last executing test programs:

3m6.103669973s ago: executing program 4 (id=1061):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000840)=@can, &(0x7f00000007c0)=0x80, 0x80000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={<r3=>0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, [0x7a, 0x1, 0x4, 0x6, 0x6, 0x0, 0x0, 0x6, 0xb, 0x0, 0x2, 0xc, 0x1, 0x8]}, &(0x7f0000000a00)=0x100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000ac0)={r3, 0x4c, &(0x7f0000000a40)=[@in6={0xa, 0x4e21, 0x10000, @mcast1, 0xfffff6fc}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000001bc0)=0x10)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@mcast1}, 0x0, 0x1}}, 0x50}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
preadv(r6, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/220, 0xdc}], 0x1, 0x27a, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ufshcd_auto_bkops_state\x00', r5, 0x0, 0x805}, 0x18)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x8d}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x80000000}, [@generic={0x0, 0x5, 0x0, 0x2, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4e89}}, @ldst={0x3, 0x2, 0x3, 0x2, 0x5, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r9, r4, r4, r4, r4, r4], &(0x7f0000000680)=[{0x2, 0x2, 0xb, 0x6}, {0x5, 0x5, 0xf, 0x4}, {0x3, 0x2, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1}, {0x4, 0x4, 0x3, 0x4}, {0x5, 0x4, 0x5, 0xb}, {0x3, 0x3, 0xa, 0x7}], 0x10, 0xc896, @void, @value}, 0x94)

3m5.97574917s ago: executing program 4 (id=1064):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf2517000000040030800c0006000100000001000000536e0af3f16d6525f8c1407398a5536686deafe8b75e6266e1ef007e17ef5d71748e00bc7c4448d9a23ca01560b5875267b5f58cde9f378444588f91dc58d8be74ea4916667bebff6489d0f799e45cb7fd7c5c4ae9f3b00ba0e3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8)
socket$netlink(0x10, 0x3, 0x1) (async)
r2 = socket$netlink(0x10, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r6, 0x200, 0x600, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)

3m5.782563368s ago: executing program 4 (id=1066):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300020c0000000300000000000000030017003200000002004e21ac1414aa00000000000000000100140008000000020009002000000028116e9a00000000030007000000000002004e23640101010000000000000000010015004e230000866508ea2ce3b7251a986896483b91e60fac38bfd7fea9a21121bc648abdd71669518f3bda96d0f2bdea0f8ae1f853c4029b7f6f2b955b2e921c7af515b35a68b6763688056fb3"], 0x60}, 0x1, 0x7}, 0xc8c2)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000000000000050000004c000000", @ANYRES32, @ANYBLOB="00000000000080c0f56c48f862790000000000007e9d328f7da9011ad43895fb90e11446937ca522dceee9dc1a08742cfe033680707da72813aaf590ccb1777e8ee2a8e3ada338770c4df2cb818fbd6f82952f16fbd35e22bca590", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000020200"/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x409}, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000a000000050000000800000001000000", @ANYRES32, @ANYBLOB="00001c505018925a0000feb5319bad18560e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38)
r3 = socket$inet(0x10, 0x80008, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x8)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r7=>0x0}, 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r8, r4, 0x4, r6}, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x13, r9, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000200))
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r9, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62)

3m5.641033676s ago: executing program 4 (id=1068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r6 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x5b, 0x80000, 0x3fffc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
r7 = socket(0x10, 0x3, 0x6)
r8 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9815, 0x0, 0x0, 0xfffc, 0x3dc], [0x0, 0x4, 0x1, 0x0, 0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
unshare(0xc000000)
socket$inet6(0xa, 0x3, 0x8000000003c)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0xa, 0x7, 0x619347a8, 0xfffffffffffffffc, 0x3]}, &(0x7f00000002c0)=0x78)

3m1.748205422s ago: executing program 4 (id=1091):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x5}, {0xffff, 0x4}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1ff, 0x8, 0x8}}}}]}, 0x44}}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000001780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m1.567727415s ago: executing program 4 (id=1092):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0x4, 0x182, 0x8})
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x31}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb70}]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x20004014)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m46.50659818s ago: executing program 32 (id=1092):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0x4, 0x182, 0x8})
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x31}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb70}]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x20004014)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m35.644076112s ago: executing program 3 (id=1254):
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r0=>0x0, 0x4, 0x3, [0x7, 0x2, 0x6]}, &(0x7f0000000040)=0xe)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x7}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x180)
listen(r1, 0x8d8)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'geneve0\x00', 0x1000})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c010)
sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getaddr={0x14, 0x16, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
socketpair(0x10, 0x800, 0x3, &(0x7f0000000580)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x81020001}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x7, 0x1, ')}\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x92}, 0x20008000)
ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f00000006c0))
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000700)=0x7, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000740)={<r9=>r0, @in={{0x2, 0x4e24, @multicast1}}, 0x3, 0x1, 0xe0, 0x3a, 0x86, 0x5}, &(0x7f0000000800)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000840)={r9, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x1}, 0x90)
r10 = accept4$llc(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x80000)
accept4(r10, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000a00)=0x80, 0x80000)
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a40)={r5, r5}, 0xc)
r11 = socket$alg(0x26, 0x5, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x13)
ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000000a80)={{r12}, "2dff2ac58f03e083981f1a4325e58a47555ace0f27eb735ff53e460d05de09d07da333481977f9fa35f4cacb0d3d5112d3c96ff57dcd9071d1138097b469fbcd8a227326c3685fef8b568fed50fc717b60525b4ce58777c7caf659e7f337df53bedcc5e6c5c390588cce408ad50b1a79948afa60f9890935fa74d725e6d30f42b969f18b36b5ea898baf0845a42bf4438c1e944c88c39f163c174a12a32aee391ce02f84ff5c4d9d4e4d3802691c41ef9bd9da2f0971876a0f7c20d9e4c5a37d442b792c0baeb296274f2f75c3204caebf4ff4b47eea802fdc2803be2dea72d851a51c214a32860979cdda3176eeae630040ddc5a07289692a9db0721a2ac4ee2a25c582512645650681417b76ca071c7fd0a7a15c44136eed5011acc1b68d20af9f55d20e8804ca894876f168a6e0c485ccb350d9722ca3c08b232e0ab1bedc4a81a9d0b0c1d22e974eb6b681f6006e2cbfc0d52160a4bc68a7e4a69643e3539f1752c57006b987afe3fe6607c37486d7b8f62446f7a9aabad74b1d4057c82ea6cf963ed05250c691446d9c1d6ec07d8d438167cf887cde777eb209c89f66ba0104525780f78eafb5f56790aa44cca6c6a6b97a4d6407c42e50e4689f224a45e6a57c621b777316938999f69b428bc56880f1c79eb96d55b07eb0c4725ae63b506ea74614bb8f080f7ae570332b99560cffebc0a1af91a0892ef4eb423b47c7336795a271511e95898d1b718a475c1a5ab11d9730e9e8c9521fe7313bb9035e3f118aa2e98339391b65df83a621a5e42efc962eea6d31f818f26fa0e2aba5c7218ffa63a29d32b21501ba76224b7da142faea8c781c4072b5246cedd3dcf52d6e568450d801e43cdb83eb098b218b39ae6d2779b0e366aec5f6f003451093f22a0b010f9b40f1de9f84a2585a91699bf716c5130b61c322d911db2205183b4aa0016944cf2f780834076c0205391ac60c5c5037dff7bf58a60fdc5ac78a988b838c8d7f3dddbd93926fdab974b99bdfcfe00675eb25ad6d8b6bae7fc9aa84452f5a0b287d8842f804b8c355f0669e735ae5bb300ab3d1cb205a8c899a2164b6363c84ea1def4ddfeec1315e08832be2a00d979e14f9bc2e11a967ff372dc5a045d3dd2945e38010188195ab518768c3ad34c6098c6ab216611f230d6e18f9f7894b1de1607177aac6f324e68e900ea608fe549bd52b075d50c573d4a0e739a7c7077d3bb2be8146f4f6a0e2b7dbf975fe15f8e094ec6fd18ded2facc018413bd804403501b5aeeff63be759aa25d519bfdd5bdb82c8e3b26ac2b3ad0a196db41ca1e776d5de8f5b718fc75c190587680960d68ba574ebe0af19ad0346e98db9de5e21c13e987e6e3ba575e41e3b11704379b0d376e687776ade8c1a103ce841ae651fd6c83ceb3eb1f807cbee89281288b0c1dbb0fa66ba77b7c18bf457219f78ac3d3b27986387c087ea37cd67c82a5cf0b6d24f24b37b2fd32ad08053c911881d6fb316870f50b7ab9f0242c3f32d20379b7be2b338308ec946070638c3b831557bdbc41b72c290478f5738076e06f7750cbf91f11100d8bbdf6721d558410e9da1c6edf4c191eb6b37fd1bfc019458e49ead259b87d466dc28db9cbb39398788b7e263ce268b376c70d6ce66fc70376f332ba332aec6e266dcc90450edf7a8ba41fe78b47bf8b32438d6f887bab0af072d5f9215514580dd7d9b390e33f5be8db0af8c89b0c7639b223824d1223b2705d8d2a4a44643642ca8bbf4b12e3b7b44894c1368c527fc0d36e7ab7ad7e05874792b378c5fc4508c1b0ce42ad3c913f2f5900a29039bc2e4bac7c40e1e2dfcc9e31c33e6f10a969de2b2c166f34cb7e96ff4af0cb746ea0a8c9e8a1b3299f18e935ad8c4f49abb652b69adc70822872c5f190325ac3ce8521e366ea4ab1d9eed85858f96e7921c1dd02a789dbda4427b5f29aeded100c10919e7ea4cb8f94fa63cb5bfa922d23a526b6e2be09d4768350de491a5ab9f55fb877963047ee76d4d92444c16e488aa5a79deeec75d86bb5451939c1adc74ba064c6b5a13f6f5f6fc5616298012cbbe26f8d9bd322f81b72c42df1d145c453c21bf34773283310bb76d459bfc5b3eb49347e351660dfb40673ad98853943d7f4c8553e0cacbed18d61f0b14f71a30e9afbb4100192ef4813fea4e09c7e8d05418e934116c92dc29ea7d9b04f609b2b46fe700b051c8fc8c1d8a22b4b2552daf0c8101eed3d636c667bde6da3784222477249cdb725de1fe11645b97c403a693c23119f3d6d991d2490710136adf24f4aadd128e8f4423c9db29ac1ef21ea81a07549e9241c81a95f94dae4e615901d3ecd99a3ab35d4116be59533ccffad97eda55ad311e0ebe7f03b0f097c9d53a699c038db127bdb03ce9285660bfd875cf3ab1b2e65ccd54fbc713e285ad1ab430996d6e41b255059397c3430beb11fd36f52414d6bfc6876655da687aa4e8c22264fd5cefb06b0abac399d113c18892aa256915494ed6446a7393de0c361976a45c158aa3cdc173a85ad498c08ff0ce542285b3c8bacaddfbae9e7c635a0c68add1b3224344625169da990a24b5bd6d4ed7a80cd2d28df00165f02fc6fbf6b95958c776b31c0e527b50b3d04ea05e80305a5ed017b252b655783c9ce8f6885332afce1643c69fed83c8d912391606a108ae71a220acbd40ecadf75d9310fdb445fdb91604858e7f0304edfdbb05a7440b5f8b64b66c4c4fcfa91932173069b53fa94302743a4096ebdf1cb4154406be8c87d371315d455b9dc16fb7ed4751f5939f642a4fa40110d05bf1c1c056aedcbd498058baf9aba4abd04c82ed2dbe4b50a1634ff574072ebd743a6b0d26443ebea9dd61616e97d9584c07e6e7f84a33ed240457dda6d49199bc062ff8e8abd47df0c7709d9ac3b770fe70fe18d35baef44dfb43e6f83c810a3e8ebc91c0a048896d062b54c7756d08d71f350780f3720095bbf972e0cece583c3f78825b387606deaba8417e0a27299b5cc8c869d04830eb9b5eea46a7d3f53fc64563d0c7dd6b1be3e083d6a3c8d70163dd0843c9bb11efaf21f3e9a84a5e77cfab0fe83dacc0c7fea7e9dbbc54e6c1ebc8353f28cbbb30fc66d6134e4b603404b1f61ad6fd7771c236d94dcb13dff3f0301ff468fa686999610176810f36c76e8eaa0bef6cfce73ef76c17bf970a1e0a3f231a5881c997e4bb0c183bc26304238851e8073c26a54e956e033286326e64d234e360addac1368f881e1ed4c281a268a5c06e196d9fd6eab4abfbd059ad9e8cdc139ddb6deb5f0822f29f564f33427ce929d091a31962d203ac7fa3d7e4a609617982c2ac87caf5dcc0d23031a2a833f78f129e9769ab044848253841eb1a4bae9cd2ddd21b684f7602f1b281fd341c58b837256bb69e6419b424a28294bc2aa06f3975ae1f3e2724e6270da3700b8893c6b01792b9fc82f481d9aaaf4ea696a605a29705883eb1c4f82e38a49a923a6994c059261901141929c9a3c49dd0eda77e6e09ac468806fd783b4fdcb8052947259671a9d90bba0dbeb66ebd2e24029ea7bf3569b5fe427dfa96c29bf71cc545ca5f64e154fb9a2859680a6b7c363bb9bb9d47e569a8c3cfae9a1d654f2279163aa1ec35ae3368eccd7abc95313990aff7b501b9d2ca268fb6bbcb2c4a6f5fe38bef5a25ee441a02ce964a269bb52faaa7752132076857460adb3d17114fb32fa6b8416c8ae82b6374992a7c3888902b41c2ffc29bc189ab1ddabef5481a133459704fcd998b06e939ba61b0f2fc4cefb3672c7367f9845d55362ee011514dea40b8c3e2b54a93ee9a5430e4c2a612088638b0ad4db36e62c24f31e7efc628f1df7ba875b1307f2fce2057d400635aa439dcf044c278ec5ac0fdbfe38ae233bd6e5bda2590260cdda14112503f960e6d10e0a86159fbffa3b60914e58cd933eadc5480fd685de71e3a4f7d8487c051056e961a94debbd2ae76a5c93e702d2c5690b915b9a8a081119ac279105580416e7f350a56ce0f34de6eddb18304bfe39b9f63b1e9f7c9363d4e4ec6ea3689927a3b0cb8f209a950323d90f94f4a240717b2e49bc6819cd75b78900eab7be4839790539302a219704a82485cab1fa02d51995a309f99867634a6ed336b93d4f726d135dd3b2da2aef8888f0a94f26ee676c0450b45d539fd31dcf80e12861ab2c76d03654aadaa2653c1ca85d28df69da21b24d01a5952fbb787fb911d023a74c4c3bc4ec4de00a7822180a155081dbb12db5e48a6e32791a17e638054a0b583a3f6e30af964b84bf205aee4835bc82ad41d2873615ddbef817d61b9628c2380398d735a093b1a21e04c73f41716c129e5c5c7bc3496f2d4fb771a69660f5dd5abc49a655b42af9ef94ce99e32167fc76705f0dee462881df395dd9adfa7065e8b5bd4cd67e73a4731d411eabd06fcce5dd99fee0deda3d2aa9b47fc768685ddc3b5fac9056f456c86f596f65ecef5fabe397d8941350b063ec43ede8ee4af5024069b140269bf152df0721a7ddaf3b882162c5acc7f47a47d8fd3b6a54a22198eebe17712ae2d7f070d1a101f623a4a5880ae6fef32d80e9aedeb47be5b1e21de651be76bdce2fd189146f0da37166ece34138ae750e5eae03d82309451540d6f7a08d2afa06884e7d7ac4391a5eea0c35cb9c6bf44f7a7e6463593a7296ed1b00dced5c015cb3eb1d1af49a828b41560b536e80b3abb4aef00a347f57a706563c2b50b7eac824d95f837fdf448431a44079fbff6824e8c3f3a5f39dec924edd747ad5237df622cd4fcaac227b9dbf13ae0dcd136c5cf5881815195717e57013df3f434cdc8bf51484f64866ca4b3db6e7ccab372a6f05606486fa74cde10637af343d357516aea751b76c1e24dc84bef88b8840bcca0fd637bb65c51076d6df38fcf1e6476d07ae10e892200c9523acb7287a8f9af8689f8981cc58b03e5d2daac13b11209a22291e24997665f896fbb3995ba81f15317a306c4b284af2e3c3f03124eb889ffde73704717230338cbcdb4854ea7e89d9a61e0e5bfcaab57b50dc7c104736a6b4b68b1cb08219dc610ecd5dde92e131182c5ac62cc4ce39d79d91d03fac70ce13d6b70a1f84f12368341c10a5ceea63d23cbf8788b9da9cce71128119924aecd4091ee1fe295a6f3f90bffbb0faf12cee3aa36b60c4e4a3a147fad3ae50c50e7afa4f57569ab32a83dc604b028cabf9dbac962b8ca95ca795ea008e226f62244eaa3f0e6a1bdcca577696bd22835e06f5d8052b65669e9ac54a6c456206b4513d1d1756574624dd6ca47937ddc0b08487a15290bffa885a715efc53b8d183e1b0c7f8f8e7a9481fea40b573554e71e0fe1e6cfc1d77c16afae76564d9723410781081621428c7767b0536c5edeceff2e7d6d4626ed62461cc6b7af2c97fdd567a5a77bf0052105f5af35bc36b1364c79053854f8896440bfa57607bd49c6111029130c9c3c0462516baeeca8eb4aadf6c27beea1364aa420a5fd4a93b9fc562a25fb783c09308b499043cbefd1dd1b56b487c782c60c0377a407d9d57b247a5180b45a7f5f35035f9bcab596461fc89ad6af483c6ae41c980bff7c0f2fd44c0d32b30160ad13d9e4be6640c8d9a844af8425022ac46be2b97cbf16bd0907980d435a2a14dd0f44dbe63482958ce53a9e9552230ad7f3ba4f13bd3bc74aa5cb5a91c979b077a45c611592ba79ae3308952254ee36db58a4e579984f2a8ca5510984fd5d91a42545619f362edb5863c33e6bfcbf72724afae55b40228ac3"})
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001ac0)={'sit0\x00', 0x0, 0x1, 0x80, 0x8, 0x7fffffff, {{0x24, 0x4, 0x1, 0x3, 0x90, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0xb, 0xa4, [@private=0xa010100, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0xda, 0x0, 0x4, [0x9, 0x6, 0x7fff]}, @rr={0x7, 0xb, 0xc6, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}]}, @ssrr={0x89, 0x3, 0x19}, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x6, [{@empty, 0x3ff}, {@local, 0xebb3}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x5, [{@multicast1, 0x3}]}, @ssrr={0x89, 0x1b, 0x1c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x4}, @private=0xa010100, @private=0xa010100, @rand_addr=0x64010101, @local]}, @ssrr={0x89, 0x17, 0x8d, [@multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @local, @rand_addr=0x64010102]}]}}}}})

2m35.295705887s ago: executing program 3 (id=1256):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f02e400fe800b0000000000875a65969ff57b00001f4f000000000000000000ac1414012c00"/48], 0xfdef) (async)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async)
bind$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000150001002dbd7000fddbdf250a7804fd", @ANYRES32=0x0, @ANYBLOB="140001"], 0x58}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async)
sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x8, @private2, 0x988}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000640)="5e89f617007cf9bbf4884e7bc29242d3a7d8a62384bbcc6db343f1406843881b18bbf8d0bf720e8484f8be19bdc9949bc3f5cb304bcbb7e586979fa3ddf26e0d0beade4a4f78026801f93a6a49241219709e9f5b17c3e383a0ec0c9c4f4abffa244519d41c392ec3b4f92f180228c6cad1a111c4e41d17826c705084", 0x7c}, {&(0x7f00000006c0)="cd9e53472efd7ada42fb41fe40fd1bc4cb9f96992eab5cfe1ad1abd2cfcd20189daace143c0dd02b7637a8cb55b638654043104a8a11801a9b1c5c1a3370f79b106ee4cfb801d68cf1932243478c30a43aa66c0f704dc2099329039f8c57661e97ad43a9dc9ab535ba145828a8e48b9804d887d7328df98a3c8a6cc61217c04a00ba3a1bb5d16e686d8c9a671c7dab5f5533038b9c22438ac3916f010dabc01afa856950d2bdda9878dfeeafb56c43d96dd9a8f89e0493e7724917fdc795f876a26d54d86a98ccfde420522becd65c7a22c9", 0xd2}, {&(0x7f00000007c0)="787e826d2731e9f709b345fad56889", 0xf}, {&(0x7f0000000800)="69c45ad71d37e89e08275c83e30dbf155ff3e5efd703ba4ac10c7cdede392e19f7e0f2a8f86c568ea6605c6c8f1238f575fefcc1828ea0d517e5e94e6c75cbab9b18caac824b8d65ae8f43f82f0b1e2cd34494ba71ce1629", 0x58}], 0x4}}], 0x1, 0x408c0)
ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000006380))
r4 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/21], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000021300000000"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0x18) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)={0x1c, 0x0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) (async)
sendmmsg(r7, &(0x7f0000000180), 0x400000000000077, 0x7600) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0xd}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

2m34.08471361s ago: executing program 3 (id=1258):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
writev(r5, &(0x7f0000000240)=[{0x0}], 0x1) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x8c, 0x18, 0x1, 0x70bd27, 0x0, {0x5}, [@generic="5374061cd40c4acc6fcca13b9b40158d743f9ea34e05a9245d92e92c770d2a3b0cfb6f06c01522ccd4bef40ae9dd8a96dc8e15cc6bfc7d6f4fed2dd75723aa493e9a9de11b0f675e25d3642ab1c80d8f4b3f73e76a4d0332704d4f5afe0e9f50a864886f689fbb8150f34762a788849b253df9ad37db"]}, 0x8c}, 0x1, 0x0, 0x0, 0x2004c811}, 0x488c0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0x1, 0x4, [@broadcast, @local, @multicast1, @private=0xa010100]}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffe4a, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xffff}, {0x9, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) (async)
listen(r8, 0x1ff)
sendto$inet(r8, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x20040054)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="010000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095", @ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="2bb9dcab5337445510b21fd603c6426c3a5133a1cba744bfb07af657f90f537972be4d2e9e03a790d94fa0edf46624e52d5995312958b9dc45b88a7ff6c7a8149c5197bdc50d9bca637829a527f466b229a812ded82910d3ac311f85181992db3e05d276da5ae36ae26973a6266ff710c7465ee699f42ce052c731a786003f906a241239281d445c5e9410a2a6a40849b68e3fc2d9bc1494f67a551df213cdd39d6bc1e4dc10b6c725320350c34b09fcc5e6aac7d82292", @ANYRES64=0x0], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x3) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)

2m33.217711827s ago: executing program 3 (id=1261):
unshare(0x20000400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
recvfrom$inet6(r2, 0x0, 0x0, 0x10043, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090325bd7000000000000a000000fe800000000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4808}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = gettid()
syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/user\x00')
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x20, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0)

2m33.020209344s ago: executing program 3 (id=1263):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010900000000fcdbdf250220000007000000000000ec07001e"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4008094)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x34, r4, 0x1, 0xfffffffd, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x7, 0x9, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

2m32.757705798s ago: executing program 3 (id=1265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
sendto$inet6(r1, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd14}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m17.37518045s ago: executing program 33 (id=1265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
sendto$inet6(r1, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd14}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m3.763190686s ago: executing program 1 (id=1202):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x168, 0x9, 0x1a8, 0xb, 0x2a8, 0x250, 0x250, 0x2a8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x8}, 0x6000000, 0x168, 0x1a8, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[0x0, 0x4], 0x76e8feb0b7b3f1f7}}, @common=@srh1={{0x90}, {0x58, 0x80, 0x0, 0xb, 0xfff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 0x2, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7, {0x80000000000000}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES64=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000040)="63f89496db7295983293042d", 0xc}, {0x0}], 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x2, '\x00', [@calipso={0x7, 0xfffffffffffffe1a, {0x1, 0xa, 0x5, 0x6, [0x200, 0x7fffffffffffffff, 0x5, 0xf, 0x100]}}, @enc_lim={0x4, 0x1, 0xa4}]}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf25120000000600b5002d050000050019000000000006001a0103000000050074000200000005001301010000002600be006d33135993e08f97eca4bc38fb93367af919558117ab8f28b2b3f22473adf9e4d67f00000c00810005000100020000000500c200030000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = getpid()
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000084)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffac1414aaedffffff00000000"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

53.955393968s ago: executing program 5 (id=1838):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)='s', 0x1}], 0x1}, 0x4040001)
setsockopt$sock_attach_bpf(r11, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r11, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
r13 = socket(0x2, 0x3, 0x5)
setsockopt(r13, 0xff, 0x1, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)={@cgroup, 0xffffffffffffffff, 0x6, 0x0, 0x0, @void, @value}, 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r10, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, &(0x7f00000000c0)=0x57fd, 0x4)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8)
r15 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000021401"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000)
sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)={0x20c, 0x41, 0x800, 0x70bd27, 0x25dfdbfd, {0x17}, [@nested={0x108, 0xe0, 0x0, 0x1, [@generic="3c45f0513711ad178bec6eb1cbca76bef94f3adacfbd205f2b64e3d515bb9a7d0a9ef9dc67dbd3cf3dd2068ec296b6842e81322c676ed7fae9450e408d7ab4f9945551be63dc20b5307bbe3cd16bd9ddd51ab31ac69bf0fede98406336b209909a9faae89652fb5e9b2043bac52cbf11730a8c0de3c1a2f2887c0cb6371f9cf737950d0eb45d490951a76ea0858b3f041834ef63c39248cd8f5fec186e8d57349a3fbc90144def858c7c3d5b411d1d9a08477e350442f975ba01508c57b59f", @generic="080851af1216a4395ba312ee276cdc9df68fbe584da18787e4b2478d9a37d082a491346247baaf31e0d0543673a0ef6e0bafe56e6fa759da950b5dd6bef481941016fe6b0d"]}, @typed={0xcf, 0x11b, 0x0, 0x0, @binary="e0585ecf838b219a6ef5c20faed25e1acad466a16a5aa94c48764b8a99875361bfeb8176a80790d22f092e62fa3aed2858d8baf5d626c762cc226b0fd56cadac65aba2784ae9858b0bfdad17981c552ce13e4d41daa2314a8e3c6d5488215cea3f18af9a4fd25f330bdf0ced8e50c8228a558b49245bd59a465dd3cb247b6e3562d2fddcf0a665e0618adcb265199895a8526effec5270b8a332642d1863e173f85160553edef02a82a1aa052718ec0dcfd1b9570cd50e1ac23014e18fb40589841e49bd73e72b7746e186"}, @nested={0x10, 0x7c, 0x0, 0x1, [@nested={0x4, 0xe9}, @typed={0x8, 0x7d, 0x0, 0x0, @uid=r14}, @generic]}, @typed={0x4, 0x26, 0x0, 0x0, @binary}, @nested={0x8, 0x114, 0x0, 0x1, [@nested={0x4, 0x88}]}, @nested={0x4, 0x6c}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000051}, 0x48801)
sendmsg$netlink(r1, &(0x7f0000000280)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000290000042bbd7000efdbdf25cfdef682706c52e5e3ae5acf0b048fb25fb5f86233284e029128391157cdfaee24803ab07520d84556f2b1e212acce02562bc532332ac71541971c9b3aa152c4"], 0x50}, {&(0x7f00000004c0)={0x2b8, 0x42, 0x200, 0x70bd29, 0x25dfdbff, "", [@nested={0x1c2, 0xbe, 0x0, 0x1, [@generic="8bfd2822f6e7194625e2c49327ad15bca3", @generic="e78adfd5cc2ac2f479368dc20bcfad8565e9c8a196caf49b967f34979d0dc13a18f4fc5ec70f6a84031c29c3c6aa9dc2606370e2d62c81d738470b3849ce8f575ecbc2b5fae0dc18a9fc1fe7dcbf19603cbcd7b2f78b0874f94a518882bc8ca79f13d844b29bc7766798fb25d0e0b12b60dc77d6c4384680832d8a022386f02be9f023df8ce9b0c7d7d83c4146ac5b3cde9f151639243894428b0d1f3d47ce238d510bf9eda82ec7f87b7ee7eee01342abbe5b64390e844c", @generic="fdf740bb3a8846b4315bc1140d4244ea130bf939a0062d69dfe9", @generic="ada9e63900e5724843e50c444321e3d6d4920ee764d4b7c50679b52a4beb1379dfb606d0c593d9f8c1fda792b8117f92944359e7791407107bb26f784e530255aa9b7c4ddf32155783a7646a4d53b54fa9d85a881f9edc6e34eb24d2e026247a8ab4cc9790e7d7e712fa18d883a7521962f5ac6e02e121a025e67ecdc4c8c620f49b932188ba8a68513e98b1e722fffd3d320825111e759b2a55671ed8542337f4dccd3cb7fc115d936f9c357f8c6dfd84a36d5033b96dbf0021db03eb890d6a1d2b89fa3912b06a88d9f0000731954f7befdbda8e652a22001a8e"]}, @generic="74da7c91c6bbc558c1e34820be6cadf25882f86942828b0dcf28c5752f4a8d4e1123e0967c668c85eadcc4aef410918d0c5ede9b330dc04bd40d46f5b842bc1b2b84bfca778185c758a57a5d7f16da8e204d226bff352bbc29f899efd80edff005a9800a2f446973618fef1b7db467e384a6a3d9c9becca14698ac760c6cf62b704c1edb3d81538b94f15adcd8575aa747c65895b90acdcf2b413eba473a79c678b250dcc499092a05bb4bf786bc3f56815d9ff1363fef5119e02e7cdcbe967c72caa632d2588e9026b32e2d43d827541e", @typed={0x8, 0xb5, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x61, 0x0, 0x0, @uid}]}, 0x2b8}], 0x2, 0x0, 0x0, 0x4040}, 0x1)
sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002dc0)='D', 0x1}], 0x1}}], 0x2, 0x40080c0)

53.61998164s ago: executing program 5 (id=1841):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002140), &(0x7f00000001c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b402000000000000611130000000000085100000ba0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)

53.48795404s ago: executing program 5 (id=1842):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x8, 0xfffffffffffffd75, 0x0, 0x82, 0x47, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1, 0x70bd29}, 0x10}}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000180)={@none})

53.291644067s ago: executing program 5 (id=1844):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x1ff, 0x0, 0x1008000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xf4, 0xdb, &(0x7f0000000480)="cf03d77c6483d91f4bb4d8b6216e42e0e9dfef3c332510b977149f6456863734e887a8e2bec1e9537e85c5636a8318e41de6c78992c7e18ecbd2b292ea7a17f81186cfaa0c0ef16e833219af0f1c2e52d6f17ec0d34ea68d8fd69b5850f523dd46083bb2967e88961a2c2c5c675fc836793d80760f631cbc54892324cef2e862fa74bc0b516745522b7cc97254ce28e40755028a54a6cff3fd9a8ae7e6c6e7246a8e190a4558b76c7f983aa369ac0b29724efecc9826b00697906082b211c728a02ff571e7c7e362ee488ce002e7ecbd6f9fbdafb37ed119a6b64e0cccaf0ad3293227b993dc0d39c536f5a689207b9880cda13a", &(0x7f00000006c0)=""/219, 0x1, 0x0, 0x35, 0x90, &(0x7f0000000380)="24f3e6ea49bcfb483855fbf4006943d4812ac2c0e1bf38658a91aadb0efafeeb9bebdac6748bb73690d8602c5f913904e64b2bac77", &(0x7f00000007c0)="3da715d7571c6a11301df59a05a8ba939200b375922eaffb82833cf16c771a6f3488d448c35bfc87139cd8c20a0e8245ebfffe2fe8353157f0255622004f1d60b72bee281fc33c01d82eee9058b6017be275ae468a8ba85add8990480cdaadc745533554f693c1f2a4094c886b17fdb5a25eed2bbafc6455f3193c110d915f9d8c2ef3d5a55aa527625e30ce38933f96", 0x6, 0x0, 0x400}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xa)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
ioctl$SIOCAX25DELUID(r8, 0x89e2, &(0x7f0000000100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) (async)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000000), 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, 0x0, 0x0) (async)
connect$bt_rfcomm(r9, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa) (async)
shutdown(r7, 0x1) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) (rerun: 64)

53.181175697s ago: executing program 5 (id=1846):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x9, 0x11c2, 0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004090)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x94}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53003e4c6588a80000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000200)="e5974f3c00b2c515931fb6d33f46d4e47db5612a6282df6791c7c81d92", 0x1d}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x3, 0x4000000)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x2e, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x400, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r10}, 0x20)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r10, 0x101}, 0x8)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

52.523926723s ago: executing program 5 (id=1850):
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="276d8c087b087c00661ee4456dc7a8dec74c87ccd6489fc2642357c4a783087343f7fcaa7a4971bf0fdb30975fefc4ea43b84878", 0xfffffeb8, 0x0, &(0x7f00000000c0), 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x2400c040)

50.022106546s ago: executing program 1 (id=1202):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x168, 0x9, 0x1a8, 0xb, 0x2a8, 0x250, 0x250, 0x2a8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x8}, 0x6000000, 0x168, 0x1a8, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[0x0, 0x4], 0x76e8feb0b7b3f1f7}}, @common=@srh1={{0x90}, {0x58, 0x80, 0x0, 0xb, 0xfff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 0x2, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7, {0x80000000000000}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES64=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000040)="63f89496db7295983293042d", 0xc}, {0x0}], 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x2, '\x00', [@calipso={0x7, 0xfffffffffffffe1a, {0x1, 0xa, 0x5, 0x6, [0x200, 0x7fffffffffffffff, 0x5, 0xf, 0x100]}}, @enc_lim={0x4, 0x1, 0xa4}]}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf25120000000600b5002d050000050019000000000006001a0103000000050074000200000005001301010000002600be006d33135993e08f97eca4bc38fb93367af919558117ab8f28b2b3f22473adf9e4d67f00000c00810005000100020000000500c200030000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = getpid()
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000084)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffac1414aaedffffff00000000"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

38.938000401s ago: executing program 1 (id=1202):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x168, 0x9, 0x1a8, 0xb, 0x2a8, 0x250, 0x250, 0x2a8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x8}, 0x6000000, 0x168, 0x1a8, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[0x0, 0x4], 0x76e8feb0b7b3f1f7}}, @common=@srh1={{0x90}, {0x58, 0x80, 0x0, 0xb, 0xfff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 0x2, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7, {0x80000000000000}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES64=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000040)="63f89496db7295983293042d", 0xc}, {0x0}], 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x2, '\x00', [@calipso={0x7, 0xfffffffffffffe1a, {0x1, 0xa, 0x5, 0x6, [0x200, 0x7fffffffffffffff, 0x5, 0xf, 0x100]}}, @enc_lim={0x4, 0x1, 0xa4}]}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf25120000000600b5002d050000050019000000000006001a0103000000050074000200000005001301010000002600be006d33135993e08f97eca4bc38fb93367af919558117ab8f28b2b3f22473adf9e4d67f00000c00810005000100020000000500c200030000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = getpid()
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000084)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffac1414aaedffffff00000000"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

37.418450241s ago: executing program 34 (id=1850):
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="276d8c087b087c00661ee4456dc7a8dec74c87ccd6489fc2642357c4a783087343f7fcaa7a4971bf0fdb30975fefc4ea43b84878", 0xfffffeb8, 0x0, &(0x7f00000000c0), 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x2400c040)

25.829721622s ago: executing program 1 (id=1202):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x168, 0x9, 0x1a8, 0xb, 0x2a8, 0x250, 0x250, 0x2a8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x8}, 0x6000000, 0x168, 0x1a8, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[0x0, 0x4], 0x76e8feb0b7b3f1f7}}, @common=@srh1={{0x90}, {0x58, 0x80, 0x0, 0xb, 0xfff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 0x2, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7, {0x80000000000000}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES64=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000040)="63f89496db7295983293042d", 0xc}, {0x0}], 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x2, '\x00', [@calipso={0x7, 0xfffffffffffffe1a, {0x1, 0xa, 0x5, 0x6, [0x200, 0x7fffffffffffffff, 0x5, 0xf, 0x100]}}, @enc_lim={0x4, 0x1, 0xa4}]}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf25120000000600b5002d050000050019000000000006001a0103000000050074000200000005001301010000002600be006d33135993e08f97eca4bc38fb93367af919558117ab8f28b2b3f22473adf9e4d67f00000c00810005000100020000000500c200030000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = getpid()
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000084)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffac1414aaedffffff00000000"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

21.887702232s ago: executing program 7 (id=2012):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800700000000000000000000000000000000000000000001d7aab1d96e9e7acd9987447a95f2aee6b3f6f4fde6a7644518f05434b32fdd348f0969631bee8b771b826e18aa54ff731d76a41dae473a4989d83605b7a28003f0fe082c4a5df047b424f5a2d453bd01cc5070572be7fa0e0bc3a506545643dabc0bb449fd20b48af613eb20373678614f41af35911158788c9c84ecc6916265fcf485a3aa65ad17a48"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800700000000000000000000000000000000000000000001d7aab1d96e9e7acd9987447a95f2aee6b3f6f4fde6a7644518f05434b32fdd348f0969631bee8b771b826e18aa54ff731d76a41dae473a4989d83605b7a28003f0fe082c4a5df047b424f5a2d453bd01cc5070572be7fa0e0bc3a506545643dabc0bb449fd20b48af613eb20373678614f41af35911158788c9c84ecc6916265fcf485a3aa65ad17a48"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='rpcgss_svc_seqno_bad\x00', r1}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xa) (async)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xa)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0003000500000000000072080003000500000000", 0x39}], 0x1)
ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) (async)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000), 0x4)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa)
shutdown(r3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="18080000a10000002ce47ae5cb56b5128500000018180000686487a512b584114783e0973500000000000000023a6311ce6d4b04000400005d770cabb1ec0dad61496ed78d668cac7670eaf8c6451c3cf4a41e48a4eb0e1cb778aeeaa3464dc644acd0a529e16bdca3a8c59268c53008c3fb036f9222381b6cff5fdb7a629c5f4b85ff0afd24d8de8f468726e7c431b5816bd372774b69ec9b9d61b400"/174, @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000", @ANYBLOB="b7369a26d80bf65ea29f845882eecc4d18846720", @ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r8, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
connect$bt_rfcomm(r8, &(0x7f0000000180)={0x1f, @any, 0x4}, 0xa)

20.864863498s ago: executing program 7 (id=2013):
r0 = socket(0xf, 0x80000, 0xc60)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x14)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9287, '\x00', r1, r2, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$caif_stream(0x25, 0x1, 0x4)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000140)={0x6000200e})
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="5429dd8b4ec415b71bda1485b25ea181", 0x10)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='xen_mc_flush_reason\x00', r5, 0x0, 0x400}, 0x18)
ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f00000002c0))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r8, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20024001}, 0x1)
write$bt_hci(r0, &(0x7f0000000440)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
recvfrom$unix(r5, &(0x7f0000000480)=""/48, 0x30, 0x102, 0x0, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000540)={&(0x7f0000000500)="1a4d767a331edbe4490da6a35087d834550feee087002e70a0c923e9b2a8452e9c1db195867197855dfe2e456a949f80e8930557", 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
setsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f00000005c0)="c6dd106bdbce76f444cec54aecf4dab997e27dbe571eb3dcaff6c0bb3bb090277e59dbac4615a6b9703e9dc73e584191b119f7e8c406c056087be0d6abe5e18d0d43a577e01900842da59ba931daa0186446b0560d18323e466b3baec998f9bcdd54b631d3742f140d3d66238a7d94facf85b99d1b2d400bb6dc1b1a9f0627609c844c5ee2c73e76f3831969f9351854f1118cf8700a25c194df91091622d3faf4e9f4b38f0f66fc9cf265cbb01c110829e44c47750d3aba49bcf57d139488521de841c6ac0f29f611e0f8c15415b2a708c96bc3095a529aad7ee8e2f0ee69fb80b4cc8ed32af11c682c2dd4e27d3805a43d05965005", 0xf6)
openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x40c400, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_commit_stop\x00', r5, 0x0, 0x5}, 0x18)
recvmsg(r0, &(0x7f0000002b40)={&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/83, 0x53}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/62, 0x3e}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/14, 0xe}, {&(0x7f0000001a80)=""/39, 0x27}], 0x8, &(0x7f0000001b40)=""/4096, 0x1000}, 0x2040)
r10 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002b80)={<r11=>r10})
sendmsg$nl_generic(r11, &(0x7f0000002e40)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e00)={&(0x7f0000002c00)={0x1c4, 0x3b, 0x20, 0x70bd2d, 0x25dfdbfb, {0xc}, [@nested={0x1ad, 0x137, 0x0, 0x1, [@generic="1ce2b706ccfed9a47149f189af72489001519b552898862e7278fa7e46cf8695092b153e78779b3784ecacb7dd396dae1fdec134595bb099ebefe18a297aa5a7aba8f64569f48763bfd0b9729942cf5788a2c438198a42cf4fca15d9428bc1c509293793a8c96b0c488ad2ace958de4d79d026f5057f6eaa42ca7bd73c94c9dc86a3d9733832e2825e80a117e2f2978ea438a9a629ae421beeb06a56055dd5385fb37576bbe7bc93d4610451f7", @generic="e9a42679744310cad0f6b0b15f97fc08769ad9e8b8126382e651f70814dc6bc68ec75e6194e3935fb4e304b8ee85bbda25181a726d45e7c18de619d70cccfeabba3d39fb867d39253e955af84df619965f6a1fa0bd9e356268fec613bcd2c2e34a370ff71183dbf5bf115019ea4cf794eee418dacb1c1c9f976bad13d338e0138e7a363bff0c562d409b0f7fb1d2226262aeee2730f54e15659c0cf392525ef2ef21b531ffb2b17de1d26542c5b72a111d34b2ed2e2a6a3a90a4e0c8804b542c8912848a2d554854ef39783ba76a0daadc4cfb17126dac9c7e2548b4dce0d1cf73d7a9c98568d765c555e6c50c55312dad3901ab10c4a8fe43e76bf6"]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x44}, 0xc800)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000002e80)={"ce159092f32560cd739b7abf6d5aa169", <r12=>0x0, 0x0, {0x7ff, 0x1ff}, {0x1741, 0x3}, 0x6, [0xe, 0x5, 0x9f6, 0x85, 0xff, 0x101, 0x6, 0x5, 0xfffffffffffffff9, 0x6f9, 0x0, 0x0, 0x2, 0xfffffffffffff000, 0x3, 0x2f]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000002f80)={"4fd58fbef18ad815b8f9191a28a0a3b3", r12, 0x0, {0xffffffffffffffff, 0x7}, {0x7fffffff, 0x6}, 0x5, [0x2, 0xb2, 0x9, 0xfffffffffffffff8, 0x100, 0x5, 0x8, 0x0, 0x7, 0x2, 0x1, 0x88b0, 0x401, 0x2e02, 0xe2a8, 0x4]})
r13 = accept4$x25(r11, &(0x7f0000003080)={0x9, @remote}, &(0x7f00000030c0)=0x12, 0x80000)
r14 = openat$cgroup_subtree(r5, &(0x7f0000003100), 0x2, 0x0)
ppoll(&(0x7f0000003140)=[{r13, 0x4000}, {r14, 0x5}, {r10, 0x8}, {r4, 0xd111}, {r2}, {r9, 0x402}, {r11, 0x2440}], 0x7, &(0x7f0000003180)={0x77359400}, &(0x7f00000031c0)={[0xace]}, 0x8)

19.854893272s ago: executing program 7 (id=2018):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff7525206cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651dde583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467c8a7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080000000000000000000000000400000000000000000000000000000000000000100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000001140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00q'], 0x44}}, 0x0)

19.623836753s ago: executing program 7 (id=2019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}, 0xfc2}], 0x1, 0x100, 0x0)
bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000040)="fdd6adfd690900d0b57a3169f287c7b76546f6ea", 0x14, 0x0, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x3, 0x6, @link_local}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007301037010190000950000ffe4000001ef27935442d766f22e9b5ddc97263a"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

19.462257184s ago: executing program 7 (id=2021):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071122a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000029200000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a7a56b7b35fe45f3a98073d46c5797b074080c70527d4c2496e01fe4d78d34baeef5c82ff6fef0bef7838080c865004c9417049558591dfa612b6bfdcc8803a817d6426c5aee4df037f7b856126f8392e40be7ed0cbd577bb5fff1069e8bb2f755f9ac98e795ea04c76d98a74ade100242515f92a185080bbe92f112a6856b3cfdb757e67a68626a4e08944b64fdf6b01930049ed6d2dfa7ae1173d53efc49a64e9dba7472a0974f590ef38456f7962b023e13c4d3a02db90d9c05905b37dc8f87ac2de4bfa60f8c79bbad8230bb4f578f52", @ANYRES64=0x0], 0x20)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r7], 0x38}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000000100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x258, 0xd0, 0xd0, 0x0, 0x258, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xf7}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0xfffffffffffffec4)

19.000518861s ago: executing program 7 (id=2027):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
getsockopt(r0, 0x3, 0x3, &(0x7f0000000340)=""/205, &(0x7f0000000080)=0xcd)
pipe(&(0x7f00000001c0))

13.435600889s ago: executing program 1 (id=1202):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x168, 0x9, 0x1a8, 0xb, 0x2a8, 0x250, 0x250, 0x2a8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x8}, 0x6000000, 0x168, 0x1a8, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[0x0, 0x4], 0x76e8feb0b7b3f1f7}}, @common=@srh1={{0x90}, {0x58, 0x80, 0x0, 0xb, 0xfff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 0x2, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7, {0x80000000000000}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES64=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000040)="63f89496db7295983293042d", 0xc}, {0x0}], 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x2, '\x00', [@calipso={0x7, 0xfffffffffffffe1a, {0x1, 0xa, 0x5, 0x6, [0x200, 0x7fffffffffffffff, 0x5, 0xf, 0x100]}}, @enc_lim={0x4, 0x1, 0xa4}]}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf25120000000600b5002d050000050019000000000006001a0103000000050074000200000005001301010000002600be006d33135993e08f97eca4bc38fb93367af919558117ab8f28b2b3f22473adf9e4d67f00000c00810005000100020000000500c200030000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = getpid()
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000084)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffac1414aaedffffff00000000"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

7.723768427s ago: executing program 2 (id=2090):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
bind$can_j1939(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008018)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYBLOB="ac1054dd11a399d27f6e0ec3400d466938e02c5b461b31db3ee1bc216bdf2b483d20d192558dbae8d5624f61c69d0b1b656258d9078a3cfb7d97689d", @ANYBLOB="000000000010000400"/24], 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x300)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0xd4043f9e78e97721}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x24000000)
connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x268, r12, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf0, 0x4, "1699b9c73b14411a27c687a3896b422cefdb236fda5284cf5209ee082878ba1e9c644b79093ce82efb044241a3f5c021e29fa107d0e384f2dc690f8ffc663d7e97ff54e0e9250b40932083db0392b1c4bf3a939a6409f242d4bd3703154f8ead0553100f45de5fa86a4c7b5f9d87dc299118a2919e423a48f8426e5a8aead48b88d35f188acbbf930e9e4f3c4a8dca81a60f4c1e9ab8d1d0f17eddfd199a26f876b92a134097cab2e2a7713c3b9f87eccd05a5ed119b2d6736d3aaad3ccf58ee778f1a8893ded98d5a90dc432571ee297a0c35ba3ab5d00a9ce02e892b981239410de3f1fae88cd4e31a86dd"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_OURS={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1414dc20}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "7eea73ba695a86b7bb9df8bfaaac8b5f8fd5310238c146140b406be7c38919f1c11ecd12ad332e396a228d4757185dbb00f845c9f19cd7085ba03ea8c6b121c2fc18efd0020d11e70ebf337a29dc0354276422f45731cba32d388eab192600cb9f2e4a851a4b8526fe93f987100b5d6eda53ad7cd388e2e880cf082e36916522a89605db53e6149d9217ab83d56bddfb1c862ffa78be838518e2f01afd11cc1c102e88c570152965ba3aa75b82483a2405c50e92c7591e00b5db4d90372797aeb2432d30e07296eed8a917cce9e7da716a2be83c36b79efaa3e9f26ae781f6c76cdd08dc937e3fde80c3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x268}, 0x1, 0x0, 0x0, 0x40810}, 0x40800)
r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006d0000032abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040000ba910055de"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000007c0)={0x0, 'macvtap0\x00', {0x3}})
socket$inet_udplite(0x2, 0x2, 0x88)

7.491000744s ago: executing program 2 (id=2093):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000003c0)=""/86, 0x56, <r2=>0x0, &(0x7f0000000440)=""/15, 0xf}}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@ldst={0x2, 0x0, 0xcfaa278ed8cbde89, 0x5, 0x3, 0xffffffffffffffbf, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000580)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x3, 0xc2, 0x6}, 0x10, 0x2a31f, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xf, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b000000534976d4ee92333a278f007514e3e95d118017020000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pK    \x00'}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1000, 0x382c, 0x2, 0xfd670e6e7a145ae8, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0xa, 0x2, 0x8, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r10, r11}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x8000, 0xc1, &(0x7f0000000200)=""/193, 0x40f00, 0x8, '\x00', r1, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x5, 0xc0, 0x8}, 0x10, r2, r3, 0x2, &(0x7f0000000a00)=[r4, r5, r6, r7, r8, 0xffffffffffffffff, r11], &(0x7f0000000a40)=[{0x4, 0x3, 0xa}, {0x5, 0x4, 0x0, 0x2}], 0x10, 0x6, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095", @ANYRESOCT=r3, @ANYRES16=r11], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r12}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

6.539901155s ago: executing program 2 (id=2101):
socketpair(0x5, 0x4, 0x6, &(0x7f0000000000))
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

6.359425083s ago: executing program 2 (id=2103):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$netlink(0x10, 0x3, 0x12)
bind$netlink(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x10016}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2c004881}, 0x4000004)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe3a)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
write$tun(r3, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c00000e"], 0x73)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007c00000200000d0000000008000000050000400a00000e040000000400000000000008030d00000200000000000009010000000700000000000002040000000c00000000000010040000000800000000000009000000000800000001010100000000001000000002000000020000000000000100000000180054ffffffff2e8b0b000000000000"], &(0x7f0000000700)=""/212, 0xa0, 0xd4, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000011140100cf4413380000000008000100"], 0x30}}, 0x24000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x5, 0xfffffffc, 0xe010, r6, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x6, @value, @void, @void, @value}, 0x50)
pwritev(r8, &(0x7f00000001c0)=[{&(0x7f00000003c0)="005140bbcd4d0dec2c0a5f5a8b0331d6183b4a50dfef4e320adc5fb1e0f5dbf146dea353a0353f74bfd56ad0aa5452193182dc634100afbfcca2dca73041c5ce763b", 0x42}, {&(0x7f0000000440)="bd1ae46c69dd1648b77a33f9e644344654ed0b4f2f5192fa0226f70ef21a61652d03174fbcf8de2c4053b47aa01e4cfeb910c3cf1b58cf50d5dcae2a80cb5f34ec9300cbb56f45eee302bbe909cdd6b1881a748d1b17a92bde7d1ef6e160fb43a5878fa0c0142aef372de2eb3999736c7fde8df2f071651e491a74faba08b3532415fad33ab0bb1fd19ea44530a3b02f2526d3f546da2d4d233702a0393d21b2cdae420093591c31f1c6904e58af7af89abdd75d68ea039882e4f3473ec2ba10ab5195eefa917bafc43b0b29680effc2", 0xd0}, {&(0x7f0000000540)="e5d2fc1bdbaae636f35f0f54211eb86fc796db9a8e65e198f64121efb5c4f1d58bb3884eabe9e33f4990567c84afdeb3e6a083da68e98b4c717ae84492c150c1c9c04b05e8b4f6427860b68c218f06d3699e30880604d16f7a70eb963f369946af28a66dfbea3eb15c62dfd1ca049321a918d18ec24ad74d48d11172cad612117b70a61d2b8ac810bad7eafe981261f0db351762d84576643dd8718e2bbab7fdecdbbdbcdc6d63b103c7f40613a44a1a815a22ec6c9edd298a7cb7a79263c39765ac419c704e0b875efc561a9e5ebb43", 0xd0}], 0x3, 0xfffffff7, 0x10000)

6.254296978s ago: executing program 0 (id=2105):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)

6.185313636s ago: executing program 0 (id=2106):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10)
sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)="8252f7dee26d77e8673d268697065aec0ac3391df006c5c1892d48", 0x1b}], 0x1}}], 0x1, 0x4000c000)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd)

6.039586288s ago: executing program 0 (id=2107):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x3e) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x4040001}, 0x14084) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf9400000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x1, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (rerun: 32)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) (async)
write(r5, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x188}}, 0x0) (async, rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0x20000080)

4.258414229s ago: executing program 2 (id=2108):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="9e68582c7763d86a276e8f801b0f021fb9783d61fa12a61404b95e1601e2dbc97b9359ba448bfe7b544d48a41c527233b40fd57d540866e52ca8c303ced2cbd8"], 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
unshare(0x40020000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000420000000600000008000000000000008ec70e003aed135f1b3bda55fdf7be336670014f8cc617160b43ffd8ab96fd45ecac05965e896fa3c461d8ff9371664d2a0ff38aa460978d50b472b7aebdc7891fa7a516977e3192bd83d3f8e5f1ea4b9cb61be688439cf83cf72f89da2f3edbb21b917563499a393f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00\a\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r5, 0x5133c4bf67cd92a7}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

4.10987992s ago: executing program 6 (id=2110):
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x70, 0x0, [{@initdev}, {@empty}, {@multicast1}, {@remote}, {@broadcast}, {@empty}, {@remote}]}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
r1 = socket$inet(0x2, 0x800, 0x187)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'ipvlan0\x00', {}, 0x4})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'geneve0\x00', 0x1}, 0x18)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x0, 0x98, &(0x7f00000001c0)="b508405ba654b56074b2bec7aa9b56fcf116298e0232b39e0336ce26f4e25b506b89086c5b0256d299babf2f0e84bac643ae5e7a130fc751a267456cb6e5723f81431a8bf469078f6dd85db3bbb676c0c967d8a5da3735bd7777a6f41514b0f121ccf229b1b7da68c31de4cb130fe381b90386269df9768befa0273d65fb06be70a6d673e4909b86ccd79c1f8dc221a598c2d6f250a1c0ea", 0xaf, 0x88, 0x1, 0x8, 0x9, 0x3, 0x2, 'syz0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000580)={r0, r1, 0x4, 0x9c, &(0x7f00000004c0)="0448f44ad1a209abdf106fe393ebaeeb54f55dd94882faef855e9beb6b14569e2fc1c4cbc6f7fce73558f0601e1d2bfe7b339b9f5c43563547c76e75aa372f0e37b10217ee7749b0aa4d4af32e0d20274a1426d9c6af96f06fe3bf7cc017f6c50f87bcf8099a350332d8a33b0fa836ee431eee8c5bb82be4a88c6e5754dceafae0b4510b1b3a797a14a7e56342c9e631f02e9598d7b4dd82dc1d5be2", 0xaf, 0x77, 0x5, 0x4800, 0x8, 0x2, 0xa84, 'syz0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000680)={<r7=>0x0, 0x1000, "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"}, &(0x7f00000016c0)=0x1008)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001700)={r7, 0x4, 0x1}, 0x8)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001740), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r8, 0x0, 0xb4, 0x36, &(0x7f0000001780)="fa8a79016d59021df5bb75fb1afae66532489e6814c940b6bf08a552a73132a047c72aa9d38cb0fec1fb77d63195ca1204914d12d562c9675d9654ecea97a84b8153728fa3fc0c127b367c802fe90b2853429ed1216d89722bd37dccf33e00a85d79125968b18af122c502b614f34cb30be0e815312b9f1cfb3206fa1f73a2ea75a9837e85852fa4194e79e3cb9a4e571eb50f1f901a93410ec4b524e2d738bf406896f729f85f3a262f4739272309d296915d90", &(0x7f0000001840)=""/54, 0x7, 0x0, 0x95, 0xac, &(0x7f0000001880)="18b159b5f2048069ff3c05dc868347d91c2725a6313869bea0b47984bb7d3a443df301ae35fa7141f00fe6658326565d10456863896a8c46d561dc8a7d12cce27bdcb7226f5c35a11d062ba39eeb2017e5e4e578484de3cfba206419c14159f50511396bb565e3ebb59a0dbf8297b75950398d4746e434828e85ab43e9e0923b1220678d76fc21d72be43d933e1ac1b7dcd180964d", &(0x7f0000001940)="b0f543c3059737b3a698dc00f8ac10584e0257d63bd75817d168509c52a71d4d71956300d8b7156188cbf9fa7cb00696c85e82fe4383542a5d993b3bc6ead7d5ee07d9f7931daf7fad79c67f3ab72c0514ca3763f30160cb09ff76a01bb60b3f4d3b1785853c5b687cc91d42bac4dc640d5a8a69fd76e04d3570ea597fbd362c66daeea908c03820ead9010481669097a47fbfb9a2b75fb4ffc8b1c226f7f192e3238d46be2496b9f2acb0a4", 0x1, 0x0, 0x7}, 0x50)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r9 = socket$tipc(0x1e, 0x5, 0x0)
pipe(&(0x7f0000001b80)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000001c00)={0x3, &(0x7f0000001bc0)=[{0x3, 0x8, 0xf7, 0x9}, {0x3, 0x0, 0x40, 0x6}, {0x24, 0x6, 0x5, 0x3cde}]})
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000001c40)=0x7, 0x4)
sendmsg$nl_route(r5, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)=@ipv6_getnexthop={0x50, 0x6a, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20006041}, 0x400c002)
socket$inet6(0xa, 0x80000, 0x277)
syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), r0)
socket$inet_sctp(0x2, 0x1, 0x84)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000001e00)={0x40000005})

3.831611537s ago: executing program 6 (id=2111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="010020000200"})
r4 = socket(0x2, 0x6, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ffffffe, 0x0, 0x1}, 0x10)
sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)="2e0000004a008102e00f80ecdb4cb9020a69b3ab09f7694bd049e8dcae8e8771638c43638b182475315d29d7d8cd23a337c91c2f9a394d9dbb6784f7f8a070e13a0b69246595cc385e4b037f4d5fafa63701864bd64def6b42a316eb81a56dae590460486f83f4afc0373ce1eae73f8261cc26783780f1e3ca467fe9ab50dc416eeebe6eab2027e3fc3286f77d185e34fce7cca1852208", 0x97}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000280)}, {&(0x7f0000000280)=""/19, 0x13}], 0x3, &(0x7f0000000940)=""/116, 0x74}, 0x40000060)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffbfdf8, {0x0, 0x0, 0x0, r6, {}, {0x5}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400009e}, 0x4000000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071103f000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000380)={0x0, 0x2, 0x90, 0x3})
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x4, @empty}}, 0x0, 0x0, 0x47, 0x0, "00000000000000000711be67bd584ecd8b227692cebc00924f2db4b696072e4881f40a0d8f4c2fdea78893bc2c160df3c31db4153cfd9221d01c7900"}, 0xffffffffffffffde)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000a1cde2880000000091101f000000000095000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="030300000000fcffffff0c00000008000300e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet_int(r8, 0x0, 0x21, &(0x7f0000000200)=0x74, 0x4)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

3.711344114s ago: executing program 35 (id=2027):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
getsockopt(r0, 0x3, 0x3, &(0x7f0000000340)=""/205, &(0x7f0000000080)=0xcd)
pipe(&(0x7f00000001c0))

3.456596729s ago: executing program 6 (id=2113):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020600)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r3, &(0x7f0000000080)=""/186, 0xba)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000963c00058008000640000000030900010073797a30"], 0x10c}}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r5, &(0x7f0000000340)="7473134d2323f2c4fe1d7ebbaebc45fcfaa1985d5d87de14ffef7ddd17f547f308b3b4c513ae1f559128c994618d46bebf372a14b270a8ac0aaf5af6ed4e48c382ee58b99c4b94122c95cb7756644136c2df4aba495edccbc472d00a455ae5c28d2441aeb0734298e735ef33a9e699fae831acd9768c", &(0x7f00000003c0)=""/13, 0x4}, 0x20)
socket$unix(0x1, 0x5, 0x0)
sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19", 0x54}, {&(0x7f0000001500)="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", 0x1b3}, {&(0x7f0000000640)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28d", 0x75}, {0x0}], 0x4}}], 0x4, 0x4000011)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r6, 0x89e8, 0x0)

2.240064834s ago: executing program 0 (id=2114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0)

2.198493074s ago: executing program 1 (id=1202):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x168, 0x9, 0x1a8, 0xb, 0x2a8, 0x250, 0x250, 0x2a8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x8}, 0x6000000, 0x168, 0x1a8, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[0x0, 0x4], 0x76e8feb0b7b3f1f7}}, @common=@srh1={{0x90}, {0x58, 0x80, 0x0, 0xb, 0xfff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 0x2, 0x1000}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7, {0x80000000000000}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES64=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000040)="63f89496db7295983293042d", 0xc}, {0x0}], 0x3}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x2, '\x00', [@calipso={0x7, 0xfffffffffffffe1a, {0x1, 0xa, 0x5, 0x6, [0x200, 0x7fffffffffffffff, 0x5, 0xf, 0x100]}}, @enc_lim={0x4, 0x1, 0xa4}]}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805fbaea83570000", @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf25120000000600b5002d050000050019000000000006001a0103000000050074000200000005001301010000002600be006d33135993e08f97eca4bc38fb93367af919558117ab8f28b2b3f22473adf9e4d67f00000c00810005000100020000000500c200030000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = getpid()
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000084)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffac1414aaedffffff00000000"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

2.148181827s ago: executing program 6 (id=2115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0xe}], 0x1}}], 0x2, 0x4000)
shutdown(r2, 0x1)
setsockopt(r2, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x44, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000002080001400000000070000000180a01040000000000000000010000000900020073797a30090000000900010073797a3000000000"], 0xf8}}, 0x0)

516.247798ms ago: executing program 0 (id=2116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x24004000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0)

515.488535ms ago: executing program 2 (id=2117):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRESHEX], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'xfrm0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x1a, 0x0, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4) (async)
r7 = socket$netlink(0x10, 0x3, 0x13) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebaeb51382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r12, @ANYBLOB="2c6f6a7b9b91266e996219bc6993e5d9807f594414ca8d973fc4153ac7cd351074a8ee6f7b5ceadd623b7cc607a216cc15de2edf435b7c76c787e9d0870e13361f00d2e76a48a6"], 0x1c}}, 0x0) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10)

511.12204ms ago: executing program 6 (id=2118):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x4040080)

203.716196ms ago: executing program 6 (id=2119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
r3 = getpid()
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, 0x0, &(0x7f0000000080)}, 0x20)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000240)={0x7, 'wlan1\x00', {0x1273}, 0x9})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001140)=[@in6={0xa, 0x4e24, 0x8, @local, 0x5}]}, &(0x7f0000000180)=0x10)
connect$netlink(r0, &(0x7f0000000280)=@unspec, 0xc)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40010401}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x20000008)
socket$igmp6(0xa, 0x3, 0x2)

0s ago: executing program 0 (id=2120):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x10000009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000b00)={'bond0\x00', &(0x7f0000000a40)=@ethtool_pauseparam={0x13, 0x0, 0x36, 0x101}})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x1, @default, @bpq0, 0xf, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)

kernel console output (not intermixed with test programs):

ng): (slave bond_slave_1): Releasing backup interface
[  332.829520][ T7481] bond0 (unregistering): Released all slaves
[  333.096959][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  333.497168][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  333.839561][T12039] dummy0 speed is unknown, defaulting to 1000
[  333.892239][T12069] FAULT_INJECTION: forcing a failure.
[  333.892239][T12069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.929482][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.6.1603 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  333.929512][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  333.929525][T12069] Call Trace:
[  333.929533][T12069]  <TASK>
[  333.929542][T12069]  dump_stack_lvl+0x189/0x250
[  333.929583][T12069]  ? __lock_acquire+0xaac/0xd20
[  333.929615][T12069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.929651][T12069]  ? __pfx__printk+0x10/0x10
[  333.929671][T12069]  ? __might_fault+0xb0/0x130
[  333.929708][T12069]  should_fail_ex+0x414/0x560
[  333.929734][T12069]  _copy_from_user+0x2d/0xb0
[  333.929762][T12069]  __sys_bpf+0x1ed/0x860
[  333.929789][T12069]  ? __pfx___sys_bpf+0x10/0x10
[  333.929828][T12069]  ? ksys_write+0x1f0/0x250
[  333.929864][T12069]  __x64_sys_bpf+0x7c/0x90
[  333.929886][T12069]  do_syscall_64+0xf6/0x210
[  333.929907][T12069]  ? clear_bhb_loop+0x45/0xa0
[  333.929931][T12069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.929950][T12069] RIP: 0033:0x7f9a8a98e969
[  333.929976][T12069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.929993][T12069] RSP: 002b:00007f9a8b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  333.930014][T12069] RAX: ffffffffffffffda RBX: 00007f9a8abb5fa0 RCX: 00007f9a8a98e969
[  333.930029][T12069] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  333.930041][T12069] RBP: 00007f9a8b7d5090 R08: 0000000000000000 R09: 0000000000000000
[  333.930053][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.930065][T12069] R13: 0000000000000001 R14: 00007f9a8abb5fa0 R15: 00007ffcfcb19928
[  333.930097][T12069]  </TASK>
[  334.136943][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  334.163250][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1604'.
[  334.537148][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  334.617137][   T56] Bluetooth: hci5: command tx timeout
[  334.617562][ T5850] Bluetooth: hci4: command 0x0405 tx timeout
[  334.639622][T12072] 8021q: adding VLAN 0 to HW filter on device bond1
[  334.706521][ T7481] hsr_slave_0: left promiscuous mode
[  334.715216][ T7481] hsr_slave_1: left promiscuous mode
[  334.721510][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.744499][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.771653][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.779550][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.832174][T12091] netlink: 'syz.6.1611': attribute type 30 has an invalid length.
[  334.861718][ T7481] veth1_macvtap: left promiscuous mode
[  334.868873][T12095] x_tables: duplicate underflow at hook 1
[  334.875796][ T7481] veth0_macvtap: left promiscuous mode
[  334.883234][ T7481] veth1_vlan: left promiscuous mode
[  334.889493][ T7481] veth0_vlan: left promiscuous mode
[  335.181446][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  335.403717][ T7481] team0 (unregistering): Port device team_slave_1 removed
[  335.456321][ T7481] team0 (unregistering): Port device team_slave_0 removed
[  335.577051][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  335.670443][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'.
[  336.069453][T12091] bridge0: port 3(erspan0) entered blocking state
[  336.076687][T12091] bridge0: port 3(erspan0) entered disabled state
[  336.084029][T12091] erspan0: entered allmulticast mode
[  336.091570][T12091] erspan0: entered promiscuous mode
[  336.097690][T12091] bridge0: port 3(erspan0) entered blocking state
[  336.104283][T12091] bridge0: port 3(erspan0) entered forwarding state
[  336.191975][T12112] SET target dimension over the limit!
[  336.216919][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  336.268175][T12116] FAULT_INJECTION: forcing a failure.
[  336.268175][T12116] name failslab, interval 1, probability 0, space 0, times 0
[  336.352711][T12116] CPU: 0 UID: 0 PID: 12116 Comm: syz.6.1616 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  336.352737][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  336.352746][T12116] Call Trace:
[  336.352753][T12116]  <TASK>
[  336.352760][T12116]  dump_stack_lvl+0x189/0x250
[  336.352791][T12116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.352813][T12116]  ? __pfx__printk+0x10/0x10
[  336.352833][T12116]  ? __pfx___might_resched+0x10/0x10
[  336.352847][T12116]  ? fs_reclaim_acquire+0x7d/0x100
[  336.352873][T12116]  should_fail_ex+0x414/0x560
[  336.352894][T12116]  should_failslab+0xa8/0x100
[  336.352915][T12116]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  336.352936][T12116]  ? __get_vm_area_node+0x131/0x2d0
[  336.352960][T12116]  __get_vm_area_node+0x131/0x2d0
[  336.352984][T12116]  __vmalloc_node_range_noprof+0x2f1/0x12c0
[  336.353006][T12116]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.353046][T12116]  ? aa_get_newest_label+0xf7/0x5d0
[  336.353064][T12116]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  336.353086][T12116]  ? _parse_integer_limit+0x1ae/0x1f0
[  336.353104][T12116]  ? rcu_is_watching+0x15/0xb0
[  336.353128][T12116]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.353149][T12116]  __vmalloc_noprof+0x7a/0x90
[  336.353170][T12116]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.353190][T12116]  bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.353214][T12116]  bpf_prog_alloc+0x3c/0x1a0
[  336.353236][T12116]  bpf_prog_load+0x735/0x1930
[  336.353263][T12116]  ? __lock_acquire+0xaac/0xd20
[  336.353286][T12116]  ? __pfx_bpf_prog_load+0x10/0x10
[  336.353325][T12116]  ? bpf_lsm_bpf+0x9/0x20
[  336.353344][T12116]  ? security_bpf+0x7e/0x300
[  336.353360][T12116]  __sys_bpf+0x5f1/0x860
[  336.353389][T12116]  ? __pfx___sys_bpf+0x10/0x10
[  336.353419][T12116]  ? ksys_write+0x1f0/0x250
[  336.353447][T12116]  __x64_sys_bpf+0x7c/0x90
[  336.353464][T12116]  do_syscall_64+0xf6/0x210
[  336.353481][T12116]  ? clear_bhb_loop+0x45/0xa0
[  336.353500][T12116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.353533][T12116] RIP: 0033:0x7f9a8a98e969
[  336.353548][T12116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.353563][T12116] RSP: 002b:00007f9a8b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  336.353580][T12116] RAX: ffffffffffffffda RBX: 00007f9a8abb5fa0 RCX: 00007f9a8a98e969
[  336.353592][T12116] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  336.353603][T12116] RBP: 00007f9a8b7d5090 R08: 0000000000000000 R09: 0000000000000000
[  336.353613][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.353622][T12116] R13: 0000000000000001 R14: 00007f9a8abb5fa0 R15: 00007ffcfcb19928
[  336.353659][T12116]  </TASK>
[  336.353667][T12116] warn_alloc: 1 callbacks suppressed
[  336.353675][T12116] syz.6.1616: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  336.398049][T12121] netlink: 'syz.2.1617': attribute type 13 has an invalid length.
[  336.620610][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  336.669042][T12039] chnl_net:caif_netlink_parms(): no params data found
[  336.670637][T12116] ,cpuset=/,mems_allowed=0-1
[  336.696273][T12116] CPU: 1 UID: 0 PID: 12116 Comm: syz.6.1616 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  336.696296][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  336.696307][T12116] Call Trace:
[  336.696314][T12116]  <TASK>
[  336.696339][T12116]  dump_stack_lvl+0x189/0x250
[  336.696372][T12116]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  336.696398][T12116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.696426][T12116]  ? __pfx__printk+0x10/0x10
[  336.696458][T12116]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  336.696476][T12116]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  336.696499][T12116]  warn_alloc+0x214/0x310
[  336.696531][T12116]  ? __pfx_warn_alloc+0x10/0x10
[  336.696565][T12116]  ? __get_vm_area_node+0x27f/0x2d0
[  336.696595][T12116]  __vmalloc_node_range_noprof+0x316/0x12c0
[  336.696643][T12116]  ? aa_get_newest_label+0xf7/0x5d0
[  336.696665][T12116]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  336.696691][T12116]  ? _parse_integer_limit+0x1ae/0x1f0
[  336.696713][T12116]  ? rcu_is_watching+0x15/0xb0
[  336.696742][T12116]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.696765][T12116]  __vmalloc_noprof+0x7a/0x90
[  336.696790][T12116]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.696814][T12116]  bpf_prog_alloc_no_stats+0x4a/0x4e0
[  336.696841][T12116]  bpf_prog_alloc+0x3c/0x1a0
[  336.696870][T12116]  bpf_prog_load+0x735/0x1930
[  336.696900][T12116]  ? __lock_acquire+0xaac/0xd20
[  336.696927][T12116]  ? __pfx_bpf_prog_load+0x10/0x10
[  336.696972][T12116]  ? bpf_lsm_bpf+0x9/0x20
[  336.696994][T12116]  ? security_bpf+0x7e/0x300
[  336.697013][T12116]  __sys_bpf+0x5f1/0x860
[  336.697037][T12116]  ? __pfx___sys_bpf+0x10/0x10
[  336.697072][T12116]  ? ksys_write+0x1f0/0x250
[  336.697110][T12116]  __x64_sys_bpf+0x7c/0x90
[  336.697130][T12116]  do_syscall_64+0xf6/0x210
[  336.697148][T12116]  ? clear_bhb_loop+0x45/0xa0
[  336.697170][T12116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.697186][T12116] RIP: 0033:0x7f9a8a98e969
[  336.697201][T12116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.697214][T12116] RSP: 002b:00007f9a8b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  336.697229][T12116] RAX: ffffffffffffffda RBX: 00007f9a8abb5fa0 RCX: 00007f9a8a98e969
[  336.697240][T12116] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  336.697251][T12116] RBP: 00007f9a8b7d5090 R08: 0000000000000000 R09: 0000000000000000
[  336.697262][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.697272][T12116] R13: 0000000000000001 R14: 00007f9a8abb5fa0 R15: 00007ffcfcb19928
[  336.697300][T12116]  </TASK>
[  336.974974][ T5831] Bluetooth: hci5: command tx timeout
[  337.017180][T12116] Mem-Info:
[  337.021635][T12116] active_anon:6857 inactive_anon:0 isolated_anon:0
[  337.021635][T12116]  active_file:2150 inactive_file:39945 isolated_file:0
[  337.021635][T12116]  unevictable:768 dirty:334 writeback:0
[  337.021635][T12116]  slab_reclaimable:11427 slab_unreclaimable:183425
[  337.021635][T12116]  mapped:40236 shmem:1376 pagetables:842
[  337.021635][T12116]  sec_pagetables:0 bounce:0
[  337.021635][T12116]  kernel_misc_reclaimable:0
[  337.021635][T12116]  free:1218017 free_pcp:444 free_cma:0
[  337.076244][T12124] xt_CT: You must specify a L4 protocol and not use inversions on it
[  337.084909][T12124] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1618'.
[  337.122285][T12124] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1618'.
[  337.160724][T12116] Node 0 active_anon:27528kB inactive_anon:0kB active_file:8600kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160944kB dirty:1336kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12280kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  337.204520][T12116] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  337.253400][T12116] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  337.261214][T12121] ip6gretap0: left promiscuous mode
[  337.280694][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  337.303680][T12121] 8021q: adding VLAN 0 to HW filter on device team0
[  337.312938][T12116] lowmem_reserve[]: 0 2503 2504 2504 2504
[  337.327425][T12121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.347444][T12116] Node 0 DMA32 free:908128kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:27420kB inactive_anon:0kB active_file:8600kB inactive_file:159484kB unevictable:1536kB writepending:1332kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:632kB local_pcp:496kB free_cma:0kB
[  337.417702][T12116] lowmem_reserve[]: 0 0 0 0 0
[  337.422507][T12116] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  337.501052][T12116] lowmem_reserve[]: 0 0 0 0 0
[  337.505926][T12116] Node 1 Normal free:3914944kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  337.560655][T12116] lowmem_reserve[]: 0 0 0 0 0
[  337.565462][T12116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  337.585614][T12116] Node 0 DMA32: 2*4kB (ME) 181*8kB (UME) 126*16kB (UME) 
[  337.606286][T12116] 407*32kB (UME) 101*64kB (UME) 83*128kB (UME) 50*256kB (UME) 41*512kB (UME) 22*1024kB (UME) 17*2048kB (UM) 191*4096kB (M) = 907056kB
[  337.635119][T12116] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  337.657129][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  337.658440][T12116] Node 1 Normal: 234*4kB (UE) 61*8kB (UME) 37*16kB (UME) 189*32kB (UME) 89*64kB (UME) 38*128kB (UME) 16*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 947*4096kB (M) = 3914944kB
[  337.691998][T12116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  337.734625][T12116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  337.744153][T12116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  337.759777][T12116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  337.787205][T12039] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.794412][T12039] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.817897][T12116] 43468 total pagecache pages
[  337.819039][T12039] bridge_slave_0: entered allmulticast mode
[  337.822640][T12116] 0 pages in swap cache
[  337.868392][T12039] bridge_slave_0: entered promiscuous mode
[  337.874373][T12116] Free swap  = 124996kB
[  337.880126][T12039] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.887424][T12116] Total swap = 124996kB
[  337.887444][T12116] 2097051 pages RAM
[  337.887453][T12116] 0 pages HighMem/MovableOnly
[  337.887462][T12116] 424375 pages reserved
[  337.887470][T12116] 0 pages cma reserved
[  337.955091][T12039] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.973710][T12039] bridge_slave_1: entered allmulticast mode
[  337.985706][T12151] netlink: 'syz.6.1626': attribute type 21 has an invalid length.
[  338.000740][T12039] bridge_slave_1: entered promiscuous mode
[  338.074448][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'.
[  338.296925][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  338.409994][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.430771][T12172] netlink: 'syz.5.1629': attribute type 1 has an invalid length.
[  338.450233][T12172] netlink: 'syz.5.1629': attribute type 4 has an invalid length.
[  338.466448][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.509552][T12172] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1629'.
[  338.591955][T12172] NCSI netlink: No device for ifindex 458760
[  338.614493][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1629'.
[  338.625923][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1629'.
[  338.697116][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  338.825772][T12181] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  338.860352][T12039] team0: Port device team_slave_0 added
[  338.872397][T12185] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1633'.
[  338.960782][T12185] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  338.999751][T12039] team0: Port device team_slave_1 added
[  339.017925][ T5831] Bluetooth: hci5: command tx timeout
[  339.114121][T12188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1634'.
[  339.129543][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.161657][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.234919][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.320302][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.333493][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.366957][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  339.371403][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.561462][T12176] dummy0 speed is unknown, defaulting to 1000
[  339.565720][T12203] netlink: 'syz.6.1638': attribute type 1 has an invalid length.
[  339.587682][T12203] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1638'.
[  339.604241][T12203] netlink: 'syz.6.1638': attribute type 1 has an invalid length.
[  339.613627][T12203] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1638'.
[  339.737143][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  339.799126][T12039] hsr_slave_0: entered promiscuous mode
[  339.826577][T12039] hsr_slave_1: entered promiscuous mode
[  339.828722][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1640'.
[  339.844775][T12039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.866117][T12039] Cannot create hsr debugfs directory
[  339.903838][T12213] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.941213][T12213] bridge_slave_1 (unregistering): left allmulticast mode
[  339.949298][T12213] bridge_slave_1 (unregistering): left promiscuous mode
[  339.956376][T12213] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.968632][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'.
[  340.007724][T12210] tipc: New replicast peer: 0.0.0.0
[  340.014907][T12210] tipc: Enabled bearer <udp:syz2>, priority 10
[  340.035224][T12212] ip6gre1: entered allmulticast mode
[  340.352757][T12228] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  340.361977][T12228] openvswitch: netlink: Message has 13 unknown bytes.
[  341.070177][T12253] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.083851][T12253] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.092890][T12253] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.097616][ T5831] Bluetooth: hci5: command tx timeout
[  341.108885][T12253] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.182788][ T9068] dummy0 speed is unknown, defaulting to 1000
[  341.207067][ T9068] syz2: Port: 1 Link DOWN
[  341.493420][T12236] dummy0 speed is unknown, defaulting to 1000
[  341.682283][T12039] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  341.722219][T12266] netlink: 'syz.6.1656': attribute type 2 has an invalid length.
[  341.746998][T12266] netlink: 'syz.6.1656': attribute type 2 has an invalid length.
[  341.756942][T12266] netlink: 'syz.6.1656': attribute type 1 has an invalid length.
[  341.764719][T12266] netlink: 'syz.6.1656': attribute type 1 has an invalid length.
[  341.862730][T12039] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  341.883773][T12039] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  341.957518][T12039] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  342.150578][T12272] syzkaller1: entered promiscuous mode
[  342.159823][T12272] syzkaller1: entered allmulticast mode
[  342.415893][T12039] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.457131][    C0] net_ratelimit: 4 callbacks suppressed
[  342.457151][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  342.525060][T12039] 8021q: adding VLAN 0 to HW filter on device team0
[  342.600712][T12280] veth0_to_bridge: entered promiscuous mode
[  342.665611][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.672877][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.791497][ T7481] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.798748][ T7481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.853748][T12299] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.857219][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  342.867027][T12299] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.888078][T12299] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.896325][T12299] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.920549][T12299] geneve1: entered promiscuous mode
[  343.081243][T12304] __nla_validate_parse: 4 callbacks suppressed
[  343.081266][T12304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'.
[  343.109656][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'.
[  343.245286][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'.
[  343.496924][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  343.683079][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1667'.
[  343.694355][T12039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.713988][T12279] dummy0 speed is unknown, defaulting to 1000
[  343.874636][T12278] veth0_to_bridge: left promiscuous mode
[  343.897123][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  344.161139][T12039] veth0_vlan: entered promiscuous mode
[  344.210042][T12039] veth1_vlan: entered promiscuous mode
[  344.286193][T12039] veth0_macvtap: entered promiscuous mode
[  344.306871][T12039] veth1_macvtap: entered promiscuous mode
[  344.343913][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.364807][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.385445][T12039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.413966][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.429501][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.451382][T12039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.512184][T12315] dummy0 speed is unknown, defaulting to 1000
[  344.515865][T12316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1666'.
[  344.521619][T12039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.536969][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  344.567053][T12039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.575916][T12039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.595091][T12039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.937218][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  344.965942][ T7480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.980181][ T7480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.092041][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.121212][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.576965][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  345.911605][  T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.977123][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  346.054798][  T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.271602][  T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.343280][  T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.617077][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  346.643543][  T139] bridge_slave_1: left allmulticast mode
[  346.649458][  T139] bridge_slave_1: left promiscuous mode
[  346.655231][  T139] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.664953][  T139] bridge_slave_0: left allmulticast mode
[  346.671186][  T139] bridge_slave_0: left promiscuous mode
[  346.678273][  T139] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.017019][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  347.139463][ T5831] Bluetooth: hci6: link tx timeout
[  347.146194][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  347.156623][ T5850] Bluetooth: hci6: link tx timeout
[  347.162470][ T5850] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  347.172781][ T5850] Bluetooth: hci6: link tx timeout
[  347.178589][ T5850] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  347.186399][ T5850] Bluetooth: hci6: link tx timeout
[  347.192738][ T5850] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  347.238536][ T5850] Bluetooth: hci6: link tx timeout
[  347.244001][ T5850] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  347.253348][ T5850] Bluetooth: hci6: link tx timeout
[  347.259329][ T5850] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  347.313979][  T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.326534][  T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.339355][  T139] bond0 (unregistering): Released all slaves
[  347.656965][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  347.801773][T12405] netlink: 'syz.5.1690': attribute type 7 has an invalid length.
[  347.835933][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1689'.
[  347.848292][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  347.853532][T12405] netlink: 'syz.5.1690': attribute type 8 has an invalid length.
[  347.866450][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  347.876195][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  347.900458][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  347.913411][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  348.056964][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  348.178635][T12380] dummy0 speed is unknown, defaulting to 1000
[  348.521534][T12431] netlink: 'syz.5.1695': attribute type 7 has an invalid length.
[  348.547487][T12431] netlink: 'syz.5.1695': attribute type 8 has an invalid length.
[  348.608255][T12431] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  348.697015][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  349.053008][T12407] dummy0 speed is unknown, defaulting to 1000
[  349.097002][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  349.181735][   T56] Bluetooth: hci6: command 0x0406 tx timeout
[  349.238725][   T30] audit: type=1804 audit(1746739491.414:10): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1704" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=2013 res=1 errno=0
[  349.298268][   T30] audit: type=1800 audit(1746739491.444:11): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1704" name="cgroup.controllers" dev="tmpfs" ino=2013 res=0 errno=0
[  349.369357][   T30] audit: type=1800 audit(1746739491.444:12): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1704" name="cgroup.controllers" dev="tmpfs" ino=2013 res=0 errno=0
[  349.737023][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  349.814544][T12480] vlan2: entered promiscuous mode
[  349.838865][T12480] vlan2: entered allmulticast mode
[  349.856678][T12480] hsr_slave_1: entered allmulticast mode
[  349.977699][ T5831] Bluetooth: hci5: command tx timeout
[  349.997797][  T139] hsr_slave_0: left promiscuous mode
[  350.017038][  T139] hsr_slave_1: left promiscuous mode
[  350.023326][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.035126][  T139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.047854][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.055428][  T139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.085965][  T139] veth1_macvtap: left promiscuous mode
[  350.091673][  T139] veth0_macvtap: left promiscuous mode
[  350.097764][  T139] veth1_vlan: left promiscuous mode
[  350.103077][  T139] veth0_vlan: left promiscuous mode
[  350.136910][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  350.779763][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  350.902426][  T139] team0 (unregistering): Port device team_slave_1 removed
[  350.951250][  T139] team0 (unregistering): Port device team_slave_0 removed
[  351.177058][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  351.591649][T12514] syzkaller0: entered promiscuous mode
[  351.597560][T12514] syzkaller0: entered allmulticast mode
[  351.641779][T12407] chnl_net:caif_netlink_parms(): no params data found
[  351.817142][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  352.062458][ T5831] Bluetooth: hci5: command tx timeout
[  352.217014][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  352.861874][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  353.257013][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  353.393272][T12500] dummy0 speed is unknown, defaulting to 1000
[  353.679559][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1720'.
[  353.775719][T12407] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.799769][T12407] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.823033][T12407] bridge_slave_0: entered allmulticast mode
[  353.831154][T12407] bridge_slave_0: entered promiscuous mode
[  353.840038][T12407] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.851484][T12407] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.860972][T12407] bridge_slave_1: entered allmulticast mode
[  353.896989][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  353.904466][T12407] bridge_slave_1: entered promiscuous mode
[  353.947646][T12554] netlink: 'syz.2.1721': attribute type 13 has an invalid length.
[  354.114378][T12566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1721'.
[  354.138302][ T5831] Bluetooth: hci5: command tx timeout
[  354.140747][T12565] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  354.268177][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.296988][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  354.315017][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1725'.
[  354.334909][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.364536][T12564] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1724'.
[  354.390781][T12564] IPVS: length: 24 != 16106127384
[  354.460583][T12573] xt_recent: Unsupported userspace flags (00000048)
[  354.502128][T12576] netlink: 'syz.2.1727': attribute type 1 has an invalid length.
[  354.733748][T12576] bond0: entered promiscuous mode
[  354.749042][T12576] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.799120][T12407] team0: Port device team_slave_0 added
[  354.826584][T12407] team0: Port device team_slave_1 added
[  354.865572][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.890516][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.946638][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.957626][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  354.987470][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.994743][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.029505][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.143598][T12407] hsr_slave_0: entered promiscuous mode
[  355.151314][T12407] hsr_slave_1: entered promiscuous mode
[  355.158786][T12407] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.176531][T12407] Cannot create hsr debugfs directory
[  355.337091][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  355.903165][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1729'.
[  355.976960][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  356.217362][ T5831] Bluetooth: hci5: command tx timeout
[  356.376910][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  356.466551][T12621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1739'.
[  356.654032][T12612] ip6gretap0: entered promiscuous mode
[  356.695871][T12624] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1740'.
[  356.838513][T12627] xt_hashlimit: size too large, truncated to 1048576
[  356.920471][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'.
[  357.044644][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  357.162507][T12587] dummy0 speed is unknown, defaulting to 1000
[  357.537110][T12407] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  357.567300][T12407] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  357.610601][T12407] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  357.662890][T12407] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  357.724210][T12645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'.
[  358.000716][T12407] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.046322][T12407] 8021q: adding VLAN 0 to HW filter on device team0
[  358.056919][    C0] net_ratelimit: 1 callbacks suppressed
[  358.056937][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  358.098821][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.106025][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.246875][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.254085][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.429548][T12407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  358.456961][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  358.645226][T12649] dummy0 speed is unknown, defaulting to 1000
[  358.671513][T12674] netlink: 'syz.5.1754': attribute type 1 has an invalid length.
[  358.690381][T12677] netlink: 'syz.5.1754': attribute type 1 has an invalid length.
[  358.950144][T12689] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1758'.
[  359.072333][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.097098][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  359.235465][T12407] veth0_vlan: entered promiscuous mode
[  359.271956][T12407] veth1_vlan: entered promiscuous mode
[  359.331784][T12701] netlink: 'syz.6.1761': attribute type 1 has an invalid length.
[  359.485904][T12701] bond1: entered promiscuous mode
[  359.496960][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  359.512654][T12701] 8021q: adding VLAN 0 to HW filter on device bond1
[  359.586667][T12705] bond1: (slave veth5): making interface the new active one
[  359.608212][T12705] veth5: entered promiscuous mode
[  359.614444][T12705] bond1: (slave veth5): Enslaving as an active interface with an up link
[  359.761172][T12407] veth0_macvtap: entered promiscuous mode
[  359.808463][T12407] veth1_macvtap: entered promiscuous mode
[  359.809535][T12711] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1763'.
[  359.870137][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.889781][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.913162][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.965268][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.999151][T12714] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1765'.
[  360.007532][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'.
[  360.015451][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.049327][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.063492][T12714] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1765'.
[  360.136995][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  360.182547][T12720] xt_hashlimit: size too large, truncated to 1048576
[  360.246748][T12725] netlink: 'syz.5.1767': attribute type 1 has an invalid length.
[  360.255566][T12725] netlink: 'syz.5.1767': attribute type 2 has an invalid length.
[  360.268164][T12725] netlink: 'syz.5.1767': attribute type 1 has an invalid length.
[  360.537165][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  361.010697][T12407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.031617][T12407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.076999][T12407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.092937][T12407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.176981][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  361.408600][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'.
[  361.429574][ T7470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.457503][ T7470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.569962][ T7480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.576992][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  361.608571][ T7480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.728384][T12757] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  362.221053][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  362.257971][   T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.448109][T12760] dummy0 speed is unknown, defaulting to 1000
[  362.519761][   T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.576169][T12781] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1777'.
[  362.616951][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  362.671393][   T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.810040][   T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.890621][T12770] dummy0 speed is unknown, defaulting to 1000
[  363.256915][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  363.266609][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'.
[  363.348173][T12786] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55043 - 0
[  363.371659][T12786] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55043 - 0
[  363.387049][T12786] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55043 - 0
[  363.398717][T12786] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55043 - 0
[  363.427456][T12786] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 56892 - 0
[  363.456212][T12786] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 56892 - 0
[  363.480297][T12786] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 56892 - 0
[  363.489090][T12786] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 56892 - 0
[  363.522031][T12786] geneve2: entered promiscuous mode
[  363.532123][T12786] geneve2: entered allmulticast mode
[  363.656930][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  363.685648][   T54] bridge_slave_1: left allmulticast mode
[  363.707400][   T54] bridge_slave_1: left promiscuous mode
[  363.717927][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.788084][   T54] bridge_slave_0: left allmulticast mode
[  363.804604][   T54] bridge_slave_0: left promiscuous mode
[  363.815457][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.041352][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.052545][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.062514][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.087860][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.097630][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.296986][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  364.526392][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'.
[  364.546084][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.560914][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.578961][   T54] bond0 (unregistering): Released all slaves
[  364.696899][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  364.828524][T12826] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1789'.
[  364.858374][T12826] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  365.323327][T12806] dummy0 speed is unknown, defaulting to 1000
[  365.337007][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  365.736930][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  365.953863][   T54] hsr_slave_0: left promiscuous mode
[  365.973395][   T54] hsr_slave_1: left promiscuous mode
[  365.983122][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.994566][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.006241][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.014745][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.100288][   T54] veth1_macvtap: left promiscuous mode
[  366.106104][   T54] veth0_macvtap: left promiscuous mode
[  366.116697][   T54] veth1_vlan: left promiscuous mode
[  366.137084][ T5831] Bluetooth: hci5: command tx timeout
[  366.145174][   T54] veth0_vlan: left promiscuous mode
[  366.389717][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  366.726088][   T54] team0 (unregistering): Port device team_slave_1 removed
[  366.772683][   T54] team0 (unregistering): Port device team_slave_0 removed
[  366.776997][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  367.194719][T12862] IPv6: syztnl0: Disabled Multicast RS
[  367.236133][T12806] chnl_net:caif_netlink_parms(): no params data found
[  367.416916][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  367.448108][T12887] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1805'.
[  367.588867][T12806] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.604219][T12806] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.612350][T12806] bridge_slave_0: entered allmulticast mode
[  367.620867][T12806] bridge_slave_0: entered promiscuous mode
[  367.674442][T12806] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.707749][T12806] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.729772][T12806] bridge_slave_1: entered allmulticast mode
[  367.758060][T12806] bridge_slave_1: entered promiscuous mode
[  367.875394][T12806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.925247][T12806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.056024][T12806] team0: Port device team_slave_0 added
[  368.075465][T12806] team0: Port device team_slave_1 added
[  368.141905][T12883] dummy0 speed is unknown, defaulting to 1000
[  368.168720][T12806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.175730][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.203786][T12806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.217229][ T5831] Bluetooth: hci5: command tx timeout
[  368.244529][T12806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.255010][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.316126][T12806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.456998][    C0] net_ratelimit: 1 callbacks suppressed
[  368.457016][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  368.491791][T12806] hsr_slave_0: entered promiscuous mode
[  368.513448][T12806] hsr_slave_1: entered promiscuous mode
[  368.550031][T12915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'.
[  368.583574][T12806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.595647][T12806] Cannot create hsr debugfs directory
[  368.642327][T12915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'.
[  368.857028][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  368.885677][T12920] xt_HMARK: spi-set and port-set can't be combined
[  369.169630][T12926] bridge0: port 3(erspan0) entered disabled state
[  369.377103][T12926] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.496961][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  369.720377][T12926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.788128][T12926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.897063][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  370.177934][T12926] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.186321][T12926] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.206696][T12926] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.215252][T12926] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.297311][ T5831] Bluetooth: hci5: command tx timeout
[  370.361954][T12927] ip6gretap0: left promiscuous mode
[  370.371103][T12927] bridge0: port 3(erspan0) entered blocking state
[  370.377737][T12927] bridge0: port 3(erspan0) entered forwarding state
[  370.390345][T12927] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.400680][T12927] 8021q: adding VLAN 0 to HW filter on device team0
[  370.412100][T12927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.444458][T12929] veth1_to_team: entered promiscuous mode
[  370.458462][T12929] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  370.547015][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  370.898754][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'.
[  370.937120][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  370.973746][T12959] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  371.049441][T12953] nbd: socks must be embedded in a SOCK_ITEM attr
[  371.089355][T12953] block nbd1: shutting down sockets
[  371.121833][T12950] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1822'.
[  371.169163][T12950] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1822'.
[  371.182774][T12950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1822'.
[  371.552116][T12976] geneve0: entered allmulticast mode
[  371.576915][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  371.851275][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'.
[  371.914263][T12806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  371.977392][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  372.049113][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1838'.
[  372.065159][T13007] sctp: [Deprecated]: syz.2.1837 (pid 13007) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.065159][T13007] Use struct sctp_sack_info instead
[  372.082276][T12806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  372.191879][T12806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  372.207945][T13009] sctp: [Deprecated]: syz.2.1837 (pid 13009) Use of int in max_burst socket option deprecated.
[  372.207945][T13009] Use struct sctp_assoc_value instead
[  372.283278][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'.
[  372.294500][T13015] netlink: 'syz.0.1840': attribute type 3 has an invalid length.
[  372.326405][T12806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  372.377049][ T5831] Bluetooth: hci5: command tx timeout
[  372.527896][T13024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8
[  372.602662][T12806] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.699445][T12806] 8021q: adding VLAN 0 to HW filter on device team0
[  372.715981][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.723228][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.810248][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.817610][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.852797][T13036] pim6reg: entered allmulticast mode
[  372.895686][T13036] pim6reg: left allmulticast mode
[  373.034169][T13034] netlink: 'syz.5.1846': attribute type 10 has an invalid length.
[  373.075201][T13034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.100789][T13034] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  373.621427][T12806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.656965][    C0] net_ratelimit: 2 callbacks suppressed
[  373.656983][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  373.782631][T12806] veth0_vlan: entered promiscuous mode
[  373.804207][T12806] veth1_vlan: entered promiscuous mode
[  373.874992][T12806] veth0_macvtap: entered promiscuous mode
[  373.901241][T12806] veth1_macvtap: entered promiscuous mode
[  373.993974][T12806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.030724][T12806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.050247][T12806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.056993][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  374.062756][T12806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.075781][T12806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.092376][T12806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.123252][T13086] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  374.337900][T13092] netlink: 'syz.6.1862': attribute type 10 has an invalid length.
[  374.396324][T13092] team0: Device hsr_slave_0 failed to register rx_handler
[  374.449545][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1862'.
[  374.478069][ T7480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.495521][ T7480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.596635][ T7470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.623931][ T7470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.697063][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  375.097073][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  375.124195][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'.
[  375.174113][T13085] dummy0 speed is unknown, defaulting to 1000
[  375.746916][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  375.835367][T13116] netlink: 'syz.6.1868': attribute type 1 has an invalid length.
[  375.843557][T13116] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1868'.
[  376.112623][T13111] dummy0 speed is unknown, defaulting to 1000
[  376.136972][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  376.591860][ T7480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.752549][ T7480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.786918][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  376.854164][ T7480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.945253][ T7480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.082205][ T7480] bridge_slave_1: left allmulticast mode
[  377.089631][ T7480] bridge_slave_1: left promiscuous mode
[  377.095705][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.164298][ T7480] bridge_slave_0: left allmulticast mode
[  377.176955][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  377.181954][ T7480] bridge_slave_0: left promiscuous mode
[  377.190258][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.378967][T13138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'.
[  377.634756][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.650996][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.675808][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.686609][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.707637][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.817007][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  378.019350][ T7480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.035249][ T7480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.048979][ T7480] bond0 (unregistering): Released all slaves
[  378.217086][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  378.324432][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1875'.
[  378.551481][T13156] netlink: 'syz.6.1876': attribute type 3 has an invalid length.
[  378.610233][T13156] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1876'.
[  378.698162][T13156] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  378.812483][T13143] dummy0 speed is unknown, defaulting to 1000
[  378.856924][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  379.256922][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  379.526573][ T7480] hsr_slave_0: left promiscuous mode
[  379.547117][ T7480] hsr_slave_1: left promiscuous mode
[  379.565723][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.587508][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.608101][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.626947][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.703436][ T7480] veth1_macvtap: left promiscuous mode
[  379.717482][ T7480] veth0_macvtap: left promiscuous mode
[  379.727308][ T7480] veth1_vlan: left promiscuous mode
[  379.732689][ T7480] veth0_vlan: left promiscuous mode
[  379.821802][ T5831] Bluetooth: hci5: command tx timeout
[  379.896968][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  380.301651][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  380.364813][ T7480] team0 (unregistering): Port device team_slave_1 removed
[  380.412411][ T7480] team0 (unregistering): Port device team_slave_0 removed
[  380.931630][T13143] chnl_net:caif_netlink_parms(): no params data found
[  380.938516][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  381.062721][T13189] netlink: 'syz.2.1884': attribute type 7 has an invalid length.
[  381.075116][T13189] netlink: 'syz.2.1884': attribute type 8 has an invalid length.
[  381.337048][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  381.383147][T13143] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.397131][T13143] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.404508][T13143] bridge_slave_0: entered allmulticast mode
[  381.420570][T13143] bridge_slave_0: entered promiscuous mode
[  381.452769][T13143] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.460595][T13143] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.468690][T13143] bridge_slave_1: entered allmulticast mode
[  381.477296][T13143] bridge_slave_1: entered promiscuous mode
[  381.556199][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.591435][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.693974][T13143] team0: Port device team_slave_0 added
[  381.731365][T13143] team0: Port device team_slave_1 added
[  381.744968][T13212] netdevsim0: entered promiscuous mode
[  381.764513][T13212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  381.882576][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.890466][T13217] netlink: 'syz.0.1893': attribute type 21 has an invalid length.
[  381.907842][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.913102][ T5831] Bluetooth: hci5: command tx timeout
[  381.957471][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.976918][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  381.985719][T13217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1893'.
[  381.996575][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.008401][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.037436][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.233169][T13210] dummy0 speed is unknown, defaulting to 1000
[  382.249982][T13143] hsr_slave_0: entered promiscuous mode
[  382.256425][T13143] hsr_slave_1: entered promiscuous mode
[  382.276035][T13143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  382.288641][T13143] Cannot create hsr debugfs directory
[  382.333221][T13224] netlink: 'syz.0.1895': attribute type 1 has an invalid length.
[  382.376926][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  382.419353][T13224] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  382.494540][T13232] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.524199][T13232] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.533432][T13232] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.542327][T13232] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.551363][T13232] geneve3: entered promiscuous mode
[  382.653769][T13236] syzkaller0: entered promiscuous mode
[  382.660171][T13236] syzkaller0: entered allmulticast mode
[  382.936989][T13241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1900'.
[  383.510770][T13239] Bluetooth: hci1: Opcode 0x080f failed: -4
[  383.579190][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1902'.
[  383.583678][T13143] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  383.588325][T13248] netlink: 'syz.6.1902': attribute type 7 has an invalid length.
[  383.588344][T13248] netlink: 'syz.6.1902': attribute type 8 has an invalid length.
[  383.588359][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1902'.
[  383.654494][T13143] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  383.674705][T13143] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  383.712856][T13143] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  383.926052][T13259] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1906'.
[  383.985019][   T56] Bluetooth: hci5: command tx timeout
[  384.057092][    C0] net_ratelimit: 2 callbacks suppressed
[  384.057111][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  384.082972][T13143] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.116941][T13259] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1906'.
[  384.143302][T13262] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma?
[  384.204810][T13256] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1906'.
[  384.218841][T13143] 8021q: adding VLAN 0 to HW filter on device team0
[  384.235238][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.242612][ T7479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.336041][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.343368][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.457109][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  384.507795][T13250] dummy0 speed is unknown, defaulting to 1000
[  384.602402][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  384.788090][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  384.828504][T13278] netlink: 'syz.0.1912': attribute type 6 has an invalid length.
[  384.897696][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'.
[  385.101509][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  385.135248][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.175800][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1917'.
[  385.195877][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1917'.
[  385.213723][T13143] veth0_vlan: entered promiscuous mode
[  385.349857][T13143] veth1_vlan: entered promiscuous mode
[  385.497476][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  385.499392][T13143] veth0_macvtap: entered promiscuous mode
[  385.590174][T13143] veth1_macvtap: entered promiscuous mode
[  385.723546][T13143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.766768][T13143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.782242][T13312] SET target dimension over the limit!
[  385.810020][T13143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.829238][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  385.857667][T13143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.866743][T13143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.877076][T13143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.058220][ T5831] Bluetooth: hci5: command tx timeout
[  386.091373][ T7482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.133664][ T7482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.146986][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  386.199094][T13333] xt_CT: You must specify a L4 protocol and not use inversions on it
[  386.234747][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.256240][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.537002][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  386.712685][T13352] x_tables: duplicate underflow at hook 3
[  387.092109][ T7486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.176900][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  387.389974][ T7486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.512153][T13359] dummy0 speed is unknown, defaulting to 1000
[  387.577306][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  387.590511][ T7486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.760230][ T7486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.958276][ T7486] bridge_slave_1: left allmulticast mode
[  387.964411][ T7486] bridge_slave_1: left promiscuous mode
[  387.970763][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.980826][ T7486] bridge_slave_0: left allmulticast mode
[  387.986500][ T7486] bridge_slave_0: left promiscuous mode
[  387.992618][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.217173][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  388.331296][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.343744][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.368186][ T7486] bond0 (unregistering): Released all slaves
[  388.572312][T13375] bond3 (unregistering): Released all slaves
[  388.616992][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  388.704543][T13380] vlan2: entered promiscuous mode
[  388.729539][T13380] veth1: entered promiscuous mode
[  388.955047][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  388.965613][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  388.975427][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  388.988683][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  389.004426][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  389.048107][T13388] team0: Port device syz_tun removed
[  389.083124][T13388] bond2: (slave veth0_to_bond): Releasing active interface
[  389.163547][T13388] bond1: (slave ip6gretap2): Releasing active interface
[  389.209337][T13388] bond2: (slave veth5): Releasing active interface
[  389.232020][   T56] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  389.242249][   T56] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  389.251526][   T56] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  389.264706][   T56] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  389.271970][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  389.283194][   T56] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  389.633281][T13418] netlink: 'syz.0.1945': attribute type 1 has an invalid length.
[  389.657031][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  389.666380][T13418] __nla_validate_parse: 2 callbacks suppressed
[  389.666398][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'.
[  389.740639][   T30] audit: type=1800 audit(1746739531.914:13): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1946" name="memory.events" dev="tmpfs" ino=716 res=0 errno=0
[  389.768078][   T30] audit: type=1804 audit(1746739531.944:14): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1946" name="memory.events" dev="tmpfs" ino=716 res=1 errno=0
[  389.862637][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1946'.
[  389.882322][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1946'.
[  389.926767][T13390] dummy0 speed is unknown, defaulting to 1000
[  390.250906][ T7486] hsr_slave_0: left promiscuous mode
[  390.260966][ T7486] hsr_slave_1: left promiscuous mode
[  390.267286][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.274936][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.283791][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.291648][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.299000][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  390.336496][ T7486] veth1_macvtap: left promiscuous mode
[  390.342645][ T7486] veth0_macvtap: left promiscuous mode
[  390.348905][ T7486] veth1_vlan: left promiscuous mode
[  390.354460][ T7486] veth0_vlan: left promiscuous mode
[  390.697025][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  390.861740][ T7486] team0 (unregistering): Port device team_slave_1 removed
[  390.905295][ T7486] team0 (unregistering): Port device team_slave_0 removed
[  391.109141][ T5831] Bluetooth: hci5: command tx timeout
[  391.337674][ T5831] Bluetooth: hci7: command tx timeout
[  391.346924][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  391.348045][T13404] dummy0 speed is unknown, defaulting to 1000
[  391.737053][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  391.757238][T13416] dummy0 speed is unknown, defaulting to 1000
[  391.838023][T13390] chnl_net:caif_netlink_parms(): no params data found
[  392.098984][T13438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1948'.
[  392.376909][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  392.532596][T13421] dummy0 speed is unknown, defaulting to 1000
[  392.776931][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  392.815139][T13390] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.837062][T13390] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.844415][T13390] bridge_slave_0: entered allmulticast mode
[  392.879117][T13390] bridge_slave_0: entered promiscuous mode
[  392.894970][T13390] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.906151][T13390] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.915573][T13390] bridge_slave_1: entered allmulticast mode
[  392.923788][T13390] bridge_slave_1: entered promiscuous mode
[  392.991574][T13404] chnl_net:caif_netlink_parms(): no params data found
[  393.012960][T13390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.079113][T13390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.177578][ T5831] Bluetooth: hci5: command tx timeout
[  393.204589][T13390] team0: Port device team_slave_0 added
[  393.310639][T13390] team0: Port device team_slave_1 added
[  393.328418][T13432] dummy0 speed is unknown, defaulting to 1000
[  393.417043][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  393.423192][ T5831] Bluetooth: hci7: command tx timeout
[  393.816962][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  393.862450][T13404] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.873506][T13404] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.883439][T13404] bridge_slave_0: entered allmulticast mode
[  393.894809][T13404] bridge_slave_0: entered promiscuous mode
[  393.903299][T13390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.911474][T13390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.940659][T13390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.953338][T13390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.960726][T13390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.994956][T13390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.020764][T13404] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.034365][T13404] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.041974][T13404] bridge_slave_1: entered allmulticast mode
[  394.055553][T13404] bridge_slave_1: entered promiscuous mode
[  394.172748][T13404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.221021][T13404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.403929][T13404] team0: Port device team_slave_0 added
[  394.453477][T13390] hsr_slave_0: entered promiscuous mode
[  394.459203][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  394.492109][T13390] hsr_slave_1: entered promiscuous mode
[  394.500784][T13390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  394.513701][T13390] Cannot create hsr debugfs directory
[  394.525240][T13404] team0: Port device team_slave_1 added
[  394.639709][T13404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.648442][T13404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.675742][T13404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.689828][T13404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.703328][T13404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.731008][T13404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.750813][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1950'.
[  394.856947][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  395.066252][T13404] hsr_slave_0: entered promiscuous mode
[  395.074768][T13404] hsr_slave_1: entered promiscuous mode
[  395.082752][T13404] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.090825][T13404] Cannot create hsr debugfs directory
[  395.213225][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'.
[  395.257697][ T5831] Bluetooth: hci5: command tx timeout
[  395.374082][T13475] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1955'.
[  395.415999][T13468] team0: Port device team_slave_0 removed
[  395.440883][T13474] dvmrp0: entered allmulticast mode
[  395.497065][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  395.497716][ T5831] Bluetooth: hci7: command tx timeout
[  395.580930][T13478] dvmrp0: left allmulticast mode
[  395.588517][T13475] block nbd6: server does not support multiple connections per device.
[  395.606468][T13475] block nbd6: shutting down sockets
[  395.897262][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  395.906677][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.943414][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.955554][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.966141][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1959'.
[  395.978261][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.992989][T13486] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  396.047803][T13390] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  396.081655][T13390] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  396.113684][T13390] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  396.145035][T13390] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  396.191935][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1961'.
[  396.303910][T13494] xt_CT: No such helper "pptp"
[  396.335515][T13404] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  396.372607][T13404] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  396.444457][T13404] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  396.476263][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1964'.
[  396.476276][T13404] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  396.494606][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1964'.
[  396.537176][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  396.634695][T13390] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.662939][T13507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1965'.
[  396.694803][T13507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1965'.
[  396.731046][T13390] 8021q: adding VLAN 0 to HW filter on device team0
[  396.749126][T13509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.785519][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.792733][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.830079][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.837309][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.899485][T13404] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.937019][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  396.969180][T13512] netlink: 'syz.0.1967': attribute type 4 has an invalid length.
[  397.007723][T13512] netlink: 'syz.0.1967': attribute type 1 has an invalid length.
[  397.015614][T13512] netlink: 'syz.0.1967': attribute type 2 has an invalid length.
[  397.038879][T13404] 8021q: adding VLAN 0 to HW filter on device team0
[  397.069368][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.076562][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.130065][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.137304][ T7486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.337642][ T5831] Bluetooth: hci5: command tx timeout
[  397.350446][T13522] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1970'.
[  397.480996][T13531] IPv6: Can't replace route, no match found
[  397.575610][T13390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.582689][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  397.592521][ T5831] Bluetooth: hci7: command tx timeout
[  397.913750][T13390] veth0_vlan: entered promiscuous mode
[  397.942911][T13404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.977062][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  398.071983][T13550] bridge0: port 1(vlan3) entered blocking state
[  398.092298][T13550] bridge0: port 1(vlan3) entered disabled state
[  398.108041][T13550] vlan3: entered allmulticast mode
[  398.113227][T13550] bond0: entered allmulticast mode
[  398.162838][T13390] veth1_vlan: entered promiscuous mode
[  398.361162][T13390] veth0_macvtap: entered promiscuous mode
[  398.402288][T13390] veth1_macvtap: entered promiscuous mode
[  398.451200][T13390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.514255][T13390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.543392][T13390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.582273][T13390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.611626][T13390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.620493][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  398.667090][T13390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.984520][T13543] dummy0 speed is unknown, defaulting to 1000
[  399.153658][T13404] veth0_vlan: entered promiscuous mode
[  399.174759][T13544] SET target dimension over the limit!
[  399.227712][ T7479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.249460][ T7479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.373290][T13404] veth1_vlan: entered promiscuous mode
[  399.380862][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.403894][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.456349][T13404] veth0_macvtap: entered promiscuous mode
[  399.483934][T13404] veth1_macvtap: entered promiscuous mode
[  399.506426][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.517658][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.529812][T13404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.542152][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.571910][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.598498][T13404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.656951][    C0] net_ratelimit: 1 callbacks suppressed
[  399.656972][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  399.737163][T13404] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.755272][T13404] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.764680][T13404] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.773952][T13404] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.057132][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  400.340284][ T7479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.369784][ T7479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.435066][ T7479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.453103][ T7479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.505598][ T7486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.655786][ T7486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.696925][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  400.716595][ T7486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.779061][ T7486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.891421][ T7486] bridge_slave_1: left allmulticast mode
[  400.897271][ T7486] bridge_slave_1: left promiscuous mode
[  400.902988][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.913289][ T7486] bridge_slave_0: left allmulticast mode
[  400.919204][ T7486] bridge_slave_0: left promiscuous mode
[  400.924946][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.100050][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  401.309643][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.323794][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.334430][ T7486] bond0 (unregistering): Released all slaves
[  401.628777][T13619] __nla_validate_parse: 2 callbacks suppressed
[  401.628796][T13619] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1994'.
[  401.742048][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  401.848878][T13618] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1993'.
[  401.903404][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'.
[  402.053925][T13630] sctp: [Deprecated]: syz.6.1999 (pid 13630) Use of struct sctp_assoc_value in delayed_ack socket option.
[  402.053925][T13630] Use struct sctp_sack_info instead
[  402.137054][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  402.146225][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  402.157210][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  402.167133][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  402.177127][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  402.185647][T13633] xt_CT: No such helper "pptp"
[  402.192883][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  402.265389][T13630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1999'.
[  402.723128][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2003'.
[  402.745307][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2004'.
[  402.755613][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2004'.
[  402.776933][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  402.995121][T13612] dummy0 speed is unknown, defaulting to 1000
[  403.177036][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  403.327543][T13670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.421231][T13673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.470827][ T7486] hsr_slave_0: left promiscuous mode
[  403.494147][ T7486] hsr_slave_1: left promiscuous mode
[  403.514310][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.537944][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.568437][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.596360][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.717150][ T7486] veth1_macvtap: left promiscuous mode
[  403.744436][ T7486] veth0_macvtap: left promiscuous mode
[  403.784064][ T7486] veth1_vlan: left promiscuous mode
[  403.808942][ T7486] veth0_vlan: left promiscuous mode
[  404.297315][ T5831] Bluetooth: hci5: command tx timeout
[  404.419910][ T7486] team0 (unregistering): Port device team_slave_1 removed
[  404.463123][ T7486] team0 (unregistering): Port device team_slave_0 removed
[  404.861436][    C0] net_ratelimit: 2 callbacks suppressed
[  404.861456][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  404.911363][T13634] dummy0 speed is unknown, defaulting to 1000
[  405.257326][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  405.373831][T13705] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2015'.
[  405.392471][T13634] chnl_net:caif_netlink_parms(): no params data found
[  405.472147][T13654] dummy0 speed is unknown, defaulting to 1000
[  405.500643][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  405.755425][T13634] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.763098][T13634] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.771806][T13634] bridge_slave_0: entered allmulticast mode
[  405.782150][T13634] bridge_slave_0: entered promiscuous mode
[  405.800590][T13634] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.811302][T13634] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.822476][T13634] bridge_slave_1: entered allmulticast mode
[  405.842338][T13634] bridge_slave_1: entered promiscuous mode
[  405.896923][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  406.042846][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.054154][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2018'.
[  406.066257][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.124853][T13634] team0: Port device team_slave_0 added
[  406.136045][T13634] team0: Port device team_slave_1 added
[  406.245987][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.271994][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.296951][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.326985][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.350091][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.380714][ T5831] Bluetooth: hci5: command tx timeout
[  406.416873][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.507772][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.743083][T13634] hsr_slave_0: entered promiscuous mode
[  406.769555][T13634] hsr_slave_1: entered promiscuous mode
[  406.784757][T13634] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.805884][T13634] Cannot create hsr debugfs directory
[  406.937027][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  407.024659][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'.
[  407.336952][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  407.397826][T13744] team0 (unregistering): Port device team_slave_1 removed
[  407.423597][T13744] team0 (unregistering): Port device wlan1 removed
[  407.541868][   T30] audit: type=1107 audit(1746739549.714:15): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1'
[  407.543252][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.560638][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.582719][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.622945][T13754] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  407.682469][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.696205][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.705380][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.721469][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.742402][T13734] syz.6.2024: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  407.779420][T13734] CPU: 0 UID: 0 PID: 13734 Comm: syz.6.2024 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  407.779453][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  407.779468][T13734] Call Trace:
[  407.779477][T13734]  <TASK>
[  407.779486][T13734]  dump_stack_lvl+0x189/0x250
[  407.779528][T13734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.779555][T13734]  ? __pfx__printk+0x10/0x10
[  407.779572][T13734]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  407.779596][T13734]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  407.779614][T13734]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  407.779633][T13734]  warn_alloc+0x214/0x310
[  407.779664][T13734]  ? __pfx_warn_alloc+0x10/0x10
[  407.779696][T13734]  ? __get_vm_area_node+0x1c5/0x2d0
[  407.779717][T13734]  ? __get_vm_area_node+0x25a/0x2d0
[  407.779750][T13734]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[  407.779776][T13734]  ? __asan_memset+0x22/0x50
[  407.779814][T13734]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  407.779837][T13734]  ? __kasan_kmalloc_large+0x1a/0xa0
[  407.779860][T13734]  ? rcu_is_watching+0x15/0xb0
[  407.779887][T13734]  ? hash_net4_resize+0x235/0x1be0
[  407.779905][T13734]  ? hash_net4_resize+0x235/0x1be0
[  407.779921][T13734]  __kvmalloc_node_noprof+0x3a0/0x5e0
[  407.779944][T13734]  ? hash_net4_resize+0x235/0x1be0
[  407.779969][T13734]  hash_net4_resize+0x235/0x1be0
[  407.779991][T13734]  ? hash_net4_uadt+0x7fd/0x980
[  407.780011][T13734]  ? __pfx_hash_net4_add+0x10/0x10
[  407.780029][T13734]  ? __pfx_hash_net4_uadt+0x10/0x10
[  407.780049][T13734]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.780078][T13734]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  407.780115][T13734]  call_ad+0x44b/0xb00
[  407.780138][T13734]  ? __pfx_call_ad+0x10/0x10
[  407.780166][T13734]  ? __nla_parse+0x40/0x60
[  407.780190][T13734]  ip_set_ad+0x791/0x930
[  407.780213][T13734]  ? __pfx_ip_set_ad+0x10/0x10
[  407.780226][T13734]  ? __mutex_lock+0x330/0xe80
[  407.780276][T13734]  nfnetlink_rcv_msg+0xb4a/0x1130
[  407.780301][T13734]  ? unwind_get_return_address+0x4d/0x90
[  407.780321][T13734]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  407.780341][T13734]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  407.780383][T13734]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  407.780406][T13734]  ? stack_depot_save_flags+0x40/0x910
[  407.780465][T13734]  netlink_rcv_skb+0x219/0x490
[  407.780486][T13734]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  407.780513][T13734]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  407.780530][T13734]  ? kasan_quarantine_put+0xdd/0x220
[  407.780559][T13734]  ? apparmor_capable+0x137/0x1b0
[  407.780589][T13734]  ? bpf_lsm_capable+0x9/0x20
[  407.780612][T13734]  ? security_capable+0x7e/0x2e0
[  407.780636][T13734]  nfnetlink_rcv+0x273/0x2530
[  407.780663][T13734]  ? __dev_queue_xmit+0x27e/0x3a70
[  407.780688][T13734]  ? __dev_queue_xmit+0x27e/0x3a70
[  407.780711][T13734]  ? __dev_queue_xmit+0x27e/0x3a70
[  407.780736][T13734]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  407.780769][T13734]  ? __dev_queue_xmit+0x27e/0x3a70
[  407.780793][T13734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.780813][T13734]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  407.780843][T13734]  ? __pfx___dev_queue_xmit+0x10/0x10
[  407.780879][T13734]  ? ref_tracker_free+0x63a/0x7d0
[  407.780896][T13734]  ? __copy_skb_header+0xa7/0x550
[  407.780921][T13734]  ? __pfx_ref_tracker_free+0x10/0x10
[  407.780954][T13734]  ? skb_clone+0x246/0x3a0
[  407.780981][T13734]  ? __netlink_deliver_tap+0x807/0x850
[  407.781000][T13734]  ? netlink_deliver_tap+0x2e/0x1b0
[  407.781025][T13734]  ? netlink_deliver_tap+0x2e/0x1b0
[  407.781043][T13734]  ? netlink_deliver_tap+0x2e/0x1b0
[  407.781068][T13734]  netlink_unicast+0x758/0x8d0
[  407.781094][T13734]  netlink_sendmsg+0x805/0xb30
[  407.781123][T13734]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.781146][T13734]  ? aa_sock_msg_perm+0x94/0x160
[  407.781166][T13734]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  407.781184][T13734]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.781204][T13734]  __sock_sendmsg+0x219/0x270
[  407.781226][T13734]  ____sys_sendmsg+0x505/0x830
[  407.781259][T13734]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.781290][T13734]  ? import_iovec+0x74/0xa0
[  407.781316][T13734]  ___sys_sendmsg+0x21f/0x2a0
[  407.781342][T13734]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.781397][T13734]  ? __fget_files+0x2a/0x420
[  407.781418][T13734]  ? __fget_files+0x3a0/0x420
[  407.781449][T13734]  __x64_sys_sendmsg+0x19b/0x260
[  407.781474][T13734]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.781511][T13734]  ? do_syscall_64+0xba/0x210
[  407.781530][T13734]  do_syscall_64+0xf6/0x210
[  407.781546][T13734]  ? clear_bhb_loop+0x45/0xa0
[  407.781566][T13734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.781581][T13734] RIP: 0033:0x7f9a8a98e969
[  407.781615][T13734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.781630][T13734] RSP: 002b:00007f9a8b7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.781654][T13734] RAX: ffffffffffffffda RBX: 00007f9a8abb5fa0 RCX: 00007f9a8a98e969
[  407.781667][T13734] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000005
[  407.781678][T13734] RBP: 00007f9a8aa10ab1 R08: 0000000000000000 R09: 0000000000000000
[  407.781688][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.781702][T13734] R13: 0000000000000000 R14: 00007f9a8abb5fa0 R15: 00007ffcfcb19928
[  407.781728][T13734]  </TASK>
[  407.781738][T13734] Mem-Info:
[  407.788752][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.814480][T13734] active_anon:6305 inactive_anon:0 isolated_anon:0
[  407.814480][T13734]  active_file:2150 inactive_file:39987 isolated_file:0
[  407.814480][T13734]  unevictable:768 dirty:192 writeback:0
[  407.814480][T13734]  slab_reclaimable:11953 slab_unreclaimable:196110
[  407.814480][T13734]  mapped:46010 shmem:1369 pagetables:789
[  407.814480][T13734]  sec_pagetables:0 bounce:0
[  407.814480][T13734]  kernel_misc_reclaimable:0
[  407.814480][T13734]  free:1192522 free_pcp:449 free_cma:0
[  407.825992][T13754] hsr0 speed is unknown, defaulting to 1000
[  407.867070][T13734] Node 0 active_anon:25320kB inactive_anon:0kB active_file:8600kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:184140kB dirty:768kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12412kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  407.980199][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  408.376985][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  408.418363][T13734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  408.462000][ T5831] Bluetooth: hci5: command tx timeout
[  408.472828][T13754] hsr0 speed is unknown, defaulting to 1000
[  408.474504][T13734] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  408.482243][T13754] hsr0 speed is unknown, defaulting to 1000
[  408.514874][T13734] lowmem_reserve[]: 0 2503 2504 2504 2504
[  408.521641][T13734] Node 0 DMA32 free:839524kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:25308kB inactive_anon:0kB active_file:8600kB inactive_file:159652kB unevictable:1536kB writepending:772kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:2524kB local_pcp:700kB free_cma:0kB
[  408.562549][T13734] lowmem_reserve[]: 0 0 0 0 0
[  408.568118][T13734] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  408.595879][T13734] lowmem_reserve[]: 0 0 0 0 0
[  408.601241][T13734] Node 1 Normal free:3914988kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  408.648214][T13734] lowmem_reserve[]: 0 0 0 0 0
[  408.653364][T13734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  408.671606][T13734] Node 0 DMA32: 3*4kB (UME) 247*8kB (UME) 182*16kB (UME) 129*32kB (UM) 169*64kB (UME) 75*128kB (UME) 21*256kB (UME) 13*512kB (UME) 26*1024kB (UME) 13*2048kB (UME) 182*4096kB (M) = 840196kB
[  408.700648][T13734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  408.712938][T13734] Node 1 Normal: 235*4kB (UE) 62*8kB (UME) 39*16kB (UME) 189*32kB (UME) 89*64kB (UME) 38*128kB (UME) 16*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 947*4096kB (M) = 3914988kB
[  408.738329][T13734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.749343][T13734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  408.771193][T13734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.781923][T13734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  408.798468][T13734] 43503 total pagecache pages
[  408.803334][T13734] 0 pages in swap cache
[  408.812162][T13734] Free swap  = 124996kB
[  408.819814][T13734] Total swap = 124996kB
[  408.824189][T13734] 2097051 pages RAM
[  408.829414][T13734] 0 pages HighMem/MovableOnly
[  408.834334][T13734] 424375 pages reserved
[  408.839600][T13734] 0 pages cma reserved
[  408.845874][T13634] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  408.864058][T13634] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  408.880665][T13634] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  408.910482][T13634] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  408.995335][T13772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.007600][T13772] veth1_to_bond: mtu less than device minimum
[  409.016925][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  409.200811][T13634] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.256729][T13634] 8021q: adding VLAN 0 to HW filter on device team0
[  409.284786][T13779] vlan0: entered promiscuous mode
[  409.314481][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.321788][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.352757][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.360034][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.382262][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  409.566379][T13791] netlink: 'syz.2.2041': attribute type 1 has an invalid length.
[  409.619398][T13794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2039'.
[  409.958220][T13809] xt_connbytes: Forcing CT accounting to be enabled
[  409.986262][T13809] xt_bpf: check failed: parse error
[  410.025093][T13634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.056953][    C0] net_ratelimit: 1 callbacks suppressed
[  410.056970][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  410.104974][T13810] xt_bpf: check failed: parse error
[  410.205060][T13816] netlink: 'syz.2.2044': attribute type 21 has an invalid length.
[  410.225590][T13634] veth0_vlan: entered promiscuous mode
[  410.247531][T13816] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2044'.
[  410.271456][T13634] veth1_vlan: entered promiscuous mode
[  410.289960][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'.
[  410.317563][T13816] netlink: 'syz.2.2044': attribute type 5 has an invalid length.
[  410.331774][T13816] netlink: 'syz.2.2044': attribute type 6 has an invalid length.
[  410.342555][T13816] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2044'.
[  410.449401][T13819] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  410.456986][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  410.537209][ T5831] Bluetooth: hci5: command tx timeout
[  410.624629][T13634] veth0_macvtap: entered promiscuous mode
[  410.644789][T13634] veth1_macvtap: entered promiscuous mode
[  410.689618][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.716928][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.755785][T13634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.778993][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.807708][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.827065][T13634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.869671][T13634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.886370][T13634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.896317][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2048'.
[  410.915863][T13634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.935865][T13634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.096974][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  411.169305][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.182216][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.276364][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.312113][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.496883][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  411.613565][T13841] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  411.622117][T13841] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  411.630435][T13841] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  411.638696][T13841] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  411.690092][T13829] dummy0 speed is unknown, defaulting to 1000
[  411.707964][T13829] hsr0 speed is unknown, defaulting to 1000
[  411.813178][T13851] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2054'.
[  411.970797][T13856] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  412.147022][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  412.215147][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'.
[  412.268624][T13865] 8021q: adding VLAN 0 to HW filter on device bond3
[  412.369816][T13872] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2061'.
[  412.532532][ T7482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.538769][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  412.582388][T13877] netlink: 'syz.6.2062': attribute type 1 has an invalid length.
[  412.599118][T13875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2063'.
[  412.628787][T13877] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2062'.
[  412.683882][T13878] netlink: 'syz.0.2063': attribute type 29 has an invalid length.
[  412.699092][T13878] netlink: 'syz.0.2063': attribute type 29 has an invalid length.
[  413.022083][ T7482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.177589][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  413.279354][ T7482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.334201][ T7482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.439190][ T7482] bridge_slave_1: left allmulticast mode
[  413.444863][ T7482] bridge_slave_1: left promiscuous mode
[  413.451094][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.461259][ T7482] bridge_slave_0: left allmulticast mode
[  413.467214][ T7482] bridge_slave_0: left promiscuous mode
[  413.472984][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.576971][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  413.833861][ T7482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.847902][ T7482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.860193][ T7482] bond0 (unregistering): Released all slaves
[  414.216905][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  414.408899][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2067'.
[  414.469182][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2067'.
[  414.627001][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  414.704174][ T7482] hsr_slave_0: left promiscuous mode
[  414.723942][ T7482] hsr_slave_1: left promiscuous mode
[  414.743131][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  414.767310][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.787215][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  414.794710][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.809606][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  414.820114][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  414.828974][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  414.843678][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  414.853029][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  414.903524][ T7482] veth1_macvtap: left promiscuous mode
[  414.910289][ T7482] veth0_macvtap: left promiscuous mode
[  414.916265][ T7482] veth1_vlan: left promiscuous mode
[  414.926728][ T7482] veth0_vlan: left promiscuous mode
[  415.257485][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  415.461796][ T7482] team0 (unregistering): Port device team_slave_1 removed
[  415.514289][ T7482] team0 (unregistering): Port device team_slave_0 removed
[  415.661479][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  416.296900][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  416.384748][T13909] dummy0 speed is unknown, defaulting to 1000
[  416.400295][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'.
[  416.411817][T13909] hsr0 speed is unknown, defaulting to 1000
[  416.430781][T13923] netlink: 'syz.0.2076': attribute type 5 has an invalid length.
[  416.458583][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2076'.
[  416.503142][T13923] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 256 - 0
[  416.516154][T13923] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 256 - 0
[  416.525758][T13923] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 256 - 0
[  416.534476][T13923] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 256 - 0
[  416.553884][T13923] geneve4: entered promiscuous mode
[  416.561946][T13923] geneve4: entered allmulticast mode
[  416.706877][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  416.822458][T13912] dummy0 speed is unknown, defaulting to 1000
[  416.832430][T13912] hsr0 speed is unknown, defaulting to 1000
[  416.953730][ T5831] Bluetooth: hci5: command tx timeout
[  417.219032][T13942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2082'.
[  417.229903][T13943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2082'.
[  417.311356][T13942] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2082'.
[  417.321080][T13943] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2082'.
[  417.336955][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  417.464980][T13912] chnl_net:caif_netlink_parms(): no params data found
[  417.501749][T13951] macsec2: entered promiscuous mode
[  417.515105][T13951] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  417.522931][T13951] macsec2: entered allmulticast mode
[  417.533222][T13951] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  417.549114][T13951] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  417.556107][T13951] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  417.736885][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  417.796371][T13912] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.810612][T13912] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.818235][T13912] bridge_slave_0: entered allmulticast mode
[  417.826120][T13912] bridge_slave_0: entered promiscuous mode
[  417.837540][T13912] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.844767][T13912] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.852546][T13912] bridge_slave_1: entered allmulticast mode
[  417.861401][T13912] bridge_slave_1: entered promiscuous mode
[  417.934508][T13912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.952407][T13912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.004047][T13912] team0: Port device team_slave_0 added
[  418.040254][T13912] team0: Port device team_slave_1 added
[  418.155027][T13912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.167569][T13981] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2091'.
[  418.168582][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.203297][T13912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.216634][T13912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.227556][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.255064][T13912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.365059][T13912] hsr_slave_0: entered promiscuous mode
[  418.376892][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  418.385856][T13912] hsr_slave_1: entered promiscuous mode
[  418.393117][T13912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.406009][T13912] Cannot create hsr debugfs directory
[  418.475348][T13993] macvlan0: entered promiscuous mode
[  418.480872][T13993] bridge0: entered promiscuous mode
[  418.487633][T13993] bridge0: port 1(macvlan0) entered blocking state
[  418.494513][T13993] bridge0: port 1(macvlan0) entered disabled state
[  418.501499][T13993] macvlan0: entered allmulticast mode
[  418.507225][T13993] bridge0: entered allmulticast mode
[  418.515916][T13993] macvlan0: left allmulticast mode
[  418.521243][T13993] bridge0: left allmulticast mode
[  418.533671][T13993] bridge0: left promiscuous mode
[  418.777167][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  418.865354][T14001] syzkaller0: entered promiscuous mode
[  418.870973][T14001] syzkaller0: entered allmulticast mode
[  419.022980][T13912] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  419.023549][   T56] Bluetooth: hci5: command tx timeout
[  419.046297][T13912] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  419.059951][T13912] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  419.071944][T13912] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  419.238392][T13912] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.283594][T13912] 8021q: adding VLAN 0 to HW filter on device team0
[  419.314232][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.321443][ T7470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.348574][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.355765][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.416883][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  419.827065][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  419.867378][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2103'.
[  419.987503][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'.
[  419.997101][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'.
[  420.459006][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  420.866931][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  421.099903][   T56] Bluetooth: hci5: command 0x040f tx timeout
[  421.496970][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  421.652031][T13912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.785001][T13912] veth0_vlan: entered promiscuous mode
[  421.813418][T13912] veth1_vlan: entered promiscuous mode
[  421.865258][T13912] veth0_macvtap: entered promiscuous mode
[  421.879645][T13912] veth1_macvtap: entered promiscuous mode
[  421.897104][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  421.907811][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.923220][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.953600][T13912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.976058][T14034] dummy0 speed is unknown, defaulting to 1000
[  421.986386][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.005439][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.021724][T13912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.041541][T14034] hsr0 speed is unknown, defaulting to 1000
[  422.060164][T13912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.078071][T13912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.107667][T13912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.116429][T13912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.539579][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  422.585346][ T7482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.616281][ T7482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.645161][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2113'.
[  422.668896][T14043] dummy0 speed is unknown, defaulting to 1000
[  422.679435][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2113'.
[  422.702612][ T7470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.712533][T14043] hsr0 speed is unknown, defaulting to 1000
[  422.729888][ T7470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.935332][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  422.946880][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  422.951534][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  422.962763][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  422.975736][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  422.986114][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  423.576896][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  423.682235][T14061] netlink: 'syz.0.2114': attribute type 11 has an invalid length.
[  423.785193][ T7470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.842149][T14064] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2115'.
[  423.986875][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  424.026746][ T7470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.041309][T14058] dummy0 speed is unknown, defaulting to 1000
[  424.049527][T14058] hsr0 speed is unknown, defaulting to 1000
[  424.207021][ T7470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.271633][ T7470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.295565][T14058] chnl_net:caif_netlink_parms(): no params data found
[  424.412919][T14058] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.420334][T14058] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.428385][T14058] bridge_slave_0: entered allmulticast mode
[  424.435651][T14058] bridge_slave_0: entered promiscuous mode
[  424.456561][T14058] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.464083][T14058] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.471770][T14058] bridge_slave_1: entered allmulticast mode
[  424.479251][T14058] bridge_slave_1: entered promiscuous mode
[  424.542763][T14058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.553528][ T7470] bridge_slave_1: left allmulticast mode
[  424.560658][ T7470] bridge_slave_1: left promiscuous mode
[  424.566460][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.577570][ T7470] bridge_slave_0: left allmulticast mode
[  424.583248][ T7470] bridge_slave_0: left promiscuous mode
[  424.589439][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.616930][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  424.955394][ T7470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.968169][ T7470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.979587][ T7470] bond0 (unregistering): Released all slaves
[  425.001584][T14058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.016957][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  425.024507][   T56] Bluetooth: hci8: command tx timeout
[  425.089655][T14058] team0: Port device team_slave_0 added
[  425.126707][T14058] team0: Port device team_slave_1 added
[  425.157495][T14058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.164483][T14058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.190639][T14058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.214376][T14058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.222244][T14058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.249473][T14058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.332568][T14058] hsr_slave_0: entered promiscuous mode
[  425.348216][T14058] hsr_slave_1: entered promiscuous mode
[  425.354681][T14058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  425.363037][T14058] Cannot create hsr debugfs directory
[  425.621744][T14078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2116'.
[  425.656899][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  425.726036][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'.
[  425.755440][T14086] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.814725][ T7470] hsr_slave_0: left promiscuous mode
[  425.823598][ T7470] hsr_slave_1: left promiscuous mode
[  425.834851][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.845472][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.873859][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.890891][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.938427][ T7470] veth1_macvtap: left promiscuous mode
[  425.944372][ T7470] veth0_macvtap: left promiscuous mode
[  425.955248][ T7470] veth1_vlan: left promiscuous mode
[  425.962072][ T7470] veth0_vlan: left promiscuous mode
[  425.962269][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  425.979117][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  425.988093][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  425.999142][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  426.008644][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  426.067158][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  426.543288][ T7470] team0 (unregistering): Port device team_slave_1 removed
[  426.592675][ T7470] team0 (unregistering): Port device team_slave_0 removed
[  426.618243][   T31] INFO: task syz.3.1265:10746 blocked for more than 143 seconds.
[  426.629872][   T31]       Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  426.642488][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  426.651454][   T31] task:syz.3.1265      state:D stack:27112 pid:10746 tgid:10745 ppid:5845   task_flags:0x400040 flags:0x00004004
[  426.670694][   T31] Call Trace:
[  426.674030][   T31]  <TASK>
[  426.679683][   T31]  __schedule+0x16e2/0x4cd0
[  426.684264][   T31]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  426.694649][   T31]  ? schedule+0x165/0x360
[  426.696936][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  426.702774][   T31]  ? __pfx___schedule+0x10/0x10
[  426.715243][   T31]  ? schedule+0x91/0x360
[  426.721234][   T31]  schedule+0x165/0x360
[  426.725445][   T31]  schedule_preempt_disabled+0x13/0x30
[  426.772929][   T31]  __mutex_lock+0x724/0xe80
[  426.788193][   T31]  ? __mutex_lock+0x51b/0xe80
[  426.793082][   T31]  ? nfsd_nl_version_get_doit+0x16e/0xb60
[  426.833201][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  426.841200][   T31]  ? __nlmsg_put+0xef/0x1b0
[  426.845761][   T31]  ? genlmsg_put+0x137/0x2e0
[  426.856514][   T31]  nfsd_nl_version_get_doit+0x16e/0xb60
[  426.862980][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  426.869962][   T31]  ? __local_bh_enable_ip+0x12d/0x1c0
[  426.875399][   T31]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  426.881728][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  426.891131][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  426.897347][   T31]  genl_rcv_msg+0x60e/0x790
[  426.901889][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  426.907249][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  426.913348][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  426.918470][   T31]  ? __copy_skb_header+0xa7/0x550
[  426.923521][   T31]  netlink_rcv_skb+0x219/0x490
[  426.928349][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  426.933407][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  426.940854][   T31]  ? down_read+0x1ad/0x2e0
[  426.945339][   T31]  genl_rcv+0x28/0x40
[  426.953489][   T31]  netlink_unicast+0x758/0x8d0
[  426.958541][   T31]  netlink_sendmsg+0x805/0xb30
[  426.963343][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.969025][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  426.974005][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  426.979522][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.984856][   T31]  __sock_sendmsg+0x219/0x270
[  426.990208][   T31]  ____sys_sendmsg+0x505/0x830
[  426.995021][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.000504][   T31]  ? import_iovec+0x74/0xa0
[  427.005040][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  427.009886][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.015164][   T31]  ? __fget_files+0x2a/0x420
[  427.020188][   T31]  ? __fget_files+0x3a0/0x420
[  427.024917][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  427.030329][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  427.035853][   T31]  ? do_syscall_64+0xba/0x210
[  427.040829][   T31]  do_syscall_64+0xf6/0x210
[  427.045357][   T31]  ? clear_bhb_loop+0x45/0xa0
[  427.050131][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.056045][   T31] RIP: 0033:0x7f72da18e969
[  427.060533][   T31] RSP: 002b:00007f72d7ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.069724][   T31] RAX: ffffffffffffffda RBX: 00007f72da3b5fa0 RCX: 00007f72da18e969
[  427.077856][   T31] RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000003
[  427.085849][   T31] RBP: 00007f72da210ab1 R08: 0000000000000000 R09: 0000000000000000
[  427.093872][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.101919][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  427.102041][   T56] Bluetooth: hci8: command tx timeout
[  427.114768][   T31] R13: 0000000000000000 R14: 00007f72da3b5fa0 R15: 00007ffc39978fc8
[  427.122854][   T31]  </TASK>
[  427.126012][   T31] 
[  427.126012][   T31] Showing all locks held in the system:
[  427.134032][   T31] 1 lock held by khungtaskd/31:
[  427.138954][   T31]  #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  427.148923][   T31] 3 locks held by kworker/u8:3/54:
[  427.154116][   T31]  #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  427.165920][   T31]  #1: ffffc9000120fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  427.177980][   T31]  #2: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  427.187119][   T31] 2 locks held by getty/5593:
[  427.191836][   T31]  #0: ffff8880303a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  427.201665][   T31]  #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  427.211874][   T31] 1 lock held by syz-executor/5837:
[  427.217354][   T31]  #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  427.228377][   T31] 5 locks held by kworker/u8:11/7470:
[  427.233760][   T31]  #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  427.244737][   T31]  #1: ffffc90002e77c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  427.255369][   T31]  #2: ffffffff8f2e7ed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0
[  427.266012][   T31]  #3: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  427.276881][   T31]  #4: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  427.287994][   T31] 5 locks held by kworker/u8:17/7478:
[  427.293385][   T31] 2 locks held by syz.4.1092/10048:
[  427.299105][   T31]  #0: ffffffff8f3597b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  427.307754][   T31]  #1: ffffffff8e211528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  427.318533][   T31] 2 locks held by syz.3.1265/10746:
[  427.323752][   T31]  #0: ffffffff8f3597b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  427.332394][   T31]  #1: ffffffff8e211528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60
[  427.342725][   T31] 2 locks held by syz.5.1850/13055:
[  427.348238][   T31]  #0: ffffffff8f3597b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  427.356490][   T31]  #1: ffffffff8e211528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  427.367009][   T31] 2 locks held by syz.7.2027/13742:
[  427.372247][   T31]  #0: ffffffff8f3597b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  427.380604][   T31]  #1: ffffffff8e211528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  427.391072][   T31] 2 locks held by syz-executor/14058:
[  427.396460][   T31]  #0: ffffffff8ea63480 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  427.406456][   T31]  #1: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  427.415814][   T31] 2 locks held by syz.2.2117/14075:
[  427.421349][   T31]  #0: ffff888078152008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  427.432007][   T31]  #1: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x960
[  427.441219][   T31] 4 locks held by syz.6.2119/14086:
[  427.446446][   T31]  #0: ffffffff8f3597b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  427.454977][   T31]  #1: ffff88805b9d70e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0
[  427.465478][   T31]  #2: ffff88805b9d1250 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0
[  427.477049][   T31]  #3: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  427.486628][   T31] 1 lock held by syz.0.2120/14090:
[  427.491896][   T31]  #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  427.501544][   T31] 1 lock held by syz.0.2120/14093:
[  427.506673][   T31]  #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990
[  427.515819][   T31] 1 lock held by syz.0.2120/14094:
[  427.521167][   T31]  #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  427.530782][   T31] 1 lock held by syz-executor/14091:
[  427.536088][   T31]  #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  427.545814][   T31] 
[  427.562747][   T31] =============================================
[  427.562747][   T31] 
[  427.572105][   T31] NMI backtrace for cpu 0
[  427.572120][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  427.572141][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  427.572151][   T31] Call Trace:
[  427.572158][   T31]  <TASK>
[  427.572165][   T31]  dump_stack_lvl+0x189/0x250
[  427.572195][   T31]  ? __wake_up_klogd+0xd9/0x110
[  427.572220][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.572248][   T31]  ? __pfx__printk+0x10/0x10
[  427.572281][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  427.572311][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  427.572334][   T31]  ? _printk+0xcf/0x120
[  427.572358][   T31]  ? __pfx__printk+0x10/0x10
[  427.572380][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  427.572403][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  427.572431][   T31]  watchdog+0xfee/0x1030
[  427.572458][   T31]  ? watchdog+0x1de/0x1030
[  427.572491][   T31]  kthread+0x70e/0x8a0
[  427.572517][   T31]  ? __pfx_watchdog+0x10/0x10
[  427.572540][   T31]  ? __pfx_kthread+0x10/0x10
[  427.572565][   T31]  ? __pfx_kthread+0x10/0x10
[  427.572587][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  427.572614][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.572643][   T31]  ? __pfx_kthread+0x10/0x10
[  427.572664][   T31]  ret_from_fork+0x4b/0x80
[  427.572683][   T31]  ? __pfx_kthread+0x10/0x10
[  427.572705][   T31]  ret_from_fork_asm+0x1a/0x30
[  427.572747][   T31]  </TASK>
[  427.572755][   T31] Sending NMI from CPU 0 to CPUs 1:
[  427.720764][    C1] NMI backtrace for cpu 1
[  427.720781][    C1] CPU: 1 UID: 0 PID: 9058 Comm: kworker/1:12 Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  427.720802][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  427.720814][    C1] Workqueue: events drain_vmap_area_work
[  427.720835][    C1] RIP: 0010:do_raw_spin_trylock+0x42/0x180
[  427.720858][    C1] Code: 89 fb 65 48 8b 05 ee 4b d7 10 48 89 44 24 48 49 bf 00 00 00 00 00 fc ff df 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 b8 8f 89 8d <48> c7 44 24 10 10 b4 9e 81 49 89 e4 49 c1 ec 03 48 b8 f1 f1 f1 f1
[  427.720873][    C1] RSP: 0018:ffffc900043ff6c0 EFLAGS: 00000286
[  427.720887][    C1] RAX: d5fef062bd0fce00 RBX: ffff8880b893f6c0 RCX: ffffffff99812603
[  427.720899][    C1] RDX: 0000000000000000 RSI: ffffffff8bc1d000 RDI: ffff8880b893f6c0
[  427.720910][    C1] RBP: ffffc900043ff748 R08: dffffc0000000000 R09: 0000000000000000
[  427.720922][    C1] R10: ffffed1009ecf600 R11: fffffbfff1efe5cf R12: ffffea00013d9ec0
[  427.720934][    C1] R13: ffff88813fffbb80 R14: ffff8880b893f6c0 R15: dffffc0000000000
[  427.720947][    C1] FS:  0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000
[  427.720961][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  427.720972][    C1] CR2: 000055fdd2ab5000 CR3: 000000000dd36000 CR4: 00000000003526f0
[  427.720988][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  427.720998][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  427.721008][    C1] Call Trace:
[  427.721014][    C1]  <TASK>
[  427.721024][    C1]  ? __page_table_check_zero+0xba/0x510
[  427.721050][    C1]  _raw_spin_trylock+0x21/0x80
[  427.721072][    C1]  __free_frozen_pages+0x667/0xce0
[  427.721101][    C1]  kasan_depopulate_vmalloc_pte+0x75/0x90
[  427.721120][    C1]  __apply_to_page_range+0x7cb/0xd20
[  427.721142][    C1]  ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10
[  427.721163][    C1]  ? __pfx___apply_to_page_range+0x10/0x10
[  427.721179][    C1]  ? smp_call_function_many_cond+0xefe/0x11c0
[  427.721204][    C1]  ? _raw_spin_unlock+0x28/0x50
[  427.721231][    C1]  kasan_release_vmalloc+0xa2/0xd0
[  427.721248][    C1]  purge_vmap_node+0x245/0x880
[  427.721263][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  427.721295][    C1]  ? __pfx_purge_vmap_node+0x10/0x10
[  427.721312][    C1]  ? flush_tlb_kernel_range+0x358/0x470
[  427.721339][    C1]  __purge_vmap_area_lazy+0x71a/0xae0
[  427.721368][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  427.721396][    C1]  drain_vmap_area_work+0x27/0x40
[  427.721410][    C1]  process_scheduled_works+0xadb/0x17a0
[  427.721451][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  427.721486][    C1]  worker_thread+0x8a0/0xda0
[  427.721516][    C1]  kthread+0x70e/0x8a0
[  427.721537][    C1]  ? __pfx_worker_thread+0x10/0x10
[  427.721552][    C1]  ? __pfx_kthread+0x10/0x10
[  427.721571][    C1]  ? __pfx_kthread+0x10/0x10
[  427.721589][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  427.721610][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.721634][    C1]  ? __pfx_kthread+0x10/0x10
[  427.721652][    C1]  ret_from_fork+0x4b/0x80
[  427.721668][    C1]  ? __pfx_kthread+0x10/0x10
[  427.721686][    C1]  ret_from_fork_asm+0x1a/0x30
[  427.721711][    C1]  </TASK>
[  428.034568][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  428.042880][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  428.049760][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-01005-g46431fd5224f #0 PREEMPT(full) 
[  428.061740][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  428.071797][   T31] Call Trace:
[  428.075080][   T31]  <TASK>
[  428.078017][   T31]  dump_stack_lvl+0x99/0x250
[  428.082623][   T31]  ? __asan_memcpy+0x40/0x70
[  428.087214][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.092422][   T31]  ? __pfx__printk+0x10/0x10
[  428.097044][   T31]  panic+0x2db/0x790
[  428.100971][   T31]  ? __pfx_panic+0x10/0x10
[  428.105399][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  428.111225][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  428.116607][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  428.122775][   T31]  watchdog+0x102d/0x1030
[  428.127136][   T31]  ? watchdog+0x1de/0x1030
[  428.131570][   T31]  kthread+0x70e/0x8a0
[  428.135650][   T31]  ? __pfx_watchdog+0x10/0x10
[  428.140353][   T31]  ? __pfx_kthread+0x10/0x10
[  428.144954][   T31]  ? __pfx_kthread+0x10/0x10
[  428.149551][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  428.154763][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  428.159972][   T31]  ? __pfx_kthread+0x10/0x10
[  428.164570][   T31]  ret_from_fork+0x4b/0x80
[  428.168990][   T31]  ? __pfx_kthread+0x10/0x10
[  428.173586][   T31]  ret_from_fork_asm+0x1a/0x30
[  428.178369][   T31]  </TASK>
[  428.181763][   T31] Kernel Offset: disabled
[  428.186100][   T31] Rebooting in 86400 seconds..