaimable:0
[  168.608599][ T9485]  free:1335979 free_pcp:452 free_cma:0
[  168.664938][ T9485] Node 0 active_anon:23064kB inactive_anon:0kB active_file:6024kB inactive_file:153096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114184kB dirty:844kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12056kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no
[  168.704716][ T9485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  168.738419][ T9485] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.768084][ T9485] lowmem_reserve[]: 0 2465 2466 0 0
[  168.773443][ T9485] Node 0 DMA32 free:1416072kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:23028kB inactive_anon:0kB active_file:6024kB inactive_file:152256kB unevictable:1536kB writepending:844kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:700kB local_pcp:244kB free_cma:0kB
[  168.819540][ T9485] lowmem_reserve[]: 0 0 0 0 0
[  168.825244][ T9485] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.859166][ T9485] lowmem_reserve[]: 0 0 0 0 0
[  168.864784][ T9485] Node 1 Normal free:3913172kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.899868][ T9485] lowmem_reserve[]: 0 0 0 0 0
[  168.904680][ T9485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  168.921791][ T9485] Node 0 DMA32: 503*4kB (UME) 401*8kB (UM) 129*16kB (UME) 459*32kB (UME) 1514*64kB (UME) 213*128kB (UME) 67*256kB (UM) 10*512kB (UM) 7*1024kB (ME) 3*2048kB (UM) 301*4096kB (UM) = 1414612kB
[  168.942074][ T9485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  168.956402][ T9485] Node 1 Normal: 199*4kB (UE) 57*8kB (UME) 29*16kB (UME) 165*32kB (UME) 84*64kB (UME) 25*128kB (UME) 21*256kB (UME) 12*512kB (UME) 7*1024kB (UME) 6*2048kB (UE) 944*4096kB (M) = 3913172kB
[  168.994209][ T9485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  169.004385][ T9485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.014357][ T9485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  169.025562][ T9485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.038623][ T9066] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  169.052178][ T9485] 41209 total pagecache pages
[  169.057511][ T9485] 0 pages in swap cache
[  169.062444][ T9485] Free swap  = 124996kB
[  169.068101][ T9485] Total swap = 124996kB
[  169.075047][ T9485] 2097051 pages RAM
[  169.080477][ T9485] 0 pages HighMem/MovableOnly
[  169.086046][ T9485] 427011 pages reserved
[  169.091665][ T9485] 0 pages cma reserved
[  169.213850][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.960'.
[  169.246022][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.960'.
[  169.386903][ T9517] netlink: 256 bytes leftover after parsing attributes in process `syz.2.962'.
[  169.468586][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'.
[  169.477264][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'.
[  169.563741][ T9524] vlan2: entered allmulticast mode
[  169.592303][ T9524] hsr0: entered allmulticast mode
[  169.610703][ T9524] hsr_slave_0: entered allmulticast mode
[  169.616998][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.967'.
[  169.656378][ T9524] hsr_slave_1: entered allmulticast mode
[  169.686699][ T9524] hsr0: left allmulticast mode
[  169.691535][ T9524] hsr_slave_0: left allmulticast mode
[  169.705558][ T9524] hsr_slave_1: left allmulticast mode
[  169.759704][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.967'.
[  169.761062][ T9522] vlan2: entered allmulticast mode
[  169.785013][ T9522] hsr0: entered allmulticast mode
[  169.801141][ T9522] hsr_slave_0: entered allmulticast mode
[  169.816305][ T9522] hsr_slave_1: entered allmulticast mode
[  169.832049][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'.
[  169.849255][ T9522] hsr0: left allmulticast mode
[  169.857902][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'.
[  169.876817][ T9522] hsr_slave_0: left allmulticast mode
[  169.883082][ T9522] hsr_slave_1: left allmulticast mode
[  169.891780][ T9542] netlink: 'syz.2.969': attribute type 14 has an invalid length.
[  169.927619][ T9542] netlink: 'syz.2.969': attribute type 11 has an invalid length.
[  170.003665][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'.
[  170.179776][ T8407] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  170.221224][ T9563] netlink: 'syz.2.972': attribute type 5 has an invalid length.
[  170.492446][ T9576] batadv0: entered promiscuous mode
[  170.513824][ T9576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.998656][ T9608] nbd: device at index 3 is going down
[  171.035377][ T9614] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb
[  171.058925][ T9604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.205569][ T9604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.289818][ T9604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.306505][ T9065] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  171.375773][ T9604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.500648][ T9604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.540173][ T9604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.587488][ T9604] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.632421][ T9604] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.038904][ T9656] Unsupported ieee802154 address type: 0
[  172.077698][ T9657] sctp: [Deprecated]: syz.0.1001 (pid 9657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.077698][ T9657] Use struct sctp_sack_info instead
[  172.137731][ T9654] sctp: [Deprecated]: syz.0.1001 (pid 9654) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.137731][ T9654] Use struct sctp_sack_info instead
[  172.458890][ T9066] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  172.724593][ T9684] unsupported nlmsg_type 40
[  173.037206][ T9706] netlink: 'syz.4.1013': attribute type 12 has an invalid length.
[  173.261870][ T9713] 
[  173.264284][ T9713] ======================================================
[  173.271343][ T9713] WARNING: possible circular locking dependency detected
[  173.278373][ T9713] 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0 Not tainted
[  173.285561][ T9713] ------------------------------------------------------
[  173.292573][ T9713] syz.1.1016/9713 is trying to acquire lock:
[  173.298547][ T9713] ffff888011af4078 (&hdev->lock){+.+.}-{4:4}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550
[  173.308822][ T9713] 
[  173.308822][ T9713] but task is already holding lock:
[  173.316179][ T9713] ffff888011af4690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_dequeue+0x44/0x3d0
[  173.326719][ T9713] 
[  173.326719][ T9713] which lock already depends on the new lock.
[  173.326719][ T9713] 
[  173.337119][ T9713] 
[  173.337119][ T9713] the existing dependency chain (in reverse order) is:
[  173.346121][ T9713] 
[  173.346121][ T9713] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}:
[  173.354659][ T9713]        lock_acquire+0x1ed/0x550
[  173.359703][ T9713]        __mutex_lock+0x1ac/0xee0
[  173.364726][ T9713]        hci_cmd_sync_queue_once+0x43/0x240
[  173.370629][ T9713]        le_conn_complete_evt+0xae1/0x12e0
[  173.376524][ T9713]        hci_le_conn_complete_evt+0x18c/0x420
[  173.382596][ T9713]        hci_event_packet+0xa55/0x1540
[  173.388051][ T9713]        hci_rx_work+0x3f3/0xdb0
[  173.392984][ T9713]        process_scheduled_works+0xa66/0x1840
[  173.399043][ T9713]        worker_thread+0x870/0xd30
[  173.404144][ T9713]        kthread+0x2f0/0x390
[  173.408727][ T9713]        ret_from_fork+0x4b/0x80
[  173.413656][ T9713]        ret_from_fork_asm+0x1a/0x30
[  173.418937][ T9713] 
[  173.418937][ T9713] -> #0 (&hdev->lock){+.+.}-{4:4}:
[  173.426234][ T9713]        validate_chain+0x18ef/0x5920
[  173.431624][ T9713]        __lock_acquire+0x1397/0x2100
[  173.436991][ T9713]        lock_acquire+0x1ed/0x550
[  173.442008][ T9713]        __mutex_lock+0x1ac/0xee0
[  173.447031][ T9713]        mgmt_remove_adv_monitor_complete+0xaf/0x550
[  173.453703][ T9713]        hci_cmd_sync_dequeue+0x22b/0x3d0
[  173.459420][ T9713]        cmd_complete_rsp+0x4c/0x180
[  173.464706][ T9713]        mgmt_pending_foreach+0xd1/0x130
[  173.470340][ T9713]        mgmt_index_removed+0x133/0x390
[  173.475887][ T9713]        hci_sock_bind+0xcce/0x1150
[  173.481110][ T9713]        __sys_bind+0x1e4/0x290
[  173.485952][ T9713]        __x64_sys_bind+0x7a/0x90
[  173.491002][ T9713]        do_syscall_64+0xf3/0x230
[  173.496026][ T9713]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.502524][ T9713] 
[  173.502524][ T9713] other info that might help us debug this:
[  173.502524][ T9713] 
[  173.512928][ T9713]  Possible unsafe locking scenario:
[  173.512928][ T9713] 
[  173.520380][ T9713]        CPU0                    CPU1
[  173.525747][ T9713]        ----                    ----
[  173.531098][ T9713]   lock(&hdev->cmd_sync_work_lock);
[  173.536390][ T9713]                                lock(&hdev->lock);
[  173.542981][ T9713]                                lock(&hdev->cmd_sync_work_lock);
[  173.550803][ T9713]   lock(&hdev->lock);
[  173.554866][ T9713] 
[  173.554866][ T9713]  *** DEADLOCK ***
[  173.554866][ T9713] 
[  173.563002][ T9713] 2 locks held by syz.1.1016/9713:
[  173.568106][ T9713]  #0: ffff8880574e0258 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_bind+0x149/0x1150
[  173.579162][ T9713]  #1: ffff888011af4690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_dequeue+0x44/0x3d0
[  173.590046][ T9713] 
[  173.590046][ T9713] stack backtrace:
[  173.595928][ T9713] CPU: 0 UID: 0 PID: 9713 Comm: syz.1.1016 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  173.606622][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  173.616677][ T9713] Call Trace:
[  173.619960][ T9713]  <TASK>
[  173.622896][ T9713]  dump_stack_lvl+0x241/0x360
[  173.627582][ T9713]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.632779][ T9713]  ? __pfx__printk+0x10/0x10
[  173.637369][ T9713]  print_circular_bug+0x13a/0x1b0
[  173.642424][ T9713]  check_noncircular+0x36a/0x4a0
[  173.647364][ T9713]  ? __pfx_check_noncircular+0x10/0x10
[  173.652821][ T9713]  ? lockdep_lock+0x123/0x2b0
[  173.657492][ T9713]  ? __pfx_stack_trace_save+0x10/0x10
[  173.662853][ T9713]  ? check_noncircular+0x259/0x4a0
[  173.667975][ T9713]  validate_chain+0x18ef/0x5920
[  173.672837][ T9713]  ? validate_chain+0x15c0/0x5920
[  173.677860][ T9713]  ? __pfx_validate_chain+0x10/0x10
[  173.683065][ T9713]  ? __pfx_validate_chain+0x10/0x10
[  173.688261][ T9713]  ? __lock_acquire+0x1397/0x2100
[  173.693282][ T9713]  ? mark_lock+0x9a/0x360
[  173.697608][ T9713]  __lock_acquire+0x1397/0x2100
[  173.702470][ T9713]  lock_acquire+0x1ed/0x550
[  173.706967][ T9713]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  173.713297][ T9713]  ? __pfx_lock_acquire+0x10/0x10
[  173.718324][ T9713]  ? __pfx___might_resched+0x10/0x10
[  173.723610][ T9713]  __mutex_lock+0x1ac/0xee0
[  173.728112][ T9713]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  173.734442][ T9713]  ? __pfx___might_resched+0x10/0x10
[  173.739723][ T9713]  ? __pfx___mutex_trylock_common+0x10/0x10
[  173.745617][ T9713]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  173.751947][ T9713]  ? __pfx___mutex_lock+0x10/0x10
[  173.756991][ T9713]  ? trace_contention_end+0x3c/0x120
[  173.762301][ T9713]  ? __mutex_lock+0x37f/0xee0
[  173.766982][ T9713]  ? __pfx_register_lock_class+0x10/0x10
[  173.772629][ T9713]  ? __pfx_register_lock_class+0x10/0x10
[  173.778272][ T9713]  ? hci_cmd_sync_dequeue+0x44/0x3d0
[  173.783567][ T9713]  mgmt_remove_adv_monitor_complete+0xaf/0x550
[  173.789729][ T9713]  ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10
[  173.796498][ T9713]  ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10
[  173.803274][ T9713]  hci_cmd_sync_dequeue+0x22b/0x3d0
[  173.808473][ T9713]  cmd_complete_rsp+0x4c/0x180
[  173.813238][ T9713]  mgmt_pending_foreach+0xd1/0x130
[  173.818351][ T9713]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  173.823738][ T9713]  mgmt_index_removed+0x133/0x390
[  173.828852][ T9713]  ? __pfx_mgmt_index_removed+0x10/0x10
[  173.834413][ T9713]  ? apparmor_capable+0x13b/0x1b0
[  173.839446][ T9713]  ? _raw_read_unlock+0x28/0x50
[  173.844333][ T9713]  hci_sock_bind+0xcce/0x1150
[  173.849014][ T9713]  ? __pfx_hci_sock_bind+0x10/0x10
[  173.854126][ T9713]  __sys_bind+0x1e4/0x290
[  173.858450][ T9713]  ? __pfx___sys_bind+0x10/0x10
[  173.863296][ T9713]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  173.869621][ T9713]  ? do_syscall_64+0x100/0x230
[  173.874389][ T9713]  __x64_sys_bind+0x7a/0x90
[  173.878897][ T9713]  do_syscall_64+0xf3/0x230
[  173.883400][ T9713]  ? clear_bhb_loop+0x35/0x90
[  173.888080][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.894073][ T9713] RIP: 0033:0x7fa3d5785d29
[  173.898482][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.918177][ T9713] RSP: 002b:00007fa3d64e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  173.926776][ T9713] RAX: ffffffffffffffda RBX: 00007fa3d5975fa0 RCX: 00007fa3d5785d29
[  173.934764][ T9713] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000005
[  173.942759][ T9713] RBP: 00007fa3d5801b08 R08: 0000000000000000 R09: 0000000000000000
[  173.950738][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.958796][ T9713] R13: 0000000000000000 R14: 00007fa3d5975fa0 R15: 00007ffd6e47b428
[  173.966811][ T9713]  </TASK>
[  173.995644][ T9713] ==================================================================
[  174.003845][ T9713] BUG: KASAN: slab-use-after-free in cmd_complete_rsp+0x67/0x180
[  174.004480][ T9722] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1500775750/1500775752
[  174.011582][ T9713] Read of size 8 at addr ffff888029f22ec0 by task syz.1.1016/9713
[  174.011601][ T9713] 
[  174.011609][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.1.1016 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  174.028789][ T9722] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1500775750/1500775752
[  174.030895][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  174.060785][ T9713] Call Trace:
[  174.064055][ T9713]  <TASK>
[  174.066977][ T9713]  dump_stack_lvl+0x241/0x360
[  174.071689][ T9713]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.076993][ T9713]  ? __pfx__printk+0x10/0x10
[  174.081690][ T9713]  ? _printk+0xd5/0x120
[  174.085859][ T9713]  ? __virt_addr_valid+0x183/0x530
[  174.091158][ T9713]  ? __virt_addr_valid+0x183/0x530
[  174.096287][ T9713]  print_report+0x169/0x550
[  174.100911][ T9713]  ? __virt_addr_valid+0x183/0x530
[  174.106035][ T9713]  ? __virt_addr_valid+0x183/0x530
[  174.111142][ T9713]  ? __virt_addr_valid+0x45f/0x530
[  174.116247][ T9713]  ? __phys_addr+0xba/0x170
[  174.120753][ T9713]  ? cmd_complete_rsp+0x67/0x180
[  174.125775][ T9713]  kasan_report+0x143/0x180
[  174.130288][ T9713]  ? cmd_complete_rsp+0x67/0x180
[  174.135397][ T9713]  cmd_complete_rsp+0x67/0x180
[  174.140170][ T9713]  mgmt_pending_foreach+0xd1/0x130
[  174.145292][ T9713]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  174.150711][ T9713]  mgmt_index_removed+0x133/0x390
[  174.155755][ T9713]  ? __pfx_mgmt_index_removed+0x10/0x10
[  174.161300][ T9713]  ? apparmor_capable+0x13b/0x1b0
[  174.166321][ T9713]  ? _raw_read_unlock+0x28/0x50
[  174.171264][ T9713]  hci_sock_bind+0xcce/0x1150
[  174.175951][ T9713]  ? __pfx_hci_sock_bind+0x10/0x10
[  174.181065][ T9713]  __sys_bind+0x1e4/0x290
[  174.185391][ T9713]  ? __pfx___sys_bind+0x10/0x10
[  174.190244][ T9713]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  174.196570][ T9713]  ? do_syscall_64+0x100/0x230
[  174.201593][ T9713]  __x64_sys_bind+0x7a/0x90
[  174.206186][ T9713]  do_syscall_64+0xf3/0x230
[  174.210684][ T9713]  ? clear_bhb_loop+0x35/0x90
[  174.215360][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.221251][ T9713] RIP: 0033:0x7fa3d5785d29
[  174.225669][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.245360][ T9713] RSP: 002b:00007fa3d64e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  174.253772][ T9713] RAX: ffffffffffffffda RBX: 00007fa3d5975fa0 RCX: 00007fa3d5785d29
[  174.261738][ T9713] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000005
[  174.269700][ T9713] RBP: 00007fa3d5801b08 R08: 0000000000000000 R09: 0000000000000000
[  174.277751][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.285727][ T9713] R13: 0000000000000000 R14: 00007fa3d5975fa0 R15: 00007ffd6e47b428
[  174.293702][ T9713]  </TASK>
[  174.296717][ T9713] 
[  174.299040][ T9713] Allocated by task 9714:
[  174.303357][ T9713]  kasan_save_track+0x3f/0x80
[  174.308031][ T9713]  __kasan_kmalloc+0x98/0xb0
[  174.312884][ T9713]  __kmalloc_cache_noprof+0x243/0x390
[  174.318248][ T9713]  mgmt_pending_new+0x65/0x250
[  174.323004][ T9713]  mgmt_pending_add+0x36/0x120
[  174.327775][ T9713]  remove_adv_monitor+0x102/0x1b0
[  174.332794][ T9713]  hci_mgmt_cmd+0xc47/0x11d0
[  174.337385][ T9713]  hci_sock_sendmsg+0x7b8/0x11c0
[  174.342320][ T9713]  __sock_sendmsg+0x221/0x270
[  174.346999][ T9713]  sock_write_iter+0x2d7/0x3f0
[  174.351759][ T9713]  vfs_write+0xaeb/0xd30
[  174.355996][ T9713]  ksys_write+0x18f/0x2b0
[  174.360314][ T9713]  do_syscall_64+0xf3/0x230
[  174.364824][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.370714][ T9713] 
[  174.373026][ T9713] Freed by task 9713:
[  174.376999][ T9713]  kasan_save_track+0x3f/0x80
[  174.381687][ T9713]  kasan_save_free_info+0x40/0x50
[  174.386723][ T9713]  __kasan_slab_free+0x59/0x70
[  174.391510][ T9713]  kfree+0x196/0x430
[  174.395402][ T9713]  mgmt_remove_adv_monitor_complete+0x2bf/0x550
[  174.401641][ T9713]  hci_cmd_sync_dequeue+0x22b/0x3d0
[  174.406842][ T9713]  cmd_complete_rsp+0x4c/0x180
[  174.411620][ T9713]  mgmt_pending_foreach+0xd1/0x130
[  174.416730][ T9713]  mgmt_index_removed+0x133/0x390
[  174.421749][ T9713]  hci_sock_bind+0xcce/0x1150
[  174.426421][ T9713]  __sys_bind+0x1e4/0x290
[  174.430741][ T9713]  __x64_sys_bind+0x7a/0x90
[  174.435232][ T9713]  do_syscall_64+0xf3/0x230
[  174.439733][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.445624][ T9713] 
[  174.447940][ T9713] The buggy address belongs to the object at ffff888029f22e80
[  174.447940][ T9713]  which belongs to the cache kmalloc-96 of size 96
[  174.461812][ T9713] The buggy address is located 64 bytes inside of
[  174.461812][ T9713]  freed 96-byte region [ffff888029f22e80, ffff888029f22ee0)
[  174.475432][ T9713] 
[  174.477752][ T9713] The buggy address belongs to the physical page:
[  174.484159][ T9713] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29f22
[  174.492915][ T9713] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  174.500367][ T9713] page_type: f5(slab)
[  174.504346][ T9713] raw: 00fff00000000000 ffff88801ac41280 ffffea0001fda840 dead000000000003
[  174.512921][ T9713] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000
[  174.521497][ T9713] page dumped because: kasan: bad access detected
[  174.527902][ T9713] page_owner tracks the page as allocated
[  174.533609][ T9713] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5937, tgid 5936 (syz.3.9), ts 67730204636, free_ts 67655301509
[  174.552445][ T9713]  post_alloc_hook+0x1f3/0x230
[  174.557212][ T9713]  get_page_from_freelist+0x365c/0x37a0
[  174.563026][ T9713]  __alloc_pages_noprof+0x292/0x710
[  174.568218][ T9713]  alloc_pages_mpol_noprof+0x3e8/0x680
[  174.573668][ T9713]  alloc_slab_page+0x6a/0x110
[  174.578340][ T9713]  allocate_slab+0x5a/0x2b0
[  174.582832][ T9713]  ___slab_alloc+0xc27/0x14a0
[  174.587512][ T9713]  __slab_alloc+0x58/0xa0
[  174.591842][ T9713]  __kmalloc_noprof+0x2e6/0x4c0
[  174.596696][ T9713]  hash_ipmark4_add+0x1137/0x2320
[  174.601715][ T9713]  hash_ipmark4_uadt+0x7b5/0xb50
[  174.606668][ T9713]  call_ad+0x279/0xa70
[  174.610733][ T9713]  ip_set_ad+0x7e0/0x990
[  174.615054][ T9713]  nfnetlink_rcv_msg+0xbec/0x1180
[  174.620073][ T9713]  netlink_rcv_skb+0x1e3/0x430
[  174.624838][ T9713]  nfnetlink_rcv+0x297/0x2ab0
[  174.629515][ T9713] page last free pid 5986 tgid 5983 stack trace:
[  174.635828][ T9713]  free_unref_folios+0xe39/0x18b0
[  174.640860][ T9713]  folios_put_refs+0x76c/0x860
[  174.645629][ T9713]  free_pages_and_swap_cache+0x5c8/0x690
[  174.651449][ T9713]  tlb_flush_mmu+0x3a3/0x680
[  174.656037][ T9713]  tlb_finish_mmu+0xd4/0x200
[  174.660618][ T9713]  exit_mmap+0x496/0xc20
[  174.664853][ T9713]  __mmput+0x115/0x3c0
[  174.668922][ T9713]  exit_mm+0x220/0x310
[  174.672985][ T9713]  do_exit+0x9ad/0x28e0
[  174.677133][ T9713]  do_group_exit+0x207/0x2c0
[  174.681718][ T9713]  get_signal+0x16b2/0x1750
[  174.686219][ T9713]  arch_do_signal_or_restart+0x96/0x860
[  174.691773][ T9713]  syscall_exit_to_user_mode+0xce/0x340
[  174.697315][ T9713]  do_syscall_64+0x100/0x230
[  174.701903][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.707798][ T9713] 
[  174.710112][ T9713] Memory state around the buggy address:
[  174.715730][ T9713]  ffff888029f22d80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  174.723786][ T9713]  ffff888029f22e00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  174.731843][ T9713] >ffff888029f22e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  174.739912][ T9713]                                            ^
[  174.746067][ T9713]  ffff888029f22f00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  174.754212][ T9713]  ffff888029f22f80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  174.762269][ T9713] ==================================================================
[  174.778281][ T9713] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  174.785519][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.1.1016 Not tainted 6.13.0-rc5-syzkaller-00772-g3e5908172c05 #0
[  174.796345][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  174.806510][ T9713] Call Trace:
[  174.809803][ T9713]  <TASK>
[  174.812826][ T9713]  dump_stack_lvl+0x241/0x360
[  174.817603][ T9713]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.822919][ T9713]  ? __pfx__printk+0x10/0x10
[  174.827607][ T9713]  ? rcu_is_watching+0x15/0xb0
[  174.832380][ T9713]  ? vscnprintf+0x5d/0x90
[  174.836744][ T9713]  panic+0x349/0x880
[  174.840669][ T9713]  ? check_panic_on_warn+0x21/0xb0
[  174.845819][ T9713]  ? __pfx_panic+0x10/0x10
[  174.850278][ T9713]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  174.856291][ T9713]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.862628][ T9713]  check_panic_on_warn+0x86/0xb0
[  174.867566][ T9713]  ? cmd_complete_rsp+0x67/0x180
[  174.872614][ T9713]  end_report+0x77/0x160
[  174.876883][ T9713]  kasan_report+0x154/0x180
[  174.881424][ T9713]  ? cmd_complete_rsp+0x67/0x180
[  174.886370][ T9713]  cmd_complete_rsp+0x67/0x180
[  174.891159][ T9713]  mgmt_pending_foreach+0xd1/0x130
[  174.896277][ T9713]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  174.901652][ T9713]  mgmt_index_removed+0x133/0x390
[  174.906680][ T9713]  ? __pfx_mgmt_index_removed+0x10/0x10
[  174.912226][ T9713]  ? apparmor_capable+0x13b/0x1b0
[  174.917247][ T9713]  ? _raw_read_unlock+0x28/0x50
[  174.922089][ T9713]  hci_sock_bind+0xcce/0x1150
[  174.926782][ T9713]  ? __pfx_hci_sock_bind+0x10/0x10
[  174.932090][ T9713]  __sys_bind+0x1e4/0x290
[  174.936446][ T9713]  ? __pfx___sys_bind+0x10/0x10
[  174.941294][ T9713]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  174.947619][ T9713]  ? do_syscall_64+0x100/0x230
[  174.952376][ T9713]  __x64_sys_bind+0x7a/0x90
[  174.956871][ T9713]  do_syscall_64+0xf3/0x230
[  174.961455][ T9713]  ? clear_bhb_loop+0x35/0x90
[  174.966127][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.972014][ T9713] RIP: 0033:0x7fa3d5785d29
[  174.976427][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.996117][ T9713] RSP: 002b:00007fa3d64e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  175.004536][ T9713] RAX: ffffffffffffffda RBX: 00007fa3d5975fa0 RCX: 00007fa3d5785d29
[  175.012506][ T9713] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000005
[  175.020469][ T9713] RBP: 00007fa3d5801b08 R08: 0000000000000000 R09: 0000000000000000
[  175.028431][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.036394][ T9713] R13: 0000000000000000 R14: 00007fa3d5975fa0 R15: 00007ffd6e47b428
[  175.044364][ T9713]  </TASK>
[  175.047508][ T9713] Kernel Offset: disabled
[  175.051822][ T9713] Rebooting in 86400 seconds..