last executing test programs:

6.396438861s ago: executing program 1 (id=5223):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0xf, [0x69d1, 0x4, 0x1, 0x0, 0x5e7, 0x1000, 0xfffffffc, 0x5, 0x8, 0x1, 0x7, 0xb145, 0x6, 0x5d9b, 0x1, 0x6, 0x1, 0x4, 0x2, 0x0, 0xb, 0x7fffffff, 0xffffffff, 0x95b, 0x3, 0x8001, 0x7, 0xe, 0xffffffff, 0x4, 0x7f, 0x1, 0x80, 0x0, 0x7, 0x12, 0x1, 0x8, 0x0, 0xab, 0x7, 0x8, 0x43, 0x5, 0x3, 0x0, 0x0, 0x5, 0x6, 0x5, 0x5, 0x9, 0x4, 0x6, 0x4, 0x80000000, 0x9, 0xf0000000, 0x9, 0x8000, 0x100, 0x0, 0x5, 0xc, 0x4e, 0x6, 0x8, 0x5, 0x1, 0x5, 0x9, 0x6, 0x9, 0x7, 0x3, 0x2e9, 0x7, 0x1, 0x6, 0x4, 0x8000, 0x2, 0x6, 0x27d1, 0x80, 0x7f, 0x8001, 0x0, 0x0, 0x8, 0xffffffff, 0x8, 0x100, 0x400, 0x7, 0x101, 0x9, 0x3, 0x10000, 0x9, 0xff, 0x5, 0xe19d, 0x8ae, 0x4, 0xfffff000, 0x0, 0x7, 0xe, 0x5dc8, 0x7, 0xff, 0x5, 0x1, 0x67de, 0x8001, 0x80, 0x100, 0x8000003, 0xfffffffd, 0x7, 0x6, 0x6, 0x81, 0x0, 0x8d, 0x1, 0xffffff84]}})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

3.926067795s ago: executing program 1 (id=5228):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x40000000000012b, 0x40010143, 0x0)
clock_gettime(0x8, &(0x7f0000000280))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0xe, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

3.30830948s ago: executing program 0 (id=5234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], <r3=>0x0, 0x36, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=0x4)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x240440c0}, 0x40) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x240440c0}, 0x40)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "eb789b3bb90c14b18435a6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "eb789b3bb90c14b18435a6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
pipe(&(0x7f0000000700)) (async)
pipe(&(0x7f0000000700)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000740)={0x4})
ioctl$SIOCAX25ADDFWD(r7, 0x89ea, &(0x7f0000000780)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000007c0)={<r8=>0x0}, &(0x7f0000000800)=0xc)
syz_open_procfs$namespace(r8, &(0x7f0000000840)='ns/ipc\x00')
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004055}, 0x8840)
syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r6)
sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000091}, 0x40000) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000091}, 0x40000)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000b40))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r10)
ioctl$PPPIOCDISCONN(r6, 0x7439)
sendmsg$sock(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="0e3ce63566f84bd74309f1fbf974d4", 0xf}, {&(0x7f0000000c00)="5285c3297865b4eef8451dd99fc250241cbd91359a6695df5d470d8bac9a0b556a587a200edb6ecddeece7f69dc679bcf378b46f4ad84fe308c153fb0362ae836c0732ed62fdb455f37d576fe7d0ecb55cc0279c890b4d82b2d6e2c221716b8b10fc03a95bdda8ceefd91a6794ab4951d195693deec8fb83af7f9ebddd9f4e721c0e3ef243d079fc5bb34052a580f8e76bd1a409", 0x94}, {&(0x7f0000000cc0)="9727291d34ad8f483a1e7990ec79c4fa0c7abee5aa1c928dd9b1278cfa0d08af6ec91971e23755115171df2071120c8ea5dc435344eb533298482d82d35476d96c7aca582130b8", 0x47}, {&(0x7f0000000d40)="bb3255371b6e37ab1d1c1589b6a772d48c52bd4c5d4c7090da459ab00eafbf82d3ed9de615f8f6f9b18baf", 0x2b}, {&(0x7f0000000d80)="b6c333a264637f516f500eae2fced2584b71ef2ff5f835c864172a1e03d4744cd77f2146c86eade379cc328dfc54d950e340cd4bb8170646b37fab696197c549f6df8367205c8a6bdbc465bcb325500cf01539bcbe3e3886767bc6604de8455c2299e0f61a65d793d0351ccbd83a2e1ac799266e71d0939aed91b7321d0627487e02d48b519d80e1fa860cccf22bec80f74c3c0776f91afe5813cdbf4a594b545653503932db3a9e22a2acacc5723bd3aa7b0ece4b0dbd5092792534891ee7b75dc592ba", 0xc4}, {&(0x7f0000000e80)="6911ea4f1f2165459c694cae65f2238b1d6bc1beb8dffa7d442c7cce69eec8520ff75947f87310cb211dd7bbf1a71b111851181f65457d3b14e54f", 0x3b}, {&(0x7f0000000ec0)="6369fa1a2fd3", 0x6}], 0x7, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff00000001}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xc94}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}, 0x8000)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000001040)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000001040)=0x2, 0x4)
openat$cgroup_int(r6, &(0x7f0000001080)='pids.max\x00', 0x2, 0x0)
pipe(&(0x7f00000010c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
openat$cgroup_ro(r13, &(0x7f0000001100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async)
r14 = openat$cgroup_ro(r13, &(0x7f0000001100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f00000012c0)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f00000012c0)={'vxcan0\x00', <r15=>0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300)=r3, 0x4) (async)
r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300)=r3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x10, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27d}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x38}, @ldst={0x0, 0x3, 0x3, 0x0, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x2, 0x8, 0xa, 0x30, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000011c0)='syzkaller\x00', 0x1, 0xbe, &(0x7f0000001200)=""/190, 0x41100, 0x6, '\x00', r15, 0x25, r16, 0x8, &(0x7f0000001340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x5, 0x0, 0xffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000013c0)=[r6, r13, r12, r14], &(0x7f0000001400)=[{0x2, 0x4, 0x4, 0x5}, {0x1, 0x5, 0xa, 0x8}, {0x0, 0x1, 0x0, 0x7}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000001500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xaf}, @exit], &(0x7f0000001540)='GPL\x00', 0x1000, 0x79, &(0x7f0000001580)=""/121, 0x41000, 0x10, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0x8, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r12, r7, r6, r14, r14], 0x0, 0x10, 0x80}, 0x94)

3.072083683s ago: executing program 0 (id=5236):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r2, @ANYBLOB="a59c97a046eaf8218f01f728370e2a134cab0fba55c5d7f54a773f47167bbb14ad944294316a4f9d15eed39b5ead72a0a778339dc74b037d841476ef434e85296e61b3d7ef92730157e5b74dd013ca9a04ae46bd121b34dbcb2a5819137ee4dac1"], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r5, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x40040, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @loopback, 0xfba3}, 0x1c)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x1, &(0x7f0000000080)=0x87cabc6, 0x4)
recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="187b0000f7ffffff00000000000000001801000020696c2500000000002020207b1af8ff00060000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$tipc(0x1e, 0x5, 0x0)
listen(r8, 0x0)
ioctl$int_in(r8, 0x5421, &(0x7f0000000180)=0x7)
accept4(r8, 0x0, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080)=0xfffffffc, 0x4)
sendmmsg$inet(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1)
close(r7)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240052c1", @ANYRES16=r3, @ANYBLOB="080007bd7000fddbdf2555000000e2fc01004f000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4000010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
accept4(r7, 0x0, &(0x7f0000000240), 0x800)

2.947482183s ago: executing program 1 (id=5239):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000001000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd4, &(0x7f0000000340)=""/212}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x12}}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8)
close(r3)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x20, r7, 0x1, 0x80, 0x25dfdbfe, {0xf, 0x0, 0x2d}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.514913385s ago: executing program 4 (id=5241):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}}) (async)
r0 = socket$netlink(0x10, 0x3, 0x15) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) (async)
r2 = socket$netlink(0x10, 0x3, 0x4) (async)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xb, &(0x7f00000000c0)={[0x8]}, 0x8) (async)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c5610a600000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

2.513742999s ago: executing program 0 (id=5242):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x6, 0x7}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x2d, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2028b70043c34612b98d429e309fa860f884bf28f44d823d00010100000000000000ffe2000000"], 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000f001000a000002300001802c0001f400000000fc0000000006000000000000000000001400040000000000000000000000000003000800e0051489e332a0f458721c99e3a97ed5498d7c1fdf000000000000000000a9a3b9c25ce29823babbd136d372ddb6e75202933a1255b10633fb953ca250a6a079db5ece387ec55c315e303cbe1e1c678b77485994fafebdb39da972cd3df1623f68da90f5d196b627225f582fbdf5b0e290188c7476fb5fe2a67d685bd016bce6a9d90b2c7eca63b1db13f44a2901881d313110448049321770a89a92138aa37525538f440ee627aa6d7f4cb309f8413b005e2e756ff358484d465e06ccd9ed09a93fbc47677a9e96"], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r7, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x1bb18000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x2000)
bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65)
connect$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x20}, 0x5}, 0x20) (async)
connect$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x20}, 0x5}, 0x20)
connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000200), 0x4) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000200), 0x4)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x2, 0xfff1}, {0xe, 0x3}, {0xffe0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x6, 0xd}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_POLICE={0x24, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x632}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd8e}]}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x3c85}}]}}]}, 0x64}}, 0x24040084)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYRESOCT=r4, @ANYRES32=r11, @ANYRES16=r5], 0xa04}, 0x1, 0x0, 0x0, 0x480c1}, 0x44800)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000001c0)={&(0x7f00000003c0), 0x51, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="a646058343fd7437d61869b41d455d7f4916591de229fcfe270da7f26d7afb5bd3f0fc499fa7fa450fe4d765205b96abd64a98664dd04c0feffe9cdebe97bb844d729e2a1aa556701b2ec9e1ed70d7ca5758d5e4eceaeb1f88402d87f41d45d4181cf3d54df886ec00a3240ad9c8cf55c6f3d203346c0ecfcc87d4bcc33debd2b598f058caeb96f9bc154bad4581b395141081ce7bc9c17d5bbd2f142ed2d7fd66bee4e902272dba406eb9a1c9dcf7a49e0cf5d44a35a2de9fda05120273baea712273a36f134f87adfdbf7a3d2f39dc648e047719bc6afc13c53d25d482fb37261fffafac3bad953cf1fd085592191d8c73d0ffa58d327d885bd0a83b3081f4d6120364e712552952f965d447314c927c9c09e998f4218ecdc82a2191774e2d140e760fc310f7def614fc2f54f7b2b988e847f6d9d9fbe07252986d566237727f05daed8a28a86008a6fbd06a8fa369793009a3baa77a91657132d64b23100210f8afa92bbfe8d7b6b5aa60d23369e984c830bd50930fc0c41105d558d966021d0d5a6c6eedea382a150337900184d57a11eb6829deaa490273368cba51850f14841c4f6b51136d7dfa87580c94484d1c2ead85c1e35bb176f8201dd8c4720bc72205dc035b7f0e34cf1999bea06e2a751aa72e61cc2dc289dae9e84bafcb9273effac1383d2061aac3c710db0258678661eb0b660f95509b34ab7c942c85bfdd4faaf7381ad5006db63a4c4a2b8ec2e411d0f5d3c3a69ce0eee7d6e2a7f9f2eb263de2cb14698a72d8869ceb01495133387370cb24171d3e013623d5223c7a79c0653e73cd31181e7a8227200264eee4dfbc717e2e362a56cc59165810d14ab07fb34da12fde50a9ce254f1ca8a25919691692d228be0fe45da717dace8e3dda8011cf654ad91fa59b762531ef843c4db574a83dbafdda36c7f4c1ce4b86d147193c060d804fc578cb5524fd921bdc67e968083a56709cadab817b76526960690f03fb7d47cf5c549b02f9e6a81939fe99263a48112b4c95088cdcd7aa7324c36573721af8c5e9d7d5872f6afe45e0a2f5be758afabb7c1edad7f5e2b3ffbe266b4aee3294c9d6be54d574598cd123ccd323f52ddaf975db72c93dc00416ffe558b44008224b53999f6825061b835d80ef9d579f35107c4fb0fd5a1ee739707133e720ab79b9530e3b0a8cb5ef40c8ee4abf0bcca54ab973ef22be57a1f73a00e743a383d4578924bca1a047a4a34ee6b9694b41c2bdac19d3efb6c76bd6b6688f79d9a2ca07b423e18dfc0f8d8717262177eba9602b4b723d09cd886861034228a3fed0e61a058032975f5172b5000151bdf6ae8811b437aaa2a0480d942bd5179293c8222d2752570c54afe03bee2999cd538e8d08936d59705bd34caa3747590694273349566198401cdd5b7fee35afcd9d51c441c75d0e614280ef0e5964bf4429c79e673976a632e48a2b011cecd4f00bd18e453fcede72ae39cc979845d1b02650ade82d44f40c88de2e2f8b1a8c86160d35e5d42e8388b3d4d2aef74c7ab1d695bf97bb3f16c1d95c764fc0d15d3f4d2f40ca5588bab89eb83aaf1e179841f726a2a6b770ae3b6de9e664dc4cd1dd17672a7038770c92844740968f74249c3460aa4d3084a06fdbb810bc0aeedcff45fdbae745b65a04621e4b0701d78b60eab8da784ac6f56529d0ed5746e3fe99212d071071d2d948f07023bc657fb59e5e258cd9ba835cf9bf48ea67ae95ebaa64bc86311185f96fe6233e1d166f3a69329e67adad2fe47fa24b5789f7ecbb01434f250d801d565a0e68632dc70771b5db1da08aba93b2335fd49bcc7542ccc87e7f383b15e4f821a937f38c6a2bf0cf6d52a1ea99dbd0d85856530595316c0cf9377bfa7e36d0d0e3325152f2f18dffa10ed21fbcaab6b2f3b219b250ec0aef3bd0513bb595170ca48d5c35752b1b4b71e2f91688aa5d2e112a8a5d7bf13b8d6fd21f17812a3aebfb7100e649340012e639b27e0ad7e03199a0cb9e177f127b3b6a71279de182fa8ec2f2812d3ed6fcaabfb70ef681c0e7ba525e14f64b97972c900293ec39e8b3bdcbc727582e26a21df68591342d747a8f951371a21ee901e021e338f28e7313c02a1ea1d03d0ec44c2ec33b55f212f67e73ab554337e6261293c9b31fea38b1080aac5bcc208fbad129692b8eb2b4b5ac801d632f18c56863632e55c16436527b6d69c7a18dd45f91a1ac5f8d6df14dd18973e2b503f9445dfa5b3557f34b2caba5018a4cee3801342d81d15c1776edad3eb24088a2be2a5165509a7ccb0cf832e3c07216103033b6da388ab25bc8fc96cf8e78214a1b271dff2739e4671c0c67ddc122a34da261de1dbb4d5c7536c2c92aa18c00d6ba171f1b1f87ac8d6093056b4ec2ea9130e811fa012d67b4a25b570512b2528a7d242ceb890c96b0395f9ff5017c2b8f8d8fbdcf36ba049a74559da32fa3732a0b3d094766bd0941c0f8c2d02ca3e5c7ba1e628b6e14bd93fd4eccd1e72890ac3d54c2071509f1aff77415ca7bac2dcf98d0deed0c1379154f6181f561f33ecbb9b1e7d93adbfd68fba425cf3d82e3e4b7238df03ce9d81e5df69b65d5175c8c37391c18d2bee487dcd7700fa78951f06d2be2c5a708643c73ee77032ff97708f07b50593a02eeb2718555116c7947fa579948f2ef0a2e2efe6bcdceaf36b5e3d9afb3ee154d6faa7d72338a5cf8a4121a8979bee9c014b53f7562bbe3575410599b995a1739842c451af51b7c947d8ed55b26f23bdc31624053451f1e9faef5806cb96236b7c37ec046e9b33a87dd6ed6ee06250111b6f3de4b892a537c6e671dfc62dde6b7e53e8670c79e8a78d7743cf177bcc57194e9725a998d6e4323f742f588d3b20cf53f8d8c11be52156666a9e81379150c8ab197b1c774de72f7c566c560e181f84c62c80c2c491dba21656ed6a76d6a6f0971e28a3a3940e0a0cce6974470292f774b321e21ba07a5556b518467df5328b1f67d5b4b1b65ebc0371680bfac78c7f29ded7cf8245efb1907c3c1a5ba84c9b4a3671d0672759b920d62bbfd7647b16f658179d8369551c38a436a505f4da2ba60f74efca66c11fc9d567884d5f341b35fe1eb1a634530468c118dc81a2c7350fb19f359a75b05363cb926c1778db8a73d5b7336069235b0df293747f2ede8138c7b5716772c5cd2f895f3ee2d5ee679d3ff46294b4cf7ca10c8fc1a1d2a422d1b014f9a692a8b4e928b5c0d974471fff47c77c5e74f59d454e053f08a0119c0989be4912370a5a0e48bd5d39c86abbcc41136a6c8f10a0184552494979b8593c1b866b05cec90e42da3771d0e2a74b0c96aa45b66dc25a75beb4822b384e6c2759afeef08e3975293bf138b7de845d8a86b9326c7c792bb5907f56dcbbff1dc42ff6f725a179dc6d2b8ab9be0968231af488ced43f459804930efac3a5f20cfcc5c1cdfae4ef2ddfbc35f82231d32299738675ea32fbd026ac9393d2cdd587e274d58ef4a5cbc39360862e7031c1b25c2806e05c520a3ff8ed60119b182bce7a6a92841e53c4718898fdc265c3f5c9391feaee27270d06eec810fb2d8ee739bb84862010da3a10723ac61563257ae6f7336f66a17fea81924eeb24f497375d43f47c297e487fe4f55c19ab62742c49881df8498ccab4d1376d292fbd5ae3d9f9b109a61f94560711e81b7017b4f80c4193280043ad4c405201f1b34e27fbf5d22230331caa9001de951731cd5bf7a255001abbd411d4afefb7bd38da08973f76f5a33070439bf58211e68d6eec40c54a54f2bb88f14390234a86018064f9ff3133a82c52d23952666e17560d569d76c01ea7dd6e753a35e2f802b3ed64bcf28a7f38483c38ff0f419ea88e5b5f3d0f56ba3467c4e4575c3fcf8ae1c6cccd1bf8de087e17b60b3b0614ad3776062f121681f825fd73600d25bf4df3c74fffabd8ae0fa554e846d6ec56406e4a61aa2d27da463c6473de92d19b1757c83a6a8aa89678f9ec51c35e4d24baf29dc011ab32fb27ec8291937de788c088ca30f555013d9f6fcc5287d46a96ac0bf5abc27109ee239e6adf00f71391a9bd52cbd7c9cc568cce92ec62256917d2db278547eb4da9ae9eb81247d54fe3d42fe1dee8012c13493cf2de7bd2e8ad14f70134b463708a601fbf80e3a43ad46b2ff727358ce0c0bff87a420f867a6acc66e427a00695db896e9a253cbf111ae0329e4bc2c4c0600da86b97fa6361e430ba8271c2377943a194b4a564a49fc0e5854a5a7d012f4da15a194eb0c487ca7938eb2eefe810719cdcad5d4e1fce050f60ed78031be7e85ff30adca14fb95ba76035aa62991f5f23e9e850c87d737ffa132c1fe98c920d693ad2303771f367b9878999ecc6a2af86d55bf691bc3bad36460ab99e8c05c58f463057132c06d54b265ccffa3e74ec2bb686d96976ac8b81d98aecd58e05801e447894ef8331d9b71ce2ddb2df0d3bcd3e4e8d6df464543cc7626ee28bdfc9c32ce728073d31598f36940e18702f245cd5f7a7bfb34001ccd251f51eae247a307fb41588059c465482d4ff33871008c103a5c68251986c1e1a9ed02d8238c61ea6092a270b44285cad8e95ee17c4db2bd1ca4037ea2b2f1d0ac329a1393d2c7421e8509ae6c6865e44618b2fb76612093a4b5ceee41f1dcc09ade52e112bc8adffaee6bfa47dd56b0cc78aeed33a9fb5ce6845028437cc0f94d4f29cfd1857a76012d7601a0c2c0e5572692f4036c6753e1f399c67318e49804456a5e594bb1d9e8b672197c0e8e4bc4c39dba50e0dfb7cc9a05448db44d912665c6bd2dc749180aedda045dcfce9dc3b350a0d585bcc72b85737c11e49317f574d585b657635b99001dbbb291f46ca97740a158707a655ce7a95eeb5f1e25967995329adbe8429288f8c2a49fc1dc27e1466189c48189b5ec51c9ba74603b74ebcb90fedacd763f007ebfb697b3745afe6cb6b2be764c6b8410f76ff28583e8c76971a3b1e181eb03623208740161e4f879d21c39d3c33b2cc04d5cb21a6557ba7080088261a837c4ae3594eeb84a0315debb3fca5273814db95c0cf5e17f9588a4faf333838216652a8746868769216973a1630b9ec5c15777c0feae1a148afef6a4e9de8208e7cdffe1431bac724bf343ec6573197cafbc976ffacd059d2245f55b39d6e00f6496ae01d9482b50ebcc8e58b32005e79d1774b23b5c71005fc24b1ac1ab1869eb2efc93b38d7d0bb0934040afafc4b91a021be17686f55518425f01feb064de6ace196acb401283f1961c7c815d9751af281f638a5dbc5a8af53a27ba8ba8c81303e485e755e62f685019bc63baaeb15e15e0c504f9642a9a482729b24ef045beecf8e30d07e6eec3ca4e6c64e87e41fc66fe96322441278135e35b19bf40cf0593ad1912c2fb48b44af2e28195929b04a0eac8bc56d0613805ed0148a1b4b30624be6e9f91c0ba68f46a2148a5f19f261ae3cc393857349cbb7d06732b4ebc4acb06e4286393612d3dfa6d06097126beb6bb41d31fdb46519dd455a8ef52146b1ab7df4c507ed115d13228043432c793b4bff27d9a41799f149c5fdd2d97071514181574fc41c826f1b74e8629fffa5c84f56fab972582511bf29a8b6188ad6f8c1b98ef05d1ba19b5fdb0e2dd6730787012a71f18d238e8b7534a43ca75a23f892c7d3259fb7f0dda950fac7653d34d8780f6697a6cdba33dd5cf13c71647b17cd19356f9660da1dbea7f9a2cb44c2c684ae4432b2d7d6859fce9484c2b11c9f529a336f4006909c7976d1f9b49f5bb565d678e", @ANYRESDEC=r3, @ANYRES8=r10, @ANYRESOCT=r11, @ANYBLOB="cef02edf7ba2f05e40ef3bbef26edb9446b69bee710e60c7a558aaa1d8e17c7469e40abd71ca70d203062365fabc6006255f0b2226a6cd44c8c0377cf77cf3581c3e072f8fb2ac01"], 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x24004097)

2.513446134s ago: executing program 3 (id=5243):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f00000021c0)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000002040)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000c80)=""/116, 0x74}, &(0x7f0000000300), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x4}, {&(0x7f00000005c0)=""/49, 0x31}, &(0x7f0000000680), 0x0, 0x49, 0x7fff}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0xfffff97b}, {&(0x7f0000000d00)=""/118, 0x76}, &(0x7f0000001e40)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/104, 0x68}], 0x3, 0x13}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x800}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001e80)=""/251, 0xfb}, &(0x7f0000001f80), 0x21}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfff, 0x7}, &(0x7f0000001fc0)=0xfffffffffffffff8, &(0x7f0000002000)=0x3fc00, 0x6, 0x5, 0xa, 0x0, 0x18, 0xfc}}], 0x160, 0x4000}, 0x804)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xae}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$alg(r4, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071106b000000000095"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)

2.486977458s ago: executing program 4 (id=5244):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
syz_open_procfs$namespace(0x0, &(0x7f000000b940)='ns/cgroup\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f000000b940)='ns/cgroup\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24004885}, 0x74094)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x604, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x490, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x34}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x44}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8f}, @TCA_ROUTE4_POLICE={0x450, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x80, 0x80000001, 0x4, {0x1, 0x2, 0x5, 0xb6, 0x706}, {0x6, 0x0, 0x8, 0x2, 0x9, 0x1}, 0x58, 0xfffffff7, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffac, 0x0, 0x5339, 0x6, 0x4, 0x7, 0x7, 0xffffff6b, 0x7f, 0xc, 0xfff, 0xa8, 0xdc2d, 0x200, 0x1, 0xeba, 0xffff8fbf, 0x0, 0xff, 0x8, 0xfffffffe, 0x6, 0x8228, 0x7b3, 0x3c45, 0x4, 0xc, 0xfffffff8, 0x5, 0x8, 0x800, 0x4, 0x9, 0x2, 0x2, 0x2, 0x6, 0x9, 0x4, 0x0, 0x1ff, 0xdf5, 0x3, 0xc, 0x8000, 0x71, 0x8, 0x2, 0x9, 0x4e2e, 0x8, 0x0, 0xc1bb, 0x2, 0x2, 0x7ff, 0x5, 0x8, 0x2, 0x4, 0x3, 0x5, 0x2, 0x6, 0xfffffe00, 0x8000000, 0xffff, 0x9, 0x8ea, 0x74cf, 0x6, 0x3, 0x9, 0x4, 0x9, 0x877e, 0x130, 0x5, 0xfffffffe, 0xffffffff, 0x10, 0x0, 0x8, 0x30, 0x1ff, 0x2, 0x1, 0x4, 0xf8, 0x0, 0x4, 0xb15, 0x8, 0x10000, 0x80000000, 0x1, 0x8, 0x10, 0x107, 0x9, 0xb, 0x1, 0x2, 0x3, 0xfff, 0x4, 0xb, 0xffff, 0x2, 0x6, 0x0, 0x9, 0x89f, 0x7, 0x38, 0x6, 0x3a, 0xfffffe01, 0x9, 0x101, 0x8001, 0xde1, 0x1, 0xc, 0x4, 0x0, 0xffff5f72, 0xff, 0x6fc, 0x4, 0x6, 0x2, 0x6, 0x8, 0x1, 0x4, 0x4, 0x0, 0x0, 0x10000, 0x5, 0x4, 0x101, 0x0, 0x8, 0x8, 0x5, 0xc6, 0x1, 0xc3, 0x6, 0xfb, 0xff, 0x1aed4f9d, 0x67, 0x2, 0x1, 0xdc70, 0x10, 0xb3d, 0xfffff800, 0x4, 0x5, 0x101, 0x7, 0x4, 0x7, 0x1, 0x0, 0x47, 0x5, 0x1, 0x3, 0x7, 0x9, 0xf, 0x6, 0x3, 0xd8, 0x101, 0x9, 0x7fff, 0x7, 0x8001, 0x3, 0x7f, 0x40000000, 0x3, 0x0, 0x5, 0xb, 0x698, 0x0, 0x4, 0x4d45, 0x8, 0x8, 0x7, 0x3, 0x9, 0x4, 0xad7, 0x4, 0xfffffc01, 0x1, 0x2, 0x91, 0x4, 0xb, 0x6, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x101, 0x3, 0x10001, 0x3, 0x566, 0x6, 0xf, 0x4, 0x2, 0xf, 0x40, 0x4, 0x2, 0x9e90, 0x7ff, 0x4, 0xfff, 0x39, 0x7fffffff, 0x401, 0x3, 0x8, 0x401, 0xfffffffd, 0x1, 0x4, 0x110000, 0x2, 0x0, 0x80, 0x3ff, 0x3, 0xb6ad, 0x1, 0x1000, 0x3, 0x1, 0x40, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9f}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x67}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0x84, 0x1e, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xffffff00, 0x5, 0x1ff, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x0, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0xc, 0xd, 0x2, 0x5, 0x1}}, @TCA_DEF_DATA={0xb, 0x3, 'gretap\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x1e, 0x2, 0xb5)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)

2.238603466s ago: executing program 0 (id=5246):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="efdc000000000000000043fba514a516bf54f4156e22ebfddc90fb93cba746c79b90d2ba888f358caf52e44edb5c21505665e620b77c3a695234f602e09c37da92b4f81b92b676c0b1eedafe38c128977006f78c846860445fc6a1cc121fbe10dec2242c6e90b30b", 0x68, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.9002775s ago: executing program 1 (id=5247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x3, 0x3a) (async)
r1 = socket$kcm(0xa, 0x3, 0x3a)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000240)="179adab4819a459460a8833077114a3b0c2577d4104b6a53107e30515ae5e5565946f976dfb873a78d304ae7473764af5e33bb174e13d873e74247b75d611132177b6a2997c48cd5d642a4220b0b3c2dfee92783e0a87d64fa5c5462d388d1dde1fba5ff33302bb67309b06c93fbd91e98d7e5e0bb0a4a59640ab597d3d9151f7a28899047c211533d1643c3a70b6f26de5b0e99176f840f9d0970352d3aff47f6321819b44a814d0a827f256ce1ea0e0bd014570b7b19391197e4fa4b763a7c8b4010c863618836a68d8d", 0xcb)
r3 = socket(0x1, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}}, 0x8001)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)}, {&(0x7f0000000200)}], 0x2, 0x0, 0x0, 0x900}, 0x60)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80)

1.583900907s ago: executing program 3 (id=5248):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x10, 0x10, 0x5903, 0x3, {{0x1a, 0x4, 0x3, 0x7, 0x68, 0x68, 0x0, 0x46, 0x29, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x17, 0x33, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}]}, @end, @lsrr={0x83, 0xb, 0x4, [@empty, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x84, 0x1, 0x7, [{@broadcast, 0x3}]}, @noop, @timestamp={0x44, 0x14, 0xcc, 0x0, 0x7, [0x80, 0x5, 0x7, 0xc47]}, @lsrr={0x83, 0xf, 0x84, [@private=0xa010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x800, 0x70bd27, 0x25dfdbfe, {0x2, 0x3f, 0x40, 0xff, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044001}, 0x0)

1.583350909s ago: executing program 2 (id=5249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\v\x00'], 0x50)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"6b570cac9c049ed5a3f37a35112384da", 0x0, <r3=>0x0, {0x8000000000000001, 0x7f}, {0xfffffffffffffffd, 0x8c4}, 0xc2, [0x9, 0x3, 0x8000000000000001, 0x9, 0x7, 0x3, 0x1, 0x4, 0x7, 0xffffffffffffad17, 0xed, 0x9, 0x6, 0x5, 0x6, 0x100000001]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000780)={{r2}, r3, 0x10, @unused=[0x6, 0x9, 0x5, 0x10], @devid=r4})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r11, &(0x7f0000000340)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x5c, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f8"], 0xf8}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000fb"], 0x1298}}], 0x2, 0x40400e4)
ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000000080))
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)
bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x1}, 0x18)
sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.582464863s ago: executing program 4 (id=5250):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', <r3=>0x0})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0)
r8 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x1, 0x25, &(0x7f00000002c0), 0x8)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x800, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0x7}, {0x1, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x8, "9b080600d0ef00"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r12 = socket(0x0, 0x1, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r11, 0x7800, 0x7800, 0x6, 0x6, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xc}, {@empty}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@multicast1}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @end, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0x5b}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0xc3ffffff, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

1.537186622s ago: executing program 1 (id=5251):
r0 = socket$netlink(0x10, 0x3, 0x2)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x6, 0xa1, 0x80000000}, 0x10)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
readv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x140d, 0x420, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4001)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000002580)=[{&(0x7f00000011c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000001200)="e61adb71f30d59f5c05ad9b865fbddd652e299f16b7592c19259d4dcf5ea9f87b5585431b49be9a4ab0475a9a0", 0x2d}, {&(0x7f0000001240)="7b8ec5cc11f3482ac22e1a8532341a091cec8e3c699ba1794530b80768afa603ff5109221d7bd6fde530d05ae722db83a9066f67254f1741c4dddcfa8fb34284aefd05301a85e4588da01b3439199f10527c9bb6df97e20bcfe1cebd709a320d7b5b15d639", 0x65}, {&(0x7f00000012c0)="b9e8c9e1635ad8c54bcb2979dcaf1f7d624be5eb34b039d484c352cbacce31d1e2276e6c65d3aa634b2415d8dc5dab4509ecaf51a9f4c61699685ecfe8d05251f6f4bcfad641b85cbfc1a622499742a9a935d80f64d3de4b94e5f59a636ff692675f016160a0e26b", 0x68}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="a82b114426551b6d1ed819f4619144b22b6d0b325553d4b5348196f7b128a5c660bb23fb9a0ea2fa2f1397654317b2fa8c215ec65836298cdf3791853b04c6c3bf88424d3f6505ae5ef9c04c40d979f8e0ab9c5d1068bde8d0cbb852c10cd9d5aa889b934a501e80ce22dc72c9d8c96a5501b2e7c1997b8c708160a9adcb04d2a528bf42a5eb136c2297c4e0", 0x8c}, {&(0x7f0000002400)="009c2c7cfa842fb5c49f23267166eef41d1411526d4897bb5a85264154e7b00a4a2ca34485b3f48fbf", 0x29}, {&(0x7f0000002440)="fc6eb65b212eceb1527f91686756077c759cfbef3a97336e1511adb12cdd3bec927e6a113810a6c2ac6054db2a696e03b8b9261abfc18caee34622b78da3f2470d15005ca01b5983e64bb43169f2984471f772cb18af77ba1678ed731d2e6d8f41", 0x61}, {&(0x7f00000024c0)}], 0x8, 0x0, 0x0, 0x8000}], 0x1, 0x10008000)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000025c0), &(0x7f0000002600)=0xc)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000002640))
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = epoll_create1(0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740), 0x580, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000002780)={'sit0\x00', @multicast})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000027c0)={<r6=>r3, 0x6, 0x9, 0x9})
openat$cgroup_devices(r6, &(0x7f0000002800)='devices.deny\x00', 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002840), r0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), r6)
epoll_create1(0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6(0xa, 0x80000, 0x6)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000002b40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002940)={0x18c, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd60}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x47}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6430}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6f7941e4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000002b80)={0x8000002})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r6)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002c40)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x15)

1.430726756s ago: executing program 3 (id=5252):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
close(0xffffffffffffffff)
socket$unix(0x1, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014)

1.16312706s ago: executing program 0 (id=5253):
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)

1.162397075s ago: executing program 3 (id=5254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009"], 0xb0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c0003"], 0x38}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async, rerun: 32)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8) (rerun: 32)
sendmmsg$inet_sctp(r2, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0x1, 0x18, r3}}], 0x20, 0x4004004}], 0x1, 0x48850)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001c00)={r3, 0x5, "d68a194708"}, &(0x7f0000001e80)=0xd) (async)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r3, 0x2}, 0x8) (async, rerun: 32)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (rerun: 32)

939.554991ms ago: executing program 2 (id=5255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x80, '\x00', 0x0, r1, 0x4, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

881.303114ms ago: executing program 3 (id=5256):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8)
getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044884)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000edff71945c65d89b0290118bad39b2460000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000800000850000000600000095ef6bd6f642f03351c67a60ec5ac7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000940)='sock_rcvqueue_full\x00', r7}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6   \x00'}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r8}, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xcd, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x18, 0x1c, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff08ee}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r11, &(0x7f00000003c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9000911", 0x19}, {&(0x7f0000002580)="09c69e16e1536fcff84a6c972f929bd77111f8ed22e8b95278dba0549bed73bf9af7deee6b05e3387473", 0x2a}], 0x2)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r10, @ANYBLOB="14005080040005000400088005000200bd"], 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000b0dcd0851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000076608000000000000180000000000000000000000000000079500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

781.397601ms ago: executing program 2 (id=5257):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2608, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000400)="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", &(0x7f0000001400)=""/4096}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8805}, 0xc080)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=r2, @ANYBLOB="1502000008000000180012800800010000025f08000400020000000000000000"], 0x38}, 0x1, 0xba01, 0x0, 0x801}, 0x2000000)

527.710198ms ago: executing program 1 (id=5258):
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x17c}}, 0x40880)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r12, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r12, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r15}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)

526.984526ms ago: executing program 3 (id=5259):
unshare(0x2040400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @printk={@u, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6a}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dd, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local}}}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$unix(0x1, 0x2, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0)
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000140)={0x283, 0x3})
socket(0x840000000002, 0x1, 0x100)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

490.913341ms ago: executing program 2 (id=5260):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async)
connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)

470.67601ms ago: executing program 4 (id=5261):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="110000004200015b"], 0x18}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000)

315.845887ms ago: executing program 4 (id=5262):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000003540)=""/4087, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffead}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/280], &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000009f582d5bb1218a350000000000180100002020000000000000000000007b1af8ff000000006c03a8a45ebfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000500)='host1x_channel_submit\x00', r5, 0x0, 0x4}, 0x18)
unshare(0x2a020400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00'}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f00000003c0)=@abs={0x1}, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc4000)

249.278195ms ago: executing program 2 (id=5263):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x2}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff6fb389de6fe7aae80000e4bea996e67efb8f12b7040000860629c9850000005c81561500000018010000202078207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000b8da0000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0x4, 0xff, 0x4, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8000, 0x10000, 0xf, 0x3010, r1, 0x3, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x6}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)="d9bf77541b87442f69e6b34186e85d2b87a7b9d7f344470ce20af5c4f1a73305e06465d88348b7cd42fc3ff5c2ef943f61030e9dcc3568f4a992ab4d96149c8e615f398c9f9ee09bd2", 0x49}, {&(0x7f0000000340)="5ab67464ccaea7594f2dcf616134c66b676506b1aa75679104952bf593a33ef48782e4b96c0ff8935e405f0bb8fe4ff6f024542d920e23c078f70fd770788bef7521b74a9bc6a2e345b846c6ee22c443cb5a8035d270e4ed4304e0b10cac", 0x5e}], 0x2, 0x8, 0x618)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'nicvf0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x0, 0xa6, "094a7be7de328d1c32bdda334fc172d0eeb2bae4cc2909efa3510322d2c2c81942d6f61be97c0d5a927759efbbb95865d41cf39932df23375aadfe498c40fb92be9ed5da342cd3ac5a2d85f8adc49af4f84ee5068e44ffe69d76bd8392ade203be3e0e30e538fee1c621b32d400b243c129210e6149191687cde205c8c8dc99186868d73365ea8c74d4e4aad5b12f2c43817cfdac3d94d0227233d2542524cf0e17e7a632b71"}})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000580)=""/241, &(0x7f0000000000)=0xf1)

143.46511ms ago: executing program 0 (id=5264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback, 0x36, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
sendto$inet6(r1, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x1ff, 0x6, 0x5, 0x9, 0xffffffff, 0x1, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008050)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

88.048245ms ago: executing program 4 (id=5265):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000200000100c28000080005000300000008000500", @ANYRES32=r2, @ANYBLOB="1e00240054f55d693e166ffd6ef3ebade4688bd5b87c241a85b08d5886380000050000810000000500100060000000"], 0x80}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x41000}, 0x20006845)

0s ago: executing program 2 (id=5266):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffbc, 0x8000}, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000dc0)="435d61e778eb38a7b38869e147b2bb2d07a5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8bc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c37a6409abd84ddbe5264f5a9664e07dc8411a0f51951f7bb8fe27a59cc395ba580c12f6e995b8a62901c58273c223abb61def8a24a9d9c3e164fcc9c0ef085049e39d964b4afa4e79d6dc9d4f792776248a6ac45606026857497e7760e7dcc543cbd35aaaca6b30aa8acb8e4e77cd6626b8371a55fa07ede86c92893bad324de1fef3953ff5c36951f9647ffd6924de49d9a66baeb6a75df64352c800a13b897dbd01621199d6d5424e90a346c805c801fd6be1e96f2a69e5937a4e7df9445d776f56182a9c26c219e3462d7ef57f9037d6b14a5f0288f9af6950f2d48010e1bb76301b4f6564fa8f8d737f4c1142f8b1251553a1891811643fd4fcf8b4e4aacbdbdcc101b2153c9b2c2677d1d17c", 0x152}, {&(0x7f0000000b40)="518cf972f4602550447422ed8ab8e292d2b9e8f110c883251bad904148ec2972fe137bd155df9280115c15ef84b13e47e1f03396189a1c190470ee546a28d08515a098686a73a9ad70f822e5140fbfb110391250b8a84802dbf4588dc39d82195d48715ca048c7d8c59a24b6243810e456ba666105704711b987f85fb409a72e0b54194f1fd5a802e4692a1d90af11dc51df1ddced4389edb8073eb6f00f3ed16c292f5ba1ca872d781fd40050ce60814a7b3396efbe6fd294f4cd171446572145fe460ae70a488caf82d6f939612739d6319c182c4346b63cb07a30b4bfcaccd9dfe7d9c9bb755cbdbcee5caa", 0xed}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f81db185fa207", 0xdd}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee7", 0x7a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cfc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a5400"/232, 0xe8}, {&(0x7f00000000c0)="5cab1cd4386d9e0da57f099176822a8c34a0e27fe4d1504590ae33c39a933d67182904e77610ec8f7dce44a8d8", 0x2d}, {&(0x7f0000000200)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e090f175efa", 0x30}, {&(0x7f0000000f40)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badee17a8d08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64fb37365fb0ffa931bc4915658f185a359953910493f692868399f95a8", 0x90}, {&(0x7f0000001000)="38b4526ae50b033bea476dbff6a39da0edcb079b0fda4152d05cdd28639ff976bf8594edbe9b6b439ddfb8143ab5819a9cde4005058bdb41ad29a3369003f5e177ea1969e84e2be7d467b594e4b190cbf86b38fb8039818db8014f84e999b0f7b78f9dd8aec01f1c034f1c6246920f83d091bc5145fdedbc235e953816080abf9f87f8705111fd616fecd24134a4616f18a38dbea6ff7ef450e25cbd6477cf4286ad1a10659533828f08ae3e5e731663f3385b4d6afeee35c7a06e12981dda545f270476cfb3b94aa3e2e6eba3eaa320185fad691ab42be354dc02306cec1e74beb075", 0xe3}], 0x5}}], 0x3, 0x2000c044)
sendto$inet(r1, &(0x7f0000000540)=';T', 0x2, 0x80, 0x0, 0x0)

kernel console output (not intermixed with test programs):

][T19574] netlink: 'syz.0.3490': attribute type 3 has an invalid length.
[  502.994255][T19574] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3490'.
[  503.007353][ T7132] IPVS: stop unused estimator thread 0...
[  503.149673][T19582] netlink: set zone limit has 8 unknown bytes
[  503.452936][T19599] nft_compat: unsupported protocol 0
[  503.814322][T19619] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3504'.
[  503.890818][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'.
[  504.053375][T19625] bridge1: port 1(veth3) entered blocking state
[  504.077932][T19625] bridge1: port 1(veth3) entered disabled state
[  504.090643][T19625] veth3: entered allmulticast mode
[  504.109433][T19625] veth3: entered promiscuous mode
[  504.135175][T19628] bridge1: port 2(veth0_to_bond) entered blocking state
[  504.190814][T19628] bridge1: port 2(veth0_to_bond) entered disabled state
[  504.278543][T19628] veth0_to_bond: entered allmulticast mode
[  504.304114][T19628] veth0_to_bond: entered promiscuous mode
[  504.483272][T19636] macvlan2: entered allmulticast mode
[  504.503437][T19636] veth1_vlan: entered allmulticast mode
[  504.524741][T19636] veth1_vlan: left allmulticast mode
[  505.199089][T19668] lo speed is unknown, defaulting to 1000
[  505.296439][T19668] lo speed is unknown, defaulting to 1000
[  505.338588][T19678] tipc: Started in network mode
[  505.353804][T19678] tipc: Node identity d6a349e264c8, cluster identity 4711
[  505.376992][T19678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.414457][T19678] syzkaller0: entered promiscuous mode
[  505.425698][T19678] syzkaller0: entered allmulticast mode
[  505.585169][T19680] lo speed is unknown, defaulting to 1000
[  505.679494][T19682] lo speed is unknown, defaulting to 1000
[  505.757853][T19686] lo speed is unknown, defaulting to 1000
[  506.114406][T19677] tipc: Resetting bearer <eth:syzkaller0>
[  506.203050][T19677] tipc: Disabling bearer <eth:syzkaller0>
[  506.352829][T19680] lo speed is unknown, defaulting to 1000
[  506.408630][T19671] IPv6: syztnl1: Disabled Multicast RS
[  506.511115][T19695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'.
[  506.673102][T19682] lo speed is unknown, defaulting to 1000
[  507.211606][T19686] lo speed is unknown, defaulting to 1000
[  508.022667][T19711] syzkaller1: entered promiscuous mode
[  508.040316][T19711] syzkaller1: entered allmulticast mode
[  508.640064][T19720] openvswitch: netlink: IP tunnel attribute has 215 unknown bytes.
[  509.553253][T19741] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  510.571568][T19778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3540'.
[  510.594359][T19776] ip6erspan0: entered allmulticast mode
[  511.074947][T19790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3545'.
[  511.180583][T19794] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3541'.
[  512.342837][T19833] netlink: 'syz.1.3557': attribute type 83 has an invalid length.
[  512.910989][T19851] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  513.433591][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3564'.
[  513.507335][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3564'.
[  513.588563][T19873] netlink: 'syz.4.3566': attribute type 23 has an invalid length.
[  513.676390][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3566'.
[  513.780660][T19881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3567'.
[  513.895266][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'.
[  513.992560][T19887] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 1, id = 0
[  514.032777][T19888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.053665][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  514.060697][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  514.178478][T19888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3571'.
[  514.206197][T19894] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3570'.
[  514.525493][T19916] netlink: 'syz.2.3577': attribute type 12 has an invalid length.
[  514.641819][T19923] netlink: 'syz.4.3578': attribute type 15 has an invalid length.
[  514.880425][T19935] tipc: Failed to remove unknown binding: 66,1,1/3635339421:2635819511/2635819513
[  514.955897][T19935] tipc: Failed to remove unknown binding: 66,1,1/3635339421:2635819511/2635819513
[  514.993835][T19935] tipc: Failed to remove unknown binding: 66,1,1/3635339421:2635819511/2635819513
[  515.360538][T19928] team0 (unregistering): Port device team_slave_0 removed
[  515.376614][T19928] team0 (unregistering): Port device team_slave_1 removed
[  515.863564][T19974] __nla_validate_parse: 4 callbacks suppressed
[  515.863584][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'.
[  516.053407][T19985] netlink: 'syz.0.3593': attribute type 1 has an invalid length.
[  516.276463][T20000] netlink: 'syz.1.3594': attribute type 2 has an invalid length.
[  516.305349][T19985] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.428605][T19997] veth7: entered promiscuous mode
[  516.463538][T19997] bond0: (slave veth7): Enslaving as an active interface with a down link
[  516.493838][T19998] erspan0: entered allmulticast mode
[  516.510936][T19998] bond0: (slave erspan0): making interface the new active one
[  516.522025][T19998] erspan0: entered promiscuous mode
[  516.528091][T19998] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  516.549688][T20000] k›*·]‘: entered promiscuous mode
[  516.567121][T20001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  516.590226][T20009] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3595'.
[  516.610021][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3596'.
[  516.792353][T20015] netlink: 'syz.1.3598': attribute type 4 has an invalid length.
[  516.926508][T20017] netlink: 'syz.2.3600': attribute type 11 has an invalid length.
[  517.221234][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'.
[  517.274679][T20030] veth1: entered promiscuous mode
[  517.290153][T20034] netlink: zone id is out of range
[  517.345510][T20030] netlink: 'syz.1.3602': attribute type 1 has an invalid length.
[  517.363492][T20030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3602'.
[  517.415716][T20030] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  517.447485][T20038] sock: sock_timestamping_bind_phc: sock not bind to device
[  517.500982][T20040] netlink: 'syz.3.3607': attribute type 1 has an invalid length.
[  517.804572][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3608'.
[  517.816701][T20045] 8021q: adding VLAN 0 to HW filter on device bond4
[  517.958636][T20051] bridge0: port 1(veth0_to_bond) entered blocking state
[  518.026632][T20051] bridge0: port 1(veth0_to_bond) entered disabled state
[  518.033922][T20051] veth0_to_bond: entered allmulticast mode
[  518.064978][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3608'.
[  518.100105][T20051] veth0_to_bond: entered promiscuous mode
[  518.205458][T20049] delete_channel: no stack
[  518.596520][T20070] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  518.617522][T20066] netlink: 'syz.0.3613': attribute type 21 has an invalid length.
[  518.629100][T20066] netlink: 'syz.0.3613': attribute type 22 has an invalid length.
[  518.653112][T20066] netlink: 'syz.0.3613': attribute type 23 has an invalid length.
[  518.666724][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.701254][T20066] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3613'.
[  518.729797][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.793546][T20078] tap0: tun_chr_ioctl cmd 1074025677
[  518.799732][T20078] tap0: linktype set to 270
[  518.805522][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.860661][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.915297][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.916428][T20080] nbd: must specify at least one socket
[  518.987298][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  519.075763][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  519.151138][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  519.163475][T20086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3619'.
[  519.226102][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  519.294658][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  519.318890][T20070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  519.425020][T20093] erspan0: left allmulticast mode
[  519.482470][T20095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3621'.
[  519.605740][T20093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  519.657289][   T10] lo speed is unknown, defaulting to 1000
[  519.663167][   T10] syz0: Port: 1 Link ACTIVE
[  519.674591][T18631] lo speed is unknown, defaulting to 1000
[  519.677473][T20107] netlink: 'syz.3.3625': attribute type 2 has an invalid length.
[  519.759632][T20099] lo speed is unknown, defaulting to 1000
[  519.795063][T20099] lo speed is unknown, defaulting to 1000
[  520.224685][T20119] netlink: 'syz.4.3629': attribute type 1 has an invalid length.
[  520.344811][T20119] 8021q: adding VLAN 0 to HW filter on device bond3
[  520.363018][T20127] Bluetooth: MGMT ver 1.23
[  520.378202][T20120] netlink: 'syz.1.3626': attribute type 30 has an invalid length.
[  520.508773][T20126] 8021q: adding VLAN 0 to HW filter on device bond3
[  520.522962][T20126] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  520.553915][T20126] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  520.685803][T20119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.706234][T20119] batadv_slave_1: entered promiscuous mode
[  520.744369][T20119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.834905][T20119] bond3: (slave batadv_slave_1): making interface the new active one
[  520.861955][T20119] bond3: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  520.872392][T20137] IPVS: length: 209 != 24
[  521.568534][T20129] 8021q: adding VLAN 0 to HW filter on device bond3
[  521.587193][ T7118] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  521.613861][ T7118] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  521.695091][ T7118] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  521.724218][ T7118] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  521.920176][T20162] __nla_validate_parse: 4 callbacks suppressed
[  521.920198][T20162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3641'.
[  522.140489][T20172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3643'.
[  522.667794][T20185] ipvlan2: entered promiscuous mode
[  522.673186][T20185] ipvlan2: entered allmulticast mode
[  522.685686][T20185] batadv0: entered allmulticast mode
[  522.700573][T20185] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  522.976430][T20179] lo speed is unknown, defaulting to 1000
[  522.984303][T20179] lo speed is unknown, defaulting to 1000
[  523.568253][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'.
[  523.597839][T20209] netlink: 'syz.0.3656': attribute type 7 has an invalid length.
[  523.632378][T20209] netlink: 'syz.0.3656': attribute type 8 has an invalid length.
[  523.665992][T20211] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3656'.
[  523.705728][T20209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'.
[  523.886947][T20184] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3646'.
[  524.463373][T20237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3662'.
[  524.472778][T20235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3662'.
[  524.510892][T20235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3662'.
[  524.857950][T20248] syz_tun: entered promiscuous mode
[  524.864631][T20248] macsec1: entered allmulticast mode
[  524.871428][T20248] syz_tun: entered allmulticast mode
[  524.893796][T20248] syz_tun: left allmulticast mode
[  524.916802][T20248] syz_tun: left promiscuous mode
[  525.134883][T20265] netlink: 'syz.3.3668': attribute type 1 has an invalid length.
[  525.165097][T20265] netlink: 'syz.3.3668': attribute type 2 has an invalid length.
[  525.220243][T20269] tipc: New replicast peer: 255.255.255.255
[  525.231177][T20265] netlink: 'syz.3.3668': attribute type 1 has an invalid length.
[  525.263272][T20269] tipc: Enabled bearer <udp:syz2>, priority 10
[  525.280839][T20265] netlink: 'syz.3.3668': attribute type 2 has an invalid length.
[  525.527746][T20253] lo speed is unknown, defaulting to 1000
[  525.592520][T20253] lo speed is unknown, defaulting to 1000
[  526.065238][T20290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3674'.
[  526.265826][T18631] tipc: Node number set to 2993375714
[  526.865494][T20322] lo speed is unknown, defaulting to 1000
[  526.873700][T20322] lo speed is unknown, defaulting to 1000
[  527.044270][T20328] bond0: default FDB implementation only supports local addresses
[  527.498608][T20339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  528.326502][T20351] lo speed is unknown, defaulting to 1000
[  528.490857][T20351] lo speed is unknown, defaulting to 1000
[  528.506993][ T7120] erspan0: left promiscuous mode
[  529.146447][T20373] lo speed is unknown, defaulting to 1000
[  529.228025][T20373] lo speed is unknown, defaulting to 1000
[  529.228086][T20382] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3701'.
[  529.313864][T20385] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3701'.
[  529.499756][T20390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.933576][T20403] netlink: 'syz.4.3709': attribute type 1 has an invalid length.
[  530.569177][T20420] netlink: 'syz.2.3714': attribute type 12 has an invalid length.
[  530.794948][T20429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3718'.
[  530.849180][T20429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3718'.
[  531.122494][T20452] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  531.189128][T20453] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  531.413213][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3727'.
[  531.443116][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3727'.
[  531.502648][T20465] lo speed is unknown, defaulting to 1000
[  531.527258][T20465] lo speed is unknown, defaulting to 1000
[  531.900766][T20485] batman_adv: batadv0: Adding interface: dummy0
[  531.913356][T20485] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.942303][T20477] Bluetooth: MGMT ver 1.23
[  531.958566][T20485] batman_adv: batadv0: Interface activated: dummy0
[  532.020539][T20486] batadv0: mtu less than device minimum
[  532.030437][T20486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  532.042843][T20486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  532.054955][T20486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  532.066871][T20486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  532.079045][T20486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  532.266636][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3737'.
[  532.285357][T20500] netlink: 'syz.3.3737': attribute type 1 has an invalid length.
[  532.294582][T20500] netlink: 'syz.3.3737': attribute type 2 has an invalid length.
[  532.303766][T20502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3738'.
[  532.312871][T20500] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3737'.
[  532.557979][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'.
[  532.668418][T20514] sctp: [Deprecated]: syz.0.3741 (pid 20514) Use of struct sctp_assoc_value in delayed_ack socket option.
[  532.668418][T20514] Use struct sctp_sack_info instead
[  532.697165][T20510] tipc: Started in network mode
[  532.702264][T20510] tipc: Node identity 62ab240f963d, cluster identity 4711
[  532.731968][T20510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.752459][T20510] syzkaller0: entered promiscuous mode
[  532.788866][T20510] syzkaller0: entered allmulticast mode
[  532.989429][T20509] tipc: Resetting bearer <eth:syzkaller0>
[  533.029190][T20509] tipc: Disabling bearer <eth:syzkaller0>
[  533.077422][T20521] syzkaller0: entered allmulticast mode
[  533.221327][T20529] netlink: 'syz.4.3748': attribute type 23 has an invalid length.
[  533.348253][T20530] netlink: 'syz.2.3746': attribute type 1 has an invalid length.
[  533.509215][T20552] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  533.969922][ T5863] Bluetooth: hci2: command 0x0406 tx timeout
[  533.976876][ T5858] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  534.224515][T20579] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  534.259830][T20579] syzkaller0: entered promiscuous mode
[  534.271724][T20579] syzkaller0: entered allmulticast mode
[  534.314835][T20591] pim6reg1: entered promiscuous mode
[  534.324862][T20591] pim6reg1: entered allmulticast mode
[  534.447246][T20595] gretap2: entered promiscuous mode
[  534.470800][T20595] gretap2: entered allmulticast mode
[  534.607969][T20599] __nla_validate_parse: 7 callbacks suppressed
[  534.607990][T20599] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3770'.
[  534.621554][T20601] netlink: 'syz.1.3769': attribute type 11 has an invalid length.
[  534.645401][T20601] netlink: 'syz.1.3769': attribute type 4 has an invalid length.
[  534.653414][T20601] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3769'.
[  540.393178][T20683] lo speed is unknown, defaulting to 1000
[  540.469222][T20683] lo speed is unknown, defaulting to 1000
[  540.508575][T20691] Bluetooth: MGMT ver 1.23
[  540.539911][T20691] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3789'.
[  541.110871][T20709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'.
[  541.173162][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'.
[  541.508879][T20715] sctp: [Deprecated]: syz.1.3798 (pid 20715) Use of int in maxseg socket option.
[  541.508879][T20715] Use struct sctp_assoc_value instead
[  541.582543][T20717] sctp: [Deprecated]: syz.1.3798 (pid 20717) Use of int in maxseg socket option.
[  541.582543][T20717] Use struct sctp_assoc_value instead
[  541.883454][T20727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3800'.
[  542.200831][T20733] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  542.495316][T20753] netlink: 'syz.2.3809': attribute type 1 has an invalid length.
[  542.617283][T20753] bond1: entered promiscuous mode
[  542.623180][T20753] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.635888][T20756] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  542.737947][T20762] netlink: 'syz.1.3811': attribute type 1 has an invalid length.
[  542.843012][T20753] bond1: (slave veth5): making interface the new active one
[  542.874384][T20753] veth5: entered promiscuous mode
[  542.890898][T20753] bond1: (slave veth5): Enslaving as an active interface with an up link
[  543.084084][T20770] netlink: 'syz.0.3813': attribute type 1 has an invalid length.
[  543.288080][T20763] bond4: (slave gretap3): making interface the new active one
[  543.301481][T20763] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  543.329034][T20780] netlink: 'syz.0.3813': attribute type 5 has an invalid length.
[  543.349139][T20764] vlan0: entered allmulticast mode
[  543.354359][T20764] bond4: entered allmulticast mode
[  543.370135][T20780] netlink: 'syz.0.3813': attribute type 7 has an invalid length.
[  543.383542][T20764] gretap3: entered allmulticast mode
[  543.401530][T20764] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  543.659759][T20770] 8021q: adding VLAN 0 to HW filter on device bond2
[  543.756169][T20773] 8021q: adding VLAN 0 to HW filter on device bond2
[  543.763627][T20773] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  543.791560][T20773] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  543.883651][T20775] veth11: entered promiscuous mode
[  543.912287][T20775] bond2: (slave veth11): Enslaving as an active interface with a down link
[  543.938135][T20778] erspan0: entered allmulticast mode
[  543.955276][T20779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.993767][T20780] : entered promiscuous mode
[  544.002436][T20781] syzkaller0: entered promiscuous mode
[  544.010660][T20781] syzkaller0: entered allmulticast mode
[  544.087940][   T70] bond0: (slave erspan0): link status definitely down, disabling slave
[  544.105192][   T70] bond0: now running without any active interface!
[  544.144229][T20798] lo speed is unknown, defaulting to 1000
[  544.184865][T20792] tipc: Resetting bearer <eth:syzkaller0>
[  544.267085][T20792] tipc: Disabling bearer <eth:syzkaller0>
[  544.306541][T20798] lo speed is unknown, defaulting to 1000
[  544.316879][T20795] lo speed is unknown, defaulting to 1000
[  544.515355][T20806] netlink: 'syz.3.3816': attribute type 15 has an invalid length.
[  544.616773][T20814] netlink: 'syz.2.3821': attribute type 11 has an invalid length.
[  544.944125][T20823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3824'.
[  545.064705][T20795] lo speed is unknown, defaulting to 1000
[  545.341126][T20828] net_ratelimit: 14 callbacks suppressed
[  545.341148][T20828] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  546.119134][T20860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3832'.
[  546.278455][T20861] lo speed is unknown, defaulting to 1000
[  546.314979][T20861] lo speed is unknown, defaulting to 1000
[  546.614300][T20873] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3836'.
[  546.685098][T20874] netlink: 'syz.0.3835': attribute type 1 has an invalid length.
[  546.742243][T20874] netlink: 'syz.0.3835': attribute type 3 has an invalid length.
[  546.760632][T20874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3835'.
[  547.518409][T20893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3839'.
[  548.114008][T20917] netlink: 'syz.3.3846': attribute type 3 has an invalid length.
[  548.122268][T20917] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3846'.
[  548.155130][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3845'.
[  548.166810][T20917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  548.209525][   T10] lo speed is unknown, defaulting to 1000
[  548.221182][   T10] syz0: Port: 1 Link DOWN
[  548.231017][T20918] netlink: 'syz.1.3845': attribute type 62 has an invalid length.
[  548.246913][T20921] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3847'.
[  548.256789][T18631] lo speed is unknown, defaulting to 1000
[  548.515295][T20929] vxcan5: entered allmulticast mode
[  548.722855][T20935] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  549.906283][   T30] audit: type=1804 audit(1753777510.952:9): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3866" name="/newroot/113/cgroup.controllers" dev="tmpfs" ino=604 res=1 errno=0
[  550.046652][   T30] audit: type=1800 audit(1753777510.962:10): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3866" name="cgroup.controllers" dev="tmpfs" ino=604 res=0 errno=0
[  550.140202][   T30] audit: type=1800 audit(1753777510.982:11): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3866" name="cgroup.controllers" dev="tmpfs" ino=604 res=0 errno=0
[  550.189662][T20995] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3866'.
[  550.741549][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'.
[  550.872412][T21014] netlink: 1360 bytes leftover after parsing attributes in process `syz.3.3871'.
[  551.017513][T21021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  552.053693][T21068] lo speed is unknown, defaulting to 1000
[  552.109212][T21068] lo speed is unknown, defaulting to 1000
[  553.862017][T21125] __nla_validate_parse: 3 callbacks suppressed
[  553.862039][T21125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3895'.
[  553.929141][T21125] netlink: 'syz.1.3895': attribute type 15 has an invalid length.
[  554.158073][T21137] netlink: 'syz.0.3897': attribute type 1 has an invalid length.
[  554.365088][T21144] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  554.578721][T21150] bridge0: port 3(macsec0) entered blocking state
[  554.587064][T21150] bridge0: port 3(macsec0) entered disabled state
[  554.594511][T21150] macsec0: entered allmulticast mode
[  554.613995][T21150] veth1_macvtap: entered allmulticast mode
[  554.651410][T21150] macsec0: entered promiscuous mode
[  554.659432][T21150] bridge0: port 3(macsec0) entered blocking state
[  554.666154][T21150] bridge0: port 3(macsec0) entered forwarding state
[  554.852692][T21163] tipc: New replicast peer: 255.255.255.255
[  554.890800][T21163] tipc: Enabled bearer <udp:syz>, priority 10
[  555.124061][T21176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3910'.
[  555.294836][T21185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3912'.
[  555.344787][T21187] lo speed is unknown, defaulting to 1000
[  555.359378][T21187] lo speed is unknown, defaulting to 1000
[  555.432913][T21192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3914'.
[  555.514734][T21193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.552657][T21194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.590044][T21201] lo speed is unknown, defaulting to 1000
[  555.763727][T21201] lo speed is unknown, defaulting to 1000
[  556.134434][T21222] netlink: 'syz.1.3922': attribute type 33 has an invalid length.
[  556.155038][T21222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3922'.
[  556.166750][T21222] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  556.230281][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  556.273756][T21227] tipc: Started in network mode
[  556.283904][T21227] tipc: Node identity c2fa1f924044, cluster identity 4711
[  556.298663][T21227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.347570][T21227] syzkaller0: entered promiscuous mode
[  556.363022][T21227] syzkaller0: entered allmulticast mode
[  556.458837][T21232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.587825][T21232] syzkaller0: entered promiscuous mode
[  556.611540][T21232] tipc: Resetting bearer <eth:syzkaller0>
[  556.668055][T21230] tipc: Resetting bearer <eth:syzkaller0>
[  556.731253][T21230] tipc: Disabling bearer <eth:syzkaller0>
[  557.078160][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'.
[  557.212086][T21252] netlink: 'syz.3.3930': attribute type 31 has an invalid length.
[  557.389469][T21257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3931'.
[  557.521068][T21259] netlink: 'syz.3.3934': attribute type 10 has an invalid length.
[  557.552531][T21259] batman_adv: batadv0: Interface deactivated: dummy0
[  557.576049][T21259] batman_adv: batadv0: Removing interface: dummy0
[  557.722742][T21270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3937'.
[  557.815382][T21269] lo speed is unknown, defaulting to 1000
[  557.826795][T21269] lo speed is unknown, defaulting to 1000
[  557.838135][T21273] veth1_macvtap: left promiscuous mode
[  557.844967][T21273] macsec0: entered promiscuous mode
[  557.901530][T21273] veth1_macvtap: entered promiscuous mode
[  557.928058][T21273] macsec0: left promiscuous mode
[  558.307457][T21292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3946'.
[  558.308418][T21291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  558.332911][T21291] syzkaller0: entered promiscuous mode
[  558.340283][T21291] syzkaller0: entered allmulticast mode
[  558.350823][T21291] syzkaller0: left promiscuous mode
[  558.357207][T21291] syzkaller0: left allmulticast mode
[  558.376919][T21291] tipc: Resetting bearer <eth:syzkaller0>
[  558.438509][T21289] tipc: Resetting bearer <eth:syzkaller0>
[  558.510443][T21289] tipc: Disabling bearer <eth:syzkaller0>
[  558.904558][T21306] lo speed is unknown, defaulting to 1000
[  558.944475][T21307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3950'.
[  558.952890][T21306] lo speed is unknown, defaulting to 1000
[  558.964627][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3950'.
[  558.987952][T21307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3950'.
[  559.010338][T21307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3950'.
[  559.141735][T21307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3950'.
[  559.191205][T21310] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3951'.
[  560.188491][T21348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3960'.
[  560.209649][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'.
[  560.263942][T21348] netlink: 'syz.4.3960': attribute type 5 has an invalid length.
[  560.424633][T21351] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.3961'.
[  560.437442][T21353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3962'.
[  560.567306][T21355] dvmrp1: entered allmulticast mode
[  561.155122][T21383] netlink: zone id is out of range
[  561.161537][T21382] netlink: zone id is out of range
[  561.197314][T21382] netlink: zone id is out of range
[  561.220768][T21383] netlink: zone id is out of range
[  561.240161][T21382] netlink: zone id is out of range
[  561.245343][T21382] netlink: zone id is out of range
[  561.297412][T21383] netlink: zone id is out of range
[  561.303007][T21383] netlink: zone id is out of range
[  561.326323][T21383] netlink: zone id is out of range
[  561.331527][T21383] netlink: zone id is out of range
[  561.604436][T21403] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.765237][T21403] bridge_slave_1 (unregistering): left allmulticast mode
[  561.794011][T21403] bridge_slave_1 (unregistering): left promiscuous mode
[  561.805289][T21403] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.968780][T21426] lo speed is unknown, defaulting to 1000
[  561.987721][T21426] lo speed is unknown, defaulting to 1000
[  562.911781][T21449] netlink: 'syz.0.3986': attribute type 7 has an invalid length.
[  562.920511][T21449] netlink: 'syz.0.3986': attribute type 8 has an invalid length.
[  563.197012][T21460] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  563.262333][   T13] tipc: Resetting bearer <eth:syzkaller0>
[  563.654249][   T13] tipc: Disabling bearer <eth:gre0>
[  564.153467][   T13] bridge7 (unregistering): left promiscuous mode
[  564.290289][   T13] tipc: Disabling bearer <eth:syzkaller0>
[  564.424294][   T13] bond0 (unregistering): Released all slaves
[  564.443296][   T13] bond1 (unregistering): Released all slaves
[  564.589984][   T13] bond2 (unregistering): Released all slaves
[  564.608514][   T13] bond3 (unregistering): Released all slaves
[  564.780784][   T13] bond4 (unregistering): Released all slaves
[  564.795958][   T13] bond5 (unregistering): Released all slaves
[  564.812536][   T13] bond6 (unregistering): Released all slaves
[  564.828382][   T13] bond7 (unregistering): Released all slaves
[  564.858185][   T13] bond8 (unregistering): Released all slaves
[  565.087006][   T13] : left promiscuous mode
[  565.282839][T21506] __nla_validate_parse: 14 callbacks suppressed
[  565.282858][T21506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4003'.
[  565.325376][   T13] tipc: Disabling bearer <udp:syz0>
[  565.348088][   T13] tipc: Left network mode
[  565.447932][T21510] netlink: 'syz.0.4005': attribute type 21 has an invalid length.
[  565.470187][T21510] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4005'.
[  565.512854][T21510] netlink: 'syz.0.4005': attribute type 5 has an invalid length.
[  565.537557][T21510] netlink: 'syz.0.4005': attribute type 6 has an invalid length.
[  565.559072][T21510] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4005'.
[  565.727520][T21515] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4007'.
[  565.753836][T21515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4007'.
[  565.804096][T21515] rdma_rxe: rxe_newlink: failed to add lo
[  565.968818][T21530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4011'.
[  566.038824][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4011'.
[  566.136668][T21537] netlink: 'syz.1.4013': attribute type 1 has an invalid length.
[  566.150774][T21537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4013'.
[  566.628550][T21547] bond0: entered promiscuous mode
[  566.655824][T21547] bond0: left promiscuous mode
[  566.674612][T21551] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  566.718426][T21548] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  566.828278][T21555] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.837497][T21559] FAULT_INJECTION: forcing a failure.
[  566.837497][T21559] name failslab, interval 1, probability 0, space 0, times 0
[  566.850264][T21559] CPU: 1 UID: 0 PID: 21559 Comm: syz.1.4020 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) 
[  566.850295][T21559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  566.850309][T21559] Call Trace:
[  566.850318][T21559]  <TASK>
[  566.850327][T21559]  dump_stack_lvl+0x189/0x250
[  566.850358][T21559]  ? __pfx____ratelimit+0x10/0x10
[  566.850395][T21559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  566.850420][T21559]  ? __pfx__printk+0x10/0x10
[  566.850463][T21559]  should_fail_ex+0x414/0x560
[  566.850505][T21559]  should_failslab+0xa8/0x100
[  566.850538][T21559]  kmem_cache_alloc_noprof+0x73/0x3c0
[  566.850566][T21559]  ? __nf_conntrack_alloc+0x98/0x400
[  566.850601][T21559]  __nf_conntrack_alloc+0x98/0x400
[  566.850645][T21559]  init_conntrack+0x155/0xef0
[  566.850684][T21559]  ? __pfx_init_conntrack+0x10/0x10
[  566.850719][T21559]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[  566.850749][T21559]  ? __siphash_unaligned+0x232/0x3b0
[  566.850781][T21559]  nf_conntrack_in+0xbb7/0x15c0
[  566.850836][T21559]  ? __pfx_nf_conntrack_in+0x10/0x10
[  566.850877][T21559]  ? __lock_acquire+0xab9/0xd20
[  566.850895][T21559]  ? do_xdp_generic+0x11a/0x11a0
[  566.850939][T21559]  ? ipv4_conntrack_defrag+0x2a0/0x5b0
[  566.850968][T21559]  ? ip_sabotage_in+0x57/0x270
[  566.850991][T21559]  ? __pfx_ipv4_conntrack_in+0x10/0x10
[  566.851019][T21559]  nf_hook_slow+0xc5/0x220
[  566.851049][T21559]  nf_hook_slow_list+0x1c7/0x390
[  566.851071][T21559]  ? ip_sublist_rcv+0x74c/0x9b0
[  566.851099][T21559]  ? __pfx_nf_hook_slow_list+0x10/0x10
[  566.851135][T21559]  ? ip_sublist_rcv+0x74c/0x9b0
[  566.851156][T21559]  ip_sublist_rcv+0x8ac/0x9b0
[  566.851191][T21559]  ? kernel_text_address+0xa5/0xe0
[  566.851225][T21559]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  566.851248][T21559]  ? skb_orphan+0xaf/0xd0
[  566.851273][T21559]  ? __pfx_ip_rcv_finish+0x10/0x10
[  566.851310][T21559]  ip_list_rcv+0x3e2/0x430
[  566.851344][T21559]  ? __pfx_ip_list_rcv+0x10/0x10
[  566.851366][T21559]  ? kasan_save_track+0x3e/0x80
[  566.851391][T21559]  ? __kasan_slab_alloc+0x6c/0x80
[  566.851417][T21559]  ? bpf_test_run_xdp_live+0x15f1/0x1b10
[  566.851441][T21559]  ? __pfx_ip_list_rcv+0x10/0x10
[  566.851465][T21559]  __netif_receive_skb_list_core+0x7d2/0x800
[  566.851517][T21559]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  566.851564][T21559]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  566.851596][T21559]  netif_receive_skb_list_internal+0x975/0xcc0
[  566.851641][T21559]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  566.851679][T21559]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  566.851724][T21559]  ? __phys_addr+0xd3/0x180
[  566.851750][T21559]  ? build_skb_around+0x133/0x280
[  566.851776][T21559]  ? __xdp_build_skb_from_frame+0x34b/0x740
[  566.851818][T21559]  netif_receive_skb_list+0x54/0x450
[  566.851854][T21559]  bpf_test_run_xdp_live+0x1786/0x1b10
[  566.851890][T21559]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  566.851926][T21559]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  566.851948][T21559]  ? bpf_dispatcher_xdp+0x800/0x1000
[  566.851971][T21559]  ? bpf_dispatcher_xdp+0x800/0x1000
[  566.852048][T21559]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  566.852080][T21559]  ? _copy_from_user+0x94/0xb0
[  566.852109][T21559]  ? bpf_test_init+0x133/0x170
[  566.852127][T21559]  ? xdp_convert_md_to_buff+0x5b/0x330
[  566.852152][T21559]  bpf_prog_test_run_xdp+0x713/0x1000
[  566.852193][T21559]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  566.852222][T21559]  ? __fget_files+0x2a/0x420
[  566.852259][T21559]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  566.852281][T21559]  bpf_prog_test_run+0x2c7/0x340
[  566.852319][T21559]  __sys_bpf+0x4a4/0x860
[  566.852352][T21559]  ? __pfx___sys_bpf+0x10/0x10
[  566.852399][T21559]  ? ksys_write+0x22a/0x250
[  566.852428][T21559]  ? __pfx_ksys_write+0x10/0x10
[  566.852451][T21559]  ? rcu_is_watching+0x15/0xb0
[  566.852483][T21559]  __x64_sys_bpf+0x7c/0x90
[  566.852512][T21559]  do_syscall_64+0xfa/0x3b0
[  566.852532][T21559]  ? lockdep_hardirqs_on+0x9c/0x150
[  566.852551][T21559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.852572][T21559]  ? clear_bhb_loop+0x60/0xb0
[  566.852598][T21559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.852624][T21559] RIP: 0033:0x7f9ce278e9a9
[  566.852644][T21559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.852663][T21559] RSP: 002b:00007f9ce36a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  566.852685][T21559] RAX: ffffffffffffffda RBX: 00007f9ce29b5fa0 RCX: 00007f9ce278e9a9
[  566.852701][T21559] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  566.852714][T21559] RBP: 00007f9ce36a0090 R08: 0000000000000000 R09: 0000000000000000
[  566.852727][T21559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  566.852740][T21559] R13: 0000000000000000 R14: 00007f9ce29b5fa0 R15: 00007fff83662d58
[  566.852793][T21559]  </TASK>
[  567.251517][T21565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4021'.
[  567.663125][   T13] veth1: left promiscuous mode
[  567.810435][   T13] hsr_slave_0: left promiscuous mode
[  567.831819][   T13] hsr_slave_1: left promiscuous mode
[  568.023616][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'.
[  568.961309][T21579] netlink: 'syz.2.4023': attribute type 5 has an invalid length.
[  569.062965][T21598] IPVS: Unknown mcast interface: vcan0
[  569.283359][T21606] veth0_to_bond: left allmulticast mode
[  569.304762][T21606] veth0_to_bond: left promiscuous mode
[  569.312859][T21606] bridge0: port 1(veth0_to_bond) entered disabled state
[  569.338438][T21606] bond0: (slave bond_slave_0): Releasing backup interface
[  569.354654][T21606] bond0: (slave bond_slave_1): Releasing backup interface
[  569.397008][T21606] team0: Port device team_slave_0 removed
[  569.436401][T21606] team0: Port device team_slave_1 removed
[  569.443272][T21606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  569.450822][T21606] batman_adv: batadv0: Removing interface: batadv_slave_0
[  569.535028][T21606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  569.543031][T21606] batman_adv: batadv0: Removing interface: batadv_slave_1
[  569.571975][T21606] bond0: (slave macvlan0): Releasing backup interface
[  569.601021][T21606] tipc: Resetting bearer <eth:syzkaller0>
[  569.612186][T21606] bond0: (slave gretap2): Releasing backup interface
[  569.637048][T21606] batman_adv: batadv0: Interface deactivated: macvlan4
[  569.644083][T21606] batman_adv: batadv0: Removing interface: macvlan4
[  569.658772][T21606] bond4: (slave gretap3): Releasing active interface
[  569.669768][T21606] gretap3: left allmulticast mode
[  569.741662][T21613] IPVS: Error joining to the multicast group
[  569.870535][T21619] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  570.028357][T21620] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  570.187821][T21631] lo speed is unknown, defaulting to 1000
[  570.241789][T21631] lo speed is unknown, defaulting to 1000
[  570.472486][T21644] __nla_validate_parse: 7 callbacks suppressed
[  570.472510][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4043'.
[  570.536871][T21646] pim6reg1: entered promiscuous mode
[  570.542414][T21646] pim6reg1: entered allmulticast mode
[  570.588290][T21647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  570.600808][T21647] syzkaller0: entered promiscuous mode
[  570.607610][T21647] syzkaller0: entered allmulticast mode
[  570.667060][T21647] tipc: Resetting bearer <eth:syzkaller0>
[  570.927275][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'.
[  571.261390][T21641] tipc: Resetting bearer <eth:syzkaller0>
[  571.392761][T21641] tipc: Disabling bearer <eth:syzkaller0>
[  571.416711][T21666] net_ratelimit: 5 callbacks suppressed
[  571.416733][T21666] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  571.636291][T21666] lo speed is unknown, defaulting to 1000
[  571.646623][T21666] lo speed is unknown, defaulting to 1000
[  571.815418][T21678] netlink: 'syz.3.4055': attribute type 10 has an invalid length.
[  571.845289][T21678] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4055'.
[  572.124647][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4057'.
[  572.179246][T21682] syzkaller0: entered promiscuous mode
[  572.186722][T21682] syzkaller0: entered allmulticast mode
[  572.430935][T21692] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  572.478099][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4058'.
[  572.552918][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4059'.
[  573.086758][T21048] wlan1: Trigger new scan to find an IBSS to join
[  573.582740][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'.
[  573.642363][T21721] bridge_slave_0: left allmulticast mode
[  573.677133][T21721] bridge_slave_0: left promiscuous mode
[  573.684542][T21721] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.725225][T21721] bond0: (slave bond_slave_0): Releasing backup interface
[  573.761153][T21727] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  573.774182][T21721] bond0: (slave bond_slave_1): Releasing backup interface
[  573.827936][T21721] team0: Port device team_slave_0 removed
[  573.855419][T21731] netlink: 'syz.4.4066': attribute type 10 has an invalid length.
[  573.921164][T21721] team0: Port device team_slave_1 removed
[  573.935360][T21721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.987014][T21721] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.020743][T21721] bond3: (slave batadv_slave_1): Releasing active interface
[  574.050515][T21721] macsec0: left allmulticast mode
[  574.057086][T21721] veth1_macvtap: left allmulticast mode
[  574.062677][T21721] macsec0: left promiscuous mode
[  574.078473][T21721] bridge0: port 3(macsec0) entered disabled state
[  574.102881][T21721] team0: Port device bond1 removed
[  574.113857][T21726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.132720][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.169358][T21734] netlink: 'syz.2.4067': attribute type 1 has an invalid length.
[  574.195881][T21734] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4067'.
[  574.205190][T21727] !
: entered allmulticast mode
[  574.228583][T21729] syzkaller0: entered promiscuous mode
[  574.248084][T21729] syzkaller0: entered allmulticast mode
[  574.321523][T21731] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  574.371831][T21713] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  574.469874][T21722] tipc: Resetting bearer <eth:syzkaller0>
[  574.503543][T21711] tipc: Resetting bearer <eth:syzkaller0>
[  574.551342][T21711] tipc: Disabling bearer <eth:syzkaller0>
[  574.919534][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'.
[  575.031979][T21768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4077'.
[  575.182378][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.544031][T21788] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  575.768488][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'.
[  575.781444][T21795] netlink: 'syz.0.4086': attribute type 2 has an invalid length.
[  576.008797][T21805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4093'.
[  576.048266][T21811] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4092'.
[  576.079171][T21805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4093'.
[  576.097342][T21810] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4094'.
[  576.147568][ T7133] wlan1: Trigger new scan to find an IBSS to join
[  576.221449][T21819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4097'.
[  576.337605][T21823] lo speed is unknown, defaulting to 1000
[  576.352569][T21823] lo speed is unknown, defaulting to 1000
[  576.481602][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'.
[  576.553654][T21833] lo speed is unknown, defaulting to 1000
[  576.609864][T21837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4102'.
[  576.785375][T18631] hid-generic 0005:046D:FFF9.0002: collection stack underflow
[  576.794413][T18631] hid-generic 0005:046D:FFF9.0002: item 0 1 0 12 parsing failed
[  576.803829][T21843] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001
[  576.803900][T18631] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22
[  577.112680][T21833] lo speed is unknown, defaulting to 1000
[  577.175640][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'.
[  577.258804][T21855] netlink: 'syz.1.4108': attribute type 1 has an invalid length.
[  577.418884][T21855] 8021q: adding VLAN 0 to HW filter on device bond5
[  577.543623][T21859] bond5: (slave batadv1): Opening slave failed
[  577.937894][T21875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'.
[  578.309347][T21884] netlink: 'syz.3.4118': attribute type 16 has an invalid length.
[  578.846552][ T5863] Bluetooth: hci5: command 0x0406 tx timeout
[  579.091059][T21048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.096735][T21914] tipc: Resetting bearer <eth:syzkaller0>
[  579.339989][T21923] netlink: 'syz.3.4131': attribute type 10 has an invalid length.
[  579.504862][T21923] batman_adv: batadv0: Adding interface: netdevsim0
[  579.534443][T21923] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.596163][T21923] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  579.757816][T21935] bond4 (unregistering): Released all slaves
[  579.862121][T21952] geneve2: entered promiscuous mode
[  580.223791][T21968] IPv6: sit2: Disabled Multicast RS
[  580.333734][T21979] syzkaller1: entered promiscuous mode
[  580.376163][T21979] syzkaller1: entered allmulticast mode
[  580.408916][T21989] dummy0: entered allmulticast mode
[  580.843858][T22012] syzkaller0: entered promiscuous mode
[  580.851778][T22012] syzkaller0: entered allmulticast mode
[  581.025928][T21992] __nla_validate_parse: 6 callbacks suppressed
[  581.025952][T21992] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4145'.
[  581.113344][T21992] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4145'.
[  581.304359][T22027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4153'.
[  581.364572][T22027] nbd: must specify at least one socket
[  581.417192][T22028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4153'.
[  581.448237][T22028] nbd: must specify at least one socket
[  581.516415][T22038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4154'.
[  581.723466][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4158'.
[  581.772139][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4158'.
[  581.981600][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'.
[  582.406727][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'.
[  582.418741][T22080] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  582.426878][T22080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.563702][T22088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4170'.
[  583.424499][T22130] erspan0: left allmulticast mode
[  583.471480][T22130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  583.506597][T18631] lo speed is unknown, defaulting to 1000
[  583.537037][T18631] syz0: Port: 1 Link ACTIVE
[  583.641720][T18631] lo speed is unknown, defaulting to 1000
[  583.660075][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  583.835033][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  583.912885][T22144] sctp: [Deprecated]: syz.3.4184 (pid 22144) Use of struct sctp_assoc_value in delayed_ack socket option.
[  583.912885][T22144] Use struct sctp_sack_info instead
[  584.146791][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  584.396649][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  584.463857][T22164] lo: entered allmulticast mode
[  584.506273][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  584.534140][T22164] lo: left allmulticast mode
[  584.539428][T22169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.559791][T22169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.655986][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  584.765796][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  585.399405][T22218] nbd: must specify a size in bytes for the device
[  586.513780][T22255] lo speed is unknown, defaulting to 1000
[  586.523738][T22260] __nla_validate_parse: 12 callbacks suppressed
[  586.523759][T22260] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4216'.
[  586.532498][T22255] lo speed is unknown, defaulting to 1000
[  586.548309][T22260] batadv_slave_1: entered promiscuous mode
[  586.762003][T22264] netlink: 'syz.3.4217': attribute type 4 has an invalid length.
[  586.786363][T22264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4217'.
[  587.704793][T21048] net_ratelimit: 25 callbacks suppressed
[  587.704814][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  587.830126][T22290] dummy0: left allmulticast mode
[  587.846465][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  587.968446][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  588.097679][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  588.252530][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  588.425884][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  588.453369][T22305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  588.556167][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  588.647738][T22305] tipc: Disabling bearer <eth:syzkaller0>
[  588.688179][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  588.836558][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  589.136090][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  589.177848][T22330] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  589.514867][T22334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'.
[  589.721917][   T30] audit: type=1800 audit(1753777550.772:12): pid=22325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4233" name="memory.events" dev="tmpfs" ino=1205 res=0 errno=0
[  589.743444][T22339] netlink: 'syz.4.4239': attribute type 3 has an invalid length.
[  589.774468][T22339] netlink: 'syz.4.4239': attribute type 1 has an invalid length.
[  589.797908][T22339] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4239'.
[  590.590521][T22375] lo speed is unknown, defaulting to 1000
[  590.599268][T22375] lo speed is unknown, defaulting to 1000
[  590.602374][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4246'.
[  591.425415][T22402] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000
[  591.454161][T22402] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000
[  591.574274][T22408] macsec1: entered promiscuous mode
[  591.587752][T22408] macvlan1: entered promiscuous mode
[  591.593500][T22408] macsec1: entered allmulticast mode
[  591.599838][T22408] macvlan1: entered allmulticast mode
[  591.632984][T22408] macvlan1: left allmulticast mode
[  591.639606][T22408] macvlan1: left promiscuous mode
[  592.403167][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'.
[  592.412456][T22438] netlink: 'syz.0.4262': attribute type 10 has an invalid length.
[  592.727544][T21052] net_ratelimit: 20 callbacks suppressed
[  592.727566][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  592.786561][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'.
[  592.856942][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  592.978094][T22456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4270'.
[  593.035420][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4272'.
[  593.044679][T22461] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4272'.
[  593.082091][T22461] vlan2: entered allmulticast mode
[  593.097929][T22461] veth1: entered allmulticast mode
[  593.122464][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  593.258158][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  593.497470][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  593.630495][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  593.696361][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4278'.
[  593.773765][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  593.813515][T22487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4281'.
[  593.856913][T22486] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  593.936409][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  594.047341][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  594.277149][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  594.658386][T22528] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  594.725202][T22532] netlink: 'syz.2.4297': attribute type 1 has an invalid length.
[  594.744969][T22532] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4297'.
[  594.872561][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'.
[  594.926823][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'.
[  594.992450][T22536] netlink: 'syz.1.4300': attribute type 12 has an invalid length.
[  595.022306][T22536] netlink: 'syz.1.4300': attribute type 11 has an invalid length.
[  595.314408][T22571] netlink: 'syz.1.4307': attribute type 1 has an invalid length.
[  595.527031][T22577] veth5: entered promiscuous mode
[  595.654034][T22582] bpq0: entered promiscuous mode
[  595.685630][T22582] bpq0: entered allmulticast mode
[  595.703018][T22593] netlink: 'syz.3.4313': attribute type 4 has an invalid length.
[  595.893325][T22600] netlink: 'syz.0.4314': attribute type 1 has an invalid length.
[  596.792208][T22628] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  597.827373][T12295] net_ratelimit: 21 callbacks suppressed
[  597.827397][T12295] bond0: (slave erspan0): failed to get link speed/duplex
[  597.868188][T22692] __nla_validate_parse: 6 callbacks suppressed
[  597.868235][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4339'.
[  597.958660][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  598.097053][ T1158] bond0: (slave erspan0): failed to get link speed/duplex
[  598.227967][T12295] bond0: (slave erspan0): failed to get link speed/duplex
[  598.362186][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'.
[  598.422650][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'.
[  598.552823][T22715] netlink: 'syz.0.4343': attribute type 2 has an invalid length.
[  598.576401][T22715] netlink: 'syz.0.4343': attribute type 1 has an invalid length.
[  598.667404][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  598.792186][T22726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.828149][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  598.924019][T22738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4348'.
[  598.938228][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  599.006033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.106501][ T7133] bond0: (slave erspan0): failed to get link speed/duplex
[  599.172061][T22747] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4353'.
[  599.209459][T22751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4354'.
[  599.240032][T22751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4354'.
[  599.314826][T22754] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  599.331870][T22756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4355'.
[  599.341685][T22754] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  599.367060][T22754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4357'.
[  599.429992][T22756] lo speed is unknown, defaulting to 1000
[  599.464587][T22756] lo speed is unknown, defaulting to 1000
[  599.553330][T22767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.116949][T22755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.137317][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4365'.
[  600.262023][T22794] netlink: 'syz.3.4367': attribute type 21 has an invalid length.
[  600.275270][T22795] veth1_to_team: entered promiscuous mode
[  600.282784][T22795] veth1_to_team: entered allmulticast mode
[  600.290340][T22794] netlink: 'syz.3.4367': attribute type 4 has an invalid length.
[  600.300030][T22794] netlink: 'syz.3.4367': attribute type 5 has an invalid length.
[  600.429028][T22800] syzkaller1: entered promiscuous mode
[  600.434649][T22800] syzkaller1: entered allmulticast mode
[  601.236685][T22835] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  602.334535][T22894] batadv1: entered allmulticast mode
[  602.357379][T22894] 8021q: adding VLAN 0 to HW filter on device batadv1
[  602.604301][T22915] netlink: 'syz.1.4404': attribute type 1 has an invalid length.
[  602.653906][T22915] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  602.907897][   T37] net_ratelimit: 33 callbacks suppressed
[  602.907919][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  603.007199][T22923] lo speed is unknown, defaulting to 1000
[  603.047502][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  603.067624][T22923] lo speed is unknown, defaulting to 1000
[  603.176500][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  603.403174][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  603.519112][T22947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.539524][ T7133] bond0: (slave erspan0): failed to get link speed/duplex
[  603.759965][T22950] lo speed is unknown, defaulting to 1000
[  603.769548][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  603.907716][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  603.936363][T22950] lo speed is unknown, defaulting to 1000
[  604.103012][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  604.308095][T21052] bond0: (slave erspan0): failed to get link speed/duplex
[  604.327098][T22964] netlink: 'syz.4.4416': attribute type 9 has an invalid length.
[  604.345815][T22964] netlink: 'syz.4.4416': attribute type 6 has an invalid length.
[  604.353617][T22964] netlink: 'syz.4.4416': attribute type 7 has an invalid length.
[  604.392415][T22964] netlink: 'syz.4.4416': attribute type 8 has an invalid length.
[  604.479821][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  604.531260][T22969] bpq0: left promiscuous mode
[  604.536426][T22969] bpq0: left allmulticast mode
[  605.481269][T22990] vlan0: entered promiscuous mode
[  605.543043][T22989] lo speed is unknown, defaulting to 1000
[  605.581616][T22989] lo speed is unknown, defaulting to 1000
[  605.845789][T22995] lo speed is unknown, defaulting to 1000
[  605.917525][T22995] lo speed is unknown, defaulting to 1000
[  606.163763][T23010] __nla_validate_parse: 13 callbacks suppressed
[  606.163786][T23010] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4427'.
[  607.004197][T23019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.040467][T23034] FAULT_INJECTION: forcing a failure.
[  607.040467][T23034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  607.096621][T23034] CPU: 0 UID: 0 PID: 23034 Comm: syz.0.4435 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) 
[  607.096656][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  607.096670][T23034] Call Trace:
[  607.096679][T23034]  <TASK>
[  607.096689][T23034]  dump_stack_lvl+0x189/0x250
[  607.096720][T23034]  ? __pfx____ratelimit+0x10/0x10
[  607.096755][T23034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  607.096779][T23034]  ? __pfx__printk+0x10/0x10
[  607.096822][T23034]  should_fail_ex+0x414/0x560
[  607.096864][T23034]  _copy_to_user+0x31/0xb0
[  607.096897][T23034]  simple_read_from_buffer+0xe1/0x170
[  607.096932][T23034]  proc_fail_nth_read+0x1df/0x250
[  607.096970][T23034]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  607.097007][T23034]  ? rw_verify_area+0x258/0x650
[  607.097041][T23034]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  607.097074][T23034]  vfs_read+0x200/0x980
[  607.097106][T23034]  ? __pfx___mutex_lock+0x10/0x10
[  607.097129][T23034]  ? __pfx_vfs_read+0x10/0x10
[  607.097159][T23034]  ? __fget_files+0x2a/0x420
[  607.097195][T23034]  ? __fget_files+0x3a0/0x420
[  607.097226][T23034]  ? __fget_files+0x2a/0x420
[  607.097265][T23034]  ksys_read+0x145/0x250
[  607.097295][T23034]  ? __pfx_ksys_read+0x10/0x10
[  607.097328][T23034]  ? rcu_is_watching+0x15/0xb0
[  607.097358][T23034]  ? do_syscall_64+0xbe/0x3b0
[  607.097383][T23034]  do_syscall_64+0xfa/0x3b0
[  607.097403][T23034]  ? lockdep_hardirqs_on+0x9c/0x150
[  607.097422][T23034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.097442][T23034]  ? clear_bhb_loop+0x60/0xb0
[  607.097468][T23034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.097488][T23034] RIP: 0033:0x7f11f638d3bc
[  607.097507][T23034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  607.097526][T23034] RSP: 002b:00007f11f7118030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  607.097549][T23034] RAX: ffffffffffffffda RBX: 00007f11f65b5fa0 RCX: 00007f11f638d3bc
[  607.097564][T23034] RDX: 000000000000000f RSI: 00007f11f71180a0 RDI: 0000000000000004
[  607.097577][T23034] RBP: 00007f11f7118090 R08: 0000000000000000 R09: 0000000000000000
[  607.097590][T23034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  607.097602][T23034] R13: 0000000000000000 R14: 00007f11f65b5fa0 R15: 00007ffc6925bbe8
[  607.097636][T23034]  </TASK>
[  607.501722][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4436'.
[  607.810982][T23044] xfrm1: entered promiscuous mode
[  607.816415][T23044] xfrm1: entered allmulticast mode
[  607.822211][T23035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4433'.
[  607.988510][T23019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.166953][T21041] net_ratelimit: 12 callbacks suppressed
[  608.166976][T21041] bond0: (slave erspan0): failed to get link speed/duplex
[  608.252016][T23019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.282337][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'.
[  608.293370][T23058] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  608.425298][T23019] batman_adv: batadv0: Removing interface: netdevsim0
[  608.443013][T23019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.486544][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  608.503421][T23060] vxcan4: entered promiscuous mode
[  608.616680][T21041] bond0: (slave erspan0): failed to get link speed/duplex
[  608.855407][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.941726][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.974246][T21041] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.044168][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.106554][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  609.141859][T23070] lo speed is unknown, defaulting to 1000
[  609.173374][T23070] lo speed is unknown, defaulting to 1000
[  609.248198][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  609.269624][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'.
[  609.367074][T21041] bond0: (slave erspan0): failed to get link speed/duplex
[  609.476331][T21041] bond0: (slave erspan0): failed to get link speed/duplex
[  609.485339][T23084] FAULT_INJECTION: forcing a failure.
[  609.485339][T23084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.536678][T23084] CPU: 0 UID: 0 PID: 23084 Comm: syz.3.4447 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) 
[  609.536710][T23084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  609.536724][T23084] Call Trace:
[  609.536732][T23084]  <TASK>
[  609.536742][T23084]  dump_stack_lvl+0x189/0x250
[  609.536771][T23084]  ? __pfx____ratelimit+0x10/0x10
[  609.536806][T23084]  ? __pfx_dump_stack_lvl+0x10/0x10
[  609.536828][T23084]  ? __pfx__printk+0x10/0x10
[  609.536856][T23084]  ? __might_fault+0xb0/0x130
[  609.536897][T23084]  should_fail_ex+0x414/0x560
[  609.536937][T23084]  _copy_from_user+0x2d/0xb0
[  609.536966][T23084]  __sys_bpf+0x1ed/0x860
[  609.537000][T23084]  ? __pfx___sys_bpf+0x10/0x10
[  609.537045][T23084]  ? ksys_write+0x22a/0x250
[  609.537074][T23084]  ? __pfx_ksys_write+0x10/0x10
[  609.537097][T23084]  ? rcu_is_watching+0x15/0xb0
[  609.537129][T23084]  __x64_sys_bpf+0x7c/0x90
[  609.537157][T23084]  do_syscall_64+0xfa/0x3b0
[  609.537178][T23084]  ? lockdep_hardirqs_on+0x9c/0x150
[  609.537197][T23084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.537217][T23084]  ? clear_bhb_loop+0x60/0xb0
[  609.537243][T23084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.537262][T23084] RIP: 0033:0x7fa1c578e9a9
[  609.537280][T23084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.537305][T23084] RSP: 002b:00007fa1c65fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  609.537328][T23084] RAX: ffffffffffffffda RBX: 00007fa1c59b5fa0 RCX: 00007fa1c578e9a9
[  609.537344][T23084] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  609.537357][T23084] RBP: 00007fa1c65fc090 R08: 0000000000000000 R09: 0000000000000000
[  609.537369][T23084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.537381][T23084] R13: 0000000000000000 R14: 00007fa1c59b5fa0 R15: 00007ffc47537dd8
[  609.537415][T23084]  </TASK>
[  609.789702][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  609.906727][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'.
[  610.257616][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  610.621622][T23107] macsec1: entered promiscuous mode
[  610.628970][T23107] macsec1: entered allmulticast mode
[  610.770982][T23109] syzkaller0: entered promiscuous mode
[  610.777897][T23109] syzkaller0: entered allmulticast mode
[  610.956594][T23116] FAULT_INJECTION: forcing a failure.
[  610.956594][T23116] name failslab, interval 1, probability 0, space 0, times 0
[  610.995299][T23116] CPU: 1 UID: 0 PID: 23116 Comm: syz.4.4459 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) 
[  610.995331][T23116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  610.995344][T23116] Call Trace:
[  610.995352][T23116]  <TASK>
[  610.995361][T23116]  dump_stack_lvl+0x189/0x250
[  610.995391][T23116]  ? __pfx____ratelimit+0x10/0x10
[  610.995435][T23116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  610.995459][T23116]  ? __pfx__printk+0x10/0x10
[  610.995496][T23116]  ? __pfx___might_resched+0x10/0x10
[  610.995518][T23116]  ? fs_reclaim_acquire+0x7d/0x100
[  610.995553][T23116]  should_fail_ex+0x414/0x560
[  610.995592][T23116]  should_failslab+0xa8/0x100
[  610.995623][T23116]  __kmalloc_noprof+0xcb/0x4f0
[  610.995694][T23116]  ? bpf_test_init+0xc2/0x170
[  610.995720][T23116]  bpf_test_init+0xc2/0x170
[  610.995744][T23116]  bpf_prog_test_run_skb+0x1e9/0x1560
[  610.995762][T23116]  ? __fget_files+0x2a/0x420
[  610.995795][T23116]  ? __fget_files+0x2a/0x420
[  610.995832][T23116]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  610.995855][T23116]  bpf_prog_test_run+0x2c7/0x340
[  610.995890][T23116]  __sys_bpf+0x4a4/0x860
[  610.995922][T23116]  ? __pfx___sys_bpf+0x10/0x10
[  610.995964][T23116]  ? ksys_write+0x22a/0x250
[  610.995993][T23116]  ? __pfx_ksys_write+0x10/0x10
[  610.996015][T23116]  ? rcu_is_watching+0x15/0xb0
[  610.996045][T23116]  __x64_sys_bpf+0x7c/0x90
[  610.996071][T23116]  do_syscall_64+0xfa/0x3b0
[  610.996088][T23116]  ? lockdep_hardirqs_on+0x9c/0x150
[  610.996106][T23116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.996124][T23116]  ? clear_bhb_loop+0x60/0xb0
[  610.996148][T23116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.996166][T23116] RIP: 0033:0x7f9a48b8e9a9
[  610.996184][T23116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  610.996202][T23116] RSP: 002b:00007f9a499f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  610.996224][T23116] RAX: ffffffffffffffda RBX: 00007f9a48db5fa0 RCX: 00007f9a48b8e9a9
[  610.996240][T23116] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  610.996253][T23116] RBP: 00007f9a499f0090 R08: 0000000000000000 R09: 0000000000000000
[  610.996266][T23116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.996278][T23116] R13: 0000000000000000 R14: 00007f9a48db5fa0 R15: 00007ffdf2dba778
[  610.996310][T23116]  </TASK>
[  611.241107][   T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  611.561163][T23121] veth6: entered allmulticast mode
[  611.844420][T23134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4463'.
[  613.697047][T21048] net_ratelimit: 4 callbacks suppressed
[  613.697069][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  613.856388][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  614.007494][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  614.155797][T12295] bond0: (slave erspan0): failed to get link speed/duplex
[  614.286706][T12295] bond0: (slave erspan0): failed to get link speed/duplex
[  614.333512][T23168] batadv_slave_1: entered promiscuous mode
[  614.368854][T23169] netlink: 'syz.3.4473': attribute type 3 has an invalid length.
[  614.409994][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  614.422332][T23168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4474'.
[  614.439809][T23166] batadv_slave_1: left promiscuous mode
[  614.547046][   T13] bond0: (slave erspan0): failed to get link speed/duplex
[  614.564385][T23177] FAULT_INJECTION: forcing a failure.
[  614.564385][T23177] name failslab, interval 1, probability 0, space 0, times 0
[  614.580076][T23177] CPU: 0 UID: 0 PID: 23177 Comm: syz.0.4477 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) 
[  614.580132][T23177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  614.580146][T23177] Call Trace:
[  614.580155][T23177]  <TASK>
[  614.580164][T23177]  dump_stack_lvl+0x189/0x250
[  614.580195][T23177]  ? __pfx____ratelimit+0x10/0x10
[  614.580316][T23177]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.580341][T23177]  ? __pfx__printk+0x10/0x10
[  614.580382][T23177]  ? __pfx___might_resched+0x10/0x10
[  614.580417][T23177]  ? fs_reclaim_acquire+0x7d/0x100
[  614.580466][T23177]  should_fail_ex+0x414/0x560
[  614.580507][T23177]  should_failslab+0xa8/0x100
[  614.580540][T23177]  __kmalloc_noprof+0xcb/0x4f0
[  614.580567][T23177]  ? security_sk_alloc+0x52/0x390
[  614.580601][T23177]  security_sk_alloc+0x52/0x390
[  614.580632][T23177]  sk_prot_alloc+0x101/0x220
[  614.580655][T23177]  ? sk_alloc+0x24/0x370
[  614.580681][T23177]  sk_alloc+0x3a/0x370
[  614.580703][T23177]  ? bpf_ctx_init+0x167/0x1d0
[  614.580727][T23177]  bpf_prog_test_run_skb+0x2ed/0x1560
[  614.580748][T23177]  ? __fget_files+0x2a/0x420
[  614.580795][T23177]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  614.580818][T23177]  bpf_prog_test_run+0x2c7/0x340
[  614.580856][T23177]  __sys_bpf+0x4a4/0x860
[  614.580889][T23177]  ? __pfx___sys_bpf+0x10/0x10
[  614.580935][T23177]  ? ksys_write+0x22a/0x250
[  614.580965][T23177]  ? __pfx_ksys_write+0x10/0x10
[  614.580989][T23177]  ? rcu_is_watching+0x15/0xb0
[  614.581019][T23177]  __x64_sys_bpf+0x7c/0x90
[  614.581048][T23177]  do_syscall_64+0xfa/0x3b0
[  614.581074][T23177]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.581093][T23177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.581115][T23177]  ? clear_bhb_loop+0x60/0xb0
[  614.581141][T23177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.581162][T23177] RIP: 0033:0x7f11f638e9a9
[  614.581181][T23177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.581200][T23177] RSP: 002b:00007f11f7118038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  614.581223][T23177] RAX: ffffffffffffffda RBX: 00007f11f65b5fa0 RCX: 00007f11f638e9a9
[  614.581238][T23177] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  614.581252][T23177] RBP: 00007f11f7118090 R08: 0000000000000000 R09: 0000000000000000
[  614.581265][T23177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.581278][T23177] R13: 0000000000000000 R14: 00007f11f65b5fa0 R15: 00007ffc6925bbe8
[  614.581312][T23177]  </TASK>
[  614.839100][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  614.848571][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4478'.
[  614.961392][T21048] bond0: (slave erspan0): failed to get link speed/duplex
[  615.089480][T23188] tipc: Resetting bearer <eth:syzkaller0>
[  615.108210][T23188] syzkaller0: left promiscuous mode
[  615.248462][   T37] bond0: (slave erspan0): failed to get link speed/duplex
[  615.670513][T23206] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  615.689965][T23205] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  615.884480][T23223] netlink: 'syz.0.4496': attribute type 2 has an invalid length.
[  615.899982][T23224] netlink: 'syz.0.4496': attribute type 1 has an invalid length.
[  615.949769][T23219] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4494'.
[  615.996862][T23219] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4494'.
[  616.092698][T23219] syzkaller0: entered promiscuous mode
[  616.096141][T23232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4497'.
[  616.098636][T23219] syzkaller0: entered allmulticast mode
[  616.157766][T23233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4497'.
[  616.177765][T23229] netlink: 1360 bytes leftover after parsing attributes in process `syz.3.4494'.
[  616.210409][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4494'.
[  616.660860][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4500'.
[  618.727453][T21050] net_ratelimit: 13 callbacks suppressed
[  618.727474][T21050] bond0: (slave erspan0): failed to get link speed/duplex
[  618.778665][T23272] netlink: 'syz.0.4507': attribute type 1 has an invalid length.
[  618.855300][T23272] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  618.969239][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4512'.
[  618.982834][T23281] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  619.016298][T21041] bond0: (slave erspan0): failed to get link speed/duplex
[  619.042575][T23290] 8021q: adding VLAN 0 to HW filter on device bond5
[  619.050518][T12295] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  619.130278][T23272] veth13: entered promiscuous mode
[  619.151133][T23272] bond5: (slave veth13): Enslaving as a backup interface with a down link
[  619.191578][T23293] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  619.206954][T21048] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  619.227712][T23297] bond0: (slave erspan0): Releasing active interface
[  619.263622][T23297] veth0_to_bond: left allmulticast mode
[  619.270557][T23297] veth0_to_bond: left promiscuous mode
[  619.278357][T23297] bridge1: port 2(veth0_to_bond) entered disabled state
[  619.306599][T23297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  619.322761][T23297] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.412946][T23297] bond1: (slave wireguard0): Releasing backup interface
[  619.442816][T23297] wireguard0: left promiscuous mode
[  619.483750][T23297] veth3: left allmulticast mode
[  619.510564][T23297] veth3: left promiscuous mode
[  619.514268][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4514'.
[  619.656750][T23297] bridge1: port 1(veth3) entered disabled state
[  619.676296][T23297] bond0: (slave veth7): Releasing active interface
[  619.700518][T23297] bond2: (slave veth11): Releasing active interface
[  619.721258][T23297] bond5: (slave ip6gretap1): Removing an active aggregator
[  619.747486][T23297] bond5: (slave ip6gretap1): Releasing backup interface
[  619.754499][T23297] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 8a:1c:9e:66:a3:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  619.778899][T23297] bond5: (slave veth13): Releasing backup interface
[  619.822507][T23299] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  619.866594][T23302] netlink: 648 bytes leftover after parsing attributes in process `syz.1.4514'.
[  620.543240][T23340] netlink: 'syz.1.4525': attribute type 1 has an invalid length.
[  620.566837][T23340] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4525'.
[  621.120791][T23356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4530'.
[  621.151914][T23355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4530'.
[  621.170363][T23366] netlink: 'syz.2.4532': attribute type 1 has an invalid length.
[  621.374271][T23366] 8021q: adding VLAN 0 to HW filter on device bond2
[  621.426890][T23370] 8021q: adding VLAN 0 to HW filter on device bond2
[  621.434455][T23370] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  621.463806][T23370] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  621.729452][T23373] batadv_slave_1: entered promiscuous mode
[  621.736362][T23373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  621.792066][T23373] bond2: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  621.863120][T23367] lo speed is unknown, defaulting to 1000
[  621.907407][T23367] lo speed is unknown, defaulting to 1000
[  622.193503][T23390] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  622.330894][T23397] openvswitch: netlink: Key type 30 is not supported
[  622.524015][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4542'.
[  622.561117][T23410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  622.581604][T23410] syzkaller0: entered promiscuous mode
[  622.590315][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4542'.
[  622.610973][T23410] syzkaller0: entered allmulticast mode
[  622.817392][T23408] tipc: Resetting bearer <eth:syzkaller0>
[  622.902091][T23408] tipc: Disabling bearer <eth:syzkaller0>
[  623.354106][T23447] vlan0: entered allmulticast mode
[  623.374805][T23447] veth1: entered allmulticast mode
[  623.630394][T23456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4554'.
[  623.690540][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'.
[  623.905004][T23454] lo speed is unknown, defaulting to 1000
[  624.000846][T23454] lo speed is unknown, defaulting to 1000
[  624.927277][T23483] netlink: 'syz.4.4564': attribute type 12 has an invalid length.
[  625.730342][T23500] netlink: 'syz.0.4569': attribute type 2 has an invalid length.
[  626.067292][T23510] bond0: entered promiscuous mode
[  626.094810][T23510] batadv0: entered promiscuous mode
[  626.123634][T23510] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  626.158539][T23510] hsr1: entered allmulticast mode
[  626.163828][T23510] bond0: entered allmulticast mode
[  626.177288][T23510] batadv0: entered allmulticast mode
[  626.191606][T23517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4574'.
[  626.210724][T23510] 8021q: adding VLAN 0 to HW filter on device hsr1
[  626.228704][T23510] bond0: left promiscuous mode
[  626.237799][T23517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.276208][T23510] batadv0: left promiscuous mode
[  626.645432][T23522] netlink: 'syz.2.4577': attribute type 5 has an invalid length.
[  626.657341][T23524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4576'.
[  626.673179][T23522] netlink: 'syz.2.4577': attribute type 7 has an invalid length.
[  626.677703][T23524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4576'.
[  626.723483][T23522] : entered promiscuous mode
[  626.884635][T23532] netlink: 'syz.2.4579': attribute type 21 has an invalid length.
[  626.901802][T23532] netlink: 'syz.2.4579': attribute type 22 has an invalid length.
[  626.934698][T23532] netlink: 'syz.2.4579': attribute type 23 has an invalid length.
[  626.964907][T23532] netlink: 'syz.2.4579': attribute type 25 has an invalid length.
[  626.996540][T23532] netlink: 'syz.2.4579': attribute type 26 has an invalid length.
[  627.004414][T23532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4579'.
[  627.341555][T23555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4586'.
[  627.347528][T23552] ip6gretap2: entered promiscuous mode
[  627.357138][T23552] ip6gretap2: entered allmulticast mode
[  627.368705][T23545] veth1_macvtap: left promiscuous mode
[  627.410230][T23560] netlink: 'syz.0.4585': attribute type 1 has an invalid length.
[  627.442692][T23550] veth1_to_bond: entered allmulticast mode
[  627.452960][T23555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4586'.
[  627.504028][T23545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4582'.
[  627.650398][T23545] veth1_to_bond (unregistering): left allmulticast mode
[  627.699498][T23566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4587'.
[  627.732219][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4587'.
[  627.852677][T23573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4589'.
[  627.993262][T23584] netlink: 'syz.1.4592': attribute type 11 has an invalid length.
[  628.212205][T23599] netlink: 'syz.3.4595': attribute type 9 has an invalid length.
[  628.752302][T23625] lo speed is unknown, defaulting to 1000
[  628.769804][T23625] lo speed is unknown, defaulting to 1000
[  628.884066][T23635] syzkaller1: entered promiscuous mode
[  628.897915][T23635] syzkaller1: entered allmulticast mode
[  629.199983][T23642] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  631.009257][T23699] validate_nla: 2 callbacks suppressed
[  631.009280][T23699] netlink: 'syz.3.4626': attribute type 1 has an invalid length.
[  631.238316][T23720] lo speed is unknown, defaulting to 1000
[  631.288464][T23720] lo speed is unknown, defaulting to 1000
[  631.609076][T23734] __nla_validate_parse: 8 callbacks suppressed
[  631.609096][T23734] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4635'.
[  632.131357][T23750] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  632.163102][T23716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4631'.
[  632.169643][T23750] syzkaller0: entered promiscuous mode
[  632.178868][T23750] tipc: Resetting bearer <eth:syzkaller0>
[  632.204798][T23750] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  632.240928][T23750] syzkaller0: mtu less than device minimum
[  632.316603][T23757] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4643'.
[  632.454780][T23757] batadv_slave_1: entered promiscuous mode
[  632.511079][T23757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4643'.
[  632.522843][T23756] batadv_slave_1: left promiscuous mode
[  632.835452][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'.
[  633.242323][T23781] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4650'.
[  633.441437][T23788] netlink: 'syz.4.4652': attribute type 83 has an invalid length.
[  633.916937][T23810] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4658'.
[  634.226705][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4661'.
[  634.637614][T23838] delete_channel: no stack
[  634.722851][T23844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4666'.
[  635.136299][T23770] lo speed is unknown, defaulting to 1000
[  635.173426][T23770] lo speed is unknown, defaulting to 1000
[  635.174862][T23856] netlink: 'syz.4.4671': attribute type 2 has an invalid length.
[  635.280530][T23856] k›*·]‘: entered promiscuous mode
[  635.342915][T23858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.720261][T23877] sctp: [Deprecated]: syz.4.4675 (pid 23877) Use of int in max_burst socket option deprecated.
[  635.720261][T23877] Use struct sctp_assoc_value instead
[  635.921263][T23879] veth0_virt_wifi: renamed from veth0_vlan
[  635.935081][T23882] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4677'.
[  635.961555][T23882] rdma_rxe: rxe_newlink: failed to add lo
[  635.986554][T23882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  636.733836][T23912] __nla_validate_parse: 2 callbacks suppressed
[  636.733856][T23912] netlink: 270 bytes leftover after parsing attributes in process `syz.3.4686'.
[  636.790592][T23914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4686'.
[  637.171015][T23924] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  637.204786][T23924] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  637.762387][T23927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  637.890982][T23930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  638.112563][T23944] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4694'.
[  638.292641][T23941] IPVS: Scheduler module ip_vs_sip not found
[  638.310499][T23948] IPVS: length: 8 != 446622349272
[  638.322758][T23955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4696'.
[  638.509724][T23962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4699'.
[  638.723131][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4703'.
[  638.772295][T23971] syzkaller0: entered promiscuous mode
[  638.787942][T23970] netlink: 'syz.4.4703': attribute type 8 has an invalid length.
[  638.805884][T23971] syzkaller0: entered allmulticast mode
[  638.858305][T23971] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4700'.
[  639.227680][T23981] lo speed is unknown, defaulting to 1000
[  639.237178][T23981] lo speed is unknown, defaulting to 1000
[  639.541690][T23988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.615133][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4705'.
[  640.553578][T24020] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4713'.
[  640.815154][T24025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4715'.
[  641.042005][T24037] smc: net device bond0 erased user defined pnetid SYZ2
[  641.108022][T24034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.423588][T24054] delete_channel: no stack
[  641.890160][T24065] __nla_validate_parse: 2 callbacks suppressed
[  641.890183][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4725'.
[  641.914052][T24067] lo speed is unknown, defaulting to 1000
[  641.951770][T24067] lo speed is unknown, defaulting to 1000
[  642.279080][T24080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4731'.
[  642.354040][T24084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'.
[  642.496961][T24089] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  642.549301][T21052] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  642.728533][T24096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  642.750255][T24096] syzkaller0: entered promiscuous mode
[  642.757600][T24096] syzkaller0: entered allmulticast mode
[  642.923236][T24096] tipc: Resetting bearer <eth:syzkaller0>
[  642.971765][T24109] batadv1: entered promiscuous mode
[  643.025491][T24118] sock: sock_timestamping_bind_phc: sock not bind to device
[  643.132584][T24095] tipc: Resetting bearer <eth:syzkaller0>
[  643.177306][T24095] tipc: Disabling bearer <eth:syzkaller0>
[  643.214195][T24112] lo speed is unknown, defaulting to 1000
[  643.240110][T24112] lo speed is unknown, defaulting to 1000
[  643.355227][T24120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4742'.
[  643.808900][T24137] netlink: 'syz.4.4747': attribute type 9 has an invalid length.
[  643.839743][T24137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4747'.
[  643.923962][T24144] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4748'.
[  643.933009][T24137] hsr0: entered promiscuous mode
[  643.933219][T24137] macvlan0: entered promiscuous mode
[  643.933508][T24137] macvlan0: entered allmulticast mode
[  643.933533][T24137] hsr0: entered allmulticast mode
[  643.933546][T24137] hsr_slave_0: entered allmulticast mode
[  643.933562][T24137] hsr_slave_1: entered allmulticast mode
[  645.005061][T24175] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4756'.
[  645.056205][T24177] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4756'.
[  645.092531][T24182] bridge0: entered allmulticast mode
[  645.244857][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4760'.
[  645.281677][T24194] bridge0: entered allmulticast mode
[  645.305246][T24194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4760'.
[  645.344891][T24199] batadv_slave_1: left promiscuous mode
[  645.362865][T24199] 0·: left allmulticast mode
[  645.417802][T24199] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  645.487605][T24199] bond1: left promiscuous mode
[  645.521288][T24199] veth5: left promiscuous mode
[  645.644675][T24194] bridge0 (unregistering): left allmulticast mode
[  646.067306][T21048] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  646.090116][T21048] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  646.119832][T21048] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  646.204080][T21048] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  646.986442][T24265] netlink: 'syz.1.4778': attribute type 21 has an invalid length.
[  647.430047][T24288] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  647.590661][T24292] openvswitch: netlink: Unknown key attributes 2
[  647.620681][T24292] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  647.633867][T24292] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  647.730059][T24297] netlink: 'syz.0.4789': attribute type 13 has an invalid length.
[  647.744267][T24297] __nla_validate_parse: 4 callbacks suppressed
[  647.744288][T24297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4789'.
[  647.792151][T24299] netlink: 47 bytes leftover after parsing attributes in process `syz.2.4790'.
[  647.828764][T24297] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  647.887003][T24297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.911124][T24297] tipc: Resetting bearer <eth:syzkaller0>
[  648.392726][T24328] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  648.434088][T24328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4798'.
[  648.505781][T24333] netlink: 'syz.3.4800': attribute type 12 has an invalid length.
[  649.556642][T24360] netlink: 'syz.1.4810': attribute type 6 has an invalid length.
[  649.979813][T24366] tipc: Resetting bearer <eth:syzkaller0>
[  650.061269][T24374] netlink: 'syz.3.4815': attribute type 10 has an invalid length.
[  650.127402][   T10] lo speed is unknown, defaulting to 1000
[  650.134211][   T10] syz0: Port: 1 Link DOWN
[  650.164051][  T977] lo speed is unknown, defaulting to 1000
[  650.306475][T24382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4816'.
[  650.345396][T24384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  650.515319][T24387] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  650.858943][T24406] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  650.943247][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4824'.
[  651.446866][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'.
[  651.475218][T24434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4829'.
[  651.550214][T24434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4829'.
[  651.926696][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804c808c00: rx timeout, send abort
[  651.926763][  T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.933524][T24452] bond0: (slave wlan1): Releasing backup interface
[  651.979310][T24460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4836'.
[  652.045016][T24457] netlink: 'syz.3.4834': attribute type 13 has an invalid length.
[  652.078857][T24457] netlink: 'syz.3.4834': attribute type 17 has an invalid length.
[  652.151075][T24457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  652.170981][T24453] lo speed is unknown, defaulting to 1000
[  652.206533][T24453] lo speed is unknown, defaulting to 1000
[  652.223618][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'.
[  652.426814][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804c808800: rx timeout, send abort
[  652.436550][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804c808c00: abort rx timeout. Force session deactivation
[  652.591943][T24477] tipc: Cannot configure node identity twice
[  652.686588][  T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.935159][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804c808800: abort rx timeout. Force session deactivation
[  652.943558][T24486] syzkaller0: left promiscuous mode
[  652.970122][T24488] __nla_validate_parse: 2 callbacks suppressed
[  652.970145][T24488] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4846'.
[  652.991194][T24486] syzkaller0: left allmulticast mode
[  653.007433][T24486] tipc: Resetting bearer <eth:syzkaller0>
[  653.018181][T24488] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4846'.
[  653.037944][T24489] netem: incorrect gi model size
[  653.045981][T24489] netem: change failed
[  653.090693][T24488] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  653.196557][T24491] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4847'.
[  653.208247][T24491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  653.319868][T24494] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4848'.
[  653.354147][T24494] nbd: illegal input index 65508
[  653.399368][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4849'.
[  653.592657][T24505] Bluetooth: MGMT ver 1.23
[  653.723660][T24505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4850'.
[  654.129940][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'.
[  654.140147][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'.
[  654.531146][T24532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4857'.
[  654.548949][T24533] netlink: 'syz.3.4859': attribute type 3 has an invalid length.
[  654.626531][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.667959][T24535] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4858'.
[  655.356192][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.471487][T24576] 8021q: VLANs not supported on xfrm0
[  655.679865][T24590] syzkaller1: entered promiscuous mode
[  655.685418][T24590] syzkaller1: entered allmulticast mode
[  655.705227][T24592] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  656.744124][T24645] delete_channel: no stack
[  657.248649][T24667] netlink: 'syz.4.4896': attribute type 1 has an invalid length.
[  657.567919][T24675] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  657.856212][T24675] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  658.446290][T24694] __nla_validate_parse: 8 callbacks suppressed
[  658.446312][T24694] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4901'.
[  658.514889][T24696] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4902'.
[  658.817757][T24706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4905'.
[  659.089916][T24713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4908'.
[  659.522718][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4912'.
[  659.549430][T24738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4912'.
[  659.598970][T24742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  659.886134][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'.
[  659.918164][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4918'.
[  660.032236][T24761] lo speed is unknown, defaulting to 1000
[  660.097488][T24761] lo speed is unknown, defaulting to 1000
[  660.241136][T24782] netlink: 'syz.3.4924': attribute type 17 has an invalid length.
[  660.271597][T24782] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4924'.
[  660.296635][T24782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  660.385179][T24786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4925'.
[  660.460192][T24788] netlink: 'syz.4.4925': attribute type 1 has an invalid length.
[  660.657091][T24793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  661.638964][T24834] netlink: 'syz.1.4938': attribute type 1 has an invalid length.
[  661.847872][T24837] lo speed is unknown, defaulting to 1000
[  661.889639][T24837] lo speed is unknown, defaulting to 1000
[  662.460503][T24865] netlink: 'syz.1.4946': attribute type 4 has an invalid length.
[  663.419018][T24896] netlink: 'syz.1.4956': attribute type 1 has an invalid length.
[  663.548746][T24882] lo speed is unknown, defaulting to 1000
[  663.629297][T24882] lo speed is unknown, defaulting to 1000
[  664.321336][T24885] lo speed is unknown, defaulting to 1000
[  664.353307][T24885] lo speed is unknown, defaulting to 1000
[  664.682738][T24909] lo speed is unknown, defaulting to 1000
[  664.696480][T24909] lo speed is unknown, defaulting to 1000
[  664.739675][T24909] lo speed is unknown, defaulting to 1000
[  664.820645][T24909] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  664.989183][T24909] lo speed is unknown, defaulting to 1000
[  665.155742][T24909] lo speed is unknown, defaulting to 1000
[  665.189281][T24909] lo speed is unknown, defaulting to 1000
[  665.219704][T24909] lo speed is unknown, defaulting to 1000
[  665.245046][T24909] lo speed is unknown, defaulting to 1000
[  665.262592][T24909] lo speed is unknown, defaulting to 1000
[  665.287604][T24909] lo speed is unknown, defaulting to 1000
[  665.302497][T24909] lo speed is unknown, defaulting to 1000
[  665.401214][T24909] lo speed is unknown, defaulting to 1000
[  665.742393][T24955] __nla_validate_parse: 9 callbacks suppressed
[  665.742415][T24955] netlink: 352 bytes leftover after parsing attributes in process `syz.1.4970'.
[  665.787979][T24958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4970'.
[  666.060237][T24964] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4972'.
[  666.112812][T24968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4971'.
[  666.174791][T24962] bond0: entered promiscuous mode
[  666.184101][T24962] bond0: left promiscuous mode
[  667.929403][T25026] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4990'.
[  668.597717][T25059] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge
[  668.984164][T25079] block nbd3: not configured, cannot reconfigure
[  668.993060][T25079] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5003'.
[  669.112203][   T30] audit: type=1804 audit(1753777630.162:13): pid=25081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5005" name="/newroot/414/memory.events" dev="tmpfs" ino=2140 res=1 errno=0
[  669.132811][T25081] pimreg: entered allmulticast mode
[  669.139865][   T30] audit: type=1800 audit(1753777630.162:14): pid=25081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5005" name="memory.events" dev="tmpfs" ino=2140 res=0 errno=0
[  669.390552][T25096] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5007'.
[  669.644117][T25105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'.
[  669.676225][T25105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5011'.
[  669.891150][T25119] veth1: entered promiscuous mode
[  669.900261][T25119] netlink: 'syz.0.5017': attribute type 8 has an invalid length.
[  669.911603][T25119] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  670.007442][T25115] pim6reg1: entered promiscuous mode
[  670.022350][T25115] pim6reg1: entered allmulticast mode
[  670.337084][T25141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'.
[  670.362139][T25136] lo speed is unknown, defaulting to 1000
[  670.391190][T25136] lo speed is unknown, defaulting to 1000
[  670.923821][T25150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5025'.
[  671.147447][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5028'.
[  671.165938][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5027'.
[  671.298254][ T5858] Bluetooth: hci5: link tx timeout
[  671.303436][ T5858] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  671.350450][T25136] lo speed is unknown, defaulting to 1000
[  671.351199][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5027'.
[  671.375957][T25165] nbd: device at index 2 is going down
[  671.845348][T25175] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5031'.
[  671.900717][T25175] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  671.937259][T25175] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  672.344071][T25186] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  672.371169][ T7123] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  672.380903][ T7123] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  672.392212][T21052] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  672.407073][T21052] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  672.442970][T25190] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5035'.
[  672.461283][T25190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5035'.
[  672.585767][T25196] wireguard0: entered promiscuous mode
[  672.591450][T25196] wireguard0: entered allmulticast mode
[  672.854427][T25207] netlink: 'syz.3.5040': attribute type 3 has an invalid length.
[  672.864519][T25207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5040'.
[  672.994069][T25212] x_tables: ip_tables: udp match: only valid for protocol 17
[  673.023220][T25210] bridge0: entered allmulticast mode
[  673.059920][T25214] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.074841][T25214] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.131514][T25215] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  673.161696][T25214] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.190039][T25214] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.312807][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  673.317915][T25214] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.332137][ T5858] Bluetooth: hci5: command 0x0406 tx timeout
[  673.385447][T25214] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.434308][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  673.474554][T25227] bond0: entered promiscuous mode
[  673.488197][T25227] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  673.537907][T25227] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  673.565923][T25227] hsr1: entered allmulticast mode
[  673.571085][T25227] bond0: entered allmulticast mode
[  673.600472][T25227] 8021q: adding VLAN 0 to HW filter on device hsr1
[  673.608712][T25227] bond0: left promiscuous mode
[  673.689723][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  673.710252][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  673.801385][T25214] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.813433][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  673.821478][T25214] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.928054][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  673.951187][T25236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5050'.
[  673.971281][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  674.046742][T25223] netlink: 'syz.4.5045': attribute type 9 has an invalid length.
[  674.074339][T21048] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  674.101308][T21048] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.157680][T12295] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  674.177064][T12295] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.244548][ T7123] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  674.253045][ T7123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.302146][ T7123] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  674.313050][ T7123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.378559][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5052'.
[  674.406876][T25248] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  675.019990][T25279] validate_nla: 1 callbacks suppressed
[  675.020011][T25279] netlink: 'syz.2.5061': attribute type 29 has an invalid length.
[  676.294873][T25318] netlink: 'syz.4.5073': attribute type 13 has an invalid length.
[  676.364786][T25321] netlink: 'syz.3.5074': attribute type 27 has an invalid length.
[  677.141084][T21048] bond0 (unregistering): Released all slaves
[  677.160825][T21048] bond1 (unregistering): Released all slaves
[  677.177104][T21048] bond2 (unregistering): Released all slaves
[  677.192995][T21048] bond3 (unregistering): Released all slaves
[  677.529744][T25339] netlink: 'syz.2.5078': attribute type 1 has an invalid length.
[  677.538787][T25339] __nla_validate_parse: 5 callbacks suppressed
[  677.538809][T25339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5078'.
[  677.559222][T25339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5078'.
[  677.646055][T18628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.673968][T21048] tipc: Disabling bearer <eth:syzkaller0>
[  677.686606][T21048] tipc: Left network mode
[  677.735433][T25341] batman_adv: batadv0: Adding interface: macvlan2
[  677.743584][T25341] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.797049][T25341] batman_adv: batadv0: Interface activated: macvlan2
[  678.083653][T25353] lo speed is unknown, defaulting to 1000
[  678.096104][T18628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.102813][T25353] lo speed is unknown, defaulting to 1000
[  678.624371][T25376] lo speed is unknown, defaulting to 1000
[  679.057185][T25376] lo speed is unknown, defaulting to 1000
[  679.262731][T25399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'.
[  679.275631][T25399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5095'.
[  679.380093][T25401] hsr0: entered allmulticast mode
[  679.392465][T25401] hsr_slave_0: entered allmulticast mode
[  679.413479][T25401] hsr_slave_1: entered allmulticast mode
[  679.613582][T25411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5100'.
[  679.754379][T25372] netlink: 'syz.0.5089': attribute type 4 has an invalid length.
[  679.820046][  T977] lo speed is unknown, defaulting to 1000
[  679.827701][  T977] syz0: Port: 1 Link ACTIVE
[  679.841405][T18631] lo speed is unknown, defaulting to 1000
[  679.883781][T25376] lo speed is unknown, defaulting to 1000
[  679.978170][T25353] lo speed is unknown, defaulting to 1000
[  680.024458][T25425] lo speed is unknown, defaulting to 1000
[  680.088823][T25425] lo speed is unknown, defaulting to 1000
[  680.413330][T25440] netlink: 'syz.2.5106': attribute type 12 has an invalid length.
[  680.533084][T21048] hsr_slave_0: left promiscuous mode
[  680.620446][T21048] batadv0: left allmulticast mode
[  680.643263][T21048] batadv0: left promiscuous mode
[  680.650057][T21048] veth1_macvtap: left promiscuous mode
[  680.666875][T21048] veth0_macvtap: left promiscuous mode
[  681.701873][T18628] lo speed is unknown, defaulting to 1000
[  681.702185][T25425] lo speed is unknown, defaulting to 1000
[  681.714957][T18628] syz1: Port: 1 Link DOWN
[  681.931433][T25453] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002
[  682.142548][T25455] syz_tun: entered promiscuous mode
[  682.170304][T25455] syz_tun: left promiscuous mode
[  682.563930][T21048] IPVS: stop unused estimator thread 0...
[  682.659408][T25465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5113'.
[  682.924317][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5114'.
[  683.073136][T25476] syzkaller0: entered promiscuous mode
[  683.079065][T25476] syzkaller0: entered allmulticast mode
[  683.302973][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'.
[  683.621508][T25498] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5123'.
[  683.650637][T25498] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5123'.
[  684.451882][T25539] netlink: 'syz.1.5133': attribute type 1 has an invalid length.
[  684.521879][T25539] 8021q: adding VLAN 0 to HW filter on device bond7
[  684.557670][T25543] bridge0: port 3(veth0_to_bridge) entered blocking state
[  684.587464][T25543] bridge0: port 3(veth0_to_bridge) entered disabled state
[  684.612111][T25543] veth0_to_bridge: entered allmulticast mode
[  684.657382][T25543] veth0_to_bridge: entered promiscuous mode
[  684.679393][T25557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'.
[  684.708185][T25550] netlink: 4208 bytes leftover after parsing attributes in process `syz.2.5134'.
[  686.081979][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5146'.
[  686.120691][T25584] dummy0: entered promiscuous mode
[  686.179021][T25584] dummy0: left promiscuous mode
[  686.458760][T25594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5149'.
[  686.554403][T25599] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  686.903243][T25618] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  687.019068][T25624] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  687.151514][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5164'.
[  687.834536][T25664] netlink: 'syz.4.5174': attribute type 21 has an invalid length.
[  687.852581][T25664] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5174'.
[  687.901321][T25664] netlink: 'syz.4.5174': attribute type 5 has an invalid length.
[  687.923726][T25664] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5174'.
[  687.987796][T25664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5174'.
[  688.077793][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5175'.
[  688.146748][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5175'.
[  688.252532][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5177'.
[  688.297088][T25673] lo speed is unknown, defaulting to 1000
[  688.312525][T25685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5177'.
[  688.339840][T25685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5177'.
[  688.676043][T25696] batman_adv: batadv0: Interface deactivated: macvlan2
[  688.763256][T21050] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  688.813430][T25703] pim6reg: entered allmulticast mode
[  688.829761][T25698] pim6reg: left allmulticast mode
[  688.909564][T21050] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  689.022820][T25673] lo speed is unknown, defaulting to 1000
[  689.031508][T21050] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  689.062261][T21050] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  689.465212][T25727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5192'.
[  689.694183][T25735] bridge2: entered promiscuous mode
[  689.715610][T25735] bridge2: entered allmulticast mode
[  689.724726][T25735] team0: Port device bridge2 added
[  690.167525][T25745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5198'.
[  690.485422][T25759] sctp: [Deprecated]: syz.0.5202 (pid 25759) Use of int in maxseg socket option.
[  690.485422][T25759] Use struct sctp_assoc_value instead
[  691.010199][T25789] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  691.198700][T25793] bridge0: port 1(batadv1) entered blocking state
[  691.205879][T25793] bridge0: port 1(batadv1) entered disabled state
[  691.228623][T25793] batadv1: entered allmulticast mode
[  691.284627][T25793] batadv1: entered promiscuous mode
[  691.401241][ T7128] macsec0: left allmulticast mode
[  691.421697][ T7128] macsec0: left promiscuous mode
[  691.443280][ T7128] bridge0: port 1(macsec0) entered disabled state
[  691.632719][T21050] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  691.643376][T21050] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  691.754692][ T7128] bond8 (unregistering): (slave ip6gretap3): Releasing backup interface
[  691.978805][ T7128] bond7 (unregistering): (slave gretap3): Releasing backup interface
[  692.068705][ T7128] dvmrp0 (unregistering): left allmulticast mode
[  692.136255][ T7128] team0: Port device geneve0 removed
[  692.540613][ T7128] tipc: Disabling bearer <eth:syzkaller0>
[  692.589347][ T7128] bond3 (unregistering): (slave bridge6): Releasing active interface
[  692.963738][ T7128] bond0 (unregistering): Released all slaves
[  693.104748][ T7128] bond1 (unregistering): Released all slaves
[  693.122728][ T7128] bond2 (unregistering): Released all slaves
[  693.140771][ T7128] bond3 (unregistering): Released all slaves
[  693.158219][ T7128] bond4 (unregistering): Released all slaves
[  693.314487][ T7128] team0: Port device bond5 removed
[  693.321682][ T7128] bond5 (unregistering): Released all slaves
[  693.462492][ T7128] team0: Port device bond6 removed
[  693.469735][ T7128] bond6 (unregistering): Released all slaves
[  693.616263][ T7128] bond7 (unregistering): Released all slaves
[  693.633377][ T7128] bond8 (unregistering): Released all slaves
[  693.773810][ T7128] bond9 (unregistering): Released all slaves
[  693.811347][T25822] vti0: entered promiscuous mode
[  693.821618][T25826] 8021q: adding VLAN 0 to HW filter on device bond0
[  694.323528][T25848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  694.356181][T25848] syzkaller0: entered promiscuous mode
[  694.393565][T25848] syzkaller0: entered allmulticast mode
[  694.475284][T25856] netlink: 'syz.3.5232': attribute type 1 has an invalid length.
[  694.564669][T25856] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  694.635705][T25848] tipc: Resetting bearer <eth:syzkaller0>
[  694.662373][T25847] tipc: Resetting bearer <eth:syzkaller0>
[  694.717563][T25847] tipc: Disabling bearer <eth:syzkaller0>
[  694.739426][T25868] __nla_validate_parse: 5 callbacks suppressed
[  694.739447][T25868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5232'.
[  694.764591][T25862] 8021q: adding VLAN 0 to HW filter on device bond5
[  694.778354][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  694.873510][T25856] veth9: entered promiscuous mode
[  694.902866][T25856] bond5: (slave veth9): Enslaving as a backup interface with a down link
[  694.917237][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  695.247339][T25893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5241'.
[  695.291156][T25886] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5239'.
[  695.588963][ T7128] tipc: Disabling bearer <eth:team0>
[  695.612274][ T7128] tipc: Left network mode
[  695.644871][T25906] netlink: 'syz.4.5244': attribute type 13 has an invalid length.
[  695.710388][ T7128] IPVS: stopping backup sync thread 15819 ...
[  696.146311][T25917] block nbd1: server does not support multiple connections per device.
[  696.173421][T25917] block nbd1: shutting down sockets
[  696.192217][T25906] hsr0: left allmulticast mode
[  696.202578][T25906] hsr_slave_0: left allmulticast mode
[  696.229884][ T7135] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.239524][ T7135] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.248598][ T7135] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.268493][T12296] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.316841][T25918] block nbd1: server does not support multiple connections per device.
[  696.326036][T25918] block nbd1: shutting down sockets
[  696.448653][T25927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5249'.
[  696.593226][T25927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5249'.
[  697.203156][T25961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5257'.
[  697.650651][ T7128] hsr_slave_0: left promiscuous mode
[  697.661338][ T7128] 1·: left promiscuous mode
[  697.913434][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5265'.
[  698.031974][T12297] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  698.043939][T12297] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  698.053544][T12297] CPU: 0 UID: 0 PID: 12297 Comm: kworker/u8:23 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) 
[  698.065997][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  698.076096][T12297] Workqueue: kvfree_rcu_reclaim kfree_rcu_monitor
[  698.082563][T12297] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  698.088397][T12297] Code: 01 48 c7 c7 e0 3d 98 8b be 4b 03 00 00 48 c7 c2 20 3e 98 8b e8 74 8a 73 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a4 5c f7 ff 49 8b 07 a8 03 75 62
[  698.108042][T12297] RSP: 0018:ffffc9001b6977c8 EFLAGS: 00010206
[  698.114129][T12297] RAX: 000000001fffe000 RBX: ffffffff822adaa9 RCX: 4773894076b33a00
[  698.122120][T12297] RDX: 0000000000000000 RSI: ffffffff8be28ce0 RDI: ffffffff8be28ca0
[  698.130125][T12297] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff822adaa9
[  698.138117][T12297] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: dffffc0000000000
[  698.146105][T12297] R13: ffff8880b863b500 R14: 0000000000000001 R15: 00000000ffff0000
[  698.154097][T12297] FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
[  698.163052][T12297] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  698.169667][T12297] CR2: 00007f955806cf98 CR3: 00000000118fc000 CR4: 00000000003526f0
[  698.177683][T12297] Call Trace:
[  698.180983][T12297]  <TASK>
[  698.183927][T12297]  refill_obj_stock+0x254/0x850
[  698.188797][T12297]  ? refill_obj_stock+0x116/0x850
[  698.193844][T12297]  __memcg_slab_free_hook+0x127/0x3d0
[  698.199236][T12297]  kmem_cache_free_bulk+0x46e/0x520
[  698.204483][T12297]  ? kvfree_rcu_bulk+0xe5/0x1f0
[  698.209362][T12297]  ? kvfree_rcu_bulk+0x6d/0x1f0
[  698.214227][T12297]  kvfree_rcu_bulk+0xe5/0x1f0
[  698.218919][T12297]  kfree_rcu_monitor+0x211/0x2a0
[  698.223873][T12297]  ? process_scheduled_works+0x9ef/0x17b0
[  698.229611][T12297]  ? process_scheduled_works+0x9ef/0x17b0
[  698.235340][T12297]  process_scheduled_works+0xae1/0x17b0
[  698.240914][T12297]  ? __pfx_process_scheduled_works+0x10/0x10
[  698.246914][T12297]  worker_thread+0x8a0/0xda0
[  698.251528][T12297]  kthread+0x70e/0x8a0
[  698.255630][T12297]  ? __pfx_worker_thread+0x10/0x10
[  698.260758][T12297]  ? __pfx_kthread+0x10/0x10
[  698.265367][T12297]  ? _raw_spin_unlock_irq+0x23/0x50
[  698.270586][T12297]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.275789][T12297]  ? __pfx_kthread+0x10/0x10
[  698.280397][T12297]  ret_from_fork+0x3fc/0x770
[  698.285001][T12297]  ? __pfx_ret_from_fork+0x10/0x10
[  698.290139][T12297]  ? __switch_to_asm+0x39/0x70
[  698.294931][T12297]  ? __switch_to_asm+0x33/0x70
[  698.299716][T12297]  ? __pfx_kthread+0x10/0x10
[  698.304333][T12297]  ret_from_fork_asm+0x1a/0x30
[  698.309121][T12297]  </TASK>
[  698.312158][T12297] Modules linked in:
[  698.318631][T12297] ---[ end trace 0000000000000000 ]---
[  698.324143][T12297] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  698.330806][T12297] Code: 01 48 c7 c7 e0 3d 98 8b be 4b 03 00 00 48 c7 c2 20 3e 98 8b e8 74 8a 73 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a4 5c f7 ff 49 8b 07 a8 03 75 62
[  698.351298][T12297] RSP: 0018:ffffc9001b6977c8 EFLAGS: 00010206
[  698.358676][T12297] RAX: 000000001fffe000 RBX: ffffffff822adaa9 RCX: 4773894076b33a00
[  698.368027][T12297] RDX: 0000000000000000 RSI: ffffffff8be28ce0 RDI: ffffffff8be28ca0
[  698.377358][T12297] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff822adaa9
[  698.385387][T12297] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: dffffc0000000000
[  698.394661][T12297] R13: ffff8880b863b500 R14: 0000000000000001 R15: 00000000ffff0000
[  698.403989][T12297] FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
[  698.414328][T12297] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  698.422308][T12297] CR2: 00007f955806cf98 CR3: 00000000118fc000 CR4: 00000000003526f0
[  698.431702][T12297] Kernel panic - not syncing: Fatal exception
[  698.438207][T12297] Kernel Offset: disabled
[  698.442548][T12297] Rebooting in 86400 seconds..