last executing test programs:

13.320713858s ago: executing program 1 (id=3823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x58040100)
socket$netlink(0x10, 0x3, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x20000084)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000000e80), 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fb839d022543dab80000000000788800"/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000200)=0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000002000001980000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)

6.661163829s ago: executing program 4 (id=3866):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c00000800428004000800140001800f00067a122d0090900ef2a483280a00040002"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r4, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="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", 0x7c2}], 0x1}}], 0x2, 0xc84)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0)
shutdown(r5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.664201111s ago: executing program 4 (id=3870):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000850ffffff810000066080000000000001800000000100000000000000000000095000000000000009500000003000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x8f, 0x4)

5.587193632s ago: executing program 4 (id=3871):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001a80)=ANY=[@ANYBLOB="c4e40400", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x62)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000c80)=ANY=[@ANYBLOB="a40010", @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf250300000008000500e0000002140006007767320000000000000000000000000014000200ff02000000000000000000000000000105000100010000001400060073797a6b616c6c657230000000000000140006006970766c616e3000000000000000000014000300fe80000000000000000000000000002308000400e000000114000300fc0200"/158], 0xa4}, 0x1, 0x0, 0x0, 0x40041}, 0x20000014)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000100000000000000002000400180100002020732500000000002020207b1af8ff00000000bfa100000000020007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x14)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000010a010200000000000000000100000aa83781ee4da419c84ed269256908e4e4d5002ffff900eb783c5fe28b76e3b5902bc9bddb59b51c8b4a491dd35f3cb99416fa3a37df710c72d84bd65934608ffd26e571202d724fda05decdb2a84ea1735f5e442189c08bae2f46cc2332d0b6240ac19ab305c73c7588ea43d8fb8f4026d2c3c7cee8298c91dd76106c3687e00ef3558ff2e13fd0325e02b12d1c82292d335ddf4c51e2b9e11f"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
recvmmsg(r10, &(0x7f0000000380)=[{{&(0x7f0000000280)=@generic, 0x80, 0x0}}], 0x1, 0x2100, &(0x7f0000000400))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="10000000640402002abdf9ffffdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r11, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4050)

5.58421735s ago: executing program 3 (id=3872):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd004000", 0x24) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
socket(0x10, 0x803, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0}) (async)
r7 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r8=>0x0}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x5c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20)
r12 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e00000011008108090f9fecdb4cb92e26480a371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x44090)

3.642494202s ago: executing program 1 (id=3873):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x20010, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r2, 0x1000)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff070000000000002e00000018110010", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000287050009000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018250000", @ANYRES32=r1, @ANYBLOB="00000000f5ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x6, 0x10}, 0x10, 0x208e1, r1, 0x1, &(0x7f0000000140)=[r1, r0, r1, r0], &(0x7f0000000180)=[{0x1, 0x2, 0x10, 0x2}], 0x10, 0x7}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r2, r0, 0x4, r5}, 0x10)
mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="136400deda029e54aa415201da715f0b3e08cb0a5051259f53ccf3526fba0a189e02df90c0e0b04d6e2c4f3f57c5eb15fd621b5c10b9656f89123ff55f5714ad240076202a006ae2ca834241ec26d6a2a243005b7ec8f486efff78279432699d49696477a0130c8ea19400dbe1be1ce093b606b3d31984", 0x77)

3.506220634s ago: executing program 1 (id=3874):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000a500000018110020", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xa, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xec, 0x0, r1, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000100)=r7}, 0x20)
r9 = gettid()
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000500)={'dummy0\x00', <r12=>0x0})
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, r12, 0x80000001}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0xb, 0x4)
syz_open_procfs$namespace(r9, &(0x7f0000000540)='ns/pid\x00')
write$cgroup_pid(r2, &(0x7f0000000880)=r9, 0x12)
r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r13, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @null, @netrom={'nr', 0x0}, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20)
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffb08}, @call={0x85, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffc0, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x66}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', r5, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xb, 0xa5e, 0x6}, 0x10, 0xb6fb, r2, 0x3, &(0x7f0000000480)=[r6, r0, r1, r1, r0, r0, r1, r0, r8], &(0x7f0000000600)=[{0x0, 0x3, 0x7, 0x3}, {0x5, 0x1, 0xe, 0x3}, {0x2, 0x5, 0x6, 0x3}], 0x10, 0x29}, 0x94)
r15 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockname$packet(r15, &(0x7f00000005c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x5, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, [@exit, @call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000900)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x41, '\x00', r16, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x10, 0x5, 0xfffffffa}, 0x10, 0x2fb6e, r14, 0x5, &(0x7f00000009c0)=[r0], &(0x7f0000000a00)=[{0x1, 0x2, 0x6, 0xc}, {0x3, 0x1, 0xe, 0xb}, {0x4, 0x5, 0x4, 0x1}, {0x1, 0x2, 0x10, 0xc}, {0x5, 0x3, 0x6, 0x5}], 0x10, 0x9}, 0x94)
sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r16, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)

2.660237139s ago: executing program 3 (id=3875):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0xf1f2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.657048968s ago: executing program 0 (id=3877):
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000802)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000340)={0x1538, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "a62cd295a0592c7a16108083f4c2a4ee650f68febfbff8f2da6988d62fb37bb97cd0b489466ce73169e2e91fc8bec86e049d7109e9d132df344815bbf83c50ad33"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\}&h^{\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'\xb1$\'.-}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!$'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#+,^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "43ac3b9f6452a5ca402f4401c9690f79828f2fd6343cd0aeb4ef96f5fd83f78c380afc72854649d06c8d3ce5a78ae4236b131414ebe1a5b9853d29dd87f72e8da233d9e8723a7f5a6832c30270b0ea94a15daec13871b4bab55bf60ba6e931e8c7d6b12d4b4e1a47966dac324d22c4a30cb2cda1759687"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "19a2b947451ad8f047956764954433501727b267cfa7791575885d7222543bd23de4b9fb3bdc85f346f2cc32ab95aa098a1e549a7dd1ea1ef78222cfc866fe15f5f3dc7a60ebdad0c07d2017cde370eea0f79e549476c1281d5fdccacd2770faccc52a4887294a0471854529eaee602dc6d38257e0b6fa7457c6c6511be435fb29d0e213e5ca64843bf99914ac4a6b860d95a6b1153190f76cc149501fae61c5778d684bc4c4701aeabf28e5f14773fa31453f3cabd51513145b069d9f3bc79d5a57c8d722672648a645c09d9140a4e2"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "477efbad0197c71c8d9ac3dc032b79c1c097358e83c315f6a314faf32b22448c8601a3563d84ee749be44667c76376c3b8cbb3c00fbb5c4735806db49c01512d6ff5cb319036c8c886a0cb066ee628ac3223c6ef723c3fcbcc9546e11ebdd2a693e09b444ea5db4c02209e7f91e50e91be75e7c88e054078b4dd68564874faa1b56306799350b946350ea0661a947c7b83ba9d09c21aada1e9d6417fcd26f32ecc0555d02815ee4b6f6a1169eab1220531b60bbc42b7b7806008ac2904c9458de336ddd83721b432aeaf51fdc6ab50ad4198bc5b6b09352816e8cd24b570773f991f6d2b5cf0e46bd77e475b3859db31d04deb23e688f0e550137b968c3cc81bf2d0585cbc034acde00935760dac8ed3b210e80b268327f7f2c1d6948ab81a10b7bd1b2c1abbce1169285b44c497af80712d8c8879a898028886c6ec204ca09fa03fc2e24eb2ef3530a7bbed0e05331530dfa6b6c531947789bf127fc123411eb8d80cf7d73913f1f918e36028b52a7ed9e00260e85a57a9ee77b726ba9965bb1458f153f842d73a48ce7f229e8d8fd291fcf86edd2895ec964d3552cde93bf691f942fa7ce46fe87427bbfb7b0802782112f72203d4aa9855fa89650468830d2329392d8c0a1eb59555fb89a364b51f5ea4b4fef0050424214fa6ef515a2111d65ef799253830a623e2aef86d3d99c1430aa4b25446df44999e52c9b2190fd6a52714b275026c25e17ae45daa72072da02ecaf271694db654ed9edb2823dd1eca1ed2325b453288bd694e3fdf4f7d8a2aa17d43110c03420c9b6d9a806f6cc4948688922619e35f9fe3de8ec343b3c7e84684827fe0f2931801eb274b9eb57b932b8ca74e8d4d21124c9b15ab3ae501b5ed6790bbed30b606f40c0f826d42b0807c3740e5d6cef38d35de7e8a315c1d86c719000f548a0dbbb6821b24efbafec85d2d89a5a5f11c8d6254a438f5956d1957e8b437bcb03c7dba09d9b84dae9558bd5746c7df20adb9f4791b4b12f941830bf2c833cc83d392feac43fd9d066a82651d474ea94b3a33c1b6c184ced6a5cb7368bab4d2d91a7d65627b1e606c66c799dacdc742924eafaa073c7bd51e418cb1e3566a2c82cc2d8ea3e827f000eb637d060213259bfc65a5eb648778d01fb787793d3b916e49718a8e04af578e16aa97ccd934f677dac154f6a6f45ba03c1280aa6f1a17fe34731a796bcb8b5fa69840a34186caadd39c4d78f9d4da71688c7c37b32b758440e2e8e026cdc54b9dbfd019814c8aff99de6138d0a632edb3de0d05b0e97dd8577a5321ffca2bd0fd5d49aa67b2fe89bab476a391205705eade6e14f3bb391d7adb9fe215c87a144d46264ec0ee4aaea954611b328fe3cc88765b1d3fa01e880f24701a33b4b1cd0d9a745fea0b0b07cca211214bd18d7098677bd4fa70e496e188691484aabfc5679e0d6ee59f24bb4e413860dd8321d98e79bfbbdea172dbe74938100ba4fee2426bc6df706189e218222917464ddc0f5e8f177bf607184abd4c0c943cbfa98aa77daf219f756c38912c1f82fb414919d2204f4a2120133a1079131ea9c00431466427322071873ddfae577824ded2b9ffd4623314abd38001c13b29a11cb2f93c865eae92f85efe41aa3128c0754b50753e3d142b8d4fcc0c344cfcb94013f6813a669f2bc9ccdc773a58e2e5437ef2b844e2cc2a48a592a1bca09def2fd6d298166b156280095a2fc777b58d50ae7cca3badb60aae1e00b49e60709e9fd1934d04ad9c02156f12164403eea46411ce54d5b3746e3e9518c282242d453b8c8b38f6950479a061002343dc0e4c7a3f2ddebe87c2a5a14f6038094b12192a32b6324bd00583bdc21f95dbc2535c1e9e40654d5e8f123de45d7417ce6d14e4534792c4ac5fca9f52537e7f02cd190b954e561be569d5724f87b5f68e9ba15cadb0e06bfb1d1264b262eabb8150997fde46bef7487e9d4df4546b6d513fa014debd1c7cdb64463a47d0e6a6aca0b019edd1b0c3ff9cea2466a76fcc3836d7180461fb0d0b174821052a8e602bf3f014e14f0902e5d6ba43c8014f92b4c4ad71a2248af9e82452f4f6782fef359972c9a13e5e154d1e41d704493d18a89d82529b4b3c9b542f0394adb8df15d73117d08c85715a0a5e857fedc68c6a6503b8cf350f2c9d801a276dc84fcd3826b64d9c40776aa70a88bfb2bedcdcc225f2d7c78e8d74050d48b0ef50f9b59a257da1fcf6ba2d8d690fa6a246d14405f5f6080debacdadaad499a1d44b1ff86381a3ea154ecae0d98a7cfae3534dbe8938777d9d0fded6489ca08fa2d9ec9ed576b1fc2353b29a027dabe844099ab23cc8df5976221b185d6b8df272f0d769484988d7d243d4c34f8d26b5f85041df33be85f59a4944e5fe49f11575cf8d38f4f34782131d6814b572d375c5c15a4a17ed5b3f54627b4303505484180a8b0a70bd9a27f2aa1f9ed2cfccf2674f7396a18d6b524c2ddc5bdc4e0179fd546f36f406813cea3108979af7fbc5261b9ed2c1290722ac70ebfd8f93627525c6501e54c4b4637c2ee530e6aaa63cc006a0c6dd616e6246fd98dd6bd6c08c80deda35377b342854359c822bc17f6cef00497160bc31c729043bfda2a6c2415b45c1548f49a5a1adc3f818d4e1c872f36073324b37d55cb2d8de24411124831af5978b8f6e001b707afbb74262e6c585a66a714ff709651796787faa6aa9780a4d5746e7628ab94d8c86f1014e8f5c484a4244502997ce1c4b601f993c271beb203831fc055f4f5a7faaf34c9ba1161de12ee622af09125d112427d686991e9be46d125f21754923b051ffcaed2523c95eb1601e7abed813d461ed551733716f75a9ee50bc8f0a3f673a0c559af057e4745122ca51881172f9f1e9590f8a1c27def19182003a5537ad011a5aeb379f053acf7b5a9f9bce95c4ce83c32bc9e59442f59410749df8763ceeedbf5fe440d124a064bf1fa06ded07ff41d51bfaca387cf1a6e472294a9f7019dc938afec11dc40c67b4cad69902908dd02a87589507f03405adb011a95429834edccd0c4070d8b1b9eaacda790457bb4c9bdd61dbc511000cc92a16d8c0ca6f5f1094c4cdd51e9db6a647f369640b2a21c59ae063a76842a5c5f403bd1cd73c39aa16371a7f28eeb16a6382ec4f2945e38ffd1b43effa80046ce49b2c661fab3695726eed1826a699db2e8afb6b4ed8af5b48efa82490c809b9a742811be8a7b17a7bcd2bc1b144ddace6b21943744d285646b0662761bd461611d39b2eeb1ea75c2c754fdd8219198eed3f8eb7b2f0146abf6f4fa980353038e4b79e68a553a143802e313517e9a7117bc6da264288cb3bb0d9e195305b946b404c8a9ee5af9a49c0e120e5d74fc2cffba4d5cb8b7da97ff60014876dd2613c692e42b7e7d1747ac0b4289bb8b711770c1258a6ecf6ff159d499d1f4b1df9351ed53eae90e9e70e0b3a50ec0e9260b90ae13fdd0cc801f5d2e62003a6732cf04bf9912d6c240f139e1de3c41a9a8dedab40c695fb0b7d4ace99421006a47e2f6a8f03574ae0984676c2a0fa4a7bc00b6649b2b2ee9f45914efa793a7f7d8e0c65d7c887e24fd9fdeaa537f266e5182341755edc7c0830ed9197b84c09e340e30c260c98ee7799b4075cde574657dfe52f2430ac5312e52df54b11344a94684b0426633f19a2baf19fd338ae5ae053aaf7cccb72da92b8b877019da6ef064a53a085f641505ede562c18be55e66325f5f351cf8490cf0899c3ed08ffd778d1c2fa40ec82dc95c894a795155f56e93cf0c827b407867b94a044b6587b914cd7860504988595dab65f09de1ab1cfbfcd08d57cb246add2bf02f8d572cddda586e2e24580bff6e95b9cf49403e4100e27e7d6d4fc21bb4c4e867c2315e40820484dff44a4e02949d83a571f1a2ad1c08f2b09e3836b12877c65b85287c1fa5734fa124f0a8d123dafea660ccf97d82623c5ffcf4bc3a2141574ee4e4c90351cab1c370e923618b5a24724bc16d13abb5db475e87535eed20786df4b3cc8d74ab4b4804b9a505789a8679ce26347dae46f96c60f91b217b90df3d13807d966649a0afd88e8b41a8c0d2485a2c34eebccb32105c9c97a9e88b51516823010033c8947c98e80ba93382b251f03ba9b18f0f7bef278f8af72e0f077f3f73e9594972221b86690696b27bf14ce75eb6055386e434cef3aeb0e51067728eb735b1d642b1d55601ba7e6381c8fe419bb4a1d90757287c8111c2d905951ad092b71c6713a8116199ce3f32fb70f4a94ceceab1997545057fb91e7286f7583f43e6538caf5adf038821444f99587a0193e96545b003fdb521c1745243372d08610760af5266fcf90fcb7f7b127a382d212673ac2fa466cfda48d31860070e076dc2d85a8dac833893fc01687287e4970458734a7462afe430e78efad1ae752061cd2b568e0d56e9e8783f1e1a6e8a9192a6ebe8e97eb804c5564bc4b79aebc3dfecd323cbfbf571262b7f2283cbc61e4e97667d311a87c0a2ad3cd886610702048052f813bfbe565b802422dd2805b3ca59985e83219ee83d96afc13e036265c1cda669f9c0ed943209b49eca7328fd73169be435a1e7f24e4ac76fed1e06cfd1992b2ef536fb3644aedb1f62500e6b258826b037202b8ca21135f87cffbb59300601b729f9c58f8ed816c9d7769539ea5fe1505d3cb1ab27f3ff6f3fc9e5d12e70c4bdb3df2856c020300a0c12816d47a207422ecfd44bbb2a7f4364793d6a8b61a877300f99b01edcdc719c0678ffa91adee14c3e4abb6e4525792ecd0d0d1323fde7991586a08c020b69f8780f4219de508d93ee0a4aa62399807568536f5a96f7b59aadefa12726e1a6e929e6ad31f29888fe13597dc584189f9bf1c07aeadc0b11c97a1f4165a725d75eff2f2d36822e99f17f1fb7727dfcb5021b3c863061bfe2ff33f92d737e3f7094875d8f99b089729c091d892cdbf13fef1bdb4bff74496378b239d0fef77d4a223e0f427883283aa9e55e8bc03cdceb27e29082557fd198d252a7949338c4b1eac9e61a103659889c5ec7b93d3fbd273049054d6e9b3523023393b265a65681383e0b8186cf4acc15dc5ba96883fa35a026e31424640a1beb3f316e1afb5d7ab458238957761241ec7614196a3c4f6269f445bce5fda78e3b2c41d3ddb294bed1a8cfa0f77969aeea97caa76201544ea1268170497a8ea2f48fe71916259eacfaae957495ce42275a007dc9eafb3f41adf830536f094c2634814bed79c6ec8a278088c5d35e268074795e4f29f4a2f786d32091fb62d8bda648680730b19b17248dadce2c1b4aa961b737bf83bf43f60b804a3c7c6cd3556d917b43b4abfe740bb6392ae265f27b7e0072dc7d3bcf04ac294113c2cb7b3bfa673cba0ce55fba142d955bdbeedd55b9713be42b43fa02b44c2fa8e8b7a0524989f3fac2f1dd889a584779640a806ac4e926e1fd2d16439f3e0edd1ab1fd40021013a05843a25c86af92099c4b14413b16cbd3804ff3da7a70b2548f582e3c3bb205a3f1800526d9ff2e2f1bc74e05cbedd769c6dc22d488b77afd11bc371c8d12ee8bc8920b61612293c81351bcbc71c9daa34495680225371821d63e467336f4b19ba6c66ddb4826f7da6d4deb99647f3cb9329e401b58348d9ce8d145c096fa1aeb51345d9a6f96163a704bf06babb0920e2ac932118077fc076424d1e45650585fe665652c20f12d7c2f14f5d168c60f40c7cd4b9965cc302406ee77bbf59d41d783a3122e03dc567795f0646cbb191fae37089b62d6"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "f81dfdb924d87a773882ae81876043eca625619bd3dc342eca3f1731e7886de3e694e2ab5f0c4401dea3618ac38ae9e1cb9a026b42e2aea83670de4c9dcb51ea50385ea03d101d5d5a12933900cc5b884cf9e9bc560ec2c8ac884437b82d1d6ca8fba237f59ea10f1c5b48c16f"}, @ETHTOOL_A_BITSET_VALUE={0x4f, 0x4, "0d1bd7f529d7d08de2ddd814db27c5a6521a6cc75d11c428d48515517f305861a27ceca683fec0f0065fb4feede4fa93caa934c9752cc016ec91d6a74c2ce4d31a425b25a7132451449c86"}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "8907b4587319ee9104832c6feb3554ec6acc269a9902246d51da6ead0bb424214f60d320bfef831fe0e106443294bf72216ea661be0fd44f58362cc796ced8a9c8cbd4283d82dda086acdf29ecf98fd9375fa87e2361c3c24452db7ee60e621ba7b93cef42f7d4720cd665c29d58cfc7d6a20647b62bd309727a2b3c2a558dfd2d34bf36428eb857b0a74bbcaf3a5f3f9d6a2661fd99207054b2ca9b8b5c0c89149ab01f4f5b1a4dd303425fa7bec776b745927c"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '\xd6:+,[$,-{,@#}-!@\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@%\'\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^*-&[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&{\\,\\)!\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1538}, 0x1, 0x0, 0x0, 0x40}, 0x5)
r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000001900)=@abs, &(0x7f0000001980)=0x6e, 0x80000)
recvmsg$unix(r3, &(0x7f0000001f80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/103, 0x67}, {&(0x7f0000001ac0)=""/238, 0xee}, {&(0x7f0000001bc0)=""/124, 0x7c}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/15, 0xf}, {&(0x7f0000001d40)=""/118, 0x76}, {&(0x7f0000001dc0)=""/131, 0x83}], 0x7, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0x60}, 0x10000)
sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb623ecd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008080}, 0x1)
r11 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r11, 0x0, 0x9, &(0x7f00000020c0)="737f1437ab4c26ffaa762b102996c4d87e789d0f682cd8463581771096d20b34f2bd2e4d23d33676d03a1b9f2ae06dad775715a0684a6b23d3fe626dee3a623c8b53f3da24ec0749d6b350298596ea5daa24952e04e12b237eefe74e7d46d40064dd5e39437f1d2214fea6c449104800e051f98f68f69f312e07158d4ec1eaf51fb3b4455d447f3bf2054aa7dfa03c7f44926e96020c714c7ad337913020875cc42a1a9fc1a324c5e2f796cdfd8ddc98158aacc68f1497acc2bb002fcfc0a68a79cfe4055697190478e1c694b1f45085ac345b51ef40fe9e1ece07407f7e4ed478417b811f1e15c5a48f586ff1bb10644ffb8e60ca1c", 0xf6)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002240)={<r13=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)={0x8c, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
connect$inet(r9, &(0x7f00000023c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r14 = syz_genetlink_get_family_id$team(&(0x7f0000002440), r10)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000002480)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000002540)={'syztnl1\x00', &(0x7f00000024c0)={'ip6tnl0\x00', <r16=>0x0, 0x4, 0x5, 0x9a, 0x0, 0x42, @private0, @loopback, 0x1, 0x8, 0x8, 0x8}})
getsockname$packet(r9, &(0x7f0000002580)={0x11, 0x0, <r17=>0x0}, &(0x7f00000025c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002600)={'team0\x00', <r18=>0x0})
getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000002640)={@dev, @empty, <r19=>0x0}, &(0x7f0000002680)=0xc)
getpeername$packet(r6, &(0x7f00000026c0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002700)=0x14)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000002740)={@empty, <r21=>0x0}, &(0x7f0000002780)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000027c0)={'team0\x00', <r22=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002880)={'ip6tnl0\x00', &(0x7f0000002800)={'syztnl0\x00', <r23=>0x0, 0x4, 0x0, 0x8, 0x63e3844, 0x54, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x1, 0x7, 0x56e}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002c40)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002c00)={&(0x7f00000028c0)={0x318, r14, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r15}, {0x4}}, {{0x8, 0x1, r16}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3fb0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r23}}, {0x8}}}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)
r24 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000002c80)={<r25=>0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, [0x80000000, 0x5, 0x0, 0xd7, 0x1, 0x7, 0x9570, 0x807, 0x401, 0x4, 0x3, 0x7, 0x1, 0x46, 0x4]}, &(0x7f0000002d80)=0x100)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r24, 0x84, 0x10, &(0x7f0000002dc0)=@assoc_value={r25, 0xffff}, &(0x7f0000002e00)=0x8)
socket$l2tp6(0xa, 0x2, 0x73)

2.527621279s ago: executing program 4 (id=3878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r2=>r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xba, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r8=>0x0})
setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES64=r8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$NFT_BATCH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000001508000140000000020900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000050)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x6}, 0x4)
r11 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000055)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x700}, 0xfffffffffffffcb2}, 0x1, 0x7}, 0x0)
r13 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x81800)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x5e)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r14)
sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYRES16=r13], 0x30}}, 0x0)

2.475769349s ago: executing program 1 (id=3879):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190, 0xf5ff}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0)
shutdown(r2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.42817165s ago: executing program 3 (id=3880):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="a60000000000000000000000b5a168a71b", @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
socketpair(0x28, 0x80000, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
recvfrom$ax25(r3, &(0x7f0000000580)=""/4096, 0x1000, 0x40000000, &(0x7f0000000280)={{0x3, @null, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
bind$ax25(r4, &(0x7f0000000200)={{0x3, @bcast, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r7, 0x84, 0x7f, 0x0, &(0x7f0000001180))
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060200c90000280012800900010000000000", @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff070000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}})

2.390324409s ago: executing program 0 (id=3881):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0x1, &(0x7f00000002c0)="689879c3a218981efb294c0f979a31ae776f9f54b6c8998ae9a02026c6cdad66a22e2a"}, 0x20)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16, 0x10}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/243, 0xf3}, {&(0x7f0000000b40)=""/190, 0xffffffffffffffd3}], 0x4, &(0x7f0000000c40)=""/114, 0x72}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189, 0xbd}, {&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f0000003240)=""/90, 0x5a}], 0x3}, 0xe3ac}], 0x2, 0x0, 0x0)
shutdown(r2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.247608444s ago: executing program 4 (id=3882):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x2e, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x105}, [@IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "49d4e734e53d9af90812dbe522c634ce6008"}]}, 0xffffffffffffff45}}, 0x4080080)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080))

1.873656957s ago: executing program 4 (id=3883):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x58040100)
socket$netlink(0x10, 0x3, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x20000084)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000000e80), 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fb839d022543dab80000000000788800"/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000200)=0xc)

1.635959424s ago: executing program 2 (id=3884):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x20010, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r2, 0x1000)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff070000000000002e00000018110010", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000287050009000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018250000", @ANYRES32=r1, @ANYBLOB="00000000f5ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x6, 0x10}, 0x10, 0x208e1, r1, 0x1, &(0x7f0000000140)=[r1, r0, r1, r0], &(0x7f0000000180)=[{0x1, 0x2, 0x10, 0x2}], 0x10, 0x7}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r2, r0, 0x4, r5}, 0x10)
mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="136400deda029e54aa415201da715f0b3e08cb0a5051259f53ccf3526fba0a189e02df90c0e0b04d6e2c4f3f57c5eb15fd621b5c10b9656f89123ff55f5714ad240076202a006ae2ca834241ec26d6a2a243005b7ec8f486efff78279432699d49696477a0130c8ea19400dbe1be1ce093b606b3d31984", 0x77)

1.453416802s ago: executing program 3 (id=3885):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
r4 = accept4(r2, 0x0, &(0x7f0000000000), 0xc0000)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000100)={0xe, 0x3, 0xd, 0x2}, 0x10)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000040)

1.401848864s ago: executing program 0 (id=3886):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00'}) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) (async)
socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) (async)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) (async)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x214, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

1.318119767s ago: executing program 2 (id=3887):
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x9, @private0, 0x3}}, 0x1}, 0x90)
r0 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x4, 0x20}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18050000003700000000000000000000180100002020704800000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, &(0x7f0000000500))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.232237526s ago: executing program 3 (id=3888):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @multicast1}, {0x1}, 0x0, {0x2, 0x4e25, @private=0xa0100fd}})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7, 0xd500000000000000}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x2}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x5, 0x4)
recvmmsg(r0, &(0x7f0000000140), 0x40000000000006a, 0x10003, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x8000000000000}, 0xffffffff, 0x100000, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

1.144684767s ago: executing program 0 (id=3889):
unshare(0x24020400)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffff3}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, 0x0, &(0x7f0000000080))
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @empty, 0xffffffff}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket(0x11, 0x3, 0x1000)
ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x1, @dev}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x48, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
r10 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd62)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0xc010)

1.09045619s ago: executing program 2 (id=3890):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x42032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x18, r1, 0x251bdc399c801d71, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94)
r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={0x0, 0x0, 0x8}, 0x18)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000280)=@raw=[@alu={0x7, 0x1, 0x7, 0x6, 0x4, 0x30, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x97}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xd0, &(0x7f00000005c0)=""/208, 0x41100, 0x28, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x9, 0x80, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r6], 0x0, 0x10, 0xb}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r2, r8, 0x0, r2}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x7, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x6e61, 0xd7, &(0x7f0000000380)=""/215, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x7, 0x100, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r2, r7, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00), 0x10, 0x7}, 0x94)

711.273216ms ago: executing program 0 (id=3891):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000))
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3)
recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}, {&(0x7f0000000ac0)=""/231, 0xe7}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000700)=""/130, 0x82}, {&(0x7f0000002080)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/154, 0x9a}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x800)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c118ae99b95d02ff4284860186dd", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x88, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x20000005)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x4)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r9, @ANYBLOB="5d5b0000000000001c001a8018000a80140007002001000000000000000000ee178504001400350077"], 0x50}}, 0x0)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000001700000002000000000000040000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
socket$netlink(0x10, 0x3, 0x8000000004)

510.391615ms ago: executing program 1 (id=3892):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x18) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0xb, 0x0, 0x0, 0xfffffff4, 0x60000000, 0x0, 0x3f, 0x0, 0x0, 0x1}, 0x50) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)=""/177, &(0x7f0000000000)=0xb1) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20)

490.933204ms ago: executing program 2 (id=3893):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async)
readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) (async)
shutdown(r2, 0x1) (async, rerun: 64)
socket(0x10, 0x803, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006800e965a0f2fdfa011a78000000000000790063f303000000000004000400"], 0x1c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10) (async, rerun: 32)
sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (rerun: 32)
sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd313bc00"}}, 0x48}, 0x300}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

364.049384ms ago: executing program 0 (id=3894):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="44000000040a000000000008070000000900010073797a30000000000c00024000000000000000010900030073797a30000000000900030073797a3200000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0xd0}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x200342, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
unshare(0x2c020400)
socket$rxrpc(0x21, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)

280.491429ms ago: executing program 3 (id=3895):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async)
recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x1, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r8, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

246.037179ms ago: executing program 1 (id=3896):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xd)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x0, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a0000000003ff02", @ANYRES32, @ANYBLOB="08001f"], 0x3c}}, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000240)={&(0x7f00000002c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="052a670006000000010000000100000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020605000000000000000000000000050500010007000000090000050004000000000013000300686173683a6e65742c69666163650000"], 0x44}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r1, &(0x7f0000000380)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
accept4(r9, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)

176.188396ms ago: executing program 2 (id=3897):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001d80)={'geneve0\x00', &(0x7f0000001d40)=@ethtool_cmd={0x49}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x20010, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r2, 0x1000)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff070000000000002e00000018110010", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000287050009000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018250000", @ANYRES32=r1, @ANYBLOB="00000000f5ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x6, 0x10}, 0x10, 0x208e1, r1, 0x1, &(0x7f0000000140)=[r1, r0, r1, r0], &(0x7f0000000180)=[{0x1, 0x2, 0x10, 0x2}], 0x10, 0x7}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r2, r0, 0x4, r5}, 0x10)
mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="136400deda029e54aa415201da715f0b3e08cb0a5051259f53ccf3526fba0a189e02df90c0e0b04d6e2c4f3f57c5eb15fd621b5c10b9656f89123ff55f5714ad240076202a006ae2ca834241ec26d6a2a243005b7ec8f486efff78279432699d49696477a0130c8ea19400dbe1be1ce093b606b3d31984", 0x77)

0s ago: executing program 2 (id=3898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@allocspi={0xf8, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {{{@in=@multicast2, @in6=@private2, 0x4e21, 0x0, 0x4e24, 0xb, 0xa, 0x30, 0x80, 0x2f}, {@in=@broadcast, 0x4d5, 0x32}, @in6=@private2, {0x4, 0x1, 0x6, 0x51, 0x5, 0x9, 0x1de, 0xfffffffffffffffb}, {0x3a, 0x1, 0x4, 0x5}, {0x31e, 0x2, 0xc}, 0x70bd2a, 0x3504, 0xa, 0x4, 0x4, 0x1}, 0x300, 0x3}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000100}, 0x48040)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
setsockopt(r0, 0x196, 0x9, &(0x7f0000000100)="2e3b60717a1e29ddd9b78d71901a9589276210b7", 0x14)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
read(r9, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x44, "43720700000000004786b89e6fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36d68dbac78c2893c6a9798597b201337a179ecc35385efddfd9ec373f0295041c"}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
recvmmsg(r10, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000)
shutdown(r10, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000400000000000000935a951da864c930ff"], 0x50)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000700))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

7.019650][T16206]  dump_stack_lvl+0x189/0x250
[  427.019686][T16206]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.019709][T16206]  ? __pfx__printk+0x10/0x10
[  427.019737][T16206]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  427.019763][T16206]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  427.019790][T16206]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  427.019817][T16206]  warn_alloc+0x214/0x310
[  427.019840][T16206]  ? stack_depot_save_flags+0x40/0x900
[  427.019867][T16206]  ? __pfx_warn_alloc+0x10/0x10
[  427.019892][T16206]  ? kasan_save_track+0x4f/0x80
[  427.019923][T16206]  ? xskq_create+0x56/0x170
[  427.019950][T16206]  ? xsk_init_queue+0xb0/0x110
[  427.019976][T16206]  ? xsk_setsockopt+0x4dc/0x8d0
[  427.020001][T16206]  ? do_sock_setsockopt+0x17c/0x1b0
[  427.020020][T16206]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  427.020039][T16206]  ? do_syscall_64+0xfa/0x3b0
[  427.020077][T16206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.020109][T16206]  __vmalloc_node_range_noprof+0x125/0x12f0
[  427.020168][T16206]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  427.020198][T16206]  ? __kasan_kmalloc+0x93/0xb0
[  427.020233][T16206]  vmalloc_user_noprof+0xad/0xf0
[  427.020255][T16206]  ? xskq_create+0xbf/0x170
[  427.020286][T16206]  xskq_create+0xbf/0x170
[  427.020320][T16206]  xsk_init_queue+0xb0/0x110
[  427.020353][T16206]  xsk_setsockopt+0x4dc/0x8d0
[  427.020384][T16206]  ? __pfx_xsk_setsockopt+0x10/0x10
[  427.020412][T16206]  ? __pfx_aa_sk_perm+0x10/0x10
[  427.020445][T16206]  ? aa_sock_opt_perm+0x74/0x110
[  427.020477][T16206]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  427.020502][T16206]  ? __pfx_xsk_setsockopt+0x10/0x10
[  427.020531][T16206]  do_sock_setsockopt+0x17c/0x1b0
[  427.020559][T16206]  __x64_sys_setsockopt+0x13f/0x1b0
[  427.020587][T16206]  do_syscall_64+0xfa/0x3b0
[  427.020618][T16206]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.020648][T16206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.020670][T16206]  ? clear_bhb_loop+0x60/0xb0
[  427.020697][T16206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.020717][T16206] RIP: 0033:0x7fccdaf8ebe9
[  427.020738][T16206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.020757][T16206] RSP: 002b:00007fccdbeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  427.020783][T16206] RAX: ffffffffffffffda RBX: 00007fccdb1b5fa0 RCX: 00007fccdaf8ebe9
[  427.020799][T16206] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  427.020811][T16206] RBP: 00007fccdb011e19 R08: 0000000000000004 R09: 0000000000000000
[  427.020825][T16206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.020839][T16206] R13: 00007fccdb1b6038 R14: 00007fccdb1b5fa0 R15: 00007ffc5880a018
[  427.020874][T16206]  </TASK>
[  427.020888][T16206] Mem-Info:
[  427.359387][T16206] active_anon:8975 inactive_anon:0 isolated_anon:0
[  427.359387][T16206]  active_file:1949 inactive_file:39965 isolated_file:0
[  427.359387][T16206]  unevictable:768 dirty:267 writeback:0
[  427.359387][T16206]  slab_reclaimable:12584 slab_unreclaimable:149747
[  427.359387][T16206]  mapped:31535 shmem:3478 pagetables:1030
[  427.359387][T16206]  sec_pagetables:0 bounce:0
[  427.359387][T16206]  kernel_misc_reclaimable:0
[  427.359387][T16206]  free:1266413 free_pcp:15965 free_cma:0
[  427.444177][T16206] Node 0 active_anon:37400kB inactive_anon:0kB active_file:7796kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127740kB dirty:1068kB writeback:0kB shmem:13976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12660kB pagetables:3768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  427.509701][T16206] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  427.543788][T16233] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2665'.
[  427.544409][T16206] Node 0 
[  427.558630][T16206] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.597760][T16206] lowmem_reserve[]: 0 2500 2502 2502 2502
[  427.604688][T16206] Node 0 DMA32 free:1149272kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38756kB inactive_anon:0kB active_file:7796kB inactive_file:157824kB unevictable:1536kB writepending:1068kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:45676kB local_pcp:23848kB free_cma:0kB
[  427.641128][T16206] lowmem_reserve[]: 0 0 1 1 1
[  427.646567][T16206] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  427.679906][T16206] lowmem_reserve[]: 0 0 0 0 0
[  427.684905][T16206] Node 1 Normal free:3900244kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20304kB local_pcp:12252kB free_cma:0kB
[  427.782590][T16206] lowmem_reserve[]: 0 0 0 0 0
[  427.794424][T16206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  427.820934][T16206] Node 0 DMA32: 1242*4kB (UM) 195*8kB (UME) 104*16kB (UE) 454*32kB (UM) 251*64kB (UME) 70*128kB (UM) 27*256kB (UME) 9*512kB (UM) 12*1024kB (UE) 8*2048kB (UM) 259*4096kB (UM) = 1148800kB
[  427.863882][T16206] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  427.959669][T16206] Node 1 Normal: 185*4kB (UM) 40*8kB (UME) 51*16kB (UME) 70*32kB (UME) 25*64kB (UME) 8*128kB (UME) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3900244kB
[  428.029769][T16206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  428.050665][T16206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  428.099426][T16206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  428.128835][T16206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  428.169393][T16206] 44939 total pagecache pages
[  428.174243][T16206] 0 pages in swap cache
[  428.178848][T16206] Free swap  = 124996kB
[  428.199524][T16206] Total swap = 124996kB
[  428.203849][T16206] 2097051 pages RAM
[  428.207796][T16206] 0 pages HighMem/MovableOnly
[  428.239419][T16206] 424872 pages reserved
[  428.244024][T16206] 0 pages cma reserved
[  428.312180][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'.
[  428.322415][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2668'.
[  428.573488][T16269] netlink: 'syz.4.2672': attribute type 13 has an invalid length.
[  428.607043][T16269] netlink: 'syz.4.2672': attribute type 17 has an invalid length.
[  428.780175][T16269] dummy0: left promiscuous mode
[  428.813175][T16269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  428.833495][ T7384] lo speed is unknown, defaulting to 1000
[  428.843521][T16275] bond0: option use_carrier: invalid value (2)
[  428.872503][ T7384] syz0: Port: 1 Link ACTIVE
[  428.878217][ T7384] lo speed is unknown, defaulting to 1000
[  428.903226][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.267279][T16291] netlink: 'syz.2.2677': attribute type 2 has an invalid length.
[  429.280961][T16292] netlink: 'syz.0.2679': attribute type 5 has an invalid length.
[  429.321442][T16291] þ`Ì: entered promiscuous mode
[  429.430886][T16299] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  429.492456][T16300] team0: Mode changed to "broadcast"
[  429.757869][T16314] netlink: 'syz.2.2685': attribute type 3 has an invalid length.
[  430.551180][T16343] Bluetooth: MGMT ver 1.23
[  430.651416][T16353] block nbd3: Unsupported socket: shutdown callout must be supported.
[  430.678160][T16344] __nla_validate_parse: 8 callbacks suppressed
[  430.678180][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'.
[  430.956847][T16372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2698'.
[  431.061980][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'.
[  431.146410][T16379] lo speed is unknown, defaulting to 1000
[  431.423966][T16386] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  431.623125][T16399] syzkaller0: entered promiscuous mode
[  431.631311][T16404] netlink: 'syz.0.2706': attribute type 1 has an invalid length.
[  431.639609][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'.
[  431.644811][T16399] syzkaller0: entered allmulticast mode
[  431.681290][T16405] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  431.717984][T16404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'.
[  431.777003][T16379] lo speed is unknown, defaulting to 1000
[  432.230711][T16413] lo speed is unknown, defaulting to 1000
[  432.847987][T16447] sctp: [Deprecated]: syz.0.2720 (pid 16447) Use of int in maxseg socket option.
[  432.847987][T16447] Use struct sctp_assoc_value instead
[  433.034308][T16413] lo speed is unknown, defaulting to 1000
[  433.280179][T16469] bond3: (slave gretap2): Releasing active interface
[  433.305109][T16469] gretap2: left allmulticast mode
[  433.338134][T16471] netlink: 'syz.2.2723': attribute type 10 has an invalid length.
[  433.970768][T16482] lo speed is unknown, defaulting to 1000
[  434.019638][T16488] nbd3: detected capacity change from 0 to 63
[  434.039671][T16490] block nbd3: NBD_DISCONNECT
[  434.046498][T16490] block nbd3: Disconnected due to user request.
[  434.094782][T16490] block nbd3: shutting down sockets
[  434.532684][T16482] lo speed is unknown, defaulting to 1000
[  434.839880][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'.
[  436.449076][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  436.464983][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  436.475924][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  436.504325][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  436.517009][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  436.742006][T16555] lo speed is unknown, defaulting to 1000
[  437.322928][T16555] lo speed is unknown, defaulting to 1000
[  437.357256][T16587] lo speed is unknown, defaulting to 1000
[  437.363442][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'.
[  437.402774][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'.
[  437.418943][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2757'.
[  437.665709][T16586] ip6tnl2: entered promiscuous mode
[  437.684969][T16586] ip6tnl2: entered allmulticast mode
[  437.703198][T16587] lo speed is unknown, defaulting to 1000
[  438.267990][T16555] chnl_net:caif_netlink_parms(): no params data found
[  438.456906][T16616] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2761'.
[  438.589611][ T5158] Bluetooth: hci5: command tx timeout
[  438.715621][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2764'.
[  438.982526][T16555] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.991150][T16555] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.999106][T16555] bridge_slave_0: entered allmulticast mode
[  439.007715][T16555] bridge_slave_0: entered promiscuous mode
[  439.018701][T16555] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.026858][T16555] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.041810][T16555] bridge_slave_1: entered allmulticast mode
[  439.053391][T16555] bridge_slave_1: entered promiscuous mode
[  439.154464][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.209890][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.211073][T16631] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2765'.
[  439.325180][T16644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'.
[  439.348389][T16555] team0: Port device team_slave_0 added
[  439.372285][T16555] team0: Port device team_slave_1 added
[  439.421007][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.429670][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.463338][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.485270][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.493265][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.526475][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.732613][T16655] netlink: 'syz.3.2771': attribute type 1 has an invalid length.
[  439.760352][T16655] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2771'.
[  439.805364][T16555] hsr_slave_0: entered promiscuous mode
[  439.820670][T16555] hsr_slave_1: entered promiscuous mode
[  439.829015][T16555] debugfs: 'hsr0' already exists in 'hsr'
[  439.836009][T16555] Cannot create hsr debugfs directory
[  439.972500][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'.
[  440.293473][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2779'.
[  440.306782][T16681] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  440.318974][T16681] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  440.364332][T16678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.442764][T16683] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  440.663658][T16696] block nbd3: server does not support multiple connections per device.
[  440.677993][T16696] block nbd3: shutting down sockets
[  440.689243][ T5158] Bluetooth: hci5: command tx timeout
[  440.709443][T16697] syz_tun: left promiscuous mode
[  440.755193][T16696] netlink: 'syz.3.2781': attribute type 3 has an invalid length.
[  440.783763][T16697] veth0_to_bridge: left allmulticast mode
[  440.846685][T16697] veth0_to_team: left promiscuous mode
[  440.853229][T16697] veth0_to_team: left allmulticast mode
[  440.933363][T16697] net veth1_virt_wifi ÿÿÿÿÿÿ: left allmulticast mode
[  441.007412][T16697] geneve0: left allmulticast mode
[  441.079338][T16697] gretap1: left promiscuous mode
[  441.085514][T16697] ip6tnl1: left promiscuous mode
[  441.091333][T16697] ip6tnl1: left allmulticast mode
[  441.155677][T16697] bridge5: left promiscuous mode
[  441.165835][T16697] ip6erspan0: left allmulticast mode
[  441.172171][T16697] macvlan2: left promiscuous mode
[  441.177734][T16697] macvlan2: left allmulticast mode
[  441.188041][T16697] gretap2: left promiscuous mode
[  441.194055][T16697] gretap2: left allmulticast mode
[  441.200525][T16697] team1: left promiscuous mode
[  441.205678][T16697] team1: left allmulticast mode
[  441.212648][T16697] geneve3: left promiscuous mode
[  441.222659][T16697] ip6gretap0: left allmulticast mode
[  441.228500][T16697] macsec1: left promiscuous mode
[  441.234411][T16697] macsec1: left allmulticast mode
[  441.256120][T16697] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  441.265265][T16697] macvtap1: left allmulticast mode
[  441.285346][T16697] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  441.296683][T16697] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  441.306025][T16697] ip6tnl2: left promiscuous mode
[  441.316174][T16697] ip6tnl2: left allmulticast mode
[  441.425816][T16706] veth1: entered promiscuous mode
[  441.432997][T16706] bridge5: entered promiscuous mode
[  441.442170][T16706] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  441.459022][T16706] hsr1: entered promiscuous mode
[  441.491872][ T7245] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.521617][ T7245] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.564316][ T7245] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.575060][ T7245] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.576305][T16718] netlink: 'syz.3.2785': attribute type 11 has an invalid length.
[  441.882381][T16727] netlink: 'syz.4.2788': attribute type 3 has an invalid length.
[  442.327922][T16555] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  442.346888][T16555] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  442.422308][T16555] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  442.433357][T16743] netlink: 'syz.3.2789': attribute type 1 has an invalid length.
[  442.464572][T16743] __nla_validate_parse: 7 callbacks suppressed
[  442.464594][T16743] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2789'.
[  442.490485][T16743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2789'.
[  442.612300][T16746] netlink: 'syz.1.2791': attribute type 10 has an invalid length.
[  442.664343][T16555] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  442.664799][T16743] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2789'.
[  442.698637][   T30] audit: type=1800 audit(1754590462.885:12): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2791" name="memory.events" dev="tmpfs" ino=2759 res=0 errno=0
[  442.762083][ T5158] Bluetooth: hci5: command tx timeout
[  442.803229][T16737] lo speed is unknown, defaulting to 1000
[  442.986323][T16757] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  443.082175][T16757] IPv6: sit3: Disabled Multicast RS
[  443.129059][T16555] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.212757][T16555] 8021q: adding VLAN 0 to HW filter on device team0
[  443.242237][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.251064][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.323145][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.330711][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.427370][T16737] lo speed is unknown, defaulting to 1000
[  443.513057][T16763] syzkaller0: entered promiscuous mode
[  443.518899][T16763] syzkaller0: entered allmulticast mode
[  443.824917][T16767] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2796'.
[  444.059969][T16772] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.305680][T16785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'.
[  444.340722][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.430129][T16787] macsec2: entered allmulticast mode
[  444.455599][T16787] macsec0: entered allmulticast mode
[  444.591301][T16555] veth0_vlan: entered promiscuous mode
[  444.635344][T16555] veth1_vlan: entered promiscuous mode
[  444.740797][T16795] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2802'.
[  444.774346][T16555] veth0_macvtap: entered promiscuous mode
[  444.781541][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'.
[  444.829655][ T5158] Bluetooth: hci5: command tx timeout
[  444.858167][T16555] veth1_macvtap: entered promiscuous mode
[  444.887227][T16797] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.925814][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.955354][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.991888][ T5158] Bluetooth: hci0: command tx timeout
[  445.007318][ T1339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.047547][ T1339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.099156][T16798] tipc: Resetting bearer <eth:syzkaller0>
[  445.107272][ T1339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.125228][ T1339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.282476][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.304166][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.437978][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.454128][T16806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  445.468773][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.973367][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'.
[  445.983149][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'.
[  446.024169][T16825] 8021q: VLANs not supported on nlmon0
[  446.257389][T16847] tipc: Started in network mode
[  446.265389][T16847] tipc: Node identity 46a9ef27bfaf, cluster identity 4711
[  446.286664][T16847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.553762][T16847] syzkaller0: entered promiscuous mode
[  446.604938][T16847] syzkaller0: entered allmulticast mode
[  446.618607][T16847] tipc: Resetting bearer <eth:syzkaller0>
[  446.734475][T16841] tipc: Resetting bearer <eth:syzkaller0>
[  446.931727][T16858] netlink: 4660 bytes leftover after parsing attributes in process `syz.4.2818'.
[  447.301576][   T10] tipc: Node number set to 4177981223
[  447.543797][T16867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2819'.
[  449.120619][T16841] tipc: Disabling bearer <eth:syzkaller0>
[  449.198389][T16866] lo speed is unknown, defaulting to 1000
[  449.279689][T16871] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  449.624896][T16888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.634168][T16891] syzkaller0: entered promiscuous mode
[  449.644792][T16891] syzkaller0: entered allmulticast mode
[  449.765815][T16882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.821999][T16884] tipc: Resetting bearer <eth:syzkaller0>
[  449.837569][T16883] tipc: Resetting bearer <eth:syzkaller0>
[  449.905320][T16883] tipc: Disabling bearer <eth:syzkaller0>
[  449.923408][T16866] lo speed is unknown, defaulting to 1000
[  450.217767][T16901] FAULT_INJECTION: forcing a failure.
[  450.217767][T16901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.283819][T16901] CPU: 0 UID: 0 PID: 16901 Comm: syz.4.2827 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  450.283854][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  450.283867][T16901] Call Trace:
[  450.283876][T16901]  <TASK>
[  450.283886][T16901]  dump_stack_lvl+0x189/0x250
[  450.283915][T16901]  ? __pfx____ratelimit+0x10/0x10
[  450.283948][T16901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  450.283976][T16901]  ? __pfx__printk+0x10/0x10
[  450.284005][T16901]  ? __might_fault+0xb0/0x130
[  450.284050][T16901]  should_fail_ex+0x414/0x560
[  450.284090][T16901]  _copy_from_user+0x2d/0xb0
[  450.284122][T16901]  ppp_write+0x186/0x400
[  450.284154][T16901]  ? __pfx_ppp_write+0x10/0x10
[  450.284181][T16901]  vfs_write+0x27b/0xa90
[  450.284224][T16901]  ? __pfx_vfs_write+0x10/0x10
[  450.284258][T16901]  ? __fget_files+0x2a/0x420
[  450.284282][T16901]  ? __fget_files+0x2a/0x420
[  450.284301][T16901]  ? __fget_files+0x3a0/0x420
[  450.284321][T16901]  ? __fget_files+0x2a/0x420
[  450.284360][T16901]  __x64_sys_pwrite64+0x193/0x220
[  450.284397][T16901]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  450.284438][T16901]  ? do_syscall_64+0xbe/0x3b0
[  450.284476][T16901]  do_syscall_64+0xfa/0x3b0
[  450.284507][T16901]  ? lockdep_hardirqs_on+0x9c/0x150
[  450.284538][T16901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.284560][T16901]  ? clear_bhb_loop+0x60/0xb0
[  450.284587][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.284608][T16901] RIP: 0033:0x7fccdaf8ebe9
[  450.284628][T16901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.284647][T16901] RSP: 002b:00007fccdbe95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  450.284672][T16901] RAX: ffffffffffffffda RBX: 00007fccdb1b6090 RCX: 00007fccdaf8ebe9
[  450.284689][T16901] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000003
[  450.284703][T16901] RBP: 00007fccdbe95090 R08: 0000000000000000 R09: 0000000000000000
[  450.284716][T16901] R10: 0000000000000d39 R11: 0000000000000246 R12: 0000000000000001
[  450.284729][T16901] R13: 00007fccdb1b6128 R14: 00007fccdb1b6090 R15: 00007ffc5880a018
[  450.284765][T16901]  </TASK>
[  451.132921][T16919] lo speed is unknown, defaulting to 1000
[  451.941792][T16932] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2836'.
[  451.962923][T16919] lo speed is unknown, defaulting to 1000
[  451.971668][T16929] lo speed is unknown, defaulting to 1000
[  452.098169][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'.
[  452.190508][T16937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2838'.
[  452.812820][T16958] FAULT_INJECTION: forcing a failure.
[  452.812820][T16958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.869893][T16931] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2835'.
[  452.949326][T16958] CPU: 1 UID: 0 PID: 16958 Comm: syz.0.2844 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  452.949370][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  452.949385][T16958] Call Trace:
[  452.949394][T16958]  <TASK>
[  452.949405][T16958]  dump_stack_lvl+0x189/0x250
[  452.949436][T16958]  ? __pfx____ratelimit+0x10/0x10
[  452.949471][T16958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  452.949508][T16958]  ? __pfx__printk+0x10/0x10
[  452.949550][T16958]  should_fail_ex+0x414/0x560
[  452.949592][T16958]  _copy_to_user+0x31/0xb0
[  452.949627][T16958]  simple_read_from_buffer+0xe1/0x170
[  452.949674][T16958]  proc_fail_nth_read+0x1b3/0x220
[  452.949706][T16958]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  452.949736][T16958]  ? rw_verify_area+0x258/0x650
[  452.949766][T16958]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  452.949795][T16958]  vfs_read+0x1fd/0x980
[  452.949825][T16958]  ? fdget_pos+0x247/0x320
[  452.949876][T16958]  ? __pfx___mutex_lock+0x10/0x10
[  452.949916][T16958]  ? __pfx_vfs_read+0x10/0x10
[  452.949948][T16958]  ? __fget_files+0x2a/0x420
[  452.949975][T16958]  ? __fget_files+0x3a0/0x420
[  452.949995][T16958]  ? __fget_files+0x2a/0x420
[  452.950027][T16958]  ksys_read+0x145/0x250
[  452.950066][T16958]  ? __pfx_ksys_read+0x10/0x10
[  452.950113][T16958]  ? do_syscall_64+0xbe/0x3b0
[  452.950152][T16958]  do_syscall_64+0xfa/0x3b0
[  452.950194][T16958]  ? lockdep_hardirqs_on+0x9c/0x150
[  452.950224][T16958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.950247][T16958]  ? clear_bhb_loop+0x60/0xb0
[  452.950275][T16958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.950297][T16958] RIP: 0033:0x7f604438d5fc
[  452.950317][T16958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  452.950336][T16958] RSP: 002b:00007f60451dc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  452.950362][T16958] RAX: ffffffffffffffda RBX: 00007f60445b6090 RCX: 00007f604438d5fc
[  452.950378][T16958] RDX: 000000000000000f RSI: 00007f60451dc0a0 RDI: 0000000000000005
[  452.950391][T16958] RBP: 00007f60451dc090 R08: 0000000000000000 R09: 0000000000000000
[  452.950404][T16958] R10: 0000000000000d39 R11: 0000000000000246 R12: 0000000000000001
[  452.950417][T16958] R13: 00007f60445b6128 R14: 00007f60445b6090 R15: 00007ffec261a8c8
[  452.950460][T16958]  </TASK>
[  453.298740][T16944] lo speed is unknown, defaulting to 1000
[  453.504634][T16963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.545629][T16963] syzkaller0: entered promiscuous mode
[  453.560728][T16963] syzkaller0: entered allmulticast mode
[  453.606749][T16944] lo speed is unknown, defaulting to 1000
[  453.620932][T16929] lo speed is unknown, defaulting to 1000
[  454.953557][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2855'.
[  454.966496][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'.
[  454.975872][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2855'.
[  454.994978][T17001] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.2857'.
[  455.038426][T17001] wg1: entered promiscuous mode
[  455.061027][T17001] wg1: entered allmulticast mode
[  456.139090][T17033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2865'.
[  456.497131][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2869'.
[  456.613869][T17053] netlink: 'syz.1.2870': attribute type 4 has an invalid length.
[  456.650358][T17054] netlink: 'syz.1.2870': attribute type 4 has an invalid length.
[  456.909471][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  457.021263][T17073] netlink: 'syz.3.2875': attribute type 21 has an invalid length.
[  457.039488][T17073] IPv6: NLM_F_CREATE should be specified when creating new route
[  457.072119][T17073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  457.081071][T17073] IPv6: NLM_F_CREATE should be set when creating new route
[  457.089520][T17073] IPv6: NLM_F_CREATE should be set when creating new route
[  457.097356][T17073] IPv6: NLM_F_CREATE should be set when creating new route
[  457.346583][T17078] netlink: 'syz.0.2877': attribute type 2 has an invalid length.
[  457.363997][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'.
[  457.569877][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'.
[  457.917964][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2881'.
[  457.957168][T17088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2881'.
[  458.106820][T17100] netlink: 'syz.2.2883': attribute type 1 has an invalid length.
[  458.144518][T17101] netlink: 'syz.2.2883': attribute type 1 has an invalid length.
[  458.222345][T17100] 8021q: adding VLAN 0 to HW filter on device bond5
[  458.492408][T17119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2889'.
[  458.877237][T17135] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2892'.
[  458.913790][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2894'.
[  459.041765][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'.
[  459.062057][T17143] bpq0: entered promiscuous mode
[  459.077925][T17143] bpq0: entered allmulticast mode
[  459.093050][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'.
[  459.496473][T17154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.502119][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'.
[  459.505895][T17154] syzkaller0: entered promiscuous mode
[  459.521216][T17154] syzkaller0: entered allmulticast mode
[  459.558390][T17154] tipc: Resetting bearer <eth:syzkaller0>
[  459.573466][T17153] tipc: Resetting bearer <eth:syzkaller0>
[  459.597472][T17153] tipc: Disabling bearer <eth:syzkaller0>
[  459.615297][T17162] tipc: Trying to set illegal importance in message
[  459.848653][T17165] lo speed is unknown, defaulting to 1000
[  459.865904][T17171] netlink: 'syz.1.2905': attribute type 3 has an invalid length.
[  459.943034][T17171] netlink: 'syz.1.2905': attribute type 10 has an invalid length.
[  459.977417][T17171] !
: entered promiscuous mode
[  459.994129][T17171] team0: Failed to send options change via netlink (err -105)
[  460.042526][T17175] netlink: 'syz.1.2905': attribute type 10 has an invalid length.
[  460.044703][T17171] team0: Port device 
0!
 added
[  460.130720][T17175] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  460.165582][T17175] !
: left promiscuous mode
[  460.212779][T17175] team0: Failed to send options change via netlink (err -105)
[  460.232430][T17175] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  460.275380][T17175] team0: Port device 
0!
 removed
[  460.754013][T17168] lo speed is unknown, defaulting to 1000
[  460.754159][T17165] lo speed is unknown, defaulting to 1000
[  461.152891][T17195] pim6reg1: entered promiscuous mode
[  461.158629][T17195] pim6reg1: entered allmulticast mode
[  461.397201][T17168] lo speed is unknown, defaulting to 1000
[  461.397218][T17180] lo speed is unknown, defaulting to 1000
[  461.914161][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2912'.
[  462.021994][T17180] lo speed is unknown, defaulting to 1000
[  462.072128][T17215] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2913'.
[  462.590822][T17222] IPVS: stopping backup sync thread 8069 ...
[  463.084936][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  463.343852][T17238] netlink: 'syz.3.2919': attribute type 1 has an invalid length.
[  463.848657][T17259] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2924'.
[  464.589736][T17292] lo speed is unknown, defaulting to 1000
[  465.536538][T17292] lo speed is unknown, defaulting to 1000
[  465.847638][T17335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  466.148004][T17333] tipc: Disabling bearer <eth:syzkaller0>
[  466.236164][T17345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2944'.
[  466.262334][T17345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2944'.
[  466.611475][T17357] netlink: zone id is out of range
[  466.647486][T17357] netlink: zone id is out of range
[  466.684376][T17357] netlink: zone id is out of range
[  466.713474][T17365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2948'.
[  466.777278][T17357] netlink: zone id is out of range
[  466.784222][T17357] netlink: zone id is out of range
[  466.790821][T17357] netlink: zone id is out of range
[  466.798587][T17357] netlink: zone id is out of range
[  466.836442][T17357] netlink: zone id is out of range
[  466.854148][T17357] netlink: zone id is out of range
[  466.889590][T17357] netlink: zone id is out of range
[  467.222521][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'.
[  467.232536][T17386] netlink: 1864 bytes leftover after parsing attributes in process `syz.4.2954'.
[  467.248230][T17387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.257238][T17387] syzkaller0: entered promiscuous mode
[  467.264861][T17387] syzkaller0: entered allmulticast mode
[  467.390684][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'.
[  467.437751][T17393] batman_adv: batadv0: Adding interface: ipvlan0
[  467.448568][T17393] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.478775][T17393] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  467.490621][T17376] tipc: Resetting bearer <eth:syzkaller0>
[  467.533237][T17394] netlink: 'syz.1.2955': attribute type 10 has an invalid length.
[  467.556267][T17376] tipc: Disabling bearer <eth:syzkaller0>
[  467.576362][T17394] !
: entered promiscuous mode
[  467.583503][T17395] netlink: 'syz.1.2955': attribute type 10 has an invalid length.
[  467.593063][T17394] team0: Port device 
0!
 added
[  467.620385][T17395] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  467.642881][T17395] !
: left promiscuous mode
[  467.674919][T17395] team0: Failed to send options change via netlink (err -105)
[  467.683869][T17395] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  467.731914][T17395] team0: Port device 
0!
 removed
[  467.777738][T17409] veth11: entered promiscuous mode
[  467.977224][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'.
[  468.148368][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'.
[  468.316854][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2967'.
[  469.418958][T17485] __nla_validate_parse: 1 callbacks suppressed
[  469.418984][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2978'.
[  469.722446][T17506] lo speed is unknown, defaulting to 1000
[  469.974293][T17506] lo speed is unknown, defaulting to 1000
[  470.525003][T17528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2990'.
[  471.135464][T17526] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.143517][T17526] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.713013][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  471.723195][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  471.731832][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  471.745188][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  471.754319][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  472.017841][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  472.053049][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  472.376920][T17537] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  472.423016][T17538] syzkaller1: entered promiscuous mode
[  472.432055][T17538] syzkaller1: entered allmulticast mode
[  472.521030][ T6469] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.546582][ T6469] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.610007][ T6469] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.622848][ T6469] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.716582][T17573] ip6gretap1: entered promiscuous mode
[  472.733638][T17575] batadv0: entered promiscuous mode
[  472.750944][T17582] netlink: 'syz.3.2998': attribute type 11 has an invalid length.
[  472.759084][T17582] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2998'.
[  472.780338][T17575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.804817][T17579] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  472.828607][T17579] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  472.838101][T17579] tipc: Resetting bearer <eth:syzkaller0>
[  472.868533][T17552] lo speed is unknown, defaulting to 1000
[  472.965208][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'.
[  472.987839][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3001'.
[  473.020278][T17593] net_ratelimit: 95 callbacks suppressed
[  473.020299][T17593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.027838][T17590] gretap2: entered promiscuous mode
[  473.045035][T17593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'.
[  473.267049][T17602] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  473.278921][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.314028][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.336435][T17552] lo speed is unknown, defaulting to 1000
[  473.362243][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.379421][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.388737][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.466656][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.492471][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.502241][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.520353][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.533482][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.543377][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.571336][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.628734][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.651375][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.660990][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.670247][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.679759][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.688707][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.699652][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.709920][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.719072][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.728440][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.738610][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.751662][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.760771][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.770126][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.779873][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.790886][ T5158] Bluetooth: hci3: command tx timeout
[  473.805034][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.814528][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.824216][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.844352][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.865901][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.875667][T17603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  473.940303][T17552] chnl_net:caif_netlink_parms(): no params data found
[  474.065819][T17626] netlink: 'syz.1.3008': attribute type 13 has an invalid length.
[  474.083089][T17626] netlink: 'syz.1.3008': attribute type 17 has an invalid length.
[  474.150978][T17623] syzkaller1: entered promiscuous mode
[  474.157691][T17623] syzkaller1: entered allmulticast mode
[  474.287313][T17626] 8021q: adding VLAN 0 to HW filter on device team0
[  474.315321][T17626] batadv0: left promiscuous mode
[  474.372642][T17626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  474.383944][T17626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  474.401435][T17626] veth1_vlan: left promiscuous mode
[  474.408377][T17626] 
@ÿ: left promiscuous mode
[  474.414432][T17626] 
@ÿ: entered promiscuous mode
[  474.423133][T17626] veth1_vlan: entered promiscuous mode
[  474.434818][T17626] veth1_macvtap: left promiscuous mode
[  474.444173][T17626] veth0_macvtap: left promiscuous mode
[  474.452282][T17626] veth0_macvtap: entered promiscuous mode
[  474.471219][T17626] veth1_macvtap: entered promiscuous mode
[  474.477119][T17626] veth1_macvtap: entered allmulticast mode
[  474.533354][T17626] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.651258][T17626] 8021q: adding VLAN 0 to HW filter on device bond1
[  474.669277][T17626] 8021q: adding VLAN 0 to HW filter on device bond2
[  474.687182][T17626] syzkaller0: left promiscuous mode
[  474.693827][T17626] syzkaller0: left allmulticast mode
[  474.714253][T17626] 8021q: adding VLAN 0 to HW filter on device bond3
[  474.770636][T17626] macsec1: left promiscuous mode
[  474.775942][T17626] team0: left promiscuous mode
[  474.787251][T17626] macsec2: left allmulticast mode
[  474.793191][T17626] macsec0: left allmulticast mode
[  474.798782][T17626] veth1_macvtap: left allmulticast mode
[  474.813929][T17626] veth11: left promiscuous mode
[  474.877898][T17556] lo speed is unknown, defaulting to 1000
[  474.884902][T17556] syz2: Port: 1 Link ACTIVE
[  475.006442][   T36] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0
[  475.019573][   T36] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0
[  475.028307][   T36] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 256 - 0
[  475.059973][   T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  475.079688][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.091273][   T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  475.135595][T17629] lo speed is unknown, defaulting to 1000
[  475.136855][T17552] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.219723][T17552] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.227115][T17552] bridge_slave_0: entered allmulticast mode
[  475.237267][T17552] bridge_slave_0: entered promiscuous mode
[  475.246199][   T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  475.310675][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.339626][   T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  475.351177][   T49] bond1: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  475.384824][T17552] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.409123][T17645] netlink: 'syz.4.3015': attribute type 1 has an invalid length.
[  475.411530][T17552] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.462856][T17552] bridge_slave_1: entered allmulticast mode
[  475.489613][T17552] bridge_slave_1: entered promiscuous mode
[  475.567184][   T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  475.583551][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.597475][   T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  475.737332][T17552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.784882][T17552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.840228][T17629] lo speed is unknown, defaulting to 1000
[  475.870626][ T5158] Bluetooth: hci3: command tx timeout
[  475.918760][T17552] team0: Port device team_slave_0 added
[  475.935761][T17552] team0: Port device team_slave_1 added
[  476.015482][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3021'.
[  476.078576][T17672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3021'.
[  476.090203][T17552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.097561][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.133680][T17552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.163740][T17670] gretap3: entered promiscuous mode
[  476.182490][T17552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.190403][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.225536][T17552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.327128][T17552] hsr_slave_0: entered promiscuous mode
[  476.334127][T17552] hsr_slave_1: entered promiscuous mode
[  476.342901][T17552] debugfs: 'hsr0' already exists in 'hsr'
[  476.348792][T17552] Cannot create hsr debugfs directory
[  476.629902][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'.
[  476.912085][T17688] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.955231][T17688] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.106104][T17697] batadv_slave_1: entered promiscuous mode
[  477.185069][T17692] batadv_slave_1: left promiscuous mode
[  477.229735][T17701] bpq0: left allmulticast mode
[  477.330112][T17690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3025'.
[  477.761515][T17552] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  477.812581][T17552] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  477.853295][T17552] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  477.869942][T17552] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  477.950505][ T5158] Bluetooth: hci3: command tx timeout
[  478.106594][T17730] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3034'.
[  478.377140][T17552] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.435052][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'.
[  478.467530][T17730] lo speed is unknown, defaulting to 1000
[  478.492087][T17739] veth1: entered promiscuous mode
[  478.528132][T17739] netlink: 'syz.3.3034': attribute type 1 has an invalid length.
[  478.561839][T17739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3034'.
[  478.601642][T17739] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  478.754771][T17552] 8021q: adding VLAN 0 to HW filter on device team0
[  478.812599][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.820044][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.882464][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.890184][ T7245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.967996][T17750] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3038'.
[  478.982516][T17750] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3038'.
[  479.023580][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3038'.
[  479.387277][T17730] lo speed is unknown, defaulting to 1000
[  479.391324][T17735] lo speed is unknown, defaulting to 1000
[  480.025450][T17768] syzkaller0: entered promiscuous mode
[  480.032151][ T5158] Bluetooth: hci3: command tx timeout
[  480.081785][T17768] syzkaller0: entered allmulticast mode
[  480.165005][T17775] netlink: 'syz.1.3044': attribute type 1 has an invalid length.
[  480.434141][T17775] 8021q: adding VLAN 0 to HW filter on device bond4
[  480.544105][T17776] bond4: (slave veth13): Enslaving as an active interface with a down link
[  480.982212][T17773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.855848][T17735] lo speed is unknown, defaulting to 1000
[  482.971589][T17775] lo speed is unknown, defaulting to 1000
[  483.014642][T17552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.239239][T17552] veth0_vlan: entered promiscuous mode
[  483.273339][T17552] veth1_vlan: entered promiscuous mode
[  483.308210][T17796] __nla_validate_parse: 1 callbacks suppressed
[  483.308250][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'.
[  483.368492][T17552] veth0_macvtap: entered promiscuous mode
[  483.397800][T17552] veth1_macvtap: entered promiscuous mode
[  483.453308][T17552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.500190][T17552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.527594][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.554284][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.602898][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.635519][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.650829][T17775] lo speed is unknown, defaulting to 1000
[  484.087502][  T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  484.097714][  T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.286881][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'.
[  484.307757][T17808] !
: renamed from dummy0
[  484.374541][T17810] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  484.741777][ T7245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  484.776404][ T7245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.067630][T17818] lo speed is unknown, defaulting to 1000
[  485.212845][T17836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3054'.
[  485.437798][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'.
[  485.690459][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3055'.
[  485.739045][T17845] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3055'.
[  488.697200][T17818] lo speed is unknown, defaulting to 1000
[  488.834848][T17852] tipc: Started in network mode
[  488.859455][T17852] tipc: Node identity 9aef66fe1dd1, cluster identity 4711
[  488.868848][T17852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.954865][T17854] syzkaller0: entered promiscuous mode
[  489.012634][T17854] syzkaller0: entered allmulticast mode
[  489.211525][T17854] tipc: Resetting bearer <eth:syzkaller0>
[  489.307804][T17855] pim6reg: entered allmulticast mode
[  489.341688][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'.
[  489.538341][T17852] pim6reg: left allmulticast mode
[  489.669478][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3060'.
[  489.719976][T17851] tipc: Resetting bearer <eth:syzkaller0>
[  489.757391][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  489.776821][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  489.786637][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  489.842288][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  489.851980][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  489.874077][T17851] tipc: Disabling bearer <eth:syzkaller0>
[  489.885570][ T7382] tipc: Node number set to 2269013758
[  490.053952][T17869] lo speed is unknown, defaulting to 1000
[  490.635741][T17892] bridge0: port 1(ipvlan2) entered blocking state
[  490.643736][T17892] bridge0: port 1(ipvlan2) entered disabled state
[  490.652392][T17892] ipvlan2: entered allmulticast mode
[  490.658224][T17892] bridge0: entered allmulticast mode
[  490.667196][T17892] ipvlan2: left allmulticast mode
[  490.675009][T17892] bridge0: left allmulticast mode
[  490.710894][T17869] lo speed is unknown, defaulting to 1000
[  490.715124][T17870] lo speed is unknown, defaulting to 1000
[  491.788436][T17920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3076'.
[  491.952463][ T5158] Bluetooth: hci1: command tx timeout
[  492.684960][ T7245] bond1 (unregistering): Released all slaves
[  492.843787][ T7245] bond2 (unregistering): Released all slaves
[  492.988390][ T7245] bond3 (unregistering): Released all slaves
[  493.142489][ T7245] bond4 (unregistering): Released all slaves
[  493.173893][ T7245] bond0 (unregistering): Released all slaves
[  493.192758][ T7245] bond5 (unregistering): Released all slaves
[  493.210158][T17870] lo speed is unknown, defaulting to 1000
[  493.251409][T17936] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.269944][T17937] syzkaller0: entered promiscuous mode
[  493.276127][T17937] syzkaller0: entered allmulticast mode
[  493.598022][ T7245] tipc: Left network mode
[  493.984647][T17954] netlink: 'syz.2.3084': attribute type 1 has an invalid length.
[  494.030135][ T5158] Bluetooth: hci1: command tx timeout
[  494.107601][T17962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.226931][T17961] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3087'.
[  494.377287][T17870] chnl_net:caif_netlink_parms(): no params data found
[  495.487470][T17870] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.511163][T17870] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.530731][T17870] bridge_slave_0: entered allmulticast mode
[  495.553418][T17870] bridge_slave_0: entered promiscuous mode
[  495.580788][ T7245] batman_adv: batadv0: Removing interface: ipvlan0
[  495.621840][ T7245] hsr_slave_0: left promiscuous mode
[  496.119635][ T5158] Bluetooth: hci1: command tx timeout
[  496.298768][T17973] lo speed is unknown, defaulting to 1000
[  496.307118][T17870] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.326856][T17870] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.347511][T17870] bridge_slave_1: entered allmulticast mode
[  496.356495][T17870] bridge_slave_1: entered promiscuous mode
[  496.398164][T17563] lo speed is unknown, defaulting to 1000
[  496.419685][T17563] syz0: Port: 1 Link DOWN
[  496.427854][T17549] IPVS: starting estimator thread 0...
[  496.453485][T17563] lo speed is unknown, defaulting to 1000
[  496.519603][T18005] IPVS: using max 26 ests per chain, 62400 per kthread
[  496.561714][T17870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.603406][T17870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.783975][T17870] team0: Port device team_slave_0 added
[  496.793441][T17870] team0: Port device team_slave_1 added
[  496.918061][T17973] lo speed is unknown, defaulting to 1000
[  496.920071][T17870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.929656][   T36] smc: removing ib device syz0
[  496.938652][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.968738][T17870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.981283][T18016] syzkaller1: entered promiscuous mode
[  496.987108][T18016] syzkaller1: entered allmulticast mode
[  497.003285][T17870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.011291][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.042571][T17870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.128515][T18016] netlink: 'syz.3.3099': attribute type 21 has an invalid length.
[  497.164825][T18016] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3099'.
[  497.195785][T18016] netlink: 'syz.3.3099': attribute type 4 has an invalid length.
[  497.222421][T18016] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3099'.
[  497.478525][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3104'.
[  497.720436][T17870] hsr_slave_0: entered promiscuous mode
[  497.727806][T17870] hsr_slave_1: entered promiscuous mode
[  497.748407][T18032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3103'.
[  497.882565][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'.
[  498.095199][T18034] tun0: tun_chr_ioctl cmd 2147767520
[  498.199416][ T5158] Bluetooth: hci1: command tx timeout
[  499.210077][T18060] netlink: 'syz.2.3109': attribute type 10 has an invalid length.
[  499.220273][T18057] lo speed is unknown, defaulting to 1000
[  499.412135][T18060] team0: Port device netdevsim0 added
[  499.846877][ T7245] IPVS: stop unused estimator thread 0...
[  500.232300][T18076] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3113'.
[  500.245625][T18076] netlink: 'syz.3.3113': attribute type 1 has an invalid length.
[  500.277007][T18079] netlink: 'syz.1.3115': attribute type 3 has an invalid length.
[  500.591528][T18079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.603830][T18079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.615327][T18079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  500.843049][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3117'.
[  500.880440][T18079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.891502][T18079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.904356][T18079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  501.050742][T18090] bridge_slave_1: left allmulticast mode
[  501.056920][T18090] bridge_slave_1: left promiscuous mode
[  501.063403][T18090] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.078185][T18090] bridge_slave_0: left allmulticast mode
[  501.085006][T18090] bridge_slave_0: left promiscuous mode
[  501.095377][T18090] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.323337][T18079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.358823][T18079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.370927][T18079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  501.434948][T18096] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  501.565880][T18079] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.592024][T18079] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.625386][T18079] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  501.723368][T17870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  501.758992][T17870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  501.802996][T17870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  501.846743][T17870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  501.864108][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3126'.
[  501.875732][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'.
[  501.886012][T18115] netlink: 'syz.0.3126': attribute type 14 has an invalid length.
[  501.892300][T18119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3128'.
[  501.894412][T18115] netlink: 'syz.0.3126': attribute type 13 has an invalid length.
[  501.935480][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  501.959636][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  501.968681][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  502.051195][T18126] lo speed is unknown, defaulting to 1000
[  502.155279][ T7245] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  502.169875][ T7245] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  502.181478][ T7245] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  502.194575][ T7245] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  502.207084][ T7245] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  502.221327][ T7245] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  502.357846][ T7245] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  502.379694][ T7245] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  502.398239][ T7245] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  502.420973][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'.
[  502.521019][T18144] netlink: 'syz.3.3134': attribute type 12 has an invalid length.
[  502.554141][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'.
[  502.580896][T18144] bond0: option primary_reselect: invalid value (4)
[  502.692965][T17870] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.729079][T17870] 8021q: adding VLAN 0 to HW filter on device team0
[  502.744592][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.752284][ T6469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.761172][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'.
[  503.077063][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.084790][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.750275][T18205] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3148'.
[  503.800760][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'.
[  503.842313][T18190] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  503.854069][T18190] team0: Device ipvlan3 is already an upper device of the team interface
[  503.918312][T18211] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  504.098706][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.119712][T18210] lo speed is unknown, defaulting to 1000
[  504.681821][T18232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3153'.
[  505.114445][T18244] lo speed is unknown, defaulting to 1000
[  505.197051][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'.
[  505.310013][ T7245] wlan0: Trigger new scan to find an IBSS to join
[  505.324638][T18251] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3157'.
[  505.470160][T17870] veth0_vlan: entered promiscuous mode
[  505.827809][T17870] veth1_vlan: entered promiscuous mode
[  506.005110][T17870] veth0_macvtap: entered promiscuous mode
[  506.063924][T17870] veth1_macvtap: entered promiscuous mode
[  506.073908][T18280] netlink: 'syz.3.3166': attribute type 17 has an invalid length.
[  506.171880][T18280] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3166'.
[  506.216368][T18280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  506.280691][T17870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.319091][T17870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.370965][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.400489][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.463758][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.482415][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.580364][T18293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  506.611700][T18293] syzkaller0: entered promiscuous mode
[  506.631177][T18293] syzkaller0: entered allmulticast mode
[  506.698577][T18306] netlink: 'syz.1.3171': attribute type 21 has an invalid length.
[  506.722440][T18309] netlink: 'syz.3.3173': attribute type 2 has an invalid length.
[  506.734328][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'.
[  506.755363][T18292] tipc: Resetting bearer <eth:syzkaller0>
[  506.782023][T18292] tipc: Disabling bearer <eth:syzkaller0>
[  506.806910][ T7245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.817844][ T7245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.928734][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.957766][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.999789][T18318] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20000
[  507.206263][T18328] batman_adv: batadv0: Adding interface: gretap3
[  507.214169][T18328] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.248268][T18328] batman_adv: batadv0: Interface activated: gretap3
[  507.444831][T18325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.458028][T18325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.475167][T18325] bond0 (unregistering): Released all slaves
[  507.677824][   T30] audit: type=1800 audit(1754590527.865:13): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3183" name="memory.events" dev="tmpfs" ino=455 res=0 errno=0
[  507.766586][   T30] audit: type=1804 audit(1754590527.865:14): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3183" name="/newroot/85/memory.events" dev="tmpfs" ino=455 res=1 errno=0
[  508.197378][T18360] netlink: 'syz.4.3188': attribute type 10 has an invalid length.
[  508.242829][T18360] team0: Device ipvlan1 failed to register rx_handler
[  508.360236][ T3476] wlan0: Trigger new scan to find an IBSS to join
[  508.612461][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  508.628370][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  508.637217][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  508.652053][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  508.671469][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  508.695518][T18380] 8021q: VLANs not supported on gre0
[  508.703338][T18380] __nla_validate_parse: 4 callbacks suppressed
[  508.703363][T18380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3192'.
[  508.756681][T18375] lo speed is unknown, defaulting to 1000
[  508.883355][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'.
[  509.127865][T18375] chnl_net:caif_netlink_parms(): no params data found
[  509.194529][T18396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3197'.
[  509.263866][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.354472][T18409] netlink: 'syz.0.3201': attribute type 1 has an invalid length.
[  509.402568][T18409] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3201'.
[  509.446148][T18375] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.467937][T18375] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.476935][T18375] bridge_slave_0: entered allmulticast mode
[  509.485425][T18375] bridge_slave_0: entered promiscuous mode
[  509.505169][T18375] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.513319][T18375] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.522630][T18375] bridge_slave_1: entered allmulticast mode
[  509.541062][T18375] bridge_slave_1: entered promiscuous mode
[  509.541729][T18409] netlink: 'syz.0.3201': attribute type 1 has an invalid length.
[  509.693011][T18375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.734332][T18375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.932131][T18375] team0: Port device team_slave_0 added
[  510.053351][T18433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.093177][T18375] team0: Port device team_slave_1 added
[  510.285591][T18375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.309123][T18375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.409361][T18375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.439002][T18375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.459662][T18375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.508166][T18447] netlink: 'syz.2.3208': attribute type 1 has an invalid length.
[  510.519762][T18375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.750377][   T51] Bluetooth: hci2: command tx timeout
[  510.805023][T18375] hsr_slave_0: entered promiscuous mode
[  510.831166][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'.
[  510.831415][T18375] hsr_slave_1: entered promiscuous mode
[  510.852762][T18461] netlink: 'syz.0.3212': attribute type 10 has an invalid length.
[  510.862300][T18375] debugfs: 'hsr0' already exists in 'hsr'
[  510.868210][T18375] Cannot create hsr debugfs directory
[  510.966601][T18461] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  511.256043][T18478] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3215'.
[  511.445974][T18375] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.545531][T18375] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.648151][T18375] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.702331][T18491] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  511.725753][T18491] netlink: 'syz.1.3219': attribute type 1 has an invalid length.
[  511.740377][T18375] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.740934][T18491] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3219'.
[  511.766118][T18491] netlink: 97 bytes leftover after parsing attributes in process `syz.1.3219'.
[  511.838581][T18488] lo speed is unknown, defaulting to 1000
[  512.149865][T18498] veth0: entered promiscuous mode
[  512.158358][T18497] veth0: left promiscuous mode
[  512.221075][T18375] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  512.294259][T18375] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  512.326169][T18500] netlink: 'syz.1.3222': attribute type 1 has an invalid length.
[  512.334678][T18508] netlink: 'syz.2.3225': attribute type 3 has an invalid length.
[  512.388475][T18500] bond5: entered promiscuous mode
[  512.463454][T18500] 8021q: adding VLAN 0 to HW filter on device bond5
[  512.512146][T18375] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  512.628209][T18511] bond5: (slave bridge8): making interface the new active one
[  512.645770][T18511] bridge8: entered promiscuous mode
[  512.722833][T18511] bond5: (slave bridge8): Enslaving as an active interface with an up link
[  512.735352][T18375] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  512.828762][T18524] tipc: Can't bind to reserved service type 1
[  512.839593][   T51] Bluetooth: hci2: command tx timeout
[  512.993681][T18521] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  513.220434][T18536] netlink: 'syz.4.3229': attribute type 30 has an invalid length.
[  513.248129][T18375] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.347952][T18535] lo speed is unknown, defaulting to 1000
[  513.354957][T18375] 8021q: adding VLAN 0 to HW filter on device team0
[  513.380089][T18543] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3230'.
[  513.399194][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.407198][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.446327][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.454466][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.535343][T18544] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3231'.
[  513.733852][T18547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3232'.
[  513.744983][T18547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3232'.
[  513.976097][T18554] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  514.264495][T18568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  514.422856][T18571] lo speed is unknown, defaulting to 1000
[  514.523328][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3239'.
[  514.577202][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'.
[  514.630496][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'.
[  514.758971][T18586] veth1_macvtap: left promiscuous mode
[  514.910292][   T51] Bluetooth: hci2: command tx timeout
[  514.982037][T18570] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3237'.
[  515.287253][T18375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.325199][T18570] lo speed is unknown, defaulting to 1000
[  515.474199][T18614] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3245'.
[  515.684741][T18615] veth1: mtu less than device minimum
[  515.778749][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'.
[  515.827438][T18621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3248'.
[  515.858901][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3248'.
[  516.013286][T18375] veth0_vlan: entered promiscuous mode
[  516.053052][T18375] veth1_vlan: entered promiscuous mode
[  516.226337][T18640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  516.305467][T18375] veth0_macvtap: entered promiscuous mode
[  516.322590][T18375] veth1_macvtap: entered promiscuous mode
[  516.365255][T18375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.404861][T18375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.453267][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.491825][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.510773][T18648] batadv_slave_1: entered promiscuous mode
[  516.536377][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.550081][T18643] batadv_slave_1: left promiscuous mode
[  516.563703][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.793177][ T6469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.849378][ T6469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.959116][ T7245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.967487][ T7245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.990928][   T51] Bluetooth: hci2: command tx timeout
[  517.410769][T17559] IPVS: starting estimator thread 0...
[  517.432923][T18688] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  517.509892][T18695] IPVS: using max 27 ests per chain, 64800 per kthread
[  518.009671][T18713] veth0: entered promiscuous mode
[  518.327820][T18717] netlink: 'syz.4.3277': attribute type 1 has an invalid length.
[  518.502933][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  518.515694][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  518.525943][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  518.537518][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  518.546969][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  518.552786][   T12] batman_adv: batadv0: Interface deactivated: gretap3
[  519.088902][   T12] batman_adv: batadv0: Removing interface: gretap3
[  519.553755][   T12] bond1 (unregistering): (slave bridge4): Releasing active interface
[  519.746375][   T12] bond0 (unregistering): Released all slaves
[  519.915680][   T12] bond1 (unregistering): Released all slaves
[  519.935092][   T12] bond2 (unregistering): Released all slaves
[  519.953728][   T12] bond3 (unregistering): Released all slaves
[  519.973624][   T12] bond4 (unregistering): Released all slaves
[  520.002617][   T12] bond5 (unregistering): Released all slaves
[  520.021934][   T12] bond6 (unregistering): Released all slaves
[  520.037943][   T12] bond7 (unregistering): Released all slaves
[  520.064392][T18741] veth1_to_team: entered allmulticast mode
[  520.179529][T18766] bridge: RTM_NEWNEIGH with invalid ether address
[  520.296805][T18732] lo speed is unknown, defaulting to 1000
[  520.311070][   T12] _ÐZ`Ô€@: left promiscuous mode
[  520.398842][T18774] __nla_validate_parse: 7 callbacks suppressed
[  520.398934][T18774] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3291'.
[  520.421324][T18777] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3290'.
[  520.450438][   T12] k›*·]‘: left promiscuous mode
[  520.554906][   T12] : left promiscuous mode
[  520.650443][   T12] þ
: left promiscuous mode
[  520.684204][   T51] Bluetooth: hci0: command tx timeout
[  520.725368][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  520.753805][   T12] tipc: Left network mode
[  520.863985][T18791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3297'.
[  520.930910][T18793] sctp: [Deprecated]: syz.2.3298 (pid 18793) Use of struct sctp_assoc_value in delayed_ack socket option.
[  520.930910][T18793] Use struct sctp_sack_info instead
[  521.264760][T18732] chnl_net:caif_netlink_parms(): no params data found
[  521.477890][T18815] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3304'.
[  521.646546][T18827] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3305'.
[  521.706796][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'.
[  521.718228][T18826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3307'.
[  521.728745][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'.
[  521.739590][T18826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3307'.
[  521.749468][T18826] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3307'.
[  521.908467][T18732] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.923048][T18732] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.934213][T18732] bridge_slave_0: entered allmulticast mode
[  521.943967][T18732] bridge_slave_0: entered promiscuous mode
[  521.956776][T18832] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  522.038103][T18732] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.086635][T18732] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.103082][T18732] bridge_slave_1: entered allmulticast mode
[  522.127767][T18732] bridge_slave_1: entered promiscuous mode
[  522.137452][T18847] netlink: 'syz.3.3312': attribute type 7 has an invalid length.
[  522.345203][T18862] syz.3.3315 uses old SIOCAX25GETINFO
[  522.391820][T18732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.403879][T18867] netlink: 'syz.4.3317': attribute type 1 has an invalid length.
[  522.435276][T18732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.502846][T18862] tipc: Started in network mode
[  522.515307][T18862] tipc: Node identity d65a65bd146c, cluster identity 4711
[  522.530751][T18862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  522.648583][T18874] syzkaller0: entered promiscuous mode
[  522.655048][T18874] syzkaller0: entered allmulticast mode
[  522.676587][T18862] tipc: Resetting bearer <eth:syzkaller0>
[  522.718028][T18732] team0: Port device team_slave_0 added
[  522.728609][T18732] team0: Port device team_slave_1 added
[  522.752049][   T51] Bluetooth: hci0: command tx timeout
[  522.784649][T18861] tipc: Resetting bearer <eth:syzkaller0>
[  522.840086][T18861] tipc: Disabling bearer <eth:syzkaller0>
[  522.900260][T18732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.929432][T18732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.974455][T18732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.204682][T18732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.218012][T18732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.253183][T18732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.381466][T18900] netlink: 'syz.0.3323': attribute type 11 has an invalid length.
[  523.954570][T18900] netlink: 'syz.0.3323': attribute type 1 has an invalid length.
[  524.005558][T18732] hsr_slave_0: entered promiscuous mode
[  524.024486][T18732] hsr_slave_1: entered promiscuous mode
[  524.040047][T18732] debugfs: 'hsr0' already exists in 'hsr'
[  524.048189][T18732] Cannot create hsr debugfs directory
[  524.242722][T18923] netlink: zone id is out of range
[  524.248744][T18923] netlink: zone id is out of range
[  524.255229][T18923] netlink: zone id is out of range
[  524.274357][T18923] netlink: zone id is out of range
[  524.316020][T18923] netlink: zone id is out of range
[  524.341273][T18923] netlink: zone id is out of range
[  524.353625][T18923] netlink: zone id is out of range
[  524.366908][T18923] netlink: zone id is out of range
[  524.417578][T18923] netlink: zone id is out of range
[  524.425945][T18923] netlink: zone id is out of range
[  524.807958][   T12] hsr_slave_0: left promiscuous mode
[  524.839725][   T51] Bluetooth: hci0: command tx timeout
[  524.849476][   T12] hsr_slave_1: left promiscuous mode
[  524.973072][   T12] pim6reg (unregistering): left allmulticast mode
[  526.076780][T18938] syzkaller1: entered promiscuous mode
[  526.083212][T18938] syzkaller1: entered allmulticast mode
[  526.098582][T18947] bridge_slave_0: left allmulticast mode
[  526.105124][T18947] bridge_slave_0: left promiscuous mode
[  526.121027][T18947] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.145394][T18947] bridge_slave_1: left allmulticast mode
[  526.153300][T18947] bridge_slave_1: left promiscuous mode
[  526.159650][T18947] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.178459][T18947] team0: Port device team_slave_0 removed
[  526.193181][T18947] team0: Port device team_slave_1 removed
[  526.200385][T18947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.207837][T18947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.218310][T18947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.226114][T18947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.372511][T18968] __nla_validate_parse: 14 callbacks suppressed
[  526.372532][T18968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3340'.
[  526.773036][T18732] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.798727][T18732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  526.825258][T18732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  526.853062][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'.
[  526.909496][   T51] Bluetooth: hci0: command tx timeout
[  526.929855][T18988] netlink: 'syz.0.3345': attribute type 1 has an invalid length.
[  526.975920][T18988] netlink: 'syz.0.3345': attribute type 1 has an invalid length.
[  526.997482][   T12] IPVS: stop unused estimator thread 0...
[  527.007549][T18732] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.053391][T18732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  527.080779][T18732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  527.156046][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'.
[  527.192270][T18994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'.
[  527.240954][T18732] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.257462][T18732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  527.269467][T18732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  527.380641][T18732] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.411782][T18732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  527.435586][T18732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  527.710667][T19008] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  528.008732][T18732] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  528.065765][T18732] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  528.150047][T18732] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  528.203715][T18732] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  528.262374][T19026] syzkaller0: entered promiscuous mode
[  528.270611][T19032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3357'.
[  528.289601][T19026] syzkaller0: entered allmulticast mode
[  528.685789][T18732] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.722975][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.741340][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.777538][T18732] 8021q: adding VLAN 0 to HW filter on device team0
[  528.811459][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.819111][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.927198][  T801] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.935016][  T801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.512584][T19057] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3362'.
[  529.538899][T18732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.878671][T18732] veth0_vlan: entered promiscuous mode
[  529.989833][T18732] veth1_vlan: entered promiscuous mode
[  530.127166][T18732] veth0_macvtap: entered promiscuous mode
[  530.149099][T18732] veth1_macvtap: entered promiscuous mode
[  530.255759][T18732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  530.301086][T18732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.371345][  T801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.427510][  T801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.469989][  T801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.514194][  T801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.608013][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3369'.
[  530.686652][T19083] lo speed is unknown, defaulting to 1000
[  530.890505][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.898920][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.164804][ T6469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.198900][ T6469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.245471][T19094] pimreg: entered allmulticast mode
[  531.430462][T19099] tipc: Started in network mode
[  531.444863][T19099] tipc: Node identity 420e524099fd, cluster identity 4711
[  531.487651][T19099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.520285][T19101] syzkaller0: entered promiscuous mode
[  531.526502][T19101] syzkaller0: entered allmulticast mode
[  531.603459][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'.
[  531.632397][T19098] tipc: Resetting bearer <eth:syzkaller0>
[  531.754024][T19098] tipc: Disabling bearer <eth:syzkaller0>
[  531.929398][T19108] veth0_virt_wifi: renamed from veth0_macvtap
[  532.287683][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3378'.
[  532.368324][T19137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3378'.
[  532.470840][T19111] net_ratelimit: 29 callbacks suppressed
[  532.470861][T19111] syzkaller0: mtu greater than device maximum
[  532.525436][T19127] batadv_slave_0: entered promiscuous mode
[  532.596440][T19134] batadv_slave_0 (unregistering): left promiscuous mode
[  532.720112][T19115] syzkaller0: entered promiscuous mode
[  532.726016][T19115] syzkaller0: entered allmulticast mode
[  532.893012][T19143] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3379'.
[  533.330234][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'.
[  533.408446][T19155] netlink: 'syz.4.3383': attribute type 1 has an invalid length.
[  533.438553][T19155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3383'.
[  533.467602][T19158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  533.575790][T19153] lo speed is unknown, defaulting to 1000
[  534.062982][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  534.250747][T19180] syzkaller1: tun_chr_ioctl cmd 1074025677
[  534.257493][T19180] syzkaller1: linktype set to 778
[  534.291810][T19181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.456431][T19182] syzkaller0: entered promiscuous mode
[  534.465824][T19182] syzkaller0: entered allmulticast mode
[  534.475759][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'.
[  534.538985][T19189] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  534.616439][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'.
[  534.720228][T19182] tipc: Resetting bearer <eth:syzkaller0>
[  534.783255][T19182] tipc: Disabling bearer <eth:syzkaller0>
[  535.042847][T19206] netlink: 'syz.4.3394': attribute type 1 has an invalid length.
[  536.048613][T19225] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3398'.
[  536.057360][T19226] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  536.839103][T19256] pimreg: entered allmulticast mode
[  536.857665][T19250] tap0: tun_chr_ioctl cmd 1074812118
[  536.989414][ T5158] Bluetooth: hci0: command 0x0405 tx timeout
[  537.029664][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'.
[  537.285048][T19267] pim6reg0: tun_chr_ioctl cmd 1074025677
[  537.297053][T19267] pim6reg0: linktype set to 768
[  537.330716][T19267] netlink: 'syz.0.3408': attribute type 1 has an invalid length.
[  537.352951][T19267] netlink: 'syz.0.3408': attribute type 1 has an invalid length.
[  537.407783][T19267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3408'.
[  537.632463][T19276] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3410'.
[  537.887253][T19285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.910650][T19286] syzkaller0: entered promiscuous mode
[  537.917413][T19286] syzkaller0: entered allmulticast mode
[  538.011451][T19286] tipc: Resetting bearer <eth:syzkaller0>
[  538.038716][T19286] tipc: Disabling bearer <eth:syzkaller0>
[  538.063665][T19291] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  538.644210][T19314] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3417'.
[  539.107725][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'.
[  539.325648][T19339] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3423'.
[  539.335530][T19339] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3423'.
[  539.768891][T19358] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  539.838663][T19364] macsec1: entered promiscuous mode
[  540.498880][T19359] bond0: (slave bond_slave_1): Releasing backup interface
[  540.590707][T19365] lo speed is unknown, defaulting to 1000
[  540.683124][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3433'.
[  540.725306][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3433'.
[  540.779422][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'.
[  540.788829][T19387] netlink: 'syz.2.3433': attribute type 4 has an invalid length.
[  542.148892][T19432] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  542.315421][T19438] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  542.641464][T19436] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  542.751842][T19448] netlink: 'syz.2.3447': attribute type 1 has an invalid length.
[  542.837613][T19449] __nla_validate_parse: 2 callbacks suppressed
[  542.837635][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'.
[  543.166260][T19460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.253917][T19463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3449'.
[  544.164960][T19489] smc: net device bond0 applied user defined pnetid SYZ2
[  544.210221][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'.
[  544.214395][T19489] smc: net device bond0 erased user defined pnetid SYZ2
[  544.926695][T19501] syzkaller0: entered promiscuous mode
[  544.981144][T19517] netlink: 'syz.4.3462': attribute type 1 has an invalid length.
[  544.999330][T19501] syzkaller0: entered allmulticast mode
[  545.018146][T19519] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3463'.
[  545.029768][T19519] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3463'.
[  545.273190][T19512] syzkaller0: entered promiscuous mode
[  545.310968][T19512] syzkaller0: entered allmulticast mode
[  547.630074][T19529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3464'.
[  549.506253][T19522] veth5: entered promiscuous mode
[  549.704291][T19542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3467'.
[  552.658455][T19523] netlink: 'syz.4.3462': attribute type 3 has an invalid length.
[  552.667192][T19523] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3462'.
[  552.842402][T19565] veth1_to_bond: entered allmulticast mode
[  552.842996][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3472'.
[  553.000187][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'.
[  553.212814][T19577] netlink: 'syz.4.3478': attribute type 12 has an invalid length.
[  553.324365][T19564] veth1_to_bond: left allmulticast mode
[  553.476647][T19593] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  553.539753][T19599] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  554.532203][T19620] bond0: (slave bond_slave_1): Releasing backup interface
[  555.243542][T19656] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3495'.
[  555.261979][T19658] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3496'.
[  555.279809][T19656] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3495'.
[  555.528406][T19668] macvlan1: mtu less than device minimum
[  555.747562][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'.
[  556.048103][T19687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3505'.
[  556.058960][T19688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3505'.
[  556.171041][T19692] bridge_slave_0: left allmulticast mode
[  556.177437][T19692] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.208935][T19692] bridge_slave_1: left allmulticast mode
[  556.245248][T19692] bridge_slave_1: left promiscuous mode
[  556.258748][T19692] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.288405][T19692] bond0: (slave bond_slave_0): Releasing backup interface
[  556.311578][T19696] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3508'.
[  556.350728][T19692] bond0: (slave bond_slave_1): Releasing backup interface
[  556.402486][T19692] team0: Port device team_slave_0 removed
[  556.469502][T19692] team0: Port device team_slave_1 removed
[  556.495719][T19692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  556.516357][T19692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  556.537130][T19692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  556.554932][T19692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.630405][T19692] team0: Port device netdevsim0 removed
[  557.218144][T19696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  557.241715][T19696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  557.262165][T19696] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  557.308655][T19696] bond0 (unregistering): Released all slaves
[  557.635726][T19729] netlink: 'syz.2.3517': attribute type 1 has an invalid length.
[  557.748610][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3518'.
[  557.808423][T19729] 8021q: adding VLAN 0 to HW filter on device bond1
[  557.903923][T19747] FAULT_INJECTION: forcing a failure.
[  557.903923][T19747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  557.936033][T19747] CPU: 1 UID: 0 PID: 19747 Comm: syz.3.3520 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  557.936069][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  557.936084][T19747] Call Trace:
[  557.936093][T19747]  <TASK>
[  557.936103][T19747]  dump_stack_lvl+0x189/0x250
[  557.936133][T19747]  ? __pfx____ratelimit+0x10/0x10
[  557.936165][T19747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  557.936363][T19747]  ? __pfx__printk+0x10/0x10
[  557.936397][T19747]  ? __might_fault+0xb0/0x130
[  557.936443][T19747]  should_fail_ex+0x414/0x560
[  557.936484][T19747]  _copy_from_user+0x2d/0xb0
[  557.936516][T19747]  ___sys_recvmsg+0x12e/0x510
[  557.936547][T19747]  ? __pfx____sys_recvmsg+0x10/0x10
[  557.936600][T19747]  ? __fget_files+0x3a0/0x420
[  557.936635][T19747]  do_recvmmsg+0x307/0x770
[  557.936669][T19747]  ? __pfx_do_recvmmsg+0x10/0x10
[  557.936706][T19747]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  557.936758][T19747]  __x64_sys_recvmmsg+0x190/0x240
[  557.936798][T19747]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  557.936819][T19747]  ? rcu_is_watching+0x15/0xb0
[  557.936859][T19747]  ? do_syscall_64+0xbe/0x3b0
[  557.936895][T19747]  do_syscall_64+0xfa/0x3b0
[  557.936925][T19747]  ? lockdep_hardirqs_on+0x9c/0x150
[  557.936955][T19747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.936976][T19747]  ? clear_bhb_loop+0x60/0xb0
[  557.937002][T19747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.937024][T19747] RIP: 0033:0x7fec56d8ebe9
[  557.937045][T19747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  557.937064][T19747] RSP: 002b:00007fec57c78038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  557.937089][T19747] RAX: ffffffffffffffda RBX: 00007fec56fb6180 RCX: 00007fec56d8ebe9
[  557.937105][T19747] RDX: 0000000000000f00 RSI: 0000200000003300 RDI: 0000000000000005
[  557.937119][T19747] RBP: 00007fec57c78090 R08: 0000000000000000 R09: 0000000000000000
[  557.937132][T19747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.937145][T19747] R13: 00007fec56fb6218 R14: 00007fec56fb6180 R15: 00007ffc2c327578
[  557.937180][T19747]  </TASK>
[  558.357339][T19756] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3524'.
[  558.454037][T19757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3523'.
[  558.797070][T19764] tipc: Started in network mode
[  558.828620][T19764] tipc: Node identity ba928c3e69f4, cluster identity 4711
[  558.855134][T19764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  558.880250][T19762] syzkaller0: entered promiscuous mode
[  558.894302][T19762] syzkaller0: entered allmulticast mode
[  559.029539][T19764] tipc: Resetting bearer <eth:syzkaller0>
[  559.081117][T19764] tipc: Disabling bearer <eth:syzkaller0>
[  559.397203][T19787] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  559.778139][T19808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.047836][  T801] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  560.078407][  T801] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  560.119764][  T801] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  560.165717][  T801] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  560.795662][T19847] __nla_validate_parse: 14 callbacks suppressed
[  560.795951][T19847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3546'.
[  561.897992][T19872] netlink: 'syz.4.3555': attribute type 1 has an invalid length.
[  561.925943][T19874] netlink: 'syz.1.3556': attribute type 3 has an invalid length.
[  561.968850][T19877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3555'.
[  562.096622][T19872] 8021q: adding VLAN 0 to HW filter on device bond2
[  562.144655][T19872] veth5: entered promiscuous mode
[  563.083351][T19924] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  563.125981][T19925] netlink: 'syz.2.3570': attribute type 1 has an invalid length.
[  563.166632][T19925] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  564.308666][T19951] siw: device registration error -23
[  564.381417][T19950] siw: device registration error -23
[  565.011591][T19991] lo speed is unknown, defaulting to 1000
[  566.335737][T20026] netlink: 'syz.1.3598': attribute type 10 has an invalid length.
[  566.406124][T20026] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  566.486604][T20033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3598'.
[  566.548196][T20026] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3598'.
[  566.624962][T20040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.771849][T20026] netlink: 'syz.1.3598': attribute type 12 has an invalid length.
[  566.790669][T20026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3598'.
[  567.172690][T20058] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  567.181958][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3604'.
[  567.452830][T20068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3607'.
[  567.565379][T20072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3608'.
[  567.713403][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3610'.
[  567.828291][T20081] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  567.860473][T20082] syzkaller1: entered promiscuous mode
[  567.898691][T20082] syzkaller1: entered allmulticast mode
[  568.067173][T20082] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  568.086646][T20089] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  568.351904][T20108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3617'.
[  568.448142][T20114] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  568.551609][T20111] lo speed is unknown, defaulting to 1000
[  568.890365][T20131] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3624'.
[  569.422994][T20143] IPv6: Can't replace route, no match found
[  569.688458][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'.
[  569.707750][T20140] lo speed is unknown, defaulting to 1000
[  569.800062][T20151] netlink: 'syz.0.3628': attribute type 11 has an invalid length.
[  569.836733][T20139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.135798][T20166] netlink: 'syz.0.3632': attribute type 13 has an invalid length.
[  570.694127][T20184] netlink: 'syz.1.3637': attribute type 13 has an invalid length.
[  570.705552][T20184] netlink: 'syz.1.3637': attribute type 17 has an invalid length.
[  570.803722][T20184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  570.997464][T20199] netlink: 'syz.2.3641': attribute type 1 has an invalid length.
[  571.525844][T20221] __nla_validate_parse: 4 callbacks suppressed
[  571.525866][T20221] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3648'.
[  571.826685][T20232] team0: entered promiscuous mode
[  571.850723][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'.
[  571.860488][T20232] team_slave_0: entered promiscuous mode
[  571.866810][T20232] team_slave_1: entered promiscuous mode
[  572.034906][T20242] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3652'.
[  572.407453][T20233] team0 (unregistering): left promiscuous mode
[  572.417442][T20233] team_slave_0: left promiscuous mode
[  572.424216][T20233] team_slave_1: left promiscuous mode
[  572.439023][T20233] team0 (unregistering): Port device team_slave_0 removed
[  572.455186][T20233] team0 (unregistering): Port device team_slave_1 removed
[  572.544922][T20249] bpq0: left promiscuous mode
[  572.828049][T17558] IPVS: starting estimator thread 0...
[  572.929526][T20259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.942188][T20262] IPVS: using max 25 ests per chain, 60000 per kthread
[  572.952435][T20265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.054048][T20273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.102767][T20265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.315444][T20282] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  573.330074][T20282] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  574.616530][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3673'.
[  575.267168][T20313] lo speed is unknown, defaulting to 1000
[  575.276421][T20317] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  575.321766][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3676'.
[  575.375163][T20319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.655219][T20324] lo speed is unknown, defaulting to 1000
[  575.835042][T20338] netlink: 'syz.0.3680': attribute type 28 has an invalid length.
[  576.928159][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3691'.
[  577.008148][T20372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.226652][T20372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.316384][ T5158] Bluetooth: hci0: command tx timeout
[  577.393768][T20372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.481382][T20405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3693'.
[  577.682553][T20372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.830861][   T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.867799][   T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.936958][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.986330][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.107291][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3698'.
[  578.173231][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3698'.
[  578.182029][T20416] netlink: 'syz.0.3697': attribute type 14 has an invalid length.
[  578.528030][T20435] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.536300][T20435] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.918350][T20435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.946487][T20435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.314238][ T7241] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.333052][ T7241] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.360337][ T7241] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.395837][ T1339] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.455011][T20453] netlink: 'syz.3.3704': attribute type 1 has an invalid length.
[  579.980035][T20480] netlink: 'syz.1.3712': attribute type 1 has an invalid length.
[  579.994288][T20480] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  580.085522][T20479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  580.216351][T20486] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  580.395645][T20488] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3714'.
[  581.090835][T20504] lo speed is unknown, defaulting to 1000
[  581.255966][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'.
[  581.388581][T20516] netlink: 'syz.1.3722': attribute type 4 has an invalid length.
[  581.475626][T20515] geneve2: entered promiscuous mode
[  581.508792][T20515] geneve2: entered allmulticast mode
[  581.554494][T20522] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.3724'.
[  582.180729][T20542] netlink: 'syz.1.3728': attribute type 2 has an invalid length.
[  582.189606][T20542] netlink: 'syz.1.3728': attribute type 1 has an invalid length.
[  582.198520][T20542] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3728'.
[  582.268386][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'.
[  582.291109][T20504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3721'.
[  582.304049][T20544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3729'.
[  582.342479][T20504] netlink: 'syz.0.3721': attribute type 13 has an invalid length.
[  582.357872][T20504] netlink: 'syz.0.3721': attribute type 17 has an invalid length.
[  582.418149][T20504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  582.533625][T20550] lo speed is unknown, defaulting to 1000
[  583.091978][T20571] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3735'.
[  583.153870][T20572] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  584.058371][T20598] netlink: 'syz.1.3744': attribute type 2 has an invalid length.
[  584.068354][T20598] netlink: 'syz.1.3744': attribute type 1 has an invalid length.
[  584.581513][T20609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3747'.
[  584.828938][T20623] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3751'.
[  584.851269][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'.
[  585.756843][T20638] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  586.032855][T20644] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3758'.
[  586.095078][T20643] lo speed is unknown, defaulting to 1000
[  586.318978][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'.
[  587.385933][T20692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  587.433587][T20692] syzkaller0: entered promiscuous mode
[  587.439767][T20692] syzkaller0: entered allmulticast mode
[  587.502231][T20692] tipc: Resetting bearer <eth:syzkaller0>
[  587.872300][T20713] lo speed is unknown, defaulting to 1000
[  588.114301][T20682] tipc: Resetting bearer <eth:syzkaller0>
[  588.210366][T20682] tipc: Disabling bearer <eth:syzkaller0>
[  588.231595][T20719] __nla_validate_parse: 1 callbacks suppressed
[  588.231618][T20719] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3776'.
[  588.535829][T20727] netlink: 'syz.2.3778': attribute type 1 has an invalid length.
[  588.678410][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3778'.
[  588.679044][T20727] 8021q: adding VLAN 0 to HW filter on device bond2
[  588.900032][T20729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3778'.
[  588.971003][T20738] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  589.120726][T20731] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3778'.
[  589.479428][T20761] netlink: 'syz.3.3788': attribute type 1 has an invalid length.
[  589.683566][T20771] netlink: 'syz.4.3792': attribute type 2 has an invalid length.
[  589.692560][T20771] netlink: 'syz.4.3792': attribute type 1 has an invalid length.
[  589.700922][T20771] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3792'.
[  589.722101][T20771] nbd: couldn't find device at index 16
[  589.839424][T20771] netlink: 'syz.4.3792': attribute type 2 has an invalid length.
[  589.850497][T20771] netlink: 'syz.4.3792': attribute type 1 has an invalid length.
[  589.868787][T20771] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3792'.
[  589.882216][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'.
[  589.904401][T20771] nbd: couldn't find device at index 16
[  590.204712][T20773] lo speed is unknown, defaulting to 1000
[  590.631643][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3797'.
[  591.121455][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'.
[  591.147443][T20824] team0: Port device team_slave_0 removed
[  591.168066][T20824] team0: Port device team_slave_1 removed
[  591.372797][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3808'.
[  591.385645][T20845] netlink: 'syz.1.3808': attribute type 12 has an invalid length.
[  591.406585][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.416419][T20845] netlink: 'syz.1.3808': attribute type 12 has an invalid length.
[  591.424996][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.456258][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.490243][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  591.725867][T20855] lo speed is unknown, defaulting to 1000
[  592.269397][ T5158] Bluetooth: hci5: command 0x0405 tx timeout
[  592.354754][T20871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.363584][T20871] syzkaller0: entered promiscuous mode
[  592.370513][T20871] syzkaller0: entered allmulticast mode
[  592.424048][T20871] tipc: Resetting bearer <eth:syzkaller0>
[  592.516546][T20870] tipc: Resetting bearer <eth:syzkaller0>
[  592.603190][T20870] tipc: Disabling bearer <eth:syzkaller0>
[  593.061296][T20876] lo speed is unknown, defaulting to 1000
[  593.078893][T20888] erspan0: entered promiscuous mode
[  594.002942][T20913] __nla_validate_parse: 1 callbacks suppressed
[  594.002964][T20913] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3827'.
[  596.364900][T17556] IPVS: starting estimator thread 0...
[  596.460534][T20974] IPVS: using max 24 ests per chain, 57600 per kthread
[  596.707055][T20982] netlink: 'syz.4.3845': attribute type 1 has an invalid length.
[  596.754716][T20982] bond3: entered promiscuous mode
[  596.761005][T20982] 8021q: adding VLAN 0 to HW filter on device bond3
[  597.085535][T20991] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3846'.
[  597.152204][T20785] Bluetooth: hci3: command 0x0406 tx timeout
[  598.911854][T21023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3854'.
[  598.936029][T21024] macsec0: entered promiscuous mode
[  598.960362][T21024] macsec0: entered allmulticast mode
[  598.979387][T21024] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode
[  599.182744][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'.
[  599.210373][T21031] netlink: 'syz.3.3855': attribute type 1 has an invalid length.
[  599.239816][T21031] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3855'.
[  601.099494][T21088] netlink: 'syz.4.3871': attribute type 10 has an invalid length.
[  601.151202][T21089] netlink: 'syz.4.3871': attribute type 10 has an invalid length.
[  603.244984][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'.
[  603.747880][T21088] team0: Port device dummy0 added
[  603.796307][T21089] team0: Port device dummy0 removed
[  603.816083][T21094] dummy0: entered allmulticast mode
[  603.836111][T21092] dummy0: left allmulticast mode
[  603.960444][T21102] sctp: [Deprecated]: syz.0.3877 (pid 21102) Use of struct sctp_assoc_value in delayed_ack socket option.
[  603.960444][T21102] Use struct sctp_sack_info instead
[  603.971495][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  604.020699][T21103] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3876'.
[  605.183258][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'.
[  605.442238][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3889'.
[  605.926294][T21155] ip6gre0: entered promiscuous mode
[  605.951562][T21155] ip6gre0: entered allmulticast mode
[  606.365726][T21167] syzkaller0: entered promiscuous mode
[  606.380401][T21175] netlink: 'syz.3.3895': attribute type 16 has an invalid length.
[  606.397562][T21167] syzkaller0: entered allmulticast mode
[  606.410354][T21175] netlink: 'syz.3.3895': attribute type 17 has an invalid length.
[  606.477335][T21175] IPv6: NLM_F_REPLACE set, but no existing node found!
[  606.497766][T21172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3896'.
[  611.063906][ T3476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.175320][ T3476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.263305][ T3476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.336401][ T3476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.010896][ T3476] bond0 (unregistering): Released all slaves
[  612.181541][ T3476] bond1 (unregistering): Released all slaves
[  612.336897][ T3476] bond2 (unregistering): Released all slaves
[  612.452910][ T3476] tipc: Left network mode
[  612.626988][ T3476] hsr_slave_0: left promiscuous mode
[  612.633624][ T3476] hsr_slave_1: left promiscuous mode
[  612.660352][ T3476] veth1_macvtap: left promiscuous mode
[  612.666795][ T3476] veth0_macvtap: left promiscuous mode
[  612.786587][ T3476] pimreg (unregistering): left allmulticast mode
[  613.737883][ T5939] infiniband syz1: ib_query_port failed (-19)
[  613.965486][ T3476] IPVS: stop unused estimator thread 0...
[  614.019949][ T7241] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  614.031786][ T7241] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.098093][ T7241] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  614.108576][ T7241] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.155569][ T7241] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  614.166487][ T7241] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.225362][ T7241] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  614.236503][ T7241] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.336931][ T7241] bridge_slave_1: left allmulticast mode
[  614.343409][ T7241] bridge_slave_1: left promiscuous mode
[  614.352561][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.364498][ T7241] bridge_slave_0: left allmulticast mode
[  614.372331][ T7241] bridge_slave_0: left promiscuous mode
[  614.378678][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.911231][ T7241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  614.925163][ T7241] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  614.939921][ T7241] bond0 (unregistering): Released all slaves
[  615.017654][ T7241] tipc: Left network mode
[  615.170080][ T7241] hsr_slave_0: left promiscuous mode
[  615.176955][ T7241] hsr_slave_1: left promiscuous mode
[  615.184357][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.192710][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.202089][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.210374][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.233084][ T7241] veth1_macvtap: left promiscuous mode
[  615.238931][ T7241] veth0_macvtap: left promiscuous mode
[  615.245546][ T7241] veth1_vlan: left promiscuous mode
[  615.251533][ T7241] veth0_vlan: left promiscuous mode
[  615.292559][ T7241] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  615.304956][ T7241] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  615.315040][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  615.327763][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  615.338208][ T7241] Workqueue: netns cleanup_net
[  615.343108][ T7241] RIP: 0010:ip6_mc_clear_src+0x18f/0x580
[  615.348854][ T7241] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c
[  615.369195][ T7241] RSP: 0018:ffffc9000b117098 EFLAGS: 00010206
[  615.375731][ T7241] RAX: 000000001fffe000 RBX: 1ffff1100b00fd82 RCX: ffff88807b530000
[  615.384174][ T7241] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  615.392359][ T7241] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  615.400527][ T7241] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000
[  615.408699][ T7241] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805807ec10
[  615.416864][ T7241] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  615.426249][ T7241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  615.433443][ T7241] CR2: 00007fec57ae7d60 CR3: 000000000df38000 CR4: 00000000003526f0
[  615.442541][ T7241] Call Trace:
[  615.446019][ T7241]  <TASK>
[  615.449511][ T7241]  __ipv6_dev_mc_dec+0x2e4/0x330
[  615.454662][ T7241]  __ipv6_ifa_notify+0x43d/0xac0
[  615.459839][ T7241]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[  615.465755][ T7241]  ? __lock_acquire+0xab9/0xd20
[  615.470813][ T7241]  ? __local_bh_enable_ip+0x12d/0x1c0
[  615.477373][ T7241]  ? lockdep_hardirqs_on+0x9c/0x150
[  615.483221][ T7241]  ? __local_bh_enable_ip+0x12d/0x1c0
[  615.488910][ T7241]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  615.495277][ T7241]  addrconf_ifdown+0xe69/0x1880
[  615.500453][ T7241]  ? tls_dev_event+0x717/0xec0
[  615.505677][ T7241]  ? __pfx_addrconf_ifdown+0x10/0x10
[  615.511251][ T7241]  addrconf_notify+0x1bc/0x1010
[  615.516488][ T7241]  notifier_call_chain+0x1b3/0x3e0
[  615.521910][ T7241]  netif_close_many+0x29c/0x410
[  615.527072][ T7241]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  615.533233][ T7241]  ? __pfx_netif_close_many+0x10/0x10
[  615.538740][ T7241]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  615.544260][ T7241]  unregister_netdevice_many_notify+0x7b9/0x1ff0
[  615.550808][ T7241]  ? __local_bh_enable_ip+0x12d/0x1c0
[  615.556675][ T7241]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  615.562717][ T7241]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  615.569946][ T7241]  ? unregister_netdevice_queue+0x1b3/0x380
[  615.576384][ T7241]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  615.583136][ T7241]  ? batadv_meshif_destroy_netlink+0x1b0/0x250
[  615.589847][ T7241]  default_device_exit_batch+0x819/0x890
[  615.595600][ T7241]  ? __pfx___might_resched+0x10/0x10
[  615.600919][ T7241]  ? __pfx_default_device_exit_batch+0x10/0x10
[  615.607302][ T7241]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  615.613045][ T7241]  ? net_generic+0x1e/0x240
[  615.617836][ T7241]  ? __pfx_default_device_exit_batch+0x10/0x10
[  615.624549][ T7241]  ops_undo_list+0x522/0x990
[  615.629345][ T7241]  ? __pfx_ops_undo_list+0x10/0x10
[  615.634659][ T7241]  ? do_raw_spin_unlock+0x122/0x240
[  615.640199][ T7241]  cleanup_net+0x4c5/0x800
[  615.644646][ T7241]  ? __pfx_cleanup_net+0x10/0x10
[  615.649697][ T7241]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.655252][ T7241]  ? process_scheduled_works+0x9ef/0x17b0
[  615.660993][ T7241]  ? process_scheduled_works+0x9ef/0x17b0
[  615.666928][ T7241]  process_scheduled_works+0xae1/0x17b0
[  615.672504][ T7241]  ? __pfx_process_scheduled_works+0x10/0x10
[  615.678942][ T7241]  worker_thread+0x8a0/0xda0
[  615.683729][ T7241]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  615.690517][ T7241]  ? __kthread_parkme+0x7b/0x200
[  615.695488][ T7241]  kthread+0x70e/0x8a0
[  615.699768][ T7241]  ? __pfx_worker_thread+0x10/0x10
[  615.704992][ T7241]  ? __pfx_kthread+0x10/0x10
[  615.709716][ T7241]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.715107][ T7241]  ? lockdep_hardirqs_on+0x9c/0x150
[  615.720607][ T7241]  ? __pfx_kthread+0x10/0x10
[  615.725483][ T7241]  ret_from_fork+0x3fc/0x770
[  615.730284][ T7241]  ? __pfx_ret_from_fork+0x10/0x10
[  615.735518][ T7241]  ? __switch_to_asm+0x39/0x70
[  615.740407][ T7241]  ? __switch_to_asm+0x33/0x70
[  615.745300][ T7241]  ? __pfx_kthread+0x10/0x10
[  615.750025][ T7241]  ret_from_fork_asm+0x1a/0x30
[  615.754993][ T7241]  </TASK>
[  615.758034][ T7241] Modules linked in:
[  615.764398][ T7241] ---[ end trace 0000000000000000 ]---
[  615.770974][ T7241] RIP: 0010:ip6_mc_clear_src+0x18f/0x580
[  615.776935][ T7241] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c
[  615.797343][ T7241] RSP: 0018:ffffc9000b117098 EFLAGS: 00010206
[  615.806142][ T7241] RAX: 000000001fffe000 RBX: 1ffff1100b00fd82 RCX: ffff88807b530000
[  615.814960][ T7241] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  615.823309][ T7241] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  615.832286][ T7241] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000
[  615.840812][ T7241] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805807ec10
[  615.849671][ T7241] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  615.859034][ T7241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  615.866040][ T7241] CR2: 00007fec57ae7d60 CR3: 000000000df38000 CR4: 00000000003526f0
[  615.874866][ T7241] Kernel panic - not syncing: Fatal exception
[  615.881563][ T7241] Kernel Offset: disabled
[  615.885994][ T7241] Rebooting in 86400 seconds..