last executing test programs:

5.479298298s ago: executing program 4 (id=1705):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={<r2=>0x0, 0xfffffffffffffffd, 0x2}) (rerun: 32)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000006c0)={r2, 0x1, 0x1, [0x8000000000000000, 0x0, 0x7, 0x7], [0x5, 0x80, 0x6, 0xca9, 0x3, 0x8, 0x7fff, 0x1907, 0x7, 0x59, 0x80, 0x1, 0x2, 0x5, 0x2, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x7f, 0xfffffffffffffff7, 0x5, 0x8, 0xffffffffffffff36, 0x8, 0x800, 0xfffffffffffffffb, 0xffffffffffff52f9, 0x3, 0x4, 0xda5, 0x5657c5d7, 0x5, 0xc84, 0xffffffff, 0xffffffffffffff01, 0xb54, 0x2, 0x7, 0xfffffffffffffffd, 0xffffffffffffffff, 0x401, 0x7adb, 0xfffffffeffffffff, 0x7, 0x7, 0x1, 0x8, 0x2, 0x4, 0x94f7, 0x0, 0x3, 0x1, 0x800, 0x9, 0x3, 0xff, 0x6, 0x2, 0x8, 0x5, 0x5, 0x96, 0x1ff, 0x5, 0x6, 0x2528, 0x3, 0xffffffffffffffbe, 0xfffffffffffffff8, 0x0, 0x700000000000, 0x4c4, 0xfffffffffffffffd, 0x8a7, 0x3, 0x7, 0x353, 0x8001, 0x4ab, 0x4, 0x3de, 0x1, 0x3, 0x4, 0x3, 0x4, 0x80, 0x3, 0x8, 0x7, 0x9, 0x73, 0xc, 0x3b5, 0xa, 0x23, 0x1, 0xd, 0x2e, 0x8, 0x9, 0x59c0000000000, 0x7, 0x3, 0x1000, 0x7, 0x80000001, 0x6, 0x80000001, 0x1, 0xb, 0x400, 0xdac, 0x7f, 0x3ff, 0xff, 0x9, 0x6, 0x1ff, 0x5a5]}) (async, rerun: 64)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000b00)=[{0x2, 0x1, {0x2, 0xff, 0x1}, {0x1, 0xf0}, 0xff, 0xfe}, {0x1, 0x3, {0x0, 0x1}, {0x2, 0x0, 0x4}, 0xff, 0x1}, {0x1, 0x3, {0x1, 0x1, 0x4}, {0x2, 0xe, 0x3}, 0xfe, 0x2}, {0x3, 0x2, {0x0, 0x1}, {0x0, 0xf0, 0x4}, 0x83}, {0x3, 0x3, {0x0, 0xf0, 0x2}, {0x0, 0x1, 0x2}, 0x0, 0x1}, {0x0, 0x2, {0x0, 0x1, 0x1}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}, {0x0, 0x0, {0x0, 0xf0, 0x2}, {0x0, 0x1, 0x3}, 0xfe, 0x1}, {0x3, 0x3, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0xfd, 0xfd}, {0x0, 0x3, {0x3, 0x1, 0x2}, {0x1, 0xf1, 0x1}, 0xfe, 0x1}], 0x120) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000c40)={@ipv4={""/10, ""/2, @multicast1}, <r4=>0x0}, &(0x7f0000000c80)=0x14) (async, rerun: 64)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000cc0)={0x7, 'veth1_to_hsr\x00', {0x82}, 0x9}) (rerun: 64)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) (rerun: 32)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x62}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20048000) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20048089) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000001000)={'ipvs\x00'}, &(0x7f0000001040)=0x1e)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000001080)={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0xb37a, 0x2d, 0x3, 0x100, 0x6, 0x40800080, r4}) (async)
getpid() (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000011c0)={'gretap0\x00', &(0x7f0000001100)={'gre0\x00', <r10=>r4, 0x7, 0x8, 0x101, 0x7, {{0x23, 0x4, 0x3, 0x2, 0x8c, 0x66, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010100, @multicast1, {[@cipso={0x86, 0x3c, 0x3, [{0x6, 0x9, "3b101c43629b61"}, {0x2, 0x9, "48d69ccb99b550"}, {0x7, 0x9, "1c278b84c6dcd8"}, {0x1, 0xe, "31fed1e6ae6ebaf480340919"}, {0x6, 0x6, "94ea41cd"}, {0x1, 0x7, "06ce31dbf7"}]}, @cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x1, 0x12, "aeafc004298f247347bb71b9b2073364"}, {0x0, 0xc, "e37839eabcf790bfcf2e"}, {0x1, 0xa, "08a3b46e7052a8b1"}, {0x1, 0xb, "b0831d9c8dbe2372f8"}, {0x5, 0x3, 'p'}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000012c0)={'ip_vti0\x00', &(0x7f0000001200)={'syztnl2\x00', r10, 0x20, 0x700, 0xfffffffa, 0x7, {{0x1e, 0x4, 0x0, 0x1c, 0x78, 0x67, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x0, [{@private=0xa010102, 0x67}]}, @timestamp={0x44, 0x2c, 0xe1, 0x0, 0x5, [0xe1, 0x231, 0x46, 0x3, 0x1, 0x5, 0x7, 0x6, 0xf, 0x5]}, @timestamp_prespec={0x44, 0x14, 0x96, 0x3, 0x4, [{@broadcast, 0x1}, {@private=0xa010101, 0x7ff}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xa2, 0x0, 0x7, [0x13, 0x3, 0x9d]}]}}}}}) (async)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001300)={<r11=>0x0, 0x1, 0x6, 0x1, 0xfff9, 0x9, 0x5, 0x8, {0x0, @in6={{0xa, 0x4e21, 0x953, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x5b8}}, 0x7, 0x0, 0x1, 0x9, 0x1ff}}, &(0x7f00000013c0)=0xb0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000014c0)={r11, 0xac, &(0x7f0000001400)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x0, @local, 0x2}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x45000000}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x3, @local, 0x8}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3ff}]}, &(0x7f0000001500)=0x10) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000001740)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001580)={0x154, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x800}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "a65135ced293ae898b38c05a57861303c918a03d41ac400943e57c4f54996bf81ce6bd86f621e72b6563a50000b7c035970738b88dd699f4a1d8189aa9fc5170f919fe68e027d6ffbd4d62ee8da2b47d04227dfa28943af50bbf34255c633efcacdc868a3df1b893df9dd7"}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '.&.*:&\'/\\]\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xc4+(}@/}}.\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8843}, 0x5) (async, rerun: 64)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000001780)={0x1f, 0x0, 0x3}, 0x6) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001980)={0x0, 0x0, 0x6}, 0x8)

4.863267367s ago: executing program 4 (id=1710):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448c9, 0x0)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792df", 0x4ef, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$cgroup_pid(r9, 0x0, 0x0)
recvmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

4.791136919s ago: executing program 2 (id=1713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c041}, 0xc084)

4.495504281s ago: executing program 2 (id=1717):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$unix(r5, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000600))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r7, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4)
shutdown(r7, 0x1)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000001803010300ffffc4001000451300d60065000009069078ac1e0001ffffffff4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d1800007907800091e59063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4fe04f98900000013d3b3875dfd9a3f6328f33f07ceec09986b30406704e2560f04592cbc869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab8"], 0xe4)

4.268030093s ago: executing program 4 (id=1718):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)

4.023326011s ago: executing program 4 (id=1721):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="525f5e8a", @ANYRES16=r2, @ANYBLOB="9db625bd7000ffdbdf25010000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860)
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x44801)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
r8 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r8)

2.519660912s ago: executing program 4 (id=1725):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2afa8f}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb9}}, @jmp={0x5, 0x1, 0xc, 0x0, 0x6, 0x30, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x800, 0x1f, &(0x7f00000001c0)=""/31, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x3, 0x1, 0x4, 0x6}, {0x1, 0x5, 0xd, 0x1}, {0x8, 0x4, 0xa, 0x3}, {0x1, 0x1, 0xa, 0xc793f72148aafd0a}, {0x2, 0x1, 0x10, 0x9}], 0x10, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000000), &(0x7f00000004c0)=r1}, 0x20)

2.356608315s ago: executing program 4 (id=1728):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x38e}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x80000001}, {0xffff4c74, 0xc3}, {0x0, 0x5, 0x0, 0x9}, {0x5}, {}, {0x0, 0x10, 0x0, 0xfffffffd}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0xd9f7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x5, 0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x5}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, {0x0, 0x0, 0x8, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0xe3b6, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0xfa48}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x6, 0x4, 0x9}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {}, {}, {0x0, 0x5, 0xe}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x8000}, {0x6, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x7f}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x10000008, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200000}, {0x0, 0x10000, 0x0, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {}, {}, {0xfefffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x3, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x1010000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x87}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x200c0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @remote, @empty, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="1100000000001d0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x6, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)

2.356094544s ago: executing program 3 (id=1729):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b5", 0x75}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000000)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

2.141543692s ago: executing program 2 (id=1731):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc020000000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0)

1.444460727s ago: executing program 2 (id=1732):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mmap(&(0x7f00006bf000/0x3000)=nil, 0x3000, 0x4, 0x1011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r5=>0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x10000, 0x9, 0x4, 0x5})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', <r7=>0x0})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x20})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x10)

1.402382239s ago: executing program 3 (id=1734):
r0 = socket$inet(0xa, 0x801, 0x84)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x9, 0x4, 0x5, 0xfffffffffffffffa]}, &(0x7f0000000180)=0x78)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmmsg$unix(r1, &(0x7f0000002300)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000300)="3510fc707eed320fefda2050552a425f8265921e516ea77319d1e97a6ab13503072b31157013f2bed8660da29745ea9370c90b468553ce47aeab13f51f9b705d6c947ffe56f5721ad9348f9c75ddc25295cc0fae860dcb9855216c0b151bc4ee6dc35fa6a8525502804d43606d23f0dd1deb8386a71dc18b1436edd6a362ec5af2fe19dd8b8b5ff246894f968a7b184bf3b1fb4aca6f5796430cf4157aa7edc23f9bd7504b9365d2c8a5ca1d1e0f674156ae58fdd1c49434e232d5ee71797c3c", 0xc0}, {&(0x7f00000003c0)="77061863c298d75d7e585a87fe821122f620f1595af62a850ee54ba294b856afc3f3b3f87889a27bf30116181878fefd32b6cd45d2a53cc06aebe9210bb06d0c0d76bf1472b6bea1f8b6800965818b02556bd062371105db65d8ceaad094883f5efaceca86d729350a147dc01fc6194bcd7d2c9b9e5854fedacf713268aff2b54707e24d3baaf1205927ebe48ae3553167f61b89e11a843b0d94afb6641f6635b4d684ece00b7dbc42a70cd1d0a56d5747f543f4ca61d7310d8c295d3cbb95ffc51a3f081bfab62c95c7e4f80c07e0cb8e48d306ffb5058242ca304c17f011f6520a81f93c50ce3d", 0xe8}, {&(0x7f00000004c0)="6a02f1ac3381a7955f7ee6368d3f4a9ce91c1021ae70ec3b7e350f5519d40dca389642c73552ec256175099aa1e950505d3b9b0c89feb27a54532b82ce55d3775da7af292e3a88b5b849d73c41b12e6dff7aa32783cf4b965e6f547cfdb6cbbc695043e75b393c3a508cb7cfccafb93a860f3ab223e51bd92bc3d7e9a545ef46768afd5b01cdefde079e0dc62df729cf", 0x90}], 0x3, 0x0, 0x0, 0x20004000}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="1e1dfd3ef23c6af2ec62a2cdf3ac0962a1cf65f8cc1eefbaeff7be17ddb3e8b9f4e241ca81476134f0cfd555961969ceb31412ead3f70a5382faac324b656a48197f67a7c19a3596c3ca3c5bc010385d9e6788e08d61d4412ffd865721890dd4a431c4d283d7b464666fa3debba1e11463b0264a52f0d9c8bccd5f7602f857", 0x7f}, {&(0x7f0000002100)="2ada12cf", 0x4}, {&(0x7f0000002140)="eab022c9e97050d2e614130be142953747a5e374127250fb3132db00918a71f8468231c982b880140878d67b4ece83c314bd8871bcbd1a177bfa6dd442e49a", 0x3f}, {&(0x7f0000002180)="61909387fa3d9df7e1744bb25474d59144864422a201cc0b1fcc0f28bcc0f6d35db8d16dfd6c2173ca2509c113b01a42a9f4b027355d9f966658ddbe18eabe2f2798bcadae931af2dfbb8cbc936d99ff5775b4bdf195f8839fffc0ddf30539ea5578636280af79242170e249d79a2f510d8a", 0x72}, {&(0x7f0000002200)="cd74818cca77c12952533fda31719e5a967aa374658cb3e20eb30a72a6d9b5ecdec652e4f53ea58e858813e9c6a35cc3d72c36cae4a7c4c8a7dc", 0x3a}], 0x6, &(0x7f00000022c0)=[@rights={{0x30, 0x1, 0x1, [r0, r1, r0, r0, r3, r1, r0, r1]}}], 0x30, 0x24000090}}], 0x2, 0x40)
sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), 0x8)

1.355579161s ago: executing program 0 (id=1735):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000800)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r4, 0x5}, 0x8)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000340)="35ead5c6deaab7143dc56ebac949079a404d215406863eeb2afa3b2ea8641d89f58a3c9c3eda20b8cf5763bdcae735de88f969572b6c5141750606156f13210278c75c930b8e3c97b2d088e3894917abee19e84d2dc61cb47ea06e58ec3fd4274f94312abc14f4bd1fb8af9c2bd63afc2877aa75f908ad02e9f8906e1583d800b549f74a03bfdf034c30b18ba5475d6327d77e3854c19f6fc9", 0x99}, {&(0x7f0000000400)="931e995ca198f4e9fecfa5d8d3e1021909b80c983d2329b9d2f412fa56ec18249dfb9ae650d03b2caf2d17455838751bdb785930149d657d97969a4c8a03cc459a6b89", 0x43}, {&(0x7f0000000480)="f048cac2e068135d77f3ea589e26da0a9674a1e5175d40f99ad4a0f6d6232ee3ea25b48725b99c831336a7d8ef510567a56027ac0971c12f", 0x38}, {&(0x7f0000000500)="c8917d384bb681b7ee98a02ddaf46e4a45259dfaefd206e8a86216ad1b2a76b1bdd7573b0c9727a711db60734ac46ae0f565eb2d2893f6910c8cf666e06ebedd086a43441cb6b44c254436b30138b74d28f332a7934095b5bda0bd5ac1235f9a060c42bf4480e023b23b06d6749276cfeea37a2cb05609c0dc2e9b", 0x7b}, {&(0x7f0000000580)="f024dfc3ecffe54021054dc043bf2c0199f4baabc5a3879f35b5b3cd41badf93294a22a6e0cd2af578253f049c3878d2f8b2afa688caefb897d5486dd4f2ed9b46aa0101c5e60a073b75cd0f63d7095eaf420a7f6ebe23f5e12cb0736c05ae5576118f5425803057b05034256b1008f7a1b3a98f0d6a5e555e6ce27c00b052f26d59b4cc4a7ca9c9e255585f7cd53d6c177f66cd5d7e17e6ebd67d0817bc8e7518390694dec705d580aa0da58c91bb6cc3ac9c929e35e5c4ab656d7f952abd51", 0xc0}, {&(0x7f0000001500)="17b9f2b4667f208c48bb9fcafdf7b3684407821f3c6f84a38802009a36174047914b5d14e5820abbc3b52c6de326d762639f4e4e801893f43b1f901f8c3e64e9d7f1a7f2cc0b87614b8688c1e5e840b811eea914dafd40befc5c6f9566fdc26c6520bfab34a21eae433c573eb793df9319f0e48c09f8c456f190427fd53620892ddfdd8b8f286134e3b1681087f7e742f5eac3b6b0e00f56cf296d8f15f6ed65343941b336f03818c8980a00483cc7e2cb81d5ae489d0989a94146896127b5510e0da500f8a1e96faec19b1bdbfec4a4a414153e8a31f5b2cf52672ddc93f189fd42ff632e442ccf17dcb8b36499471df0b9934e2a8e1d2d21dc336aaabec81342f3c5e2ee356d948157550e17f6afeeb32dee57cb4d1940eb27432fa378c045e57d5338a1f35d1c44b5ddf509805d66e58c3a301acd2a6cd271d156e495e3afb99eace57527296e55ae69558a6c33c9d405193ae85d171457b166f680c2f0abfb550a5fc8262385f4af5da84db426b69e0cb40040ea5fbf6c9efe7a9d529aebd6d834646d2caa005dc704d4f5a525c3035a8f33954f058fd065c22901abd7ab2ff5d003d7b62dcf998e556e290ab1982bd7c0e1e8eba3065a83779d2a925e6dc299abca276edc0e25e2b9198214d75cd9d9fc5e98ceea5644a1af37628600c5698a1f1d7affff0516a75bc5dd1e9d71f8bb65f4455af59f3c1c8b0d2975299b4270eaeaff7bc2429931e42b0c5e685821ac511a405b17e99531aa477b71aa7b3930d7b73920a579bdc065b04622df8ea363943a24777066340043520e4286f144ad920fb1c5dbcff9642c3e1a9031764dee847191da94a9047f6bbbb3359b4a83c7b980b909ea5fcff67c64ee342b35b37d7546cf4dc9ab87f54994bf8dfcb801fc2199824ba62375980ce2a175b4fd8b2426b57c0121e61fede79112598efdb5ab4c5b3f1cb051155927a7114263e99ad80aab011874292c0824bc6cec7616b9eb82f583079ae642b1c12f310926775ea625b4c2ecc4cd9e67618f50a39d043bb6658b87f903cd08adb2372e49c9f5b02d40d0fd8955ce2e833771bcca84d1aa3a6f9be47d73bd37461dd449f157f51c171f338709046c83dfbb4652c2af7765c6ad4abc29cbc6ab314d864640154e904f6e61e92fd375cb24ee424438acdcd0a2c7c37f50468742ecb3a7ec555f77abd7fcbd9ecef3fcac2ccfd6fce3a3736913d072a6fe6f16005a8e83b163244f78721e85cdd349d587132620ddaf7910b306b616392d690d6164ea53151df4e1443b2d3c67acb7789447eff07784256d9b37099cdda6707694894271fd45236302cee635b9563007027c50a76a02ed5f3ea438d3d1249d69d889b0717192a215236eebc3e0e3c70684412c5f81cbf5fc50930b93e16dec2195a33c57347567a15ecaeafadb8c89d433cad6b4e206f5f8eb813118862a58ef5d84f1607b6d63b0a96a1b57878884ce40aee44767a85e198ec8e147a164172a4e3cf93e5a291e895162254619a6800f675b68b00c46057fd9b06ce861e935e91d27e9cb60e2a9a59836970d1e74f082a4cefadd1c16f1a1e896c2fb3860118c2e9057db35653bc41fbb2d11cebee80447aba20af45bdf5d7f4f2a58a5734d0695edc46d43bc3d1d744741da8daa939d0ea4b7f9959c0f398fd64bde01427cb0ddc1850a80a8fb725b1fa99a77724f74f60044f6a79990a62abc4ea03fa3b600fe7fe03edc9537a1ddb4eb07209bd0255e221e70ff6d4ba41144076d0e86063d9f9023cdd435c980207748889403530c0e7c344eb1c2721c4cab2629178bde9f2d5a72e8f646ef8fd1f62c3230fa5384f881405e4df2841d9b2c609f5f226ec77f01dd15518d1fbdbfb47ca3336632b692b0cc49e1f72e5a3fb6eeac401d7389bd1a9296fad53cb6ac1a806971b7b7636c5498a696e5b453e007d27c8b923127c9c1a344ce740b0eb907ca49053dcd956ce9d6aa9de4dca18bcd06ea3b998593359531e84a0aaa70adedb1138778e9182b832f08a6f0980ec03c0bc02ad432d68ac24ca44ef413ba118b93e9acf43e28ddac9881ed241b65862c924f99e68850cf8483f659cbe8081948411c7489783e13259fbdee56a6eaa893ca25348aa9318a4975338ef34f90e03e806f1ac6ff9b848e819a52f9a364b82a13252e047ae89651ee3294d42675ea33e0df804893e11b7d02dceae4a52e340ac9fe57ce632c0ea9f2b1f1ef07a88b86ef41822728f308ac605fe0468a7050cb475e112087c859ce0700bf48998d252ab1c939c9f1a75393ce759defce2837dd320793caa615e75eb51413fa955dbefc5f59040f6072d6ad090aec2d8d9ad69a4e6bae1c681cd1652831d3bc6d2d04b0131f90bca9ecef9d463d2f5089842019d612fcbc620740144f90ea5095304457492a341a57d6a484a068ba4096fb51d387cc4abe816db93588cde729e93b20b43d610e81ebd0fb718e77513829675843a1e790c1900e2cd793e3792c731a32e96d58cfc828b7d542420acf9d2dde662b1c82b19776dd5c099802424e6cfe8461c58a977d7970e8db4795cb247b503239d3208236489260fbbcde72228582e21f12ea9a27f3c24e2c19f21f3c9419ec93f4fdc88964c7842b7a3594a9c7abe79953dc61642c96448d1cb9c33164e6384b53c85517681e01c67bc4bb8d7e9f1e64106301e74e9f9628bc0207981831891f9bbe7b73d6e074b4c25a980cea4d4e533e82d1e0d3facc9eae09290216ade4f25d533c04456607813440136b06369fa18248cab420cf5cd8bae6759ea3753716d3d4bc6642219847c86eddc64e4f031b1d8c0a1753ed5790df25b2c3ca7509279e78fa931520662c5ad981fca8d6550a5628607ad9bb925bdf39d3113a33563eaa982d019eb27921e791ffe3583e69fa14c977f0c05489f48b86265eb3f22a17b15f7120ce48f56bd1a160b32d9499745647a9fb755cb800b9aa35180c2d16ad44467443597e0bc460a8e66ecc74576d020fc4c725e85605c6cc2f370e80d6fbbe81e1dc4cc3e733c0b18ee9a74f19192ad311e8f8849b04a265a861bbb3aae763673165135c4889d9aef20f40a4b878601ee6a466de8cd513a3a1227c3a1996b14fa259a82cc8d49e6d52c28f3cd796bc961d2eab99f9d5f6d22fe1943e14d1a8161270ca082e11edcee00bfb62719670d8e31dd819cea152b49c6a6025e95187cba9723425527fc1b3e220f1cf251c472e34a38004beac6a89290b80c9ef2c1d53e5c38119cfe2ecca8969427e8ba068dfb385d84336198aa2d196dea911f0c65e87f85d7a8911c172af109ad4a66878c0e05cf0c9b984e323da8a1b86d73a5be608390aa1334be332d6a9333f178306140f9cfa2ec14dcf3045134d339f74efb4a73aa481f1ef07091a9b3693e29b8556ff5a4c359e2fc98bd60939d988ed39ad0a597b588057e315882ee49ed2bcd1fd8f25276289627cf8ea86282d37ac7628a74a6bea0a060ba84d69ce64d46c7313b4cfefedbae58e619fb6a8c7872b5f11ad864cad5f759ab25fae81b2a32435aafe610f6130eb14f467f83c85810d55eb4bb9fd4dcd91fceac187b8af7828d359ac7c6c00c30189eab6f9cdd6c182708333790a8786f2ec7df530411f6a7274e7080692ddf28ac862682ddf7a955f742445f5a6708aff88676820e5e1c42f7dd176dbe6b40a693774367a85a3fb44e07353f67c56f6135d651f836070902e62bc61e2f49dfd1385b74411dd8a7dc11c3416ad4f7450a8dfcf139d52b62db43d66a4688e2e767d752e67ce8e61ab94faf776cda241a070d12a3f039ed24ddf35e2a980b533593901182d945cfa4c17034640e8a33326e90a6267b7fb7f9a3abc3af0cc33c2f0d0d33ae05ce9a45f93ee54ef0192d7217a961c4b4706c1e0b2ff70faa50ae7b102db42131a612b99068c660f11bd58eb09990704a79cf4fee22b3b8fb2988a22e1359d0d3dc2d1462a7876b255a834d5616fdbad4535a56d7d198eb1de12035d7dc51c5f896f55f113898758d20ec0efe059a86d64905110053758411e0f7412ddb425d2c945cf334bfb2643aa003933cc1d1a94284aabc042731517d4fb3b02609d8770a04c509cad82487fe2fcc47fe9dd0f20878f682ae5a1cfb9eef0868edb4ab065f14663a7f413c55f01e2184038ef253e02a234c92454db5366975bc68493abb45a8a760da9c53d1bb321e97f3c6cd8c160d4737e522c12e23b176581f61a4f76b4ea9af38aee6475954e24b1f7d9eed616efcc40e5e9edae3c363107ea066d2585208faf195f09c975fe8a3f94176371f7b934e76b031b8b377347ba6702838e2cd4d4a1750bd386fb9da2902d898206dba1963eb93e2c45a243621a63c30f92550cbdd0cc8fc614fe8c7279f72f24cae03b127a26bd87e868333eab03d4c0a1aae9125e66f183113f6bdd060ec775ac8b79bef807a4a8a2afabc33bbcb7d31362ff0b2e30c6a68e215b822eeede92b7b2c0b7c211958b4e11c0ef4f474c463dff0125c89e0ae6c55f5f7b851643b3d14bd30b9324c589a045b6ed8278ac26a0c4a59d79aa97a8d2d0bd8e6f23e9b32f15cb1aa57066262010501ffc04f4b0e99eeb51359a8642bf32b0680d60c52decc86b184e31f193cc04c3c4a2272541bc64789b603adc60bb507ed7a1d8144571c4586e6ee4fb088a7fa958c441ad45f8cdf2054beab144042f6a9a31c4c96a3b89ac6e0e5eb0fba0b9bd8d7264686adff07f00292c0d2e2dd87965ddb17f0f569817ed6fcf3c896c1fe53d745439433f2c0cd519068ccc98a6c01e48440bd9673e9fe7f48aa28135aac98ebe3babd5b26e5dbfe9707d57fd4be48125aa98641949076c8947be7885a125b8fff30a3d1c2708b2ca4b98ed5e5dd2afcfa8f0b9abcd50122afff64b05d4d47158393b167d171a06578e4b0934a17feab99f92404eea6f66dfedbfaf7ccd0bbfee0caa5a547b6568c828b8e5091cd4d009da14143779071537d66a4031b0b83e4358112a1f332c130d61f75094af1d04fc914c64435e9942bfb4162fc753ac445b3484c9a0fb3b6518342217bcac68289530196ea6cc40705877fd94801c94eb904b14401e2623a0f9fdc22591efde6f844b523e80cebcbfe5121abb6a6409804fe31ea5947727c607ced906ff6ba925d28bb7aa3bf860f4401c2218040ced7a864bc899053c12415d005d297cd24c5abc48beb2b054049b78279cc2f941aefee4e9ba2aba2606d838180ed37612139eb02f17d51e583a82d887d38155929b7eb3a468926494dfaf781b83088b70b2db8020aee8a1f6d6120dfc36edb8e065baa77173a6a34df69e97a6944ed0d84f39adcd9f620d143328795db307f7c90c231855215113399ecfb441bd2f9f912b3d55870ce375f23ebf38d3eb98964b9c9f7da9b8ed28e9fb13ec575ce9ff84e11c6744e8b3de6c16e0d57e5b42270dcb652d89e0030d911e760bdfbabcc63084a14c557801088a3f72d1ea908f2a55b38096aa8d0ea3f96a1cfac273d50ce83baa5964298f6aede696ab03d76385a8c36e667fd1af782dfeacdff26126476ea71e3f50b50322b1ab219f0dfcfee23a5fbfbe24b29da230552dc78555ca9a72a68baf64f910c3d21375a874a27bf25c5087f2e97356012b2d538965546b2715b1e4c2be7dd0d1037cd4391b9db9b254ff71162cf56156ffb5bf838a5334399d618b643fd58cf0aab97fe5561e1aeff5914f2cb80bbc8915c6fd74124b1165c979dbcc080fcc1e644bc9cfab8dc20474038377919d89fa90f895", 0x1000}, {&(0x7f0000002500)="20391535563f10e906d8984fdb00ab06d9b60a44d029129f3c2f43d4de088e64645ffcddd540419d187c14a6554d751feb6c7e6fc8fa5d809834349d4cd4c93a253e4759b012e30ed06d3c3b29d111f13b29b82c96dfdd2dc98ba552fecacd1a930feed0589e7fee777cb89e5624dc86e142db5a37695390d32a4652a41f62338dedc0a9e40b1163336c5ff03b40e140c02ea4f3f66ece0a8d88eb991a44827aa1e69c812213aa94ae4f621f6e70ab7e58781490372f8b58820de444dad497441a8cffafbcb9d5dfa6b65a9a2de61f4d4d76e79b46751f6a90b2f683", 0xdc}, {&(0x7f0000002600)="29952c0293417f438d2a14c3989f854793a0a301472d7f349b7361fd14c3e552b41833b64f83a426793f7fd0a30692847195019fcfdcc7b3b68c54ce36e68294fad7b10644f29ec974ac50626b4e3cbb965b2e6b20f52a6192b1511be35b960aa4bf7c98bcc44f0640f58a73f4d620c061d170dbe7d659cad037b9695027812dfaf1c00ad494dbc7900b35a186287d250f42a0db53fde17e83fb089a2fa935de994c11c77da68de255985e69b8238eaff15de2a1413f8e9820062cd67beafdb3b74da8694e4c5a975d757b6e81441e1be60049a90ae8a2e45a0cdc4d0eff61d1d2c5c71f33cf87e48f7a34b805e4e7d0952654ec", 0xf4}, {&(0x7f0000002700)="6c7381d70b8761b23ceae8c01c734bab6e2f2d62c66c2b663a6f1cf17c8a862bf29a8f5542162105d9b3bbb654e50aecfc056c77ded14ddf820b666d322866af9988cf3e358f2690e5b8ab32622a341c9d3fa6370e4e1c3ca0aee9cc425670aaa985fdc21760df6087cdfb25a846ecfe3a2db0159de4b20624cca9337f1b3356ed903b8583094259fce19be7a63127e643d1a8d0094450d38707b1fc04dbfea67a03c04f0a808eb6e28a6f3f7eb0933f7e97ff10afef7c1e54ca06cb808f77040d7a89ccfbb58dedc9d530a53c5154239d688d4368004cfcefefe005d5ff2e2a", 0xe0}, {&(0x7f0000002800)="1acd6d4c1138aff5ee1a02a868905cd6c57ba332dbe7b314a021579d2317b8b9c1865d25461a5d83e7fed0c97f44a0dfe1c747c743f3fc198cb313e11ab6fcb819fbe1b0aee1dc56b8739e9e30bfa1e9f175b186cc83312bcf468b1596447f1250bcb8a5e5239c97661ceee23c8e403e29d8627646de322f92cea99f53862df29dbb00e6116635dbec6083d5b438d49ac05ab6e527f42870fc6dd5c62199ad8eae2961c905bb3c00608303bf59cf2c100b28899bc6cb92e23ab682f8da9dd0267707f0c7e5cd5fb8b740f679c71a265423bb58bd4a4c3db8da5f73dbf4d130e91bf30b8687c31447", 0xe8}], 0xa, &(0x7f00000029c0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x1b3d}}, @mark={{0x14}}, @mark={{0x14}}, @mark={{0x14}}], 0x78}, 0x20000004)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000006c0)={<r6=>0x0, 0x48, &(0x7f0000000640)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x1000}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000700)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001d00)={r6, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb}}, 0x3, 0x81, 0xac6e, 0x101, 0xc0, 0x80000003}, 0x9c)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000000)={0x7, 'sit0\x00', {0x200}, 0x2})
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000addff050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f958ca058e40cccc4b3a2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(0xffffffffffffffff, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

1.23907026s ago: executing program 3 (id=1736):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x850}, 0x20008000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], 0xb0}}, 0x200000c0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, &(0x7f0000000000)="0a0003000100009dca0317", 0xb)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x100010, r5, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100060a010400000000000000000a0000010900010073797a3100000000400004802c0001800b0001006e756d67656e00001c000280080003400000000008000240000000020800014000000001100001800800010064757000040002800900020073797a3200000000140000002f00010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000004c0)=[@op={0x18}], 0x18}], 0x1, 0x40800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x26020480)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x7f)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @void}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0)
recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000500)=""/92, 0x5c}], 0x2}, 0x0)

1.171820704s ago: executing program 1 (id=1737):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async, rerun: 32)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000032c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB='t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200000004000000001300"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003340)={&(0x7f0000000600)="0dfb77dafb71609e52b8e6fff60cdb918f508d73c4f7d972f3fedbfc4a413014cd379a7db013fe96ea0a43f3f3e0199b93633942e389fb35f90471048a3462dad481d86c14171c913879eb563b667c227bcddfa85998b552d64f7638ae350bbab2716ca4dba30129569a4421ffd12acc071d3e032704403f8e8115da6238890a8054616224aafd63d5a977f7365167a3ee1f25300c7307975ac98503b6d0aa51fc0325c06ca42a", &(0x7f0000001280)=""/4096, &(0x7f0000002280)="d0df9fa65edced6c5fb21774b45540aa067ad6e5a1607c966df0b8e66721be90ad052129165f60ada40a22", &(0x7f00000022c0)="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", 0xe, r4}, 0x38)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async)
unshare(0x20000400)
recvmmsg(r5, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000000, &(0x7f0000007380)) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b7f1c2fe", @ANYRES16=r0, @ANYBLOB="0100000000000000000067000000080001004000000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000540)=0x5, 0x4) (async)
r9 = socket$kcm(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000580)) (async)
getsockopt$MRT(r3, 0x0, 0xcf, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async)
sendmsg$kcm(r9, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff3556b3b598b353011a5b90650042e2dacdc165ecece4e6be1862e2bdacd2737d00ad6f9f030000005e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f8049f260c603dbc317f54b901ee80eae132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x24008000) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r10 = socket(0xb, 0x2, 0x6)
connect$qrtr(r10, &(0x7f0000000440)={0x2d, 0x0, 0x3fff}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710422000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000400002000128009000100626f6e64000000001000028008000700ff07000004000880"], 0x40}}, 0x0)

1.043406202s ago: executing program 1 (id=1738):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000040), 0x101, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x8}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x10}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

967.476523ms ago: executing program 3 (id=1739):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async)
r1 = socket$kcm(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x62}, 0x1, 0x6, 0x0, 0x400, 0x4, 0x540002, r3}) (async, rerun: 32)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@loopback, @mcast1, @private0, 0x0, 0x6, 0x0, 0x800, 0x6, 0x980123, r3}) (async, rerun: 32)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000d10000003a51ebfb1205f56147f69b5177194f37fc353c3a5dacc4e081f4f91e763e98de8bbc423f137d5a74a5c13ce40ba69684d28b1f1fce5c7e49e273dcccaa8415e1271de7713c45148f64a0c54d49ae50a5ba6967bb188b9620d43f02831313201fb6f2acecb849e04436324863fd0b919617ef61522926732cd0e9024c4e29b68b6e66041a7b403f5a3a5841d1ffed4adfc63f0100010023bd584bdb0e54b2de161a9cb9e012aaf73f61136c1c0d398a84c484a5531b00b0022a9fb7b5b7690c79cd349be2289e8664615765e2ac76c45242"], &(0x7f0000000300)=0xf5)
setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f00000000c0), 0xb9) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) (async, rerun: 32)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f00000005c0)={<r11=>0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) (async, rerun: 32)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, <r12=>0x0}, 0x8) (rerun: 32)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000bd6bbccd257c3f02707e810000002ab2fdf3106894c75511114ecc4948cb1eb3fd5b8edbc79e81f21d881f1865c2c34ebefe16050b37bd3ee1fc698028", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000010000000000000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r9, r8, r8, r9, r9, r9, r8], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94)
r14 = ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r11, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0f9794736a0f12e0a1c2e1e2e360ce9d80c45b3f8303424b8dfa", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250300000014000c00fe80000000000000000000000000000b0c000300040000000000000014000c00ff02000000000000000000000000000108000700", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r11, @ANYBLOB="0600060004000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r15, &(0x7f0000002940), 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="18f5ff00ffffffff00000000010000809c76300001000000950000000000040018550000080000000000000000000000e91b7562ffc57c5a06dd4e2ee443fb2a3ebbce5374"], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r13, 0x9, &(0x7f0000000b40)=[r8, r8, r9, r9, r9], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000cc2d4f4c0634c1cf84481c00080000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x10, '\x00', r5, @fallback=0xe, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

915.723174ms ago: executing program 1 (id=1740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x4b, 0xa, 0x2, {0x1, @esp_ip4_spec={@broadcast, @loopback, 0x2, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 0x4, 0x3fc0, [0x8, 0x6]}, @tcp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0xa}, @private1, 0x4e22, 0x4e23, 0x1}, {0x0, @random="c6e16a0f641e", 0x3, 0x3, [0x6, 0x1]}, 0x5f9, 0x2}}})
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r3, 0x909, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x990}, 0x48014)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_newaddr={0x18, 0x14, 0x8, 0x70bd2c, 0x25dfdbfc, {0xa, 0x18, 0x83, 0xff, r4}}, 0x18}, 0x1, 0x600, 0x0, 0x4000}, 0x40040)

875.046868ms ago: executing program 0 (id=1741):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), 0x0}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$unix(r5, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030300000000000000bf40047b0000000065001400028006000f00020000000500130000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24048060)

750.632992ms ago: executing program 3 (id=1742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r3, &(0x7f00000029c0)={&(0x7f0000000240)={0xa, 0x4e23, 0x0, @local, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000002a00)=[@hoplimit={{0x14, 0x11, 0x34, 0xba43}}], 0x18}, 0x480d0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000002c0), &(0x7f0000000240), 0xb00}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x800, 0x4, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x5, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400282, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x2a, 0x0, 0x0, 0x100000}, 0x28)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a98000000030a010400000000000000000700000a400008800c00014080000000000000000c00014000000000000006fa0c00014000000000000000090c00014000000000000000010c00014000000000000007ff440004800800014000000004140003006e7230000000000000000000000000001400030070696d36726567300000000000000000080001400000000208000140000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480340001800b00010065787468647200002400028008000340000000000800014000000004080006400000000405000200890000000900010073797a3000000000140000001100010000000000000000000700000a"], 0x14c}}, 0x40000)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000001c0)=r5)
ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f0000000200)={'netpci0\x00', @ifru_ivalue=0x81}})
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x2e0, 0x0, 0x3b0, 0x2e0, 0x1b0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)

736.202475ms ago: executing program 1 (id=1743):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003140000006cbd7000fbdbdf250200090018000000000000000000000005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007020000000005000500320000000a00000000000000fc0100000000000000000000000000010700000000000000040004"], 0xa0}, 0x1, 0x7}, 0x4008000) (async, rerun: 32)
r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000031400022cbd7000ffdbdf250900020073797a30000000000800410073697700140033006d6163736563300000f9ffffffffffffff00020073797a3000000000080041007278650014003300697036746e6c300000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000000900020073797a30000000000800410072"], 0xb0}, 0x1, 0x0, 0x0, 0x45}, 0x950) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x0) (async, rerun: 32)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async, rerun: 32)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) (async, rerun: 32)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)

729.861581ms ago: executing program 0 (id=1744):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b5", 0x75}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000000)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

580.665698ms ago: executing program 1 (id=1745):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
close(0x3)
close(0x4)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x8, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r8], 0x18}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f00000004c0)=""/200, 0xc8, <r9=>0x0, &(0x7f00000005c0)=""/209, 0xd1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={<r10=>r3, 0x41, 0x5, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x1, &(0x7f0000000180)=@raw=[@generic={0x3, 0xb, 0x1, 0x4cd, 0x20000000}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x49, &(0x7f00000003c0)=""/73, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, r7, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x3, 0x9, 0x2c}, 0x10, r9, r0, 0x3, &(0x7f00000001c0)=[r10, r1, r1, r1, 0x1, r0, r1, r1, r1, r10], &(0x7f00000005c0)=[{0x2, 0x1, 0x2, 0x7}, {0x2, 0x3, 0x27, 0x6}, {0x0, 0x4, 0x7, 0x7}], 0x10, 0x81}, 0x94)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa0000000}]}, 0x1c}}, 0x20060000)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004003)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x9039}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xfffffe00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

474.706055ms ago: executing program 3 (id=1746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r2 = socket(0xa, 0x5, 0x0)
pipe(0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x61f0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000003e80), 0x0, 0x0)
shutdown(r3, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), 0xffffffffffffffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB="945b70fcd6c89d0a9849191e7dbe1e4bef06499822adf1db7929ac5247e396308a5fb40e1213246e016ee1f47e926d449cbce2c7f3f2aff680e0e06ee5d574e9f65f6e00da6d3626d1d08342517bf0eec91447aa2186e3f0288d709be207", @ANYRESDEC=r7, @ANYRES32=r7], 0x40}}, 0x2401c090)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r9, 0x8004745a, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x601, 0x2, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8a8f, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c00}, 0x9fb955326eaa8737)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000008700000018110000", @ANYRES32=r11, @ANYBLOB="0000800004000000b702000014000000b7030000fcff00008100000086000000bf0900000000000055090100000000809500000000000000bf91000000000000b7020000025800008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
socket$inet(0x2, 0x2, 0x78)

469.978592ms ago: executing program 2 (id=1747):
r0 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x2, 0xf) (async)
r4 = socket(0x10, 0x2, 0xf)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0)
sendto$packet(r0, &(0x7f0000000500)="39c394f705916c4516999da208000b15ae4c84674b726f26dc2f9876b8beea848cc1", 0x22, 0x40810, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

374.925647ms ago: executing program 1 (id=1748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x800, 0x28, 0x0, 0xb, 0x3e, 0xeef6, 0x2, 0x6, 0x9, 0x5, 0x401, 0x4fa0, 0x0, 0x7ff, 0x7, 0x2, 0x1ff, 0x2, 0x92e4, 0x6, 0x561, 0x0, 0x5, 0x8, 0x8, 0xa00, 0x2, 0x8, 0xfffffff8, 0x9, 0x3, 0x8000, 0x80c6, 0x3, 0x6, 0x2, 0x6, 0x9, 0x2, 0x2, 0x8a0b, 0x100, 0x10001, 0x3, 0x4, 0xf3a, 0x6, 0xf, 0x5c72, 0x9, 0x4, 0x7fff, 0x6, 0x2, 0xec89, 0x2, 0xa, 0x3, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x9, 0x6, 0x293, 0x16214, 0x9, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7, 0x4, 0xfffffffe, 0x437, 0x10000, 0x8001, 0x3, 0x54, 0x2, 0x2, 0x9, 0x2, 0x7, 0xe, 0x5, 0x0, 0x1, 0x0, 0x5, 0x7615154, 0xfe000000, 0x0, 0x5, 0x7, 0x7, 0xa0, 0x7, 0x3, 0x8000, 0x3, 0x3, 0x6, 0xcc8, 0x6, 0x1400000, 0x9, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x7ff, 0x101, 0x8001, 0x1, 0x1, 0x405, 0x7, 0x0, 0xfffffbff, 0xffff0000, 0x9, 0x7fff, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0x1000, 0x6, 0x3, 0xf42e, 0xba, 0x3, 0xd24, 0x40, 0x6, 0xfffffffe, 0x9, 0x9, 0x8, 0x4, 0x1, 0xffffaa35, 0x5, 0x6104df6a, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x9, 0x8001, 0x8bb, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x4, 0x2, 0x7, 0x101, 0xc7, 0x7, 0x1, 0x6, 0x3, 0x4, 0x13d1, 0x2, 0x9d0, 0x3ff, 0x2, 0x6, 0x5, 0x726, 0x9522, 0x9, 0x9, 0x0, 0x401, 0x5, 0x7f, 0x2, 0xe2, 0xff, 0x19, 0x1, 0x189, 0x34, 0xc, 0xff, 0xdef, 0x3, 0x401, 0x6, 0x185e, 0xb, 0x8, 0xfff, 0x0, 0x5, 0x4, 0x4, 0x10, 0x2, 0x2, 0x7, 0x1, 0x4cbc, 0x7, 0x80000000, 0x40, 0xeb5, 0x7f, 0xdfb, 0x7ff, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0x2, 0xc1d, 0x6, 0x96cc0000, 0x4, 0x3, 0x0, 0x1, 0x5, 0x0, 0x7f, 0x6, 0xd, 0x0, 0x9fd2, 0x6, 0xa0, 0x2ad, 0x8, 0x3ff, 0xbb, 0x2, 0xf9, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x1, 0x1, 0x7, 0x0, {0x6, 0x1, 0x1, 0xeaeb, 0x5, 0x7}, {0x9, 0x3, 0x1, 0xf2, 0x1, 0x1}, 0x9, 0x4, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xc2d, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x93, 0x3, 0x8, 0x9, 0x615d37e8, 0xe, 0x6, 0x7, 0x8, 0x0, 0x5, 0x9, 0x2, 0x568000, 0x9, 0x8, 0x5, 0x6, 0x5a, 0xc, 0x9, 0x84fe, 0xb7, 0x10001, 0x6, 0x3, 0x2000000, 0x83, 0x3, 0x4, 0xbd1, 0xffffffff, 0x9, 0x4, 0x401, 0x414b, 0x4ac5, 0xc, 0x5, 0x37, 0x2, 0x7, 0x9ee4, 0x0, 0x2, 0x81, 0x403, 0x2, 0x9, 0x9, 0x8, 0x9531, 0x1, 0x29, 0xffff0001, 0x3, 0x8000, 0xadc3, 0x10000, 0x3cf, 0x1, 0x3, 0xe, 0x7, 0x3, 0x400, 0xaa7, 0x6950, 0xfff, 0x3, 0x7, 0x6, 0x7, 0x1, 0xc0a, 0x1, 0x3, 0x70a482f2, 0xe00, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x1, 0xe, 0x45, 0x10, 0x93d1, 0x10001, 0x3, 0x6, 0x3, 0x57, 0x7fff, 0x3, 0xfffffe01, 0x7b56, 0xe542, 0x7, 0x9, 0x10000, 0x4, 0x8, 0x7, 0x3, 0x685, 0x5160, 0x7, 0x3, 0xfbb, 0x8, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0x31, 0xc7, 0x4c, 0x400, 0x4, 0x5, 0x9, 0x1ff, 0x291, 0x4, 0xfffffff9, 0x1ff, 0x50, 0x1, 0x0, 0xfffffffb, 0x100, 0x6, 0x205, 0x7fff, 0x8, 0x9, 0xc, 0x8d3, 0x6, 0xfffffff7, 0x2, 0x9, 0x10000, 0x7a, 0x4, 0x400, 0x1, 0x6, 0x1ff, 0x200, 0xa2680000, 0xa0, 0xe6, 0x8, 0x5, 0xfffffffa, 0x2, 0x10001, 0x9, 0x66, 0x5, 0x80000001, 0xac4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x9, 0x7f, 0x9, 0x3, 0x4, 0x3, 0x8, 0xf, 0x8, 0x5, 0x5, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x10000, 0x800, 0x2, 0x9, 0x7, 0x2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x3, 0x4, 0xd3, 0x3, 0x80, 0x8, 0x9, 0xa, 0x2, 0xab, 0x5, 0x7, 0x0, 0x9, 0x2, 0x9, 0x4, 0xb, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x2, 0x5f8, 0x3, 0xff, 0x4bf, 0xfffffffe, 0xff, 0x4, 0x4f4, 0x6, 0x2, 0x4, 0x81, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001, 0x6, 0x3, 0xfffffff8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r4=>0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003d80)=<r13=>0x0)
sendmmsg$nfc_llcp(r1, &(0x7f0000004380)=[{&(0x7f0000000280)={0x27, r4, 0xffffffffffffffff, 0x3, 0xf0, 0x9, "afb9361fd5c4576ff9ef519d964b14a3827acbe5c580609525810fb4bec69fca2b062cc1c4764144caff48bbfe8da2eaf2a5be21e8497a60b1675d3249b5e1", 0x18}, 0x60, &(0x7f00000023c0)=[{&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="00a66b0eb926cd4ecf4e97e99d28790415f7a8259469047501e818e3f10a09982835eb864a1bcc4db6c5355831a0a3244034f500af836bdb395dc76633a9a4f941cb1341fe5e3ac2e8d30d7170263d4a562ef3494a17af4714e8a43d1d61d1568e3b91180e33165831743e1dda78c38b5dc4fe01ea62f22449ad7fbe305291b6a8aaadc03e4029269d2016e638788159f5a48f4ef41690", 0x97}], 0x3, &(0x7f0000002400)={0xe8, 0x108, 0xffffff00, "18904095c54879815fcef7764565c9d4e4b1529431129d6a8d4146d2207a08bd19d70fbec495fe70b08edb3c5873d6d122cfdeac50b2c011f207fc4c738880c79da52444aff55eab0186982b1edaf016da6d97eb861aa2c6324ad16483761c3b6894f8516a1b82810fe5ec27748ee393ce17779c6116ac830622be5bac3d7573acfaffd1b6e5be5121fdca18304035290bbdf52a4ce1d0d02516c63a321dccfc0ec7920f46a97d7629a529c5bdbf829c56e9af79918cc83cb050b54fef3beebebc9d288a6966bb1b054e0483390952ec7e7a3e0a37bede"}, 0xe8, 0x20000000}, {&(0x7f0000002500)={0x27, 0x0, 0x1, 0x1, 0xd, 0x7, "d816b5cc6973c0e5a73b002c53506e3f02572bf128342b4fd6ed2634e4e9ed6ecdfef9257b956456df274aedcade457025d0027ec119bfe210b95f98036b92", 0x1c}, 0x60, &(0x7f00000025c0)=[{&(0x7f0000002580)="7f148620b3c4a596bf3481d7b2a93c816a98bdd2247d694ab3b034f0c5", 0x1d}], 0x1, &(0x7f0000002600)={0x70, 0x10c, 0x7, "ed61677f697eb811601e6ea8504f101b3afd8c94c1ee0560c106a49c04236fb46b0e77c5693a834ce41f2aff59febea4345ff3e208613e7332088b6c2148a347f9991af9154b7cdefca5c50e2a4c95d476e64feb253747622eb44141c6475e"}, 0x70, 0x40}, {&(0x7f0000002680)={0x27, r8, 0x1, 0x2, 0xf, 0x42, "68d07dd03518b18d36f34bf2107e6f4b5c52d42ae7a99024246d30a80999bab1e3ffa4d5678210584f3806f45b3564ae00e7b3f66428fbe01414b7302aa01a", 0x4}, 0x60, &(0x7f00000038c0)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="6fa2411cfd4616f452e1ab90fde5a2bc8bb487f48eff01a6099ede468be6db7d545b79867e7673dc98c97ae0b2b86e7d92d266bc683083e56c28c205a576ee9c7c8e167fd102036670365b1fb496914bd936939d211acb7f6e59b978ccc4215053d7ebf81228cbeb16fd5026cb1800ddb2a0bffc97beb635a1cf3f5732e9bd882df7d135ebcc9d54844111573526359218e4e19f553450d0bbc26e8b87fa7bb4aa99cdc4cee2c9b490a039f381ad20b5e265243f2e2c399a670f63ae4bf3298bad69959b49af1b6bf92a5def84792b84345f1c7efd", 0xd5}, {&(0x7f0000003800)="e1a7b60c877478eb11ea4a754b8a7bd77daaf80fe2033d39fb8913c4ee6ca207b416c94d186290f04dc4a0e9aa5941188dfb1b73671264fe73a295f2ca91c4755ea877980f59d18615955dea3f50314e9f760fb211dc5a64bfaa11cbffc4f0b9f22126f3cebf304f8c90b336f59f0ea2d858442198d6021ff681ea470afe864cc883eb6b0fbce4625af29ee0ab08b2fc776b4aead205d59dbb681e1f", 0x9c}], 0x3, 0x0, 0x0, 0x10}, {&(0x7f0000003900)={0x27, r12, 0x0, 0x7, 0x3, 0x9, "92f4fbc0ab2dea53795a37d72f6ca997560456e4537d161f677b9b3f721045ae59d658526ab15f5fb3986cedfd87ae89120e6f9ef86c0c10b184d76a958317", 0x34}, 0x60, &(0x7f0000003c80)=[{&(0x7f0000003980)="ba60027528bfbcd315399a0f4a2a889bec27d7bfa4a7ee3efde40c3183a21d5193e7c8bbfc3e7a3a550dc8198b6b609990fe21d500aa77853ee55f977422b7c95de53a1579d08f7993c0ff92a127f595555884022827a9e1798ab76954c3c3247166bcd57f33cbf16e47a832679ff7045bba527f697d5147f28933a207ee6f18825dde8f0507005c8b17ee991787b7e051586d45cf2bdd", 0x97}, {&(0x7f0000003a40)="37389dd1f780460a7b10e1575a9cda4b8c", 0x11}, {&(0x7f0000003a80)="39888ee1e384c9bbc68c13adb79aed4e3a270c9d258f00a85b4fe791738729a512235d59e03bf1659fc2", 0x2a}, {&(0x7f0000003ac0)="c875a5d5b9f96a5b0b48ad1a808299beaa129d8d1dd1b86b14a4f3e7c7532f8300247b4836f6b316e166695b1f1e8f7b5237f3af308b324c57237dccdcb271fdcadeb4494402ae60d0be0ba8774398182d1fe0dcc65aea2c0ef45e31696b549b1719e0b80a6355dd7599b1064b8dcb2d47d60235e761f422fc5af525a6a4c5d9fe0278a70c5ddfa61d7a0632b0bf23f24042082f", 0x94}, {&(0x7f0000003b80)="9c38f9905142580bbffb6cfc08d4da215fca8f28e6fbba1d431a839e995d18052de4023fe1e143c45dc0d749f00483d917f90aae205c4424", 0x38}, {&(0x7f0000003bc0)="e36fc9d3106daf720b04dba1c392d5edef7aa2c7", 0x14}, {&(0x7f0000003c00)="ef463069ab2938684c6bc8a72ab412130e8a78bbbbf569c3e9a7f198ef069cd2b590ca1effda879cecd5a69b267173e2d7030c288037a2b23c04ebbd12267b40fde030dd3b7919481f6f329c4868d57b13f85d57dfc9bc66a5b14de707bb9ff5ee798123c005ef14ea4630e5", 0x6c}], 0x7, &(0x7f0000003d00)={0x80, 0x115, 0x3, "a00764c0a727cb659074f9d9f4dac71c177eb262afb7b199ef4864694abb17c93adf3ed424288b149333349e4ac468443094cb5476e2605ac2e92ff4997773caa64f20244b67cd9698d2fcf65f7406ad24e019b4b73c3a68f642531aa7b491b875a14256fee7ccde455c08dc3f"}, 0x80, 0x20054080}, {&(0x7f0000003dc0)={0x27, r13, 0xffffffffffffffff, 0x3, 0x3, 0x9, "2f3612256ee356eda6a282543932a0e7730c3b2bdc758d7a9ef6aa45fcc36d448bf21407975a963f3a6ef7d5246e4744e85251e60cb8d4ab40e8f6915b8e3b", 0x25}, 0x60, &(0x7f0000004200)=[{&(0x7f0000003e40)="539898649a87585d", 0x8}, {&(0x7f0000003e80)}, {&(0x7f0000003ec0)="6c15cd7fcec1cf8a64e5236f015c448bdb3f5e35e63ba7fa049aa267e2252294", 0x20}, {&(0x7f0000003f00)="88f37bacdd09b3d872cf164294045d566cdf88c9acf87456bf26b4ad153ee9f8a9dd36faeb383e2c20d7faeeb07290117a523bf00e608bb97221c9eb644f749cda385c3a7b4159768fd93b240325564553644fbdd93bd0b538d97019cdc8df7c3480557de24563f67cb9cef7bce43027cf3c473f37f94fdef0199c5132ed4557fcf02ac8306a65c93ba50b1c0856561a1eef0059877c2608dead2afd1352f5603e0e41ab06e1281a5717559c34629a8b2c2d196ec35b60725f02c1f34c8206609d2a033951153b8e", 0xc8}, {&(0x7f0000004000)="b2dcbbac2125ac3a6f44f1ba3a605b269cc3c2590c60c1189c3c39946201d702717d6169f6fe5c0a3be8d38454550b4ac41906ee37bc8cc5056460aa4bf04eeae1c289aa0649abb4819cf1f3f90957548c023a8375386da93513248547cf07db0c1ff0d6f06649e49abb93600991b04cf3c7a54c572d92d0ee53bd183c5361692d55ae0a8c6615179b0f9f6ae48a220c70c34ee9bf8a84f91a124f1e300ffbc3a00e66405247dbd076a22ead318d158ccaee1c5837d5f41c60f4ee368947e65bef6bdaa2", 0xc4}, {&(0x7f0000004100)="926c1f2f5231a8800213f848770baab8d6fbe73485fe11bfddbae30035335cb0308ba2ff560d0e2d746f3d334bda184f20f83a03b21cf6ab07ca36649c1647a1fdadc8d260dc16404121fe48b83fdd5adc718169609d904e01c81e18fc8cad473525d868160aef7c76f91cc25d2d6342e8fc", 0x72}, {&(0x7f0000004180)="deeb9545b9bcef2a5c7f017417564a6d63209c8fd2d753e53842de67084e00acb3f833a7340d0a8d1c0d9d08318d71399f371a09fc7934be55bf27196fffa1b6cf0beef4d7ce0704813e6939caf2ed60801e7984fee9e277927fe1c2f4a5c278dcb4a165a17520a4569f", 0x6a}], 0x7, &(0x7f0000004280)={0xf0, 0x1, 0x5, "f75ee92f7dd6bbaee05acd0887043c3c7f2dd38910e52ac17fa8a9ab11d2bf3ee0777c0f6dac0eae78a6e10ae4a505384f8dcb6ff976af37b8e9bed881d9aa82c27d69b4b12e13d105f6d3c7dc2531546d5b1b175f8f57f28ae2a23693fd3ab87cbb9906726a2e182d9c9b81215c4a785563d72eddb463eda7723e4bba4b151a13783a9aeef33b0700826d224518ab5bb64d8a5a7cb0ab58b062cae0ac88923bc34fc887833ac62d92d86ab3e44e6c8d84750ae47d4dabfa083b0d0e1ecf6af66617edde263a456b22d33b773a8b865de32bbcb2c962024383f60cdb56b2"}, 0xf0, 0x20000000}], 0x5, 0x881)

369.560842ms ago: executing program 0 (id=1749):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000013000004000000000003f6ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000010604000c002b8008000300070000001400030077673200"/40], 0x40}}, 0x20008800)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/201, 0xc9}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/164, 0xa4}, {&(0x7f0000000180)=""/144, 0x90}], 0x56, &(0x7f0000000740)=""/270, 0x10e}, 0x122)

235.423307ms ago: executing program 2 (id=1750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000e00b704000000000000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4010080}, 0x4004)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$inet6(0xa, 0x80002, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x33, 0x0, 0x0)
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x30000100)

124.025806ms ago: executing program 0 (id=1751):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r3}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e24, 0x7, @empty, 0x9}}, 0x3cb1, 0xffffffff, 0x0, 0xd, 0xb0}, &(0x7f0000000100)=0x98)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000100001002bbd7000fedbdf2500000000", @ANYRES32=r0, @ANYBLOB="8a4301000000000018001680140001801000030001000080a90400202f05000014000300", @ANYRES16], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000140)={r3, 0xb8, "c4c8f65f71a4f673ab69ec2bd47bf830f6d7a1ccb5529ef56aff72e1761fe43edae387435b08c1316e51d078d9f7aece310a2cf6793375d9c0da8302985570ba8a25fb6d8cb6351a5401df40d1fb38718b79812153de9494f9d1d90d5704c51f92bf7915d9ad85472fffc825f43a98270b211ea91b8ff4bdaf1a6e0de7fcdb0954e783bbdd1c80d8b5ece846a520a0ba85a5006fc63d346bf7050137479a5e3d9f6e922f3e64b94e6b459d4b509245ec68fbe39278c6cba1"}, &(0x7f0000000200)=0xc0)

0s ago: executing program 0 (id=1752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x10000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10009}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x20000003}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, 0x0, 0x0)
connect$inet6(r11, 0x0, 0x0) (async)
connect$inet6(r11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r9, &(0x7f0000000440), &(0x7f0000000040)=@udp=r8}, 0x20)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) (async)
recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

kernel console output (not intermixed with test programs):

478:2): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.213" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  116.007951][ T6676] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  116.047185][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'.
[  116.058390][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) 
[  116.058423][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  116.058437][ T6684] Call Trace:
[  116.058445][ T6684]  <TASK>
[  116.058455][ T6684]  dump_stack_lvl+0xe8/0x150
[  116.058488][ T6684]  warn_alloc+0x249/0x340
[  116.058523][ T6684]  ? stack_trace_save+0xa9/0x100
[  116.058561][ T6684]  ? __pfx_warn_alloc+0x10/0x10
[  116.058602][ T6684]  ? kasan_save_track+0x4f/0x80
[  116.058632][ T6684]  ? kasan_save_track+0x3e/0x80
[  116.058660][ T6684]  ? __kasan_kmalloc+0x93/0xb0
[  116.058691][ T6684]  ? __kmalloc_cache_noprof+0x31c/0x660
[  116.058721][ T6684]  ? xskq_create+0x56/0x170
[  116.058755][ T6684]  ? xsk_setsockopt+0x54c/0x990
[  116.058784][ T6684]  ? do_sock_setsockopt+0x17c/0x1b0
[  116.058808][ T6684]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  116.058830][ T6684]  ? do_syscall_64+0x174/0x580
[  116.058859][ T6684]  __vmalloc_node_range_noprof+0x132/0x1750
[  116.058927][ T6684]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  116.058968][ T6684]  ? __kasan_kmalloc+0x93/0xb0
[  116.059007][ T6684]  vmalloc_user_noprof+0xad/0xe0
[  116.059040][ T6684]  ? xskq_create+0xbf/0x170
[  116.059084][ T6684]  xskq_create+0xbf/0x170
[  116.059122][ T6684]  xsk_init_queue+0x8a/0xe0
[  116.059158][ T6684]  xsk_setsockopt+0x54c/0x990
[  116.059194][ T6684]  ? __pfx_xsk_setsockopt+0x10/0x10
[  116.059227][ T6684]  ? __pfx_aa_sk_perm+0x10/0x10
[  116.059263][ T6684]  ? aa_sock_opt_perm+0xff/0x1a0
[  116.059303][ T6684]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  116.059333][ T6684]  ? __pfx_xsk_setsockopt+0x10/0x10
[  116.059367][ T6684]  do_sock_setsockopt+0x17c/0x1b0
[  116.059398][ T6684]  __x64_sys_setsockopt+0x13d/0x1b0
[  116.059425][ T6684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.059450][ T6684]  do_syscall_64+0x174/0x580
[  116.059474][ T6684]  ? trace_irq_disable+0x3b/0x140
[  116.059509][ T6684]  ? clear_bhb_loop+0x40/0x90
[  116.059537][ T6684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.059560][ T6684] RIP: 0033:0x7f4c8c39ce59
[  116.059580][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.059598][ T6684] RSP: 002b:00007f4c8a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  116.059621][ T6684] RAX: ffffffffffffffda RBX: 00007f4c8c615fa0 RCX: 00007f4c8c39ce59
[  116.059638][ T6684] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  116.059651][ T6684] RBP: 00007f4c8c432d6f R08: 0000000000000004 R09: 0000000000000000
[  116.059664][ T6684] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.059678][ T6684] R13: 00007f4c8c616038 R14: 00007f4c8c615fa0 R15: 00007ffc661aeda8
[  116.059715][ T6684]  </TASK>
[  116.059822][ T6684] Mem-Info:
[  116.087307][ T6676] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  116.332519][ T6684] active_anon:8585 inactive_anon:0 isolated_anon:0
[  116.332519][ T6684]  active_file:3026 inactive_file:39960 isolated_file:0
[  116.332519][ T6684]  unevictable:768 dirty:223 writeback:0
[  116.332519][ T6684]  slab_reclaimable:10143 slab_unreclaimable:94756
[  116.332519][ T6684]  mapped:29373 shmem:4227 pagetables:1203
[  116.332519][ T6684]  sec_pagetables:0 bounce:0
[  116.332519][ T6684]  kernel_misc_reclaimable:0
[  116.332519][ T6684]  free:1332934 free_pcp:10778 free_cma:0
[  116.355822][ T6676] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.457926][ T6684] Node 0 active_anon:34440kB inactive_anon:0kB active_file:12104kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117492kB dirty:892kB writeback:0kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12404kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  116.529218][ T6684] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  116.623946][ T6684] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.660837][ T6676] syz.4.213 (6676) used greatest stack depth: 17816 bytes left
[  116.714877][ T6684] lowmem_reserve[]: 0 2492 2493 2493 2493
[  116.740384][ T6684] Node 0 DMA32 free:1368752kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32940kB inactive_anon:0kB active_file:12104kB inactive_file:159636kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2552556kB mlocked:0kB bounce:0kB free_pcp:44528kB local_pcp:22120kB free_cma:0kB
[  116.782394][ T6684] lowmem_reserve[]: 0 0 0 0 0
[  116.789281][ T6684] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB
[  116.870150][ T6684] lowmem_reserve[]: 0 0 0 0 0
[  116.878188][ T6684] Node 1 Normal free:3946940kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.936376][ T6684] lowmem_reserve[]: 0 0 0 0 0
[  116.946501][ T6684] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  116.973785][ T6684] Node 0 DMA32: 1702*4kB (UME) 697*8kB (UME) 197*16kB (UM) 37*32kB (UME) 80*64kB (UME) 31*128kB (M) 15*256kB (UM) 7*512kB (UME) 0*1024kB 4*2048kB (UME) 325*4096kB (M) = 1372624kB
[  117.016952][ T6684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  117.040706][ T6684] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 11*16kB (UM) 11*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946940kB
[  117.107933][ T6684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  117.123016][ T6684] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.133407][ T6684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  117.166738][ T6684] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.176731][ T6684] 44289 total pagecache pages
[  117.181551][ T6684] 0 pages in swap cache
[  117.186720][ T6684] Free swap  = 124996kB
[  117.192646][ T6684] Total swap = 124996kB
[  117.197213][ T6684] 2097051 pages RAM
[  117.201077][ T6684] 0 pages HighMem/MovableOnly
[  117.206899][ T6684] 427129 pages reserved
[  117.211274][ T6684] 0 pages cma reserved
[  117.249251][ T6711] syzkaller0: entered promiscuous mode
[  117.255984][ T6711] syzkaller0: entered allmulticast mode
[  117.267691][ T6715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.223'.
[  117.635842][ T6738] netlink: 'syz.2.226': attribute type 7 has an invalid length.
[  117.643906][ T6738] netlink: 'syz.2.226': attribute type 8 has an invalid length.
[  118.832407][ T6732] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[  119.189101][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'.
[  119.515555][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'.
[  119.572641][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[  119.574243][ T6776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.233'.
[  119.609855][ T6779] netlink: 'syz.0.235': attribute type 10 has an invalid length.
[  119.641717][ T6782] netlink: 'syz.1.233': attribute type 32 has an invalid length.
[  119.682012][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[  119.707887][ T6779] veth0_vlan: left promiscuous mode
[  119.716439][ T6779] veth0_vlan: entered promiscuous mode
[  119.730837][ T6779] team0: Device veth0_vlan failed to register rx_handler
[  119.781263][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'.
[  119.957435][ T6782] bond2: option coupled_control: invalid value (116)
[  119.999897][ T6782] bond2 (unregistering): Released all slaves
[  120.204059][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'.
[  120.398325][ T6800] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.464482][ T6800] bond1: (slave bond2): Enslaving as an active interface with an up link
[  120.571898][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[  120.593012][ T6804] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  120.613837][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  120.626613][ T6796] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.685954][ T5723] IPVS: starting estimator thread 0...
[  120.732970][ T6828] geneve2: entered promiscuous mode
[  120.803303][ T6834] IPVS: using max 26 ests per chain, 62400 per kthread
[  120.924395][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'.
[  120.990850][ T6842] netlink: 'syz.0.246': attribute type 12 has an invalid length.
[  121.076323][ T6842] macsec0: entered promiscuous mode
[  121.103407][ T6837] macsec0: left promiscuous mode
[  121.830976][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.268121][ T6895] netlink: 'syz.4.261': attribute type 1 has an invalid length.
[  122.596910][ T5642] udevd[5642]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  122.661898][ T6908] veth0: entered promiscuous mode
[  122.696149][ T6908] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  122.797540][ T6907] veth0: left promiscuous mode
[  122.992544][ T6891] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  123.602344][ T6943] bridge0: port 3(vlan3) entered blocking state
[  123.620651][ T6943] bridge0: port 3(vlan3) entered disabled state
[  123.637576][ T6943] vlan3: entered allmulticast mode
[  123.646556][ T6943] geneve0: entered allmulticast mode
[  123.655955][ T6943] vlan3: entered promiscuous mode
[  123.662152][ T6943] geneve0: entered promiscuous mode
[  124.373212][ T6985] __nla_validate_parse: 6 callbacks suppressed
[  124.373231][ T6985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.282'.
[  124.393899][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'.
[  126.797400][ T6958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.087957][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[  127.441374][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  127.626218][ T7028] bridge5: port 1(veth3) entered blocking state
[  127.641478][ T7028] bridge5: port 1(veth3) entered disabled state
[  127.661145][ T7028] veth3: entered allmulticast mode
[  127.684224][ T7028] veth3: entered promiscuous mode
[  127.693957][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  127.747814][ T7038] bridge5: port 2(veth0_to_bond) entered blocking state
[  127.773910][ T7047] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.305'.
[  127.786676][ T7038] bridge5: port 2(veth0_to_bond) entered disabled state
[  127.801928][ T7047] openvswitch: netlink: Key type 769 is out of range max 32
[  127.810632][ T7038] veth0_to_bond: entered allmulticast mode
[  127.833347][ T7038] veth0_to_bond: entered promiscuous mode
[  127.917161][ T7041] bridge5: port 3(veth5) entered blocking state
[  127.943389][ T7041] bridge5: port 3(veth5) entered disabled state
[  127.956841][ T7041] veth5: entered allmulticast mode
[  127.968512][ T7041] veth5: entered promiscuous mode
[  128.178823][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'.
[  128.235760][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[  128.473752][ T7084] syzkaller0: entered promiscuous mode
[  128.479481][ T7084] syzkaller0: entered allmulticast mode
[  128.577332][ T7091] bond0: Error: CAN devices cannot be enslaved
[  128.653056][ T7095] ip6erspan0: entered allmulticast mode
[  128.757715][ T7103] netlink: 'syz.1.314': attribute type 3 has an invalid length.
[  128.792917][ T7105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  128.874226][ T7109] netlink: 228 bytes leftover after parsing attributes in process `syz.1.314'.
[  128.905744][ T7105] Bluetooth: MGMT ver 1.23
[  128.912387][ T7103] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  128.927921][ T7103] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  128.936547][ T7109] netlink: 556 bytes leftover after parsing attributes in process `syz.1.314'.
[  128.948302][ T7103] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  128.981238][ T7103] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  128.998484][ T7110] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  129.012078][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.315'.
[  129.043292][ T7103] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  129.398413][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.406705][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.572177][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.628547][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.648778][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'.
[  129.792681][ T7126] 
: renamed from bond0 (while UP)
[  129.914074][ T3329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.940553][ T3329] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.970407][ T3329] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.998697][ T3329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.210315][ T7156] netlink: 'syz.4.329': attribute type 3 has an invalid length.
[  130.218487][ T7155] netlink: 'syz.4.329': attribute type 3 has an invalid length.
[  130.477112][ T7160] veth1_to_bond: Caught tx_queue_len zero misconfig
[  131.188027][ T7189] netlink: 156 bytes leftover after parsing attributes in process `syz.3.339'.
[  131.226832][ T7189] netlink: 156 bytes leftover after parsing attributes in process `syz.3.339'.
[  131.318346][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'.
[  131.363658][ T7189] xt_CT: No such helper "syz0"
[  131.400649][ T7204] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[  131.436343][ T7204] netlink: 'syz.2.343': attribute type 2 has an invalid length.
[  131.470259][ T7206] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  131.518834][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[  131.560477][ T7204] netlink: 'syz.2.343': attribute type 16 has an invalid length.
[  131.575782][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[  131.583379][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'.
[  131.606206][ T7212] netlink: 348 bytes leftover after parsing attributes in process `syz.0.345'.
[  131.615782][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[  131.640573][ T7212] netlink: 348 bytes leftover after parsing attributes in process `syz.0.345'.
[  132.035052][ T7238] x_tables: ip6_tables: mh match: only valid for protocol 135
[  132.160074][ T7246] syzkaller0: entered promiscuous mode
[  132.184605][ T7246] syzkaller0: entered allmulticast mode
[  132.311473][ T7252] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003
[  132.677049][ T7264] team0: Port device team_slave_0 removed
[  132.817556][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  133.606166][ T7297] netlink: 'syz.0.367': attribute type 11 has an invalid length.
[  133.637380][ T7298] netlink: 'syz.0.367': attribute type 11 has an invalid length.
[  135.408006][ T7377] __nla_validate_parse: 5 callbacks suppressed
[  135.408045][ T7377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'.
[  135.533968][ T7380] netlink: 'syz.1.387': attribute type 13 has an invalid length.
[  136.016980][ T7386] netlink: 256 bytes leftover after parsing attributes in process `syz.4.389'.
[  136.044308][ T7386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.389'.
[  136.342709][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[  136.406421][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.392'.
[  136.481914][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.392'.
[  136.801281][ T7424] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  137.062909][ T7437] openvswitch: netlink: IPv4 tun info is not correct
[  137.387881][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[  137.671603][ T7455] netlink: 'syz.2.408': attribute type 12 has an invalid length.
[  137.681107][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.408'.
[  138.369442][ T7488] Driver unsupported XDP return value 0 on prog  (id 103) dev N/A, expect packet loss!
[  138.440310][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.539756][ T7497] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  138.772161][ T7503] syzkaller0: entered promiscuous mode
[  138.778581][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.423'.
[  138.793855][ T7503] syzkaller0: entered allmulticast mode
[  138.840384][ T7503] tipc: Started in network mode
[  138.854736][ T7503] tipc: Node identity 3628a7c9bdc9, cluster identity 4711
[  138.876664][ T7503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.899864][ T7503] tipc: Resetting bearer <eth:syzkaller0>
[  138.932282][ T7501] tipc: Resetting bearer <eth:syzkaller0>
[  138.944638][ T7511] IPv6: addrconf: prefix option has invalid lifetime
[  139.013752][ T7501] tipc: Disabling bearer <eth:syzkaller0>
[  139.029554][ T7518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.427'.
[  139.449803][ T7540] netlink: 'syz.4.433': attribute type 6 has an invalid length.
[  139.520435][ T7543] netlink: 'syz.3.435': attribute type 1 has an invalid length.
[  139.555353][ T7545] Bluetooth: MGMT ver 1.23
[  139.902707][ T7561] vlan0: entered promiscuous mode
[  139.927622][ T7561] batadv0: entered promiscuous mode
[  140.030572][ T7566] netlink: 'syz.3.441': attribute type 11 has an invalid length.
[  140.151496][ T7569] 5Ò: entered promiscuous mode
[  140.278478][ T7587] netlink: 'syz.3.446': attribute type 3 has an invalid length.
[  140.290113][ T7587] netlink: 'syz.3.446': attribute type 1 has an invalid length.
[  140.581259][ T7601] ipvlan2: entered promiscuous mode
[  140.620906][ T7603] __nla_validate_parse: 6 callbacks suppressed
[  140.620927][ T7603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.449'.
[  140.631189][ T7602] openvswitch: netlink: VXLAN extension message has 141 unknown bytes.
[  140.716528][ T7607] openvswitch: netlink: IP tunnel dst address not specified
[  140.762456][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[  140.775482][ T7602] can: request_module (can-proto-0) failed.
[  140.801475][ T7606] syzkaller0: entered promiscuous mode
[  140.813486][ T7606] syzkaller0: entered allmulticast mode
[  140.986849][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'.
[  141.090294][ T7624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.453'.
[  141.149392][ T7619] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  141.172898][ T7619] bond2 (unregistering): Released all slaves
[  141.281646][   T30] audit: type=1800 audit(1780917065.748:3): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.457" name="blkio.bfq.time_recursive" dev="tmpfs" ino=506 res=0 errno=0
[  141.591046][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'.
[  141.614342][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'.
[  141.632131][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'.
[  141.665528][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'.
[  141.714916][ T7640] netlink: 'syz.3.462': attribute type 5 has an invalid length.
[  141.826287][ T7647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.463'.
[  142.609774][ T7664] syzkaller0: entered promiscuous mode
[  142.655627][ T7664] syzkaller0: entered allmulticast mode
[  142.703039][ T7680] tipc: Started in network mode
[  142.716876][ T7680] tipc: Node identity feab97225589, cluster identity 4711
[  142.726112][ T7680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.811083][ T7657] tipc: Resetting bearer <eth:syzkaller0>
[  142.905847][ T7657] tipc: Disabling bearer <eth:syzkaller0>
[  143.058688][ T7670] netlink: 76 bytes leftover after parsing attributes in process `syz.2.469'.
[  143.222201][ T7702] netlink: 'syz.0.474': attribute type 4 has an invalid length.
[  144.090890][ T7746] tc action pedit 'at' offset 6 out of bounds
[  144.299273][ T7751] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  144.339833][ T7757] unsupported nlmsg_type 40
[  144.520632][ T5723] IPVS: starting estimator thread 0...
[  144.625138][ T7771] IPVS: using max 27 ests per chain, 64800 per kthread
[  144.899518][ T7787] tunl0: entered allmulticast mode
[  145.413673][ T7811] openvswitch: netlink: Invalid VLAN frame
[  145.459582][ T7800] raw_sendmsg: syz.2.500 forgot to set AF_INET. Fix it!
[  145.489590][ T7814] netlink: 'syz.4.503': attribute type 39 has an invalid length.
[  145.831860][ T7824] __nla_validate_parse: 9 callbacks suppressed
[  145.831880][ T7824] netlink: 68 bytes leftover after parsing attributes in process `syz.2.506'.
[  145.959367][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  146.018348][ T7829] bond3: option fail_over_mac: invalid value (127)
[  146.141756][ T7829] bond3 (unregistering): Released all slaves
[  146.330247][ T7839] netlink: 'syz.0.509': attribute type 13 has an invalid length.
[  146.373957][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'.
[  146.385272][ T7842] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  146.514173][ T7846] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  146.628994][ T7853] Bluetooth: MGMT ver 1.23
[  146.661854][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'.
[  146.798600][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'.
[  147.112451][ T7857] netlink: 84 bytes leftover after parsing attributes in process `syz.1.515'.
[  147.131381][ T7857] netlink: 84 bytes leftover after parsing attributes in process `syz.1.515'.
[  147.154652][ T7857] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  147.216485][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'.
[  147.243315][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'.
[  147.263644][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[  149.921428][ T5768] hsr0: entered promiscuous mode
[  150.527359][ T7939] ieee802154 phy0 wpan0: encryption failed: -126
[  150.653670][ T7945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.670728][ T7945] netlink: 'syz.4.536': attribute type 1 has an invalid length.
[  150.764236][ T7945] bond3: entered promiscuous mode
[  150.770420][ T7945] 8021q: adding VLAN 0 to HW filter on device bond3
[  150.789903][ T7945] netlink: 'syz.4.536': attribute type 3 has an invalid length.
[  150.976301][ T7955] netlink: 'syz.4.540': attribute type 4 has an invalid length.
[  151.030472][ T7955] __nla_validate_parse: 28 callbacks suppressed
[  151.030492][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'.
[  152.525189][ T8008] ip6gretap0: entered promiscuous mode
[  152.662316][  T153] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  152.679905][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'.
[  153.170259][ T8034] tipc: New replicast peer: 255.255.255.255
[  153.186182][ T8034] tipc: Enabled bearer <udp:syz2>, priority 10
[  153.198863][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'.
[  153.218771][ T8034] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  153.271781][ T8034] bond3: entered promiscuous mode
[  153.278887][ T8034] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.335655][ T8034] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component
[  153.446746][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  153.457210][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  153.680012][ T8052] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.564'.
[  153.905285][ T8059] netlink: 'syz.0.567': attribute type 3 has an invalid length.
[  154.175647][ T8069] netlink: 'syz.3.571': attribute type 1 has an invalid length.
[  154.196420][ T8057] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.567'.
[  154.231427][ T8057] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.567'.
[  154.240616][ T8063] Cannot find del_set index 0 as target
[  154.249916][ T8073] x_tables: ip_tables: ah match: only valid for protocol 51
[  154.259333][ T8069] bond1: entered promiscuous mode
[  154.265741][ T8069] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.352340][ T5768] tipc: Node number set to 226423294
[  154.460618][ T8082] netlink: 'syz.4.573': attribute type 2 has an invalid length.
[  154.471299][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'.
[  154.482191][ T8069] bond1: (slave veth5): making interface the new active one
[  154.490031][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'.
[  154.500298][ T8069] veth5: entered promiscuous mode
[  154.511018][ T8069] bond1: (slave veth5): Enslaving as an active interface with an up link
[  154.564413][ T8084] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.878781][ T8097] hmó3)ó: entered promiscuous mode
[  154.928312][ T8098] pim6reg0: tun_chr_ioctl cmd 1074812118
[  155.151035][ T8119] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  155.442776][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.450153][ T8129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.858921][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.016709][ T8147] smbdirect: ib_dev[syz0] removed
[  156.061253][ T8143] netlink: 'syz.3.586': attribute type 10 has an invalid length.
[  156.095346][ T8143] __nla_validate_parse: 3 callbacks suppressed
[  156.095365][ T8143] netlink: 228 bytes leftover after parsing attributes in process `syz.3.586'.
[  156.220315][ T8154] netlink: 'syz.2.587': attribute type 3 has an invalid length.
[  156.571539][ T8160] syzkaller0: entered promiscuous mode
[  156.598937][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'.
[  156.813708][ T5768] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  157.291645][ T8203] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.594'.
[  157.773456][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.812028][ T8194] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  158.821718][ T8194] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  158.831540][ T8194] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  158.884908][ T8203] netdevsim netdevsim4: Direct firmware load for  failed with error -2
[  158.904003][ T8203] netdevsim netdevsim4: Falling back to sysfs fallback for: 
[  159.046897][ T8206] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  159.059722][ T8211] ip6tnl0: Caught tx_queue_len zero misconfig
[  159.955161][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'.
[  160.000528][ T8261] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[  160.080852][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'.
[  160.112424][ T8261] bond1: entered promiscuous mode
[  160.118525][ T8261] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.206352][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'.
[  160.237443][ T8276] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[  160.311267][ T8276] 8021q: adding VLAN 0 to HW filter on device bond3
[  160.317957][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'.
[  160.343914][ T8279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'.
[  160.461297][ T8269] bond3: (slave ip6gretap1): making interface the new active one
[  160.498518][ T8269] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  160.652402][ T8280] bond1: (slave bridge2): making interface the new active one
[  160.682264][ T8280] bridge2: entered promiscuous mode
[  160.716138][ T8280] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  160.843027][ T8294] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  161.991212][ T8331] netlink: 'syz.3.621': attribute type 14 has an invalid length.
[  162.114450][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'.
[  162.217465][ T8338] žÿ: renamed from team_slave_1
[  162.308289][ T8336] syzkaller1: entered promiscuous mode
[  162.321650][ T8336] syzkaller1: entered allmulticast mode
[  162.534112][ T8356] netlink: 'syz.3.627': attribute type 1 has an invalid length.
[  162.599531][ T8356] netlink: 'syz.3.627': attribute type 1 has an invalid length.
[  163.027110][ T8377] netlink: 'syz.2.631': attribute type 3 has an invalid length.
[  163.044972][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'.
[  163.341935][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'.
[  164.554463][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'.
[  164.662470][ T8450] syzkaller1: entered promiscuous mode
[  164.683269][ T8450] syzkaller1: entered allmulticast mode
[  164.741112][ T8446] netlink: 'syz.1.638': attribute type 1 has an invalid length.
[  165.001071][ T8468] syz.3.642: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  165.052164][ T8469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'.
[  165.079773][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.3.642 Not tainted syzkaller #0 PREEMPT(full) 
[  165.079803][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  165.079816][ T8468] Call Trace:
[  165.079824][ T8468]  <TASK>
[  165.079833][ T8468]  dump_stack_lvl+0xe8/0x150
[  165.079877][ T8468]  warn_alloc+0x249/0x340
[  165.079912][ T8468]  ? stack_trace_save+0xa9/0x100
[  165.079949][ T8468]  ? __pfx_warn_alloc+0x10/0x10
[  165.079998][ T8468]  ? kasan_save_track+0x4f/0x80
[  165.080028][ T8468]  ? kasan_save_track+0x3e/0x80
[  165.080056][ T8468]  ? __kasan_kmalloc+0x93/0xb0
[  165.080085][ T8468]  ? __kmalloc_cache_noprof+0x31c/0x660
[  165.080114][ T8468]  ? xskq_create+0x56/0x170
[  165.080146][ T8468]  ? xsk_setsockopt+0x54c/0x990
[  165.080177][ T8468]  ? do_sock_setsockopt+0x17c/0x1b0
[  165.080199][ T8468]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  165.080220][ T8468]  ? do_syscall_64+0x174/0x580
[  165.080248][ T8468]  __vmalloc_node_range_noprof+0x132/0x1750
[  165.080313][ T8468]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  165.080351][ T8468]  ? __kasan_kmalloc+0x93/0xb0
[  165.080389][ T8468]  vmalloc_user_noprof+0xad/0xe0
[  165.080420][ T8468]  ? xskq_create+0xbf/0x170
[  165.080453][ T8468]  xskq_create+0xbf/0x170
[  165.080490][ T8468]  xsk_init_queue+0x8a/0xe0
[  165.080525][ T8468]  xsk_setsockopt+0x54c/0x990
[  165.080559][ T8468]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.080590][ T8468]  ? __pfx_aa_sk_perm+0x10/0x10
[  165.080624][ T8468]  ? aa_sock_opt_perm+0xff/0x1a0
[  165.080659][ T8468]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  165.080689][ T8468]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.080721][ T8468]  do_sock_setsockopt+0x17c/0x1b0
[  165.080749][ T8468]  __x64_sys_setsockopt+0x13d/0x1b0
[  165.080776][ T8468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.080800][ T8468]  do_syscall_64+0x174/0x580
[  165.080822][ T8468]  ? trace_irq_disable+0x3b/0x140
[  165.080854][ T8468]  ? clear_bhb_loop+0x40/0x90
[  165.080881][ T8468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.080902][ T8468] RIP: 0033:0x7f008df9ce59
[  165.080933][ T8468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.080950][ T8468] RSP: 002b:00007f008eecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  165.080979][ T8468] RAX: ffffffffffffffda RBX: 00007f008e215fa0 RCX: 00007f008df9ce59
[  165.080995][ T8468] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  165.081008][ T8468] RBP: 00007f008e032d6f R08: 0000000000000004 R09: 0000000000000000
[  165.081021][ T8468] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.081034][ T8468] R13: 00007f008e216038 R14: 00007f008e215fa0 R15: 00007fff75d1f2b8
[  165.081069][ T8468]  </TASK>
[  165.081329][ T8468] Mem-Info:
[  165.384864][ T8468] active_anon:5758 inactive_anon:0 isolated_anon:0
[  165.384864][ T8468]  active_file:3154 inactive_file:39986 isolated_file:0
[  165.384864][ T8468]  unevictable:769 dirty:180 writeback:0
[  165.384864][ T8468]  slab_reclaimable:10214 slab_unreclaimable:97165
[  165.384864][ T8468]  mapped:30549 shmem:1286 pagetables:1280
[  165.384864][ T8468]  sec_pagetables:0 bounce:0
[  165.384864][ T8468]  kernel_misc_reclaimable:0
[  165.384864][ T8468]  free:1328103 free_pcp:12492 free_cma:0
[  165.504281][ T8468] Node 0 active_anon:23132kB inactive_anon:0kB active_file:12616kB inactive_file:159740kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:124196kB dirty:720kB writeback:0kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13004kB pagetables:4964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  165.562111][ T8468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  165.621123][ T8459] vxcan0: entered allmulticast mode
[  165.646834][ T8468] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  165.695505][ T5651] Bluetooth: hci4: command 0x0405 tx timeout
[  165.707449][ T8468] lowmem_reserve[]: 0 2492 2493 2493 2493
[  165.727225][ T8468] Node 0 DMA32 free:1350392kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23332kB inactive_anon:0kB active_file:12616kB inactive_file:159740kB unevictable:1540kB writepending:720kB zspages:0kB present:3129332kB managed:2552556kB mlocked:4kB bounce:0kB free_pcp:49620kB local_pcp:20860kB free_cma:0kB
[  165.792430][ T8468] lowmem_reserve[]: 0 0 0 0 0
[  165.807072][ T8468] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[  165.842724][ T8468] lowmem_reserve[]: 0 0 0 0 0
[  165.855131][ T8468] Node 1 Normal free:3947404kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  165.907116][ T8468] lowmem_reserve[]: 0 0 0 0 0
[  165.912301][ T8468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  165.962138][ T8468] Node 0 DMA32: 4090*4kB (UME) 2126*8kB (UM) 870*16kB (UME) 591*32kB (UME) 170*64kB (UME) 61*128kB (UME) 30*256kB (UME) 13*512kB (U) 9*1024kB (UM) 4*2048kB (UE) 302*4096kB (M) = 1353624kB
[  166.057803][ T8468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  166.090792][ T8468] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 12*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947404kB
[  166.128845][ T8468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  166.145072][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.155238][ T8468] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  166.166412][ T8489] bridge0: port 3(vlan3) entered blocking state
[  166.172843][ T8489] bridge0: port 3(vlan3) entered forwarding state
[  166.181162][ T8468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  166.200914][ T8468] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  166.217134][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.226757][ T8468] 44422 total pagecache pages
[  166.245802][ T8468] 0 pages in swap cache
[  166.256296][ T8468] Free swap  = 124996kB
[  166.269395][ T8468] Total swap = 124996kB
[  166.279189][   T57] bridge5: port 2(veth0_to_bond) entered blocking state
[  166.286331][   T57] bridge5: port 2(veth0_to_bond) entered forwarding state
[  166.295988][ T8468] 2097051 pages RAM
[  166.314715][ T8468] 0 pages HighMem/MovableOnly
[  166.334970][ T8468] 427129 pages reserved
[  166.344204][ T8468] 0 pages cma reserved
[  166.348738][   T57] bridge5: port 1(veth3) entered blocking state
[  166.355332][   T57] bridge5: port 1(veth3) entered forwarding state
[  166.399477][   T57] bridge5: port 3(veth5) entered blocking state
[  166.407333][   T57] bridge5: port 3(veth5) entered forwarding state
[  166.612805][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.649'.
[  166.630418][ T8519] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  166.867985][ T8528] netlink: 'syz.2.652': attribute type 10 has an invalid length.
[  166.876764][ T8528] netlink: 228 bytes leftover after parsing attributes in process `syz.2.652'.
[  166.886585][ T8529] netlink: 'syz.2.652': attribute type 10 has an invalid length.
[  166.897476][ T8529] netlink: 228 bytes leftover after parsing attributes in process `syz.2.652'.
[  166.934982][ T8528] geneve2: entered promiscuous mode
[  166.956826][   T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53840 - 0
[  166.973894][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.978222][   T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53840 - 0
[  167.006326][   T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53840 - 0
[  167.029187][   T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53840 - 0
[  167.385707][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'.
[  167.407970][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'.
[  167.430663][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  167.599667][ T8550] netlink: 128 bytes leftover after parsing attributes in process `syz.2.654'.
[  168.129020][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.659'.
[  168.355187][ T8579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.379601][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'.
[  168.417878][ T8574] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  168.432218][ T8574] netlink: 128 bytes leftover after parsing attributes in process `syz.1.661'.
[  168.480684][ T8581] tipc: Disabling bearer <eth:syzkaller0>
[  168.523372][ T8586] netlink: 48 bytes leftover after parsing attributes in process `syz.2.664'.
[  168.621864][ T8593] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  168.629833][ T8593] netlink: 216 bytes leftover after parsing attributes in process `syz.1.666'.
[  168.680736][   T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd3
[  168.684178][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.858881][ T8594] netlink: 'syz.0.665': attribute type 1 has an invalid length.
[  168.889915][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'.
[  168.965160][ T8609] netlink: 'syz.4.671': attribute type 5 has an invalid length.
[  169.415637][ T8588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  169.674355][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.730850][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.772803][ T8629] netlink: 'syz.1.676': attribute type 58 has an invalid length.
[  170.734554][ T8659] gretap0: entered promiscuous mode
[  170.916187][ T8675] openvswitch: netlink: Key type 12309 is out of range max 32
[  170.936577][ T8659] 8021q: adding VLAN 0 to HW filter on device team0
[  171.075673][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.367218][ T8688] netlink: 'syz.4.694': attribute type 21 has an invalid length.
[  171.377034][ T8688] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.380617][ T8659] žÿ: entered promiscuous mode
[  171.391004][ T8688] netlink: 'syz.4.694': attribute type 1 has an invalid length.
[  171.428981][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.494816][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.556922][ T8659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.599633][ T8659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.670138][ T8659] veth1_vlan: left promiscuous mode
[  171.721041][ T8659] veth0_vlan: left promiscuous mode
[  171.754370][ T8659] veth0_vlan: entered promiscuous mode
[  171.811034][ T8659] veth1_vlan: entered promiscuous mode
[  171.837511][ T8659] veth1_macvtap: left promiscuous mode
[  171.846786][ T8659] veth0_macvtap: left promiscuous mode
[  171.854792][ T8659] veth0_macvtap: entered promiscuous mode
[  171.862862][ T8659] veth1_macvtap: entered promiscuous mode
[  171.879372][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  171.888062][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  171.896726][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  171.906701][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  171.967066][ T8659] bond1: left promiscuous mode
[  171.971869][ T8659] bridge2: left promiscuous mode
[  171.994728][ T8667] team0: Port device vxlan2 added
[  172.041468][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.048750][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.060761][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.068179][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.163673][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.283397][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.302546][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.341380][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.398580][ T5747] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  172.835867][   T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  172.874658][ T5747] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  173.067202][ T8742] __nla_validate_parse: 9 callbacks suppressed
[  173.067232][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'.
[  173.113806][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'.
[  173.184933][ T8732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.416340][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'.
[  173.447674][ T8743] nbd: nbd64 already in use
[  173.621504][ T5723] IPVS: starting estimator thread 0...
[  173.743372][ T8755] IPVS: using max 29 ests per chain, 69600 per kthread
[  173.761556][ T5642] udevd[5642]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  173.841090][ T8758] sctp: [Deprecated]: syz.1.708 (pid 8758) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.841090][ T8758] Use struct sctp_sack_info instead
[  173.866389][ T8732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.956100][ T8739] netlink: 68 bytes leftover after parsing attributes in process `syz.2.704'.
[  174.087509][ T8732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.201332][ T8775] netlink: 56 bytes leftover after parsing attributes in process `syz.3.711'.
[  174.242223][ T6280] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  174.280117][ T6280] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  174.404277][ T8732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.574246][ T5768] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  174.640610][ T8770] syzkaller0: entered promiscuous mode
[  174.659358][ T8770] syzkaller0: entered allmulticast mode
[  174.897693][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[  176.637398][   T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.731202][  T161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.826939][ T8818] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'.
[  176.841651][   T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.868361][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  176.919811][   T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.937082][ T8820] syzkaller0: entered promiscuous mode
[  176.968878][ T8820] syzkaller0: entered allmulticast mode
[  177.162167][ T8840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.191999][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'.
[  177.371219][ T8844] team_slave_1: Caught tx_queue_len zero misconfig
[  177.394729][ T8842] tunl0: Caught tx_queue_len zero misconfig
[  177.498840][ T8856] netlink: 3 bytes leftover after parsing attributes in process `syz.2.727'.
[  177.512421][ T8856] 0ªX¹¦À: renamed from batadv0 (while UP)
[  177.521098][ T8856] 0ªX¹¦À: entered allmulticast mode
[  177.527267][ T8856] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  177.629387][ T8860] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 2, id = 0
[  178.333607][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  179.828270][ T8822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.042845][ T8877] __nla_validate_parse: 1 callbacks suppressed
[  180.042864][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'.
[  180.089125][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.733'.
[  180.107231][ T8864] netlink: 'syz.2.732': attribute type 13 has an invalid length.
[  180.337940][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  180.362190][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'.
[  180.407578][ T8895] bond3: Removing last arp target with arp_interval on
[  180.990232][ T5653] Bluetooth: hci4: link tx timeout
[  180.997642][ T5653] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.057126][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  181.094189][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'.
[  181.432038][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  181.653605][ T8938] syzkaller0: entered promiscuous mode
[  181.676320][ T8938] syzkaller0: entered allmulticast mode
[  182.871970][ T8966] sctp: [Deprecated]: syz.2.750 (pid 8966) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.871970][ T8966] Use struct sctp_sack_info instead
[  183.055006][ T5651] Bluetooth: hci4: command 0x0405 tx timeout
[  183.092783][ T8973] bond0: entered promiscuous mode
[  183.131762][ T8973] bond_slave_0: entered promiscuous mode
[  183.162746][ T8973] bond_slave_1: entered promiscuous mode
[  183.176128][ T8973] 8021q: adding VLAN 0 to HW filter on device hsr1
[  183.359752][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  183.534140][ T8998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  183.830862][ T9002] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  183.972151][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'.
[  184.029521][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.763'.
[  184.159329][ T9024] netlink: 'syz.0.765': attribute type 11 has an invalid length.
[  184.335945][ T9031] xt_limit: Overflow, try lower: 1024/134217728
[  184.359970][ T9030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.767'.
[  184.467737][  T809] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  184.588118][ T9024] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  184.612364][ T9024] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  184.690441][ T9027] macsec1: entered allmulticast mode
[  184.714594][ T9027] bond0: entered allmulticast mode
[  184.737639][ T9027] bond_slave_0: entered allmulticast mode
[  184.770022][ T9027] bond_slave_1: entered allmulticast mode
[  184.804931][ T9027] bond_slave_0: entered promiscuous mode
[  184.810832][ T9027] bond_slave_1: entered promiscuous mode
[  184.847365][ T9027] 8021q: adding VLAN 0 to HW filter on device macsec1
[  184.865997][   T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  184.899070][ T9027] bond0: left allmulticast mode
[  184.921982][ T9027] bond_slave_0: left allmulticast mode
[  184.945682][ T9027] bond_slave_1: left allmulticast mode
[  184.958224][ T9042] netlink: 'syz.0.771': attribute type 32 has an invalid length.
[  185.034809][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'.
[  185.070589][ T5740] bond_slave_0: left promiscuous mode
[  185.077188][ T5740] bond_slave_1: left promiscuous mode
[  185.124369][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.772'.
[  185.470327][ T9042] bond2: option coupled_control: invalid value (12)
[  185.485007][ T9042] bond2 (unregistering): Released all slaves
[  185.587740][ T9059] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  185.732090][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[  185.810545][ T9043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.840638][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.910963][ T9073] ieee802154 phy0 wpan0: encryption failed: -126
[  186.020687][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.030851][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.088946][ T9081] xt_HMARK: proto mask must be zero with L3 mode
[  186.098592][ T9085] tipc: Failed to remove unknown binding: 66,0,0/0:3046653134/3046653137
[  186.124221][ T9085] tipc: Failed to remove unknown binding: 66,0,0/0:3046653134/3046653136
[  186.134874][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.142079][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.150043][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.157271][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.168992][ T9085] tipc: Failed to remove unknown binding: 66,0,0/0:3046653134/3046653135
[  186.186335][ T9084] tipc: Failed to remove unknown binding: 66,0,0/0:3046653134/3046653137
[  186.202712][ T9073] bridge0: entered promiscuous mode
[  186.210424][ T9084] tipc: Failed to remove unknown binding: 66,0,0/0:3046653134/3046653136
[  186.220708][ T9086] netlink: 'syz.0.779': attribute type 15 has an invalid length.
[  186.232345][ T9073] bridge0: entered allmulticast mode
[  186.238117][ T9086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'.
[  186.247464][ T9084] tipc: Failed to remove unknown binding: 66,0,0/0:3046653134/3046653135
[  186.288769][ T9083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.302965][ T9079] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.779'.
[  186.573302][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  186.741536][ T9083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.900445][ T9083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.088787][ T9097] syzkaller0: entered promiscuous mode
[  187.102576][ T9097] syzkaller0: entered allmulticast mode
[  187.160998][ T9105] IPv6: sit2: Disabled Multicast RS
[  187.755258][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.788'.
[  189.211461][ T9083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.628470][ T9134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.640247][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.684054][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.729544][   T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.776916][  T161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.002919][ T9144] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.794'.
[  190.052012][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'.
[  190.142001][ T9143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.796'.
[  190.903628][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  190.914991][ T9179] netlink: 224 bytes leftover after parsing attributes in process `syz.0.804'.
[  191.030488][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.805'.
[  191.144739][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'.
[  191.157522][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'.
[  191.167993][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'.
[  191.178615][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'.
[  191.596450][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.811'.
[  192.162142][ T9228] bond4: option primary_reselect: invalid value (6)
[  192.230138][ T9228] bond4 (unregistering): Released all slaves
[  192.518682][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.819'.
[  192.571280][ T9243] gretap0: entered promiscuous mode
[  192.593549][ T9243] gretap0: left promiscuous mode
[  192.655240][ T9246] bond4: Removing last arp target with arp_interval on
[  192.800322][ T9260] netlink: 'syz.4.823': attribute type 1 has an invalid length.
[  192.894862][ T9260] bond4: entered promiscuous mode
[  192.901048][ T9260] 8021q: adding VLAN 0 to HW filter on device bond4
[  192.960676][ T9265] veth0_macvtap: entered allmulticast mode
[  192.980618][ T9265] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  193.182720][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.191816][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.425676][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.441618][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.709678][ T9292] macvtap1: entered allmulticast mode
[  193.728061][   T57] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.758385][   T57] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.823786][   T57] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.862498][   T57] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.053033][ T9313] netlink: 'syz.4.833': attribute type 11 has an invalid length.
[  194.188337][ T9321] sctp: [Deprecated]: syz.2.835 (pid 9321) Use of int in max_burst socket option deprecated.
[  194.188337][ T9321] Use struct sctp_assoc_value instead
[  194.255444][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.702479][ T9275] infiniband syz2: set down
[  194.725661][ T9275] infiniband syz2: added ipvlan0
[  194.758268][ T9275] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  194.784973][ T9275] infiniband syz2: Couldn't open port 1
[  194.823473][ T9275] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  194.863167][ T9275] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  194.906751][ T9275] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  195.048722][ T9357] netlink: 'syz.2.844': attribute type 3 has an invalid length.
[  195.088856][ T9357] bond0: Caught tx_queue_len zero misconfig
[  195.132528][ T9275] RDS/IB: syz2: added
[  195.147154][ T9275] smc: adding ib device syz2 with port count 1
[  195.162057][ T9275] smc:    ib device syz2 port 1 has no pnetid
[  195.540248][ T9369] __nla_validate_parse: 7 callbacks suppressed
[  195.540267][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'.
[  195.596632][ T9369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.849'.
[  195.941319][ T9378] veth7: entered promiscuous mode
[  195.982957][ T9384] syzkaller0: entered promiscuous mode
[  195.995450][ T9384] syzkaller0: entered allmulticast mode
[  196.021837][ T9384] openvswitch: netlink: EtherType 50a is less than min 600
[  196.244265][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.856'.
[  196.275475][ T9399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.856'.
[  196.606407][ T9409] netlink: 'syz.0.859': attribute type 13 has an invalid length.
[  196.665770][ T9414] IPVS: rr: FWM 3 0x00000003 - no destination available
[  196.771038][ T9422] x_tables: duplicate underflow at hook 2
[  196.791083][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.860'.
[  196.870161][ T9413] batadv_slave_1: entered promiscuous mode
[  196.876964][ T9408] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  196.884982][  T809] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  196.909501][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'.
[  196.968250][ T9419] batadv_slave_1: left promiscuous mode
[  197.094247][  T809] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  197.148769][ T9435] ieee802154 phy0 wpan0: encryption failed: -126
[  197.466529][ T9450] syzkaller0: entered promiscuous mode
[  197.478447][ T9450] syzkaller0: entered allmulticast mode
[  198.062636][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'.
[  198.186681][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'.
[  198.258788][ T9465] 8021q: adding VLAN 0 to HW filter on device bond5
[  198.520286][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'.
[  198.532287][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'.
[  200.358778][ T9445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.385762][ T9475] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí
[  200.385762][ T9475] 3ìUH†5rºBnœ�æ
[  200.639119][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'.
[  200.748990][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'.
[  200.859137][ T9493] netlink: set zone limit has 4 unknown bytes
[  201.065016][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  201.193502][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  201.277407][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  202.114130][ T9538] ip6erspan0: entered allmulticast mode
[  202.558247][ T9572] netlink: 'syz.2.904': attribute type 1 has an invalid length.
[  202.574290][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  202.611928][ T9572] bond5: entered promiscuous mode
[  202.617654][ T9572] 8021q: adding VLAN 0 to HW filter on device bond5
[  202.782056][ T9583] ipip0: entered promiscuous mode
[  202.797073][ T9583] ipip0: entered allmulticast mode
[  202.997479][ T9598] vti0: left promiscuous mode
[  203.006072][ T9598] bond3: left promiscuous mode
[  203.015693][ T9598] bond4: left promiscuous mode
[  203.131554][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'.
[  204.112421][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'.
[  204.130343][ T9642] netlink: 92 bytes leftover after parsing attributes in process `syz.4.921'.
[  204.359133][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'.
[  204.392067][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'.
[  204.472264][ T9648] hsr0: entered promiscuous mode
[  204.812704][ T9668] bridge_slave_0: left allmulticast mode
[  204.853702][ T9668] bridge_slave_0: left promiscuous mode
[  204.862170][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.888832][ T9668] bridge_slave_1: left allmulticast mode
[  204.905121][ T9668] bridge_slave_1: left promiscuous mode
[  204.911145][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.924676][ T9668] vlan3: left promiscuous mode
[  204.929618][ T9668] geneve0: left promiscuous mode
[  204.936815][ T9668] geneve0: entered promiscuous mode
[  204.956525][ T9668] veth0_to_bond: left allmulticast mode
[  204.962403][ T9668] veth0_to_bond: left promiscuous mode
[  204.970868][ T9668] bridge5: port 2(veth0_to_bond) entered disabled state
[  204.994759][ T9668] 
: (slave bond_slave_0): Releasing backup interface
[  205.031445][ T9668] 
: (slave bond_slave_1): Releasing backup interface
[  205.067902][ T9668] team0: Port device team_slave_0 removed
[  205.101288][ T9668] team0: Port device team_slave_1 removed
[  205.118741][ T9668] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_0
[  205.139510][ T9668] batman_adv: 
60ªX¹¦À: Removing interface: batadv_slave_0
[  205.153888][ T9668] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_1
[  205.161661][ T9668] batman_adv: 
60ªX¹¦À: Removing interface: batadv_slave_1
[  205.211046][ T9668] bond1: (slave bridge2): Releasing backup interface
[  205.220826][ T9668] bridge2: left promiscuous mode
[  205.227158][ T9668] bridge2: left allmulticast mode
[  205.235711][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  205.252530][ T9668] vlan3: left allmulticast mode
[  205.262707][ T9668] geneve0: left allmulticast mode
[  205.268214][ T9668] bridge0: port 3(vlan3) entered disabled state
[  205.279334][ T9668] geneve0: left promiscuous mode
[  205.285707][ T9668] veth3: left allmulticast mode
[  205.290751][ T9668] veth3: left promiscuous mode
[  205.296028][ T9668] bridge5: port 1(veth3) entered disabled state
[  205.312875][ T9668] veth5: left allmulticast mode
[  205.319727][ T9668] veth5: left promiscuous mode
[  205.325087][ T9668] bridge5: port 3(veth5) entered disabled state
[  205.339472][ T9668] bond3: (slave ip6gretap1): Releasing active interface
[  205.377353][ T9668] team0: Port device vxlan2 removed
[  205.413477][ T5768] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  205.671793][ T9689] __nla_validate_parse: 2 callbacks suppressed
[  205.671809][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'.
[  205.729635][ T9693] netlink: 'syz.1.937': attribute type 1 has an invalid length.
[  205.768024][ T9693] bond5: entered promiscuous mode
[  205.774655][ T9693] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.843412][ T9693] netlink: 'syz.1.937': attribute type 2 has an invalid length.
[  205.920518][ T9693] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.952607][ T9693] bond5: (slave gre2): The slave device specified does not support setting the MAC address
[  205.966015][ T9693] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  205.980238][ T9693] bond5: (slave gre2): making interface the new active one
[  205.988639][ T9693] gre2: entered promiscuous mode
[  205.995863][ T9693] bond5: (slave gre2): Enslaving as an active interface with an up link
[  206.054740][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'.
[  206.149364][ T9707] syzkaller1: entered promiscuous mode
[  206.180308][ T9707] syzkaller1: entered allmulticast mode
[  206.431997][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'.
[  206.450239][ T9724] ip6gre1: entered promiscuous mode
[  206.457255][ T9724] ip6gre1: entered allmulticast mode
[  206.476792][ T9724] netlink: 'syz.4.945': attribute type 16 has an invalid length.
[  206.488155][ T9724] netlink: 'syz.4.945': attribute type 3 has an invalid length.
[  206.496569][ T9724] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.945'.
[  206.704404][ T9736] netlink: 68 bytes leftover after parsing attributes in process `syz.4.946'.
[  206.969477][ T9749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.950'.
[  207.659923][ T9774] geneve2: entered promiscuous mode
[  207.697330][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.718412][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.746286][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.767002][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.904645][ T9789] bond0: Caught tx_queue_len zero misconfig
[  207.927247][ T9785] netlink: 180 bytes leftover after parsing attributes in process `syz.4.962'.
[  207.992861][ T9792] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  208.281074][ T9805] tipc: Started in network mode
[  208.288087][ T9805] tipc: Node identity 7a588b0a96ae, cluster identity 4711
[  208.295909][ T9805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.424364][ T9822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.971'.
[  208.544425][ T9818] vet: renamed from veth0_vlan
[  208.590702][ T9810] tipc: Disabling bearer <eth:syzkaller0>
[  208.846059][ T9835] syzkaller1: entered allmulticast mode
[  208.961524][ T9845] netlink: 'syz.3.974': attribute type 1 has an invalid length.
[  209.165444][ T9845] 8021q: adding VLAN 0 to HW filter on device bond5
[  209.585153][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'.
[  209.585586][ T9880] netlink: 'syz.2.981': attribute type 1 has an invalid length.
[  209.635402][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.980'.
[  209.978447][ T5296] vet: left promiscuous mode
[  210.041326][ T5296] vet: entered promiscuous mode
[  211.040732][ T9933] __nla_validate_parse: 1 callbacks suppressed
[  211.040754][ T9933] netlink: 288 bytes leftover after parsing attributes in process `syz.1.995'.
[  211.171021][ T9944] lo: Caught tx_queue_len zero misconfig
[  211.215856][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.994'.
[  211.637687][ T9968] syzkaller1: entered allmulticast mode
[  211.704348][ T4951] Bluetooth: hci3: command 0x0406 tx timeout
[  211.710485][ T5650] Bluetooth: hci0: command 0x0401 tx timeout
[  211.720096][ T4951] Bluetooth: hci1: command 0x0406 tx timeout
[  211.724361][ T5641] Bluetooth: hci2: command 0x0406 tx timeout
[  211.773235][ T5651] Bluetooth: hci4: command 0x0405 tx timeout
[  212.291527][ T9987] bridge_slave_0: left allmulticast mode
[  212.299866][ T9993] netlink: 'syz.0.1007': attribute type 10 has an invalid length.
[  212.308579][ T9987] bridge_slave_0: left promiscuous mode
[  212.318000][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.446859][ T9987] bridge_slave_1: left allmulticast mode
[  212.452843][ T9987] bridge_slave_1: left promiscuous mode
[  212.460224][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.504586][ T9987] bond0: (slave bond_slave_0): Releasing backup interface
[  212.530895][ T9987] bond0: (slave bond_slave_1): Releasing backup interface
[  212.569968][ T9987] žÿ: left promiscuous mode
[  212.586654][ T9987] team0: Port device 
7
6žÿ removed
[  212.597684][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.606688][ T9987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.621672][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.631492][ T9987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.642797][ T9987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  212.937351][T10008] netlink: 'syz.2.1013': attribute type 32 has an invalid length.
[  212.945497][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  213.002540][T10008] bond6: Setting coupled_control to off (0)
[  213.081630][T10012] syz_tun: entered promiscuous mode
[  213.113528][T10012] team0: Port device syz_tun added
[  213.159712][T10015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1014'.
[  214.131365][T10040] Can't find ip_set type bitmap:ip,mac
[  214.216794][T10047] xt_SECMARK: invalid mode: 4
[  214.355049][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'.
[  214.373757][T10049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1024'.
[  214.420498][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'.
[  216.797810][T10072] netlink: 'syz.0.1029': attribute type 1 has an invalid length.
[  217.082803][T10072] 8021q: adding VLAN 0 to HW filter on device bond2
[  217.569441][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'.
[  218.402189][T10140] syzkaller0: entered promiscuous mode
[  218.424934][T10140] syzkaller0: entered allmulticast mode
[  218.702511][T10150] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1047'.
[  218.757631][T10156] IPv6: Can't replace route, no match found
[  218.790699][T10156] IPv6: Can't replace route, no match found
[  218.819116][T10150] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.828781][T10150] 8021q: adding VLAN 0 to HW filter on device team0
[  218.842912][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.851837][T10158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1049'.
[  218.906417][T10150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.918793][T10150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.936649][T10150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.961871][T10150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  219.029821][T10150] hsr0: left promiscuous mode
[  219.046708][T10150] veth1_macvtap: left promiscuous mode
[  219.070835][T10150] veth0_macvtap: left promiscuous mode
[  219.080037][T10150] veth0_macvtap: entered promiscuous mode
[  219.080543][T10162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1050'.
[  219.091229][T10150] veth1_macvtap: entered promiscuous mode
[  219.135731][T10150] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.144299][T10150] 8021q: adding VLAN 0 to HW filter on device bond2
[  219.172143][T10169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1052'.
[  219.201137][T10150] 8021q: adding VLAN 0 to HW filter on device bond3
[  219.216940][T10150] 8021q: adding VLAN 0 to HW filter on device hsr1
[  219.248062][T10150] 8021q: adding VLAN 0 to HW filter on device eth0
[  219.257262][T10150] 8021q: adding VLAN 0 to HW filter on device eth1
[  219.267502][T10150] 8021q: adding VLAN 0 to HW filter on device eth2
[  219.276945][T10150] 8021q: adding VLAN 0 to HW filter on device eth3
[  219.285612][T10150] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.293651][T10150] bond4: entered allmulticast mode
[  219.299602][T10150] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  219.316062][T10150] 8021q: adding VLAN 0 to HW filter on device bond5
[  219.372806][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.380098][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.417330][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.424614][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.551284][T10164] veth0_macvtap: Caught tx_queue_len zero misconfig
[  219.647629][T10186] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[  219.732815][T10187] netlink: 'syz.4.1057': attribute type 3 has an invalid length.
[  219.753799][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  219.766562][T10187] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1057'.
[  219.846965][T10187] netlink: 'syz.4.1057': attribute type 10 has an invalid length.
[  219.855355][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  219.979361][T10186] bond6: option mode: invalid value (7)
[  220.008254][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'.
[  220.017485][T10186] bond6 (unregistering): Released all slaves
[  220.078012][T10205] netlink: 'syz.2.1058': attribute type 32 has an invalid length.
[  220.132377][T10187] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.140030][T10187] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.185118][T10187] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.192389][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.200021][T10187] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.207257][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.267635][T10187] bridge0: entered promiscuous mode
[  220.292071][T10187] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  220.579413][T10222] sock: sock_set_timeout: `syz.2.1061' (pid 10222) tries to set negative timeout
[  220.631827][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  220.642590][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'.
[  220.736503][T10223] hsr_slave_0: left promiscuous mode
[  220.813287][T10223] hsr_slave_1: left promiscuous mode
[  221.538392][T10245] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.557988][T10251] bond3: Unable to set down delay as MII monitoring is disabled
[  221.861178][   T30] audit: type=1804 audit(1780917146.318:4): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1071" name="/newroot/222/cgroup.controllers" dev="tmpfs" ino=1159 res=1 errno=0
[  221.955267][   T30] audit: type=1800 audit(1780917146.328:5): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1071" name="cgroup.controllers" dev="tmpfs" ino=1159 res=0 errno=0
[  222.804682][T10287] __nla_validate_parse: 3 callbacks suppressed
[  222.804702][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'.
[  222.841153][T10290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'.
[  222.855812][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'.
[  222.986801][T10284] 0ªX¹¦À: left allmulticast mode
[  223.196370][T10300] openvswitch: netlink: Flow key attr not present in new flow.
[  223.320282][T10284] ip6tnl1: left allmulticast mode
[  223.361312][T10284] bond1: left promiscuous mode
[  223.371023][T10284] vlan2: left allmulticast mode
[  223.377705][T10284] bond1: left allmulticast mode
[  223.417123][T10284] geneve2: left promiscuous mode
[  223.427654][T10284] veth7: left promiscuous mode
[  223.436577][T10284] bond5: left promiscuous mode
[  223.443941][T10284] ipip0: left promiscuous mode
[  223.448931][T10284] ipip0: left allmulticast mode
[  223.597794][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'.
[  223.625972][ T1170] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.645133][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'.
[  223.664373][ T1170] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.696632][ T1170] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 53840 - 0
[  223.722596][ T1170] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.742021][ T1170] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.765059][ T1170] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 53840 - 0
[  223.780442][ T1170] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.791284][ T1170] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.808337][ T1170] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 53840 - 0
[  223.820630][ T1170] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.842493][ T1170] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.862766][ T1170] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 53840 - 0
[  224.181789][ T1170] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.222496][ T1170] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.265582][ T1170] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.284137][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'.
[  224.296940][ T1170] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.361761][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1088'.
[  224.375465][T10329] netlink: 'syz.4.1087': attribute type 13 has an invalid length.
[  224.387431][T10329] netlink: 'syz.4.1087': attribute type 17 has an invalid length.
[  224.487298][T10337] netlink: 'syz.4.1087': attribute type 13 has an invalid length.
[  224.599063][T10347] netlink: 'syz.0.1090': attribute type 2 has an invalid length.
[  224.621070][T10339] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1090'.
[  224.631108][T10329] vti0: left allmulticast mode
[  224.643267][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  224.750174][T10329] macvtap1: left allmulticast mode
[  224.755600][T10329] bond4: left allmulticast mode
[  224.769963][T10329] ip6gre1: left promiscuous mode
[  224.776855][T10329] ip6gre1: left allmulticast mode
[  224.784437][T10329] geneve2: left promiscuous mode
[  224.918009][T10345] syzkaller0: Caught tx_queue_len zero misconfig
[  224.940759][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'.
[  225.877161][T10376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.999253][T10376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.165405][T10392] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  226.182614][T10393] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  226.239648][T10376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.275874][T10392] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  226.281835][T10393] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  226.415808][T10376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.988955][ T6280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.077927][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.250843][   T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.406141][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.486595][T10453] ip6gre1: entered allmulticast mode
[  227.837906][T10478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1111'.
[  228.134654][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'.
[  228.143874][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1110'.
[  228.151052][T10478] bond6: Removing last ns target with arp_interval on
[  228.550533][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'.
[  228.626690][T10505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1120'.
[  228.750421][T10513] netlink: 'syz.2.1122': attribute type 29 has an invalid length.
[  228.767086][T10513] netlink: 'syz.2.1122': attribute type 10 has an invalid length.
[  228.783278][T10516] netlink: 'syz.2.1122': attribute type 10 has an invalid length.
[  228.818917][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1122'.
[  228.837075][T10516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1122'.
[  228.876375][T10513] team0: entered promiscuous mode
[  228.907356][T10513] team0: entered allmulticast mode
[  228.924666][T10513] 8021q: adding VLAN 0 to HW filter on device team0
[  228.977645][T10513] bridge0: port 1(team0) entered blocking state
[  228.991423][T10513] bridge0: port 1(team0) entered disabled state
[  229.251977][T10531] geneve3: entered promiscuous mode
[  229.695817][T10551] netlink: 'syz.2.1132': attribute type 8 has an invalid length.
[  229.922848][T10565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1136'.
[  230.054146][T10549] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  230.090860][T10549] syzkaller0: entered promiscuous mode
[  230.115396][T10549] syzkaller0: entered allmulticast mode
[  230.171670][T10542] ip6erspan1: entered allmulticast mode
[  230.320410][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'.
[  230.379786][T10578] ip6gre2: entered promiscuous mode
[  230.400454][T10578] ip6gre2: entered allmulticast mode
[  230.746794][T10598] x_tables: duplicate underflow at hook 3
[  230.874601][T10598] syzkaller0: entered promiscuous mode
[  230.946203][T10598] syzkaller0: entered allmulticast mode
[  231.088269][T10620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.168725][T10618] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1141'.
[  231.176477][T10598] netlink: 'syz.4.1141': attribute type 1 has an invalid length.
[  231.194565][T10621] tipc: Started in network mode
[  231.200744][T10621] tipc: Node identity b2056702e17e, cluster identity 4711
[  231.231708][T10621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.265817][T10617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.342362][T10619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.516198][T10638] syzkaller1: entered promiscuous mode
[  231.521743][T10638] syzkaller1: entered allmulticast mode
[  231.686502][T10643] openvswitch: netlink: IPv6 tunnel dst address is zero
[  231.989009][T10656] syzkaller0: entered promiscuous mode
[  232.007058][T10656] syzkaller0: entered allmulticast mode
[  232.311627][T10667] syzkaller0: entered promiscuous mode
[  232.317844][T10667] syzkaller0: entered allmulticast mode
[  232.343425][ T9291] tipc: Node number set to 1400596226
[  232.633422][T10674] openvswitch: netlink: IPv4 tunnel dst address is zero
[  232.959673][T10687] netlink: 'syz.1.1163': attribute type 1 has an invalid length.
[  233.004328][T10687] bond6: entered promiscuous mode
[  233.010030][T10687] 8021q: adding VLAN 0 to HW filter on device bond6
[  233.067627][T10693] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  233.229093][T10698] netlink: 'syz.3.1166': attribute type 1 has an invalid length.
[  233.294187][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  235.575132][T10698] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  235.579120][T10703] netlink: 'syz.4.1167': attribute type 12 has an invalid length.
[  235.639990][T10718] vet: renamed from veth0_vlan (while UP)
[  235.698304][T10722] netlink: 'syz.4.1172': attribute type 15 has an invalid length.
[  235.907949][T10727] vlan1: entered allmulticast mode
[  235.922027][T10727] vet: entered allmulticast mode
[  236.485862][T10753] __nla_validate_parse: 2 callbacks suppressed
[  236.485883][T10753] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1182'.
[  236.536375][T10753] netlink: 'syz.2.1182': attribute type 1 has an invalid length.
[  236.552437][T10753] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1182'.
[  236.580572][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'.
[  236.842621][T10774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1187'.
[  237.315591][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'.
[  238.046431][T10826] netlink: 'syz.4.1198': attribute type 1 has an invalid length.
[  238.243430][T10830] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.251065][T10830] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.301710][T10830] bond0: (slave bridge0): Releasing backup interface
[  238.338838][T10830] bridge0: left promiscuous mode
[  238.359613][T10830] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  238.394582][T10826] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  238.621317][T10841] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1200'.
[  238.692025][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1200'.
[  239.601825][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'.
[  240.036325][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'.
[  240.267402][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'.
[  241.644732][T10955] netlink: 'syz.0.1234': attribute type 1 has an invalid length.
[  241.872615][T10963] __nla_validate_parse: 3 callbacks suppressed
[  241.872637][T10963] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1238'.
[  241.969915][T10971] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1240'.
[  242.154821][T10971] batman_adv: batadv0: Adding interface: dummy0
[  242.177302][T10971] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.258688][T10971] batman_adv: batadv0: Interface activated: dummy0
[  242.378386][T10976] batadv0: mtu less than device minimum
[  242.400809][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.415080][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.427115][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.439139][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.451197][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.463291][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.475336][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.487404][T10976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  242.610242][T10984] bond7: entered allmulticast mode
[  242.619175][T10984] 8021q: adding VLAN 0 to HW filter on device bond7
[  242.790648][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'.
[  243.099321][T11023] syz_tun: left promiscuous mode
[  243.140155][T11023] team0: Port device syz_tun removed
[  243.172665][T11017] netlink: 'syz.0.1250': attribute type 10 has an invalid length.
[  243.269325][T11023] bond1: (slave bridge2): Releasing backup interface
[  243.291119][  T810] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  243.703633][  T810] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  243.887130][T11060] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1260'.
[  243.926117][T11062] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  244.300229][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1264'.
[  244.357224][T11074] netlink: 'syz.0.1265': attribute type 2 has an invalid length.
[  244.412492][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[  244.551805][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'.
[  244.587065][T11085] ip6tnl0: Caught tx_queue_len zero misconfig
[  244.609880][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'.
[  244.726723][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'.
[  245.032475][T11110] syzkaller1: entered promiscuous mode
[  245.051008][T11110] syzkaller1: entered allmulticast mode
[  245.269367][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'.
[  245.305617][T11127] netlink: 'syz.1.1281': attribute type 1 has an invalid length.
[  245.547169][T11135] netlink: 'syz.4.1283': attribute type 1 has an invalid length.
[  245.566044][T11130] bridge6: the hash_elasticity option has been deprecated and is always 16
[  245.576721][T11130] bridge6: entered allmulticast mode
[  245.594697][T11141] ipt_ECN: cannot use operation on non-tcp rule
[  245.723420][T11144] syz.2.1287 (11144) used obsolete PPPIOCDETACH ioctl
[  245.775717][T11146] Bluetooth: MGMT ver 1.23
[  246.030062][T11159] netlink: 'syz.3.1290': attribute type 1 has an invalid length.
[  246.113335][T11159] 8021q: adding VLAN 0 to HW filter on device bond7
[  246.167330][T11165] bond7: (slave gretap2): making interface the new active one
[  246.180025][T11165] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  246.522162][T11181] sctp: [Deprecated]: syz.3.1293 (pid 11181) Use of int in maxseg socket option.
[  246.522162][T11181] Use struct sctp_assoc_value instead
[  246.907954][T11204] __nla_validate_parse: 37 callbacks suppressed
[  246.907976][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1299'.
[  246.947344][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'.
[  247.568798][T11234] sctp: [Deprecated]: syz.4.1306 (pid 11234) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.568798][T11234] Use struct sctp_sack_info instead
[  248.023667][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'.
[  248.023801][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'.
[  248.053282][T11252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.208324][T11252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.231235][T11301] xt_hashlimit: overflow, try lower: 9/9223372036854775808
[  249.346254][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'.
[  250.026474][T11348] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1332'.
[  250.082747][T11348] team0: Port device dummy0 removed
[  250.383522][T11364] netlink: 'syz.0.1339': attribute type 4 has an invalid length.
[  250.525798][T11368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1340'.
[  250.537387][T11368] ip6tnl0: Caught tx_queue_len zero misconfig
[  250.981736][T11388] netlink: 'syz.2.1345': attribute type 1 has an invalid length.
[  251.010890][T11388] 8021q: adding VLAN 0 to HW filter on device bond7
[  251.020957][T11388] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6)
[  251.136429][T11393] lo: Caught tx_queue_len zero misconfig
[  251.142293][T11393] netlink: 'syz.2.1347': attribute type 8 has an invalid length.
[  251.151071][T11393] sch_fq: defrate 0 ignored.
[  252.726676][T11329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  253.077106][T11422] pim6reg1: entered promiscuous mode
[  253.108418][T11422] pim6reg1: entered allmulticast mode
[  253.451693][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'.
[  253.476667][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'.
[  253.531758][T11439] team0: Caught tx_queue_len zero misconfig
[  253.583369][T11439] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1360'.
[  253.611389][T11439] 0ªX¹¦À: renamed from batadv0 (while UP)
[  253.628762][T11439] 0ªX¹¦À: entered allmulticast mode
[  253.641163][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'.
[  253.651128][T11439] net_ratelimit: 11 callbacks suppressed
[  253.651148][T11439] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  253.757279][T11449] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  253.796820][T11450] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  253.820340][T11455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1365'.
[  254.140519][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'.
[  254.170248][T11476] netlink: 'syz.4.1369': attribute type 1 has an invalid length.
[  254.187293][T11473] vlan2: entered allmulticast mode
[  254.192727][T11473] macvtap0: entered allmulticast mode
[  254.198488][T11473] veth0_macvtap: entered allmulticast mode
[  254.213537][T11476] netlink: 'syz.4.1369': attribute type 1 has an invalid length.
[  254.443531][T11485] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1372'.
[  254.470448][T11485] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1372'.
[  254.491324][T11485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1372'.
[  254.583674][T11496] netlink: 800 bytes leftover after parsing attributes in process `syz.1.1374'.
[  254.948574][T11505] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  255.183998][T11515] ip6gre1: entered promiscuous mode
[  255.205035][T11515] ip6gre1: entered allmulticast mode
[  255.287341][T11509] macvtap1: entered allmulticast mode
[  255.311591][T11509] dummy0: entered allmulticast mode
[  255.356311][T11509] dummy0: left allmulticast mode
[  255.673821][ T3368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.706790][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.714806][ T3368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.864783][T11531] netlink: 'syz.2.1381': attribute type 27 has an invalid length.
[  255.929218][T11525] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  255.933807][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  256.402557][T11559] xfrm0: Caught tx_queue_len zero misconfig
[  256.493990][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  257.329570][T11584] netlink: 'syz.1.1398': attribute type 2 has an invalid length.
[  257.524067][T11593] netlink: 'syz.3.1400': attribute type 12 has an invalid length.
[  257.545152][T11593] netlink: 'syz.3.1400': attribute type 11 has an invalid length.
[  258.659901][T11652] __nla_validate_parse: 7 callbacks suppressed
[  258.659923][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'.
[  258.977200][T11660] syzkaller0: entered promiscuous mode
[  259.003721][T11660] syzkaller0: entered allmulticast mode
[  259.031402][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'.
[  259.075966][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  259.199231][T11669] netlink: 'syz.0.1422': attribute type 1 has an invalid length.
[  259.501143][T11686] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  259.526071][T11686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.693370][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  259.731197][T11665] xt_bpf: check failed: parse error
[  260.095151][T11711] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1433'.
[  260.241788][T11715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1434'.
[  260.333463][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.365455][T11722] netlink: 'syz.2.1436': attribute type 10 has an invalid length.
[  260.391701][T11722] bridge0: port 2(netdevsim1) entered blocking state
[  260.411523][T11722] bridge0: port 2(netdevsim1) entered disabled state
[  260.446464][T11722] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  260.472808][T11722] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  260.506354][T11726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1437'.
[  260.600878][T11730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'.
[  260.617566][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'.
[  260.627003][T11729] netlink: 'syz.1.1438': attribute type 2 has an invalid length.
[  260.635209][T11729] netlink: 'syz.1.1438': attribute type 1 has an invalid length.
[  260.666254][T11729] netlink: 'syz.1.1438': attribute type 1 has an invalid length.
[  260.679298][T11726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.692692][T11730] netlink: 'syz.1.1438': attribute type 2 has an invalid length.
[  260.954471][T11726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.240004][T11726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.373193][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.571892][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'.
[  261.586810][T11726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.642069][T11779] validate_nla: 2 callbacks suppressed
[  261.642089][T11779] netlink: 'syz.2.1449': attribute type 2 has an invalid length.
[  261.685648][T11780] netlink: 'syz.3.1451': attribute type 1 has an invalid length.
[  261.799652][ T6278] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.845886][   T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.897448][   T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.962888][  T153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.314336][   T50] block nbd0: Receive control failed (result -32)
[  262.413183][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.510518][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'.
[  262.580242][T11806] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  262.915403][T11828] netlink: 'syz.2.1461': attribute type 1 has an invalid length.
[  262.925226][T11829] netlink: 'syz.1.1462': attribute type 1 has an invalid length.
[  263.079611][T11828] bond8: entered promiscuous mode
[  263.116513][T11828] 8021q: adding VLAN 0 to HW filter on device bond8
[  263.252995][T11850] netlink: 'syz.3.1464': attribute type 1 has an invalid length.
[  263.279517][T11829] 8021q: adding VLAN 0 to HW filter on device bond8
[  263.333370][T11836] bond8: (slave veth0_to_bond): making interface the new active one
[  263.360020][T11836] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  263.371756][T11837] vlan0: entered promiscuous mode
[  263.390241][T11852] macsec0: entered promiscuous mode
[  263.436851][T11843] bond8: entered promiscuous mode
[  263.449914][T11843] veth0_to_bond: entered promiscuous mode
[  263.455891][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.474890][T11843] bond8: entered allmulticast mode
[  263.480383][T11843] veth0_to_bond: entered allmulticast mode
[  263.488653][T11842] netlink: 'syz.0.1465': attribute type 12 has an invalid length.
[  263.517691][T11828] bond8: (slave bridge7): making interface the new active one
[  263.525749][T11828] bridge7: entered promiscuous mode
[  263.533536][T11828] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  263.556491][T11852] veth1_macvtap: left promiscuous mode
[  263.594005][T11852] macsec0 (unregistering): left promiscuous mode
[  263.742541][T11855] bond8 (unregistering): Released all slaves
[  263.811225][T11865] C: renamed from veth1_to_team
[  263.827527][T11865] netlink: 'syz.2.1468': attribute type 4 has an invalid length.
[  263.840551][T11865] __nla_validate_parse: 5 callbacks suppressed
[  263.840569][T11865] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1468'.
[  263.857276][T11865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  263.980931][T11872] netlink: 'syz.2.1469': attribute type 10 has an invalid length.
[  263.987906][T11870] syzkaller0: entered promiscuous mode
[  263.994780][T11870] syzkaller0: entered allmulticast mode
[  264.497741][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.543154][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.952138][T11884] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  266.114238][T11887] Cannot find del_set index 4 as target
[  266.151907][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'.
[  266.168681][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'.
[  266.209335][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1475'.
[  266.583133][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.824012][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'.
[  267.598387][T11934] sctp: [Deprecated]: syz.0.1489 (pid 11934) Use of struct sctp_assoc_value in delayed_ack socket option.
[  267.598387][T11934] Use struct sctp_sack_info instead
[  267.623205][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.853255][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  268.162255][T11942] syzkaller0: entered promiscuous mode
[  268.176719][T11942] syzkaller0: entered allmulticast mode
[  268.653172][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.851543][T11977] sctp: [Deprecated]: syz.4.1497 (pid 11977) Use of int in max_burst socket option deprecated.
[  268.851543][T11977] Use struct sctp_assoc_value instead
[  269.703216][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.735129][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.307169][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'.
[  271.399237][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'.
[  271.439794][T12005] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1505'.
[  271.670118][T12004] tipc: Resetting bearer <eth:syzkaller0>
[  271.683784][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.734369][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.793460][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.823166][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.869681][   T48] smc: removing ib device syz2
[  272.090846][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1508'.
[  272.099969][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.149836][   T48] smbdirect: ib_dev[syz2] removed
[  272.279878][T12021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.623152][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.801802][T12043] netlink: 'syz.1.1515': attribute type 9 has an invalid length.
[  272.821543][T12043] netlink: 186364 bytes leftover after parsing attributes in process `syz.1.1515'.
[  272.887595][T12038] macvtap1: entered promiscuous mode
[  272.894920][T12038] bridge0: entered promiscuous mode
[  272.901446][T12038] bridge0: port 3(macvtap1) entered blocking state
[  272.912977][T12038] bridge0: port 3(macvtap1) entered disabled state
[  272.931653][T12038] macvtap1: entered allmulticast mode
[  272.944979][T12038] bridge0: entered allmulticast mode
[  272.970003][T12038] macvtap1: left allmulticast mode
[  272.981200][T12038] bridge0: left allmulticast mode
[  273.000112][T12038] bridge0: left promiscuous mode
[  273.316569][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'.
[  274.244468][   T30] audit: type=1107 audit(1780917198.708:6): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  274.329328][T12097] netlink: 'syz.1.1526': attribute type 10 has an invalid length.
[  274.860486][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'.
[  274.919378][T12116] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  274.946857][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  274.968738][T12116] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1530'.
[  275.034395][T12116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1530'.
[  275.063667][T12116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1530'.
[  275.985091][T12144] syzkaller0: entered promiscuous mode
[  275.998974][T12144] syzkaller0: entered allmulticast mode
[  276.188502][T12161] netlink: 'syz.1.1537': attribute type 1 has an invalid length.
[  276.523565][T12155] netlink: 'syz.3.1536': attribute type 1 has an invalid length.
[  276.900661][T12196] syzkaller1: entered promiscuous mode
[  276.936393][T12196] syzkaller1: entered allmulticast mode
[  276.992936][T12201] __nla_validate_parse: 152 callbacks suppressed
[  277.001290][T12201] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1545'.
[  277.157940][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'.
[  277.214646][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  277.231736][T12211] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1548'.
[  277.485911][T12221] netlink: 'syz.2.1549': attribute type 12 has an invalid length.
[  277.722804][T12232] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  277.805145][T12232] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  278.131583][T12250] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1555'.
[  278.178456][T12250] netlink: 'syz.4.1555': attribute type 3 has an invalid length.
[  278.392394][T12264] xt_CT: You must specify a L4 protocol and not use inversions on it
[  278.512687][T12274] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1560'.
[  278.806248][T12287] lo speed is unknown, defaulting to 1000
[  278.814739][T12290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.824974][T12287] lo speed is unknown, defaulting to 1000
[  278.837539][T12287] lo speed is unknown, defaulting to 1000
[  278.858585][T12287] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  278.928469][T12287] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  279.020476][T12287] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  279.129685][T12287] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  279.235899][T12305] netlink: 'syz.4.1568': attribute type 4 has an invalid length.
[  279.263859][T12305] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1568'.
[  279.290071][T12287] lo speed is unknown, defaulting to 1000
[  279.329985][T12287] lo speed is unknown, defaulting to 1000
[  279.404853][T12287] lo speed is unknown, defaulting to 1000
[  279.439007][T12287] lo speed is unknown, defaulting to 1000
[  279.476339][T12287] lo speed is unknown, defaulting to 1000
[  279.509520][T12314] ip6erspan2: entered allmulticast mode
[  279.845566][T12335] netlink: 'syz.3.1574': attribute type 1 has an invalid length.
[  279.930289][T12332] bond6: option tlb_dynamic_lb: invalid value (5)
[  279.960810][T12332] bond6 (unregistering): Released all slaves
[  280.083854][T12335] 8021q: adding VLAN 0 to HW filter on device bond8
[  280.095754][T12349] gre0: Caught tx_queue_len zero misconfig
[  280.181357][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.516849][T12376] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1584'.
[  280.597130][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'.
[  280.649788][T12381] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  280.769839][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.786281][T12390] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1588'.
[  280.798531][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.164562][T12410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.231218][T12411] syzkaller1: entered promiscuous mode
[  281.238217][T12411] syzkaller1: entered allmulticast mode
[  282.042071][T12445] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.143365][T12445] tipc: Resetting bearer <eth:syzkaller0>
[  282.350379][T12473] TCP: TCP_TX_DELAY enabled
[  282.432328][T12478] __nla_validate_parse: 2 callbacks suppressed
[  282.432351][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'.
[  282.532416][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1610'.
[  282.628610][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1610'.
[  282.657807][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'.
[  283.008979][T12513] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1616'.
[  283.031508][T12517] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1616'.
[  283.080604][T12513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  283.114821][T12516] lo speed is unknown, defaulting to 1000
[  283.130167][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'.
[  283.157376][T12513] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1616'.
[  283.178254][T12513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'.
[  283.201956][T12513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'.
[  283.410236][T12530] netlink: 'syz.4.1619': attribute type 30 has an invalid length.
[  283.492260][T12532] netlink: 'syz.4.1619': attribute type 30 has an invalid length.
[  283.930656][T12559] netlink: 'syz.2.1624': attribute type 5 has an invalid length.
[  283.992039][T12560] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  284.388689][T12587] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:52771
[  284.476595][T12583] 8021q: adding VLAN 0 to HW filter on device bond9
[  284.565623][T12594] bond9: entered allmulticast mode
[  284.989130][T12610] lo speed is unknown, defaulting to 1000
[  285.133297][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  285.697059][T12655] netlink: 'syz.3.1645': attribute type 1 has an invalid length.
[  285.726087][T12655] netlink: 'syz.3.1645': attribute type 93 has an invalid length.
[  286.627651][T12704] netlink: 'syz.0.1655': attribute type 4 has an invalid length.
[  286.736615][T12711] netlink: 'syz.0.1655': attribute type 4 has an invalid length.
[  286.827298][T12713] 
: renamed from bond0 (while UP)
[  286.925198][T12710] team1: entered promiscuous mode
[  286.930420][T12710] team1: entered allmulticast mode
[  286.938421][T12710] 8021q: adding VLAN 0 to HW filter on device team1
[  286.950297][T12715] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  287.005716][T12715] team2: entered promiscuous mode
[  287.010966][T12715] team2: entered allmulticast mode
[  287.016947][T12715] 8021q: adding VLAN 0 to HW filter on device team2
[  287.033461][T12713] team3 (uninitialized): Failed to send options change via netlink (err -105)
[  287.116399][T12713] team3: entered promiscuous mode
[  287.127957][T12713] team3: entered allmulticast mode
[  287.139646][T12713] 8021q: adding VLAN 0 to HW filter on device team3
[  287.171086][T12717] lo speed is unknown, defaulting to 1000
[  287.186280][T12723] sctp: [Deprecated]: syz.0.1661 (pid 12723) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.186280][T12723] Use struct sctp_sack_info instead
[  287.282473][T12727] veth1_to_bond: Caught tx_queue_len zero misconfig
[  287.447302][T12729] lo speed is unknown, defaulting to 1000
[  287.589537][T12737] __nla_validate_parse: 23 callbacks suppressed
[  287.589558][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[  287.754222][T12737] macvtap1: entered promiscuous mode
[  287.759731][T12737] bridge0: entered promiscuous mode
[  288.405802][T12766] bond0: option arp_validate: invalid value (55553)
[  288.466625][T12766] bond0 (unregistering): Released all slaves
[  288.682385][T12770] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.691682][T12770] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.871394][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'.
[  288.890372][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.998520][ T9295] lo speed is unknown, defaulting to 1000
[  289.009390][ T9295] syz2: Port: 1 Link DOWN
[  289.023966][  T161] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.044325][  T161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.091711][  T161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.112377][  T161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.134954][T12781] lo speed is unknown, defaulting to 1000
[  289.248632][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'.
[  289.971089][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'.
[  289.981448][T12818] netlink: 'syz.4.1682': attribute type 30 has an invalid length.
[  289.991478][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'.
[  290.449005][T12834] openvswitch: netlink: Message has 8 unknown bytes.
[  290.594451][T12836] netlink: 'syz.3.1688': attribute type 1 has an invalid length.
[  290.625284][T12836] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.111940][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'.
[  291.214374][T12759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  291.232976][T12827] netlink: 'syz.4.1686': attribute type 1 has an invalid length.
[  291.292987][T12827] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1686'.
[  291.988989][T12872] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1697'.
[  292.046667][T12872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.155929][T12878] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  292.328702][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1701'.
[  292.503652][T12900] netlink: 'syz.2.1704': attribute type 2 has an invalid length.
[  292.528244][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'.
[  292.571026][T12900] netlink: 'syz.2.1704': attribute type 29 has an invalid length.
[  292.610367][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'.
[  292.661069][T12910] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  292.758878][   T30] audit: type=1800 audit(1780917217.228:7): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1706" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1732 res=0 errno=0
[  292.866984][T12916] IPv6: NLM_F_REPLACE set, but no existing node found!
[  292.875074][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'.
[  292.889017][T12914] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  292.930335][T12919] IPv6: NLM_F_REPLACE set, but no existing node found!
[  293.161070][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'.
[  293.201168][T12932] tipc: Cannot configure node identity twice
[  293.220896][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'.
[  293.863951][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1719'.
[  293.981901][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1719'.
[  294.003629][ T5768] tipc: Node number set to 2346821577
[  294.014834][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'.
[  294.059554][T12973] bridge_slave_1 (unregistering): left allmulticast mode
[  294.092348][T12973] bridge_slave_1 (unregistering): left promiscuous mode
[  294.126966][T12973] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.487216][T12984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1722'.
[  295.521434][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'.
[  295.597034][T13021] netlink: 'syz.4.1728': attribute type 1 has an invalid length.
[  295.619150][   T50] block nbd1: Receive control failed (result -22)
[  295.710534][T13015] nbd1: detected capacity change from 0 to 32
[  295.721794][T13021] 8021q: adding VLAN 0 to HW filter on device bond6
[  295.747821][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'.
[  295.759763][T12168] block nbd1: Dead connection, failed to find a fallback
[  295.770939][T12168] block nbd1: shutting down sockets
[  295.786932][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  295.814217][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  295.833962][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  295.856439][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  295.873318][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  295.894664][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  295.913289][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  295.924867][T13026] bond6: (slave veth13): Enslaving as an active interface with a down link
[  295.934303][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  295.953459][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  295.966532][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  295.985024][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  295.995660][T13028] batman_adv: 
60ªX¹¦À: Interface deactivated: dummy0
[  296.007033][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  296.028845][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  296.039232][T13028] batman_adv: 
60ªX¹¦À: Removing interface: dummy0
[  296.054583][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  296.073414][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  296.087267][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  296.098225][T12168] ldm_validate_partition_table(): Disk read failed.
[  296.106467][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  296.116025][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  296.127197][T12168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  296.136768][T12168] Buffer I/O error on dev nbd1, logical block 0, async page read
[  296.145728][T12168] Dev nbd1: unable to read RDB block 0
[  296.154017][T12168]  nbd1: unable to read partition table
[  296.168451][T12168] ldm_validate_partition_table(): Disk read failed.
[  296.177651][T12168] Dev nbd1: unable to read RDB block 0
[  296.186213][T12168]  nbd1: unable to read partition table
[  296.207237][T13028] bond6: (slave dummy0): making interface the new active one
[  296.231101][T13028] dummy0: entered promiscuous mode
[  296.250736][T13028] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  296.312898][T13030] macsec1: entered promiscuous mode
[  296.338463][T13030] macsec1: entered allmulticast mode
[  296.602213][T13048] sctp: [Deprecated]: syz.0.1735 (pid 13048) Use of struct sctp_assoc_value in delayed_ack socket option.
[  296.602213][T13048] Use struct sctp_sack_info instead
[  296.626195][T13049] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  296.749545][T13051] netlink: 'syz.3.1736': attribute type 1 has an invalid length.
[  297.740595][T13109] sctp: [Deprecated]: syz.0.1751 (pid 13109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  297.740595][T13109] Use struct sctp_sack_info instead
[  297.759560][T13109] ÿÿ: renamed from gre0 (while UP)
[  297.770414][T13109] ÿÿ: entered promiscuous mode
[  297.775942][T13109] ÿÿ: entered allmulticast mode
[  297.783881][T13109] A link change request failed with some changes committed already. Interface ÿÿ may have been left with an inconsistent configuration, please check.
[  297.824247][T13092] __nla_validate_parse: 4 callbacks suppressed
[  297.824265][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1746'.
[  297.979155][T13114] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  298.088316][T13117] ==================================================================
[  298.096552][T13117] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x197/0xfc0
[  298.104590][T13117] Read of size 8 at addr ffff88805b67a2b0 by task syz.0.1752/13117
[  298.112554][T13117] 
[  298.114938][T13117] CPU: 1 UID: 0 PID: 13117 Comm: syz.0.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  298.114967][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  298.114982][T13117] Call Trace:
[  298.114991][T13117]  <TASK>
[  298.115001][T13117]  dump_stack_lvl+0xe8/0x150
[  298.115031][T13117]  print_address_description+0x55/0x1e0
[  298.115055][T13117]  ? __sk_msg_recvmsg+0x197/0xfc0
[  298.115078][T13117]  print_report+0x58/0x70
[  298.115098][T13117]  kasan_report+0x117/0x150
[  298.115120][T13117]  ? __sk_msg_recvmsg+0x197/0xfc0
[  298.115149][T13117]  __sk_msg_recvmsg+0x197/0xfc0
[  298.115187][T13117]  udp_bpf_recvmsg+0x196/0xac0
[  298.115227][T13117]  ? aa_sk_perm+0x6d5/0x900
[  298.115262][T13117]  ? __pfx_udp_bpf_recvmsg+0x10/0x10
[  298.115298][T13117]  ? __lock_acquire+0x6b5/0x2cf0
[  298.115321][T13117]  ? sock_rps_record_flow+0x19/0x350
[  298.115356][T13117]  ? inet_recvmsg+0x101/0x120
[  298.115388][T13117]  ? __pfx_inet_recvmsg+0x10/0x10
[  298.115422][T13117]  sock_recvmsg+0x155/0x1b0
[  298.115455][T13117]  ____sys_recvmsg+0x1e6/0x4a0
[  298.115480][T13117]  ? __folio_batch_add_and_move+0x11a/0xc50
[  298.115518][T13117]  ? __pfx_____sys_recvmsg+0x10/0x10
[  298.115554][T13117]  ? import_iovec+0x73/0xa0
[  298.115582][T13117]  ___sys_recvmsg+0x215/0x590
[  298.115606][T13117]  ? page_table_check_set+0x126/0x510
[  298.115640][T13117]  ? __pfx____sys_recvmsg+0x10/0x10
[  298.115672][T13117]  ? __css_rstat_updated+0x23a/0x530
[  298.115696][T13117]  ? __fget_files+0x2a/0x420
[  298.115734][T13117]  ? __fget_files+0x3a0/0x420
[  298.115767][T13117]  do_recvmmsg+0x334/0x800
[  298.115797][T13117]  ? do_raw_spin_lock+0x12b/0x2f0
[  298.115827][T13117]  ? __pfx_do_recvmmsg+0x10/0x10
[  298.115854][T13117]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  298.115883][T13117]  ? __might_fault+0xaf/0x130
[  298.115923][T13117]  ? lockdep_hardirqs_on+0x7a/0x110
[  298.115952][T13117]  __x64_sys_recvmmsg+0x198/0x250
[  298.115981][T13117]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  298.116013][T13117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.116036][T13117]  do_syscall_64+0x174/0x580
[  298.116059][T13117]  ? trace_irq_disable+0x3b/0x140
[  298.116090][T13117]  ? clear_bhb_loop+0x40/0x90
[  298.116115][T13117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.116137][T13117] RIP: 0033:0x7f4c8c39ce59
[  298.116158][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.116178][T13117] RSP: 002b:00007f4c8a5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  298.116202][T13117] RAX: ffffffffffffffda RBX: 00007f4c8c616180 RCX: 00007f4c8c39ce59
[  298.116217][T13117] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 000000000000000d
[  298.116231][T13117] RBP: 00007f4c8c432d6f R08: 0000000000000000 R09: 0000000000000000
[  298.116245][T13117] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[  298.116258][T13117] R13: 00007f4c8c616218 R14: 00007f4c8c616180 R15: 00007ffc661aeda8
[  298.116286][T13117]  </TASK>
[  298.116294][T13117] 
[  298.418326][T13117] Allocated by task 13114:
[  298.422862][T13117]  kasan_save_track+0x3e/0x80
[  298.427593][T13117]  __kasan_kmalloc+0x93/0xb0
[  298.432407][T13117]  __kmalloc_cache_noprof+0x31c/0x660
[  298.437832][T13117]  sk_psock_skb_ingress_self+0x5e/0x370
[  298.443438][T13117]  sk_psock_verdict_recv+0x7d9/0x8d0
[  298.448960][T13117]  udp_read_skb+0x5f8/0x6d0
[  298.453604][T13117]  sk_psock_verdict_data_ready+0x49c/0x9a0
[  298.459552][T13117]  __udp_enqueue_schedule_skb+0xc4b/0x12e0
[  298.465409][T13117]  udp_queue_rcv_one_skb+0x755/0x10f0
[  298.470838][T13117]  __udp4_lib_mcast_deliver+0xad7/0xb70
[  298.476432][T13117]  udp_rcv+0xcd0/0x1db0
[  298.480630][T13117]  ip_protocol_deliver_rcu+0x282/0x440
[  298.486136][T13117]  ip_local_deliver_finish+0x3bb/0x6f0
[  298.491642][T13117]  NF_HOOK+0x336/0x3c0
[  298.495772][T13117]  ip_sublist_rcv_finish+0x1f0/0x240
[  298.501744][T13117]  ip_sublist_rcv+0x5c6/0xa70
[  298.506480][T13117]  ip_list_rcv+0x3f1/0x450
[  298.510942][T13117]  __netif_receive_skb_list_core+0x7e5/0x810
[  298.516968][T13117]  netif_receive_skb_list_internal+0x995/0xcf0
[  298.523210][T13117]  netif_receive_skb_list+0x55/0x450
[  298.528575][T13117]  bpf_test_run_xdp_live+0x1946/0x1cf0
[  298.534080][T13117]  bpf_prog_test_run_xdp+0x81c/0x1160
[  298.539495][T13117]  bpf_prog_test_run+0x2c7/0x340
[  298.544474][T13117]  __sys_bpf+0x643/0x950
[  298.548764][T13117]  __x64_sys_bpf+0x7c/0x90
[  298.553226][T13117]  do_syscall_64+0x174/0x580
[  298.557866][T13117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.563833][T13117] 
[  298.566189][T13117] Freed by task 13115:
[  298.570279][T13117]  kasan_save_track+0x3e/0x80
[  298.575045][T13117]  kasan_save_free_info+0x46/0x50
[  298.580120][T13117]  __kasan_slab_free+0x5c/0x80
[  298.584942][T13117]  kfree+0x1c5/0x640
[  298.588885][T13117]  __sk_msg_recvmsg+0xdb7/0xfc0
[  298.593776][T13117]  udp_bpf_recvmsg+0x196/0xac0
[  298.598596][T13117]  sock_recvmsg+0x155/0x1b0
[  298.603151][T13117]  ____sys_recvmsg+0x1e6/0x4a0
[  298.608043][T13117]  ___sys_recvmsg+0x215/0x590
[  298.612769][T13117]  do_recvmmsg+0x334/0x800
[  298.617231][T13117]  __x64_sys_recvmmsg+0x198/0x250
[  298.622303][T13117]  do_syscall_64+0x174/0x580
[  298.627021][T13117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.632953][T13117] 
[  298.635316][T13117] The buggy address belongs to the object at ffff88805b67a000
[  298.635316][T13117]  which belongs to the cache kmalloc-1k of size 1024
[  298.649503][T13117] The buggy address is located 688 bytes inside of
[  298.649503][T13117]  freed 1024-byte region [ffff88805b67a000, ffff88805b67a400)
[  298.663428][T13117] 
[  298.665787][T13117] The buggy address belongs to the physical page:
[  298.672537][T13117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b678
[  298.682035][T13117] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  298.690570][T13117] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  298.698176][T13117] page_type: f5(slab)
[  298.702209][T13117] raw: 00fff00000000040 ffff88813fe19dc0 dead000000000100 dead000000000122
[  298.710860][T13117] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  298.719487][T13117] head: 00fff00000000040 ffff88813fe19dc0 dead000000000100 dead000000000122
[  298.728818][T13117] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  298.737969][T13117] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  298.747382][T13117] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  298.756531][T13117] page dumped because: kasan: bad access detected
[  298.763000][T13117] page_owner tracks the page as allocated
[  298.768774][T13117] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3368, tgid 3368 (kworker/u8:11), ts 100499298707, free_ts 100387672114
[  298.790881][T13117]  post_alloc_hook+0x22d/0x280
[  298.795710][T13117]  get_page_from_freelist+0x2593/0x2610
[  298.801822][T13117]  __alloc_frozen_pages_noprof+0x18d/0x380
[  298.808046][T13117]  allocate_slab+0x77/0x660
[  298.812597][T13117]  refill_objects+0x339/0x3d0
[  298.817388][T13117]  __pcs_replace_empty_main+0x321/0x720
[  298.822986][T13117]  __kmalloc_noprof+0x474/0x760
[  298.828060][T13117]  ieee802_11_parse_elems_full+0x14f/0x2ba0
[  298.834006][T13117]  ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cb0
[  298.840127][T13117]  ieee80211_iface_work+0x78b/0x1020
[  298.845460][T13117]  cfg80211_wiphy_work+0x2cf/0x460
[  298.850738][T13117]  process_scheduled_works+0xb5d/0x1860
[  298.856785][T13117]  worker_thread+0xa53/0xfc0
[  298.861422][T13117]  kthread+0x389/0x470
[  298.865570][T13117]  ret_from_fork+0x514/0xb70
[  298.870203][T13117]  ret_from_fork_asm+0x1a/0x30
[  298.875013][T13117] page last free pid 153 tgid 153 stack trace:
[  298.881193][T13117]  __free_frozen_pages+0xc1c/0xd30
[  298.886360][T13117]  __slab_free+0x274/0x2c0
[  298.890823][T13117]  qlist_free_all+0x99/0x100
[  298.895464][T13117]  kasan_quarantine_reduce+0x148/0x160
[  298.900968][T13117]  __kasan_slab_alloc+0x22/0x80
[  298.905949][T13117]  kmem_cache_alloc_node_noprof+0x384/0x690
[  298.911890][T13117]  dup_task_struct+0x52/0x840
[  298.916617][T13117]  copy_process+0x89b/0x4440
[  298.921259][T13117]  kernel_clone+0x2d7/0x940
[  298.925899][T13117]  user_mode_thread+0x110/0x180
[  298.930925][T13117]  call_usermodehelper_exec_work+0x9c/0x230
[  298.937141][T13117]  process_scheduled_works+0xb5d/0x1860
[  298.942817][T13117]  worker_thread+0xa53/0xfc0
[  298.947453][T13117]  kthread+0x389/0x470
[  298.951561][T13117]  ret_from_fork+0x514/0xb70
[  298.956187][T13117]  ret_from_fork_asm+0x1a/0x30
[  298.961002][T13117] 
[  298.963356][T13117] Memory state around the buggy address:
[  298.969009][T13117]  ffff88805b67a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  298.977105][T13117]  ffff88805b67a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  298.985207][T13117] >ffff88805b67a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  298.993299][T13117]                                      ^
[  298.998965][T13117]  ffff88805b67a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  299.007064][T13117]  ffff88805b67a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  299.015150][T13117] ==================================================================
[  299.042070][T13117] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  299.049432][T13117] CPU: 1 UID: 0 PID: 13117 Comm: syz.0.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  299.058837][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  299.068931][T13117] Call Trace:
[  299.072252][T13117]  <TASK>
[  299.075228][T13117]  vpanic+0x56c/0xa60
[  299.079265][T13117]  ? __pfx_vpanic+0x10/0x10
[  299.083815][T13117]  ? __pfx___schedule+0x10/0x10
[  299.088720][T13117]  panic+0xc5/0xd0
[  299.092492][T13117]  ? __pfx_panic+0x10/0x10
[  299.096959][T13117]  ? preempt_schedule_common+0x82/0xd0
[  299.102468][T13117]  ? __sk_msg_recvmsg+0x197/0xfc0
[  299.107570][T13117]  check_panic_on_warn+0x89/0xb0
[  299.112567][T13117]  ? __sk_msg_recvmsg+0x197/0xfc0
[  299.117641][T13117]  end_report+0x73/0x170
[  299.121942][T13117]  ? __sk_msg_recvmsg+0x197/0xfc0
[  299.127049][T13117]  kasan_report+0x128/0x150
[  299.131604][T13117]  ? __sk_msg_recvmsg+0x197/0xfc0
[  299.136685][T13117]  __sk_msg_recvmsg+0x197/0xfc0
[  299.141605][T13117]  udp_bpf_recvmsg+0x196/0xac0
[  299.146435][T13117]  ? aa_sk_perm+0x6d5/0x900
[  299.150996][T13117]  ? __pfx_udp_bpf_recvmsg+0x10/0x10
[  299.156342][T13117]  ? __lock_acquire+0x6b5/0x2cf0
[  299.161322][T13117]  ? sock_rps_record_flow+0x19/0x350
[  299.166662][T13117]  ? inet_recvmsg+0x101/0x120
[  299.171391][T13117]  ? __pfx_inet_recvmsg+0x10/0x10
[  299.176469][T13117]  sock_recvmsg+0x155/0x1b0
[  299.181029][T13117]  ____sys_recvmsg+0x1e6/0x4a0
[  299.185830][T13117]  ? __folio_batch_add_and_move+0x11a/0xc50
[  299.191783][T13117]  ? __pfx_____sys_recvmsg+0x10/0x10
[  299.197129][T13117]  ? import_iovec+0x73/0xa0
[  299.201679][T13117]  ___sys_recvmsg+0x215/0x590
[  299.206401][T13117]  ? page_table_check_set+0x126/0x510
[  299.211822][T13117]  ? __pfx____sys_recvmsg+0x10/0x10
[  299.217069][T13117]  ? __css_rstat_updated+0x23a/0x530
[  299.222400][T13117]  ? __fget_files+0x2a/0x420
[  299.227043][T13117]  ? __fget_files+0x3a0/0x420
[  299.231766][T13117]  do_recvmmsg+0x334/0x800
[  299.236226][T13117]  ? do_raw_spin_lock+0x12b/0x2f0
[  299.241293][T13117]  ? __pfx_do_recvmmsg+0x10/0x10
[  299.246275][T13117]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  299.251690][T13117]  ? __might_fault+0xaf/0x130
[  299.256418][T13117]  ? lockdep_hardirqs_on+0x7a/0x110
[  299.261665][T13117]  __x64_sys_recvmmsg+0x198/0x250
[  299.266736][T13117]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  299.272330][T13117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.278444][T13117]  do_syscall_64+0x174/0x580
[  299.283081][T13117]  ? trace_irq_disable+0x3b/0x140
[  299.288156][T13117]  ? clear_bhb_loop+0x40/0x90
[  299.292880][T13117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.298810][T13117] RIP: 0033:0x7f4c8c39ce59
[  299.303290][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.322938][T13117] RSP: 002b:00007f4c8a5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  299.331403][T13117] RAX: ffffffffffffffda RBX: 00007f4c8c616180 RCX: 00007f4c8c39ce59
[  299.339421][T13117] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 000000000000000d
[  299.347451][T13117] RBP: 00007f4c8c432d6f R08: 0000000000000000 R09: 0000000000000000
[  299.355473][T13117] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[  299.363511][T13117] R13: 00007f4c8c616218 R14: 00007f4c8c616180 R15: 00007ffc661aeda8
[  299.371587][T13117]  </TASK>
[  299.375261][T13117] Kernel Offset: disabled
[  299.379602][T13117] Rebooting in 86400 seconds..