last executing test programs:

1m7.45885936s ago: executing program 1 (id=1632):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x2)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095", @ANYRESHEX, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000014000180060000000000000000fdff130000200000000000"], 0xffd4}, 0x1, 0x0, 0x0, 0xc014}, 0x50)
accept4(r0, 0x0, &(0x7f0000000200), 0x80000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7300000010000100000000005ed6977a0000000a48000000060a010100000000000000000700000338000000050a00000000000000000000070000080900030073797a31000000000900010073797a30000000000900030073797a320000000098feffff1100010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x80)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
listen(r0, 0x2) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r0, 0xfffffffc) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095", @ANYRESHEX, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000014000180060000000000000000fdff130000200000000000"], 0xffd4}, 0x1, 0x0, 0x0, 0xc014}, 0x50) (async)
accept4(r0, 0x0, &(0x7f0000000200), 0x80000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7300000010000100000000005ed6977a0000000a48000000060a010100000000000000000700000338000000050a00000000000000000000070000080900030073797a31000000000900010073797a30000000000900030073797a320000000098feffff1100010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x80) (async)

1m6.795744208s ago: executing program 1 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x20000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30)

52.159445356s ago: executing program 1 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x20000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30)

39.872002001s ago: executing program 1 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x20000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30)

24.998516425s ago: executing program 1 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x20000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30)

12.604312415s ago: executing program 1 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x20000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30)

4.294520541s ago: executing program 4 (id=2268):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10)
r1 = socket(0x25, 0x80a, 0x86)
sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="8ad358ef2327416db162d047220efc6bb8d1d9c77cdff47d932948d1d3255f118367160e737098b8a8bbb367ced311162c04a4ac5299d003d4ab61102d89dc21521e6983e48a0bf3eafa5eee205780f2f3fd864a12887ea5587b1d24589e000f746b8d28c5e6536d35490427e82c2e2c3af59655215c17fdab877756a42e038495457922fee3853ca5e65f46fed5e709ab93cbeed21208a0cc44c8a4863f3ff55d7f", 0xa2}, {&(0x7f0000001380)="876b61050d13ecd5262922d19268ea623ed8387a559246b6d5c6abd9370ab03fce7dedbfc16e25cf77f3b5473255c18151751d81c6c7f2346d17788e0bba", 0x3e}], 0x3}, 0x4000)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001540)={'sit0\x00', &(0x7f00000014c0)={'ip_vti0\x00', <r3=>0x0, 0x7, 0x700, 0x2, 0xa, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x64, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@timestamp={0x44, 0x8, 0xdc, 0x0, 0x1, [0x8]}, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0x7, [{@empty, 0xd2}, {@multicast1, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}, {@remote, 0x6}, {@empty, 0x101}, {@rand_addr=0x64010102, 0x6}]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000001600)={&(0x7f0000001480), 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@deltclass={0x30, 0x29, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xc}, {0x6, 0x4}, {0x7, 0x3}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x68cb54fb8aa2a0e5)
close(r1)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000001640))
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r1)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r5, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080000}, 0x20)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000017c0)={0xa, 0x2, {0x800, @struct={0x8000, 0x9}, <r7=>0x0, 0x6a, 0x8, 0xb, 0x0, 0x2, 0x28, @struct={0xf321, 0x2cf}, 0x0, 0x7, [0x6, 0x1, 0x8, 0x1, 0x8, 0xffffffff]}, {0x7, @struct={0x5, 0x7}, 0x0, 0xfd, 0xd1, 0x7, 0xe255, 0x7, 0x0, @usage=0x6fd, 0x1, 0x8ec5, [0xf, 0x401, 0x3ff, 0x32917a72, 0x2, 0x2]}, {0x1, @usage=0x5, 0x0, 0x4, 0xeb3, 0x8, 0x7, 0x8000000000000000, 0x4, @struct={0x5, 0x2}, 0x3, 0xfffffff1, [0xfffffffffffffffe, 0x5, 0x4, 0x8001, 0x8bc, 0x9]}, {0xfffffffffffffff4, 0x1, 0x10000}})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x0, @usage=0x2, <r8=>0x0, 0x7, 0x970, 0x7fff, 0x8, 0x8, 0x0, @usage=0x6, 0x947, 0x18b, [0x2, 0x8, 0xcd63, 0xd221, 0x7, 0x3ff]}, {0x180, @usage=0x8, 0x0, 0x7ff, 0x3, 0x6, 0x4, 0x0, 0x90, @struct={0x3}, 0x6, 0x153, [0x8, 0x1, 0x6, 0x44, 0xfffffffffffffff9, 0x8]}, {0x1, @struct={0x9ac8, 0x5}, 0x0, 0x6, 0x779a51dd, 0x6, 0x3, 0x9, 0x404, @usage=0x80, 0x9, 0xb7, [0x180, 0x4, 0x6, 0x3, 0xfffffffffffffffd, 0x4]}, {0xd, 0x54de, 0x3}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001fc0)={<r9=>0x0, 0x2, 0x9, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000023c0)={0x1a, 0x1, {0x9, @usage=0x1, r7, 0x363, 0x7, 0xfffffffffffffffc, 0x9, 0x8, 0x400, @struct={0x4366}, 0x9, 0x12, [0xdcf3, 0x7, 0x6, 0x10, 0xffffffffffff8001, 0xe3b0]}, {0xf, @struct={0xb, 0x8000}, r8, 0x7fffffffffffffff, 0x8, 0x5, 0xffff, 0x9, 0x400, @usage=0x6, 0x7, 0x4, [0x906, 0x1, 0x0, 0x0, 0x2, 0xc]}, {0x1, @struct={0x6}, r9, 0x3, 0x2, 0x2, 0x1ff, 0x9, 0x2, @usage=0xed1, 0x8, 0x401, [0x6, 0x1, 0xffff, 0x858, 0x1, 0x6b4]}, {0x1f40000000000000, 0x9, 0x1e}})
ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000002b80)={{'\x00', 0x1}, {0x6879}, 0x181, 0x0, 0x0, &(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)='./file0\x00', &(0x7f0000002840)="9cdf58dc4708b68137d856647dc0608abc1d5eb72078a3737c8a0e8b84b7d641fd68df3a22d3c20e93e9c38edc5b3e6f811386506cec19aa55695ac4602e38330128c859cfdcba2c8dfd397919b1fa6edd487d078980ce91434d73e02aa3832b7a9e5d45c66706b38741473196e2f04d7cfb83f94bb3bb09091fb15e6e984295311d60bafbe94945d54c121dc78c4cd35dc43031c86aa78fc6f81982194c8ec08b56ba4fb51f58638944dae7bfa951120f34f1c4caaa53234c1c7e1f5869140c5479c1d3b3f11c9ca2acc509d18b604cefe7163ca7c137229343e48a7324e371d2a0d6270b62925e47182611cf7cec3609bf41c8354dc1ded86caed3e78d42d0fe843fe5ea6fd071b811ab8c36af4a96fd9222ea53dd817daa3b66362575ae196f6851d0b3e3cfef2c105032910289554322c2a098af837cc6043fea94ca02b8566fbf4d6054bc4d512a31b13c7e0b390db7455dc672091b004c0d447e5b59788a64179673670cf8a0507fee2a6020bdc0e6bbfd61b010700589e093b1cc7f292dd25e52028f51baee3115bd03e5e7c0c1983cbdef19e2fa72ee0b1542fd7f5c4460a51e902a497895ca179b86978f2d6882664142428ba6b14f4a0e4d065a78bc1bbf25ef40b4137ceaaccf04cd63943c7eb1440ac11daece59e2161eab2cc301af344eecb41be9a8f21971eb2422abdd90bd5089057ff841b16679", 0x1fc, 0x0, &(0x7f0000002a40)={0x2, 0xa2, {0x1, 0xc, 0x4c, "6616c31982b0d6cafe8eed5d67ed2a2d10208619181bf8c71f66f560286ecff0a42e40bbc4e4bb4f99bcfe635b18a428e80a555399eeba1c67c541eaba70968e0ae9e21eb15b7bddf32e6a16", 0x49, "d35104e53eff30eba2192842b2d5a71866948d667cf440f456b08a04dfe61596e91b380e17da8882afdb03a500a11e259f20ddd024bea45ac817bdefef3c013db422cb3e1b39a62348"}, 0x75, "eb3c19e8e88af10b99a9456ff7ac6824c73d6c5ca4c2682e9f5ebc8dc609aa413e0ac209cbc6c82ca849f612e8f880e1f03e54d67440140bd8aa49bd332e491a68476394b29d39ad2d5307f3fbe077aaa26b7f898831e1fdb89344e2e1c17533be7ae4ad0298df736fe268093d1c982522af594479"}, 0x123})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x2, 0x8, &(0x7f0000002c40)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000002c80)='GPL\x00', 0x3, 0xc9, &(0x7f0000002cc0)=""/201, 0x41000, 0x69, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002e00)={0x0, 0x2, 0x6fa, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000002e40)=[0xffffffffffffffff], &(0x7f0000002e80)=[{0x5, 0x5, 0xd}, {0x3, 0x4, 0xe}, {0x0, 0x1, 0xa, 0x1}], 0x10, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002f80)={&(0x7f0000002c00)='fscache_cookie\x00', r10, 0x0, 0x3}, 0x18)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002fc0)={0x0, 0x0, 0x8, 0x2})
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmmsg(r11, &(0x7f00000047c0)=[{{&(0x7f0000003000)=@ethernet, 0x80, &(0x7f0000004480)=[{&(0x7f0000003080)=""/167, 0xa7}, {&(0x7f0000003140)=""/68, 0x44}, {&(0x7f00000031c0)=""/67, 0x43}, {&(0x7f0000003240)}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/65, 0x41}, {&(0x7f0000004300)=""/50, 0x32}, {&(0x7f0000004340)}, {&(0x7f0000004380)=""/184, 0xb8}, {&(0x7f0000004440)=""/57, 0x39}], 0xa}, 0x9}, {{&(0x7f0000004540)=@phonet, 0x80, &(0x7f0000004680)=[{&(0x7f00000045c0)=""/23, 0x17}, {&(0x7f0000004600)=""/113, 0x71}], 0x2, &(0x7f00000046c0)=""/232, 0xe8}, 0xbb8}], 0x2, 0x10202, &(0x7f0000004840))
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000004880), 0x10000, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000048c0)={'macvtap0\x00', 0x1000})
socket$nl_generic(0x10, 0x3, 0x10)

4.189023944s ago: executing program 3 (id=2269):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x40047440, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@flushsa={0x68c, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfe, {0xff}, [@replay_thresh={0x8, 0xb, 0x5a6}, @sec_ctx={0xfe, 0x8, {0xfa, 0x8, 0x1, 0xf3, 0xf2, "59ed827f5a0a07e7343c9d0c5a5e6b6817774481e9aaf39951366e3572194a313671964e3110da4e3598e6201149f0e7d2ece0b1b7a1eee3bad28849d3295f1f813c6d3950a6f22e062a54b52745bca0ce7b63d28a9258314aabd2c0e7e9babb9e7fc966ea3c1a4ba93af831e86e2bd2a87ddaa0e3636185297252c4fd9cdf3f47904da6745fee38e591efa94a80e06b0e0505a4fc7b862ea3278b1a87a570f599d3cd1aca278da75d0f08d249b881c6312c9e233fbed6b96c4b5226a8db1a0044f33505b067a5052d94a7cc57c3668051d6e4c11ce0d531dc7065355a7448b3564c450b1ff8faf9bf06f9be034c585875ec"}}, @algo_auth_trunc={0xab, 0x14, {{'md5-generic\x00'}, 0x2f8, 0x80, "f7b69fbf7814a1ee7a0a568f1986e9d23ec4134d8bb1f58601c2d179052994e0c6c85ba4a625980e4571fddbe7ecb6205f7a61b3fbf77462a3ced9a3d776b555febb22b51f3a6fc84b682ff323dc71dbe12bb0a2d41b9beb8f1fe391b36ed9"}}, @sec_ctx={0xcc, 0x8, {0xc8, 0x8, 0x1, 0x2, 0xc0, "45050ada0f20f7b0e061331e2da88b52f4de88924af704385968e2ea319b46009bf7fe7f5c334c1cf23f7f6f8fa48542e6664379e8635c2aa2f0b8934741238894cabf1241b2436ff80da69d4e3c494cb0d51c1c5e5ca47c91ba9c0674db6a2cf241e365b8f693b67ec86005de634488963cfd70679bab9067634adb52db5284166348fde6bacd881f88760d48b510a593c9617c99296b9920c14a8f0b930e0ba766944a0bf264ceddf3055f373f3bddbd2ede240295022b6acf05c560bf4911"}}, @migrate={0x1cc, 0x11, [{@in6=@local, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0xff, 0x2, 0x0, 0x3500, 0x2, 0x2}, {@in6=@loopback, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x2b, 0x0, 0x0, 0x3507, 0xa, 0x2}, {@in6=@empty, @in=@broadcast, @in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@loopback, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x0, 0x3500, 0xa, 0xa}, {@in6=@mcast1, @in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x6c, 0x2, 0x0, 0x3506, 0xa, 0xa}, {@in=@loopback, @in6=@private0, @in=@multicast2, @in6=@mcast2, 0x2b, 0x3, 0x0, 0x3504, 0x2, 0xa}]}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd25, 0x70bd26, 0x70bd25, 0x2, [0x77]}}, @algo_crypt={0x124, 0x2, {{'ecb-aes-neon\x00'}, 0x6e0, "4f728d3b11c103c234d5018b0eb7192d86d87ce86f6dea442044abddd3f752b49a1d23e32d37152ad7edd98137a3f72d98163d49ea6807413587875e0fc964a5df5485b42ead747e9d1ab6f3e38675c9c0467bb14feb457642f2566f7165adbb831a03237a12cee9e3cc0442148b36c84986735cb2a93ebb33c89a1beac118ab83a7a17e3354165a660a90c54627523fc98858abc541baf0445fccf53b44d1d002094929fc93b08308dff6b8a5a4986a9408733c630151277a182f3d36b794124c1f868ec8f09464233f8981f258b05f72eb35c957dbbdf9772e5df0"}}, @migrate={0xe8, 0x11, [{@in=@loopback, @in6=@empty, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xff, 0x0, 0x0, 0x0, 0x2, 0xa}, {@in=@broadcast, @in=@loopback, @in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xff, 0x0, 0x0, 0x3500, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0xff, 0x1, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0x68c}, 0x1, 0x0, 0x0, 0x20040800}, 0x841)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8}]}]}, 0x54}}, 0x10)

3.355763131s ago: executing program 3 (id=2274):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x5, 0x8}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000019c0), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40040)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000100000e00005800"}}}]}, 0x48}}, 0x0)
pipe(&(0x7f0000000280)={<r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22d8, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x6, 0x7, 0x0, 0xc, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2693}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x4d}, @exit, @alu={0x7, 0x1, 0x3, 0xb, 0x9, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000900)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xf, 0x400, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x5, 0x1, 0x4, 0x5}], 0x10, 0x80000001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x3, 0x19, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x63}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x5d, 0x6, 0x8, 0x426, 0x400}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @alu={0x7, 0x0, 0xb, 0x9, 0x7, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x6, 0x7, 0x1, 0x200, 0x9b}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x3e, &(0x7f0000000240)=""/62, 0x41100, 0x11, '\x00', r6, @fallback=0x10, r7, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x4, 0xe}, 0x10, 0xffffffffffffffff, r8, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=[{0x2, 0x3, 0x4, 0x1}, {0x0, 0x4, 0x4, 0x2}, {0x0, 0x3, 0x4, 0x4}, {0x0, 0x5, 0x3, 0x7}, {0x4, 0x1, 0xe, 0x5}, {0x0, 0x4, 0xa}, {0x1, 0x2, 0xa, 0x4}, {0x5, 0x3, 0xd, 0x1}], 0x10, 0x5d}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="4c00000010000507000000000000000000000000e08a05caa3183b0601197ab2c4cf0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00210000000000000000800c0022000000000000000000"], 0x4c}}, 0x0)

3.338254515s ago: executing program 4 (id=2275):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC=r1], 0xfe33)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000080)=""/93, &(0x7f0000000000)=0x5d)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x3}, 0x2000)

3.143961413s ago: executing program 3 (id=2277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000000000200"/20, @ANYRES32=0x0, @ANYBLOB="024000000040000008000300", @ANYRES32=0x0, @ANYBLOB="1800128008000100677470000c0002800500050001000000"], 0x40}, 0x1, 0xd, 0x0, 0x4008845}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000000000200"/20, @ANYRES32=0x0, @ANYBLOB="024000000040000008000300", @ANYRES32=0x0, @ANYBLOB="1800128008000100677470000c0002800500050001000000"], 0x40}, 0x1, 0xd, 0x0, 0x4008845}, 0x0) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket(0x2d, 0x2, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async)

2.952515601s ago: executing program 3 (id=2279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000400", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddb"], 0x14}}, 0x20044000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r9, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x64, 0x29, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0x7}, {0xffff, 0xfff3}, {0xfff2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x80, 0x43}}, @TCA_RATE={0x6, 0x5, {0xa}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x64}}, 0x0)

2.544088354s ago: executing program 2 (id=2283):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c)

1.616548573s ago: executing program 4 (id=2285):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
read(r2, &(0x7f0000000000)=""/60, 0x3c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x1c, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004)
socket$kcm(0x10, 0x4, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x3)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)

1.548219567s ago: executing program 2 (id=2286):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a, 0x0, &(0x7f0000000100)=""/196, 0xc4}, &(0x7f0000000200)=0x40)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0)

1.390046735s ago: executing program 2 (id=2289):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0017"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0)

1.25578652s ago: executing program 0 (id=2290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140f, 0x60ceaae1ef55e4c3}, 0x10}}, 0x0)
unshare(0x20000400)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xaa, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x78f0, '\x00', 0x0, r6, 0x4, 0x2, 0x3}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000900)={<r12=>r5, 0x1, 0x9, 0x3})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r6)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000a420}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r13, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fffffff, 0x31}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x4001)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0xf, 0x4c, &(0x7f00000002c0)=""/76, 0x41000, 0x8ff7c52a850bce91, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x1, 0x5}, 0x10, r9, r5, 0x5, &(0x7f0000000780)=[r7, r7, r6, r5, r10, r7, r11], &(0x7f00000007c0)=[{0x5, 0x3, 0x6, 0x7}, {0x1, 0x2, 0x1, 0x7}, {0x1, 0x3, 0x8, 0x7}, {0x4, 0x1, 0xd}, {0x3, 0x2, 0x0, 0xb}], 0x10, 0x8, @value=r12}, 0x94)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r14, 0x0, 0x7feff000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbdbe24ba017281587cffdbdf250700", @ANYRES32=r1, @ANYBLOB="05005300010000001400040064766d727030000000000000000000000800050002000000"], 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)

1.207969846s ago: executing program 2 (id=2291):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040001}, 0xc000005)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x800}, 0xe)
r3 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000003c0)=@generic={0x2, 0x5, 0x1})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400), 0x10)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000440))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r10, r9}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002840)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f0000000540))

1.057583328s ago: executing program 0 (id=2292):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x1e, 0x805, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) (async)
connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) (async)
close(r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002a4ebe442ffda1f6709f9100d9b19d50f1cd9c883515aa1b5675c4ac25f79168d5044d8af55a9ec3a4128dff924e633763ba54555f79fb073bf4a15be145342f5ff792c669951042224d0e84ca6d101a311b387f4438fa4de12159c8a01d3fe58975679ece704fbadc2c2a5cefdac73c197761ea0b49d8ed7d0a3eb8152725a14db9e4ec060cd596cfd12a604bea181f9b19127bf8c0838921fb18ceedef0fce21b9a5f0d38b76387df77002df0045834eb43185dcadf121a9da3451889c268ef788c5eb615a34861a272b", @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0)
close(r1) (async, rerun: 32)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="24010000d72f30c54ec841b1db16e1314dfa9f68ee2a2325930838dfa4ba0189a6495d073597000000b09c92ba9090d012c9b12812436220a992811ad412ff9fdb7399d920f66a31141f8b1ac0f35a1568d1", @ANYRES16=r2, @ANYBLOB="478829bd7000000000000600000008000100ff22085d08000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24048001}, 0x44040)

1.000541946s ago: executing program 2 (id=2293):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
listen(r0, 0x0)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x14)
r2 = accept4(r0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000001080)=[{&(0x7f0000000e80)="f4ad24", 0x3}], 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c009c40be206fe72d", @ANYRES16=r5, @ANYBLOB="0100000000000000000012000000080008000000000008000900030000001800018014000200766574683076746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="20ac46", 0x3}], 0x1}}], 0x2, 0x0)
shutdown(r3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r10, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4)
setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000140)=0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x94, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7fffffff}, @in6={0xa, 0x4e24, 0xffffffff, @mcast1}]}, &(0x7f0000000240)=0x10)

752.265032ms ago: executing program 0 (id=2294):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a000200000000000000000001a8020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

622.620472ms ago: executing program 4 (id=2295):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
read(r0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6051}, @device_a, @device_b, @initial, {0x3, 0x3}}, 0x20, @val={0x8c, 0x18, {0x3f6, "213118080012", @long="3e345870c7a3a2890d5053414ccc4298"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x11, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
connect$inet(r5, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804)
sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14)

566.815954ms ago: executing program 0 (id=2296):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@remote})
close(r0)

320.182176ms ago: executing program 0 (id=2297):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b0013000000080001000000000008004f00000000000800150004000000080003"], 0x38}}, 0x80)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r3, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b0013000000080001000000000008004f00000000000800150004000000080003"], 0x38}}, 0x80) (async)

290.472999ms ago: executing program 3 (id=2298):
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @default}, [@remote, @null, @null, @null, @remote, @null, @rose, @netrom]}, &(0x7f0000000200)=0x48, 0x80800)
bind$netrom(r1, &(0x7f0000000340)={{0x3, @default, 0x1}, [@default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080))
socket$inet6_udplite(0xa, 0x2, 0x88)

224.203958ms ago: executing program 4 (id=2299):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x73, 0xff, 0x3, 0xfd, 0x1, 0x1300}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001780)=""/4071, 0xec0}], 0x1}, 0x40020000)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

143.9818ms ago: executing program 0 (id=2300):
r0 = socket$netlink(0x10, 0x3, 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xa, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x0, 0x5b4630fe, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739}, 0xcb)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

136.531379ms ago: executing program 3 (id=2301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000200016801c00018018000c8014000100080088a8"], 0x54}}, 0x24040800)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r7=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000200)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r9=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14)
r14 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'sit0\x00', <r15=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000009c0)=<r16=>0x0, &(0x7f0000000a00)=0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r17, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r18 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x404, 0x4e23, 0x1, 0x0, 0x0, 0x0, 0x3c}, {0x86a, 0x0, 0x0, 0x8, 0xa975, 0x0, 0x0, 0xff}, {0xfffffffffffffffd, 0x0, 0x8000, 0x7}, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x93}}, 0xe8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', <r19=>0x0, 0x29, 0x6, 0x7f, 0x5cdf, 0x40, @mcast2, @loopback, 0x7800, 0x7886, 0x401, 0x4}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000000b00)={0x674, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8000, 0xc, 0x2}, {0x4, 0xc, 0x40, 0x6}, {0x7, 0x5, 0xee, 0x1}, {0x2, 0x5, 0xd9, 0x1}, {0x5ef, 0xe, 0xfe, 0xd}, {0x0, 0xd1, 0x5, 0x6}, {0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0xa, 0x14000}]}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r9}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c71}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x207}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xef3}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x674}, 0x1, 0x0, 0x0, 0x8000}, 0x40845)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)

80.860228ms ago: executing program 2 (id=2302):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="5e017b"], 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)

0s ago: executing program 4 (id=2303):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x14, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0xe, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x8, &(0x7f0000000100)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080))
socket(0x10, 0x80002, 0x0)

kernel console output (not intermixed with test programs):

.504394][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'.
[  111.858516][ T7016] netlink: 96 bytes leftover after parsing attributes in process `syz.1.291'.
[  111.895881][ T7019] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.293'.
[  111.920906][ T7016] vlan2: entered allmulticast mode
[  111.940493][ T7016] erspan0: entered allmulticast mode
[  111.963819][ T7023] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  112.076889][ T7028] sctp: [Deprecated]: syz.0.294 (pid 7028) Use of int in maxseg socket option.
[  112.076889][ T7028] Use struct sctp_assoc_value instead
[  113.073107][ T7072] netlink: 'syz.2.309': attribute type 10 has an invalid length.
[  113.566468][ T7099] team0: Device gtp0 is of different type
[  113.607276][ T7101] netlink: 'syz.3.316': attribute type 24 has an invalid length.
[  113.708959][ T7103] openvswitch: netlink: Flow key attr not present in new flow.
[  113.797755][ T7105] syz.4.320: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  113.858276][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.4.320 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) 
[  113.858305][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  113.858322][ T7105] Call Trace:
[  113.858333][ T7105]  <TASK>
[  113.858342][ T7105]  dump_stack_lvl+0x189/0x250
[  113.858382][ T7105]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.858408][ T7105]  ? __pfx__printk+0x10/0x10
[  113.858428][ T7105]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.858448][ T7105]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.858469][ T7105]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  113.858489][ T7105]  warn_alloc+0x214/0x310
[  113.858509][ T7105]  ? stack_depot_save_flags+0x429/0x900
[  113.858539][ T7105]  ? __pfx_warn_alloc+0x10/0x10
[  113.858562][ T7105]  ? kasan_save_track+0x4f/0x80
[  113.858587][ T7105]  ? xskq_create+0x56/0x170
[  113.858608][ T7105]  ? xsk_init_queue+0xb0/0x110
[  113.858627][ T7105]  ? xsk_setsockopt+0x43f/0x710
[  113.858646][ T7105]  ? do_sock_setsockopt+0x257/0x3e0
[  113.858666][ T7105]  ? __x64_sys_setsockopt+0x18b/0x220
[  113.858684][ T7105]  ? do_syscall_64+0xfa/0x3b0
[  113.858699][ T7105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.858738][ T7105]  __vmalloc_node_range_noprof+0x125/0x12f0
[  113.858790][ T7105]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  113.858817][ T7105]  ? __kasan_kmalloc+0x93/0xb0
[  113.858838][ T7105]  vmalloc_user_noprof+0xad/0xf0
[  113.858858][ T7105]  ? xskq_create+0xbf/0x170
[  113.858882][ T7105]  xskq_create+0xbf/0x170
[  113.858909][ T7105]  xsk_init_queue+0xb0/0x110
[  113.858934][ T7105]  xsk_setsockopt+0x43f/0x710
[  113.858960][ T7105]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.858980][ T7105]  ? __lock_acquire+0xab9/0xd20
[  113.859014][ T7105]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  113.859035][ T7105]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.859059][ T7105]  do_sock_setsockopt+0x257/0x3e0
[  113.859082][ T7105]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  113.859108][ T7105]  ? __fget_files+0x2a/0x420
[  113.859136][ T7105]  __x64_sys_setsockopt+0x18b/0x220
[  113.859164][ T7105]  do_syscall_64+0xfa/0x3b0
[  113.859178][ T7105]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.859201][ T7105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.859218][ T7105]  ? clear_bhb_loop+0x60/0xb0
[  113.859240][ T7105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.859256][ T7105] RIP: 0033:0x7fb6d6b8e929
[  113.859278][ T7105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.859293][ T7105] RSP: 002b:00007fb6d7adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  113.859312][ T7105] RAX: ffffffffffffffda RBX: 00007fb6d6db5fa0 RCX: 00007fb6d6b8e929
[  113.859324][ T7105] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  113.859334][ T7105] RBP: 00007fb6d6c10b39 R08: 0000000000000004 R09: 0000000000000000
[  113.859345][ T7105] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.859356][ T7105] R13: 0000000000000000 R14: 00007fb6d6db5fa0 R15: 00007ffd34984b18
[  113.859386][ T7105]  </TASK>
[  113.859488][ T7105] Mem-Info:
[  114.289749][ T7105] active_anon:5342 inactive_anon:0 isolated_anon:0
[  114.289749][ T7105]  active_file:1211 inactive_file:39833 isolated_file:0
[  114.289749][ T7105]  unevictable:768 dirty:44 writeback:0
[  114.289749][ T7105]  slab_reclaimable:10029 slab_unreclaimable:97560
[  114.289749][ T7105]  mapped:29283 shmem:1366 pagetables:1206
[  114.289749][ T7105]  sec_pagetables:0 bounce:0
[  114.289749][ T7105]  kernel_misc_reclaimable:0
[  114.289749][ T7105]  free:1336931 free_pcp:13689 free_cma:0
[  114.352256][ T7105] Node 0 active_anon:21468kB inactive_anon:0kB active_file:4844kB inactive_file:159132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:176kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11992kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.420572][ T7105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.513846][ T7105] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  114.598906][ T7105] lowmem_reserve[]: 0 2500 2502 2502 2502
[  114.623149][ T7132] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  114.636305][ T7105] Node 0 DMA32 free:1426068kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21320kB inactive_anon:0kB active_file:4844kB inactive_file:157304kB unevictable:1536kB writepending:176kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:36716kB local_pcp:21308kB free_cma:0kB
[  114.674776][ T7132] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  114.730241][ T7105] lowmem_reserve[]: 0 0 1 1 1
[  114.737007][ T7105] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  114.769049][ T7105] lowmem_reserve[]: 0 0 0 0 0
[  114.774476][ T7105] Node 1 Normal free:3905896kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19276kB local_pcp:10796kB free_cma:0kB
[  114.811640][ T7105] lowmem_reserve[]: 0 0 0 0 0
[  114.817385][ T7105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  114.833943][ T7105] Node 0 DMA32: 560*4kB (UM) 524*8kB (UME) 168*16kB (UM) 160*32kB (UME) 62*64kB (UME) 36*128kB (UME) 18*256kB (UME) 6*512kB (M) 5*1024kB (UM) 7*2048kB (UME) 336*4096kB (M) = 1426208kB
[  114.854152][ T7105] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  114.869278][ T7105] Node 1 Normal: 176*4kB (U) 31*8kB (UME) 45*16kB (UME) 59*32kB (UME) 22*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3905896kB
[  114.917067][ T7105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  114.941946][ T7105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.954175][ T7105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  114.988894][ T7105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.033489][ T7105] 42406 total pagecache pages
[  115.038922][ T7105] 0 pages in swap cache
[  115.066031][ T7105] Free swap  = 124996kB
[  115.070396][ T7105] Total swap = 124996kB
[  115.078970][ T7105] 2097051 pages RAM
[  115.083171][ T7105] 0 pages HighMem/MovableOnly
[  115.088045][ T7105] 424690 pages reserved
[  115.096256][ T7105] 0 pages cma reserved
[  115.179359][ T7149] __nla_validate_parse: 3 callbacks suppressed
[  115.179380][ T7149] netlink: 88 bytes leftover after parsing attributes in process `syz.2.332'.
[  115.355374][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'.
[  115.425292][ T7149] bridge0: entered allmulticast mode
[  115.431142][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'.
[  115.589204][ T7150] bridge_slave_1: left allmulticast mode
[  115.605455][ T7150] bridge_slave_1: left promiscuous mode
[  115.624632][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.667435][ T7150] bridge_slave_0: left allmulticast mode
[  115.690488][ T7150] bridge_slave_0: left promiscuous mode
[  115.716499][ T7169] netlink: 13 bytes leftover after parsing attributes in process `syz.1.338'.
[  115.731961][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.827896][ T7150] bridge0 (unregistering): left allmulticast mode
[  116.112711][ T7190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.207611][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.217838][ T7197] netlink: 'syz.4.346': attribute type 1 has an invalid length.
[  116.263220][ T7197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.346'.
[  116.384205][ T7204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  116.969294][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'.
[  116.995581][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'.
[  117.031658][ T7235] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  117.274063][ T7247] Bluetooth: MGMT ver 1.23
[  117.313515][ T7249] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.360'.
[  117.368527][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'.
[  117.381629][ T7249] netlink: zone id is out of range
[  117.401946][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[  117.417047][ T7249] netlink: get zone limit has 8 unknown bytes
[  117.690125][ T7272] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  117.712036][ T7270] netlink: 'syz.4.364': attribute type 1 has an invalid length.
[  118.055890][ T7289] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (954335231)
[  118.112225][ T7289] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  118.184353][ T7291] x_tables: duplicate underflow at hook 1
[  119.028922][ T7340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  119.307367][ T7351] netlink: 'syz.0.386': attribute type 11 has an invalid length.
[  119.376819][ T7353] IPv6: sit1: Disabled Multicast RS
[  119.393857][ T7353] sit1: entered allmulticast mode
[  119.522188][ T7361] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.531472][ T7361] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.540270][ T7361] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.549450][ T7361] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.651936][ T7361] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.660867][ T7361] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.670281][ T7361] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.680323][ T7361] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.755752][ T7376] tipc: Started in network mode
[  119.770921][ T7376] tipc: Node identity e0000002, cluster identity 4711
[  119.802592][ T7376] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  119.925258][ T7384] netlink: 'syz.2.394': attribute type 8 has an invalid length.
[  119.957302][ T7384] bridge0: entered allmulticast mode
[  120.024861][ T7389] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[  120.158104][ T7394] netlink: 'syz.4.397': attribute type 4 has an invalid length.
[  120.167622][ T7395] netlink: 'syz.4.397': attribute type 4 has an invalid length.
[  120.399454][ T7407] netlink: 'syz.0.400': attribute type 2 has an invalid length.
[  120.968654][ T7431] netlink: 'syz.2.403': attribute type 178 has an invalid length.
[  121.016266][ T7432] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  121.040870][ T7432] macsec1: entered allmulticast mode
[  121.060115][ T7432] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  121.099441][ T7432] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  121.128038][ T7432] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  121.405445][ T7453] ip6t_srh: unknown srh match flags  536B
[  121.502236][ T7462] Bluetooth: MGMT ver 1.23
[  121.736169][ T7467] __nla_validate_parse: 7 callbacks suppressed
[  121.736189][ T7467] netlink: 72 bytes leftover after parsing attributes in process `syz.0.412'.
[  121.939541][ T7474] IPVS: Unknown mcast interface: pimreg0
[  122.025832][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'.
[  122.210636][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'.
[  122.231455][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'.
[  122.255885][ T7496] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  122.263854][ T7493] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  122.295088][ T7496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.340374][ T7493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.656038][ T7512] netlink: 'syz.2.424': attribute type 11 has an invalid length.
[  122.841902][ T7520] netlink: 'syz.1.426': attribute type 1 has an invalid length.
[  123.268768][ T7543] syzkaller1: entered promiscuous mode
[  123.288131][ T7543] syzkaller1: entered allmulticast mode
[  123.853971][ T7572] netlink: 'syz.3.443': attribute type 10 has an invalid length.
[  123.944748][ T7572] team0: Device veth1_macvtap failed to register rx_handler
[  123.959539][ T7579] netlink: 'syz.4.444': attribute type 1 has an invalid length.
[  123.969399][ T7579] netlink: 228 bytes leftover after parsing attributes in process `syz.4.444'.
[  123.979112][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'.
[  124.179832][ T7588] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  124.224591][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.448'.
[  124.277285][ T7590] netlink: 104 bytes leftover after parsing attributes in process `syz.1.448'.
[  124.464112][ T7606] x_tables: duplicate underflow at hook 2
[  124.846781][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'.
[  125.060674][ T7631] bridge0: port 1(batadv1) entered blocking state
[  125.102261][ T7631] bridge0: port 1(batadv1) entered disabled state
[  125.131371][ T7634] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  125.158401][ T7631] batadv1: entered allmulticast mode
[  125.167597][ T7631] batadv1: entered promiscuous mode
[  125.300113][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.319395][ T7651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.466'.
[  125.359528][ T7637] bond1: (slave geneve2): making interface the new active one
[  125.379658][ T7637] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  125.389670][ T7651] netlink: 'syz.1.466': attribute type 11 has an invalid length.
[  125.466846][ T7638] bond1: entered promiscuous mode
[  125.491456][ T7638] geneve2: entered promiscuous mode
[  125.552391][ T1095] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  125.562155][ T1095] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  126.263257][ T5851] Bluetooth: hci4: link tx timeout
[  126.270100][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.458245][ T5838] Bluetooth: hci4: link tx timeout
[  126.464024][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.497453][ T5838] Bluetooth: hci4: link tx timeout
[  126.502879][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.531872][ T5838] Bluetooth: hci4: link tx timeout
[  126.537317][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.597538][ T7711] tipc: Started in network mode
[  126.651576][ T7711] tipc: Node identity 4, cluster identity 4711
[  126.667935][ T7711] tipc: Node number set to 4
[  126.719166][ T5838] Bluetooth: hci4: link tx timeout
[  126.724777][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.997973][ T7724] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  127.285437][ T7739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.328364][ T7744] SET target dimension over the limit!
[  127.528191][ T7755] __nla_validate_parse: 3 callbacks suppressed
[  127.528211][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'.
[  127.591610][ T7755] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  127.756850][ T5838] Bluetooth: hci4: link tx timeout
[  127.765706][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.844815][ T5838] Bluetooth: hci4: link tx timeout
[  127.851058][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.999540][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'.
[  128.091654][ T5838] Bluetooth: hci4: link tx timeout
[  128.096980][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.311471][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  128.819806][ T7809] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[  128.840483][ T7809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.923598][ T7809] syzkaller0: entered promiscuous mode
[  128.929208][ T7809] syzkaller0: entered allmulticast mode
[  128.938640][ T7809] tipc: Resetting bearer <eth:syzkaller0>
[  128.954714][ T7807] tipc: Resetting bearer <eth:syzkaller0>
[  129.946182][  T977] tipc: Node number set to 3758096386
[  130.351040][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.518'.
[  130.890014][ T7807] tipc: Disabling bearer <eth:syzkaller0>
[  130.906885][ T7829] ip6gre1: entered allmulticast mode
[  130.916235][ T7832] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  131.222470][ T7856] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  131.579601][ T7873] netlink: 'syz.3.526': attribute type 64 has an invalid length.
[  131.612867][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'.
[  131.678812][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'.
[  131.934926][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'.
[  131.999618][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  132.131736][ T7902] netlink: 165 bytes leftover after parsing attributes in process `syz.0.534'.
[  132.401071][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  132.737254][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'.
[  132.970217][ T7942] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.549'.
[  132.988925][ T7945] netlink: 'syz.0.551': attribute type 1 has an invalid length.
[  133.002580][ T7930] delete_channel: no stack
[  133.117858][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.249621][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'.
[  133.261657][ T7946] "syz.4.550" (7946) uses obsolete ecb(arc4) skcipher
[  134.473075][ T8016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.567'.
[  134.614814][ T8023] netlink: 'syz.1.570': attribute type 7 has an invalid length.
[  134.698669][ T8023] : entered promiscuous mode
[  135.085677][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'.
[  135.132664][ T8050] netlink: 'syz.0.574': attribute type 2 has an invalid length.
[  135.157118][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.574'.
[  135.193485][ T8055] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  135.221640][ T8056] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  135.272901][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.575'.
[  135.295979][ T8059] netlink: 'syz.1.576': attribute type 1 has an invalid length.
[  135.456723][ T8067] netlink: 64 bytes leftover after parsing attributes in process `syz.4.578'.
[  135.492302][ T8067] netlink: 64 bytes leftover after parsing attributes in process `syz.4.578'.
[  135.534860][ T8072] netlink: 64 bytes leftover after parsing attributes in process `syz.4.578'.
[  135.754569][ T8080] netlink: 'syz.1.581': attribute type 5 has an invalid length.
[  135.934024][ T8091] netlink: 'syz.4.584': attribute type 1 has an invalid length.
[  135.951660][ T8094] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  136.625968][ T8123] IPv6: addrconf: prefix option has invalid lifetime
[  136.640541][ T8126] netlink: 'syz.2.595': attribute type 11 has an invalid length.
[  136.677606][ T8126] netlink: 'syz.2.595': attribute type 1 has an invalid length.
[  136.797235][ T8126] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.756188][ T8199] __nla_validate_parse: 14 callbacks suppressed
[  137.756207][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.600'.
[  137.899258][ T8165] gretap1: entered promiscuous mode
[  137.920104][ T8165] gretap1: entered allmulticast mode
[  137.947275][ T8208] netlink: 'syz.0.605': attribute type 8 has an invalid length.
[  138.229206][ T8219] netlink: 14 bytes leftover after parsing attributes in process `syz.4.608'.
[  138.331072][ T8226] netlink: 'syz.3.612': attribute type 1 has an invalid length.
[  138.362460][ T8226] netlink: 228 bytes leftover after parsing attributes in process `syz.3.612'.
[  138.395503][ T8230] xt_hashlimit: max too large, truncated to 1048576
[  138.404082][ T8230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'.
[  138.414283][ T8231] netlink: 'syz.0.610': attribute type 2 has an invalid length.
[  138.662021][ T8219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.678984][ T8219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.696564][ T8219] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  138.696818][ T8236] IPv6: Can't replace route, no match found
[  138.723133][ T8219] bond0 (unregistering): Released all slaves
[  139.109666][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'.
[  139.447076][ T8273] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.483710][ T8278] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  139.535176][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'.
[  139.765909][ T8289] veth1_to_bond: entered promiscuous mode
[  140.013121][ T8304] Cannot find add_set index 1 as target
[  140.090847][ T8310] C: renamed from team_slave_0 (while UP)
[  140.150617][ T8310] netlink: 'syz.3.633': attribute type 1 has an invalid length.
[  140.150818][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'.
[  140.172539][ T8310] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.232826][ T8318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.634'.
[  140.314076][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.635'.
[  141.010975][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'.
[  142.784175][ T8424] __nla_validate_parse: 2 callbacks suppressed
[  142.784206][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'.
[  142.900889][ T8431] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  142.945935][ T8434] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004
[  143.316699][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'.
[  143.409852][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'.
[  143.550220][ T8460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  143.647755][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.677'.
[  143.863283][ T8474] netlink: 76 bytes leftover after parsing attributes in process `syz.3.680'.
[  143.903136][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  144.000085][ T8484] xt_bpf: check failed: parse error
[  144.060769][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.683'.
[  144.064104][ T8487] netlink: 'syz.3.684': attribute type 1 has an invalid length.
[  144.080483][ T8487] netlink: 17 bytes leftover after parsing attributes in process `syz.3.684'.
[  144.164031][    C1] Unknown status report in ack skb
[  144.258172][ T8480] xt_CT: No such helper "syz0"
[  144.299532][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'.
[  144.487913][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.685'.
[  144.637698][ T8504] block nbd1: server does not support multiple connections per device.
[  144.670355][ T8504] block nbd1: shutting down sockets
[  144.760229][ T8507] team0: No ports can be present during mode change
[  145.503534][ T8570] sit0: entered promiscuous mode
[  145.543465][ T8570] netlink: 'syz.4.704': attribute type 1 has an invalid length.
[  145.632002][ T8574] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  145.849503][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  146.230625][ T8599] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  146.825629][ T8640] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0
[  147.177368][ T8658] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  147.226868][ T8659] tipc: Started in network mode
[  147.237536][ T8659] tipc: Node identity 6625b94e3535, cluster identity 4711
[  147.270343][ T8659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.424676][ T8664] syzkaller0: entered promiscuous mode
[  147.472695][ T8664] syzkaller0: entered allmulticast mode
[  147.480003][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  147.906797][ T8697] netlink: 'syz.4.737': attribute type 1 has an invalid length.
[  147.951795][ T8697] __nla_validate_parse: 17 callbacks suppressed
[  147.951814][ T8697] netlink: 228 bytes leftover after parsing attributes in process `syz.4.737'.
[  147.983398][ T8657] tipc: Resetting bearer <eth:syzkaller0>
[  148.261279][ T5906] tipc: Node number set to 1393604942
[  150.077385][ T8657] tipc: Disabling bearer <eth:syzkaller0>
[  150.237549][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'.
[  150.660878][ T8759] netlink: 'syz.1.753': attribute type 10 has an invalid length.
[  150.715665][ T8759] veth1_vlan: entered allmulticast mode
[  150.770357][ T8759] team0: Device veth1_vlan failed to register rx_handler
[  151.109597][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'.
[  151.134624][ T8781] batadv1: left allmulticast mode
[  151.148110][ T8789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.155635][ T8789] IPv6: NLM_F_CREATE should be set when creating new route
[  151.157739][ T8781] batadv1: left promiscuous mode
[  151.163937][ T8789] IPv6: NLM_F_CREATE should be set when creating new route
[  151.163967][ T8789] IPv6: NLM_F_CREATE should be set when creating new route
[  151.189559][ T8789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.200521][ T8781] bridge0: port 1(batadv1) entered disabled state
[  151.441576][ T8796] netlink: 'syz.0.765': attribute type 10 has an invalid length.
[  151.633167][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'.
[  151.733027][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'.
[  152.044679][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'.
[  152.278516][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'.
[  152.333915][ T8837] netlink: 156 bytes leftover after parsing attributes in process `syz.4.778'.
[  152.344365][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'.
[  152.428596][ T8844] netlink: 56 bytes leftover after parsing attributes in process `syz.1.780'.
[  152.670971][ T8856] netlink: 'syz.1.786': attribute type 20 has an invalid length.
[  153.256538][ T8884] __nla_validate_parse: 3 callbacks suppressed
[  153.256557][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'.
[  153.321353][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'.
[  153.350738][ T8884] netlink: 'syz.2.797': attribute type 11 has an invalid length.
[  153.400055][ T8891] netlink: 'syz.1.800': attribute type 3 has an invalid length.
[  153.457776][ T8891] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[  153.730809][ T8911] netlink: 56 bytes leftover after parsing attributes in process `syz.3.807'.
[  153.768097][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'.
[  153.782473][ T8910] netlink: 'syz.1.806': attribute type 9 has an invalid length.
[  153.792624][ T8911] netlink: 31 bytes leftover after parsing attributes in process `syz.3.807'.
[  153.808073][ T8911] netlink: 'syz.3.807': attribute type 3 has an invalid length.
[  153.834558][ T8911] netlink: 'syz.3.807': attribute type 2 has an invalid length.
[  153.844278][ T8910] netlink: 'syz.1.806': attribute type 9 has an invalid length.
[  153.876711][ T8911] netlink: 31 bytes leftover after parsing attributes in process `syz.3.807'.
[  154.070433][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.811'.
[  154.085481][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'.
[  154.474269][ T8936] dvmrp0: entered allmulticast mode
[  154.500523][ T8939] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  154.537190][ T8944] 8021q: VLANs not supported on lo
[  154.870168][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[  155.084480][ T8982] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9
[  155.119925][ T8978] netlink: 148 bytes leftover after parsing attributes in process `syz.1.824'.
[  155.285531][ T8986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  155.326365][ T8986] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  155.382242][ T8986] gretap0: entered promiscuous mode
[  155.398636][ T8986] gretap0: entered allmulticast mode
[  155.711760][ T9010] openvswitch: netlink: IP tunnel dst address not specified
[  155.728038][ T9012] openvswitch: netlink: Key type 14864 is out of range max 32
[  155.744910][ T9010] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  157.093341][ T9069] openvswitch: netlink: IPv6 tunnel dst address is zero
[  157.157414][ T9069] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.387220][ T9095] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  157.455763][ T9101] batman_adv: batadv0: Adding interface: dummy0
[  157.461747][ T9095] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  157.464780][ T9101] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.563454][ T9101] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  158.014602][ T9120] netlink: 'syz.2.875': attribute type 1 has an invalid length.
[  158.046916][ T9120] netlink: 'syz.2.875': attribute type 1 has an invalid length.
[  158.249026][ T9133] openvswitch: netlink: Actions may not be safe on all matching packets
[  158.274060][ T9134] __nla_validate_parse: 8 callbacks suppressed
[  158.274078][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'.
[  158.357466][ T9138] netlink: 'syz.3.883': attribute type 8 has an invalid length.
[  158.381654][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'.
[  158.425914][ T9138] bridge0: entered allmulticast mode
[  158.448427][ T9147] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.883'.
[  158.632713][ T9153] netlink: 104 bytes leftover after parsing attributes in process `syz.2.886'.
[  158.669829][ T9159] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.889'.
[  158.710450][ T9159] netlink: zone id is out of range
[  158.720879][ T9159] netlink: zone id is out of range
[  158.728140][ T9159] netlink: zone id is out of range
[  158.736991][ T9159] netlink: zone id is out of range
[  158.743931][ T9159] netlink: zone id is out of range
[  158.768289][ T9165] netlink: 96 bytes leftover after parsing attributes in process `syz.3.883'.
[  158.799493][ T9165] 8021q: VLANs not supported on ip6gre0
[  159.008071][ T9176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.015467][ T9176] IPv6: NLM_F_CREATE should be set when creating new route
[  159.022798][ T9176] IPv6: NLM_F_CREATE should be set when creating new route
[  159.489267][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'.
[  159.499483][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.902'.
[  159.681572][ T9203] netlink: 108 bytes leftover after parsing attributes in process `syz.4.903'.
[  160.406969][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'.
[  161.054226][ T9266] tipc: Started in network mode
[  161.060565][ T9268] Unknown options in mask 1f4
[  161.073985][ T9266] tipc: Node identity aaaaaaaaaa33, cluster identity 4711
[  161.098220][ T9266] tipc: Enabled bearer <eth:vlan1>, priority 12
[  161.377855][ T9279] bond0: entered promiscuous mode
[  161.450454][ T9279] bond0: entered allmulticast mode
[  161.489512][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.510999][ T9297] netlink: 'syz.0.927': attribute type 10 has an invalid length.
[  161.680951][ T9297] 8021q: adding VLAN 0 to HW filter on device team0
[  161.708624][ T9297] bond0: (slave team0): Enslaving as an active interface with an up link
[  162.216418][ T5913] tipc: Node number set to 10070698
[  164.255085][ T9355] SET target dimension over the limit!
[  164.565898][ T9369] net_ratelimit: 2 callbacks suppressed
[  164.565917][ T9369] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  164.747549][ T9376] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  164.778375][ T9378] netlink: 'syz.2.947': attribute type 4 has an invalid length.
[  164.788041][ T9383] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  164.831568][ T9388] netlink: 'syz.2.947': attribute type 4 has an invalid length.
[  164.987320][ T9393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  165.008137][ T9396] openvswitch: netlink: IP tunnel dst address not specified
[  165.044096][ T9398] __nla_validate_parse: 10 callbacks suppressed
[  165.044116][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.952'.
[  165.047589][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'.
[  165.054537][ T9396] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.953'.
[  165.103305][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.113071][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.125484][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.137586][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.166557][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.174654][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.176940][ T9396] netlink: zone id is out of range
[  165.187074][    C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  165.804638][ T9433] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  165.896892][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'.
[  165.937032][ T9436] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  165.992421][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'.
[  166.022191][ T9441] netlink: 'syz.4.966': attribute type 1 has an invalid length.
[  166.071678][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'.
[  166.262438][ T9456] netlink: 'syz.0.970': attribute type 8 has an invalid length.
[  166.270236][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[  166.314303][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.322268][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.338564][ T9456] bridge0: entered allmulticast mode
[  166.357580][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'.
[  166.721974][ T9479] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  166.935404][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.982'.
[  166.946968][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'.
[  167.039835][ T9496] batadv2: entered allmulticast mode
[  167.660968][ T9523] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  167.701049][ T9523] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  167.748848][ T9523] xt_HMARK: spi-set and port-set can't be combined
[  168.425067][ T9567] netlink: 'syz.1.1003': attribute type 16 has an invalid length.
[  168.437408][ T9567] netlink: 'syz.1.1003': attribute type 3 has an invalid length.
[  168.467439][ T9567] netem: unknown loss type 0
[  168.476693][ T9567] netem: change failed
[  168.670028][ T9578] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001
[  169.682499][ T9630] net_ratelimit: 483 callbacks suppressed
[  169.682517][ T9630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.006466][ T9653] ieee802154 phy1 wpan1: encryption failed: -22
[  170.478175][ T9680] __nla_validate_parse: 14 callbacks suppressed
[  170.478197][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'.
[  170.729903][ T9689] netlink: 'syz.0.1041': attribute type 1 has an invalid length.
[  170.739936][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'.
[  171.271419][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  171.279138][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout
[  171.534485][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'.
[  171.606850][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'.
[  171.642887][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'.
[  171.810888][ T9736] ipt_REJECT: TCP_RESET invalid for non-tcp
[  172.395880][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.453697][ T9773] sit0: entered promiscuous mode
[  172.526498][ T9773] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  172.589080][ T9773] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1066'.
[  172.618033][ T8194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.645221][ T9776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.645422][ T8194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.013787][ T9798] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1075'.
[  173.167703][ T9804] syzkaller1: entered promiscuous mode
[  173.173600][ T9804] syzkaller1: entered allmulticast mode
[  174.137566][ T9845] vxcan3: entered allmulticast mode
[  174.490978][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'.
[  174.503653][ T9827] netlink: 'syz.4.1084': attribute type 58 has an invalid length.
[  174.509209][ T9868] netlink: 'syz.4.1084': attribute type 58 has an invalid length.
[  174.536651][ T9871] bridge_slave_0: entered promiscuous mode
[  174.545152][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'.
[  174.552040][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'.
[  175.048877][ T9900] xt_l2tp: unknown flags: 18
[  175.137732][ T9904] netlink: 'syz.1.1108': attribute type 1 has an invalid length.
[  175.617928][ T9931] netlink: 'syz.0.1115': attribute type 62 has an invalid length.
[  175.658871][ T9927] netlink: 'syz.0.1115': attribute type 29 has an invalid length.
[  175.684212][ T9931] Cannot find set identified by id 4 to match
[  175.731416][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'.
[  176.143034][ T9962] x_tables: duplicate underflow at hook 2
[  176.523377][ T9979] macsec0: entered promiscuous mode
[  176.528774][ T9979] macsec0: entered allmulticast mode
[  176.549464][ T9979] veth1_macvtap: entered allmulticast mode
[  176.579646][ T9979] macsec0: left promiscuous mode
[  176.594562][ T9979] macsec0: left allmulticast mode
[  176.604718][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'.
[  176.626016][ T9979] veth1_macvtap: left allmulticast mode
[  176.670606][ T9983] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  176.825176][ T9983] macsec0: entered promiscuous mode
[  176.855260][ T9983] macsec0: entered allmulticast mode
[  176.913104][ T9992] veth1_macvtap: entered allmulticast mode
[  176.919234][ T9992] macsec0: left promiscuous mode
[  176.960313][ T9992] macsec0: left allmulticast mode
[  176.987825][ T9992] veth1_macvtap: left allmulticast mode
[  177.515920][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'.
[  177.517650][T10034] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  177.624571][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'.
[  177.633094][T10045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.703267][T10050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.847766][T10057] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  177.926350][T10062] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  178.162780][T10076] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1151'.
[  178.366799][T10086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1155'.
[  178.407631][T10088] xt_cgroup: invalid path, errno=-2
[  178.514712][T10079] netlink: zone id is out of range
[  178.544860][T10079] netlink: del zone limit has 4 unknown bytes
[  178.583652][T10100] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  178.689597][T10099] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  179.078968][T10123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1162'.
[  179.170063][T10130] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  179.229439][T10128] syzkaller0: entered allmulticast mode
[  179.260998][T10130] netlink: 'syz.3.1164': attribute type 23 has an invalid length.
[  179.309929][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1164'.
[  179.325478][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1164'.
[  179.527659][T10142] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1166'.
[  179.623537][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.707559][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.747365][T10150] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000
[  179.756920][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.779407][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.894993][T10211] netlink: 'syz.4.1186': attribute type 21 has an invalid length.
[  180.924702][T10214] netlink: 'syz.1.1187': attribute type 12 has an invalid length.
[  180.935637][T10211] __nla_validate_parse: 2 callbacks suppressed
[  180.935653][T10211] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1186'.
[  180.952079][T10214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1187'.
[  181.198981][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  181.230350][T10229] Cannot find add_set index 4 as target
[  181.409154][T10239] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1193'.
[  182.681469][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'.
[  182.975881][T10330] xt_l2tp: missing protocol rule (udp|l2tpip)
[  183.245767][T10345] netlink: 'syz.2.1217': attribute type 136 has an invalid length.
[  183.267313][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'.
[  183.271117][T10345] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1217'.
[  183.878254][T10379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1223'.
[  183.994056][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'.
[  184.012240][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'.
[  185.055759][T10434] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  185.064551][T10440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  185.278771][T10450] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  185.540153][T10451] syzkaller0: tun_chr_ioctl cmd 1074025677
[  185.550124][T10451] syzkaller0: Linktype set failed because interface is up
[  185.562261][   T24] syzkaller0: tun_net_xmit 76
[  185.572592][T10462] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  185.776875][ T5913] syzkaller0: tun_net_xmit 76
[  187.635678][T10474] __nla_validate_parse: 5 callbacks suppressed
[  187.635696][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'.
[  188.020462][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'.
[  188.126695][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'.
[  188.171435][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'.
[  188.226238][T10529] netlink: 'syz.3.1271': attribute type 29 has an invalid length.
[  188.316492][T10536] Unknown options in mask 1f4
[  188.526103][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'.
[  188.680411][T10552] netlink: 'syz.2.1279': attribute type 32 has an invalid length.
[  188.807956][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'.
[  189.575827][T10599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1290'.
[  189.671068][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'.
[  189.812530][T10604] SET target dimension over the limit!
[  190.067936][   T30] audit: type=1800 audit(1750839482.240:2): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1299" name="memory.events" dev="tmpfs" ino=1335 res=0 errno=0
[  190.133443][ T5851] Bluetooth: hci4: link tx timeout
[  190.140921][ T5851] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.513014][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.549548][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.778779][T10668] xt_l2tp: wrong L2TP version: 0
[  190.931711][T10678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1311'.
[  191.171000][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'.
[  191.286333][T10681] team0: Port device bond0 removed
[  191.343207][T10681] bond0: (slave bond_slave_1): Releasing backup interface
[  191.374685][T10681] team0: Port device team_slave_0 removed
[  191.400720][T10681] team0: Port device team_slave_1 removed
[  191.414915][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.426431][T10681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.454602][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.463805][T10681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.747598][T10714] batadv1: entered allmulticast mode
[  191.810424][T10720] netlink: 'syz.1.1326': attribute type 1 has an invalid length.
[  191.830461][T10718] netlink: 'syz.1.1326': attribute type 21 has an invalid length.
[  191.857202][T10724] sctp: [Deprecated]: syz.0.1327 (pid 10724) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.857202][T10724] Use struct sctp_sack_info instead
[  192.053148][T10728] bridge_slave_0: left allmulticast mode
[  192.058875][T10728] bridge_slave_0: left promiscuous mode
[  192.091898][T10728] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.146052][T10728] bridge_slave_1: left allmulticast mode
[  192.160817][T10728] bridge_slave_1: left promiscuous mode
[  192.170353][T10728] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.193226][T10728] bond0: (slave bond_slave_0): Releasing backup interface
[  192.214768][T10737] netlink: 'syz.0.1330': attribute type 10 has an invalid length.
[  192.234904][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  192.249801][T10728] bond0: (slave bond_slave_1): Releasing backup interface
[  192.317542][T10728] team0: Port device C removed
[  192.355773][T10728] team0: Port device team_slave_1 removed
[  192.370201][T10728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.381082][T10728] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.480903][T10728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.498360][T10728] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.544599][T10728] bond1: (slave geneve2): Releasing active interface
[  192.565384][T10728] geneve2: left promiscuous mode
[  192.739771][T10737] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  192.759296][T10753] __nla_validate_parse: 4 callbacks suppressed
[  192.759313][T10753] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1337'.
[  192.832059][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'.
[  193.030860][T10770] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1340'.
[  193.068889][T10768] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1340'.
[  193.119863][T10770] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  193.164379][T10768] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1340'.
[  193.569597][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1341'.
[  193.615536][T10789] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.636981][T10794] tc_dump_action: action bad kind
[  193.760659][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'.
[  194.565802][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.627929][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1360'.
[  194.733880][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  194.815382][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'.
[  195.780426][T10905] net_ratelimit: 29 callbacks suppressed
[  195.780444][T10905] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  196.532242][T10933] x_tables: duplicate underflow at hook 2
[  197.009208][T10956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  197.191614][T10966] sctp: [Deprecated]: syz.0.1396 (pid 10966) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.191614][T10966] Use struct sctp_sack_info instead
[  197.217622][T10966] sctp: [Deprecated]: syz.0.1396 (pid 10966) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.217622][T10966] Use struct sctp_sack_info instead
[  197.480825][T10980] netlink: 'syz.1.1399': attribute type 1 has an invalid length.
[  197.731778][T10991] netlink: 'syz.0.1403': attribute type 1 has an invalid length.
[  197.854114][T10985] 8021q: adding VLAN 0 to HW filter on device bond3
[  197.864528][T10985] bond2: (slave bond3): making interface the new active one
[  197.874370][T10985] bond2: (slave bond3): Enslaving as an active interface with an up link
[  197.884037][T10989] lo: entered promiscuous mode
[  197.918729][T10989] lo: entered allmulticast mode
[  197.926008][T10989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.004352][T10991] 8021q: adding VLAN 0 to HW filter on device bond1
[  198.108151][T10992] bond1: (slave veth5): Enslaving as an active interface with a down link
[  198.498733][T11027] __nla_validate_parse: 7 callbacks suppressed
[  198.498752][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  198.562127][T11030] x_tables: duplicate underflow at hook 2
[  199.108184][T11058] netlink: 'syz.4.1422': attribute type 1 has an invalid length.
[  199.126536][T11058] netlink: 'syz.4.1422': attribute type 1 has an invalid length.
[  199.146915][T11058] netlink: 'syz.4.1422': attribute type 1 has an invalid length.
[  199.187540][T11058] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1422'.
[  199.281872][T11062] netlink: 'syz.0.1423': attribute type 29 has an invalid length.
[  199.355072][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'.
[  199.507079][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'.
[  199.915050][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1429'.
[  199.941312][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1429'.
[  200.908298][T11090] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.937680][T11090] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.967326][T11090] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.996845][T11090] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.756482][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  201.762894][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  201.769060][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  202.338490][T11190] xt_CT: No such helper "pptp"
[  224.710517][T11275] netlink: 'syz.2.1461': attribute type 2 has an invalid length.
[  224.760478][T11277] netlink: 'syz.4.1464': attribute type 32 has an invalid length.
[  225.045231][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'.
[  225.245022][T11301] netlink: 'syz.0.1473': attribute type 21 has an invalid length.
[  225.269898][T11301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1473'.
[  225.304263][T11305] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1475'.
[  225.315203][T11305] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1475'.
[  225.445913][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'.
[  225.551480][T11323] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  225.558367][T11323] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  225.622045][T11321] macsec1: entered promiscuous mode
[  225.627323][T11321] batadv_slave_1: entered promiscuous mode
[  225.650482][T11321] macsec1: entered allmulticast mode
[  225.667134][T11321] batadv_slave_1: entered allmulticast mode
[  225.677115][T11330] netlink: 'syz.3.1483': attribute type 1 has an invalid length.
[  225.714020][T11330] netlink: 'syz.3.1483': attribute type 10 has an invalid length.
[  225.756698][T11330] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1483'.
[  226.068520][T11345] x_tables: unsorted underflow at hook 1
[  226.244938][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'.
[  226.256343][T11360] chnl_net:caif_netlink_parms(): no params data found
[  226.295974][T11367] x_tables: unsorted underflow at hook 3
[  226.369422][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'.
[  226.593989][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1500'.
[  226.646113][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  227.129852][T11410] netlink: 'syz.1.1508': attribute type 9 has an invalid length.
[  227.220687][T11419] netlink: 'syz.2.1510': attribute type 30 has an invalid length.
[  228.095286][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024ebc000: rx timeout, send abort
[  228.368944][T11478] pimreg3: entered allmulticast mode
[  228.392687][T11478] ipt_REJECT: TCP_RESET invalid for non-tcp
[  228.604849][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024ebc000: abort rx timeout. Force session deactivation
[  229.468459][T11492] netlink: 'syz.1.1535': attribute type 2 has an invalid length.
[  229.843205][T11548] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.881488][T11550] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004
[  230.070414][T11554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.100937][T11554] x_tables: duplicate underflow at hook 2
[  230.149520][T11559] __nla_validate_parse: 6 callbacks suppressed
[  230.149538][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'.
[  230.310320][T11559] team0: entered promiscuous mode
[  230.351859][T11559] team0: entered allmulticast mode
[  230.822967][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'.
[  230.837490][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'.
[  231.029105][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'.
[  231.265467][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'.
[  231.641958][T11621] netlink: 'syz.3.1571': attribute type 4 has an invalid length.
[  231.660814][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'.
[  231.982992][    C1] vcan0: j1939_tp_rxtimer: 0xffff888058c7ec00: rx timeout, send abort
[  232.260316][T11660] netlink: 'syz.0.1578': attribute type 10 has an invalid length.
[  232.272742][T11660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  232.297070][T11661] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  232.492272][    C1] vcan0: j1939_tp_rxtimer: 0xffff888058c7ec00: abort rx timeout. Force session deactivation
[  232.706014][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'.
[  232.775554][T11683] netlink: 'syz.4.1582': attribute type 1 has an invalid length.
[  232.819995][T11683] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1582'.
[  232.831156][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'.
[  232.848805][T11690] netlink: 'syz.2.1584': attribute type 15 has an invalid length.
[  233.149754][T11708] IPVS: stopping master sync thread 8640 ...
[  233.256051][T11712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1590'.
[  233.433562][ T5949] Dead loop on virtual device ip6_vti0, fix it urgently!
[  233.948677][T11756] netlink: 'syz.3.1603': attribute type 1 has an invalid length.
[  234.118985][T11757] bond2: entered promiscuous mode
[  234.124585][T11757] bond2: entered allmulticast mode
[  234.135025][T11757] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.304880][   T49] tipc: Subscription rejected, illegal request
[  234.480154][T11779] veth0: entered promiscuous mode
[  235.438921][ T8188] Dead loop on virtual device ip6_vti0, fix it urgently!
[  235.477627][T11834] __nla_validate_parse: 5 callbacks suppressed
[  235.477647][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'.
[  235.685125][T11836] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  235.951855][T11843] FAULT_INJECTION: forcing a failure.
[  235.951855][T11843] name failslab, interval 1, probability 0, space 0, times 1
[  235.976461][T11843] CPU: 1 UID: 0 PID: 11843 Comm: syz.2.1627 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) 
[  235.976489][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  235.976499][T11843] Call Trace:
[  235.976506][T11843]  <TASK>
[  235.976515][T11843]  dump_stack_lvl+0x189/0x250
[  235.976552][T11843]  ? __pfx____ratelimit+0x10/0x10
[  235.976576][T11843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.976599][T11843]  ? __pfx__printk+0x10/0x10
[  235.976625][T11843]  ? __pfx___might_resched+0x10/0x10
[  235.976648][T11843]  ? fs_reclaim_acquire+0x7d/0x100
[  235.976671][T11843]  should_fail_ex+0x414/0x560
[  235.976698][T11843]  should_failslab+0xa8/0x100
[  235.976717][T11843]  __kmalloc_noprof+0xcb/0x4f0
[  235.976732][T11843]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  235.976753][T11843]  ? sock_kmalloc+0xd6/0x160
[  235.976780][T11843]  sock_kmalloc+0xd6/0x160
[  235.976803][T11843]  af_alg_sendmsg+0x109c/0x22e0
[  235.976823][T11843]  ? __pfx___might_resched+0x10/0x10
[  235.976868][T11843]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  235.976887][T11843]  ? __pfx_aa_sk_perm+0x10/0x10
[  235.976904][T11843]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  235.976932][T11843]  ? aa_sock_msg_perm+0x94/0x160
[  235.976954][T11843]  ? aead_sendmsg+0x26/0xf0
[  235.976974][T11843]  ? __pfx_aead_sendmsg+0x10/0x10
[  235.976996][T11843]  __sock_sendmsg+0x219/0x270
[  235.977022][T11843]  __sys_sendto+0x3bd/0x520
[  235.977044][T11843]  ? __pfx___sys_sendto+0x10/0x10
[  235.977073][T11843]  ? count_memcg_event_mm+0x21/0x260
[  235.977109][T11843]  ? exc_page_fault+0x76/0xf0
[  235.977134][T11843]  ? do_user_addr_fault+0xc8a/0x1390
[  235.977159][T11843]  __x64_sys_sendto+0xde/0x100
[  235.977181][T11843]  do_syscall_64+0xfa/0x3b0
[  235.977196][T11843]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.977217][T11843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.977233][T11843]  ? clear_bhb_loop+0x60/0xb0
[  235.977253][T11843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.977269][T11843] RIP: 0033:0x7f93d93907bc
[  235.977288][T11843] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  235.977301][T11843] RSP: 002b:00007f93d71f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  235.977323][T11843] RAX: ffffffffffffffda RBX: 00007f93d71f4fc0 RCX: 00007f93d93907bc
[  235.977335][T11843] RDX: 0000000000000020 RSI: 00007f93d71f5010 RDI: 0000000000000004
[  235.977345][T11843] RBP: 0000000000000000 R08: 00007f93d71f4f14 R09: 000000000000000c
[  235.977355][T11843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  235.977365][T11843] R13: 00007f93d71f4f68 R14: 00007f93d71f5010 R15: 0000000000000000
[  235.977394][T11843]  </TASK>
[  236.273957][ T8188] Dead loop on virtual device ip6_vti0, fix it urgently!
[  236.367230][T11853] netlink: 'syz.2.1630': attribute type 11 has an invalid length.
[  236.385618][T11853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1630'.
[  236.641772][T11851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1628'.
[  237.577228][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.669034][T11881] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1640'.
[  237.752623][T11881] netlink: zone id is out of range
[  237.757810][T11881] netlink: zone id is out of range
[  237.793046][T11881] netlink: zone id is out of range
[  237.798226][T11881] netlink: zone id is out of range
[  237.861276][T11881] netlink: get zone limit has 8 unknown bytes
[  237.930640][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.007396][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'.
[  238.180260][T11913] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  238.220331][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.221478][T11914] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  238.429052][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.538155][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'.
[  238.654516][T11925] netlink: 'syz.0.1650': attribute type 2 has an invalid length.
[  238.693228][T11925] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1650'.
[  238.702250][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.713918][T11925] nbd: must specify a device to reconfigure
[  238.714388][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.729542][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.738266][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.753280][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.893252][T11938] netlink: 'syz.3.1653': attribute type 10 has an invalid length.
[  238.968825][T11943] netlink: 'syz.2.1654': attribute type 29 has an invalid length.
[  239.654992][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'.
[  240.180630][   T49] bond0 (unregistering): Released all slaves
[  240.196995][   T49] bond1 (unregistering): Released all slaves
[  240.214926][   T49] bond2 (unregistering): (slave bond3): Releasing backup interface
[  240.224036][   T49] bond2 (unregistering): Released all slaves
[  240.333830][   T49] bond3 (unregistering): Released all slaves
[  240.514499][   T49] : left promiscuous mode
[  240.568362][T11975] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  240.587877][T11979] FAULT_INJECTION: forcing a failure.
[  240.587877][T11979] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  240.606983][T11979] CPU: 1 UID: 0 PID: 11979 Comm: syz.3.1662 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) 
[  240.607008][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  240.607026][T11979] Call Trace:
[  240.607036][T11979]  <TASK>
[  240.607042][T11979]  dump_stack_lvl+0x189/0x250
[  240.607067][T11979]  ? __pfx____ratelimit+0x10/0x10
[  240.607087][T11979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.607106][T11979]  ? __pfx__printk+0x10/0x10
[  240.607122][T11979]  ? __might_fault+0xb0/0x130
[  240.607152][T11979]  should_fail_ex+0x414/0x560
[  240.607174][T11979]  _copy_from_user+0x2d/0xb0
[  240.607189][T11979]  ___sys_sendmsg+0x158/0x2a0
[  240.607209][T11979]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.607257][T11979]  ? __fget_files+0x2a/0x420
[  240.607272][T11979]  ? __fget_files+0x3a0/0x420
[  240.607295][T11979]  __sys_sendmmsg+0x227/0x430
[  240.607317][T11979]  ? __pfx___sys_sendmmsg+0x10/0x10
[  240.607332][T11979]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  240.607369][T11979]  ? ksys_write+0x22a/0x250
[  240.607385][T11979]  ? __pfx_ksys_write+0x10/0x10
[  240.607396][T11979]  ? rcu_is_watching+0x15/0xb0
[  240.607421][T11979]  __x64_sys_sendmmsg+0xa0/0xc0
[  240.607440][T11979]  do_syscall_64+0xfa/0x3b0
[  240.607453][T11979]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.607471][T11979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.607485][T11979]  ? clear_bhb_loop+0x60/0xb0
[  240.607502][T11979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.607515][T11979] RIP: 0033:0x7fda4e78e929
[  240.607529][T11979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.607540][T11979] RSP: 002b:00007fda4f677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  240.607556][T11979] RAX: ffffffffffffffda RBX: 00007fda4e9b5fa0 RCX: 00007fda4e78e929
[  240.607566][T11979] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003
[  240.607575][T11979] RBP: 00007fda4f677090 R08: 0000000000000000 R09: 0000000000000000
[  240.607583][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.607591][T11979] R13: 0000000000000000 R14: 00007fda4e9b5fa0 R15: 00007ffd929f6988
[  240.607616][T11979]  </TASK>
[  240.832801][ T5838] Bluetooth: hci1: command tx timeout
[  241.044685][   T49] tipc: Left network mode
[  241.840862][T12033] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1678'.
[  241.903708][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'.
[  241.997949][T11932] chnl_net:caif_netlink_parms(): no params data found
[  242.094345][T12020] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  242.108131][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'.
[  242.195399][T12027] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.873819][ T5838] Bluetooth: hci1: command tx timeout
[  242.960955][   T49] hsr_slave_0: left promiscuous mode
[  242.970833][   T49] hsr_slave_1: left promiscuous mode
[  242.994341][   T49] veth0_vlan: left promiscuous mode
[  243.133393][T12088] netlink: 'syz.0.1693': attribute type 39 has an invalid length.
[  243.345738][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'.
[  244.052143][T12083] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  244.162825][T11932] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.205044][T11932] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.216478][T11932] bridge_slave_0: entered allmulticast mode
[  244.228493][T11932] bridge_slave_0: entered promiscuous mode
[  244.258311][T11932] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.271485][T11932] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.286366][T11932] bridge_slave_1: entered allmulticast mode
[  244.300498][T11932] bridge_slave_1: entered promiscuous mode
[  244.429908][T11932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.499493][T11932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.741626][T11932] team0: Port device team_slave_0 added
[  244.765221][T11932] team0: Port device team_slave_1 added
[  244.832699][T12133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1704'.
[  244.953172][ T5838] Bluetooth: hci1: command tx timeout
[  245.006562][T11932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.060904][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.094639][T11932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.145024][T12147] netlink: 'syz.0.1706': attribute type 5 has an invalid length.
[  245.181605][T11932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.188694][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.226326][T11932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.270247][   T49] IPVS: stop unused estimator thread 0...
[  245.476062][T11932] hsr_slave_0: entered promiscuous mode
[  245.485048][T11932] hsr_slave_1: entered promiscuous mode
[  245.508938][T11932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.538415][T11932] Cannot create hsr debugfs directory
[  245.676243][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1714'.
[  245.730062][T12175] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  245.781719][T12173] netlink: 'syz.3.1714': attribute type 23 has an invalid length.
[  246.236803][T12204] Bluetooth: MGMT ver 1.23
[  246.439694][T12212] ipvlan2: entered promiscuous mode
[  246.448574][T12212] bridge0: port 1(ipvlan2) entered blocking state
[  246.459750][T12212] bridge0: port 1(ipvlan2) entered disabled state
[  246.467315][T12212] ipvlan2: entered allmulticast mode
[  246.476006][T12212] ipvlan2: left allmulticast mode
[  246.823938][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'.
[  246.872038][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1730'.
[  247.032757][ T5838] Bluetooth: hci1: command tx timeout
[  247.286017][T12246] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1733'.
[  247.374765][T11932] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  247.410120][T11932] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  247.450473][T11932] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  247.551125][T11932] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  247.627407][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'.
[  247.955284][T12290] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1743'.
[  248.023621][T11932] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.081750][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'.
[  248.100753][T11932] 8021q: adding VLAN 0 to HW filter on device team0
[  248.206054][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.213386][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.229826][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.237062][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.451064][T12311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1751'.
[  248.578676][T12315] bridge0: the hash_elasticity option has been deprecated and is always 16
[  248.639478][T12315] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.750151][T12323] bridge0: the hash_elasticity option has been deprecated and is always 16
[  249.149456][T12348] ipvlan2: entered promiscuous mode
[  249.200189][T12348] bridge0: port 1(ipvlan2) entered blocking state
[  249.207724][T12348] bridge0: port 1(ipvlan2) entered disabled state
[  249.215497][T12348] ipvlan2: entered allmulticast mode
[  249.223498][T12348] ipvlan2: left allmulticast mode
[  249.587678][T11932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.700667][T12381] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  249.745686][T12386] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1768'.
[  249.888624][T11932] veth0_vlan: entered promiscuous mode
[  249.948664][T11932] veth1_vlan: entered promiscuous mode
[  250.088873][T11932] veth0_macvtap: entered promiscuous mode
[  250.173526][T11932] veth1_macvtap: entered promiscuous mode
[  250.267530][T11932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.316681][T11932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.353517][T12407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.510119][T11932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.541223][T11932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.581276][T11932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.611686][T11932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.024357][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.059525][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.114634][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.151428][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.246917][T12458] openvswitch: netlink: Duplicate or invalid key (type 0).
[  251.256810][T12458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.649716][T12471] bond3: entered promiscuous mode
[  251.668012][T12471] bond3: entered allmulticast mode
[  251.683955][T12471] 8021q: adding VLAN 0 to HW filter on device bond3
[  252.014057][   T74] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.156518][   T74] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.767767][   T74] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.997534][   T74] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.059223][T12543] xt_hashlimit: size too large, truncated to 1048576
[  253.087472][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'.
[  253.221991][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.233466][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.274883][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.301772][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.311470][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.984797][T12584] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1818'.
[  254.026348][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'.
[  254.066390][T12588] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  254.085837][T12588] team0: Device ipvlan3 is already an upper device of the team interface
[  254.205601][   T74] bridge_slave_1: left allmulticast mode
[  254.223191][   T74] bridge_slave_1: left promiscuous mode
[  254.231999][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.337020][   T74] bridge_slave_0: left allmulticast mode
[  254.343256][   T74] bridge_slave_0: left promiscuous mode
[  254.350317][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.478598][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'.
[  254.756184][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.767366][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.777628][   T74] bond0 (unregistering): Released all slaves
[  254.948200][T12553] chnl_net:caif_netlink_parms(): no params data found
[  255.345892][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1829'.
[  255.355007][ T5851] Bluetooth: hci1: command tx timeout
[  255.390892][T12640] vlan2: entered promiscuous mode
[  255.397127][T12640] bridge0: entered promiscuous mode
[  255.711104][   T74] hsr_slave_0: left promiscuous mode
[  255.722519][   T74] hsr_slave_1: left promiscuous mode
[  255.728650][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.754304][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.775756][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.789136][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.842267][   T74] veth1_macvtap: left promiscuous mode
[  255.847918][   T74] veth0_macvtap: left promiscuous mode
[  255.861543][   T74] veth1_vlan: left promiscuous mode
[  255.866938][   T74] veth0_vlan: left promiscuous mode
[  256.009829][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  256.673695][   T74] team0 (unregistering): Port device team_slave_1 removed
[  256.753446][   T74] team0 (unregistering): Port device team_slave_0 removed
[  257.165117][T12553] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.172662][T12553] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.180632][T12553] bridge_slave_0: entered allmulticast mode
[  257.190855][T12553] bridge_slave_0: entered promiscuous mode
[  257.250754][T12553] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.277868][T12553] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.301729][T12553] bridge_slave_1: entered allmulticast mode
[  257.342267][T12553] bridge_slave_1: entered promiscuous mode
[  257.390119][T12693] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1840'.
[  257.431591][ T5851] Bluetooth: hci1: command tx timeout
[  257.433227][T12693] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1840'.
[  257.499364][T12700] netlink: 133 bytes leftover after parsing attributes in process `syz.2.1840'.
[  257.566171][T12553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.579271][T12553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.770054][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'.
[  257.788302][T12553] team0: Port device team_slave_0 added
[  257.808605][T12553] team0: Port device team_slave_1 added
[  258.026474][T12553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.068408][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.151029][T12553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.200940][T12553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.223636][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.351564][T12553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.457072][T12743] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1853'.
[  258.489798][T12732] veth0: entered promiscuous mode
[  258.584056][T12732] veth0: left promiscuous mode
[  258.613088][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'.
[  258.655725][T12753] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  258.738729][T12553] hsr_slave_0: entered promiscuous mode
[  258.783794][T12553] hsr_slave_1: entered promiscuous mode
[  258.790538][T12553] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.820692][T12553] Cannot create hsr debugfs directory
[  259.136892][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'.
[  259.511881][ T5851] Bluetooth: hci1: command tx timeout
[  259.547818][T12799] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  259.727263][T12811] netlink: 'syz.3.1871': attribute type 8 has an invalid length.
[  260.514204][T12553] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  260.543588][T12553] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  260.601961][T12553] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  260.668859][T12553] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  260.818164][T12863] xt_SECMARK: invalid mode: 33
[  260.905000][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'.
[  261.082485][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1893'.
[  261.172024][T12553] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.260991][T12553] 8021q: adding VLAN 0 to HW filter on device team0
[  261.311233][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.319494][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.366111][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.373368][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.545851][T12907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1897'.
[  261.594869][ T5851] Bluetooth: hci1: command tx timeout
[  262.121894][T12553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.200636][T12940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1905'.
[  262.295751][T12553] veth0_vlan: entered promiscuous mode
[  262.350892][T12553] veth1_vlan: entered promiscuous mode
[  262.490023][T12959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1910'.
[  262.508175][T12553] veth0_macvtap: entered promiscuous mode
[  262.534607][T12553] veth1_macvtap: entered promiscuous mode
[  262.629512][T12553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.679799][T12553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.717783][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1912'.
[  262.735769][T12553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.763901][T12553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.781699][T12553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.790438][T12553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.845616][T12968] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1912'.
[  263.071642][T12981] netlink: 'syz.3.1915': attribute type 7 has an invalid length.
[  263.080536][T12981] netlink: 'syz.3.1915': attribute type 7 has an invalid length.
[  263.161698][ T8190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.188984][ T8190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.256404][ T8184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.276954][ T8184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.498537][T13005] __nla_validate_parse: 3 callbacks suppressed
[  263.498555][T13005] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1922'.
[  263.533632][T13006] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  263.549127][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'.
[  263.576977][T13006] tap0: tun_chr_ioctl cmd 1074025672
[  263.582967][T13006] tap0: ignored: set checksum disabled
[  263.600710][T13008] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1924'.
[  263.610937][T13009] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1924'.
[  263.691937][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1926'.
[  263.980862][T13024] netdevsim netdevsim4: Direct firmware load for  failed with error -2
[  264.025851][T13024] netdevsim netdevsim4: Falling back to sysfs fallback for: 
[  264.053863][T13026] team0: Device gtp0 is up. Set it down before adding it as a team port
[  264.187651][ T8184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.227911][T13032] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  264.238625][T13032] macsec1: entered allmulticast mode
[  264.249715][T13032] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  264.266284][T13032] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  264.275318][T13032] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  264.420124][T13038] netlink: 'syz.2.1934': attribute type 21 has an invalid length.
[  264.431997][ T8184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.488096][T13036] sch_fq: defrate 0 ignored.
[  264.510920][T13038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1934'.
[  264.705535][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1937'.
[  264.790028][ T8184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.902090][T13057] netlink: 'syz.0.1939': attribute type 11 has an invalid length.
[  264.912830][T13057] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1939'.
[  265.011012][ T8184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.162291][T13072] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20128 - 0
[  265.197214][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  265.200418][T13072] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20128 - 0
[  265.218157][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  265.227273][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  265.233660][T13072] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20128 - 0
[  265.249654][T13072] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20128 - 0
[  265.260955][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'.
[  265.270696][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  265.287339][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  265.311137][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1945'.
[  265.375084][T13084] vlan2: entered allmulticast mode
[  265.380451][T13084] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  265.663229][ T8184] bridge_slave_1: left allmulticast mode
[  265.668952][ T8184] bridge_slave_1: left promiscuous mode
[  265.696843][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.702263][T13094] netlink: 'syz.2.1952': attribute type 2 has an invalid length.
[  265.718407][ T8184] bridge_slave_0: left allmulticast mode
[  265.726499][ T8184] bridge_slave_0: left promiscuous mode
[  265.742369][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.354624][ T8184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.366650][ T8184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.377049][ T8184] bond0 (unregistering): Released all slaves
[  267.353627][ T5838] Bluetooth: hci1: command tx timeout
[  267.537693][ T8184] hsr_slave_0: left promiscuous mode
[  267.575847][ T8184] hsr_slave_1: left promiscuous mode
[  267.590206][ T8184] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.609624][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.636397][ T8184] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.649592][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.677412][ T8184] veth1_macvtap: left promiscuous mode
[  267.702488][ T8184] veth0_macvtap: left promiscuous mode
[  267.708217][ T8184] veth1_vlan: left promiscuous mode
[  267.718006][ T8184] veth0_vlan: left promiscuous mode
[  267.790023][T13183] netlink: 'syz.3.1967': attribute type 6 has an invalid length.
[  268.239327][ T8184] team0 (unregistering): Port device team_slave_1 removed
[  268.287660][ T8184] team0 (unregistering): Port device team_slave_0 removed
[  268.645525][T13190] __nla_validate_parse: 6 callbacks suppressed
[  268.645542][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'.
[  268.874824][T13172] dvmrp1: entered allmulticast mode
[  269.438536][ T5838] Bluetooth: hci1: command tx timeout
[  269.463683][T13224] ip6t_srh: unknown srh invflags 5F00
[  270.548671][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1982'.
[  270.916159][T13074] chnl_net:caif_netlink_parms(): no params data found
[  271.091643][T13236] netlink: 'syz.2.1983': attribute type 83 has an invalid length.
[  271.388120][T13261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1988'.
[  271.480498][T13074] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.500079][T13074] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.511599][ T5838] Bluetooth: hci1: command tx timeout
[  271.554598][T13074] bridge_slave_0: entered allmulticast mode
[  271.612473][T13074] bridge_slave_0: entered promiscuous mode
[  271.757436][T13074] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.775153][T13074] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.794875][T13074] bridge_slave_1: entered allmulticast mode
[  271.803651][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'.
[  271.821000][T13074] bridge_slave_1: entered promiscuous mode
[  271.839809][T13274] sit0: entered promiscuous mode
[  271.845254][T13274] netlink: 'syz.0.1990': attribute type 1 has an invalid length.
[  271.881548][T13274] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1990'.
[  271.892009][T13276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.993062][T13283] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1993'.
[  272.164606][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  272.219497][T13074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.283679][T13074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.366404][T13301] netlink: 'syz.2.1998': attribute type 2 has an invalid length.
[  272.454522][T13305] delete_channel: no stack
[  272.486835][T13074] team0: Port device team_slave_0 added
[  272.571843][T13074] team0: Port device team_slave_1 added
[  272.659457][T13074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.672068][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.701132][T13074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.743938][T13074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.853109][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.911388][T13074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.992396][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2002'.
[  273.008035][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2002'.
[  273.290092][T13074] hsr_slave_0: entered promiscuous mode
[  273.300462][T13074] hsr_slave_1: entered promiscuous mode
[  273.317001][T13074] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.328142][T13074] Cannot create hsr debugfs directory
[  273.482049][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'.
[  273.591664][ T5838] Bluetooth: hci1: command tx timeout
[  273.798351][T13359] __nla_validate_parse: 1 callbacks suppressed
[  273.798369][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2011'.
[  273.974400][T13365] sctp: [Deprecated]: syz.0.2014 (pid 13365) Use of int in maxseg socket option.
[  273.974400][T13365] Use struct sctp_assoc_value instead
[  274.065390][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'.
[  274.113168][T13372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'.
[  274.160411][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'.
[  274.417501][T13386] netlink: 'syz.3.2020': attribute type 1 has an invalid length.
[  274.488606][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[  274.544036][T13386] 8021q: adding VLAN 0 to HW filter on device bond3
[  274.565255][T13393] bond3: (slave gretap1): making interface the new active one
[  274.574585][T13393] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  274.603220][T13393] syz.3.2020 (13393) used greatest stack depth: 19088 bytes left
[  274.619540][T13390] netlink: 'syz.4.2022': attribute type 4 has an invalid length.
[  274.657297][T13390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2022'.
[  274.916015][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2025'.
[  274.970356][T13074] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  275.049586][T13074] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  275.090985][T13074] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  275.123069][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'.
[  275.153177][T13426] vlan3: entered promiscuous mode
[  275.163126][T13426] bridge0: entered promiscuous mode
[  275.183895][T13074] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  275.533334][T13449] netlink: 'syz.0.2030': attribute type 83 has an invalid length.
[  275.587349][T13455] IPVS: length: 250 != 24
[  275.616188][T13453] IPVS: length: 250 != 24
[  275.646391][T13074] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.736199][T13074] 8021q: adding VLAN 0 to HW filter on device team0
[  275.739599][T13463] netlink: 'syz.3.2034': attribute type 21 has an invalid length.
[  275.765938][T13463] netlink: 'syz.3.2034': attribute type 6 has an invalid length.
[  275.786575][T13463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2034'.
[  275.809835][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.820358][ T8188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.848188][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.855677][ T8188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.901224][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'.
[  276.057242][T13472] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  276.741482][T13507] dvmrp0: entered allmulticast mode
[  276.881121][T13074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.030266][T13074] veth0_vlan: entered promiscuous mode
[  277.124253][T13524] geneve3: entered promiscuous mode
[  277.129700][T13524] geneve3: entered allmulticast mode
[  277.207252][T13074] veth1_vlan: entered promiscuous mode
[  277.360361][T13074] veth0_macvtap: entered promiscuous mode
[  277.412960][T13074] veth1_macvtap: entered promiscuous mode
[  277.507091][T13074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.550078][T13074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.659720][T13074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.685239][T13074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.700691][T13074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.710447][T13074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.827608][T13557] xt_l2tp: wrong L2TP version: 0
[  278.121024][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.156440][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.172415][T13575] sctp: [Deprecated]: syz.3.2060 (pid 13575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  278.172415][T13575] Use struct sctp_sack_info instead
[  278.336610][ T8194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.366083][ T8194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.457439][T13589] netlink: 'syz.4.2065': attribute type 11 has an invalid length.
[  278.466171][T13589] netlink: 'syz.4.2065': attribute type 11 has an invalid length.
[  279.048312][T13610] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  279.126697][   T74] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.279659][   T74] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.480179][   T74] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.549554][   T74] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.726904][   T74] bridge_slave_1: left allmulticast mode
[  279.737592][   T74] bridge_slave_1: left promiscuous mode
[  279.745197][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.760758][   T74] bridge_slave_0: left allmulticast mode
[  279.767801][   T74] bridge_slave_0: left promiscuous mode
[  279.778571][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.961949][T13645] __nla_validate_parse: 7 callbacks suppressed
[  279.961966][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'.
[  280.387868][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  280.398440][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  280.406460][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  280.415588][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  280.424492][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  280.590116][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.601864][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.612344][   T74] bond0 (unregistering): Released all slaves
[  280.814192][T13660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.887257][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'.
[  280.915171][T13660] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  280.924506][T13660] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  281.087710][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'.
[  281.224561][T13671] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2079'.
[  281.275815][T13672] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2079'.
[  281.405654][   T74] hsr_slave_0: left promiscuous mode
[  281.441339][   T74] hsr_slave_1: left promiscuous mode
[  281.475918][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.512681][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.539767][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.562603][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.638048][   T74] veth1_macvtap: left promiscuous mode
[  281.646127][   T74] veth0_macvtap: left promiscuous mode
[  281.665390][   T74] veth1_vlan: left promiscuous mode
[  281.682098][   T74] veth0_vlan: left promiscuous mode
[  281.817945][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'.
[  282.098369][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'.
[  282.140187][T13717] netlink: 'syz.4.2090': attribute type 83 has an invalid length.
[  282.473724][ T5851] Bluetooth: hci1: command tx timeout
[  282.596108][   T74] team0 (unregistering): Port device team_slave_1 removed
[  282.638328][   T74] team0 (unregistering): Port device team_slave_0 removed
[  283.360971][T13744] netlink: 'syz.3.2093': attribute type 10 has an invalid length.
[  283.381967][T13744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2093'.
[  283.498116][T13744] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  283.568463][T13656] chnl_net:caif_netlink_parms(): no params data found
[  283.713281][T13762] pim6reg1: entered promiscuous mode
[  283.725372][T13762] pim6reg1: entered allmulticast mode
[  284.177861][T13656] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.227648][T13656] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.238784][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2103'.
[  284.256903][T13656] bridge_slave_0: entered allmulticast mode
[  284.293460][T13656] bridge_slave_0: entered promiscuous mode
[  284.357137][T13656] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.369178][T13656] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.450911][T13656] bridge_slave_1: entered allmulticast mode
[  284.470004][T13656] bridge_slave_1: entered promiscuous mode
[  284.561478][ T5851] Bluetooth: hci1: command tx timeout
[  284.608722][T13656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.657994][T13656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.775247][T13656] team0: Port device team_slave_0 added
[  284.812498][T13656] team0: Port device team_slave_1 added
[  284.935785][T13656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.966727][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.082461][T13656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.136032][T13656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.171574][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.260404][T13656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.506375][T13656] hsr_slave_0: entered promiscuous mode
[  285.531618][T13656] hsr_slave_1: entered promiscuous mode
[  285.550732][T13656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.595747][T13656] Cannot create hsr debugfs directory
[  285.922304][T13886] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  285.929932][T13886] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  285.966806][T13886] netlink: 'syz.0.2124': attribute type 10 has an invalid length.
[  285.985013][T13892] sctp: [Deprecated]: syz.2.2125 (pid 13892) Use of int in maxseg socket option.
[  285.985013][T13892] Use struct sctp_assoc_value instead
[  286.079564][T13892] sctp: [Deprecated]: syz.2.2125 (pid 13892) Use of int in maxseg socket option.
[  286.079564][T13892] Use struct sctp_assoc_value instead
[  286.631854][ T5851] Bluetooth: hci1: command tx timeout
[  286.675223][T13919] netlink: 'syz.3.2132': attribute type 7 has an invalid length.
[  286.790072][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  286.817827][T13919] : entered promiscuous mode
[  287.423952][T13656] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  287.535859][T13656] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  287.565070][ T2156] IPVS: starting estimator thread 0...
[  287.568194][T13656] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  287.578458][T13950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  287.657607][T13656] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  287.671697][T13960] IPVS: using max 31 ests per chain, 74400 per kthread
[  288.056159][T13656] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.175796][T13656] 8021q: adding VLAN 0 to HW filter on device team0
[  288.201235][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.208410][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.261086][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.268321][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.643563][T14022] netlink: 'syz.4.2157': attribute type 64 has an invalid length.
[  288.665720][T14022] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2157'.
[  288.712591][T14025] netlink: 'syz.4.2157': attribute type 64 has an invalid length.
[  288.714068][ T5851] Bluetooth: hci1: command tx timeout
[  288.770095][T14025] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2157'.
[  288.940772][T14035] netlink: 'syz.2.2160': attribute type 142 has an invalid length.
[  288.993708][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2161'.
[  289.112386][T14045] netlink: 'syz.3.2163': attribute type 1 has an invalid length.
[  289.154184][T14045] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2163'.
[  289.175945][T13656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.339669][T13656] veth0_vlan: entered promiscuous mode
[  289.393408][T13656] veth1_vlan: entered promiscuous mode
[  289.468937][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'.
[  289.529886][T14067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2168'.
[  289.590947][T14064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2168'.
[  289.633690][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2168'.
[  289.638295][T14073] netlink: 'syz.4.2170': attribute type 21 has an invalid length.
[  289.691477][T14073] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2170'.
[  289.748223][T13656] veth0_macvtap: entered promiscuous mode
[  289.829866][T13656] veth1_macvtap: entered promiscuous mode
[  289.893686][T13656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.935350][T13656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.970145][T13656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.011832][T13656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.040325][T13656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.062293][T13656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.181335][T14097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.203864][T14100] ip6t_REJECT: ECHOREPLY is not supported
[  290.231747][T14101] ip6t_REJECT: ECHOREPLY is not supported
[  290.506475][T14115] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  290.541774][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.549638][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.583319][T14118] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  290.685870][ T8194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.694480][ T8194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.733756][T14125] syz.2.2184 uses old SIOCAX25GETINFO
[  291.349277][ T8194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.465807][ T8194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.628175][ T8194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.777654][ T8194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.927276][ T8194] bridge_slave_1: left allmulticast mode
[  291.939271][ T8194] bridge_slave_1: left promiscuous mode
[  291.947307][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.957503][ T8194] bridge_slave_0: left allmulticast mode
[  291.967154][ T8194] bridge_slave_0: left promiscuous mode
[  291.973124][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.310269][ T8194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.357051][ T8194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.382867][T14169] __nla_validate_parse: 8 callbacks suppressed
[  292.382886][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'.
[  292.412898][ T8194] bond0 (unregistering): Released all slaves
[  293.160146][ T8194] hsr_slave_0: left promiscuous mode
[  293.175790][ T8194] hsr_slave_1: left promiscuous mode
[  293.193169][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.216977][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.227217][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.237439][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.245336][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.252555][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.262750][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.275191][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.285256][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.336005][ T8194] veth1_macvtap: left promiscuous mode
[  293.364878][ T8194] veth0_macvtap: left promiscuous mode
[  293.394522][ T8194] veth1_vlan: left promiscuous mode
[  293.399916][ T8194] veth0_vlan: left promiscuous mode
[  293.506610][T14218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  293.604538][T14228] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2209'.
[  293.786621][T14237] netlink: 'syz.3.2209': attribute type 1 has an invalid length.
[  294.172946][ T8194] team0 (unregistering): Port device team_slave_1 removed
[  294.215198][ T8194] team0 (unregistering): Port device team_slave_0 removed
[  294.849093][T14247] bond2: entered promiscuous mode
[  294.877005][T14247] bond2: entered allmulticast mode
[  294.887615][T14247] 8021q: adding VLAN 0 to HW filter on device bond2
[  295.036025][T14262] FAULT_INJECTION: forcing a failure.
[  295.036025][T14262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.069740][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.4.2217 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) 
[  295.069767][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  295.069777][T14262] Call Trace:
[  295.069784][T14262]  <TASK>
[  295.069791][T14262]  dump_stack_lvl+0x189/0x250
[  295.069819][T14262]  ? __pfx____ratelimit+0x10/0x10
[  295.069842][T14262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.069864][T14262]  ? __pfx__printk+0x10/0x10
[  295.069892][T14262]  should_fail_ex+0x414/0x560
[  295.069915][T14262]  _copy_to_user+0x31/0xb0
[  295.069930][T14262]  simple_read_from_buffer+0xe1/0x170
[  295.069952][T14262]  proc_fail_nth_read+0x1df/0x250
[  295.069974][T14262]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  295.069996][T14262]  ? rw_verify_area+0x258/0x650
[  295.070017][T14262]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  295.070036][T14262]  vfs_read+0x1fd/0x980
[  295.070064][T14262]  ? __pfx___mutex_lock+0x10/0x10
[  295.070080][T14262]  ? __pfx_vfs_read+0x10/0x10
[  295.070103][T14262]  ? __fget_files+0x2a/0x420
[  295.070125][T14262]  ? __fget_files+0x3a0/0x420
[  295.070140][T14262]  ? __fget_files+0x2a/0x420
[  295.070173][T14262]  ksys_read+0x145/0x250
[  295.070190][T14262]  ? __pfx_ksys_read+0x10/0x10
[  295.070217][T14262]  ? do_syscall_64+0xbe/0x3b0
[  295.070242][T14262]  do_syscall_64+0xfa/0x3b0
[  295.070256][T14262]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.070276][T14262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.070291][T14262]  ? clear_bhb_loop+0x60/0xb0
[  295.070310][T14262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.070325][T14262] RIP: 0033:0x7fb6d6b8d33c
[  295.070341][T14262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  295.070355][T14262] RSP: 002b:00007fb6d7abe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  295.070373][T14262] RAX: ffffffffffffffda RBX: 00007fb6d6db6080 RCX: 00007fb6d6b8d33c
[  295.070385][T14262] RDX: 000000000000000f RSI: 00007fb6d7abe0a0 RDI: 0000000000000005
[  295.070395][T14262] RBP: 00007fb6d7abe090 R08: 0000000000000000 R09: 0000000000000000
[  295.070406][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.070415][T14262] R13: 0000000000000000 R14: 00007fb6d6db6080 R15: 00007ffd34984b18
[  295.070443][T14262]  </TASK>
[  295.312345][T14247] bond2 (unregistering): Released all slaves
[  295.351302][ T5851] Bluetooth: hci1: command tx timeout
[  295.714816][T14285] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) !
[  295.780800][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2222'.
[  295.840815][T14285] vlan2: entered promiscuous mode
[  295.870627][T14285] bridge0: entered promiscuous mode
[  296.199159][T14310] tap0: tun_chr_ioctl cmd 1074025672
[  296.216124][T14310] tap0: ignored: set checksum disabled
[  296.293150][T14205] chnl_net:caif_netlink_parms(): no params data found
[  296.373332][T14321] x_tables: duplicate underflow at hook 4
[  296.531370][T14321] netlink: 'syz.4.2233': attribute type 29 has an invalid length.
[  296.539451][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'.
[  296.690028][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'.
[  296.736276][T14336] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2234'.
[  296.883284][T14328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.909677][T14335] netlink: 'syz.4.2235': attribute type 3 has an invalid length.
[  297.046415][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'.
[  297.103254][T14205] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.110859][T14205] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.128316][T14205] bridge_slave_0: entered allmulticast mode
[  297.137251][T14205] bridge_slave_0: entered promiscuous mode
[  297.169697][T14328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.221946][T14205] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.240558][T14205] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.256544][T14205] bridge_slave_1: entered allmulticast mode
[  297.265169][T14205] bridge_slave_1: entered promiscuous mode
[  297.338496][T14359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.431353][ T5851] Bluetooth: hci1: command tx timeout
[  297.444563][T14328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.464419][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2241'.
[  297.513146][T14205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.559684][T14205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.614364][T14328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.631060][T14366] tipc: Can't bind to reserved service type 1
[  297.652808][T14366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2243'.
[  297.671296][ T2156] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec
[  297.807148][T14205] team0: Port device team_slave_0 added
[  297.924015][T14205] team0: Port device team_slave_1 added
[  297.933118][T14374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.087587][T14328] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.138894][T14205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.153273][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.180497][T14384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2247'.
[  298.191290][T14205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.219662][T14328] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.238127][T14205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.258482][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.350301][T14205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.450759][T14328] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.598078][T14328] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.776777][T14205] hsr_slave_0: entered promiscuous mode
[  298.787141][T14205] hsr_slave_1: entered promiscuous mode
[  298.832401][T14205] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.840100][T14205] Cannot create hsr debugfs directory
[  298.948152][T14407] 8021q: adding VLAN 0 to HW filter on device bond2
[  298.967552][T14407] bond0: (slave bond2): Enslaving as an active interface with an up link
[  299.080318][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'.
[  299.097061][T14422] netlink: 'syz.3.2255': attribute type 2 has an invalid length.
[  299.133440][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2255'.
[  299.512309][ T5851] Bluetooth: hci1: command tx timeout
[  300.017129][T14472] netlink: 'syz.3.2269': attribute type 10 has an invalid length.
[  300.058705][T14481] netlink: 'syz.2.2272': attribute type 1 has an invalid length.
[  300.076625][T14466] bond3: (slave gretap1): Releasing active interface
[  300.440898][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'.
[  300.473889][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'.
[  300.499759][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'.
[  300.592055][T14498] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2274'.
[  300.790857][T14205] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.806543][T14205] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.817979][T14205] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.832173][T14205] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  301.073243][T14205] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.092980][T14524] netlink: 'syz.2.2280': attribute type 4 has an invalid length.
[  301.171693][T14205] 8021q: adding VLAN 0 to HW filter on device team0
[  301.220265][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.227621][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.304732][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.312033][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.612556][ T5851] Bluetooth: hci1: command tx timeout
[  302.538838][T14562] openvswitch: netlink: Message has 199 unknown bytes.
[  302.543501][T14205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.556570][T14562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.682979][T14205] veth0_vlan: entered promiscuous mode
[  302.731850][T14566] netlink: 'syz.2.2291': attribute type 2 has an invalid length.
[  302.752154][T14205] veth1_vlan: entered promiscuous mode
[  302.837895][T14205] veth0_macvtap: entered promiscuous mode
[  302.873734][T14205] veth1_macvtap: entered promiscuous mode
[  302.966283][T14205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.014008][T14205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.058341][T14205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.090896][T14205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.124460][T14205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.161363][T14205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.421683][T14585] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  303.426990][T14581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  303.464620][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.480454][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.571108][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.604270][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.839282][T14597] ------------[ cut here ]------------
[  303.845776][T14597] memcpy: detected field-spanning write (size 168) of single field "&top_iph->saddr" at net/ipv6/ah6.c:439 (size 16)
[  303.867325][T14597] WARNING: CPU: 0 PID: 14597 at net/ipv6/ah6.c:439 ah6_output+0xece/0x1510
[  303.876430][T14597] Modules linked in:
[  303.880606][T14597] CPU: 0 UID: 0 PID: 14597 Comm: syz.0.2300 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) 
[  303.893123][T14597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  303.903632][T14597] RIP: 0010:ah6_output+0xece/0x1510
[  303.908899][T14597] Code: ff e8 e6 09 91 f7 c6 05 d6 c0 5b 05 01 90 b9 10 00 00 00 48 c7 c7 60 64 a0 8c 4c 89 f6 48 c7 c2 c0 66 a0 8c e8 73 b4 54 f7 90 <0f> 0b 90 90 e9 ab fe ff ff e8 c4 14 37 01 48 8b 4c 24 28 80 e1 07
[  303.928884][T14597] RSP: 0018:ffffc90003c36fa0 EFLAGS: 00010246
[  303.935595][T14597] RAX: f0ecc7c0f7f12300 RBX: ffff88807c34a808 RCX: 0000000000080000
[  303.943942][T14597] RDX: ffffc90004dc2000 RSI: 000000000000676f RDI: 0000000000006770
[  303.952384][T14597] RBP: ffffc90003c37130 R08: ffffc90003c36cc7 R09: 1ffff92000786d98
[  303.960388][T14597] R10: dffffc0000000000 R11: fffff52000786d99 R12: dffffc0000000000
[  303.968777][T14597] R13: 1ffff92000786e14 R14: 00000000000000a8 R15: 00000000000000b0
[  303.976866][T14597] FS:  00007fea126746c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000
[  303.986002][T14597] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  303.993348][T14597] CR2: 00007fb6d6d7fd38 CR3: 000000002822e000 CR4: 00000000003526f0
[  304.001439][T14597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  304.009444][T14597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  304.017592][T14597] Call Trace:
[  304.020905][T14597]  <TASK>
[  304.024247][T14597]  ? __pfx_ah6_output+0x10/0x10
[  304.029278][T14597]  xfrm_output_resume+0x2c55/0x6170
[  304.034888][T14597]  ? __pfx_xfrm_output_resume+0x10/0x10
[  304.040488][T14597]  ? xfrm_dev_offload_ok+0x129/0x780
[  304.046180][T14597]  ? xfrm_output+0x9ad/0x1950
[  304.050910][T14597]  __xfrm6_output+0x2eb/0x1070
[  304.056001][T14597]  ? __pfx___xfrm6_output+0x10/0x10
[  304.061757][T14597]  ? xfrm6_output+0x258/0x4f0
[  304.066475][T14597]  xfrm6_output+0x1c6/0x4f0
[  304.071050][T14597]  ? __ip6_local_out+0x609/0x870
[  304.076259][T14597]  ? xfrm6_output+0x258/0x4f0
[  304.080970][T14597]  ? __pfx_xfrm6_output+0x10/0x10
[  304.086342][T14597]  ? __pfx___xfrm6_output+0x10/0x10
[  304.091657][T14597]  ? skb_dst+0x4f/0xd0
[  304.095767][T14597]  ? dst_output+0x177/0x1c0
[  304.100380][T14597]  ? ip6_send_skb+0x10f/0x390
[  304.106630][T14597]  ip6_send_skb+0x1d5/0x390
[  304.111601][T14597]  rawv6_push_pending_frames+0x6e9/0x8d0
[  304.118871][T14597]  ? __pfx_rawv6_push_pending_frames+0x10/0x10
[  304.125183][T14597]  ? __pfx_raw6_getfrag+0x10/0x10
[  304.130259][T14597]  rawv6_sendmsg+0x12ff/0x17f0
[  304.135170][T14597]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  304.140521][T14597]  ? trace_sched_exit_tp+0x38/0x120
[  304.146060][T14597]  ? kvm_sched_clock_read+0x11/0x20
[  304.151714][T14597]  ? __pfx_aa_sk_perm+0x10/0x10
[  304.156592][T14597]  ? sock_rps_record_flow+0x19/0x410
[  304.162097][T14597]  ? inet_sendmsg+0x2f4/0x370
[  304.166802][T14597]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.172292][T14597]  __sock_sendmsg+0x19c/0x270
[  304.177009][T14597]  ____sys_sendmsg+0x505/0x830
[  304.182090][T14597]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.187437][T14597]  ? import_iovec+0x74/0xa0
[  304.192103][T14597]  ___sys_sendmsg+0x21f/0x2a0
[  304.196913][T14597]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.202263][T14597]  ? __fget_files+0x2a/0x420
[  304.206900][T14597]  ? __fget_files+0x3a0/0x420
[  304.212095][T14597]  __x64_sys_sendmsg+0x19b/0x260
[  304.217225][T14597]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.223164][T14597]  ? rcu_is_watching+0x15/0xb0
[  304.227976][T14597]  ? do_syscall_64+0xbe/0x3b0
[  304.233369][T14597]  do_syscall_64+0xfa/0x3b0
[  304.237917][T14597]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.243686][T14597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.249874][T14597]  ? clear_bhb_loop+0x60/0xb0
[  304.254868][T14597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.260792][T14597] RIP: 0033:0x7fea1178e929
[  304.265291][T14597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.285279][T14597] RSP: 002b:00007fea12674038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.293817][T14597] RAX: ffffffffffffffda RBX: 00007fea119b5fa0 RCX: 00007fea1178e929
[  304.301877][T14597] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000005
[  304.309882][T14597] RBP: 00007fea11810b39 R08: 0000000000000000 R09: 0000000000000000
[  304.318607][T14597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.326693][T14597] R13: 0000000000000000 R14: 00007fea119b5fa0 R15: 00007ffcd256c588
[  304.334784][T14597]  </TASK>
[  304.337828][T14597] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  304.345127][T14597] CPU: 0 UID: 0 PID: 14597 Comm: syz.0.2300 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) 
[  304.357733][T14597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  304.367790][T14597] Call Trace:
[  304.371077][T14597]  <TASK>
[  304.374008][T14597]  dump_stack_lvl+0x99/0x250
[  304.378613][T14597]  ? __asan_memcpy+0x40/0x70
[  304.383342][T14597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.388585][T14597]  ? __pfx__printk+0x10/0x10
[  304.393223][T14597]  panic+0x2db/0x790
[  304.397254][T14597]  ? __pfx_panic+0x10/0x10
[  304.401689][T14597]  ? show_trace_log_lvl+0x4fb/0x550
[  304.406916][T14597]  __warn+0x31b/0x4b0
[  304.410901][T14597]  ? ah6_output+0xece/0x1510
[  304.415497][T14597]  ? ah6_output+0xece/0x1510
[  304.420095][T14597]  report_bug+0x2be/0x4f0
[  304.424431][T14597]  ? ah6_output+0xece/0x1510
[  304.429027][T14597]  ? ah6_output+0xece/0x1510
[  304.433704][T14597]  ? ah6_output+0xed0/0x1510
[  304.438324][T14597]  handle_bug+0x84/0x160
[  304.442582][T14597]  exc_invalid_op+0x1a/0x50
[  304.447105][T14597]  asm_exc_invalid_op+0x1a/0x20
[  304.451954][T14597] RIP: 0010:ah6_output+0xece/0x1510
[  304.457161][T14597] Code: ff e8 e6 09 91 f7 c6 05 d6 c0 5b 05 01 90 b9 10 00 00 00 48 c7 c7 60 64 a0 8c 4c 89 f6 48 c7 c2 c0 66 a0 8c e8 73 b4 54 f7 90 <0f> 0b 90 90 e9 ab fe ff ff e8 c4 14 37 01 48 8b 4c 24 28 80 e1 07
[  304.476775][T14597] RSP: 0018:ffffc90003c36fa0 EFLAGS: 00010246
[  304.482887][T14597] RAX: f0ecc7c0f7f12300 RBX: ffff88807c34a808 RCX: 0000000000080000
[  304.490850][T14597] RDX: ffffc90004dc2000 RSI: 000000000000676f RDI: 0000000000006770
[  304.498834][T14597] RBP: ffffc90003c37130 R08: ffffc90003c36cc7 R09: 1ffff92000786d98
[  304.506798][T14597] R10: dffffc0000000000 R11: fffff52000786d99 R12: dffffc0000000000
[  304.514762][T14597] R13: 1ffff92000786e14 R14: 00000000000000a8 R15: 00000000000000b0
[  304.522763][T14597]  ? __pfx_ah6_output+0x10/0x10
[  304.527629][T14597]  xfrm_output_resume+0x2c55/0x6170
[  304.532957][T14597]  ? __pfx_xfrm_output_resume+0x10/0x10
[  304.538505][T14597]  ? xfrm_dev_offload_ok+0x129/0x780
[  304.543827][T14597]  ? xfrm_output+0x9ad/0x1950
[  304.548606][T14597]  __xfrm6_output+0x2eb/0x1070
[  304.553388][T14597]  ? __pfx___xfrm6_output+0x10/0x10
[  304.558588][T14597]  ? xfrm6_output+0x258/0x4f0
[  304.563261][T14597]  xfrm6_output+0x1c6/0x4f0
[  304.567759][T14597]  ? __ip6_local_out+0x609/0x870
[  304.572730][T14597]  ? xfrm6_output+0x258/0x4f0
[  304.577430][T14597]  ? __pfx_xfrm6_output+0x10/0x10
[  304.582448][T14597]  ? __pfx___xfrm6_output+0x10/0x10
[  304.587636][T14597]  ? skb_dst+0x4f/0xd0
[  304.591705][T14597]  ? dst_output+0x177/0x1c0
[  304.596199][T14597]  ? ip6_send_skb+0x10f/0x390
[  304.600876][T14597]  ip6_send_skb+0x1d5/0x390
[  304.605379][T14597]  rawv6_push_pending_frames+0x6e9/0x8d0
[  304.611192][T14597]  ? __pfx_rawv6_push_pending_frames+0x10/0x10
[  304.617350][T14597]  ? __pfx_raw6_getfrag+0x10/0x10
[  304.622381][T14597]  rawv6_sendmsg+0x12ff/0x17f0
[  304.627155][T14597]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  304.632274][T14597]  ? trace_sched_exit_tp+0x38/0x120
[  304.637477][T14597]  ? kvm_sched_clock_read+0x11/0x20
[  304.642691][T14597]  ? __pfx_aa_sk_perm+0x10/0x10
[  304.647541][T14597]  ? sock_rps_record_flow+0x19/0x410
[  304.652825][T14597]  ? inet_sendmsg+0x2f4/0x370
[  304.657644][T14597]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.662940][T14597]  __sock_sendmsg+0x19c/0x270
[  304.667621][T14597]  ____sys_sendmsg+0x505/0x830
[  304.672384][T14597]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.677776][T14597]  ? import_iovec+0x74/0xa0
[  304.682289][T14597]  ___sys_sendmsg+0x21f/0x2a0
[  304.686968][T14597]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.692191][T14597]  ? __fget_files+0x2a/0x420
[  304.696775][T14597]  ? __fget_files+0x3a0/0x420
[  304.701484][T14597]  __x64_sys_sendmsg+0x19b/0x260
[  304.706420][T14597]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.711885][T14597]  ? rcu_is_watching+0x15/0xb0
[  304.716654][T14597]  ? do_syscall_64+0xbe/0x3b0
[  304.721322][T14597]  do_syscall_64+0xfa/0x3b0
[  304.725873][T14597]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.731066][T14597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.737125][T14597]  ? clear_bhb_loop+0x60/0xb0
[  304.741812][T14597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.747701][T14597] RIP: 0033:0x7fea1178e929
[  304.752117][T14597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.771719][T14597] RSP: 002b:00007fea12674038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.780134][T14597] RAX: ffffffffffffffda RBX: 00007fea119b5fa0 RCX: 00007fea1178e929
[  304.788100][T14597] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000005
[  304.796084][T14597] RBP: 00007fea11810b39 R08: 0000000000000000 R09: 0000000000000000
[  304.804066][T14597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.812035][T14597] R13: 0000000000000000 R14: 00007fea119b5fa0 R15: 00007ffcd256c588
[  304.820021][T14597]  </TASK>
[  304.823320][T14597] Kernel Offset: disabled
[  304.827637][T14597] Rebooting in 86400 seconds..