last executing test programs:

5.589169859s ago: executing program 1 (id=1224):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
r5 = bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r5)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0086dd"], 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x16c, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback}, 0x0, @in=@private, 0x0, 0x5}]}]}, 0x16c}}, 0x0)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x1]}}]}}]}, 0x94}}, 0x200000c4)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0xf0, 0x111, 0x4b4, 0xf0, 0xd4feffff, 0x1c0, 0x20a, 0x278, 0x1c0, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1e00dbd6", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c0006800400060000000000"], 0x20}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

5.138177059s ago: executing program 1 (id=1227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff80, r2}, 0x38)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xb, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}]}}]}, 0x60}}, 0x8041)

5.031966804s ago: executing program 4 (id=1229):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/70, 0x46}, {&(0x7f0000001740)=""/141, 0x8d}, {&(0x7f00000002c0)=""/49, 0x31}], 0x7, &(0x7f0000001880)=""/190, 0xbe}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x82}]}}}]}, 0x58}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x48}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000)
r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r8)
sendmsg$NET_DM_CMD_START(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="080829bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x880) (async)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="080829bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x880)

4.761842691s ago: executing program 4 (id=1231):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) (rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r10], 0x90}}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98", 0xa0}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6", 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x3, 0xc0)

4.671903611s ago: executing program 1 (id=1232):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
unshare(0x6a040000) (async)
unshare(0x6a040000)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x20000400) (async)
unshare(0x20000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000caf600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000caf600"/20, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080160c38e32d3bf08000000b704000003b921a16aa0411fa9e2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdd137c5cb36b14b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000083800000700000011000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008000900000000005c000b8008000a"], 0x184}}, 0x0)
bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r8, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r9}, 0x10)
socket$kcm(0xa, 0x5, 0x0) (async)
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) (async)
sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000080)=@req3={0x8000, 0x8df6, 0x7, 0x5, 0x9, 0x2, 0x3}, 0x1c)

4.364207214s ago: executing program 3 (id=1234):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x1)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

4.268243975s ago: executing program 4 (id=1235):
unshare(0x6a040000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ppoll(&(0x7f00000002c0)=[{r2, 0xb619}, {r1, 0x1786}], 0x2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)

3.331999984s ago: executing program 3 (id=1242):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket(0x1d, 0x2, 0x6)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c0007"], 0x80}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r3=>0x0})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000030c0), 0x82200, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000003100)=0x3)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000003540)={0x57, 0x1})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x2}, 0x18)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@deltclass={0x7c, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {0x4, 0x9}, {0xb, 0x5}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @tclass_kind_options=@c_red={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4e000)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1)
sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0)

2.56073686s ago: executing program 1 (id=1247):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$phonet_pipe(r1, 0x0, 0x0, 0x80800)
connect$ax25(r0, 0x0, 0x0)

2.39915147s ago: executing program 1 (id=1249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1804000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b543080cfb161a8d715e52"], 0x14}}, 0x0)
unshare(0x40020000)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x20000450)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711247000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)

2.308760527s ago: executing program 2 (id=1250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000020000000000000500000018110000", @ANYRES32, @ANYBLOB="00000000000000000200000000850000008300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x42, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="c27b8277"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0)

2.162544265s ago: executing program 2 (id=1251):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xfff6}, {}, {0xd, 0xfff3}}}, 0x24}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r4, 0x12, 0x4, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x20000004)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=<r5=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000140)={{r3}, r5, 0x12, @unused=[0xe, 0x2, 0x0, 0x9], @name="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"})

2.019728815s ago: executing program 2 (id=1252):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x1b4, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x0, 0x18}, [@algo_crypt={0xa3, 0x2, {{'ecb(cipher_null)\x00'}, 0x2d8, "3d2ca27e18f17f9530427bf1a44f7fbe83d23491d44c479f52178f5fd23501987e7d5208bb67d134b277019b0117658079148b708b762055c278f2739bcf68de87a25c065aa62c3b52b8ec3f6885836c2037f615bd9243497f9642"}}, @mark={0xc, 0x15, {0x35075c, 0x1}}, @srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x1b4}}, 0x0)

1.989032399s ago: executing program 0 (id=1253):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000040)="06d6f8d22ef9742b6c82c2ec2b68a8cec2fe5f9099", &(0x7f00000004c0)=@tcp6=r0}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x8000)

1.820210379s ago: executing program 2 (id=1254):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2, 0xfffffffe}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e23, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7ffffff7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}}}}], 0x28}, 0x4)
sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@delnexthop={0x58, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x4, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x58}}, 0x4000000)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
socket$netlink(0x10, 0x3, 0x8000000004)

1.507920427s ago: executing program 4 (id=1255):
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@nl=@unspec, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r0, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000000580)=@ipv4_delrule={0x4c, 0x21, 0x345e9974e3940436, 0x70bd25, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x2, 0xfe, 0x0, 0x0, 0x5}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_DST={0x8, 0x1, @remote}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="000202012e76f2212c"], 0x18)
sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000600)="11", 0x1}, {&(0x7f0000000080)="76be0cb1613c5f5270adbb", 0xb}, {&(0x7f0000000240)="9edb84777d38fd6376b8ed0153bbd8925b234ef3982d3feb92a743df5871c3a3fafba7562b8443320e3b897f054a2c639d11e695b2cdc54bc76e85acd1867707423d0883966428ab471bc5e2d61b4de836048deff83924c0ebb81428cffd741f8f1a9d588bdbe7b6dbf3c9ed8beb379ca4c29e4c5bd4fc0e76502cd592b0b73cb0795a4cb6a53e68219f", 0x8a}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000400)="18a73f872d8880554d305b0d4d39e10905a544a807982cd9cdf9ca98429b03911af423a9a639f02b239f7fc5d1d8cbabd161b2cf1414461b9c65732105258c3e9385a0f9dfddf723cbda7d9b", 0x4c}], 0x5, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0)
listen(r2, 0x5)
sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x4000840)

1.410444282s ago: executing program 0 (id=1256):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="c12fd56ca2d11f3e43f280f6a2078737a69ae9e9b33e4823f7d7d9dfe133241b6ca2eb304cacafbee12c7d936a40d88cde1b2c2c50ad8c905783b4ab763ccbc44d71dbd5a01a871c6c3510d46420c2fb032268a6d7c5d2ef7aed9fed89a0e63e8505b68f30dd8c40b1f769583de922893c67990d7a2fb134a797f5a2a9aeb7aa3cbff01bf8", 0x85}, {&(0x7f0000000100)="df9cd168968c67c27962dfac32e8cba8fab8797b9e1f607645627233cc5e8a967d05c87b04f96c7c7b6d07156784f1ca88e86c16d7a21d0d51da4dc265a89bebe57bf649ff55c92b67585e504bc9e2b2e6b42e67677507b04a4d88487167a6276ff8eb9109d38d3501bbf41ff946041b35c3e8345d8415095c9c0f7c42b3989637048cd6a27b3f147fa732e31383ee2d392f7607525bf27bf75a5c0d", 0x9c}, {&(0x7f00000001c0)="77020f19278bdc0abf3250f5c7b7f501b88392b67cc440108173bfa38021ce267d15da9706997a8d00eed4e263840f4c406efd22555286f350621ff90d83ab7f9e5b5f89f0b3d75ed495", 0x4a}, {&(0x7f0000000240)="911e7a16483bfdbd689cb7b931c76b991b75104f494a66bf72bb4f227fe870c2905bf4507044e83abead80eb10bed796b56e6a91e7fb9e8a40486fb6240ee0a8a57fb72141e2e9e95077ace850ba99c663e92f18031b04dbba1c2f17789b904dd70958b283fe85c566e34225d6ffc684a33b52b47d4c05fd6ca3f45b7f2295771e4803791ba9d9", 0x87}, {&(0x7f0000000300)="4e56454d683aacc8e502e1787d36b1de602c81cff5cc9eb03ba786b3d8b87f7f83a1c9932eee86cea3e7d988da4ca6f048b1b5a55a497234d98aab7441ccf8e971ef667ab532d67ad9217cb429e0228a6c33155d3cb75ebc", 0x58}], 0x5, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x27, 0x33, [@broadcast, @loopback, @rand_addr=0x64010101, @loopback, @private=0xa010101, @empty, @private=0xa010101, @local, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x2d, 0x0, 0x1, [0x24, 0x2, 0x6, 0xd1, 0x8001, 0x6, 0x7, 0x0]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x37, [@dev={0xac, 0x14, 0x14, 0x12}]}, @ssrr={0x89, 0xb, 0x38, [@private=0xa010101, @remote]}, @ssrr={0x89, 0x2b, 0x48, [@rand_addr=0x64010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0x2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xfffffffd}, {@empty, 0x3ff}]}]}}}], 0x150}}], 0x1, 0x20008851)

948.15357ms ago: executing program 0 (id=1257):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, 0x0}, 0x800)
getsockopt$inet_int(r0, 0x10d, 0xfa, &(0x7f0000000000), 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20024090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x0, 0x0}, 0x10)
socket$inet6(0xa, 0x3, 0x5)
unshare(0x22020600)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0)

947.787237ms ago: executing program 2 (id=1258):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_j1939(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000540)=""/128, 0x80}], 0x2}, 0x1)
r3 = socket$inet(0x2b, 0x801, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, 0x0, &(0x7f00000001c0))
connect$bt_l2cap(r3, &(0x7f0000000740)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3ff]}, &(0x7f0000000100)=0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x48, "4372073830002e35a8601f555e33a748"}})

928.265273ms ago: executing program 3 (id=1259):
socket$alg(0x26, 0x5, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x7}, 0x1c)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x68}}, 0x10) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) (rerun: 32)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000d0c70f4c8c8493d1f9d398c48486d494b5e7dd34905a4900000000144ffd9f878f2f61b7769d2e462e37baf17f9cac81000000a7cb9e9320eeec3f393bb7dc2b8ca1be2656602274cf11437e1e0720f4fdcab7c9545b106885f667bb1d522819dc61bbdc53d1f91fbe1b960a7df7826f4f2b00", @ANYRES16=r7, @ANYBLOB="00042bbd7000fbdbdf25090000000c0006000000000000000000050007000e0000000800010003000000050008000e00000005000700160000000500070003000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x20040044) (async, rerun: 64)
getsockname(r5, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, &(0x7f0000000240)=0x80) (async, rerun: 64)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4) (async)
pipe(0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00090000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r11], 0x50}, 0x1, 0xba01}, 0x0)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

815.860796ms ago: executing program 2 (id=1260):
syz_emit_ethernet(0x42, &(0x7f00000001c0)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @local, @random="adbb7366f6f6", @private2}}}}, &(0x7f0000000140)={0x0, 0x2, [0xa60, 0xc47, 0xdbb, 0x763]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
pipe(&(0x7f00000045c0)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x7f)
shutdown(r4, 0x1)
setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
splice(r3, 0x0, r4, 0x0, 0x8000, 0x0)
r5 = getgid()
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000340)='\x00', 0x1, 0x4008020, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r8, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r5)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc0000003900070128bd700000000000047c00000c0000007400000000000000ac00018006000600800a00009f001c009b0000a5baaec552ce1cdd399b4cf66765b057d1ce35b6004fd3352e729bc59c3a6b1e21efc7da1fd570d3b74505b61247a2e85d437ba6b5834bcd592a9f801c390189243c8036a97aad662ddca3418d2dd6b68e315936cdaa77394c0baece2994d83a6dcbf549800c0000805da7a95f23191fb9ad26a5942f3b3e994a66bc47c1de1c76b1ec3e92fb2b20d05084ebd7c98642b394194e1c0f1a9700"], 0xcc}}, 0x4000)

707.927473ms ago: executing program 3 (id=1261):
unshare(0x62040200)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x4, 0x6db22e68, 0x40, r1, 0x4, '\x00', r5, r6, 0x2, 0x3, 0x5, 0xc, @void, @value, @void, @value}, 0x50)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r11, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0xb, 0x8, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r12}, 0x18)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

692.788988ms ago: executing program 0 (id=1262):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060006080006040001"], 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/80, 0x0, 0xc00, 0x0, 0x1}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6(0xa, 0x80000, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0xf)
socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x68, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6d}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf28d}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xedf57d745c1c362c}, 0x401)
socket$nl_netfilter(0x10, 0x3, 0xc)

474.980678ms ago: executing program 4 (id=1263):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x7, 0x0, 0x9, 0x3, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x10, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x3}, {0x4, 0x2, 0x8, 0xb}, {0x1, 0x5, 0x1, 0x2}, {0x4, 0x5, 0x10, 0x7}, {0x3, 0x1, 0x0, 0x2}, {0x1, 0x1, 0x10}, {0x2, 0x4, 0x8, 0x8}, {0x4, 0x5, 0xc, 0x2}], 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='jbd2_submit_inode_data\x00', r0, 0x0, 0x5e}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xf}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xf2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000800)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x0, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r5=>r4, 0x4, 0x4, 0x5, 0x6, 0x0, @private1, @local, 0x7800, 0x7a8, 0xffffffff, 0x10000}})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x1, 0x8, 0x5, 0x8, 0xfffffffffffffffe, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x72}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xc8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000880)=[{0x1, 0x5, 0xf, 0x3}, {0x1, 0x3, 0x2, 0xb}], 0x10, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='objagg_obj_put\x00', r6, 0x0, 0x8}, 0x18)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000009c0), 0x4)
r8 = accept(r7, &(0x7f0000000a00)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000a80)=0x80)
bind$rds(r8, &(0x7f0000000ac0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000b00)=0x124e0, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%pS    \x00'}, 0x20)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x81, 0x0, r9, 0x5, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r11 = syz_genetlink_get_family_id$team(&(0x7f0000000cc0), r8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000d40)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_NOOP(r8, &(0x7f00000011c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d80)={0x3f8, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)=r6}, 0x20)
r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@volatile={0x8, 0x0, 0x0, 0x9, 0x4}, @struct={0x4, 0x5, 0x0, 0x4, 0x1, 0x1000, [{0x2, 0x3, 0x3}, {0x9, 0x3, 0x6a5c}, {0x2, 0x5}, {0x0, 0x2, 0x10000}, {0x7, 0x0, 0xfffffffe}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0x9}, {0x3, 0x4}]}, @func={0xc, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000001540)=""/55, 0xaf, 0x37, 0x0, 0xffff, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x9, &(0x7f00000012c0)=@raw=[@alu={0x7, 0x1, 0x0, 0x0, 0xa, 0x18, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc}], &(0x7f0000001340)='GPL\x00', 0xfff, 0xd2, &(0x7f0000001380)=""/210, 0x41100, 0x20, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f00000015c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0x5, 0x7ff, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x10, 0x2, @void, @value}, 0x94)
recvfrom$inet6(r8, &(0x7f0000001740)=""/104, 0x68, 0x122, &(0x7f00000017c0)={0xa, 0x4e22, 0x5, @loopback, 0xe}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x2000800)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001840)=<r16=>0x0)
sendmsg$nl_route(r10, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)=@can_delroute={0x88, 0x19, 0x8, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "d47eb6450361cfda"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r5}, @CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "aa42d8d00edd4135"}, 0x4}}, @CGW_MOD_UID={0x8, 0xe, r16}, @CGW_MOD_AND={0x15, 0x1, {{{0x2}, 0x4, 0x2, 0x0, 0x0, "bc9c7ae6f3506696"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0xfffffffffffffff7, 0x5, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x200080c0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000019c0)=0x104201, 0x4)

465.898908ms ago: executing program 0 (id=1264):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffffc}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f6, 0x0, 0x70bd27, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000002440)=ANY=[@ANYBLOB="180000006a001500"], 0x155c}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r7, 0x0, 0x80)

368.198537ms ago: executing program 1 (id=1265):
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e208000006000000000000000000850000ef8800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x8) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async)
setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe8000"], 0x3c}}, 0x0)

231.769447ms ago: executing program 4 (id=1266):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000eb9ee0d00", @ANYRES8=r1, @ANYBLOB="e000000100000000000000001800000000000000100100000d0000008905313d"], 0x38}, 0x4000894)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x9, r3, 0x8000000}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1d, 0x3, 0xfffff000, 0x8, 0xef268d491332002c, r3, 0x4, '\x00', r4, r5, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0}, 0x4040)
unshare(0x20000100)
r7 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r7, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r9)
sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8)
sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
socket$nl_generic(0x10, 0x3, 0x10)

184.39372ms ago: executing program 3 (id=1267):
socket$inet6(0xa, 0x3, 0x9)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(r0, r1, 0x3, 0x1)

164.461408ms ago: executing program 0 (id=1268):
r0 = socket(0x10, 0x3, 0x0)
accept4$ax25(r0, &(0x7f0000000280)={{0x3, @bcast}, [@default, @null, @default, @default, @bcast, @bcast, @null, @bcast]}, &(0x7f0000000180)=0x48, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
bind$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x6931, @my=0x0}, 0x10)
setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x40, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
socket$inet6(0xa, 0x1, 0x8010000000000084)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xe}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x24}}, 0x0)

0s ago: executing program 3 (id=1269):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000fff000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

lave_0) entered blocking state
[   77.156714][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.164120][ T5839] bridge_slave_0: entered allmulticast mode
[   77.171124][ T5839] bridge_slave_0: entered promiscuous mode
[   77.239808][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.247232][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.255016][ T5839] bridge_slave_1: entered allmulticast mode
[   77.261657][ T5839] bridge_slave_1: entered promiscuous mode
[   77.270890][ T5833] team0: Port device team_slave_0 added
[   77.279940][ T5833] team0: Port device team_slave_1 added
[   77.288191][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.304167][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.362177][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.370210][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.377912][ T5829] bridge_slave_0: entered allmulticast mode
[   77.385150][ T5829] bridge_slave_0: entered promiscuous mode
[   77.395115][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.406346][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.447623][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.454943][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.462110][ T5829] bridge_slave_1: entered allmulticast mode
[   77.469737][ T5829] bridge_slave_1: entered promiscuous mode
[   77.493211][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.500368][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.526383][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.545508][ T5835] team0: Port device team_slave_0 added
[   77.563300][ T5839] team0: Port device team_slave_0 added
[   77.569853][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.580698][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.606938][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.624354][ T5835] team0: Port device team_slave_1 added
[   77.641571][ T5839] team0: Port device team_slave_1 added
[   77.678221][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.690855][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.719031][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.726386][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.753165][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.774855][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.781996][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.789558][ T5844] bridge_slave_0: entered allmulticast mode
[   77.796192][ T5844] bridge_slave_0: entered promiscuous mode
[   77.822561][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.829603][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.855586][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.880800][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.888177][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.895924][ T5844] bridge_slave_1: entered allmulticast mode
[   77.902712][ T5844] bridge_slave_1: entered promiscuous mode
[   77.909657][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.916977][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.943219][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.956138][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.963094][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.989393][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.047384][ T5829] team0: Port device team_slave_0 added
[   78.057836][ T5833] hsr_slave_0: entered promiscuous mode
[   78.064687][ T5833] hsr_slave_1: entered promiscuous mode
[   78.074299][ T5839] hsr_slave_0: entered promiscuous mode
[   78.080393][ T5839] hsr_slave_1: entered promiscuous mode
[   78.087641][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.095704][ T5839] Cannot create hsr debugfs directory
[   78.115353][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.126332][ T5829] team0: Port device team_slave_1 added
[   78.134197][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.220016][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.230945][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.257506][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.294271][ T5843] Bluetooth: hci3: command tx timeout
[   78.303425][ T5843] Bluetooth: hci1: command tx timeout
[   78.309305][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.317335][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.343425][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.356929][ T5844] team0: Port device team_slave_0 added
[   78.369806][ T5835] hsr_slave_0: entered promiscuous mode
[   78.375475][ T5843] Bluetooth: hci0: command tx timeout
[   78.376360][ T5835] hsr_slave_1: entered promiscuous mode
[   78.386640][ T5843] Bluetooth: hci4: command tx timeout
[   78.386993][ T5843] Bluetooth: hci2: command tx timeout
[   78.399057][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.406815][ T5835] Cannot create hsr debugfs directory
[   78.430393][ T5844] team0: Port device team_slave_1 added
[   78.542298][ T5829] hsr_slave_0: entered promiscuous mode
[   78.548638][ T5829] hsr_slave_1: entered promiscuous mode
[   78.555477][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.563047][ T5829] Cannot create hsr debugfs directory
[   78.569220][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.576235][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.602218][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.615324][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.622432][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.649402][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.810798][ T5844] hsr_slave_0: entered promiscuous mode
[   78.817220][ T5844] hsr_slave_1: entered promiscuous mode
[   78.823117][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.830836][ T5844] Cannot create hsr debugfs directory
[   78.849028][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.866541][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.893639][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.904454][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.996919][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.007817][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.036081][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.072001][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.159664][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.180501][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.205431][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.220629][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.284652][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.320660][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.329229][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.339956][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.356202][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.400354][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.409806][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.427005][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.436545][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.447095][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.467523][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   79.512943][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.520184][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.533111][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   79.556660][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.563813][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.572988][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.580127][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.621872][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.629008][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.704367][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.785123][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   79.797165][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.808071][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.822804][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.829921][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.860762][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.867910][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.911916][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   79.951908][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.959084][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.997738][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   80.050879][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.058072][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.071901][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.079065][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.093928][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.101049][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.159746][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.212477][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.348747][ T5839] veth0_vlan: entered promiscuous mode
[   80.375183][ T5842] Bluetooth: hci1: command tx timeout
[   80.380642][ T5842] Bluetooth: hci3: command tx timeout
[   80.397098][ T5833] veth0_vlan: entered promiscuous mode
[   80.436280][ T5839] veth1_vlan: entered promiscuous mode
[   80.454798][ T5842] Bluetooth: hci2: command tx timeout
[   80.460380][ T5842] Bluetooth: hci4: command tx timeout
[   80.466681][ T5843] Bluetooth: hci0: command tx timeout
[   80.503671][ T5833] veth1_vlan: entered promiscuous mode
[   80.538734][ T5839] veth0_macvtap: entered promiscuous mode
[   80.572098][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.601165][ T5839] veth1_macvtap: entered promiscuous mode
[   80.627939][ T5833] veth0_macvtap: entered promiscuous mode
[   80.649305][ T5833] veth1_macvtap: entered promiscuous mode
[   80.662426][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.677387][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.690248][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.715915][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.725528][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.734738][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.744759][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.758290][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.775068][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.787009][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.801538][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.840508][ T5835] veth0_vlan: entered promiscuous mode
[   80.860141][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.874736][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.885780][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.903237][ T5835] veth1_vlan: entered promiscuous mode
[   80.915376][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.925610][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.944232][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.952961][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.016657][ T5835] veth0_macvtap: entered promiscuous mode
[   81.049552][ T5835] veth1_macvtap: entered promiscuous mode
[   81.070732][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.084036][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.095613][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.106546][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.118133][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.160679][ T5829] veth0_vlan: entered promiscuous mode
[   81.180307][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.196600][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.196675][ T5829] veth1_vlan: entered promiscuous mode
[   81.211785][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.222555][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.232682][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.243687][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.255413][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.285030][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.293947][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.302777][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.312428][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.375504][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.383040][ T5844] veth0_vlan: entered promiscuous mode
[   81.389323][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.423785][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.431750][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.465102][ T5829] veth0_macvtap: entered promiscuous mode
[   81.501974][ T5844] veth1_vlan: entered promiscuous mode
[   81.535125][ T5829] veth1_macvtap: entered promiscuous mode
[   81.566487][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.584194][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.600918][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.612026][ T5844] veth0_macvtap: entered promiscuous mode
[   81.625060][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.636543][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.673763][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.686529][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.696856][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.707608][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.718790][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.735033][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.742889][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.755988][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   81.767720][ T5844] veth1_macvtap: entered promiscuous mode
[   81.785598][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   81.814244][ T5922] netlink: 'syz.2.3': attribute type 5 has an invalid length.
[   81.821852][ T5922] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   81.846845][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.864825][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.875762][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.886572][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.897622][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.908462][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.925159][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.977871][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.043492][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.070102][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.088468][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.106451][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.118535][ T5926] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   82.127136][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.147910][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.168729][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.198499][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.235126][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.245626][ T5929] sock: sock_set_timeout: `syz.3.4' (pid 5929) tries to set negative timeout
[   82.255138][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.275484][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.295251][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.315204][ T5927] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.343562][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.351426][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.366392][ T5929] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   82.400152][ T5929] macvtap1: entered promiscuous mode
[   82.406866][ T5929] macvtap1: entered allmulticast mode
[   82.412429][ T5929] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   82.428643][ T5929] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   82.436004][ T5929] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   82.463961][ T5836] Bluetooth: hci3: command tx timeout
[   82.469724][ T5842] Bluetooth: hci1: command tx timeout
[   82.477841][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.496602][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.509172][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.524388][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.534690][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.544523][ T5836] Bluetooth: hci4: command tx timeout
[   82.545430][ T5842] Bluetooth: hci0: command tx timeout
[   82.550594][ T5836] Bluetooth: hci2: command tx timeout
[   82.564626][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.579766][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.598920][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.635474][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.757796][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.797927][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.811242][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   82.820596][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.830471][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.889016][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'.
[   82.933885][ T5939] Zero length message leads to an empty skb
[   83.001782][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.013270][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.017544][ T5939] netlink: 'syz.3.10': attribute type 12 has an invalid length.
[   83.050243][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10'.
[   83.167897][ T5945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'.
[   83.179931][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.219586][ T5946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.225612][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.274127][ T5945] syz_tun: entered promiscuous mode
[   83.282130][ T5945] syz_tun: left promiscuous mode
[   83.309040][ T5948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'.
[   83.426440][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.479471][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.732912][ T5952] netlink: 172 bytes leftover after parsing attributes in process `syz.3.12'.
[   83.745517][ T5955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12'.
[   83.761683][ T5952] netlink: 'syz.3.12': attribute type 1 has an invalid length.
[   83.782991][ T5963] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   83.798853][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.819143][ T5963] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1'.
[   83.834832][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.359695][ T5985] Cannot find add_set index 0 as target
[   84.481032][ T5986] gtp0: entered promiscuous mode
[   84.505061][ T5986] gtp0: entered allmulticast mode
[   84.563643][ T5836] Bluetooth: hci3: command tx timeout
[   84.563660][ T5843] Bluetooth: hci1: command tx timeout
[   84.614284][ T5843] Bluetooth: hci0: command tx timeout
[   84.615863][ T5836] Bluetooth: hci4: command tx timeout
[   84.625588][ T5836] Bluetooth: hci2: command tx timeout
[   84.687282][ T5992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.786734][ T6006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.975162][ T6019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.032535][ T5992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.192232][ T6016] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.331041][ T6016] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   85.591036][ T5992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.936375][ T6051] netlink: 'syz.2.30': attribute type 16 has an invalid length.
[   85.948652][ T6051] netlink: 'syz.2.30': attribute type 17 has an invalid length.
[   85.989749][ T5992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.009953][ T2151] IPVS: starting estimator thread 0...
[   86.123982][ T6060] IPVS: using max 23 ests per chain, 55200 per kthread
[   86.400826][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.409134][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.542100][ T6077] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET)
[   86.597940][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.608143][ T6079] netlink: 'syz.2.37': attribute type 14 has an invalid length.
[   86.613291][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.617088][ T6079] netlink: 'syz.2.37': attribute type 11 has an invalid length.
[   86.702864][ T6067] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.714345][ T6067] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.723282][ T6067] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.737774][ T6067] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.818004][ T6068] bridge0: port 3(gretap0) entered blocking state
[   86.829865][ T6068] bridge0: port 3(gretap0) entered disabled state
[   86.837818][ T6068] gretap0: entered allmulticast mode
[   86.849090][ T6068] gretap0: entered promiscuous mode
[   86.860283][   T26] cfg80211: failed to load regulatory.db
[   86.932990][ T6071] gretap0: left allmulticast mode
[   86.961444][ T6071] gretap0: left promiscuous mode
[   86.968544][ T6071] bridge0: port 3(gretap0) entered disabled state
[   87.049354][ T5992] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.086524][ T6086] dummy0: entered promiscuous mode
[   87.115820][ T6086] dummy0: left promiscuous mode
[   87.183237][ T5992] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.231430][ T6093] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   87.251535][ T6093] __nla_validate_parse: 5 callbacks suppressed
[   87.251553][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   87.271539][ T5992] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.364668][ T6098] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0
[   87.415766][ T5992] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.425121][ T6098] bridge0: port 3(gretap0) entered blocking state
[   87.431637][ T6098] bridge0: port 3(gretap0) entered disabled state
[   87.444928][ T6098] gretap0: entered allmulticast mode
[   87.451493][ T6098] gretap0: entered promiscuous mode
[   87.473457][ T6098] bridge0: port 3(gretap0) entered blocking state
[   87.480064][ T6098] bridge0: port 3(gretap0) entered forwarding state
[   87.582722][ T6100] gretap0: left allmulticast mode
[   87.605659][ T6100] gretap0: left promiscuous mode
[   87.610868][ T6100] bridge0: port 3(gretap0) entered disabled state
[   88.000551][ T6123] x_tables: duplicate underflow at hook 1
[   88.903765][ T6151] x_tables: duplicate underflow at hook 1
[   89.382630][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'.
[   89.544407][ T6182] netlink: 'syz.2.58': attribute type 10 has an invalid length.
[   89.612184][ T6182] veth0_vlan: left promiscuous mode
[   89.645160][ T6183] netlink: 'syz.2.58': attribute type 10 has an invalid length.
[   89.700219][ T6182] veth0_vlan: entered promiscuous mode
[   89.762737][ T6182] team0: Device veth0_vlan failed to register rx_handler
[   89.848078][ T6183] veth0_vlan: left promiscuous mode
[   89.884670][ T6183] veth0_vlan: entered promiscuous mode
[   89.892997][ T6183] team0: Device veth0_vlan failed to register rx_handler
[   90.119090][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'.
[   90.180844][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'.
[   90.224739][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'.
[   91.122758][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'.
[   91.733795][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[   92.086786][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.154087][ T6288] team0: Port device bond0 added
[   92.734835][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'.
[   95.351718][ T6350] ip6t_srh: unknown srh invflags 4000
[   95.423758][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'.
[   96.006270][ T6358] netlink: 'syz.0.86': attribute type 303 has an invalid length.
[   96.122984][ T6356] syzkaller0: entered promiscuous mode
[   96.131858][ T6356] syzkaller0: entered allmulticast mode
[   97.782218][ T6391] xt_hashlimit: max too large, truncated to 1048576
[   97.814207][ T6391] Cannot find set identified by id 0 to match
[   97.838933][ T5886] IPVS: starting estimator thread 0...
[   97.879733][ T6391] syzkaller1: entered promiscuous mode
[   97.895721][ T6391] syzkaller1: entered allmulticast mode
[   97.953583][ T6394] IPVS: using max 19 ests per chain, 45600 per kthread
[   98.019433][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.027152][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.212501][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.235924][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.351196][ T6391] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.380990][ T6391] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.403098][ T6391] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.416170][ T6391] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.718098][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.99'.
[   98.729145][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'.
[   98.953000][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'.
[   99.261580][ T6428] bridge_slave_0: left allmulticast mode
[   99.324236][ T6428] bridge_slave_0: left promiscuous mode
[   99.330319][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.434405][ T6428] bridge_slave_1: left allmulticast mode
[   99.443310][ T6428] bridge_slave_1: left promiscuous mode
[   99.477622][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.535915][ T6428] bond0: (slave bond_slave_0): Releasing backup interface
[   99.589299][ T6428] bond0: (slave bond_slave_1): Releasing backup interface
[   99.672066][ T6428] team0: Port device team_slave_0 removed
[   99.673036][ T6452] netlink: 34 bytes leftover after parsing attributes in process `syz.2.110'.
[   99.707004][ T6428] team0: Port device team_slave_1 removed
[   99.733101][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.746477][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.760483][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.798107][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.884080][ T6431] team0: Mode changed to "loadbalance"
[  100.072546][ T6471] netlink: 'syz.1.115': attribute type 4 has an invalid length.
[  100.105730][ T6473] netlink: 'syz.4.116': attribute type 1 has an invalid length.
[  100.125070][ T6473] netlink: 'syz.4.116': attribute type 3 has an invalid length.
[  100.159573][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'.
[  100.184815][ T6473] netlink: 224 bytes leftover after parsing attributes in process `syz.4.116'.
[  100.409574][ T6481] vlan2: entered allmulticast mode
[  100.722783][ T6498] netlink: 'syz.4.123': attribute type 93 has an invalid length.
[  100.941252][ T6509] sctp: [Deprecated]: syz.4.128 (pid 6509) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.941252][ T6509] Use struct sctp_sack_info instead
[  102.044598][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'.
[  102.075800][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'.
[  102.422939][ T6562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.138'.
[  102.799944][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'.
[  103.040982][ T6580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.192596][ T6580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.418419][ T6580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.497697][ T6580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.652869][ T6580] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.699798][ T6580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.764097][ T6580] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.817652][ T6580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.002056][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[  104.303459][ T6628] bridge_slave_0: left allmulticast mode
[  104.323661][ T6628] bridge_slave_0: left promiscuous mode
[  104.329458][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.407163][ T6632] netlink: 'syz.4.163': attribute type 1 has an invalid length.
[  104.426748][ T6632] netlink: 224 bytes leftover after parsing attributes in process `syz.4.163'.
[  104.441523][ T6628] bridge_slave_1: left allmulticast mode
[  104.453708][ T6628] bridge_slave_1: left promiscuous mode
[  104.488005][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.567092][ T6628] bond0: (slave bond_slave_0): Releasing backup interface
[  104.637840][ T6628] bond0: (slave bond_slave_1): Releasing backup interface
[  104.667629][ T6628] team0: Port device team_slave_0 removed
[  104.731785][ T6628] team0: Port device team_slave_1 removed
[  104.761468][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.773791][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.783293][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.792137][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.819235][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'.
[  104.945262][ T6635] vlan2: entered allmulticast mode
[  104.973272][ T6635] bond0: entered allmulticast mode
[  104.981494][ T6635] bridge0: port 1(vlan2) entered blocking state
[  104.998945][ T6635] bridge0: port 1(vlan2) entered disabled state
[  105.015665][ T6635] vlan2: entered promiscuous mode
[  105.020750][ T6635] bond0: entered promiscuous mode
[  105.050104][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.167'.
[  105.495929][ T6679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.171'.
[  105.722158][ T6699] xt_connbytes: Forcing CT accounting to be enabled
[  105.732258][ T6699] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat'
[  105.791712][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[  105.982171][ T6691] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.993575][ T6691] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.002241][ T6691] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.011132][ T6691] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.046577][ T6700] lo: entered allmulticast mode
[  106.051606][ T6700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.152560][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.161690][ T6695] 8021q: adding VLAN 0 to HW filter on device team0
[  106.175688][ T6695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.293184][ T6695] syz.0.171 (6695) used greatest stack depth: 17936 bytes left
[  106.470050][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[  106.569587][ T6726] netlink: 188 bytes leftover after parsing attributes in process `syz.0.179'.
[  106.598565][ T6726] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[  106.640276][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'.
[  106.662175][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.883880][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'.
[  106.978482][ T6741] syzkaller0: entered promiscuous mode
[  107.007975][ T6741] syzkaller0: entered allmulticast mode
[  108.959281][ T6784] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  109.203134][ T6790] bridge0: entered promiscuous mode
[  109.212050][ T6791] __nla_validate_parse: 2 callbacks suppressed
[  109.212068][ T6791] netlink: 23 bytes leftover after parsing attributes in process `syz.1.193'.
[  109.233717][ T6790] macvlan2: entered promiscuous mode
[  109.249989][ T6790] bridge0: port 2(macvlan2) entered blocking state
[  109.273592][ T6790] bridge0: port 2(macvlan2) entered disabled state
[  109.280350][ T6790] macvlan2: entered allmulticast mode
[  109.327699][ T6790] bridge0: entered allmulticast mode
[  109.348116][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[  109.360728][ T6790] macvlan2: left allmulticast mode
[  109.366248][ T6790] bridge0: left allmulticast mode
[  109.377989][ T6790] bridge0: left promiscuous mode
[  109.533233][ T6805] netlink: 'syz.3.197': attribute type 16 has an invalid length.
[  109.575066][ T6805] netlink: 'syz.3.197': attribute type 17 has an invalid length.
[  109.704098][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.713691][ T6805] 8021q: adding VLAN 0 to HW filter on device team0
[  109.731470][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.749734][ T6807] lo speed is unknown, defaulting to 1000
[  109.804730][ T6807] lo speed is unknown, defaulting to 1000
[  109.821683][ T6807] lo speed is unknown, defaulting to 1000
[  109.842695][ T6807] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.867668][ T6807] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98
[  109.868914][ T6820] syz.4.202: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  109.920493][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'.
[  109.928097][ T6807] lo speed is unknown, defaulting to 1000
[  109.942163][ T6807] lo speed is unknown, defaulting to 1000
[  109.969930][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.4.202 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  109.969958][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  109.969975][ T6820] Call Trace:
[  109.969983][ T6820]  <TASK>
[  109.969991][ T6820]  dump_stack_lvl+0x241/0x360
[  109.970032][ T6820]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.970055][ T6820]  ? __pfx__printk+0x10/0x10
[  109.970080][ T6820]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  109.970108][ T6820]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  109.970138][ T6820]  warn_alloc+0x278/0x410
[  109.970165][ T6820]  ? __pfx_warn_alloc+0x10/0x10
[  109.970193][ T6820]  ? translate_table+0x179/0x2490
[  109.970222][ T6820]  ? __get_vm_area_node+0x1c8/0x2d0
[  109.970253][ T6820]  ? __get_vm_area_node+0x25c/0x2d0
[  109.970291][ T6820]  __vmalloc_node_range_noprof+0x62f/0x1380
[  109.970339][ T6820]  ? rcu_is_watching+0x15/0xb0
[  109.970363][ T6820]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  109.970390][ T6820]  ? rcu_is_watching+0x15/0xb0
[  109.970413][ T6820]  ? trace_kmalloc+0x1f/0xd0
[  109.970439][ T6820]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  109.970468][ T6820]  ? __kvmalloc_node_noprof+0x72/0x190
[  109.970492][ T6820]  __kvmalloc_node_noprof+0x142/0x190
[  109.970512][ T6820]  ? translate_table+0x179/0x2490
[  109.970542][ T6820]  translate_table+0x179/0x2490
[  109.970598][ T6820]  ? __pfx_translate_table+0x10/0x10
[  109.970627][ T6820]  ? __might_fault+0xaa/0x120
[  109.970648][ T6820]  ? __pfx_lock_release+0x10/0x10
[  109.970685][ T6820]  ? __virt_addr_valid+0x183/0x530
[  109.970707][ T6820]  ? __might_fault+0xaa/0x120
[  109.970727][ T6820]  ? __might_fault+0xc6/0x120
[  109.970753][ T6820]  ? copy_from_sockptr_offset+0x6b/0xb0
[  109.970786][ T6820]  do_ip6t_set_ctl+0xe4c/0x1270
[  109.970821][ T6820]  ? nf_setsockopt+0x240/0x2c0
[  109.970839][ T6820]  ? aa_label_sk_perm+0x4f3/0x6c0
[  109.970869][ T6820]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  109.970900][ T6820]  ? rcu_is_watching+0x15/0xb0
[  109.970932][ T6820]  ? trace_contention_end+0x3c/0x120
[  109.970965][ T6820]  ? __mutex_unlock_slowpath+0x227/0x800
[  109.971003][ T6820]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  109.971048][ T6820]  nf_setsockopt+0x295/0x2c0
[  109.971075][ T6820]  rawv6_setsockopt+0x2ac/0x690
[  109.971110][ T6820]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  109.971144][ T6820]  ? __pfx_lock_acquire+0x10/0x10
[  109.971172][ T6820]  ? aa_sock_opt_perm+0x79/0x120
[  109.971204][ T6820]  ? sock_common_setsockopt+0x37/0xc0
[  109.971240][ T6820]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  109.971272][ T6820]  do_sock_setsockopt+0x3af/0x720
[  109.971302][ T6820]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  109.971331][ T6820]  ? __fget_files+0x395/0x410
[  109.971360][ T6820]  ? __fget_files+0x2a/0x410
[  109.971399][ T6820]  __x64_sys_setsockopt+0x1ee/0x280
[  109.971429][ T6820]  do_syscall_64+0xf3/0x230
[  109.971457][ T6820]  ? clear_bhb_loop+0x35/0x90
[  109.971490][ T6820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.971527][ T6820] RIP: 0033:0x7fa16958d169
[  109.971549][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.971565][ T6820] RSP: 002b:00007fa16a485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  109.971587][ T6820] RAX: ffffffffffffffda RBX: 00007fa1697a5fa0 RCX: 00007fa16958d169
[  109.971602][ T6820] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000028
[  109.971613][ T6820] RBP: 00007fa16960e2a0 R08: 00000000000003f0 R09: 0000000000000000
[  109.971626][ T6820] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.971638][ T6820] R13: 0000000000000000 R14: 00007fa1697a5fa0 R15: 00007fff52e058d8
[  109.971668][ T6820]  </TASK>
[  109.971680][ T6820] Mem-Info:
[  109.978615][ T6827] syzkaller1: entered allmulticast mode
[  110.313512][ T6820] active_anon:4635 inactive_anon:0 isolated_anon:0
[  110.313512][ T6820]  active_file:1438 inactive_file:38308 isolated_file:0
[  110.313512][ T6820]  unevictable:768 dirty:105 writeback:0
[  110.313512][ T6820]  slab_reclaimable:9910 slab_unreclaimable:97371
[  110.313512][ T6820]  mapped:29750 shmem:1435 pagetables:859
[  110.313512][ T6820]  sec_pagetables:0 bounce:0
[  110.313512][ T6820]  kernel_misc_reclaimable:0
[  110.313512][ T6820]  free:1334700 free_pcp:1138 free_cma:0
[  110.391093][ T6807] lo speed is unknown, defaulting to 1000
[  110.395227][ T6820] Node 0 active_anon:18624kB inactive_anon:0kB active_file:5752kB inactive_file:153160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119008kB dirty:456kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11060kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no
[  110.429792][ T6820] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  110.448039][ T6807] lo speed is unknown, defaulting to 1000
[  110.492595][ T6807] lo speed is unknown, defaulting to 1000
[  110.511329][ T6820] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.586728][ T6820] lowmem_reserve[]: 0 2489 2490 2490 2490
[  110.592708][ T6820] Node 0 DMA32 free:1424092kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18588kB inactive_anon:0kB active_file:5752kB inactive_file:152832kB unevictable:1536kB writepending:456kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:4348kB local_pcp:1060kB free_cma:0kB
[  110.632960][ T6820] lowmem_reserve[]: 0 0 0 0 0
[  110.638126][ T6820] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.766404][ T6820] lowmem_reserve[]: 0 0 0 0 0
[  110.776272][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'.
[  110.782993][ T6820] Node 1 
[  110.788384][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'.
[  110.807591][ T6820] Normal free:3911648kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.836870][ T6831] nbd: socks must be embedded in a SOCK_ITEM attr
[  110.851224][ T6838] netlink: 44 bytes leftover after parsing attributes in process `syz.3.203'.
[  110.870050][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'.
[  110.870776][ T6834] vlan2: left promiscuous mode
[  110.909523][ T6840] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'.
[  110.919543][ T6834] bond0: left promiscuous mode
[  110.925893][ T6834] bridge0: port 1(vlan2) entered disabled state
[  110.932539][ T6820] lowmem_reserve[]: 0 0 0 0 0
[  110.944398][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'.
[  110.946308][ T6820] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  110.962762][ T6840] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'.
[  110.989614][ T6844] netlink: 'syz.0.206': attribute type 1 has an invalid length.
[  111.020306][ T6835] lo speed is unknown, defaulting to 1000
[  111.060102][ T6820] Node 0 DMA32: 74*4kB (UME) 140*8kB (UM) 199*16kB (UME) 276*32kB (UME) 129*64kB (UME) 89*128kB (UME) 75*256kB (UM) 46*512kB (UM) 24*1024kB (UME) 5*2048kB (ME) 322*4096kB (UM) = 1429560kB
[  111.095346][ T6820] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  111.107998][ T6820] Node 1 Normal: 178*4kB (UME) 51*8kB (UME) 36*16kB (UME) 190*32kB (UME) 88*64kB (UME) 31*128kB (UME) 14*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3911648kB
[  111.127554][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  111.137845][ T6820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.147775][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  111.158257][ T6820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.168180][ T6820] 41183 total pagecache pages
[  111.173273][ T6820] 0 pages in swap cache
[  111.179018][ T6820] Free swap  = 124996kB
[  111.183197][ T6820] Total swap = 124996kB
[  111.188899][ T6820] 2097051 pages RAM
[  111.191544][ T6839] team0: Mode changed to "loadbalance"
[  111.193271][ T6820] 0 pages HighMem/MovableOnly
[  111.219108][ T6837] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.228478][ T6837] bond1: (slave bond2): making interface the new active one
[  111.237022][ T6837] bond1: (slave bond2): Enslaving as an active interface with an up link
[  111.321405][ T6820] 427902 pages reserved
[  111.326003][ T6820] 0 pages cma reserved
[  111.703287][ T6856] lo speed is unknown, defaulting to 1000
[  112.449221][ T6892] openvswitch: netlink: Message has 1 unknown bytes.
[  112.492069][ T6892] openvswitch: netlink: Actions may not be safe on all matching packets
[  113.257833][ T6927] lo speed is unknown, defaulting to 1000
[  113.278089][ T6926] lo speed is unknown, defaulting to 1000
[  113.728370][ T6951] bond1: (slave bond2): Releasing backup interface
[  113.752451][ T6956] team0: Unable to change to the same mode the team is in
[  114.123276][ T6973] netlink: 'syz.3.243': attribute type 3 has an invalid length.
[  114.153186][ T6973] netlink: 'syz.3.243': attribute type 39 has an invalid length.
[  114.276133][ T6979] netlink: 'syz.2.245': attribute type 9 has an invalid length.
[  114.322182][ T6979] __nla_validate_parse: 11 callbacks suppressed
[  114.322199][ T6979] netlink: 201384 bytes leftover after parsing attributes in process `syz.2.245'.
[  114.397227][ T6979] openvswitch: netlink: Message has 6 unknown bytes.
[  114.702740][ T7003] netlink: 'syz.4.253': attribute type 1 has an invalid length.
[  114.822036][ T7007] nbd: must specify a device to reconfigure
[  114.906167][ T7009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'.
[  116.282356][ T7017] lo speed is unknown, defaulting to 1000
[  116.578489][ T7028] netlink: 'syz.2.257': attribute type 4 has an invalid length.
[  116.644749][ T7030] netlink: 356 bytes leftover after parsing attributes in process `syz.4.258'.
[  116.980560][ T7036] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  116.986962][ T7045] x_tables: duplicate underflow at hook 1
[  117.079313][ T7036] lo speed is unknown, defaulting to 1000
[  117.096214][ T7036] lo speed is unknown, defaulting to 1000
[  117.102659][ T7036] lo speed is unknown, defaulting to 1000
[  117.118230][ T7036] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.156475][ T7036] lo speed is unknown, defaulting to 1000
[  117.163614][ T7036] lo speed is unknown, defaulting to 1000
[  117.185083][ T7036] lo speed is unknown, defaulting to 1000
[  117.191971][ T7036] lo speed is unknown, defaulting to 1000
[  117.225425][ T7036] lo speed is unknown, defaulting to 1000
[  117.345664][ T7062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.269'.
[  117.680394][ T7080] batadv_slave_1: entered promiscuous mode
[  117.707545][ T7083] netlink: 'syz.3.276': attribute type 7 has an invalid length.
[  117.723919][ T7078] batadv_slave_1: left promiscuous mode
[  118.148029][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'.
[  118.174505][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'.
[  118.174667][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'.
[  118.202826][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'.
[  118.221472][ T7099] netlink: 'syz.1.282': attribute type 5 has an invalid length.
[  118.231252][ T7102] openvswitch: netlink: Duplicate key (type 32).
[  118.833871][ T7117] netlink: 'syz.0.290': attribute type 7 has an invalid length.
[  119.082193][ T7140] Bluetooth: MGMT ver 1.23
[  119.163101][ T7142] netlink: 328 bytes leftover after parsing attributes in process `syz.4.295'.
[  119.576138][ T7152] netlink: 1275 bytes leftover after parsing attributes in process `syz.1.298'.
[  119.593492][ T7152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.784841][ T7160] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  119.859834][ T7162] netlink: 'syz.3.301': attribute type 11 has an invalid length.
[  120.037759][ T7165] netlink: 160 bytes leftover after parsing attributes in process `syz.0.302'.
[  120.086783][ T7165] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  120.173873][ T7173] lo speed is unknown, defaulting to 1000
[  120.180682][ T7173] lo speed is unknown, defaulting to 1000
[  120.306361][ T7185] netlink: 'syz.2.305': attribute type 3 has an invalid length.
[  120.314335][ T7185] netlink: 120 bytes leftover after parsing attributes in process `syz.2.305'.
[  120.348368][ T7189] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  120.763616][ T7205] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  120.908216][ T7207] netlink: 'syz.0.313': attribute type 26 has an invalid length.
[  121.231205][ T7224] lo: left allmulticast mode
[  121.390077][  T975] IPVS: starting estimator thread 0...
[  121.410257][ T7232] bridge0: port 3(gretap0) entered blocking state
[  121.472694][ T7232] bridge0: port 3(gretap0) entered disabled state
[  121.492982][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[  121.505356][ T7232] gretap0: entered allmulticast mode
[  121.511909][ T7232] gretap0: entered promiscuous mode
[  121.520104][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[  121.534155][ T7233] IPVS: using max 23 ests per chain, 55200 per kthread
[  121.558125][ T7224] gretap0: left allmulticast mode
[  121.571065][ T7224] gretap0: left promiscuous mode
[  121.595276][ T7230] netlink: 'syz.4.320': attribute type 9 has an invalid length.
[  121.608265][ T7224] bridge0: port 3(gretap0) entered disabled state
[  121.618449][ T7230] netlink: 201384 bytes leftover after parsing attributes in process `syz.4.320'.
[  121.651738][ T7230] openvswitch: netlink: Message has 6 unknown bytes.
[  123.321744][ T7299] netlink: 'syz.1.337': attribute type 6 has an invalid length.
[  123.691653][ T7298] lo speed is unknown, defaulting to 1000
[  123.751341][ T7298] lo speed is unknown, defaulting to 1000
[  124.135535][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.241181][ T7322] lo speed is unknown, defaulting to 1000
[  124.275326][ T7322] lo speed is unknown, defaulting to 1000
[  124.554367][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[  124.877804][ T7338] lo speed is unknown, defaulting to 1000
[  124.891890][ T7338] lo speed is unknown, defaulting to 1000
[  125.381802][ T7358] netlink: 'syz.3.351': attribute type 9 has an invalid length.
[  125.461965][ T7358] netlink: 201384 bytes leftover after parsing attributes in process `syz.3.351'.
[  125.539468][ T7358] openvswitch: netlink: Message has 6 unknown bytes.
[  125.712605][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'.
[  127.440244][ T7365] dummy0: entered promiscuous mode
[  127.448554][ T7365] dummy0: left promiscuous mode
[  127.699619][ T7384] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0
[  127.758864][ T7384] bridge0: port 3(gretap0) entered blocking state
[  127.786973][ T7384] bridge0: port 3(gretap0) entered disabled state
[  127.859236][ T7384] gretap0: entered allmulticast mode
[  127.927715][ T7384] gretap0: entered promiscuous mode
[  127.950588][ T7384] bridge0: port 3(gretap0) entered blocking state
[  127.957289][ T7384] bridge0: port 3(gretap0) entered forwarding state
[  127.980843][ T7401] gretap0: left allmulticast mode
[  128.020438][ T7401] gretap0: left promiscuous mode
[  128.038676][ T7401] bridge0: port 3(gretap0) entered disabled state
[  128.261031][ T7416] netlink: 'syz.3.366': attribute type 1 has an invalid length.
[  128.289728][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[  128.381251][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.369'.
[  128.406995][ T7427] sctp: [Deprecated]: syz.3.366 (pid 7427) Use of int in maxseg socket option.
[  128.406995][ T7427] Use struct sctp_assoc_value instead
[  129.322327][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.377184][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.937670][ T7462] netlink: 232 bytes leftover after parsing attributes in process `syz.3.379'.
[  129.958769][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'.
[  130.045437][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[  130.054956][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[  130.064502][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[  130.668285][ T7489] netlink: 'syz.4.387': attribute type 2 has an invalid length.
[  130.687566][ T7489] netlink: 'syz.4.387': attribute type 1 has an invalid length.
[  131.840172][ T7485] netlink: 37 bytes leftover after parsing attributes in process `syz.3.388'.
[  131.914211][ T7499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.390'.
[  131.929249][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'.
[  132.031256][ T7504] syzkaller1: entered promiscuous mode
[  132.042521][ T7504] syzkaller1: entered allmulticast mode
[  132.263488][ T7515] IPv6: sit1: Disabled Multicast RS
[  132.560225][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'.
[  132.590487][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'.
[  132.724285][ T7543] netlink: 'syz.3.405': attribute type 39 has an invalid length.
[  132.937934][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  133.025923][ T7562] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  133.098700][ T7568] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  133.132116][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'.
[  133.162589][ T7568] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  133.170064][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'.
[  133.286104][ T7579] bridge0: entered promiscuous mode
[  133.299539][ T7579] macvlan2: entered promiscuous mode
[  133.358678][ T7582] macvlan3: entered promiscuous mode
[  133.417413][ T7589] netlink: 'syz.3.418': attribute type 21 has an invalid length.
[  133.436959][ T7589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.418'.
[  133.469116][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'.
[  133.474266][ T7589] netlink: 'syz.3.418': attribute type 4 has an invalid length.
[  133.492814][ T7589] netlink: 'syz.3.418': attribute type 5 has an invalid length.
[  133.501109][ T7589] netlink: 3 bytes leftover after parsing attributes in process `syz.3.418'.
[  133.762324][ T7603] IPVS: Scheduler module ip_vs_sip not found
[  133.771090][ T7605] tipc: Started in network mode
[  133.776139][ T7605] tipc: Node identity 724d29d6, cluster identity 4711
[  133.782930][ T7605] tipc: Node number set to 1917659606
[  134.191427][ T7624] macvlan3: entered promiscuous mode
[  134.212687][ T7624] macvlan3: entered allmulticast mode
[  134.221775][ T7624] bond0: entered allmulticast mode
[  134.236172][ T7624] bond0: entered promiscuous mode
[  134.249432][ T7624] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  134.257778][ T7630] netlink: 'syz.2.432': attribute type 11 has an invalid length.
[  134.269541][ T7624] team0: Port device macvlan3 added
[  134.291921][ T7634] 8021q: VLANs not supported on caif0
[  134.302512][ T7631] 8021q: VLANs not supported on caif0
[  134.335533][ T7628] lo speed is unknown, defaulting to 1000
[  134.349328][ T7628] lo speed is unknown, defaulting to 1000
[  134.612578][ T7647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  134.899874][ T7654] netlink: 'syz.4.438': attribute type 10 has an invalid length.
[  134.940709][ T7662] bond0: entered promiscuous mode
[  134.952621][ T7660] netlink: 'syz.4.438': attribute type 10 has an invalid length.
[  134.974603][ T7662] bond0: left allmulticast mode
[  134.991265][ T7654] batman_adv: batadv0: Adding interface: team0
[  135.047859][ T7654] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.075026][ T7654] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  135.095300][ T7672] netlink: 'syz.3.443': attribute type 10 has an invalid length.
[  135.115798][ T7660] team0: entered promiscuous mode
[  135.130854][ T7675] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003
[  135.131686][ T7660] team_slave_0: entered promiscuous mode
[  135.153112][ T7675] raw_sendmsg: syz.0.442 forgot to set AF_INET. Fix it!
[  135.156052][ T7660] team_slave_1: entered promiscuous mode
[  135.176777][ T7660] bond0: entered promiscuous mode
[  135.181474][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  135.190851][ T7660] bond_slave_0: entered promiscuous mode
[  135.233571][ T7660] bond_slave_1: entered promiscuous mode
[  135.249381][ T7660] 8021q: adding VLAN 0 to HW filter on device team0
[  135.257369][ T7660] batman_adv: batadv0: Interface activated: team0
[  135.264099][ T7660] batman_adv: batadv0: Interface deactivated: team0
[  135.271059][ T7660] batman_adv: batadv0: Removing interface: team0
[  135.297549][ T7660] bridge0: port 3(team0) entered blocking state
[  135.306394][ T7660] bridge0: port 3(team0) entered disabled state
[  135.313075][ T7660] team0: entered allmulticast mode
[  135.319940][ T7660] team_slave_0: entered allmulticast mode
[  135.335781][ T7660] team_slave_1: entered allmulticast mode
[  135.342763][ T7660] bond0: entered allmulticast mode
[  135.348365][ T7660] bond_slave_0: entered allmulticast mode
[  135.355357][ T7660] bond_slave_1: entered allmulticast mode
[  135.371013][ T7660] bridge0: port 3(team0) entered blocking state
[  135.377700][ T7660] bridge0: port 3(team0) entered forwarding state
[  135.901410][ T7699] sctp: [Deprecated]: syz.4.448 (pid 7699) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.901410][ T7699] Use struct sctp_sack_info instead
[  136.238651][ T7723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  136.455951][ T7731] netlink: 'syz.1.452': attribute type 3 has an invalid length.
[  136.684309][ T7752] netlink: 'syz.3.461': attribute type 11 has an invalid length.
[  136.747395][ T7760] netlink: 'syz.3.463': attribute type 1 has an invalid length.
[  136.769481][ T7760] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.784065][ T7759] gretap2: entered promiscuous mode
[  136.798407][ T7759] bond1: (slave gretap2): making interface the new active one
[  136.807764][ T7759] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  136.954934][ T7767] __nla_validate_parse: 8 callbacks suppressed
[  136.954954][ T7767] netlink: 64 bytes leftover after parsing attributes in process `syz.3.465'.
[  137.122078][ T7776] trusted_key: syz.2.468 sent an empty control message without MSG_MORE.
[  137.288910][ T7783] netlink: 'syz.3.471': attribute type 1 has an invalid length.
[  137.296944][ T7783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.471'.
[  137.322955][ T7787] x_tables: duplicate underflow at hook 2
[  137.515833][ T7793] lo speed is unknown, defaulting to 1000
[  137.548184][ T7793] lo speed is unknown, defaulting to 1000
[  137.798831][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'.
[  137.844576][ T7804] netlink: 'syz.4.476': attribute type 1 has an invalid length.
[  138.080560][ T7818] netlink: 'syz.0.480': attribute type 10 has an invalid length.
[  138.089902][ T7818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'.
[  138.102932][ T7818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.120284][ T7818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.130864][ T7818] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.146143][ T7818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.156035][ T7823] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  138.215709][ T7818] team0: Port device geneve0 added
[  138.774439][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  138.985066][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'.
[  139.108007][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.495'.
[  139.364239][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'.
[  140.950187][ T7925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.542517][ T7925] vlan2: entered promiscuous mode
[  141.563764][ T7925] hsr0: entered promiscuous mode
[  141.826165][ T7942] x_tables: duplicate underflow at hook 1
[  142.050514][ T7955] ieee802154 phy0 wpan0: encryption failed: -22
[  142.053484][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.521'.
[  142.092079][ T7955] netlink: 'syz.2.522': attribute type 1 has an invalid length.
[  142.464015][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'.
[  142.474243][ T7981] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  142.520855][ T7981] 8021q: adding VLAN 0 to HW filter on device team1
[  142.659300][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.533'.
[  142.681261][   T30] audit: type=1800 audit(1742338731.597:2): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.533" name="memory.events" dev="tmpfs" ino=618 res=0 errno=0
[  142.707727][   T30] audit: type=1800 audit(1742338731.597:3): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.533" name="memory.events" dev="tmpfs" ino=618 res=0 errno=0
[  142.859543][ T8000] netlink: 'syz.3.538': attribute type 10 has an invalid length.
[  142.882994][ T8000] team0: Port device dummy0 added
[  142.925445][ T8000] team0: Port device dummy0 removed
[  142.946627][ T8000] bridge_slave_0: left allmulticast mode
[  142.965869][ T8000] bridge_slave_0: left promiscuous mode
[  142.981052][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.999913][ T8000] bridge_slave_1: left allmulticast mode
[  143.009131][ T8000] bridge_slave_1: left promiscuous mode
[  143.020577][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.034740][ T8000] bond0: (slave bond_slave_0): Releasing backup interface
[  143.045274][ T8000] bond0: (slave bond_slave_1): Releasing backup interface
[  143.070043][ T8000] team0: Port device team_slave_0 removed
[  143.097356][ T8000] team0: Port device team_slave_1 removed
[  143.110220][ T8006] netlink: 'syz.2.537': attribute type 6 has an invalid length.
[  143.124049][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.155554][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.228019][ T8000] bond1: (slave gretap2): Releasing active interface
[  143.347121][ T8003] lo speed is unknown, defaulting to 1000
[  143.389528][ T8003] lo speed is unknown, defaulting to 1000
[  143.746821][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'.
[  143.783764][ T8018] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  144.121544][ T8032] netlink: 'syz.0.549': attribute type 39 has an invalid length.
[  144.267458][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'.
[  144.364214][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'.
[  144.373053][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'.
[  144.383952][ T8003] netlink: 'syz.1.539': attribute type 12 has an invalid length.
[  144.388565][  T975] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1
[  144.414400][  T975] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22
[  144.972894][ T8073] netlink: 'syz.1.558': attribute type 5 has an invalid length.
[  144.981788][ T8073] netlink: 'syz.1.558': attribute type 5 has an invalid length.
[  145.039630][ T8076] lo speed is unknown, defaulting to 1000
[  145.049488][ T8078] Bluetooth: MGMT ver 1.23
[  145.065693][ T8076] lo speed is unknown, defaulting to 1000
[  145.137781][ T8078] lo speed is unknown, defaulting to 1000
[  145.158412][ T8078] lo speed is unknown, defaulting to 1000
[  145.495184][ T8092] lo speed is unknown, defaulting to 1000
[  145.528759][ T8092] lo speed is unknown, defaulting to 1000
[  145.623643][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'.
[  145.632580][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'.
[  145.640742][ T8097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.564'.
[  145.716049][ T8097] Bluetooth: MGMT ver 1.23
[  145.969350][ T8103] lo speed is unknown, defaulting to 1000
[  145.978618][ T8103] lo speed is unknown, defaulting to 1000
[  146.096718][ T8110] vlan2: entered allmulticast mode
[  146.113516][ T8110] batadv0: entered allmulticast mode
[  146.129108][ T8107] lo speed is unknown, defaulting to 1000
[  146.149359][ T8107] lo speed is unknown, defaulting to 1000
[  146.479110][ T8129] openvswitch: netlink: Actions may not be safe on all matching packets
[  146.831381][ T8150] batman_adv: batadv0: Adding interface: dummy0
[  146.837957][ T8150] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.874123][ T8150] batman_adv: batadv0: Interface activated: dummy0
[  146.926173][ T8153] batadv0: mtu less than device minimum
[  146.944336][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  146.957063][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  146.969181][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  146.981570][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  146.994002][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  147.006368][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  147.018766][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  147.031061][ T8153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  147.345647][ T8159] lo speed is unknown, defaulting to 1000
[  147.380874][ T8159] lo speed is unknown, defaulting to 1000
[  147.598857][ T8170] xt_CT: No such helper "pptp"
[  147.801379][ T8157] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  147.940458][ T8197] __nla_validate_parse: 5 callbacks suppressed
[  147.940493][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'.
[  147.957791][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'.
[  148.009606][ T8199] netlink: 'syz.3.587': attribute type 1 has an invalid length.
[  148.035926][ T8199] netlink: 'syz.3.587': attribute type 4 has an invalid length.
[  148.054449][ T8199] netlink: 188 bytes leftover after parsing attributes in process `syz.3.587'.
[  148.100719][ T8202] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[  148.111720][ T8202] netlink: 'syz.0.589': attribute type 2 has an invalid length.
[  148.333706][ T8209] netlink: 'syz.0.591': attribute type 16 has an invalid length.
[  148.343579][ T8209] netlink: 'syz.0.591': attribute type 17 has an invalid length.
[  148.991254][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'.
[  149.103680][ T5843] Bluetooth: hci0: command 0x0401 tx timeout
[  149.179180][ T8259] syzkaller0: entered promiscuous mode
[  149.190960][ T8259] syzkaller0: entered allmulticast mode
[  149.298031][ T8272] SET target dimension over the limit!
[  149.477625][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'.
[  149.552219][ T8284] netlink: 'syz.0.614': attribute type 15 has an invalid length.
[  151.151337][ T8281] bond3: entered promiscuous mode
[  151.159702][ T8281] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.282552][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'.
[  151.318904][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'.
[  151.545781][ T8292] lo speed is unknown, defaulting to 1000
[  151.545794][ T8308] netlink: 'syz.3.620': attribute type 12 has an invalid length.
[  151.599315][ T8292] lo speed is unknown, defaulting to 1000
[  151.838446][ T8320] sock: sock_timestamping_bind_phc: sock not bind to device
[  151.852124][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  151.901770][ T8320] netlink: 296 bytes leftover after parsing attributes in process `syz.0.625'.
[  151.989013][ T8327] netlink: 'syz.0.628': attribute type 10 has an invalid length.
[  152.036183][ T8327] team0: Device hsr_slave_0 failed to register rx_handler
[  152.062363][ T8324] lo speed is unknown, defaulting to 1000
[  152.085047][ T8324] lo speed is unknown, defaulting to 1000
[  152.641521][   T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  153.352893][ T8380] netlink: 96 bytes leftover after parsing attributes in process `syz.3.643'.
[  153.722193][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.646'.
[  153.780852][ T8397] netlink: 'syz.4.646': attribute type 1 has an invalid length.
[  153.826730][ T8397] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.919828][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'.
[  153.930117][ T8405] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  153.936730][ T8404] ipvlan2: entered promiscuous mode
[  153.976484][ T8407] batman_adv: batadv0: Interface deactivated: dummy0
[  153.995961][ T8407] batman_adv: batadv0: Removing interface: dummy0
[  154.013015][ T8407] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.030966][ T8407] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.052215][ T8407] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.071045][ T8407] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.120271][ T8407] team0: Port device geneve0 removed
[  154.129134][ T8407] bond0: left allmulticast mode
[  154.139323][ T8407] bond0: left promiscuous mode
[  154.152777][ T8407] team0: Port device macvlan3 removed
[  154.199664][ T8418] ax25_connect(): syz.3.654 uses autobind, please contact jreuter@yaina.de
[  154.324807][ T8428] lo speed is unknown, defaulting to 1000
[  154.333242][ T8428] lo speed is unknown, defaulting to 1000
[  154.369041][ T8429] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  154.875836][ T8457] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜À–P
[  154.961389][ T8460] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  155.010740][ T8462] lo speed is unknown, defaulting to 1000
[  155.019019][ T8462] lo speed is unknown, defaulting to 1000
[  155.150542][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'.
[  155.380616][ T8481] lo speed is unknown, defaulting to 1000
[  155.404441][ T8481] lo speed is unknown, defaulting to 1000
[  155.741433][ T8479] warn_alloc: 1 callbacks suppressed
[  155.741454][ T8479] syz.3.673: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  155.784955][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.3.673 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  155.784981][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  155.784992][ T8479] Call Trace:
[  155.784998][ T8479]  <TASK>
[  155.785005][ T8479]  dump_stack_lvl+0x241/0x360
[  155.785030][ T8479]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.785049][ T8479]  ? __pfx__printk+0x10/0x10
[  155.785070][ T8479]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  155.785092][ T8479]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  155.785116][ T8479]  warn_alloc+0x278/0x410
[  155.785139][ T8479]  ? __pfx_warn_alloc+0x10/0x10
[  155.785172][ T8479]  ? xskq_create+0xb6/0x170
[  155.785190][ T8479]  ? __get_vm_area_node+0x1c8/0x2d0
[  155.785216][ T8479]  ? __get_vm_area_node+0x25c/0x2d0
[  155.785250][ T8479]  __vmalloc_node_range_noprof+0x62f/0x1380
[  155.785295][ T8479]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  155.785319][ T8479]  ? __kasan_kmalloc+0x98/0xb0
[  155.785345][ T8479]  vmalloc_user_noprof+0x74/0x80
[  155.785363][ T8479]  ? xskq_create+0xb6/0x170
[  155.785380][ T8479]  xskq_create+0xb6/0x170
[  155.785400][ T8479]  xsk_init_queue+0xa1/0x100
[  155.785420][ T8479]  xsk_setsockopt+0x560/0x810
[  155.785457][ T8479]  ? __pfx_xsk_setsockopt+0x10/0x10
[  155.785476][ T8479]  ? __pfx_aa_sk_perm+0x10/0x10
[  155.785509][ T8479]  ? __pfx_lock_acquire+0x10/0x10
[  155.785536][ T8479]  ? aa_sock_opt_perm+0x79/0x120
[  155.785570][ T8479]  ? __pfx_xsk_setsockopt+0x10/0x10
[  155.785598][ T8479]  do_sock_setsockopt+0x3af/0x720
[  155.785625][ T8479]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  155.785650][ T8479]  ? __fget_files+0x395/0x410
[  155.785676][ T8479]  ? __fget_files+0x2a/0x410
[  155.785710][ T8479]  __x64_sys_setsockopt+0x1ee/0x280
[  155.785737][ T8479]  do_syscall_64+0xf3/0x230
[  155.785762][ T8479]  ? clear_bhb_loop+0x35/0x90
[  155.785790][ T8479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.785814][ T8479] RIP: 0033:0x7fb055b8d169
[  155.785830][ T8479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.785844][ T8479] RSP: 002b:00007fb0569aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  155.785863][ T8479] RAX: ffffffffffffffda RBX: 00007fb055da6080 RCX: 00007fb055b8d169
[  155.785876][ T8479] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  155.785886][ T8479] RBP: 00007fb055c0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  155.785897][ T8479] R10: 0000400000001780 R11: 0000000000000246 R12: 0000000000000000
[  155.785908][ T8479] R13: 0000000000000000 R14: 00007fb055da6080 R15: 00007ffda08e7a48
[  155.785935][ T8479]  </TASK>
[  155.786014][ T8479] Mem-Info:
[  156.062981][ T8479] active_anon:4999 inactive_anon:0 isolated_anon:0
[  156.062981][ T8479]  active_file:1551 inactive_file:38329 isolated_file:0
[  156.062981][ T8479]  unevictable:768 dirty:293 writeback:0
[  156.062981][ T8479]  slab_reclaimable:10711 slab_unreclaimable:98089
[  156.062981][ T8479]  mapped:28563 shmem:1485 pagetables:783
[  156.062981][ T8479]  sec_pagetables:0 bounce:0
[  156.062981][ T8479]  kernel_misc_reclaimable:0
[  156.062981][ T8479]  free:1337346 free_pcp:1681 free_cma:0
[  156.118117][ T8479] Node 0 active_anon:19996kB inactive_anon:0kB active_file:6204kB inactive_file:153244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114252kB dirty:1172kB writeback:0kB shmem:4404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3132kB sec_pagetables:0kB all_unreclaimable? no
[  156.171999][ T8479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  156.208551][ T8479] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.237269][ T8479] lowmem_reserve[]: 0 2489 2490 2490 2490
[  156.243120][ T8479] Node 0 DMA32 free:1421268kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19960kB inactive_anon:0kB active_file:6204kB inactive_file:152916kB unevictable:1536kB writepending:1172kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:6884kB local_pcp:6392kB free_cma:0kB
[  156.273866][ T8479] lowmem_reserve[]: 0 0 0 0 0
[  156.278644][ T8479] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.306697][ T8479] lowmem_reserve[]: 0 0 0 0 0
[  156.311493][ T8479] Node 1 Normal free:3911664kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.343655][ T8479] lowmem_reserve[]: 0 0 0 0 0
[  156.348486][ T8479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.362018][ T8479] Node 0 DMA32: 74*4kB (M) 134*8kB (ME) 111*16kB (ME) 102*32kB (UME) 239*64kB (UME) 94*128kB (UME) 80*256kB (UM) 47*512kB (UM) 26*1024kB (UME) 7*2048kB (UM) 318*4096kB (UM) = 1421768kB
[  156.381745][ T8479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  156.394042][ T8479] Node 1 Normal: 182*4kB (UME) 51*8kB (UME) 36*16kB (UME) 190*32kB (UME) 88*64kB (UME) 31*128kB (UME) 14*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3911664kB
[  156.413074][ T8479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.424105][ T8479] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  156.433583][ T8479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  156.443227][ T8479] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  156.452622][ T8479] 41340 total pagecache pages
[  156.457679][ T8479] 0 pages in swap cache
[  156.461852][ T8479] Free swap  = 124996kB
[  156.466320][ T8479] Total swap = 124996kB
[  156.470710][ T8479] 2097051 pages RAM
[  156.475376][ T8479] 0 pages HighMem/MovableOnly
[  156.480080][ T8479] 427902 pages reserved
[  156.484330][ T8479] 0 pages cma reserved
[  156.771598][ T8516] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  156.934303][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[  156.943135][ T8521] net_ratelimit: 14 callbacks suppressed
[  156.943151][ T8521] openvswitch: netlink: Flow actions attr not present in new flow.
[  157.013625][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  157.456611][ T8535] lo speed is unknown, defaulting to 1000
[  157.499590][ T8535] lo speed is unknown, defaulting to 1000
[  157.556510][ T8539] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[  157.614855][ T8545] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003
[  157.664492][ T8539] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  157.807824][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'.
[  157.939666][ T8562] nbd: must specify a size in bytes for the device
[  157.965882][ T8564] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  158.151699][ T8566] sctp: [Deprecated]: syz.4.695 (pid 8566) Use of int in maxseg socket option.
[  158.151699][ T8566] Use struct sctp_assoc_value instead
[  158.249904][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'.
[  158.311675][ T8568] syz_tun: entered promiscuous mode
[  158.333672][ T8568] macsec1: entered promiscuous mode
[  158.344666][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'.
[  158.371521][ T8568] syz_tun: left promiscuous mode
[  158.485640][ T8577] xt_CT: You must specify a L4 protocol and not use inversions on it
[  158.493930][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'.
[  158.727348][ T8590] tipc: Started in network mode
[  158.743186][ T8590] tipc: Node identity 40000001, cluster identity 8
[  158.773626][ T8590] tipc: Node number set to 1073741825
[  158.899828][ T8600] netlink: 'syz.4.705': attribute type 2 has an invalid length.
[  158.936192][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'.
[  158.967532][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'.
[  159.030695][ T8605] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  159.054266][ T8603] team0: Port device gtp0 added
[  159.477603][ T8622] sctp: [Deprecated]: syz.1.713 (pid 8622) Use of int in maxseg socket option.
[  159.477603][ T8622] Use struct sctp_assoc_value instead
[  159.534728][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'.
[  159.544959][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'.
[  159.554368][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'.
[  159.715466][ T8627] lo speed is unknown, defaulting to 1000
[  159.722555][ T8627] lo speed is unknown, defaulting to 1000
[  159.735323][ T8618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  159.822496][ T8631] openvswitch: netlink: Actions may not be safe on all matching packets
[  159.843227][ T8617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.711'.
[  159.853132][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'.
[  159.862230][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.711'.
[  159.871356][ T8617] netlink: 80 bytes leftover after parsing attributes in process `syz.0.711'.
[  160.025743][ T8617] x_tables: duplicate entry at hook 2
[  160.413078][ T8650] lo speed is unknown, defaulting to 1000
[  160.559280][ T8650] lo speed is unknown, defaulting to 1000
[  160.825359][ T8675] netlink: 'syz.2.728': attribute type 4 has an invalid length.
[  160.893521][   T26] lo speed is unknown, defaulting to 1000
[  160.917091][ T8671] netlink: 'syz.2.728': attribute type 4 has an invalid length.
[  160.986868][  T975] lo speed is unknown, defaulting to 1000
[  161.198528][ T8682] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  161.389937][ T8697] Cannot find add_set index 0 as target
[  161.414642][ T8697] openvswitch: netlink: Unknown key attributes 20
[  161.475846][ T8702] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  161.800230][ T8678] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  161.904239][ T8713] lo speed is unknown, defaulting to 1000
[  161.932111][ T8713] lo speed is unknown, defaulting to 1000
[  162.011909][ T8710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.037760][ T8721] lo speed is unknown, defaulting to 1000
[  162.123710][ T8721] lo speed is unknown, defaulting to 1000
[  162.280236][ T8729] bond1: entered promiscuous mode
[  162.292721][ T8729] bond1: entered allmulticast mode
[  162.299501][ T8729] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.527198][ T8729] bond1 (unregistering): Released all slaves
[  162.765582][ T8749] netlink: 'syz.4.749': attribute type 2 has an invalid length.
[  162.831575][ T8749] : entered promiscuous mode
[  162.933452][ T5843] Bluetooth: hci1: command 0x0401 tx timeout
[  163.152304][ T8768] lo speed is unknown, defaulting to 1000
[  163.203004][ T8768] lo speed is unknown, defaulting to 1000
[  163.605513][ T8791] __nla_validate_parse: 11 callbacks suppressed
[  163.605528][ T8791] netlink: 116 bytes leftover after parsing attributes in process `syz.4.761'.
[  163.696326][ T8423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.708217][ T8423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.738110][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.762'.
[  163.767501][ T8798] netlink: 268 bytes leftover after parsing attributes in process `syz.0.762'.
[  163.777651][ T8796] lo speed is unknown, defaulting to 1000
[  163.838905][ T8796] lo speed is unknown, defaulting to 1000
[  163.915283][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[  163.979884][ T8810] delete_channel: no stack
[  164.462755][ T8825] netlink: 412 bytes leftover after parsing attributes in process `syz.0.770'.
[  164.593183][ T8836] xt_hashlimit: max too large, truncated to 1048576
[  164.660245][ T8836] No such timeout policy "syz1"
[  164.690986][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'.
[  164.835858][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'.
[  164.857478][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.777'.
[  164.871562][ T8854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.896007][ T8851] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  165.063350][ T8859] delete_channel: no stack
[  165.324274][ T8871] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  165.352672][ T8871] netlink: 224 bytes leftover after parsing attributes in process `syz.2.784'.
[  165.426128][ T8877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.784'.
[  165.679315][ T8892] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  166.213510][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.484707][ T8923] Unknown options in mask 1f4
[  166.642923][ T8927] xt_TCPMSS: Only works on TCP SYN packets
[  166.877755][ T8936] netlink: 'syz.3.803': attribute type 8 has an invalid length.
[  167.007353][ T8949] openvswitch: netlink: Message has 8 unknown bytes.
[  167.041054][ T8949] netlink: 'syz.1.808': attribute type 12 has an invalid length.
[  167.577067][ T8976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  167.697591][ T8984] nbd: must specify an index to disconnect
[  167.789280][ T8989] sock: sock_timestamping_bind_phc: sock not bind to device
[  167.895876][ T8994] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  167.932744][ T8994] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  167.967232][ T8998] lo speed is unknown, defaulting to 1000
[  167.999114][ T8998] lo speed is unknown, defaulting to 1000
[  168.006359][ T8994] lo speed is unknown, defaulting to 1000
[  168.051735][ T9003] netlink: 'syz.4.824': attribute type 1 has an invalid length.
[  168.073864][ T9005] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  168.085398][ T8994] lo speed is unknown, defaulting to 1000
[  168.620286][ T9024] __nla_validate_parse: 7 callbacks suppressed
[  168.620307][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.829'.
[  168.968864][ T9038] lo speed is unknown, defaulting to 1000
[  169.019648][ T9038] lo speed is unknown, defaulting to 1000
[  169.133917][ T9044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.834'.
[  169.389497][ T9054] wg1: entered promiscuous mode
[  169.403819][ T9054] wg1: entered allmulticast mode
[  169.452658][ T9052] netlink: 228 bytes leftover after parsing attributes in process `syz.3.836'.
[  169.836925][ T9065] IPVS: length: 78 != 8
[  170.201817][ T9070] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  170.279947][ T9069] lo speed is unknown, defaulting to 1000
[  170.334370][ T9069] lo speed is unknown, defaulting to 1000
[  170.369246][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'.
[  170.408731][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'.
[  170.523071][ T9085] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.843'.
[  170.566133][ T9085] openvswitch: netlink: Missing key (keys=40, expected=80)
[  170.731115][ T9094] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  170.735590][ T9093] netlink: 'syz.3.846': attribute type 2 has an invalid length.
[  170.752697][ T9093] netlink: 92 bytes leftover after parsing attributes in process `syz.3.846'.
[  170.880972][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'.
[  170.891004][ T9102] tipc: Enabling of bearer <dth:t> rejected, media not registered
[  170.975036][ T9107] netlink: 'syz.4.848': attribute type 10 has an invalid length.
[  171.065687][ T9107] dummy0: entered promiscuous mode
[  171.070991][ T9107] dummy0: entered allmulticast mode
[  171.085094][ T9107] team0: Port device dummy0 added
[  171.170174][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'.
[  171.205216][ T9112] bond0: left promiscuous mode
[  171.217595][ T9112] bond_slave_0: left promiscuous mode
[  171.224114][ T9112] bond_slave_1: left promiscuous mode
[  171.230291][ T9112] bond0: left allmulticast mode
[  171.302872][ T9112] bond_slave_0: left allmulticast mode
[  171.317748][ T9112] bond_slave_1: left allmulticast mode
[  171.405420][ T9112] team0: Port device bond0 removed
[  171.443941][ T9112] team0: left allmulticast mode
[  171.467191][ T9112] team_slave_0: left allmulticast mode
[  171.492316][ T9112] team_slave_1: left allmulticast mode
[  171.511827][ T9112] dummy0: left allmulticast mode
[  171.536430][ T9112] bridge0: port 3(team0) entered disabled state
[  171.565639][ T9112] dummy0: left promiscuous mode
[  171.610731][ T9112] team0: Port device dummy0 removed
[  171.644395][ T9112] bridge_slave_0: left allmulticast mode
[  171.677932][ T9112] bridge_slave_0: left promiscuous mode
[  171.704493][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.750022][ T9112] bridge_slave_1: left promiscuous mode
[  171.773254][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.819260][ T9112] bond0: (slave bond_slave_0): Releasing backup interface
[  171.840410][ T9112] bond0: (slave bond_slave_1): Releasing backup interface
[  171.865324][ T9112] team_slave_0: left promiscuous mode
[  171.906243][ T9112] team0: Port device team_slave_0 removed
[  171.928506][ T9112] team_slave_1: left promiscuous mode
[  171.960772][ T9112] team0: Port device team_slave_1 removed
[  171.982933][ T9112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.001309][ T9112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.011555][ T9112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.044519][ T9112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.073141][ T9120] netlink: 'syz.2.853': attribute type 1 has an invalid length.
[  172.208615][ T9133] netlink: 'syz.4.856': attribute type 15 has an invalid length.
[  172.247784][ T9133] netlink: 666 bytes leftover after parsing attributes in process `syz.4.856'.
[  172.289116][ T9135] netem: invalid attributes len -16
[  172.295858][ T9135] netem: change failed
[  172.680135][ T9164] lo speed is unknown, defaulting to 1000
[  172.687936][ T9164] lo speed is unknown, defaulting to 1000
[  172.747872][ T9161] netlink: 'syz.4.864': attribute type 8 has an invalid length.
[  173.046405][ T9179] can: request_module (can-proto-0) failed.
[  173.141104][ T9183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.723190][ T9198] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000
[  174.009462][ T9209] netlink: 'syz.1.879': attribute type 3 has an invalid length.
[  174.017498][ T9209] __nla_validate_parse: 11 callbacks suppressed
[  174.017510][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.879'.
[  174.157836][ T9217] lo speed is unknown, defaulting to 1000
[  174.174851][ T9217] lo speed is unknown, defaulting to 1000
[  174.277775][ T9223] netlink: 'syz.1.882': attribute type 10 has an invalid length.
[  174.297678][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'.
[  174.333092][ T9226] bridge_slave_0: left allmulticast mode
[  174.343413][ T9226] bridge_slave_0: left promiscuous mode
[  174.349113][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.361013][ T9226] bridge_slave_1: left allmulticast mode
[  174.381835][ T9226] bridge_slave_1: left promiscuous mode
[  174.388657][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.429850][ T9226] bond0: (slave bond_slave_0): Releasing backup interface
[  174.452443][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.881'.
[  174.499295][ T9226] bond0: (slave bond_slave_1): Releasing backup interface
[  174.533553][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'.
[  174.558079][ T9233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  174.622278][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.881'.
[  174.632006][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.881'.
[  174.654969][ T9226] team0: Port device team_slave_0 removed
[  174.667203][ T9226] team0: Port device team_slave_1 removed
[  174.675657][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.695280][ T9223] team0: Port device dummy0 added
[  174.706563][ T9225] lo speed is unknown, defaulting to 1000
[  174.714597][ T9225] lo speed is unknown, defaulting to 1000
[  174.831649][ T9230] lo speed is unknown, defaulting to 1000
[  174.874045][ T9230] lo speed is unknown, defaulting to 1000
[  175.223862][ T9248] lo speed is unknown, defaulting to 1000
[  175.230871][ T9247] lo speed is unknown, defaulting to 1000
[  175.237447][ T9248] lo speed is unknown, defaulting to 1000
[  175.246247][ T9247] lo speed is unknown, defaulting to 1000
[  175.454160][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'.
[  175.741879][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.897'.
[  175.825976][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'.
[  175.839891][ T9279] openvswitch: netlink: Flow key attr not present in new flow.
[  175.942669][ T9282] netlink: 4516 bytes leftover after parsing attributes in process `syz.2.900'.
[  175.976150][ T9284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  176.467049][ T9305] lo speed is unknown, defaulting to 1000
[  176.484689][ T9305] lo speed is unknown, defaulting to 1000
[  176.825440][ T9320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  176.899507][ T9323] tun0: tun_chr_ioctl cmd 1074025677
[  176.905252][ T9323] tun0: linktype set to 283
[  177.218080][ T9343] IPVS: Unknown mcast interface: vcan0
[  177.405112][ T9355] No such timeout policy "syz0"
[  177.675759][ T9375] xt_l2tp: unknown flags: 10
[  177.949917][ T9389] openvswitch: netlink: IPv4 tunnel dst address is zero
[  178.537944][ T9411] netlink: 'syz.3.940': attribute type 10 has an invalid length.
[  178.577751][ T9411] team0: Port device dummy0 added
[  178.648329][ T9411] team0: Port device dummy0 removed
[  179.103974][ T9434] lo speed is unknown, defaulting to 1000
[  179.112734][ T9431] xt_CT: No such helper "snmp"
[  179.125442][ T9436] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  179.134791][ T9434] lo speed is unknown, defaulting to 1000
[  179.180040][ T9437] __nla_validate_parse: 10 callbacks suppressed
[  179.180061][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.947'.
[  179.208917][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'.
[  179.243601][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.947'.
[  179.252890][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.947'.
[  179.341031][ T9436] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.507602][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'.
[  179.578244][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  179.791170][ T9454] netlink: 76 bytes leftover after parsing attributes in process `syz.2.955'.
[  180.062195][ T9471] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  180.225035][ T9480] netlink: 'syz.1.959': attribute type 3 has an invalid length.
[  180.252903][ T9480] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.959'.
[  180.548106][ T9491] netlink: 'syz.0.963': attribute type 1 has an invalid length.
[  180.611329][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'.
[  180.632973][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'.
[  182.007200][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.018882][ T9486] 8021q: adding VLAN 0 to HW filter on device team0
[  182.030984][ T9486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.057002][ T9488] lo speed is unknown, defaulting to 1000
[  182.088903][ T9491] 8021q: adding VLAN 0 to HW filter on device bond4
[  182.109402][ T9488] lo speed is unknown, defaulting to 1000
[  182.192290][ T9501] lo speed is unknown, defaulting to 1000
[  182.219180][ T9501] lo speed is unknown, defaulting to 1000
[  182.432319][ T9516] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  182.604236][ T9522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  182.617372][ T9522] ipt_rpfilter: unknown options
[  182.625873][ T9522] netlink: 'syz.2.971': attribute type 1 has an invalid length.
[  182.899891][ T9533] netlink: 'syz.2.975': attribute type 10 has an invalid length.
[  183.032782][ T9537] ieee802154 phy0 wpan0: encryption failed: -22
[  183.680034][ T9567] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  183.867856][ T9577] FAULT_INJECTION: forcing a failure.
[  183.867856][ T9577] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  183.894182][ T9577] CPU: 0 UID: 0 PID: 9577 Comm: syz.0.986 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  183.894213][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.894226][ T9577] Call Trace:
[  183.894233][ T9577]  <TASK>
[  183.894242][ T9577]  dump_stack_lvl+0x241/0x360
[  183.894286][ T9577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.894310][ T9577]  ? __pfx__printk+0x10/0x10
[  183.894339][ T9577]  ? snprintf+0xda/0x120
[  183.894363][ T9577]  should_fail_ex+0x40a/0x550
[  183.894401][ T9577]  _copy_to_user+0x31/0xb0
[  183.894443][ T9577]  simple_read_from_buffer+0xca/0x150
[  183.894477][ T9577]  proc_fail_nth_read+0x1e9/0x250
[  183.894510][ T9577]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.894544][ T9577]  ? rw_verify_area+0x243/0x630
[  183.894566][ T9577]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.894598][ T9577]  vfs_read+0x1f8/0xb40
[  183.894622][ T9577]  ? fdget_pos+0x254/0x320
[  183.894654][ T9577]  ? __pfx___mutex_lock+0x10/0x10
[  183.894683][ T9577]  ? __pfx_vfs_read+0x10/0x10
[  183.894710][ T9577]  ? __fget_files+0x2a/0x410
[  183.894742][ T9577]  ? __fget_files+0x395/0x410
[  183.894772][ T9577]  ? __fget_files+0x2a/0x410
[  183.894812][ T9577]  ksys_read+0x18f/0x2b0
[  183.894838][ T9577]  ? __pfx_ksys_read+0x10/0x10
[  183.894862][ T9577]  ? do_syscall_64+0x100/0x230
[  183.894893][ T9577]  ? do_syscall_64+0xb6/0x230
[  183.894924][ T9577]  do_syscall_64+0xf3/0x230
[  183.894952][ T9577]  ? clear_bhb_loop+0x35/0x90
[  183.894985][ T9577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.895014][ T9577] RIP: 0033:0x7fbc4a98bb7c
[  183.895037][ T9577] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  183.895054][ T9577] RSP: 002b:00007fbc4b7fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.895084][ T9577] RAX: ffffffffffffffda RBX: 00007fbc4aba5fa0 RCX: 00007fbc4a98bb7c
[  183.895103][ T9577] RDX: 000000000000000f RSI: 00007fbc4b7fd0a0 RDI: 0000000000000004
[  183.895116][ T9577] RBP: 00007fbc4b7fd090 R08: 0000000000000000 R09: 0000000000000000
[  183.895129][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.895141][ T9577] R13: 0000000000000000 R14: 00007fbc4aba5fa0 R15: 00007ffea8053a38
[  183.895173][ T9577]  </TASK>
[  184.253003][ T9585] __nla_validate_parse: 7 callbacks suppressed
[  184.253024][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'.
[  184.343809][ T9589] vcan0: tx drop: invalid da for name 0x0000000000000002
[  184.728299][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  184.883599][ T9611] ieee802154 phy0 wpan0: encryption failed: -22
[  185.145670][ T9628] sctp: [Deprecated]: syz.4.1000 (pid 9628) Use of int in max_burst socket option.
[  185.145670][ T9628] Use struct sctp_assoc_value instead
[  185.148896][ T9624] netlink: 'syz.1.1001': attribute type 10 has an invalid length.
[  185.171243][ T9628] sctp: [Deprecated]: syz.4.1000 (pid 9628) Use of int in max_burst socket option.
[  185.171243][ T9628] Use struct sctp_assoc_value instead
[  185.189072][ T9627] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003
[  185.204596][ T9624] team0: Port device dummy0 removed
[  185.346050][ T9637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1002'.
[  185.413545][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  185.460160][ T9641] lo speed is unknown, defaulting to 1000
[  185.497892][ T9640] lo speed is unknown, defaulting to 1000
[  185.523525][ T9641] lo speed is unknown, defaulting to 1000
[  185.589250][ T9654] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  185.616038][ T9640] lo speed is unknown, defaulting to 1000
[  186.178379][ T9676] netlink: 'syz.2.1014': attribute type 10 has an invalid length.
[  187.685129][ T9673] lo: entered allmulticast mode
[  187.690247][ T9673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.744320][ T9688] pimreg0: tun_chr_ioctl cmd 1074025677
[  187.750332][ T9688] pimreg0: linktype set to 65534
[  187.915127][ T9699] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  188.241931][ T9716] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  188.274375][ T9716] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1022'.
[  188.289906][ T9716] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1022'.
[  188.432755][ T9728] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1026'.
[  188.511392][ T9734] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  189.031140][ T9760] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  189.191415][ T9760] bond0 (unregistering): Released all slaves
[  189.413048][ T9767] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  189.597410][ T9775] netlink: 'syz.0.1044': attribute type 4 has an invalid length.
[  189.606106][ T9775] netlink: 'syz.0.1044': attribute type 8 has an invalid length.
[  189.625704][ T9778] netlink: 'syz.3.1042': attribute type 11 has an invalid length.
[  189.633480][ T9775] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1044'.
[  189.633810][ T9778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1042'.
[  189.817429][ T9784] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1049'.
[  189.834459][ T9786] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1050'.
[  189.914188][ T9790] netlink: 'syz.4.1048': attribute type 10 has an invalid length.
[  189.924337][ T9790] dummy0: entered promiscuous mode
[  189.931387][ T9790] team0: Port device dummy0 added
[  189.966889][ T9790] dummy0: left promiscuous mode
[  190.008666][ T9793] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  190.049693][ T9790] team0: Port device dummy0 removed
[  190.126218][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'.
[  190.136393][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'.
[  190.229161][ T9804] lo speed is unknown, defaulting to 1000
[  190.239450][ T9804] lo speed is unknown, defaulting to 1000
[  190.284945][ T9806] netlink: 'syz.2.1056': attribute type 1 has an invalid length.
[  190.321473][ T9806] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.344147][ T9804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1056'.
[  190.345106][ T9796] lo speed is unknown, defaulting to 1000
[  190.353556][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'.
[  190.368182][ T9804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1056'.
[  190.377412][ T9804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1056'.
[  190.552464][ T9821] xt_ecn: cannot match TCP bits for non-tcp packets
[  190.651612][ T9796] lo speed is unknown, defaulting to 1000
[  190.979483][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.990032][ T9835] bond0: entered allmulticast mode
[  191.055265][ T9835] team0: Port device bond0 added
[  191.119696][ T9838] bridge0: port 1(team0) entered blocking state
[  191.136496][ T9838] bridge0: port 1(team0) entered disabled state
[  191.143525][ T9838] team0: entered allmulticast mode
[  191.150873][ T9838] team0: entered promiscuous mode
[  191.156277][ T9838] bond0: entered promiscuous mode
[  191.336897][ T9852] lo speed is unknown, defaulting to 1000
[  191.369983][ T9854] netlink: 'syz.1.1069': attribute type 1 has an invalid length.
[  191.391764][ T9852] lo speed is unknown, defaulting to 1000
[  191.451575][ T9854] 8021q: adding VLAN 0 to HW filter on device bond2
[  191.512413][ T9860] netlink: 'syz.2.1071': attribute type 1 has an invalid length.
[  191.522561][ T9860] NCSI netlink: No device for ifindex 813332851
[  191.788104][ T9872] netlink: 'syz.4.1075': attribute type 4 has an invalid length.
[  191.832162][ T9874] netlink: 'syz.1.1074': attribute type 1 has an invalid length.
[  192.893009][ T9922] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0
[  192.910768][ T9922] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0
[  193.104822][ T9931] netlink: 'syz.2.1089': attribute type 3 has an invalid length.
[  193.257033][ T9936] netlink: 'syz.4.1090': attribute type 1 has an invalid length.
[  193.445113][ T9950] netlink: 'syz.2.1095': attribute type 1 has an invalid length.
[  193.952126][ T9960] netlink: 'syz.1.1094': attribute type 1 has an invalid length.
[  194.250967][ T9965] lo: entered allmulticast mode
[  194.387539][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.692512][ T9984] ip6t_srh: unknown srh invflags 4000
[  194.857809][ T9990] lo speed is unknown, defaulting to 1000
[  194.875027][ T9990] lo speed is unknown, defaulting to 1000
[  195.324867][ T9990] lo speed is unknown, defaulting to 1000
[  195.350558][ T9990] lo speed is unknown, defaulting to 1000
[  195.431707][T10000] netlink: 'syz.2.1108': attribute type 10 has an invalid length.
[  195.583219][T10005] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  195.674744][T10009] netlink: 'syz.4.1107': attribute type 10 has an invalid length.
[  195.745669][T10009] team0: left promiscuous mode
[  195.761988][T10009] 8021q: adding VLAN 0 to HW filter on device team0
[  195.818921][T10009] bond0: (slave team0): Enslaving as an active interface with an up link
[  196.109354][T10029] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  196.187622][T10026] lo speed is unknown, defaulting to 1000
[  196.197402][T10026] lo speed is unknown, defaulting to 1000
[  196.234811][T10036] __nla_validate_parse: 15 callbacks suppressed
[  196.234828][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1116'.
[  196.251304][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'.
[  196.260557][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1116'.
[  196.270014][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1116'.
[  196.444626][T10028] netlink: 'syz.3.1114': attribute type 1 has an invalid length.
[  196.471389][T10029] 8021q: adding VLAN 0 to HW filter on device bond2
[  196.503797][T10041] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  196.636693][T10048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'.
[  197.187515][T10021] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.195119][T10021] tipc: Enabled bearer <udp:s>, priority 10
[  197.324902][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.470337][T10072] 
: renamed from bond0
[  197.556799][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'.
[  197.568553][T10081] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  197.593406][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.922204][T10092] lo speed is unknown, defaulting to 1000
[  198.004819][T10092] lo speed is unknown, defaulting to 1000
[  198.123465][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  198.140442][T10099] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  198.294046][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'.
[  198.302815][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'.
[  198.436900][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'.
[  198.628747][T10127] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  198.639737][T10127] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  198.665492][T10127] gretap1: entered promiscuous mode
[  198.712573][T10127] gretap1: entered allmulticast mode
[  198.899810][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'.
[  198.923529][T10136] tipc: Enabling of bearer <dth:t> rejected, media not registered
[  198.967301][T10140] netlink: 'syz.2.1144': attribute type 10 has an invalid length.
[  199.046341][T10141] tun0: tun_chr_ioctl cmd 1074025677
[  199.051799][T10141] tun0: linktype set to 769
[  199.173550][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  199.300304][T10154] netlink: 'syz.0.1148': attribute type 1 has an invalid length.
[  199.309515][   T30] audit: type=1800 audit(1742338788.217:4): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1150" name="memory.events" dev="tmpfs" ino=1436 res=0 errno=0
[  199.346473][T10154] netlink: 'syz.0.1148': attribute type 2 has an invalid length.
[  199.354700][   T30] audit: type=1804 audit(1742338788.217:5): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1150" name="/newroot/278/memory.events" dev="tmpfs" ino=1436 res=1 errno=0
[  199.574795][T10163] macvlan1: entered promiscuous mode
[  199.593063][T10163] ipvlan0: entered promiscuous mode
[  199.628176][T10163] ipvlan0: left promiscuous mode
[  199.661754][T10163] macvlan1: left promiscuous mode
[  199.705137][T10165] netlink: 'syz.4.1153': attribute type 1 has an invalid length.
[  199.893624][T10170] netlink: 'syz.0.1154': attribute type 1 has an invalid length.
[  199.938146][T10168] lo speed is unknown, defaulting to 1000
[  200.019921][T10170] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.052305][T10168] lo speed is unknown, defaulting to 1000
[  200.213464][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  200.374986][T10199] IPVS: length: 129 != 24
[  200.380310][T10199] IPVS: set_ctl: invalid protocol: 136 172.20.20.54:20002
[  200.653681][T10211] netlink: 'syz.2.1168': attribute type 10 has an invalid length.
[  200.833089][T10219] pim6reg: entered allmulticast mode
[  200.843147][T10219] pim6reg: left allmulticast mode
[  201.253451][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  201.479935][T10259] __nla_validate_parse: 10 callbacks suppressed
[  201.479955][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'.
[  201.523934][T10259] netlink: 'syz.4.1185': attribute type 4 has an invalid length.
[  201.592797][ T5848] Bluetooth: hci1: command 0x0401 tx timeout
[  201.599651][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  201.605899][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  201.605916][ T5846] Bluetooth: hci0: command 0x0401 tx timeout
[  201.800711][T10272] IPVS: Error connecting to the multicast addr
[  201.982040][T10292] netlink: 836 bytes leftover after parsing attributes in process `syz.4.1194'.
[  202.127828][T10300] netlink: 'syz.2.1198': attribute type 1 has an invalid length.
[  202.229321][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'.
[  202.293464][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  202.354691][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'.
[  202.468690][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'.
[  202.767842][T10319] netlink: 'syz.2.1202': attribute type 1 has an invalid length.
[  203.343371][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  203.470854][T10338] dccp_v6_rcv: dropped packet with invalid checksum
[  203.588696][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1209'.
[  203.672062][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.744475][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'.
[  203.789045][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'.
[  203.832107][T10358] netlink: 4368 bytes leftover after parsing attributes in process `syz.2.1212'.
[  203.841481][T10358] openvswitch: netlink: Flow key attr not present in new flow.
[  203.863025][T10358] lo speed is unknown, defaulting to 1000
[  203.869783][T10358] lo speed is unknown, defaulting to 1000
[  203.879040][T10360] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1213'.
[  204.203169][T10370] Cannot find del_set index 2 as target
[  204.373411][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  204.583144][T10385] netlink: 'syz.3.1216': attribute type 1 has an invalid length.
[  205.413395][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  205.816972][T10425] nbd: socks must be embedded in a SOCK_ITEM attr
[  206.074780][T10433] lo speed is unknown, defaulting to 1000
[  206.109586][T10433] lo speed is unknown, defaulting to 1000
[  206.344925][T10441] lo speed is unknown, defaulting to 1000
[  206.352822][T10441] lo speed is unknown, defaulting to 1000
[  206.353656][T10423] lo speed is unknown, defaulting to 1000
[  206.453375][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  206.471719][T10423] lo speed is unknown, defaulting to 1000
[  206.647439][T10457] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  207.045585][T10464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.500522][T10469] lo speed is unknown, defaulting to 1000
[  207.506473][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  207.596017][T10469] lo speed is unknown, defaulting to 1000
[  207.730093][T10481] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  207.931607][T10486] netlink: 'syz.0.1248': attribute type 11 has an invalid length.
[  207.953945][T10486] __nla_validate_parse: 6 callbacks suppressed
[  207.953967][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'.
[  208.024120][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'.
[  208.033803][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'.
[  208.112649][T10493] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  208.313754][T10490] lo speed is unknown, defaulting to 1000
[  208.351139][T10490] lo speed is unknown, defaulting to 1000
[  208.361715][T10498] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1252'.
[  208.543402][    C0] net_ratelimit: 1 callbacks suppressed
[  208.543424][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  208.585016][T10503] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  209.448472][T10517] team0: Port device gtp0 removed
[  209.573392][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  209.642497][T10526] lo speed is unknown, defaulting to 1000
[  209.665008][T10526] lo speed is unknown, defaulting to 1000
[  209.720754][T10529] netlink: 'syz.3.1261': attribute type 1 has an invalid length.
[  209.765813][T10529] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.852680][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'.
[  209.879461][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1261'.
[  209.947285][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'.
[  209.957373][T10534] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.962611][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'.
[  209.966057][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'.
[  209.988908][T10534] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  210.002247][T10534] bond2: (slave vcan1): Error -95 calling set_mac_address
[  210.139375][T10548] netlink: 'syz.4.1266': attribute type 10 has an invalid length.
[  210.162248][T10548] veth0_macvtap: left promiscuous mode
[  210.176499][T10548] batman_adv: batadv0: Adding interface: macvtap0
[  210.182973][T10548] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.242907][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'.
[  210.256608][T10548] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  210.278628][T10550] ==================================================================
[  210.286735][T10550] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  210.295506][T10550] Write of size 8 at addr ffff88806186fb70 by task syz.4.1266/10550
[  210.303479][T10550] 
[  210.305812][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.4.1266 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  210.305850][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  210.305859][T10550] Call Trace:
[  210.305866][T10550]  <TASK>
[  210.305872][T10550]  dump_stack_lvl+0x241/0x360
[  210.305894][T10550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.305910][T10550]  ? __pfx__printk+0x10/0x10
[  210.305926][T10550]  ? _printk+0xd5/0x120
[  210.305939][T10550]  ? __virt_addr_valid+0x183/0x530
[  210.305954][T10550]  ? __virt_addr_valid+0x183/0x530
[  210.305974][T10550]  print_report+0x16e/0x5b0
[  210.305993][T10550]  ? __virt_addr_valid+0x183/0x530
[  210.306008][T10550]  ? __virt_addr_valid+0x183/0x530
[  210.306021][T10550]  ? __virt_addr_valid+0x45f/0x530
[  210.306035][T10550]  ? __phys_addr+0xba/0x170
[  210.306049][T10550]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  210.306067][T10550]  kasan_report+0x143/0x180
[  210.306086][T10550]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  210.306106][T10550]  udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  210.306124][T10550]  rxrpc_lookup_local+0xea5/0x1890
[  210.306146][T10550]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[  210.306163][T10550]  ? __pfx_rxrpc_encap_rcv+0x10/0x10
[  210.306177][T10550]  ? __pfx_rxrpc_encap_err_rcv+0x10/0x10
[  210.306196][T10550]  ? __local_bh_enable_ip+0x168/0x200
[  210.306215][T10550]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  210.306238][T10550]  rxrpc_sendmsg+0x323/0x5f0
[  210.306254][T10550]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  210.306267][T10550]  __sock_sendmsg+0x221/0x270
[  210.306291][T10550]  ____sys_sendmsg+0x53a/0x860
[  210.306312][T10550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.306330][T10550]  ? __fget_files+0x2a/0x410
[  210.306353][T10550]  ? __fget_files+0x2a/0x410
[  210.306383][T10550]  __sys_sendmsg+0x269/0x350
[  210.306410][T10550]  ? __pfx___sys_sendmsg+0x10/0x10
[  210.306457][T10550]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  210.306492][T10550]  ? do_syscall_64+0x100/0x230
[  210.306525][T10550]  ? do_syscall_64+0xb6/0x230
[  210.306547][T10550]  do_syscall_64+0xf3/0x230
[  210.306567][T10550]  ? clear_bhb_loop+0x35/0x90
[  210.306590][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.306612][T10550] RIP: 0033:0x7fa16958d169
[  210.306625][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.306638][T10550] RSP: 002b:00007fa16a464038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.306655][T10550] RAX: ffffffffffffffda RBX: 00007fa1697a6080 RCX: 00007fa16958d169
[  210.306666][T10550] RDX: 0000000004000894 RSI: 0000400000002780 RDI: 0000000000000005
[  210.306677][T10550] RBP: 00007fa16960e2a0 R08: 0000000000000000 R09: 0000000000000000
[  210.306686][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.306696][T10550] R13: 0000000000000000 R14: 00007fa1697a6080 R15: 00007fff52e058d8
[  210.306712][T10550]  </TASK>
[  210.306717][T10550] 
[  210.596422][T10550] Allocated by task 10092:
[  210.600854][T10550]  kasan_save_track+0x3f/0x80
[  210.605545][T10550]  __kasan_slab_alloc+0x66/0x80
[  210.610391][T10550]  kmem_cache_alloc_noprof+0x1d9/0x380
[  210.615859][T10550]  sk_prot_alloc+0x58/0x210
[  210.620368][T10550]  sk_alloc+0x3e/0x370
[  210.624440][T10550]  inet_create+0x648/0xea0
[  210.628860][T10550]  __sock_create+0x4c0/0xa30
[  210.633456][T10550]  inet_ctl_sock_create+0xc2/0x250
[  210.638565][T10550]  igmp_net_init+0xbb/0x150
[  210.643063][T10550]  ops_init+0x349/0x5b0
[  210.647219][T10550]  setup_net+0x287/0x9e0
[  210.651469][T10550]  copy_net_ns+0x33f/0x570
[  210.655897][T10550]  create_new_namespaces+0x425/0x7b0
[  210.661186][T10550]  unshare_nsproxy_namespaces+0x124/0x180
[  210.666933][T10550]  ksys_unshare+0x57d/0xa70
[  210.671460][T10550]  __x64_sys_unshare+0x38/0x40
[  210.676235][T10550]  do_syscall_64+0xf3/0x230
[  210.680745][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.686648][T10550] 
[  210.688974][T10550] Freed by task 8422:
[  210.692951][T10550]  kasan_save_track+0x3f/0x80
[  210.697629][T10550]  kasan_save_free_info+0x40/0x50
[  210.702654][T10550]  __kasan_slab_free+0x59/0x70
[  210.707415][T10550]  kmem_cache_free+0x195/0x410
[  210.712178][T10550]  __sk_destruct+0x4fd/0x690
[  210.716762][T10550]  inet_release+0x17d/0x200
[  210.721262][T10550]  sock_release+0x82/0x150
[  210.725699][T10550]  cleanup_net+0x812/0xd60
[  210.730136][T10550]  process_scheduled_works+0xabe/0x18e0
[  210.735706][T10550]  worker_thread+0x870/0xd30
[  210.740314][T10550]  kthread+0x7a9/0x920
[  210.744395][T10550]  ret_from_fork+0x4b/0x80
[  210.748826][T10550]  ret_from_fork_asm+0x1a/0x30
[  210.753599][T10550] 
[  210.755935][T10550] The buggy address belongs to the object at ffff88806186f440
[  210.755935][T10550]  which belongs to the cache UDP of size 1856
[  210.769376][T10550] The buggy address is located 1840 bytes inside of
[  210.769376][T10550]  freed 1856-byte region [ffff88806186f440, ffff88806186fb80)
[  210.783341][T10550] 
[  210.785658][T10550] The buggy address belongs to the physical page:
[  210.792068][T10550] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61868
[  210.800838][T10550] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  210.809340][T10550] memcg:ffff88806b9bb301
[  210.813570][T10550] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  210.821107][T10550] page_type: f5(slab)
[  210.825087][T10550] raw: 00fff00000000040 ffff88801bf0c3c0 dead000000000122 0000000000000000
[  210.833663][T10550] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88806b9bb301
[  210.842239][T10550] head: 00fff00000000040 ffff88801bf0c3c0 dead000000000122 0000000000000000
[  210.850908][T10550] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88806b9bb301
[  210.859575][T10550] head: 00fff00000000003 ffffea0001861a01 ffffffffffffffff 0000000000000000
[  210.868238][T10550] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  210.876900][T10550] page dumped because: kasan: bad access detected
[  210.883320][T10550] page_owner tracks the page as allocated
[  210.889026][T10550] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6054, tgid 6053 (syz.3.31), ts 85932091072, free_ts 85929496376
[  210.910044][T10550]  post_alloc_hook+0x1f4/0x240
[  210.914824][T10550]  get_page_from_freelist+0x365c/0x37a0
[  210.920377][T10550]  __alloc_frozen_pages_noprof+0x292/0x710
[  210.926187][T10550]  alloc_pages_mpol+0x311/0x660
[  210.931072][T10550]  allocate_slab+0x8f/0x3a0
[  210.935603][T10550]  ___slab_alloc+0xc27/0x14a0
[  210.940298][T10550]  __slab_alloc+0x58/0xa0
[  210.944635][T10550]  kmem_cache_alloc_noprof+0x268/0x380
[  210.950121][T10550]  sk_prot_alloc+0x58/0x210
[  210.954627][T10550]  sk_alloc+0x3e/0x370
[  210.958696][T10550]  inet_create+0x648/0xea0
[  210.963115][T10550]  __sock_create+0x4c0/0xa30
[  210.967706][T10550]  __sys_socket+0x150/0x3c0
[  210.972211][T10550]  __x64_sys_socket+0x7a/0x90
[  210.976892][T10550]  do_syscall_64+0xf3/0x230
[  210.981396][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.987340][T10550] page last free pid 5849 tgid 5849 stack trace:
[  210.993663][T10550]  free_frozen_pages+0xe0d/0x10e0
[  210.998691][T10550]  __put_partials+0x160/0x1c0
[  211.003377][T10550]  put_cpu_partial+0x17c/0x250
[  211.008153][T10550]  __slab_free+0x290/0x380
[  211.012571][T10550]  qlist_free_all+0x9a/0x140
[  211.017608][T10550]  kasan_quarantine_reduce+0x14f/0x170
[  211.023079][T10550]  __kasan_slab_alloc+0x23/0x80
[  211.027936][T10550]  kmem_cache_alloc_noprof+0x1d9/0x380
[  211.033402][T10550]  getname_flags+0xb7/0x540
[  211.037917][T10550]  user_path_at+0x24/0x60
[  211.042242][T10550]  __se_sys_inotify_add_watch+0x19c/0xf20
[  211.047970][T10550]  do_syscall_64+0xf3/0x230
[  211.052484][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.058382][T10550] 
[  211.060705][T10550] Memory state around the buggy address:
[  211.066333][T10550]  ffff88806186fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  211.074395][T10550]  ffff88806186fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  211.082452][T10550] >ffff88806186fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  211.090516][T10550]                                                              ^
[  211.098231][T10550]  ffff88806186fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  211.106298][T10550]  ffff88806186fc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  211.114357][T10550] ==================================================================
[  211.123238][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  211.130650][T10550] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  211.137896][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.4.1266 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0
[  211.148704][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  211.158763][T10550] Call Trace:
[  211.162037][T10550]  <TASK>
[  211.164969][T10550]  dump_stack_lvl+0x241/0x360
[  211.169647][T10550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.174859][T10550]  ? __pfx__printk+0x10/0x10
[  211.179453][T10550]  ? lock_release+0xbf/0xa30
[  211.184049][T10550]  ? vscnprintf+0x5d/0x90
[  211.188376][T10550]  panic+0x349/0x880
[  211.192263][T10550]  ? check_panic_on_warn+0x21/0xb0
[  211.197378][T10550]  ? __pfx_panic+0x10/0x10
[  211.201789][T10550]  ? mark_lock+0x9a/0x360
[  211.206130][T10550]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  211.212032][T10550]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  211.217953][T10550]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.224293][T10550]  ? print_report+0x519/0x5b0
[  211.228970][T10550]  check_panic_on_warn+0x86/0xb0
[  211.233924][T10550]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  211.239914][T10550]  end_report+0x77/0x160
[  211.244154][T10550]  kasan_report+0x154/0x180
[  211.248698][T10550]  ? udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  211.254681][T10550]  udp_tunnel_update_gro_lookup+0xfe/0x2c0
[  211.260516][T10550]  rxrpc_lookup_local+0xea5/0x1890
[  211.265649][T10550]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[  211.271225][T10550]  ? __pfx_rxrpc_encap_rcv+0x10/0x10
[  211.276509][T10550]  ? __pfx_rxrpc_encap_err_rcv+0x10/0x10
[  211.282134][T10550]  ? __local_bh_enable_ip+0x168/0x200
[  211.287517][T10550]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  211.293236][T10550]  rxrpc_sendmsg+0x323/0x5f0
[  211.297821][T10550]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  211.302929][T10550]  __sock_sendmsg+0x221/0x270
[  211.307620][T10550]  ____sys_sendmsg+0x53a/0x860
[  211.312389][T10550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  211.317677][T10550]  ? __fget_files+0x2a/0x410
[  211.322269][T10550]  ? __fget_files+0x2a/0x410
[  211.326865][T10550]  __sys_sendmsg+0x269/0x350
[  211.331469][T10550]  ? __pfx___sys_sendmsg+0x10/0x10
[  211.336595][T10550]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  211.342922][T10550]  ? do_syscall_64+0x100/0x230
[  211.347687][T10550]  ? do_syscall_64+0xb6/0x230
[  211.352360][T10550]  do_syscall_64+0xf3/0x230
[  211.356863][T10550]  ? clear_bhb_loop+0x35/0x90
[  211.361543][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.367443][T10550] RIP: 0033:0x7fa16958d169
[  211.371849][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.391461][T10550] RSP: 002b:00007fa16a464038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  211.399880][T10550] RAX: ffffffffffffffda RBX: 00007fa1697a6080 RCX: 00007fa16958d169
[  211.407845][T10550] RDX: 0000000004000894 RSI: 0000400000002780 RDI: 0000000000000005
[  211.415813][T10550] RBP: 00007fa16960e2a0 R08: 0000000000000000 R09: 0000000000000000
[  211.423813][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.431782][T10550] R13: 0000000000000000 R14: 00007fa1697a6080 R15: 00007fff52e058d8
[  211.439851][T10550]  </TASK>
[  211.443189][T10550] Kernel Offset: disabled
[  211.447508][T10550] Rebooting in 86400 seconds..