last executing test programs:

3m29.041503411s ago: executing program 1 (id=386):
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket(0x1d, 0x3, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3m28.869766304s ago: executing program 1 (id=389):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x40, {{0x2, 0x0, @multicast2}}}, 0x88)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000100)={@local, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002"], 0x110)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0)

3m28.512243613s ago: executing program 1 (id=395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0)

3m28.219525216s ago: executing program 1 (id=399):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) (async)
unshare(0x26020480) (async, rerun: 32)
unshare(0x26020480) (async, rerun: 32)
unshare(0x2020000) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 64)
r1 = socket(0x10, 0x80002, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}}, 0x0)

3m27.906991088s ago: executing program 1 (id=404):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
socket(0x10, 0x80003, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m27.751349018s ago: executing program 1 (id=408):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r2, 0x0, 0x40000000}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="300000000706010400000000000000000a0000030500010007000000090002c0"], 0x30}}, 0x800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r7, 0xffffffffffffffff, 0x16, 0x2010, r4, @value=r8}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

3m12.281232747s ago: executing program 32 (id=408):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r2, 0x0, 0x40000000}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="300000000706010400000000000000000a0000030500010007000000090002c0"], 0x30}}, 0x800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r7, 0xffffffffffffffff, 0x16, 0x2010, r4, @value=r8}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m41.369032648s ago: executing program 0 (id=844):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="a60000000000000000000000b5a168a71b", @ANYRES32=0x0, @ANYRES32], 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0xd, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff, [0x4]}})

2m41.128043907s ago: executing program 0 (id=850):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0, 0x0, 0x4}, 0x18) (async)
r2 = socket$isdn(0x22, 0x2, 0x24)
close(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (rerun: 32)
close(r3) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="150000001000000008"], 0x50) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) (async)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0}) (async, rerun: 64)
bind$can_raw(r6, &(0x7f00000005c0), 0x10) (rerun: 64)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) (async, rerun: 64)
read(r6, &(0x7f00000027c0)=""/4073, 0xfe9) (async, rerun: 64)
sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) (async, rerun: 32)
socket$pptp(0x18, 0x1, 0x2) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x2, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040bf080000000000027b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800200018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xff6, &(0x7f0000001e00)=""/4086, 0x41000, 0xa, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async, rerun: 64)
r11 = accept4(r10, 0x0, 0x0, 0x800) (rerun: 64)
sendmmsg$inet6(r11, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)

2m40.915999269s ago: executing program 0 (id=855):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={<r1=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0xf800}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
shutdown(r2, 0x1)
r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@rose, @null, @null, @null, @default, @default, @bcast]}, &(0x7f00000001c0)=0x48, 0x80800)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xa3, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffeffff, 0x7, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null]})
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getroute={0x20, 0x1a, 0x20, 0x70bd25, 0x25dfdbfd, {0xa, 0x20, 0x14, 0x4, 0xfd, 0x4, 0xff, 0x9, 0x800}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, @bcast, @bpq0, 0x2, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]})
r5 = socket$isdn_base(0x22, 0x3, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000400)={0x77359400}, 0x10)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14)
bind$packet(r6, &(0x7f0000000540)={0x11, 0x2, r7, 0x1, 0x8, 0x6, @local}, 0x14)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000580)={<r8=>r4, 0xfffffffffffffff9, 0xf908, 0xce06})
connect$bt_l2cap(r8, &(0x7f00000005c0)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000600))
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, r3, 0x1c498000)
setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000640), 0x4)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0xc, [@enum={0x7, 0x8, 0x0, 0x6, 0x4, [{0xd, 0x3}, {0xc, 0x7b4f}, {0x3, 0x2}, {0xd, 0x1}, {0x4}, {0xd, 0xb}, {0x4, 0x5}, {0x1, 0x1}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @struct={0x5, 0x3, 0x0, 0x4, 0x1, 0x1, [{0xb, 0x3, 0x7}, {0x1, 0x2, 0xfffffffc}, {0x0, 0x1, 0x8}]}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x63a}, {0xd, 0xfffffff2}, {0xb, 0x9}]}, @struct={0x10, 0xa, 0x0, 0x4, 0x0, 0x1, [{0x9, 0x4, 0x5}, {0xd, 0x5, 0xffffffff}, {0xe, 0x4, 0xa295}, {0x1, 0x5, 0x5}, {0x0, 0x3, 0x9}, {0xc, 0x3, 0x1}, {0xd, 0x4, 0x5}, {0x1, 0x4, 0x9fc}, {0x2, 0x1, 0x1}, {0xb, 0x2, 0x100}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x2e, 0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000880), 0x154, 0x0, 0x0, 0x6, 0x10000, @value=r8}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r9, 0x20, &(0x7f00000009c0)={&(0x7f0000000900)=""/100, 0x64, 0x0, &(0x7f0000000980)=""/39, 0x27}}, 0x10)
pipe(&(0x7f0000000a40)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x8)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000a80)="c405aabaab512a04fed7243f73ac6616b458e299772ee9d638cdbd43288ef102e0fec0ced2ab17d7e95ba8adb0255d7737f29b8564978373e42a858616e4c7ce148f3d3512231ea6b5b8bf35bc99023a0fe969b6bb7067816091a439ac13d87e517df7a2db516f0f6cd50ce0e5856e25c25347f27557ce296021699363fe023a9ce7103e7b4dfb05c4a9804ddfd4fd11652108ebd50c4a45f294056e2898b0c7a3b96aa148a64769719fc80fc10d1728cf8f496f518ce1f0495d3a", 0xbb)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r12 = openat$cgroup_ro(r10, &(0x7f0000000b40)='io.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7506}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

2m40.84825915s ago: executing program 0 (id=857):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x5, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
socket(0x28, 0x5, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f00000000c0)=0x8, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200)=0x5, 0xfffffe97)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
sendto$inet(r2, &(0x7f0000000440)='m', 0x1, 0x14000040, 0x0, 0x0)
poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x4002}], 0x1, 0x2000009)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x136, 0x4)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x83, 0x7, 0xa, 0x4b, "fb01120000007800", "39e80000000000000000e30f00"})

2m39.780908204s ago: executing program 0 (id=864):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r3, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r4], 0x44}}, 0x8080)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', <r6=>r4, 0x80, 0x10, 0x3, 0x0, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x64, 0x0, 0x7d, 0x4, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x1b, 0x21, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @empty, @loopback, @rand_addr=0x64010101]}, @ssrr={0x89, 0xf, 0x71, [@private=0xa010101, @rand_addr=0x64010101, @local]}, @rr={0x7, 0xb, 0xe, [@broadcast, @multicast2]}, @generic={0x94, 0x11, "8cf20d5666650e103e479802d7bf4b"}, @generic={0x44, 0x2}, @generic={0x88, 0x2}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa9ee}, {}, {}, [@generic={0x11, 0xc, 0x2, 0x3, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xe5, 0xd6, &(0x7f00000002c0)=""/214, 0x41000, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xb, 0x4, 0x6be}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x7, 0x5}, {0x5, 0x4, 0x7, 0x1}, {0x1, 0x4, 0x2, 0x7}, {0x3, 0x1, 0x6, 0xb}, {0x5, 0x5, 0xa, 0x3}, {0x5, 0x3, 0x8, 0xa}], 0x10, 0x81, @void, @value}, 0x94)
write(r5, &(0x7f0000000500)="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", 0x1000)

2m38.971485822s ago: executing program 0 (id=874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0xffffffffffffff25, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0xb8}}, 0x40)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
vmsplice(r2, &(0x7f00000006c0)=[{&(0x7f0000000f40)="a1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000004c0)=""/99, 0x63}], 0x6, 0x5, 0x7)

2m23.908558789s ago: executing program 33 (id=874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0xffffffffffffff25, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0xb8}}, 0x40)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
vmsplice(r2, &(0x7f00000006c0)=[{&(0x7f0000000f40)="a1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000004c0)=""/99, 0x63}], 0x6, 0x5, 0x7)

1m48.189430827s ago: executing program 6 (id=1437):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r2, 0x8b22, &(0x7f0000000040))
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x4, @mcast1={0xff, 0x5}}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0)

1m47.949228587s ago: executing program 6 (id=1440):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcbce}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014060}, 0x4000800)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)='/', 0x1}], 0x1}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcbce}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014060}, 0x4000800) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)='/', 0x1}], 0x1}, 0x0) (async)
socket(0x10, 0x80002, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) (async)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) (async)

1m47.636038933s ago: executing program 6 (id=1442):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x9, @empty}}}, 0x84)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffede, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x0, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x4}, 0x8)
r9 = socket$inet6(0xa, 0x2, 0x0)
unshare(0x20000400)
r10 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x3}, 0x20)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast2, 0x1}, 0x1c)

1m47.42013723s ago: executing program 6 (id=1446):
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
r1 = epoll_create1(0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x1, 0x0, 0x0, {0xe}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async, rerun: 32)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0x80000}}}, 0x80, 0x0}, 0x0) (async)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40)
getsockname(r6, 0x0, &(0x7f0000000180)) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r8, 0x5) (async)
sendmmsg(r8, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) (async, rerun: 32)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
r9 = epoll_create1(0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async)
unshare(0x60600)

1m46.126966857s ago: executing program 6 (id=1460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
unshare(0x20000400)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x40800)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xfdef)

1m45.544234356s ago: executing program 6 (id=1466):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e25, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6b, 0x2, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x28}, 0x4011)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r3, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6=@local, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3c}}, 0xf0}}, 0x0)

1m30.437274726s ago: executing program 34 (id=1466):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e25, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6b, 0x2, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x28}, 0x4011)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r3, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6=@local, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3c}}, 0xf0}}, 0x0)

17.932886666s ago: executing program 3 (id=2376):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdc00, {0x3}}, 0x14}}, 0x8004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01"], 0x2c}}, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
close(0x3)

17.683429017s ago: executing program 3 (id=2381):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@default)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400e413160185f7000000000000", @ANYRES16=r4, @ANYBLOB="00082cbd7000ffdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40488a0}, 0x40080)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x200000000000000b, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$unix(0x1, 0x5, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r8, 0x705, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0xf7, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r11}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
r12 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r12, 0x10e, 0xc, &(0x7f0000000340)=0x8, 0x4)
sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r7, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYBLOB="77c20db7521fc2ddf26ce6d747519f9808a6500c97e34c8eb1cc37ab89957824603482901c5b0b71930eceee40a92b5c920572c4c96fcb53afa08cea0a4b287f264761729a4cf0016dd7c38a2029c3026605fcda02e5a91a55fae1a681228d3e07fa3b4f3845652a866efd1930abed4f69b8f282b10f484c9b31e9e4fd4ee8273eadfddaf004a5159bb3f623060b18330fee69f9815764523c71f264043b058eb763f5795e9ac2424c8699a375e3b46fdaceab2ae81192326b6564"], 0x24}}, 0x0)
r13 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r13, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0)
setsockopt$MRT_DONE(r13, 0x0, 0xc9, 0x0, 0x0)

17.027701501s ago: executing program 3 (id=2385):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x40008c4) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1000, @loopback, 0x1}, 0x1c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x4}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffc}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x4) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x100000001, 0x8, 0x8, 0x0, 0x2, 0x0, 0x10001}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0x5, 0xedb, 0xff, 0x1, 0xffff}, &(0x7f0000000200), &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800010000000000c002b80e5000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d846759e954293f25954c660de07daf9c337ffe1e8a20a9d143c38a043e786aa02052810eec69c6751c3fa7160c404dbdb817"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000030000000000000000000002", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$alg(0x26, 0x5, 0x0)

16.756152007s ago: executing program 3 (id=2388):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="00012bbd7000ffdbdf25170000000c0006000200000003", @ANYRES32, @ANYBLOB="0c000109000000003a2bd51d9b86f8b0b9aebfa0afdf31a7b0dc3f89c88c93ea3fce9fb1"], 0x40}, 0x1, 0x0, 0x0, 0xe9f77fe981cdb1ce}, 0x4004084)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0xfffd, 0x7, @mcast1, 0x4}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4001)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

16.300734243s ago: executing program 3 (id=2393):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r2, 0x891b, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
listen(r1, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x2, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket(0x10, 0x3, 0xc)
write(r7, &(0x7f0000000040), 0x0)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18)
write(r8, &(0x7f00000004c0)="b7050923957cc243bd7d826430345dd8bbdc7761860fb4dd3cf1a2029e01f367dbf627b1e84f2a50432458d65ddef96218988c6731dfaacf0d3d55a513d116dd45beaec80981fde2acb97e979cf236bd9bc027dc97c72690544bd7536667050f2e08bfc4daa1d653e76edbe9570323a7568937864f89ba3e938f448c300a3a77a2d5526f", 0x84)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001b1401000000000000000000080022"], 0x20}}, 0x0)
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)

13.131768841s ago: executing program 7 (id=2432):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0xa, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297e", @ANYRES16=r5], 0x40}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x43cc040ac7ffdf71}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
ioctl$sock_bt_hci(r3, 0x400448e1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000009000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

12.929942448s ago: executing program 7 (id=2434):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4045}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c6b75980e74f49ae60be5f62d43f2844bd79aa5859a3b8d1321016d94a43f40964d5cc9819b1a4689e12bb0ebff0d4ed1147c014249bc44c4a0d325a9efe9f020186abdf40dab7c0a4fa92314e5d18533e3a5881df77ba1ec64e604f63dbf56115745441b7c8b0c1656f1649586b7e03bc25822a12e081e5a89f025f25f23bf6f7f2e5aa991fd2dd48dc0daf498f9ff2a614dcb95ee197a009cacaf74322ae99263ec6338be487e8ca44e5e4db719f242fde8f381106471618e3804e8b4ba", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250a0000005c00028056000400a593623d67ac493156fb9b8698e0ebf754281204b6ccca90c4d229ac2d662058274051d159321f80dff1c78ff2c3c941771da3df016594d8e7f3d17646d70aa0eace6b0e2d66acd0236457288ddb14c7a51e0000"], 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x80)

12.927765456s ago: executing program 3 (id=2435):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="7a0a00ff0000000071105c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x110)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
splice(r2, 0x0, r4, 0x0, 0x39000, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xfc, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4970952f}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}]}]}, @NFT_MSG_DELSET={0x1fc, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62d4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe393}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x79c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x76d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17b7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff99}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2961}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x22dae7a5}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa62}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf}]}]}]}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x23, 0xc, "59f341ff0f444ad9940cc0ed100987e0f4c2b389e070d1796cff02fd93c575"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x384}, 0x1, 0x0, 0x0, 0x4010}, 0x8080)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

12.467314744s ago: executing program 7 (id=2440):
r0 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
socket$kcm(0x2, 0x2, 0x73)
r5 = accept4(r2, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80, 0x0)
socket$inet6(0xa, 0x3, 0x7)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="000400e07f78d8b6cb8039e86300", @ANYRES16, @ANYBLOB="20002abd7000fcdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1001)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x20}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010102, @in6=@remote, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x2}]}]}, 0xec}}, 0x0)
r10 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r10, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000300)={0x0, 0xea60}, 0x10)

11.997128637s ago: executing program 7 (id=2445):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a00000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x10, 0x6, @link_local}, 0x14)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x28, r10, 0x483, 0x70bd28, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

11.793344654s ago: executing program 7 (id=2448):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0xd, 0x7, 0x9, 0xfffffffffffffffe, 0x4}, @jmp={0x5, 0x0, 0x8, 0x3, 0xa, 0x0, 0x8}, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0xd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x26}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rpcgss_createauth\x00', r1, 0x0, 0x5}, 0x18) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000200)="c455be", 0x3}, {&(0x7f00000004c0)="ab172b3cf47b25b695ee06c88242f5c22f2faf9c0ca0441e5e073b15bb7b1b3c5f1e8dbff9198e6e7dc0a3cf72abff94e461766ed32598375397454ed4f8a8e8d52d36c1965b20c4e2b6a62245e0df090ad2ac02e43d3526fb8dd3a8f16d700dfbbb58ef77bede02c15c150c0ac14330ea218d33398f69a594a52d52b888e3a4e48a54e9a4d407d4770361236850a5e3847fcc219ace26fbf284231d42ca8584fb40fc95accb5d4a2d00dec20c724f103b02f273300d42678c4c2559607d7fec43a1cb8ab783aa630938ce37fbc766628e22ff0e60936fcc6e", 0xd9}, {&(0x7f0000000240)="b29736c75ab93e3489a42aa558ece54cc3fd2efd7817bbea2e5dfb6aad818f8e983304e208d1f3ade5cefc89796ebe0ea46ca2f0d96c6b5f65cb95ad3a0373531c0f37db3b06750ce57f48", 0x4b}], 0x3, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000006c0))

5.980297309s ago: executing program 2 (id=2491):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000002", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0090780000000000"], 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/231, 0xe7}], 0x1)
pwrite64(r1, &(0x7f0000000100)='M\t', 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x3, 0x5, 0x0, 0x0, 0x3, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000014)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000002", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0090780000000000"], 0x0) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) (async)
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/231, 0xe7}], 0x1) (async)
pwrite64(r1, &(0x7f0000000100)='M\t', 0x2, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x3, 0x5, 0x0, 0x0, 0x3, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000014) (async)

5.691968277s ago: executing program 2 (id=2495):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040)=0x6e, 0x400)
bind$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r0}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000080000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100026200009500000000000000bc9110000000ed00b70200000000000085000000ba000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40008, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10)

5.575702091s ago: executing program 2 (id=2496):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bind$bt_l2cap(r3, &(0x7f0000000000), 0xe)
listen(r3, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x0, 0x3}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r5, 0x1ad72f7)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r7}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
accept4$netrom(r5, 0x0, 0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)

4.593444094s ago: executing program 2 (id=2500):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="3900000014008157efb0349a2e2125ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b", 0x39}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r4)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a1403090000000000000000080001"], 0x20}}, 0x0)
r8 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r9, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xff14}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x4, 0x40000000, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}}, 0x0)

3.508003742s ago: executing program 2 (id=2507):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x16}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17fe, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) (async)
socket(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x16}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17fe, @void, @value}, 0x94) (async)

3.237672231s ago: executing program 2 (id=2510):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0x40000000}, 0x18)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2.767481991s ago: executing program 7 (id=2448):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0xd, 0x7, 0x9, 0xfffffffffffffffe, 0x4}, @jmp={0x5, 0x0, 0x8, 0x3, 0xa, 0x0, 0x8}, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0xd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x26}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rpcgss_createauth\x00', r1, 0x0, 0x5}, 0x18) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000200)="c455be", 0x3}, {&(0x7f00000004c0)="ab172b3cf47b25b695ee06c88242f5c22f2faf9c0ca0441e5e073b15bb7b1b3c5f1e8dbff9198e6e7dc0a3cf72abff94e461766ed32598375397454ed4f8a8e8d52d36c1965b20c4e2b6a62245e0df090ad2ac02e43d3526fb8dd3a8f16d700dfbbb58ef77bede02c15c150c0ac14330ea218d33398f69a594a52d52b888e3a4e48a54e9a4d407d4770361236850a5e3847fcc219ace26fbf284231d42ca8584fb40fc95accb5d4a2d00dec20c724f103b02f273300d42678c4c2559607d7fec43a1cb8ab783aa630938ce37fbc766628e22ff0e60936fcc6e", 0xd9}, {&(0x7f0000000240)="b29736c75ab93e3489a42aa558ece54cc3fd2efd7817bbea2e5dfb6aad818f8e983304e208d1f3ade5cefc89796ebe0ea46ca2f0d96c6b5f65cb95ad3a0373531c0f37db3b06750ce57f48", 0x4b}], 0x3, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000006c0))

2.240372778s ago: executing program 5 (id=2519):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='svcsock_tcp_state\x00', r2, 0x0, 0xd}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
ppoll(&(0x7f0000000000)=[{r1, 0x8104}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000a80)={0x0, 0x800, 0xf00, "cf46ce6bf41dbff9c948d34dad288777c365c0880192fb678c7384a2941104603d1fa838a15837ddd676cd730862b0f1d9d7a1d8ce220200a451809e11218d1749c718174abdc2eef5a24376037bcc001b9fee4e6b9ccf0b06cd68ae649b69d0b7beb0e5f68703932e044f8265816fb993f0ad3543706762f23c3524cf375a395279a371771155bee6681336ee1fb05d32b59356eb77dae21a6ec1849bd3a720eb14a85ad4e18f3a143eebccb6539af99f8e90c958e2f41c6d99f340483c6c4a208c34f5c4576c15741d70f0f74b0832eb47c025e819e5b6fffcbac1e8893beeb133602e75e9861e84e9d3906d785c59a8ba054d96432be3d6029e42411f6701200fa43b3925fb66fcde18be0fa808233fa3eff325de2634fd014d96490d059e7ca622909be5fa2a72a6457e816ffc521df6a4444c896b97431fd2a75e4026e893797ddecbfc83c6c2ba859e03e7061bd20dd9cfa952199f2d6cb66678a7b37f7d98bbcbea73b12120534cc927788a25ad7ba1739398e3eac3d8bd518e57c1174648ced665b0374d257de99e247c2e4ea371b857d3c930e3088b0ab69463b14c9d37949a140f850306cb7316671ad023d6793f6a819b0b7ce02e7ac3e813c2bd5190fb5cb61c1d10512638085fd8b9d41b23ac652be86de64cb3199df3a137a01c23b3e082f233bf4a819b0ebee6f9d09bced19346bc804009fb9a2b97b82bc47e436b999bfdde0237326ed8f7922f900b0b6eab61d92a068a537f031ee484553ea9a87214924d4817324c1b48ca99350be1d7056bfcc6b63380e31f7562f1df2613057aeb89ea111e5b259a282456391231a188f13d67c2803923d3094a84d562a079ceed684be3e701ba648f001f76e53e21bd5de6da3e94a4f5e0da2cd9c74556b343ccca76ba61914cc6b33e499aefe7209cf968b1db9fa51cfabfb2937716bc89021495b726854b020e316063cdec8b860036e41b8bd16e7ad7b1d1ea87e1875f35f2852e39802fb1df4457cc55aefec53fcc1d7e104c874a0740b9110c4dbf94237780a7544e5fea07bca3ff6a56b07a9e585cd54d2e0b0637e16506e5e44428a575d6f7957ff4c8507e31b1ca530e0dc37b8f1a4b9c2a72b71563dd4f1d40013202cdef9f24fb43764e2616709cfece918cfa484c45d2f435a484b94a686b104deff11b4b9f07115197d1bb99992c619cbe176dc013bc9d67ba90257748b66cdaadeca364a198f8327c116ec37852939fac139d48e434980371949e9b1d07cebda257104de4d923764fd67ef6bde99a00cd3762b9d93438aa07da27dc146cc5eb997d2f739525441fe2c6cd6585ef8c33552e35e5933cb27bb5e5dfe165a7577074e8053bdf1d38a2503cf6980383fbf2ced570f2123e813f37056f139d7cd52bef036ba38d36256e836e07b57e051667eda864afe059157e6a6ef09ca1eb4b8eaedd60db19a1226e51b188dd5f23afaa418052d7c4f9b7b06440ef025a4f6bc3df99a06c72d433d18fcf38f873caa62c1b70b33b533d98361886c7339350df5184c0ba92cee1e0b21b9e5455193aff56096f3124463932a909c2953add05c6fc9a9c1aa4f2829594f9e9203183b761ceb4d8f32eb7219b16160066ad6c21c4a831f95cb57b3150e1ce0bc9a97df50d3ab9690e44cec8f998d940b5a509c364868ab7498115fece61cf5e13390eb5f4b6290040afadb9f84d69679c3006febd799ca0111ce64da1417cd45cc51f8764b5564f279ae0d5fd12ce29033beeb6c7c8bd4490d1845e04347e80a05efabe18cf94a1df0b49a931e52117e61d7108082bfda4ceeafbe26747dfce3bdc2827eb8172ca68314a9479d43f3c396a64be58a12f70bad30775d9fc0731969d01208e38e15eaaecf3bcdb748ba1db85b808ed1eadc2c4029a3d4554da17f01de40dee37ae590de89ed518c1172284399a41e0742c0105b1180e8ab1dabb8de849ebc9418cb5e8b6cf653aabf8d6393e7184ea649ba3771829fb97ea3d2d7003ac3bb251a37a46a1876f66f465885532158d42fc2bd4b4ad4be01a916995da4fd16a5f229df7785d3db26589f1f4d55bf07b90a2a3cc64e247a5eb745fd82a14829a9e698c39e8f5517f5113d51b707accee44070d669c0c73034b4de94c20c12589b795ff20fe6906bc090b0ea55db4cbc0aab14cc31475308dc913abef7d6c0cfd3b5d59328a6127ae5e1c2cbfafa18380975f6a7805484f8236ca1036d43dee5fb127779f62cd1188b410027644341ad74c7e3c4d013822192b5fe292565a8bcf70dbc61172a55bafbcb0c2cab492092f9c9d140f34278ac0446973a0ffe35c49eb21f57fd8c9abd0bfeef2c9bde737b4afa9db2c215a8a0337ca7a30cfac0817b005d54fdfcb56c132af71046104538b8d36115e0d148267228293badd6e6c14e44c6b5df8fbe77e892454ffcfb7559767f9bfb79c6ae0d3475f72122558125149447a97fa1c03e2bb0275c68597364743cf63e9ef6426a1601f1e9fc5ed6fda28fe701bab6bd56d9c258e9ff22984890f414d49a11368d51ed86921df6b69bf77d3b28c73c12e29da327a481f836bca77d8fe6a4f71afc8efdaf18884cf28e835edae9112e51d4d9404f31371c3f3b5276f6b0771e72c16bd3291a2d53ef332a6e11f1b584ae254fe4c76c9b0c86294fa6d8095fc6e87c3f79c7efea7ddb9f4b10e677d417ebb049483a5ad0a63a1b5eb1a91b052df3f84ccc61f8867bf08c5ec9007851914176577c26b56b587b4f6355ec89a5279099b160cc66122461242c23c901f47abea9b2939a417f378b04d89114e710f1109712f63dfe1e818a31fd9f3afa76e6bd01a7f3f35ac5097ddfcb6e4e8f2af23179acdf930e6ca31d3e998e649a98a76d48d96c5a874d1da7bb2d654d325c9f74beffe05ba69efc494e3acad39c5a7dfc6ce5e10cd3f7dcfe6f9621aa0176eba661a9e3a0aa55da21d09330412e760a0f000dcc5f6610251bd6df043544b9e86e9699b7e5113d4974dab4a278f6a7077a43522ccd8ef57a0ff9de4f2a5339189d8ab67aa3cf335bdc69df2549f0af7231ce6e0235b2d9f2b5d50541c876dc59000f2cfa4b97aeaf8c352dc62b9f47d6368f395ce3d64bc8196554428de08bd3c2e43c55a55c2b0415724d1fc703a3fae29c64bd8d77bf32b76aee0d74bc447d26b2e049ddaa3fa50c19b6e7f90263bbae1c860212d9dc91fcd52c8b51fd002f86f07e4f96f045858af8d028b34c7bd05e5494a3efe92eb1dbc6120aa4556be0dddf60f298085e33eef5fff42b1cb20b075d41353058921445cfbdd6b64d53087b20d2dd122f3989021303edcb19b33729d221d1300903d93e960d896ed014b87425020fb64bb4f722be66b615e00b773f3858e291d433d59215ced9771307dd94cc20e8ceeb75bc1607671977f18f4c0b2b2dee2f25b76a0883d75f0beee7ca6ec0bc1d1abe0fcc813933e03ae9952e3dd95f6c3b82b3edeaeebc2486a2adba97a2526267112a3afb43c36634436539f902d903b23058b12d5519151916ca9c7712062cad67e58ad2028bd47548c4203d600b2aa4ae4079c05adb6002fe3067a3ead8f80aa955cd2e5b9e2cf3b39e5195ee6c9504f258c0c4ee4ebca258641c7a1fb5611a020d8fd607f9db0ca8c02a8a9072fb34174fe938b79714db3c0dd2a22a538f334eda2c46436ef8c12d24100a1314c627d738a758dd71526ce61bf4b0c6a1b4df9cac2107c8247224078771f14d816c86f3695ca25013a3e8627f70362f28a48920c08d23dcd09265c180f44a7abd2dbcb6b8742bbc29012aeeed25bdb50ede9884ffd94a9bb4188d71f8f6ca7c9d1b733ae31ba3504d6934f4c203b4c781348d78dc38b89f91351b2dba27fdf9cf1ff15c9b2a24d992fdc96d6c02b4bf8d7cc2f59c351b0c7a6315c8990c5ad5244bef776a9b6fe744444b41a1d43f5a6a46c2534ddcbefe21070f4ac466e6ed37ccce46616f22729e2c0d8f875135c23401e120066e33120e15c0564356b8dedd42e8c944c4fab4056e974115e6ed6aea409573cc4c02efaf80274ef7bbef282c76690fe0d6f162ceb0f5d14cbb007862bbc66d6cc39038f6249ee8c67a49457a919dfe4e87f729d2d8c78fe8655162302974e5274852a2443ec0aa6d86dd7764690d2b45164ce1a386efc8c9fc252d47cf5ce63fca872f99e42ade160707ef864ed79c6e3e7f482522e8923a6d1bdc8c4357282205da0a165359306bf14c0daa2318c14e6e4e87790848130b4ee42ed28dfb7718a1218bf30aff48b9773de29dbca28a5f94b8e26b86420d82f7dd16e23f09ef43ebd493d78f2de07fdfbd8ec695d9764138bb6b12b7a9bd056c09395faeedf8716cb2f5e8d27f72b980540ed5f64249d123c35c37172c8ae2ba68cefb7abade4416c776988ab76b715356e8859eeee5ed8ca6de5fa27e57b69b96c820271fbecd0f229f8fb2648422e2a96d0d67be1f2e31b1eef5a88d02f5309a0eb68493ab8e249fe0f4df7187ba62f5c45d7430b4ce5fffe9b72f7ade7d0fa1210697a7d7578b59abda74b413d8d41f49e37fa6859d9898087206da46d2d6ddb9a465eb83bd6606a3ca493a70043baaad391336b084c455fdae0ec5d8a0922064b23353e94e723b1f29ded9c91755c9914c8f44a3eb345d4a9d2df9dc7e772c3cb12631a253aa307d0ae8f84af44d746a226579ed0af74c220d0c73eff434a74ec3440ea5bf09d84c902dd553d50355d849410b7912a64645f3a23fdb856e3fd18b98ebde8efc203dbf4cdfb5974d9f8d0adaf21579a40e1bbae3dc693fa0adb13f47e23cc2ac7ad7d55efd42ce9d88de94ee7d811dff71c0bb9d31fbd568b4dd7efe97b48d6143bff4b5fec059be1f67419f4de86078e8955f9c20976e97ddd004f2e7fd00c14f9f69ee6e628a6c37cd976f9788ae48ee285cc04600ded94c71f5b9ed03593dc19e3d00efa0b11c1c485b32643a1ba49fd97c81d912d5559dead6bdf85e08d776aa3c7ea9235f7e1994cdcf6e990f8b53ee961997a3c53c7301609975747e7253f73ec80c1fe38656b28b98b29fe0d2f265aff37b32a8001a00ad899dabf2d4f15275664cdfe130424171ec154d13fd914154d840e0a2c922285644b8141a44324950e2eaf952b350cd9e3e134b7347de8bb3f14a62bd645481cc04ca46014e47d59ad8d45c48fd3f644708ce33657e078d8f8f0c02aed7d6d87d72d6fefdc0e55a933b1ffb8c39678ad3c13868e840bd7ad72130e18ac27d0ae1fc6d91ff37ff712006f791eac570636ef3e8d589a7af9f41e836150e112457f4a71e6487d0d87deac15478e3784659e9b3c90b350b1cb736ba13e4e14b1ac2cceeede25eab9584b8fe198385cb19fb5f1762c6bdf8b12dc9a74d263300af103c7596b61469372e635a2d7077d4866671172f130d067"}, 0xf08)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)
socket$inet(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, 0x0, 0x0)
close(0x3)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
recvmmsg$unix(r4, 0x0, 0x0, 0x400122a0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1, &(0x7f0000000000)=@raw=[@generic={0x0, 0x6, 0x5, 0x73c, 0x8}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0)

1.53448019s ago: executing program 4 (id=2522):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002180), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)={0x1c, r2, 0xc896f2e2c472c557, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@generic='^W']}, 0x18}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x7, 0x205, 0x8020, 0x4, 0x5346, 0x7, 0x6e8c, <r3=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x7}, &(0x7f0000000140)=0x8)

1.363975011s ago: executing program 4 (id=2523):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x0, 0x8, 0xe, 0x7, 0x100, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0xb5b, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x3, 0x7fff, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x1, 0x4, 0xf, 0x8}], 0x10, 0x1, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0xec2883051f75f01f, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x6, 0xffffff01}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x1, 0x1, 0x9}, {0x5, 0x1, 0x10, 0x9}, {0x1, 0x5, 0xb, 0x5}, {0x5, 0x5, 0xc, 0xc}], 0x10, 0x4c4, @void, @value}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, r2, 0x1f, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0xdc)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x28}}, 0x0)

852.079781ms ago: executing program 5 (id=2524):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x101, 0x4)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd640000000000000000000000000000000000001100000000d14995dcdb4e1e796e65401eb3a98894ac93926ed5d82127a5189393a4b75e2781b9855d90"], 0x28}, 0x1, 0x0, 0x0, 0x44004040}, 0x20000000)

777.443927ms ago: executing program 5 (id=2525):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r1 = socket(0x2c, 0x80000, 0x9)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r4, 0xf9bd2d6ca286407d, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004844}, 0x20010040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x58, r6, 0x801, 0x0, 0x25dfdbff, {{}, {@val={0x6, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x0, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES, @NL80211_KEY_DEFAULT, @NL80211_KEY_TYPE={0x0, 0x7, 0x2}, @NL80211_KEY_MODE={0x0, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x0, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST]}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "951fcdb39e5d7ae2ba87520781"}]}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x0, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "23f740b2424f971d5f96f33f1d"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, r4, 0xa17136bd5c43d801, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x111}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x240448c1}, 0x20000040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

444.168056ms ago: executing program 5 (id=2526):
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket(0x1d, 0x3, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000fc1400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

364.406145ms ago: executing program 4 (id=2527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001b80)=ANY=[], 0x9) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x13, 0x0, &(0x7f00000003c0)) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002d00010026bd7000e1535a280e80"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r5, 0x9, 0x10}, &(0x7f0000000100)=0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500040000000a00e8000802110000000000e84f6c7c8a354338e7f73946ddf523d9738c3d52cbe070e33470f6641dc617e3813823fbd7841500f8a9a14c1345cd4120a7f9ecad0fa55fca5c0094f3b1331d140a3ad40fd05993319cfe7507c3a0431a62a73413bd5cf3be6b6afc34f1a2faf00930de7abd89e250e0e1fa777656a875192dff27173b60d8a0a335c59237bce690ecc87b57646464fcb7947bcd2c8bf9d0ac443152f9e45b0f"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x4}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x5}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

318.241647ms ago: executing program 5 (id=2528):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe800000000000000000000000000c6f42be40aa5ccf98c7fc7100bb000000000000002a27c39b40b23b72a673cc168ac300"/291], 0x190)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "50836d", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}}}}}}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0})

216.074838ms ago: executing program 4 (id=2529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
pipe(0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) (async, rerun: 64)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) (async, rerun: 64)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x25, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) (rerun: 64)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0xfffffff8, 0x3, 0x8, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async)
recvmmsg$unix(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

215.719732ms ago: executing program 5 (id=2530):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_80211_join_ibss(&(0x7f0000000380)='wlan1\x00', &(0x7f00000003c0)=@default_ap_ssid, 0x6, 0x1)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbff, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffed1}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8091}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000030425bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="6263ffb5726124281d3f8ac46905a2010be7b2e4"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

93.027033ms ago: executing program 4 (id=2531):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @local, <r1=>0x0}, &(0x7f0000000200)=0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0x2d, &(0x7f00000007c0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @tail_call, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x5, 0xd, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3ff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x10001}, [@generic={0x5, 0xd, 0x4, 0x9, 0xe}, @ldst={0x2, 0x2, 0x6, 0x3, 0x3, 0xc, 0x1}, @call={0x85, 0x0, 0x0, 0x10000065}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x3c, &(0x7f0000000180)=""/60, 0x41000, 0x21, '\x00', r1, @fallback=0x19, r2, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x8001, 0x1}, 0x10, 0x0, r3, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x3, 0x6, 0xc}, {0x1, 0x4, 0x7, 0x2}, {0x5, 0x2, 0x7, 0x6}, {0x0, 0x3, 0x3, 0xa}], 0x10, 0xe9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)

0s ago: executing program 4 (id=2532):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008006bc6354623be"], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001cc0)) (async)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000) (async)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) (async)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) (async)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1412, 0x8, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}}) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) (async)
recvmmsg(r5, &(0x7f0000002e80)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/70, 0x46}], 0x3, &(0x7f0000000780)=""/95, 0x5f}, 0x7}, {{&(0x7f0000000800)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/213, 0xd5}], 0x1, &(0x7f00000009c0)=""/33, 0x21}, 0x101}, {{&(0x7f0000000a00)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/255, 0xff}, {&(0x7f0000000cc0)=""/127, 0x7f}, {&(0x7f0000000d40)=""/35, 0x23}, {&(0x7f0000000d80)=""/106, 0x6a}], 0x6, &(0x7f0000000e80)=""/193, 0xc1}, 0xbe}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000f80)=""/148, 0x94}, {&(0x7f0000001040)=""/3, 0x3}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/173, 0xad}, {&(0x7f0000002140)=""/232, 0xe8}, {&(0x7f0000002240)=""/154, 0x9a}], 0x6, &(0x7f0000002380)}, 0x3}, {{&(0x7f00000023c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002440)=""/89, 0x59}, {&(0x7f00000024c0)=""/22, 0x16}, {&(0x7f0000002500)=""/32, 0x20}, {&(0x7f0000002540)=""/112, 0x70}, {&(0x7f00000025c0)=""/67, 0x43}, {&(0x7f0000002640)=""/229, 0xe5}, {&(0x7f0000002740)=""/1, 0x1}, {&(0x7f0000002780)=""/226, 0xe2}], 0x8}, 0x7}, {{&(0x7f0000002900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002980)=""/150, 0x96}, {&(0x7f0000002a40)=""/170, 0xaa}, {&(0x7f0000002b00)=""/21, 0x15}, {&(0x7f0000002b40)=""/160, 0xa0}, {&(0x7f0000002c00)=""/198, 0xc6}], 0x5, &(0x7f0000002d80)=""/193, 0xc1}, 0x83}], 0x6, 0x2120, &(0x7f0000003000)={0x0, 0x3938700}) (async)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xf5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x73}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x10, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)

kernel console output (not intermixed with test programs):

: 'syz.4.993': attribute type 1 has an invalid length.
[  200.565135][ T9386] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  200.567923][ T9374] hsr0 speed is unknown, defaulting to 1000
[  200.674546][ T9393] syz_tun: entered promiscuous mode
[  200.680028][ T9393] syz_tun: entered allmulticast mode
[  200.696527][ T9397] netlink: 'syz.5.995': attribute type 3 has an invalid length.
[  200.721238][ T9398] netlink: 'syz.5.995': attribute type 3 has an invalid length.
[  201.306990][ T9420] __nla_validate_parse: 11 callbacks suppressed
[  201.307011][ T9420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1002'.
[  201.368454][ T9425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1002'.
[  201.386738][ T9420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.394014][ T9420] IPv6: NLM_F_CREATE should be set when creating new route
[  201.401407][ T9425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.412272][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'.
[  201.529550][ T9423] geneve2: entered allmulticast mode
[  201.547906][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.591063][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.641274][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.678607][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.998538][ T9450] netlink: 'syz.5.1008': attribute type 1 has an invalid length.
[  202.018987][ T9451] netlink: 'syz.5.1008': attribute type 1 has an invalid length.
[  202.040304][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'.
[  202.053336][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'.
[  202.113316][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1012'.
[  202.129553][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1012'.
[  202.181570][ T9456] wg1 speed is unknown, defaulting to 1000
[  202.192638][ T9456] hsr0 speed is unknown, defaulting to 1000
[  202.269865][ T9457] wg1 speed is unknown, defaulting to 1000
[  202.308455][ T9457] hsr0 speed is unknown, defaulting to 1000
[  202.331130][ T9467] wg1 speed is unknown, defaulting to 1000
[  202.426679][ T9467] hsr0 speed is unknown, defaulting to 1000
[  202.970251][ T9488] wg1 speed is unknown, defaulting to 1000
[  203.032052][ T9488] hsr0 speed is unknown, defaulting to 1000
[  203.360332][ T9500] netlink: 'syz.3.1017': attribute type 10 has an invalid length.
[  203.402744][ T9500] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  203.435726][ T9488] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1014'.
[  203.472852][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'.
[  203.484922][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'.
[  203.614098][ T9511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  203.789361][ T9511] pim6reg1: entered promiscuous mode
[  203.795794][ T9511] pim6reg1: entered allmulticast mode
[  203.889355][ T9519] openvswitch: netlink: Missing key (keys=40, expected=80)
[  204.092621][ T9526] _ÐZ`Ô€@: entered promiscuous mode
[  204.223490][ T9534] Bluetooth: MGMT ver 1.23
[  204.363452][ T9540] netlink: 'syz.3.1028': attribute type 4 has an invalid length.
[  204.681322][ T9556] wg1 speed is unknown, defaulting to 1000
[  204.690310][ T9556] hsr0 speed is unknown, defaulting to 1000
[  204.988302][ T9565] wg1 speed is unknown, defaulting to 1000
[  205.010729][ T9565] hsr0 speed is unknown, defaulting to 1000
[  205.161240][ T9572] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  205.215741][ T9576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  205.237969][ T9572] pimreg: entered allmulticast mode
[  205.340648][ T9581] openvswitch: netlink: IP tunnel dst address not specified
[  205.521775][ T9585] wg1 speed is unknown, defaulting to 1000
[  205.552409][ T9585] hsr0 speed is unknown, defaulting to 1000
[  205.557133][ T9586] wg1 speed is unknown, defaulting to 1000
[  205.638627][ T9586] hsr0 speed is unknown, defaulting to 1000
[  205.828776][ T9601] netlink: 'syz.5.1043': attribute type 39 has an invalid length.
[  206.108608][ T9611] wg1 speed is unknown, defaulting to 1000
[  206.159493][ T9611] hsr0 speed is unknown, defaulting to 1000
[  206.320791][ T9616] __nla_validate_parse: 10 callbacks suppressed
[  206.320812][ T9616] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1047'.
[  206.397187][ T9618] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  206.507862][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  206.535844][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  206.544377][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  206.553624][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  206.567077][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  206.677777][ T9627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1049'.
[  206.689971][ T9621] wg1 speed is unknown, defaulting to 1000
[  206.703502][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'.
[  206.722148][ T9621] hsr0 speed is unknown, defaulting to 1000
[  206.762089][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'.
[  206.771839][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'.
[  206.887353][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1051'.
[  207.042965][ T9642] netlink: 'syz.2.1054': attribute type 1 has an invalid length.
[  207.091304][ T9642] netlink: 'syz.2.1054': attribute type 39 has an invalid length.
[  207.120407][ T9642] syz_tun (unregistering): left allmulticast mode
[  207.164005][ T9642] syz_tun (unregistering): left promiscuous mode
[  207.204744][ T9642] bridge0: port 1(syz_tun) entered disabled state
[  207.314076][ T9661] netlink: 'syz.3.1057': attribute type 1 has an invalid length.
[  207.323164][ T9661] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1057'.
[  207.353582][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'.
[  207.629168][ T9621] chnl_net:caif_netlink_parms(): no params data found
[  208.124613][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.131818][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.139519][ T9621] bridge_slave_0: entered allmulticast mode
[  208.147320][ T9621] bridge_slave_0: entered promiscuous mode
[  208.158576][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.165939][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.173237][ T9621] bridge_slave_1: entered allmulticast mode
[  208.196667][ T9621] bridge_slave_1: entered promiscuous mode
[  208.231902][ T9698] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  208.252074][ T9698] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  208.332375][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.356395][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.434415][ T9621] team0: Port device team_slave_0 added
[  208.444242][ T9621] team0: Port device team_slave_1 added
[  208.521588][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  208.577794][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.602901][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.632121][ T5849] Bluetooth: hci6: command tx timeout
[  208.677381][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.698841][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.716631][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.760604][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.903183][ T9621] hsr_slave_0: entered promiscuous mode
[  208.920726][ T9621] hsr_slave_1: entered promiscuous mode
[  208.937306][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.956249][ T9621] Cannot create hsr debugfs directory
[  209.472781][ T9621] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  209.499849][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1080'.
[  209.513895][ T9621] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  209.538897][ T9621] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  209.559036][ T9621] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  209.838985][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.927448][ T9621] 8021q: adding VLAN 0 to HW filter on device team0
[  209.966825][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.974204][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.020309][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.027642][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.211672][ T9621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.464043][ T9786] veth1_to_bond: entered allmulticast mode
[  210.718706][ T5849] Bluetooth: hci6: command tx timeout
[  210.943890][ T9789] bond0: (slave bond_slave_1): Releasing backup interface
[  210.982142][ T9821] netlink: 'syz.2.1095': attribute type 21 has an invalid length.
[  211.100246][ T9789] veth1_to_bond (unregistering): left allmulticast mode
[  211.210447][ T9821] netlink: 'syz.2.1095': attribute type 4 has an invalid length.
[  211.291187][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.673632][ T9621] veth0_vlan: entered promiscuous mode
[  211.690497][ T9843] __nla_validate_parse: 4 callbacks suppressed
[  211.690518][ T9843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1101'.
[  211.745531][ T9621] veth1_vlan: entered promiscuous mode
[  211.841536][ T9621] veth0_macvtap: entered promiscuous mode
[  211.889823][ T9621] veth1_macvtap: entered promiscuous mode
[  211.951461][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.951677][ T9850] sock: sock_set_timeout: `syz.5.1105' (pid 9850) tries to set negative timeout
[  211.994198][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.001875][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1105'.
[  212.122813][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.140687][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.202205][ T9855] wg1 speed is unknown, defaulting to 1000
[  212.207995][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.229754][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.270866][ T9855] hsr0 speed is unknown, defaulting to 1000
[  212.292758][ T9863] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1109'.
[  212.472739][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1110'.
[  212.482385][ T9483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.491830][ T9483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.645303][ T9485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.653192][ T9485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.784907][ T5849] Bluetooth: hci6: command tx timeout
[  212.828281][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1115'.
[  212.848081][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'.
[  212.886985][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1115'.
[  212.905218][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'.
[  213.177461][ T9899] macsec1: entered promiscuous mode
[  213.182739][ T9899] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  213.186443][ T9895] sctp: [Deprecated]: syz.5.1118 (pid 9895) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.186443][ T9895] Use struct sctp_sack_info instead
[  213.204764][ T9899] macsec1: entered allmulticast mode
[  213.212427][ T9899] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  213.383813][ T9902] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.479296][ T9906] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.496005][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1121'.
[  213.533091][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'.
[  213.966633][ T9920] geneve2: entered promiscuous mode
[  214.011331][ T9920] geneve2: entered allmulticast mode
[  214.167423][ T9938] netlink: 'syz.6.1129': attribute type 1 has an invalid length.
[  214.189146][ T9941] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  214.284167][ T9946] wg1 speed is unknown, defaulting to 1000
[  214.305775][ T9937] pim6reg1: entered allmulticast mode
[  214.329235][ T9946] hsr0 speed is unknown, defaulting to 1000
[  214.581234][ T9959] smc: net device bond0 applied user defined pnetid SYZ
[  214.864527][ T5849] Bluetooth: hci6: command tx timeout
[  215.010652][ T9975] vlan2: entered allmulticast mode
[  215.016084][ T9975] bridge_slave_1: entered allmulticast mode
[  215.588814][T10000] macvlan3: entered promiscuous mode
[  215.594190][T10000] macvlan3: entered allmulticast mode
[  215.888519][T10016] tap0: tun_chr_ioctl cmd 1074812118
[  215.951636][T10025] netlink: 'syz.3.1149': attribute type 10 has an invalid length.
[  215.955466][T10015] wg1 speed is unknown, defaulting to 1000
[  216.010149][T10015] hsr0 speed is unknown, defaulting to 1000
[  216.427131][T10040] SET target dimension over the limit!
[  216.462705][T10043] ip6gre2: entered allmulticast mode
[  216.684035][T10053] netlink: 'syz.2.1160': attribute type 23 has an invalid length.
[  216.827682][T10058] x_tables: duplicate underflow at hook 1
[  217.024737][ T5848] Bluetooth: hci3: command 0x0406 tx timeout
[  217.026784][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  217.030981][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  217.157935][T10078] __nla_validate_parse: 31 callbacks suppressed
[  217.157955][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'.
[  217.408616][T10085] lo: entered promiscuous mode
[  217.434769][T10085] lo: entered allmulticast mode
[  217.448867][T10085] tunl0: entered promiscuous mode
[  217.466359][T10085] tunl0: entered allmulticast mode
[  217.472406][T10085] gre0: entered promiscuous mode
[  217.534476][T10085] gre0: entered allmulticast mode
[  217.553223][T10085] gretap0: entered promiscuous mode
[  217.560834][T10085] gretap0: entered allmulticast mode
[  217.573207][T10085] erspan0: entered promiscuous mode
[  217.582150][T10085] erspan0: entered allmulticast mode
[  217.600257][T10085] ip_vti0: entered promiscuous mode
[  217.610771][T10085] ip_vti0: entered allmulticast mode
[  217.621341][T10085] ip6_vti0: entered promiscuous mode
[  217.633909][T10085] ip6_vti0: entered allmulticast mode
[  217.643808][T10085] sit0: entered promiscuous mode
[  217.653306][T10085] sit0: entered allmulticast mode
[  217.663198][T10085] ip6tnl0: entered promiscuous mode
[  217.673844][T10085] ip6tnl0: entered allmulticast mode
[  217.684218][T10085] ip6gre0: entered promiscuous mode
[  217.693869][T10085] ip6gre0: entered allmulticast mode
[  217.703655][T10085] syz_tun: entered promiscuous mode
[  217.713160][T10085] syz_tun: entered allmulticast mode
[  217.730498][T10085] ip6gretap0: entered promiscuous mode
[  217.748696][T10085] ip6gretap0: entered allmulticast mode
[  217.756021][T10085] bridge0: entered promiscuous mode
[  217.761320][T10085] bridge0: entered allmulticast mode
[  217.768378][T10085] vcan0: entered promiscuous mode
[  217.773451][T10085] vcan0: entered allmulticast mode
[  217.779371][T10085] bond0: entered promiscuous mode
[  217.784921][T10085] bond_slave_0: entered promiscuous mode
[  217.790798][T10085] bond_slave_1: entered promiscuous mode
[  217.798440][T10085] bond0: entered allmulticast mode
[  217.803590][T10085] bond_slave_0: entered allmulticast mode
[  217.809370][T10085] bond_slave_1: entered allmulticast mode
[  217.817302][T10085] team0: entered promiscuous mode
[  217.822393][T10085] team_slave_0: entered promiscuous mode
[  217.829201][T10085] team_slave_1: entered promiscuous mode
[  217.835255][T10085] team0: entered allmulticast mode
[  217.840393][T10085] team_slave_0: entered allmulticast mode
[  217.846863][T10085] team_slave_1: entered allmulticast mode
[  217.859094][T10085] dummy0: entered promiscuous mode
[  217.864265][T10085] dummy0: entered allmulticast mode
[  217.870474][T10085] nlmon0: entered promiscuous mode
[  217.876072][T10085] nlmon0: entered allmulticast mode
[  217.882292][T10085] caif0: entered promiscuous mode
[  217.887902][T10085] caif0: entered allmulticast mode
[  217.893054][T10085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  217.932796][T10094] veth1_vlan: left allmulticast mode
[  217.947387][T10094] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  217.974566][T10094] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  217.996965][T10094] ip6gre1: left allmulticast mode
[  218.007883][T10094] geneve2: left allmulticast mode
[  218.016837][T10094] macvlan3: left promiscuous mode
[  218.022034][T10094] macvlan3: left allmulticast mode
[  218.028217][T10094] ip6gre2: left allmulticast mode
[  218.069284][ T9484] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.095113][ T9484] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.134484][ T9484] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.149483][ T5944] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.291445][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1177'.
[  218.313895][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1179'.
[  218.332380][T10112] syzkaller0: entered promiscuous mode
[  218.338522][T10112] syzkaller0: entered allmulticast mode
[  219.013987][T10143] netlink: 'syz.5.1186': attribute type 10 has an invalid length.
[  219.608857][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1187'.
[  220.449901][T10143] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  220.546867][T10131] wg1 speed is unknown, defaulting to 1000
[  220.599715][T10131] hsr0 speed is unknown, defaulting to 1000
[  220.624915][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'.
[  220.635587][T10160] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1190'.
[  220.647710][T10160] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1190'.
[  220.825788][T10168] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1191'.
[  221.024224][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'.
[  221.035810][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'.
[  221.051284][T10177] TCP: TCP_TX_DELAY enabled
[  221.079412][T10177] ip6gretap1: entered allmulticast mode
[  221.908070][T10229] netlink: 'syz.6.1212': attribute type 1 has an invalid length.
[  222.217838][T10244] __nla_validate_parse: 3 callbacks suppressed
[  222.217860][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1215'.
[  222.664914][T10264] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1225'.
[  222.684591][T10264] netlink: 'syz.5.1225': attribute type 1 has an invalid length.
[  223.088657][T10282] netlink: 'syz.2.1227': attribute type 16 has an invalid length.
[  223.096786][T10282] netlink: 'syz.2.1227': attribute type 17 has an invalid length.
[  223.186339][T10282] erspan0: left promiscuous mode
[  223.212403][T10286] FAULT_INJECTION: forcing a failure.
[  223.212403][T10286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.238786][T10285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1230'.
[  223.293194][T10282] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.302453][T10282] 8021q: adding VLAN 0 to HW filter on device team0
[  223.318146][T10282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.322513][T10291] netlink: 'syz.4.1231': attribute type 1 has an invalid length.
[  223.342063][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.5.1229 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  223.342095][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  223.342109][T10286] Call Trace:
[  223.342117][T10286]  <TASK>
[  223.342126][T10286]  dump_stack_lvl+0x189/0x250
[  223.342166][T10286]  ? __pfx____ratelimit+0x10/0x10
[  223.342200][T10286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.342244][T10286]  ? __pfx__printk+0x10/0x10
[  223.342283][T10286]  should_fail_ex+0x414/0x560
[  223.342316][T10286]  _copy_to_user+0x31/0xb0
[  223.342340][T10286]  bpf_prog_test_run_syscall+0x331/0x4b0
[  223.342372][T10286]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  223.342407][T10286]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  223.342435][T10286]  bpf_prog_test_run+0x2c7/0x340
[  223.342471][T10286]  __sys_bpf+0x4a4/0x860
[  223.342501][T10286]  ? __pfx___sys_bpf+0x10/0x10
[  223.342541][T10286]  ? ksys_write+0x22a/0x250
[  223.342561][T10286]  ? __pfx_ksys_write+0x10/0x10
[  223.342577][T10286]  ? rcu_is_watching+0x15/0xb0
[  223.342619][T10286]  __x64_sys_bpf+0x7c/0x90
[  223.342645][T10286]  do_syscall_64+0xfa/0x3b0
[  223.342665][T10286]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.342696][T10286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.342717][T10286]  ? clear_bhb_loop+0x60/0xb0
[  223.342742][T10286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.342762][T10286] RIP: 0033:0x7f9025f8e929
[  223.342781][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.342800][T10286] RSP: 002b:00007f9026e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  223.342822][T10286] RAX: ffffffffffffffda RBX: 00007f90261b5fa0 RCX: 00007f9025f8e929
[  223.342838][T10286] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a
[  223.342851][T10286] RBP: 00007f9026e36090 R08: 0000000000000000 R09: 0000000000000000
[  223.342864][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.342876][T10286] R13: 0000000000000000 R14: 00007f90261b5fa0 R15: 00007ffe535f3658
[  223.342910][T10286]  </TASK>
[  223.342915][T10285] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  223.362514][T10290] netlink: 'syz.4.1231': attribute type 1 has an invalid length.
[  223.662476][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1232'.
[  223.673003][T10296] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  224.066432][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1238'.
[  224.322568][T10331] Dead loop on virtual device ip6_vti0, fix it urgently!
[  224.942963][T10356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'.
[  225.252761][T10366] netlink: 'syz.4.1254': attribute type 1 has an invalid length.
[  225.331216][T10366] netlink: 'syz.4.1254': attribute type 1 has an invalid length.
[  226.547492][T10406] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  226.645824][T10406] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  226.895743][T10414] wg1 speed is unknown, defaulting to 1000
[  226.903506][T10414] hsr0 speed is unknown, defaulting to 1000
[  226.970080][T10425] netlink: 'syz.5.1271': attribute type 7 has an invalid length.
[  227.007061][T10427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1273'.
[  227.066994][T10429] netlink: 'syz.6.1272': attribute type 1 has an invalid length.
[  227.205368][T10429] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.456578][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'.
[  227.494659][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1280'.
[  227.531277][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1280'.
[  227.684226][T10459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1284'.
[  227.713313][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'.
[  227.738060][T10459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1284'.
[  227.786513][T10462] team0: Refused to change device type
[  228.141700][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  228.199873][T10480] netlink: 'syz.5.1291': attribute type 1 has an invalid length.
[  228.234560][T10480] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1291'.
[  228.305815][T10487] netlink: 'syz.4.1292': attribute type 11 has an invalid length.
[  228.674113][T10498] tipc: Started in network mode
[  228.679349][T10498] tipc: Node identity 5adef889adff, cluster identity 4711
[  228.688851][T10498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.707496][T10498] syzkaller0: entered promiscuous mode
[  228.715199][T10498] syzkaller0: entered allmulticast mode
[  228.721590][T10498] tipc: Resetting bearer <eth:syzkaller0>
[  228.748224][ T9485] tipc: Resetting bearer <eth:syzkaller0>
[  228.770403][T10492] tipc: Resetting bearer <eth:syzkaller0>
[  228.780598][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'.
[  228.819459][T10492] tipc: Disabling bearer <eth:syzkaller0>
[  228.887889][T10502] ipvlan3: entered promiscuous mode
[  229.401596][T10529] bond0: (slave wlan1): Releasing backup interface
[  229.579763][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1307'.
[  229.712903][T10545] wg1 speed is unknown, defaulting to 1000
[  229.769789][T10545] hsr0 speed is unknown, defaulting to 1000
[  229.769829][T10550] netlink: 'syz.4.1310': attribute type 12 has an invalid length.
[  230.120624][ T9483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.139508][ T9483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.450876][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.460297][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.232594][T10597] Cannot find set identified by id 0 to match
[  231.557785][T10607] wg1 speed is unknown, defaulting to 1000
[  231.580101][T10607] hsr0 speed is unknown, defaulting to 1000
[  232.445317][T10637] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  232.760593][T10652] __nla_validate_parse: 3 callbacks suppressed
[  232.760614][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'.
[  232.826261][T10654] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  232.855202][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'.
[  232.893779][T10654] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1340'.
[  232.989068][T10660] bridge5: entered promiscuous mode
[  233.110284][   T30] audit: type=1800 audit(1750344089.309:6): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1341" name="cgroup.controllers" dev="tmpfs" ino=1619 res=0 errno=0
[  233.622009][T10678] syzkaller0: entered promiscuous mode
[  233.648081][T10678] syzkaller0: entered allmulticast mode
[  233.924916][T10695] netlink: 'syz.3.1352': attribute type 15 has an invalid length.
[  233.945526][T10695] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1352'.
[  233.973228][T10695] netlink: 'syz.3.1352': attribute type 1 has an invalid length.
[  233.988060][T10695] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1352'.
[  234.013466][T10695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'.
[  234.208777][T10714] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  234.954567][ T5849] Bluetooth: hci6: command 0x0405 tx timeout
[  235.423060][T10737] xt_CT: No such helper "pptp"
[  236.349963][T10749] openvswitch: netlink: IPv4 tunnel dst address is zero
[  236.364037][T10750] netlink: 'syz.5.1370': attribute type 21 has an invalid length.
[  236.404684][T10750] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1370'.
[  236.416978][T10745] x_tables: ip_tables: osf match: only valid for protocol 6
[  236.521951][T10751] wg1 speed is unknown, defaulting to 1000
[  236.555362][T10751] hsr0 speed is unknown, defaulting to 1000
[  236.790582][T10764] netlink: 'syz.5.1377': attribute type 4 has an invalid length.
[  237.143701][T10781] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1380'.
[  237.153778][T10784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.162673][T10784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.171285][T10784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.181116][T10784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.190236][T10784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.193824][T10781] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1380'.
[  237.217993][T10781] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1380'.
[  237.258324][T10783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.719397][T10799] netlink: 'syz.5.1386': attribute type 10 has an invalid length.
[  237.754153][T10802] IPVS: ip_vs_add_dest(): server weight less than zero
[  237.762741][T10799] veth1_vlan: entered allmulticast mode
[  237.813812][T10799] team0: Device veth1_vlan failed to register rx_handler
[  238.082153][T10818] __nla_validate_parse: 1 callbacks suppressed
[  238.082175][T10818] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1391'.
[  238.177566][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1393'.
[  238.345731][T10827] bond0: (slave wlan1): Releasing backup interface
[  238.427029][T10827] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  238.532204][T10842] ipvlan2: entered promiscuous mode
[  238.709807][T10848] netlink: 'syz.6.1401': attribute type 4 has an invalid length.
[  238.731427][T10849] IPVS: ip_vs_add_dest(): server weight less than zero
[  238.738756][ T5925] IPVS: starting estimator thread 0...
[  238.774013][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'.
[  238.881159][T10850] IPVS: using max 28 ests per chain, 67200 per kthread
[  238.928971][T10861] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1406'.
[  238.960248][T10857] Set syz1 is full, maxelem 0 reached
[  239.026662][ T5849] Bluetooth: hci6: command 0x0405 tx timeout
[  239.132628][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1408'.
[  239.279470][T10877] pimreg: left allmulticast mode
[  239.370036][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1409'.
[  239.565794][T10891] netlink: 'syz.2.1413': attribute type 12 has an invalid length.
[  239.613093][T10891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.622573][T10891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.644533][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'.
[  239.691204][T10894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1413'.
[  240.347915][T10908] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  240.533358][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1424'.
[  240.622884][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'.
[  241.744633][ T5924] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec
[  241.895968][T10981] netlink: 'syz.2.1439': attribute type 10 has an invalid length.
[  241.933869][T10981] bond0: (slave wlan1): refused to change device type
[  241.953014][T10989] bridge2: entered allmulticast mode
[  242.445044][T11010] netlink: 'syz.4.1445': attribute type 13 has an invalid length.
[  242.506046][T11010] net_ratelimit: 1824 callbacks suppressed
[  242.506061][T11010] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  242.576039][T11011] wg1 speed is unknown, defaulting to 1000
[  242.598300][T11011] hsr0 speed is unknown, defaulting to 1000
[  242.784963][T11027] netlink: 'syz.3.1448': attribute type 1 has an invalid length.
[  243.079061][T11035] netlink: 'syz.4.1452': attribute type 1 has an invalid length.
[  243.159881][T11034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.193204][T11034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.326876][T11040] __nla_validate_parse: 9 callbacks suppressed
[  243.326895][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1454'.
[  243.375523][T11034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.391382][T11034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.502728][T11034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.541313][T11034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.716685][T11034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.736820][T11034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.057787][T11075] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1463'.
[  244.214802][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'.
[  244.228525][T11080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1465'.
[  244.261836][T11080] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1465'.
[  244.271305][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  244.286119][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.309880][T11083] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1466'.
[  244.363686][ T1152] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  244.372550][ T1152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.395823][ T1152] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  244.404695][ T1152] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.455343][ T1152] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  244.463743][ T1152] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.836189][T11094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1470'.
[  244.959377][T11096] netlink: 'syz.3.1471': attribute type 29 has an invalid length.
[  245.178877][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'.
[  245.225025][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'.
[  245.234253][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'.
[  245.333714][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.700099][T11131] delete_channel: no stack
[  245.756406][T11131] wg1 speed is unknown, defaulting to 1000
[  245.777544][T11127] netlink: 'syz.5.1482': attribute type 13 has an invalid length.
[  245.780179][T11131] hsr0 speed is unknown, defaulting to 1000
[  245.804715][T11127] netlink: 'syz.5.1482': attribute type 17 has an invalid length.
[  245.891784][T11127] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  245.930943][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.634210][T11159] wg1 speed is unknown, defaulting to 1000
[  246.701447][T11159] hsr0 speed is unknown, defaulting to 1000
[  247.283401][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.311031][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.351965][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.406668][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.442506][T11191] tipc: Cannot configure node identity twice
[  247.449102][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.449380][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.550325][T11184] net_ratelimit: 70 callbacks suppressed
[  247.550345][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.604496][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.621231][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.647866][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.682785][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.705018][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.733762][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.754187][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.765606][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.784791][T11184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.928314][T11212] netlink: 'syz.4.1507': attribute type 13 has an invalid length.
[  248.121725][T11214] netlink: 'syz.3.1509': attribute type 1 has an invalid length.
[  249.027467][T11198] veth1_vlan: left allmulticast mode
[  249.357380][T11198] bridge1: left allmulticast mode
[  249.377759][T11198] gretap0: left allmulticast mode
[  249.383124][T11198] macsec1: left promiscuous mode
[  249.394802][T11198] macsec1: left allmulticast mode
[  249.404737][T11198] batman_adv: batadv0: Interface deactivated: macsec2
[  249.412093][T11198] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[  249.419425][T11198] macsec2: left allmulticast mode
[  249.444055][T11198] geneve2: left promiscuous mode
[  249.449490][T11198] geneve2: left allmulticast mode
[  249.455815][T11198] vlan2: left allmulticast mode
[  249.460945][T11198] bridge_slave_1: left allmulticast mode
[  249.468157][T11198] ip6gretap1: left allmulticast mode
[  249.567713][T11215] bond1: (slave gretap1): making interface the new active one
[  249.588600][T11215] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  249.600429][T11232] __nla_validate_parse: 67 callbacks suppressed
[  249.600451][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'.
[  249.664343][ T5944] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.698215][T11205] wg1 speed is unknown, defaulting to 1000
[  249.704191][ T5944] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.734640][T11205] hsr0 speed is unknown, defaulting to 1000
[  249.740726][ T5944] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.769689][ T5944] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.425980][T11270] xt_TCPMSS: Only works on TCP SYN packets
[  250.615853][T11277] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1524'.
[  250.672255][T11284] netlink: 'syz.5.1523': attribute type 12 has an invalid length.
[  250.698903][T11284] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.1523'.
[  250.996979][T11271] 0ªX¹¦À: left allmulticast mode
[  251.029350][T11271] geneve1: left promiscuous mode
[  251.035448][T11271] geneve1: left allmulticast mode
[  251.142964][T11271] vti0: left promiscuous mode
[  251.175528][T11271] vxlan0: left promiscuous mode
[  251.180453][T11271] vxlan0: left allmulticast mode
[  251.213451][T11271] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  251.234749][T11271] macsec1: left promiscuous mode
[  251.239752][T11271] macsec1: left allmulticast mode
[  251.309525][ T9485] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.341076][ T9485] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.373355][ T9485] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.394364][ T9485] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.421275][ T9485] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.431715][ T9485] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.452250][ T9485] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.470153][ T9485] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.518239][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'.
[  251.664194][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'.
[  251.819585][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'.
[  251.829545][ T5832] Bluetooth: hci6: command 0x0405 tx timeout
[  251.838544][T11318] netlink: 'syz.4.1535': attribute type 33 has an invalid length.
[  251.862664][T11318] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1535'.
[  251.916759][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'.
[  251.927876][T11318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.935170][T11318] IPv6: NLM_F_CREATE should be set when creating new route
[  251.935964][T11326] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1537'.
[  251.942457][T11318] IPv6: NLM_F_CREATE should be set when creating new route
[  252.044743][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'.
[  252.504801][T11353] netlink: 'syz.5.1546': attribute type 3 has an invalid length.
[  252.513545][T11353] netlink: 'syz.5.1546': attribute type 3 has an invalid length.
[  252.760632][T11366] xt_hashlimit: size too large, truncated to 1048576
[  252.776746][T11366] xt_hashlimit: max too large, truncated to 1048576
[  253.155639][T11380] nbd3: detected capacity change from 0 to 63
[  253.162930][T11382] block nbd3: NBD_DISCONNECT
[  253.170287][T11382] block nbd3: Disconnected due to user request.
[  253.178462][T11382] block nbd3: shutting down sockets
[  253.467173][T11389] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  253.718771][T11398] vlan3: entered promiscuous mode
[  253.724737][T11398] vlan3: entered allmulticast mode
[  253.729990][T11398] hsr_slave_1: entered allmulticast mode
[  253.743137][T11396] wg1 speed is unknown, defaulting to 1000
[  253.760935][T11396] hsr0 speed is unknown, defaulting to 1000
[  254.110316][T11404] wg1 speed is unknown, defaulting to 1000
[  254.118621][T11404] hsr0 speed is unknown, defaulting to 1000
[  254.329182][T11408] net_ratelimit: 940 callbacks suppressed
[  254.329205][T11408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.378779][T11412] netlink: 'syz.4.1562': attribute type 5 has an invalid length.
[  254.718175][T11428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.776137][T11419] wg1 speed is unknown, defaulting to 1000
[  254.816098][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.851685][T11419] hsr0 speed is unknown, defaulting to 1000
[  254.978405][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.019133][T11441] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  255.046126][T11443] __nla_validate_parse: 16 callbacks suppressed
[  255.046142][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1573'.
[  255.073448][T11443] batadv0: entered promiscuous mode
[  255.082693][T11443] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.091650][T11443] batadv0: left promiscuous mode
[  255.182330][T11446] wg1 speed is unknown, defaulting to 1000
[  255.207034][T11446] hsr0 speed is unknown, defaulting to 1000
[  255.207439][T11448] netlink: 'syz.5.1572': attribute type 1 has an invalid length.
[  255.336356][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1572'.
[  255.584957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.005186][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'.
[  256.041113][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'.
[  256.063217][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'.
[  256.095961][T11470] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1579'.
[  256.131507][T11470] netlink: 'syz.5.1579': attribute type 10 has an invalid length.
[  256.143574][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1579'.
[  256.168101][T11470] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  256.363882][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'.
[  256.430882][T11482] wg1 speed is unknown, defaulting to 1000
[  256.440759][T11482] hsr0 speed is unknown, defaulting to 1000
[  256.665577][T11493] netlink: 'syz.3.1584': attribute type 5 has an invalid length.
[  256.715755][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1584'.
[  256.839972][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'.
[  257.060805][T11497] syzkaller1: entered promiscuous mode
[  257.075659][T11497] syzkaller1: entered allmulticast mode
[  257.227852][T11504] netlink: 'syz.4.1587': attribute type 6 has an invalid length.
[  257.481136][T11507] bond0: entered promiscuous mode
[  257.511307][T11507] bond_slave_0: entered promiscuous mode
[  257.540375][T11507] batadv0: entered promiscuous mode
[  257.554844][T11507] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  257.586775][T11513] team0: Device is already in use.
[  257.664783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.747888][T11523] netlink: 'syz.4.1593': attribute type 1 has an invalid length.
[  257.819972][T11523] 8021q: adding VLAN 0 to HW filter on device bond4
[  257.881436][T11524] vlan3: entered promiscuous mode
[  257.896787][T11524] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  257.904096][T11524] vlan3: entered allmulticast mode
[  257.929350][T11524] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  257.982071][T11535] syzkaller1: entered promiscuous mode
[  257.989032][T11535] syzkaller1: entered allmulticast mode
[  258.217973][T11542] 8021q: adding VLAN 0 to HW filter on device bond3
[  258.444724][T11561] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004
[  258.855946][T11573] netlink: 'syz.3.1609': attribute type 1 has an invalid length.
[  259.049499][T11583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.070386][T11583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.089903][T11583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.109364][T11583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.140095][T11583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.164887][T11585] netlink: 'syz.2.1612': attribute type 4 has an invalid length.
[  259.694449][T11603] 8021q: adding VLAN 0 to HW filter on device bond3
[  259.720125][T11608] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  260.192957][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  260.202098][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  260.211618][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  260.221877][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  260.230731][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  260.290130][T11626] wg1 speed is unknown, defaulting to 1000
[  260.298123][T11626] hsr0 speed is unknown, defaulting to 1000
[  260.383797][T11631] netlink: 'syz.4.1626': attribute type 6 has an invalid length.
[  260.418069][T11631] netlink: 'syz.4.1626': attribute type 7 has an invalid length.
[  260.430509][T11631] __nla_validate_parse: 14 callbacks suppressed
[  260.430528][T11631] netlink: 13182 bytes leftover after parsing attributes in process `syz.4.1626'.
[  260.478821][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1626'.
[  260.613483][T11639] xt_TCPMSS: Only works on TCP SYN packets
[  260.764137][T11651] mac80211_hwsim hwsim7 
: renamed from wlan1
[  260.860440][T11642] wg1 speed is unknown, defaulting to 1000
[  260.861056][T11626] chnl_net:caif_netlink_parms(): no params data found
[  260.930712][T11642] hsr0 speed is unknown, defaulting to 1000
[  261.039504][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1633'.
[  261.441288][T11673] netlink: 'syz.3.1636': attribute type 39 has an invalid length.
[  261.984208][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'.
[  262.003366][T11685] netlink: 'syz.4.1639': attribute type 30 has an invalid length.
[  262.011774][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'.
[  262.039619][T11626] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.047237][T11626] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.065016][T11626] bridge_slave_0: entered allmulticast mode
[  262.074061][T11626] bridge_slave_0: entered promiscuous mode
[  262.107875][T11626] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.124756][T11626] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.132125][T11626] bridge_slave_1: entered allmulticast mode
[  262.166770][T11626] bridge_slave_1: entered promiscuous mode
[  262.271025][T11626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.305720][T11626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.315316][ T5832] Bluetooth: hci7: command tx timeout
[  262.338430][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'.
[  262.509688][T11626] team0: Port device team_slave_0 added
[  262.538115][T11626] team0: Port device team_slave_1 added
[  262.644585][T11698] tipc: Started in network mode
[  262.657591][T11698] tipc: Node identity 4, cluster identity 4711
[  262.663841][T11698] tipc: Node number set to 4
[  262.939325][T11626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.983442][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.046680][T11626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.069675][T11626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.078118][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.116201][T11626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.146582][T11695] wg1 speed is unknown, defaulting to 1000
[  263.257068][T11695] hsr0 speed is unknown, defaulting to 1000
[  263.297647][T11626] hsr_slave_0: entered promiscuous mode
[  263.343650][T11626] hsr_slave_1: entered promiscuous mode
[  263.375811][T11626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.383606][T11626] Cannot create hsr debugfs directory
[  264.258500][T11626] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  264.305721][T11626] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  264.339819][T11626] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  264.376147][T11626] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  264.384817][ T5832] Bluetooth: hci7: command tx timeout
[  264.649126][T11751] netlink: 'syz.3.1655': attribute type 1 has an invalid length.
[  264.701604][T11751] netlink: 'syz.3.1655': attribute type 1 has an invalid length.
[  264.775175][T11626] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.886128][T11626] 8021q: adding VLAN 0 to HW filter on device team0
[  264.915209][T11753] netlink: 'syz.2.1657': attribute type 2 has an invalid length.
[  264.925348][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.932513][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.940686][T11753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'.
[  265.008744][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.015986][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.212511][T11626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  265.771327][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.799362][T11779] net_ratelimit: 116 callbacks suppressed
[  265.799386][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.880167][T11779] macsec1: entered allmulticast mode
[  265.894096][T11779] macsec0: entered allmulticast mode
[  265.963954][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'.
[  265.999190][T11785] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1663'.
[  266.218253][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'.
[  266.252681][T11793] tc_dump_action: action bad kind
[  266.347294][T11626] veth0_vlan: entered promiscuous mode
[  266.371536][T11626] veth1_vlan: entered promiscuous mode
[  266.468105][T11626] veth0_macvtap: entered promiscuous mode
[  266.474741][ T5832] Bluetooth: hci7: command tx timeout
[  266.493214][T11626] veth1_macvtap: entered promiscuous mode
[  266.607829][T11800] wg1 speed is unknown, defaulting to 1000
[  266.621085][T11626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.657645][T11626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.690491][T11800] hsr0 speed is unknown, defaulting to 1000
[  266.706909][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.731958][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.785240][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.794093][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.381310][ T9484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.394792][ T9484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.546840][ T9484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.589749][ T9484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.217267][T11841] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1677'.
[  268.264028][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1677'.
[  268.266061][T11844] netlink: 'syz.2.1678': attribute type 10 has an invalid length.
[  268.377976][T11844] netlink: 'syz.2.1678': attribute type 10 has an invalid length.
[  268.387039][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1678'.
[  268.550602][ T5832] Bluetooth: hci7: command tx timeout
[  268.750173][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1685'.
[  268.809821][T11868] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1685'.
[  269.260723][T11881] batadv_slave_0: entered promiscuous mode
[  269.355481][T11885] netlink: 'syz.3.1692': attribute type 4 has an invalid length.
[  269.648239][T11900] netlink: 'syz.7.1695': attribute type 3 has an invalid length.
[  269.656744][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1695'.
[  269.924062][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1700'.
[  270.004093][T11910] $Hÿ: renamed from bond0
[  270.025222][T11910] $Hÿ: entered promiscuous mode
[  270.423889][T11939] FAULT_INJECTION: forcing a failure.
[  270.423889][T11939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.478311][T11939] CPU: 1 UID: 0 PID: 11939 Comm: syz.7.1707 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  270.478346][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  270.478360][T11939] Call Trace:
[  270.478369][T11939]  <TASK>
[  270.478379][T11939]  dump_stack_lvl+0x189/0x250
[  270.478419][T11939]  ? __pfx____ratelimit+0x10/0x10
[  270.478453][T11939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.478498][T11939]  ? __pfx__printk+0x10/0x10
[  270.478523][T11939]  ? __might_fault+0xb0/0x130
[  270.478557][T11939]  should_fail_ex+0x414/0x560
[  270.478590][T11939]  _copy_from_user+0x2d/0xb0
[  270.478612][T11939]  ___sys_sendmsg+0x158/0x2a0
[  270.478648][T11939]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.478721][T11939]  ? __fget_files+0x2a/0x420
[  270.478745][T11939]  ? __fget_files+0x3a0/0x420
[  270.478781][T11939]  __x64_sys_sendmsg+0x19b/0x260
[  270.478817][T11939]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.478859][T11939]  ? __pfx_ksys_write+0x10/0x10
[  270.478877][T11939]  ? rcu_is_watching+0x15/0xb0
[  270.478915][T11939]  ? do_syscall_64+0xbe/0x3b0
[  270.478941][T11939]  do_syscall_64+0xfa/0x3b0
[  270.478961][T11939]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.478993][T11939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.479014][T11939]  ? clear_bhb_loop+0x60/0xb0
[  270.479041][T11939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.479061][T11939] RIP: 0033:0x7ff61cf8e929
[  270.479081][T11939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.479099][T11939] RSP: 002b:00007ff61dda2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.479123][T11939] RAX: ffffffffffffffda RBX: 00007ff61d1b5fa0 RCX: 00007ff61cf8e929
[  270.479139][T11939] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003
[  270.479153][T11939] RBP: 00007ff61dda2090 R08: 0000000000000000 R09: 0000000000000000
[  270.479167][T11939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.479179][T11939] R13: 0000000000000000 R14: 00007ff61d1b5fa0 R15: 00007ffe143aa1f8
[  270.479214][T11939]  </TASK>
[  270.819166][T11949] netlink: 'syz.7.1710': attribute type 9 has an invalid length.
[  270.917408][T11949] bridge0: entered promiscuous mode
[  270.959490][T11957] Cannot find del_set index 65533 as target
[  270.966600][T11949] macvlan2: entered promiscuous mode
[  270.972116][T11949] macvlan2: entered allmulticast mode
[  270.990241][T11957] netlink: 'syz.3.1712': attribute type 1 has an invalid length.
[  271.011125][T11949] bridge0: entered allmulticast mode
[  271.209856][T11965] __nla_validate_parse: 3 callbacks suppressed
[  271.209877][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1717'.
[  271.438256][T11975] netlink: 'syz.5.1720': attribute type 39 has an invalid length.
[  271.475680][T11977] FAULT_INJECTION: forcing a failure.
[  271.475680][T11977] name failslab, interval 1, probability 0, space 0, times 0
[  271.508274][T11978] netlink: 'syz.7.1719': attribute type 142 has an invalid length.
[  271.539731][T11977] CPU: 1 UID: 0 PID: 11977 Comm: syz.2.1721 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  271.539764][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  271.539777][T11977] Call Trace:
[  271.539786][T11977]  <TASK>
[  271.539796][T11977]  dump_stack_lvl+0x189/0x250
[  271.539835][T11977]  ? __pfx____ratelimit+0x10/0x10
[  271.539870][T11977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.539902][T11977]  ? __pfx__printk+0x10/0x10
[  271.539932][T11977]  ? __pfx___might_resched+0x10/0x10
[  271.539970][T11977]  should_fail_ex+0x414/0x560
[  271.540008][T11977]  should_failslab+0xa8/0x100
[  271.540033][T11977]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  271.540055][T11977]  ? __alloc_skb+0x112/0x2d0
[  271.540086][T11977]  __alloc_skb+0x112/0x2d0
[  271.540141][T11977]  netlink_sendmsg+0x5c6/0xb30
[  271.540180][T11977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.540210][T11977]  ? aa_sock_msg_perm+0x94/0x160
[  271.540240][T11977]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.540267][T11977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.540293][T11977]  __sock_sendmsg+0x219/0x270
[  271.540320][T11977]  ____sys_sendmsg+0x505/0x830
[  271.540356][T11977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.540404][T11977]  ? import_iovec+0x74/0xa0
[  271.540429][T11977]  ___sys_sendmsg+0x21f/0x2a0
[  271.540463][T11977]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.540537][T11977]  ? __fget_files+0x2a/0x420
[  271.540559][T11977]  ? __fget_files+0x3a0/0x420
[  271.540593][T11977]  __x64_sys_sendmsg+0x19b/0x260
[  271.540628][T11977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.540670][T11977]  ? __pfx_ksys_write+0x10/0x10
[  271.540687][T11977]  ? rcu_is_watching+0x15/0xb0
[  271.540726][T11977]  ? do_syscall_64+0xbe/0x3b0
[  271.540752][T11977]  do_syscall_64+0xfa/0x3b0
[  271.540771][T11977]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.540803][T11977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.540823][T11977]  ? clear_bhb_loop+0x60/0xb0
[  271.540850][T11977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.540871][T11977] RIP: 0033:0x7fc3add8e929
[  271.540890][T11977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.540909][T11977] RSP: 002b:00007fc3aec28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.540932][T11977] RAX: ffffffffffffffda RBX: 00007fc3adfb5fa0 RCX: 00007fc3add8e929
[  271.540948][T11977] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003
[  271.540961][T11977] RBP: 00007fc3aec28090 R08: 0000000000000000 R09: 0000000000000000
[  271.540974][T11977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.540986][T11977] R13: 0000000000000000 R14: 00007fc3adfb5fa0 R15: 00007ffe607b0c78
[  271.541021][T11977]  </TASK>
[  271.546453][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1719'.
[  272.306657][T11994] netlink: 'syz.3.1725': attribute type 1 has an invalid length.
[  272.344673][T11994] netlink: 'syz.3.1725': attribute type 3 has an invalid length.
[  272.352464][T11994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1725'.
[  272.502793][T11994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1725'.
[  272.798807][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1734'.
[  272.942377][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'.
[  272.953485][T12029] pim6reg: entered allmulticast mode
[  273.284948][T12032] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0
[  273.535939][T12038] wg1 speed is unknown, defaulting to 1000
[  273.543623][T12038] hsr0 speed is unknown, defaulting to 1000
[  274.133716][T12070] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  274.164487][T12069] IPVS: ip_vs_add_dest(): server weight less than zero
[  274.291602][T12066] wg1 speed is unknown, defaulting to 1000
[  274.387113][T12066] hsr0 speed is unknown, defaulting to 1000
[  274.452506][T12077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.555777][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'.
[  274.760251][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1752'.
[  274.829605][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'.
[  275.295672][T12108] validate_nla: 2 callbacks suppressed
[  275.295692][T12108] netlink: 'syz.3.1758': attribute type 10 has an invalid length.
[  275.358699][T12108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1758'.
[  275.430718][T12108] team0: entered promiscuous mode
[  275.523252][T12108] team_slave_0: entered promiscuous mode
[  275.576239][T12108] team_slave_1: entered promiscuous mode
[  275.584035][T12108] team0: entered allmulticast mode
[  275.644975][T12108] team_slave_0: entered allmulticast mode
[  275.650786][T12108] team_slave_1: entered allmulticast mode
[  275.705248][T12108] bridge0: port 3(team0) entered blocking state
[  275.717424][T12108] bridge0: port 3(team0) entered disabled state
[  276.159037][T12146] netlink: 'syz.4.1767': attribute type 9 has an invalid length.
[  276.191662][T12146] macvlan2: entered promiscuous mode
[  276.230531][T12146] hsr0: entered promiscuous mode
[  276.251443][T12146] macvlan2: entered allmulticast mode
[  276.287063][T12146] hsr0: entered allmulticast mode
[  276.292163][T12146] hsr_slave_0: entered allmulticast mode
[  276.311496][T12146] hsr_slave_1: entered allmulticast mode
[  276.486220][T12166] __nla_validate_parse: 2 callbacks suppressed
[  276.486241][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'.
[  276.522152][T12166] ipvlan2: entered promiscuous mode
[  276.788477][T12180] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1780'.
[  276.908711][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1783'.
[  276.920924][T12186] IPVS: Error joining to the multicast group
[  276.931003][T12186] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1783'.
[  276.953341][T12185] tipc: Failed to remove unknown binding: 66,1,1/0:3558001083/3558001085
[  277.358123][T12204] netlink: 'syz.2.1787': attribute type 10 has an invalid length.
[  277.370342][T12186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.373164][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'.
[  277.397268][T12186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.408551][T12186] bond0 (unregistering): Released all slaves
[  277.504132][T12205] 8021q: adding VLAN 0 to HW filter on device team1
[  277.528784][T12201] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  277.548922][T12206] netlink: 'syz.2.1787': attribute type 2 has an invalid length.
[  277.604685][T12210] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1787'.
[  277.654920][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'.
[  278.138221][T12234] wg1 speed is unknown, defaulting to 1000
[  278.147737][T12234] hsr0 speed is unknown, defaulting to 1000
[  278.465826][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1800'.
[  278.983704][T12288] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1810'.
[  279.096631][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1811'.
[  279.458712][T12301] wg1 speed is unknown, defaulting to 1000
[  279.497856][T12301] hsr0 speed is unknown, defaulting to 1000
[  279.519569][T12310] netlink: 'syz.7.1814': attribute type 4 has an invalid length.
[  280.440488][T12342] nbd: must specify a size in bytes for the device
[  280.601521][T12349] tipc: Enabled bearer <ib:wg2>, priority 22
[  280.608704][T12347] tipc: Enabling of bearer <ib:wg2> rejected, already enabled
[  281.430912][T12384] tipc: Started in network mode
[  281.459657][T12384] tipc: Node identity ac14140f, cluster identity 4711
[  281.478664][T12384] tipc: New replicast peer: 204.227.140.20
[  281.488410][T12384] tipc: Enabled bearer <udp:s>, priority 10
[  281.714467][    T9] tipc: Node number set to 4146198665
[  281.729793][T12392] sctp: [Deprecated]: syz.4.1838 (pid 12392) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.729793][T12392] Use struct sctp_sack_info instead
[  281.854065][T12398] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.861871][T12398] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.881223][T12399] __nla_validate_parse: 4 callbacks suppressed
[  281.881246][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1840'.
[  281.924655][T12403] bridge_slave_1: left allmulticast mode
[  281.931106][T12403] bridge_slave_1: left promiscuous mode
[  281.946435][T12403] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.089951][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1840'.
[  282.121617][T12403] bridge_slave_0: left allmulticast mode
[  282.129310][T12403] bridge_slave_0: left promiscuous mode
[  282.137165][T12403] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.150112][T12414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.272825][T12408] _ÐZ`Ô€@ÿÿ: entered promiscuous mode
[  282.604514][ T5925] tipc: Node number set to 2886997007
[  282.801299][T12436] netlink: 'syz.2.1849': attribute type 1 has an invalid length.
[  282.813743][T12436] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1849'.
[  283.093905][T12451] sctp: [Deprecated]: syz.7.1857 (pid 12451) Use of int in max_burst socket option deprecated.
[  283.093905][T12451] Use struct sctp_assoc_value instead
[  283.550585][T12479] tap0: tun_chr_ioctl cmd 1074025677
[  283.570891][T12479] tap0: linktype set to 823
[  283.738737][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1866'.
[  283.954948][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  284.254847][T12518] openvswitch: netlink: Duplicate or invalid key (type 0).
[  284.262351][T12518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.345971][T12510] hsr0 speed is unknown, defaulting to 1000
[  284.477223][T12524] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  285.432936][T12562] ip6tnl2: entered promiscuous mode
[  285.444863][T12562] ip6tnl2: entered allmulticast mode
[  285.725417][T12578] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1889'.
[  285.761125][T12577] hsr0 speed is unknown, defaulting to 1000
[  285.858904][   T30] audit: type=1107 audit(1750344142.059:7): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@�cd$JnyãÒOº^øDØ#�z'
[  285.977100][T12587] hsr0 speed is unknown, defaulting to 1000
[  287.066026][T12638] netlink: 'syz.3.1905': attribute type 10 has an invalid length.
[  287.081459][T12638] bridge0: entered promiscuous mode
[  287.087714][T12634] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1908'.
[  287.119235][T12638] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  287.179507][T12639] bridge0: port 3(team0) entered disabled state
[  287.216022][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1908'.
[  287.246174][T12639] bridge_slave_1: left allmulticast mode
[  287.251966][T12639] bridge_slave_1: left promiscuous mode
[  287.301505][T12639] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.324353][T12646] netlink: 'syz.2.1909': attribute type 21 has an invalid length.
[  287.346065][T12639] ªªªªª@: left allmulticast mode
[  287.358158][T12639] ªªªªª@: left promiscuous mode
[  287.366899][T12639] bridge0: port 1(ªªªªª@) entered disabled state
[  287.462834][T12639] bond0: (slave bridge0): Releasing backup interface
[  287.480772][T12639] bridge0 (unregistering): left promiscuous mode
[  287.544909][T12646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1909'.
[  288.419987][T12687] syz.3.1922: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  288.505216][T12687] CPU: 0 UID: 0 PID: 12687 Comm: syz.3.1922 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  288.505250][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  288.505264][T12687] Call Trace:
[  288.505272][T12687]  <TASK>
[  288.505281][T12687]  dump_stack_lvl+0x189/0x250
[  288.505324][T12687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.505358][T12687]  ? __pfx__printk+0x10/0x10
[  288.505382][T12687]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  288.505405][T12687]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  288.505432][T12687]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  288.505458][T12687]  warn_alloc+0x214/0x310
[  288.505483][T12687]  ? stack_depot_save_flags+0x40/0x900
[  288.505516][T12687]  ? __pfx_warn_alloc+0x10/0x10
[  288.505543][T12687]  ? kasan_save_track+0x4f/0x80
[  288.505577][T12687]  ? xskq_create+0x56/0x170
[  288.505607][T12687]  ? xsk_init_queue+0xb0/0x110
[  288.505634][T12687]  ? xsk_setsockopt+0x43f/0x710
[  288.505660][T12687]  ? do_sock_setsockopt+0x257/0x3e0
[  288.505687][T12687]  ? __x64_sys_setsockopt+0x18b/0x220
[  288.505713][T12687]  ? do_syscall_64+0xfa/0x3b0
[  288.505732][T12687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.505764][T12687]  __vmalloc_node_range_noprof+0x125/0x12f0
[  288.505833][T12687]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  288.505860][T12687]  ? xskq_create+0x56/0x170
[  288.505894][T12687]  ? __kasan_kmalloc+0x93/0xb0
[  288.505919][T12687]  vmalloc_user_noprof+0xad/0xf0
[  288.505943][T12687]  ? xskq_create+0xbf/0x170
[  288.505976][T12687]  xskq_create+0xbf/0x170
[  288.506013][T12687]  xsk_init_queue+0xb0/0x110
[  288.506051][T12687]  xsk_setsockopt+0x43f/0x710
[  288.506086][T12687]  ? __pfx_xsk_setsockopt+0x10/0x10
[  288.506115][T12687]  ? __lock_acquire+0xab9/0xd20
[  288.506157][T12687]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  288.506184][T12687]  ? __pfx_xsk_setsockopt+0x10/0x10
[  288.506216][T12687]  do_sock_setsockopt+0x257/0x3e0
[  288.506249][T12687]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  288.506284][T12687]  ? __fget_files+0x2a/0x420
[  288.506318][T12687]  __x64_sys_setsockopt+0x18b/0x220
[  288.506356][T12687]  do_syscall_64+0xfa/0x3b0
[  288.506375][T12687]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.506407][T12687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.506429][T12687]  ? clear_bhb_loop+0x60/0xb0
[  288.506455][T12687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.506474][T12687] RIP: 0033:0x7f67bf78e929
[  288.506493][T12687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.506511][T12687] RSP: 002b:00007f67c0631038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  288.506532][T12687] RAX: ffffffffffffffda RBX: 00007f67bf9b6080 RCX: 00007f67bf78e929
[  288.506548][T12687] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  288.506560][T12687] RBP: 00007f67bf810b39 R08: 0000000000000004 R09: 0000000000000000
[  288.506573][T12687] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.506586][T12687] R13: 0000000000000000 R14: 00007f67bf9b6080 R15: 00007ffe514b4688
[  288.506620][T12687]  </TASK>
[  288.566041][T12687] Mem-Info:
[  288.577720][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1925'.
[  288.594873][T12687] active_anon:7411 inactive_anon:0 isolated_anon:0
[  288.594873][T12687]  active_file:1740 inactive_file:39915 isolated_file:0
[  288.594873][T12687]  unevictable:768 dirty:118 writeback:0
[  288.594873][T12687]  slab_reclaimable:11569 slab_unreclaimable:139786
[  288.594873][T12687]  mapped:47524 shmem:4232 pagetables:1310
[  288.594873][T12687]  sec_pagetables:0 bounce:0
[  288.594873][T12687]  kernel_misc_reclaimable:0
[  288.594873][T12687]  free:1249213 free_pcp:15838 free_cma:0
[  288.599940][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1925'.
[  288.602590][T12687] Node 0 active_anon:29644kB inactive_anon:0kB active_file:6960kB inactive_file:159460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:190096kB dirty:472kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13632kB pagetables:5100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  288.953258][T12687] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  289.009741][T12687] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  289.045211][T12687] lowmem_reserve[]: 0 2501 2502 2502 2502
[  289.051099][T12687] Node 0 DMA32 free:1085252kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29668kB inactive_anon:0kB active_file:6960kB inactive_file:157620kB unevictable:1536kB writepending:472kB present:3129332kB managed:2561032kB mlocked:0kB bounce:0kB free_pcp:41116kB local_pcp:21408kB free_cma:0kB
[  289.094965][T12687] lowmem_reserve[]: 0 0 1 1 1
[  289.101793][T12687] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  289.140612][T12687] lowmem_reserve[]: 0 0 0 0 0
[  289.153579][T12687] Node 1 Normal free:3897824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19972kB local_pcp:11744kB free_cma:0kB
[  289.210431][T12687] lowmem_reserve[]: 0 0 0 0 0
[  289.251772][T12687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  289.308433][T12687] Node 0 DMA32: 545*4kB (UME) 231*8kB (UME) 86*16kB (UME) 162*32kB (UME) 403*64kB (UME) 364*128kB (UM) 278*256kB (UM) 54*512kB (UME) 38*1024kB (UME) 2*2048kB (M) 210*4096kB (M) = 1084956kB
[  289.337466][T12687] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  289.401979][T12687] Node 1 Normal: 196*4kB (UE) 40*8kB (UME) 35*16kB (UME) 91*32kB (UME) 26*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (UM) = 3897824kB
[  289.483778][T12687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  289.499627][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1928'.
[  289.511732][T12687] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  289.532334][T12687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  289.534694][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1928'.
[  289.545275][T12705] Cannot find add_set index 0 as target
[  289.567058][T12687] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  289.589542][T12687] 45884 total pagecache pages
[  289.602657][T12687] 0 pages in swap cache
[  289.607647][T12704] netlink: 'syz.7.1928': attribute type 11 has an invalid length.
[  289.621994][T12707] netlink: 'syz.4.1929': attribute type 1 has an invalid length.
[  289.644513][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  289.648673][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1930'.
[  289.672922][T12687] Free swap  = 124996kB
[  289.687695][T12687] Total swap = 124996kB
[  289.691925][T12687] 2097051 pages RAM
[  289.715695][T12687] 0 pages HighMem/MovableOnly
[  289.737347][T12687] 424687 pages reserved
[  289.754520][T12687] 0 pages cma reserved
[  289.883257][T12717] netlink: 'syz.7.1931': attribute type 1 has an invalid length.
[  290.649543][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1943'.
[  290.746114][T12755] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  291.323225][T12773] geneve0: entered allmulticast mode
[  291.506681][T12773] vxcan3: entered allmulticast mode
[  292.114879][T12800] __nla_validate_parse: 4 callbacks suppressed
[  292.114900][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1957'.
[  292.355123][T12807] SET target dimension over the limit!
[  292.421189][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'.
[  292.433246][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'.
[  292.442477][T12811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'.
[  292.500649][T12811] vlan0: entered promiscuous mode
[  292.515670][T12813] syzkaller1: entered promiscuous mode
[  292.524525][T12813] syzkaller1: entered allmulticast mode
[  292.669723][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'.
[  293.149330][T12830] vlan0: entered promiscuous mode
[  293.169418][T12828] hsr0 speed is unknown, defaulting to 1000
[  293.189955][T12830] team0: mtu less than device minimum
[  293.383831][T12812] hsr0 speed is unknown, defaulting to 1000
[  293.484215][T12838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  293.491556][T12838] IPv6: NLM_F_CREATE should be set when creating new route
[  293.498901][T12838] IPv6: NLM_F_CREATE should be set when creating new route
[  293.698595][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1970'.
[  294.105596][T12833] siw: device registration error -23
[  295.099020][T12896] bond0: (slave batadv0): Releasing backup interface
[  295.132220][T12896] batadv0: left promiscuous mode
[  295.189875][T12896] bond0: (slave bond_slave_0): Releasing backup interface
[  295.234645][T12896] bond_slave_0: left promiscuous mode
[  295.286273][T12896] team_slave_0: left promiscuous mode
[  295.298906][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'.
[  295.328459][T12896] team_slave_0: left allmulticast mode
[  295.419947][T12896] team0: Port device team_slave_0 removed
[  295.446380][T12896] team_slave_1: left promiscuous mode
[  295.473536][T12896] team_slave_1: left allmulticast mode
[  295.511840][T12896] team0: Port device team_slave_1 removed
[  295.548842][T12896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.599569][T12896] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface
[  295.609916][T12896] netdevsim netdevsim3 ÿÿÿÿÿÿ: left promiscuous mode
[  295.632385][T12896] bond1: (slave gretap1): Releasing active interface
[  295.862102][T12938] openvswitch: netlink: Actions may not be safe on all matching packets
[  295.907456][T12941] netlink: 'syz.2.1991': attribute type 10 has an invalid length.
[  295.947316][T12941] bond0: (slave wlan1): refused to change device type
[  296.071434][T12946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1992'.
[  296.089185][T12946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1992'.
[  296.185745][T12950] syzkaller1: entered promiscuous mode
[  296.191494][T12950] syzkaller1: entered allmulticast mode
[  296.699611][T12979] hsr0 speed is unknown, defaulting to 1000
[  296.735289][T12984] netlink: 'syz.5.2001': attribute type 31 has an invalid length.
[  296.799886][T12984] netlink: 'syz.5.2001': attribute type 2 has an invalid length.
[  297.142531][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'.
[  297.284469][T12997] hsr0 speed is unknown, defaulting to 1000
[  297.452552][T12994] hsr0 speed is unknown, defaulting to 1000
[  297.873849][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'.
[  298.466893][T12994] tipc: Enabling of bearer <ib:wg1> rejected, failed to enable media
[  298.773313][T13055] syzkaller1: entered promiscuous mode
[  298.786234][T13055] syzkaller1: entered allmulticast mode
[  299.263305][T13076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2020'.
[  299.334135][T13078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2020'.
[  299.803394][T13094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2026'.
[  299.857212][T13094] netlink: 'syz.3.2026': attribute type 1 has an invalid length.
[  300.042085][T13100] xt_CT: No such helper "syz0"
[  300.111269][T13110] vlan4: entered allmulticast mode
[  300.128241][T13110] veth1: entered allmulticast mode
[  300.178502][T13104] hsr0 speed is unknown, defaulting to 1000
[  300.194989][T11222] IPVS: starting estimator thread 0...
[  300.229108][T13116] netlink: 'syz.2.2031': attribute type 1 has an invalid length.
[  300.249077][T13116] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2031'.
[  300.284924][T13113] hsr0 speed is unknown, defaulting to 1000
[  300.294801][T13117] IPVS: using max 28 ests per chain, 67200 per kthread
[  300.766554][T13124] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004
[  301.434483][T13166] xt_CT: No such helper "snmp"
[  302.025644][T13202] IPv6: Can't replace route, no match found
[  302.423835][T13218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2060'.
[  302.480560][    T9] hid-generic 0005:0C45:000B.0001: item fetching failed at offset 0/1
[  302.555192][    T9] hid-generic 0005:0C45:000B.0001: probe with driver hid-generic failed with error -22
[  302.677301][T13228] SET target dimension over the limit!
[  302.717932][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'.
[  302.784602][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'.
[  302.912082][T13231] hsr0 speed is unknown, defaulting to 1000
[  303.095411][T13250] netlink: 'syz.2.2069': attribute type 2 has an invalid length.
[  303.121913][T13250] ip6t_srh: unknown srh match flags  5294
[  303.859523][T13274] netlink: 'syz.2.2075': attribute type 11 has an invalid length.
[  304.021095][T13228] hsr0 speed is unknown, defaulting to 1000
[  304.397001][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2077'.
[  304.471469][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2077'.
[  304.552685][T13298] hsr0 speed is unknown, defaulting to 1000
[  304.696253][T13311] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2085'.
[  304.854818][T13316] netlink: 'syz.3.2087': attribute type 2 has an invalid length.
[  305.122289][T13327] tipc: Failed to remove unknown binding: 66,1,1/0:3455678748/3455678750
[  305.401438][T13343] netlink: 'syz.3.2095': attribute type 2 has an invalid length.
[  305.440342][T13343] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2095'.
[  305.501224][T13351] netlink: 'syz.2.2096': attribute type 5 has an invalid length.
[  305.522248][T13351] netlink: 'syz.2.2096': attribute type 7 has an invalid length.
[  305.641600][T13359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.828262][T13367] netlink: 'syz.3.2101': attribute type 2 has an invalid length.
[  305.871880][T13367] : entered promiscuous mode
[  306.001787][T13375] raw_sendmsg: syz.2.2105 forgot to set AF_INET. Fix it!
[  306.277722][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'.
[  306.307735][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'.
[  306.334406][T13390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.512171][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2113'.
[  306.586870][T13405] netlink: 'syz.3.2115': attribute type 21 has an invalid length.
[  306.616082][T13405] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  306.623911][T13405] netlink: 'syz.3.2115': attribute type 5 has an invalid length.
[  306.717420][T13414] 0·: renamed from hsr_slave_1
[  306.793431][T13414] 0·: entered allmulticast mode
[  306.839911][T13414] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  307.287594][T13439] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  307.459634][T13450] __nla_validate_parse: 7 callbacks suppressed
[  307.459655][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'.
[  307.516843][T13451] batadv_slave_1: entered promiscuous mode
[  307.523027][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2129'.
[  307.741816][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'.
[  307.763545][T13470] sctp: [Deprecated]: syz.7.2134 (pid 13470) Use of int in max_burst socket option.
[  307.763545][T13470] Use struct sctp_assoc_value instead
[  307.978207][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'.
[  308.219153][T13444] batadv_slave_1: left promiscuous mode
[  308.948809][T13523] tap0: tun_chr_ioctl cmd 1074025677
[  308.969987][T13523] tap0: linktype set to 1
[  309.245344][T13529] netlink: 'syz.4.2143': attribute type 303 has an invalid length.
[  309.756329][T13546] hsr0 speed is unknown, defaulting to 1000
[  309.960688][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'.
[  310.257417][T13568] hsr0 speed is unknown, defaulting to 1000
[  310.263743][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2157'.
[  310.284426][T13575] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2159'.
[  310.355930][T13578] SET target dimension over the limit!
[  310.378781][T13576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2158'.
[  310.406942][T13578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2157'.
[  310.501442][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'.
[  310.976363][T13610] veth0: entered promiscuous mode
[  311.133353][T13594] veth0: left promiscuous mode
[  311.382957][T13640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.797723][T13663] tipc: MTU too low for tipc bearer
[  311.866855][T13668] netlink: 'syz.7.2180': attribute type 4 has an invalid length.
[  311.893411][T13660] syzkaller0: entered promiscuous mode
[  311.899519][T13660] syzkaller0: entered allmulticast mode
[  312.183010][T13681] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  313.681441][T13666] kthread_run failed with err -4
[  313.690326][T13675] __nla_validate_parse: 5 callbacks suppressed
[  313.690347][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'.
[  313.714476][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2186'.
[  313.723474][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'.
[  313.755602][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2186'.
[  313.765424][T13675] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2186'.
[  314.238179][T13714] veth0: entered promiscuous mode
[  314.289514][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'.
[  314.328495][T13718] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2197'.
[  314.353194][T13716] veth0 (unregistering): left promiscuous mode
[  314.915883][T13735] bridge0: port 1(erspan0) entered blocking state
[  314.926570][T13735] bridge0: port 1(erspan0) entered disabled state
[  314.933352][T13735] erspan0: entered allmulticast mode
[  314.962157][T13735] erspan0: left allmulticast mode
[  314.974027][T13755] xt_TCPMSS: Only works on TCP SYN packets
[  315.151567][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'.
[  315.216380][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'.
[  315.783490][T13767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.826929][T13767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.250265][ T9484] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.279119][ T9484] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.313432][ T9484] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.350276][ T9484] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.393935][T13776] hsr0 speed is unknown, defaulting to 1000
[  316.903157][T13809] xt_bpf: check failed: parse error
[  317.162463][T13825] netlink: 'syz.2.2231': attribute type 1 has an invalid length.
[  317.310421][T13836] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2235'.
[  317.368985][T13825] bond4: entered promiscuous mode
[  317.375251][T13825] 8021q: adding VLAN 0 to HW filter on device bond4
[  317.448608][T13830] geneve3: entered promiscuous mode
[  317.505788][T13846] block nbd0: not configured, cannot reconfigure
[  317.692989][ T9485] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.707749][ T9485] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.744650][ T9485] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.771107][ T9485] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.963878][T13851] hsr0 speed is unknown, defaulting to 1000
[  318.411600][T13869] netlink: 'syz.4.2241': attribute type 13 has an invalid length.
[  318.683911][T13885] netlink: 'syz.3.2245': attribute type 1 has an invalid length.
[  318.695368][T13885] netlink: 'syz.3.2245': attribute type 4 has an invalid length.
[  318.708121][T13881] sch_tbf: burst 5 is lower than device bridge0 mtu (1514) !
[  318.970529][T13897] pimreg: entered allmulticast mode
[  318.983212][T13894] pimreg: left allmulticast mode
[  319.135805][T13904] netlink: 'syz.5.2249': attribute type 10 has an invalid length.
[  319.153792][T13904] __nla_validate_parse: 7 callbacks suppressed
[  319.154116][T13904] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2249'.
[  319.252067][T13904] batman_adv: batadv0: Adding interface: virt_wifi0
[  319.281440][T13904] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.327808][T13904] batman_adv: batadv0: Interface activated: virt_wifi0
[  319.427805][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2255'.
[  319.881930][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2261'.
[  320.017868][T13946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7
[  320.686255][T13972] batadv3: entered allmulticast mode
[  320.705113][T13972] 8021q: adding VLAN 0 to HW filter on device batadv3
[  320.734594][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'.
[  321.050613][T13987] FAULT_INJECTION: forcing a failure.
[  321.050613][T13987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.087229][T13987] CPU: 1 UID: 0 PID: 13987 Comm: syz.4.2278 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  321.087263][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.087292][T13987] Call Trace:
[  321.087300][T13987]  <TASK>
[  321.087310][T13987]  dump_stack_lvl+0x189/0x250
[  321.087349][T13987]  ? __pfx____ratelimit+0x10/0x10
[  321.087382][T13987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.087416][T13987]  ? __pfx__printk+0x10/0x10
[  321.087457][T13987]  should_fail_ex+0x414/0x560
[  321.087489][T13987]  _copy_to_user+0x31/0xb0
[  321.087513][T13987]  simple_read_from_buffer+0xe1/0x170
[  321.087541][T13987]  proc_fail_nth_read+0x1df/0x250
[  321.087570][T13987]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  321.087600][T13987]  ? rw_verify_area+0x258/0x650
[  321.087633][T13987]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  321.087660][T13987]  vfs_read+0x200/0x980
[  321.087710][T13987]  ? __pfx___mutex_lock+0x10/0x10
[  321.087732][T13987]  ? __pfx_vfs_read+0x10/0x10
[  321.087784][T13987]  ? __fget_files+0x2a/0x420
[  321.087813][T13987]  ? __fget_files+0x3a0/0x420
[  321.087835][T13987]  ? __fget_files+0x2a/0x420
[  321.087870][T13987]  ksys_read+0x145/0x250
[  321.087917][T13987]  ? __pfx_ksys_read+0x10/0x10
[  321.087944][T13987]  ? rcu_is_watching+0x15/0xb0
[  321.087981][T13987]  ? do_syscall_64+0xbe/0x3b0
[  321.088004][T13987]  do_syscall_64+0xfa/0x3b0
[  321.088023][T13987]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.088052][T13987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.088072][T13987]  ? clear_bhb_loop+0x60/0xb0
[  321.088097][T13987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.088115][T13987] RIP: 0033:0x7f4cac58d33c
[  321.088134][T13987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  321.088151][T13987] RSP: 002b:00007f4cad47e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  321.088173][T13987] RAX: ffffffffffffffda RBX: 00007f4cac7b5fa0 RCX: 00007f4cac58d33c
[  321.088188][T13987] RDX: 000000000000000f RSI: 00007f4cad47e0a0 RDI: 0000000000000006
[  321.088209][T13987] RBP: 00007f4cad47e090 R08: 0000000000000000 R09: 0000000000000000
[  321.088222][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.088234][T13987] R13: 0000000000000000 R14: 00007f4cac7b5fa0 R15: 00007fff0b81f038
[  321.088269][T13987]  </TASK>
[  321.398013][T13999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  321.975679][T14017] lo: entered promiscuous mode
[  322.016849][T14017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.316507][T14025] netlink: 'syz.4.2287': attribute type 1 has an invalid length.
[  322.437993][T14025] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.566188][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2292'.
[  322.591540][T14034] bond0: (slave gretap1): making interface the new active one
[  322.628885][T14034] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  322.680953][T14041] netem: change failed
[  322.748988][T13989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.896798][T14049] netlink: 15776 bytes leftover after parsing attributes in process `syz.7.2296'.
[  323.587280][T14067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.759299][T14071] hsr0 speed is unknown, defaulting to 1000
[  324.023353][T14077] x_tables: duplicate underflow at hook 1
[  324.142244][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2304'.
[  324.344770][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'.
[  324.355285][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2305'.
[  324.746606][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2310'.
[  324.810599][T14097] hsr_slave_1 (unregistering): left promiscuous mode
[  325.035000][T14112] netlink: 'syz.4.2313': attribute type 10 has an invalid length.
[  325.095308][T14112] mac80211_hwsim hwsim7 
: entered promiscuous mode
[  325.115295][T14112] $Hÿ: (slave 
): Enslaving as an active interface with an up link
[  326.307304][T14152] pim6reg1: entered promiscuous mode
[  326.333051][T14152] pim6reg1: entered allmulticast mode
[  326.502466][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2327'.
[  326.533590][T14161] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2330'.
[  326.650895][T14152] 8021q: adding VLAN 0 to HW filter on device bond4
[  326.683308][T14152] team0: Port device bond4 added
[  327.047316][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'.
[  327.105094][ T9484] 
: Trigger new scan to find an IBSS to join
[  327.315972][T14189] warn_alloc: 1 callbacks suppressed
[  327.315994][T14189] syz.5.2334: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  327.416244][T14189] CPU: 1 UID: 0 PID: 14189 Comm: syz.5.2334 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  327.416302][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  327.416327][T14189] Call Trace:
[  327.416343][T14189]  <TASK>
[  327.416360][T14189]  dump_stack_lvl+0x189/0x250
[  327.416439][T14189]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.416504][T14189]  ? __pfx__printk+0x10/0x10
[  327.416552][T14189]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  327.416598][T14189]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  327.416640][T14189]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  327.416672][T14189]  warn_alloc+0x214/0x310
[  327.416707][T14189]  ? stack_depot_save_flags+0x40/0x900
[  327.416741][T14189]  ? __pfx_warn_alloc+0x10/0x10
[  327.416769][T14189]  ? kasan_save_track+0x4f/0x80
[  327.416803][T14189]  ? xskq_create+0x56/0x170
[  327.416834][T14189]  ? xsk_init_queue+0xb0/0x110
[  327.416863][T14189]  ? xsk_setsockopt+0x43f/0x710
[  327.416891][T14189]  ? do_sock_setsockopt+0x257/0x3e0
[  327.416918][T14189]  ? __x64_sys_setsockopt+0x18b/0x220
[  327.416945][T14189]  ? do_syscall_64+0xfa/0x3b0
[  327.416964][T14189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.416996][T14189]  __vmalloc_node_range_noprof+0x125/0x12f0
[  327.417057][T14189]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  327.417089][T14189]  ? __kasan_kmalloc+0x93/0xb0
[  327.417114][T14189]  vmalloc_user_noprof+0xad/0xf0
[  327.417138][T14189]  ? xskq_create+0xbf/0x170
[  327.417171][T14189]  xskq_create+0xbf/0x170
[  327.417207][T14189]  xsk_init_queue+0xb0/0x110
[  327.417243][T14189]  xsk_setsockopt+0x43f/0x710
[  327.417277][T14189]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.417307][T14189]  ? __lock_acquire+0xab9/0xd20
[  327.417350][T14189]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  327.417377][T14189]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.417410][T14189]  do_sock_setsockopt+0x257/0x3e0
[  327.417444][T14189]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  327.417480][T14189]  ? __fget_files+0x2a/0x420
[  327.417514][T14189]  __x64_sys_setsockopt+0x18b/0x220
[  327.417552][T14189]  do_syscall_64+0xfa/0x3b0
[  327.417571][T14189]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.417604][T14189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.417625][T14189]  ? clear_bhb_loop+0x60/0xb0
[  327.417652][T14189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.417674][T14189] RIP: 0033:0x7f9025f8e929
[  327.417693][T14189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.417720][T14189] RSP: 002b:00007f9026e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.417745][T14189] RAX: ffffffffffffffda RBX: 00007f90261b5fa0 RCX: 00007f9025f8e929
[  327.417761][T14189] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  327.417774][T14189] RBP: 00007f9026010b39 R08: 0000000000000004 R09: 0000000000000000
[  327.417788][T14189] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.417802][T14189] R13: 0000000000000000 R14: 00007f90261b5fa0 R15: 00007ffe535f3658
[  327.417837][T14189]  </TASK>
[  327.417846][T14189] Mem-Info:
[  327.775403][T14189] active_anon:7102 inactive_anon:0 isolated_anon:0
[  327.775403][T14189]  active_file:1796 inactive_file:39929 isolated_file:0
[  327.775403][T14189]  unevictable:768 dirty:253 writeback:0
[  327.775403][T14189]  slab_reclaimable:11515 slab_unreclaimable:140972
[  327.775403][T14189]  mapped:44714 shmem:1382 pagetables:1335
[  327.775403][T14189]  sec_pagetables:0 bounce:0
[  327.775403][T14189]  kernel_misc_reclaimable:0
[  327.775403][T14189]  free:1244992 free_pcp:18997 free_cma:0
[  327.861288][T14197] syzkaller1: entered allmulticast mode
[  327.884327][T14189] Node 0 active_anon:28708kB inactive_anon:0kB active_file:7184kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178856kB dirty:1012kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13624kB pagetables:5300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  327.931933][T14189] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  327.995248][T14189] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  328.029013][T14189] lowmem_reserve[]: 0 2501 2502 2502 2502
[  328.044389][T14189] Node 0 DMA32 free:1066780kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29160kB inactive_anon:0kB active_file:7184kB inactive_file:157676kB unevictable:1536kB writepending:1012kB present:3129332kB managed:2561032kB mlocked:0kB bounce:0kB free_pcp:54916kB local_pcp:30220kB free_cma:0kB
[  328.088825][T14203] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2338'.
[  328.105355][T14189] lowmem_reserve[]: 0 0 1 1 1
[  328.110151][T14189] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  328.139326][T14203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.204402][T14189] lowmem_reserve[]: 0 0 0 0 0
[  328.219448][T14189] Node 1 Normal free:3897824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20036kB local_pcp:8292kB free_cma:0kB
[  328.276428][T14189] lowmem_reserve[]: 0 0 0 0 0
[  328.281332][T14189] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  328.296438][T14189] Node 0 DMA32: 1615*4kB (UME) 920*8kB (UME) 333*16kB (UME) 165*32kB (UME) 173*64kB (UM) 316*128kB (UM) 292*256kB (UM) 67*512kB (UM) 42*1024kB (UME) 6*2048kB (UM) 203*4096kB (UM) = 1071788kB
[  328.318254][T14189] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  328.332513][T14189] Node 1 Normal: 196*4kB (UE) 40*8kB (UME) 35*16kB (UME) 91*32kB (UME) 26*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (UM) = 3897824kB
[  328.390620][T14189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.416868][T14189] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  328.448832][T14189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.475572][T14189] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  328.503275][T14189] 44184 total pagecache pages
[  328.514824][T14189] 0 pages in swap cache
[  328.525999][T14189] Free swap  = 124996kB
[  328.534511][T14189] Total swap = 124996kB
[  328.546384][T14189] 2097051 pages RAM
[  328.555920][T14189] 0 pages HighMem/MovableOnly
[  328.567366][T14189] 424687 pages reserved
[  328.578315][T14189] 0 pages cma reserved
[  328.853723][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2344'.
[  328.880580][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2344'.
[  329.159570][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'.
[  329.664609][ T5849] Bluetooth: hci5: command 0x0405 tx timeout
[  329.693292][ T3077] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  329.710450][ T3077] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  329.738494][ T3077] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  329.796119][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'.
[  330.031604][T14263] hsr0 speed is unknown, defaulting to 1000
[  330.209369][T14268] pim6reg1: entered promiscuous mode
[  330.219532][T14268] pim6reg1: entered allmulticast mode
[  330.306434][T14270] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2359'.
[  331.054879][T14291] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2364'.
[  331.077590][T14293] netlink: 'syz.3.2367': attribute type 32 has an invalid length.
[  331.086419][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'.
[  331.127578][T14291] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  331.690216][T14320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'.
[  331.872376][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2376'.
[  331.965211][T14333] syzkaller0: entered allmulticast mode
[  331.985866][T14333] syzkaller0 (unregistering): left allmulticast mode
[  332.005784][T14337] xt_hashlimit: invalid rate
[  332.049647][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2378'.
[  332.069417][   T60] 
: Trigger new scan to find an IBSS to join
[  332.172352][T14349] netlink: 'syz.4.2382': attribute type 10 has an invalid length.
[  332.192763][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2382'.
[  332.211361][T14349] batadv0: entered promiscuous mode
[  332.242219][T14349] batadv0: entered allmulticast mode
[  332.303308][T14349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.361270][T14349] bridge0: port 2(batadv0) entered blocking state
[  332.401642][T14349] bridge0: port 2(batadv0) entered disabled state
[  332.713812][ T9484] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  332.723794][ T9484] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  333.024884][   T12] 
: Creating new IBSS network, BSSID 22:3d:96:91:6a:fe
[  333.729907][T14405] delete_channel: no stack
[  333.956282][T14412] hsr0 speed is unknown, defaulting to 1000
[  334.316898][T14439] veth0_to_bond: entered allmulticast mode
[  334.762111][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'.
[  334.772076][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'.
[  334.865676][T14461] netlink: 'syz.2.2408': attribute type 6 has an invalid length.
[  335.280110][T14484] netlink: 'syz.5.2414': attribute type 9 has an invalid length.
[  335.325154][T14484] netlink: 'syz.5.2414': attribute type 6 has an invalid length.
[  335.372387][T14490] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.422463][T14490] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.576931][T14497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input8
[  336.021222][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2422'.
[  336.162748][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2425'.
[  336.698216][T14548] netlink: 'syz.7.2432': attribute type 4 has an invalid length.
[  336.735421][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'.
[  336.850789][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'.
[  336.893971][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2433'.
[  336.903636][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'.
[  336.932000][T14555] netlink: 'syz.7.2434': attribute type 11 has an invalid length.
[  336.955748][T14555] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2434'.
[  336.968715][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'.
[  337.003418][ T1152] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  337.031207][ T1152] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  337.041358][ T1152] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  337.110206][ T1152] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  337.984071][T14586] hsr0 speed is unknown, defaulting to 1000
[  338.205952][T14594] vlan4: entered allmulticast mode
[  338.211147][T14594] macvlan1: entered allmulticast mode
[  339.504057][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  339.513781][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  339.527006][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  339.535468][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  339.543254][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  339.611472][T14627] hsr0 speed is unknown, defaulting to 1000
[  339.927267][T14637] hsr0 speed is unknown, defaulting to 1000
[  340.078542][T14645] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  340.110785][T14645] vlan3: left promiscuous mode
[  340.116566][T14645] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  340.124504][T14645] vlan3: left allmulticast mode
[  340.129418][T14645] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  340.172394][T14643] hsr0 speed is unknown, defaulting to 1000
[  340.295912][T14627] chnl_net:caif_netlink_parms(): no params data found
[  340.417237][T14652] __nla_validate_parse: 10 callbacks suppressed
[  340.417256][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2464'.
[  340.442090][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2464'.
[  340.497731][T14655] netlink: 'syz.4.2464': attribute type 21 has an invalid length.
[  340.551500][T14655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2464'.
[  340.761480][T14627] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.779920][T14627] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.794647][T14627] bridge_slave_0: entered allmulticast mode
[  340.816445][T14627] bridge_slave_0: entered promiscuous mode
[  340.835976][T14627] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.843160][T14627] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.862541][T14627] bridge_slave_1: entered allmulticast mode
[  340.874154][T14627] bridge_slave_1: entered promiscuous mode
[  340.934714][T14627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.959175][T14627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.025729][T14679] netlink: 'syz.5.2470': attribute type 9 has an invalid length.
[  341.033516][T14679] netlink: 204076 bytes leftover after parsing attributes in process `syz.5.2470'.
[  341.111220][T14627] team0: Port device team_slave_0 added
[  341.143794][T14627] team0: Port device team_slave_1 added
[  341.393206][T14627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.408168][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.501213][T14627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.536580][T14686] hsr0 speed is unknown, defaulting to 1000
[  341.545230][T14627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.553546][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.580151][T14627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.591224][ T5832] Bluetooth: hci7: command tx timeout
[  341.956376][T14627] hsr_slave_0: entered promiscuous mode
[  341.963437][T14627] hsr_slave_1: entered promiscuous mode
[  341.980349][T14627] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.004301][T14627] Cannot create hsr debugfs directory
[  342.588012][T14716] openvswitch: netlink: Actions may not be safe on all matching packets
[  343.301754][T14627] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  343.321687][T14627] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  343.361592][T14627] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  343.386096][T14746] netlink: 'syz.5.2489': attribute type 16 has an invalid length.
[  343.389077][T14748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.406449][T14627] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  343.408888][T14748] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2490'.
[  343.417170][T14746] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2489'.
[  343.578037][T14748] $Hÿ (unregistering): (slave 
): Releasing backup interface
[  343.587427][T14748] mac80211_hwsim hwsim7 
: left promiscuous mode
[  343.613225][T14748] $Hÿ (unregistering): Released all slaves
[  343.666875][ T5832] Bluetooth: hci7: command tx timeout
[  343.763893][T14627] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.799358][T14627] 8021q: adding VLAN 0 to HW filter on device team0
[  343.840481][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.847718][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.870034][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.877254][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.353579][T14627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.462496][T14782] netlink: 'syz.4.2497': attribute type 5 has an invalid length.
[  344.684962][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'.
[  345.003449][T14627] veth0_vlan: entered promiscuous mode
[  345.035447][T14627] veth1_vlan: entered promiscuous mode
[  345.125680][T14627] veth0_macvtap: entered promiscuous mode
[  345.153544][T14627] veth1_macvtap: entered promiscuous mode
[  345.211907][T14627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.249614][T14627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.264930][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'.
[  345.295993][T14798] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  345.304929][T14798] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  345.322967][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'.
[  345.342876][ T9483] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.360767][ T9483] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.411675][ T9483] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.755949][ T5832] Bluetooth: hci7: command tx timeout
[  345.869930][ T9483] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.907525][T14805] gre2: entered promiscuous mode
[  346.075716][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.083621][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.182390][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2505'.
[  346.190236][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.200877][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.237779][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2505'.
[  346.247597][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2505'.
[  346.257049][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2505'.
[  346.267764][T14820] syzkaller1: entered promiscuous mode
[  346.294842][T14820] syzkaller1: entered allmulticast mode
[  346.297143][T14818] netlink: 'syz.4.2506': attribute type 4 has an invalid length.
[  346.311733][T14818] netlink: 'syz.4.2506': attribute type 7 has an invalid length.
[  346.693679][T14842] hsr0 speed is unknown, defaulting to 1000
[  346.982655][ T9485] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.083175][ T9485] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.275498][T14856] netlink: 'syz.5.2518': attribute type 10 has an invalid length.
[  347.283379][T14856] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2518'.
[  347.306311][T14856] team0: entered promiscuous mode
[  347.313860][T14856] bond4: entered promiscuous mode
[  347.331482][T14856] team0: entered allmulticast mode
[  347.342090][T14856] bond4: entered allmulticast mode
[  347.361350][T14856] 8021q: adding VLAN 0 to HW filter on device team0
[  347.383332][T14856] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  347.405010][T14857] netlink: 'syz.5.2518': attribute type 5 has an invalid length.
[  347.633374][ T9485] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.713598][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  347.723641][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  347.733445][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  347.742018][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  347.755785][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  347.833690][T14870] netlink: 'syz.5.2519': attribute type 4 has an invalid length.
[  348.072237][ T9485] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.126412][T14871] macvtap0: entered promiscuous mode
[  348.132056][T14871] macvtap0: entered allmulticast mode
[  348.195063][T14866] hsr0 speed is unknown, defaulting to 1000
[  348.244127][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'.
[  348.459992][ T9485] bridge_slave_1: left allmulticast mode
[  348.466565][ T9485] bridge_slave_1: left promiscuous mode
[  348.473918][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.492869][ T9485] bridge_slave_0: left allmulticast mode
[  348.499021][ T9485] bridge_slave_0: left promiscuous mode
[  348.506869][T14880] netlink: 'syz.4.2523': attribute type 1 has an invalid length.
[  348.509593][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.515042][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'.
[  349.073230][T14885] netlink: 'syz.5.2525': attribute type 3 has an invalid length.
[  349.136604][ T9485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.150355][ T9485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.162753][ T9485] bond0 (unregistering): Released all slaves
[  349.180103][T14879] syzkaller1: entered promiscuous mode
[  349.189647][T14879] syzkaller1: entered allmulticast mode
[  349.607375][T14903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2530'.
[  349.629115][T14903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2530'.
[  349.655599][T14903] netlink: 'syz.5.2530': attribute type 1 has an invalid length.
[  349.746668][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2530'.
[  349.765272][ T9485] hsr_slave_0: left promiscuous mode
[  349.771646][ T9485] hsr_slave_1: left promiscuous mode
[  349.778763][ T9485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.787835][ T9485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.796657][ T9485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.804211][ T9485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.824928][ T5832] Bluetooth: hci7: command tx timeout
[  349.842856][ T9485] veth1_macvtap: left promiscuous mode
[  349.849167][ T9485] veth0_macvtap: left promiscuous mode
[  349.855133][ T9485] veth1_vlan: left promiscuous mode
[  349.860614][ T9485] veth0_vlan: left promiscuous mode
[  350.432436][ T9485] team0 (unregistering): Port device team_slave_1 removed
[  350.481747][ T9485] team0 (unregistering): Port device team_slave_0 removed
[  350.629197][   T31] INFO: task syz.0.874:8969 blocked for more than 143 seconds.
[  350.642724][   T31]       Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0
[  350.653563][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.662759][   T31] task:syz.0.874       state:D stack:24376 pid:8969  tgid:8968  ppid:5843   task_flags:0x400140 flags:0x00004004
[  350.676243][   T31] Call Trace:
[  350.679558][   T31]  <TASK>
[  350.682652][   T31]  __schedule+0x16f5/0x4d00
[  350.687266][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.692166][   T31]  ? schedule+0x165/0x360
[  350.696687][   T31]  ? __pfx___schedule+0x10/0x10
[  350.701675][   T31]  ? schedule+0x91/0x360
[  350.707230][   T31]  schedule+0x165/0x360
[  350.711443][   T31]  schedule_preempt_disabled+0x13/0x30
[  350.717038][   T31]  __mutex_lock+0x724/0xe80
[  350.721579][   T31]  ? __mutex_lock+0x51b/0xe80
[  350.726699][   T31]  ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  350.732888][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  350.738102][   T31]  ? stack_trace_save+0x9c/0xe0
[  350.743259][   T31]  nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  350.750054][   T31]  ? kasan_save_track+0x4f/0x80
[  350.755082][   T31]  ? kasan_save_track+0x3e/0x80
[  350.760003][   T31]  ? __kasan_kmalloc+0x93/0xb0
[  350.764890][   T31]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  350.771594][   T31]  ? kmalloc_reserve+0x136/0x290
[  350.776623][   T31]  ? __alloc_skb+0x142/0x2d0
[  350.781249][   T31]  ? netlink_dump+0x22b/0xe20
[  350.786426][   T31]  ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  350.792369][   T31]  ? genl_rcv_msg+0x5da/0x790
[  350.797247][   T31]  ? netlink_rcv_skb+0x205/0x470
[  350.802222][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  350.808792][   T31]  ? __sock_sendmsg+0x219/0x270
[  350.813657][   T31]  ? ____sys_sendmsg+0x505/0x830
[  350.819717][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  350.824701][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  350.829873][   T31]  ? do_syscall_64+0xfa/0x3b0
[  350.834755][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.840900][   T31]  ? __alloc_skb+0x142/0x2d0
[  350.845769][   T31]  ? rcu_is_watching+0x15/0xb0
[  350.851069][   T31]  ? trace_kmalloc+0x1f/0xd0
[  350.855844][   T31]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  350.862494][   T31]  ? __build_skb_around+0x257/0x3e0
[  350.868194][   T31]  genl_dumpit+0x108/0x1b0
[  350.872658][   T31]  netlink_dump+0x62a/0xe20
[  350.877393][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  350.882463][   T31]  ? genl_start+0x499/0x6c0
[  350.887079][   T31]  __netlink_dump_start+0x5cb/0x7e0
[  350.892328][   T31]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  350.898276][   T31]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  350.904662][   T31]  ? genl_get_cmd+0x496/0x910
[  350.914324][   T31]  ? __pfx_genl_start+0x10/0x10
[  350.919231][   T31]  ? __pfx_genl_dumpit+0x10/0x10
[  350.924183][   T31]  ? __pfx_genl_done+0x10/0x10
[  350.936759][   T31]  genl_rcv_msg+0x5da/0x790
[  350.941402][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.946879][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  350.954116][   T31]  netlink_rcv_skb+0x205/0x470
[  350.959145][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.964284][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.969620][   T31]  ? down_read+0x1ad/0x2e0
[  350.974060][   T31]  genl_rcv+0x28/0x40
[  350.978123][   T31]  netlink_unicast+0x758/0x8d0
[  350.982907][   T31]  netlink_sendmsg+0x805/0xb30
[  350.987821][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.993160][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  350.998234][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.003550][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.008982][   T31]  __sock_sendmsg+0x219/0x270
[  351.013686][   T31]  ____sys_sendmsg+0x505/0x830
[  351.018580][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.023915][   T31]  ? import_iovec+0x74/0xa0
[  351.028704][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  351.033428][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.038784][   T31]  ? __fget_files+0x2a/0x420
[  351.043446][   T31]  ? __fget_files+0x3a0/0x420
[  351.048389][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  351.053975][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  351.059595][   T31]  ? rcu_is_watching+0x15/0xb0
[  351.071365][   T31]  ? do_syscall_64+0xbe/0x3b0
[  351.076163][   T31]  do_syscall_64+0xfa/0x3b0
[  351.080697][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.086333][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.092438][   T31]  ? clear_bhb_loop+0x60/0xb0
[  351.097275][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.103191][   T31] RIP: 0033:0x7fbc6178e929
[  351.108059][   T31] RSP: 002b:00007fbc6253f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.116760][   T31] RAX: ffffffffffffffda RBX: 00007fbc619b5fa0 RCX: 00007fbc6178e929
[  351.124812][   T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[  351.132807][   T31] RBP: 00007fbc61810b39 R08: 0000000000000000 R09: 0000000000000000
[  351.140991][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.149064][   T31] R13: 0000000000000000 R14: 00007fbc619b5fa0 R15: 00007ffcc36d2f38
[  351.158227][   T31]  </TASK>
[  351.169437][   T31] 
[  351.169437][   T31] Showing all locks held in the system:
[  351.177343][   T31] 1 lock held by khungtaskd/31:
[  351.194349][   T31]  #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  351.204385][   T31] 2 locks held by getty/5592:
[  351.209080][   T31]  #0: ffff88814ccee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  351.218901][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  351.229255][   T31] 2 locks held by syz.1.408/7397:
[  351.234363][   T31]  #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  351.242614][   T31]  #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  351.252911][   T31] 3 locks held by syz.0.874/8969:
[  351.258616][   T31]  #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  351.268165][   T31]  #1: ffff8880298c56d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  351.279044][   T31]  #2: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  351.289593][   T31] 3 locks held by kworker/u8:10/9483:
[  351.295069][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  351.306847][   T31]  #1: ffffc9001e0bfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  351.317932][   T31]  #2: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  351.326985][   T31] 5 locks held by kworker/u8:12/9485:
[  351.332382][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  351.343467][   T31]  #1: ffffc9001de4fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  351.354208][   T31]  #2: ffffffff8f505050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  351.364374][   T31]  #3: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  351.374525][   T31]  #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  351.385597][   T31] 2 locks held by syz.6.1466/11082:
[  351.390820][   T31]  #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  351.399142][   T31]  #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  351.409429][   T31] 2 locks held by syz.3.2435/14565:
[  351.414703][   T31]  #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  351.422949][   T31]  #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  351.433463][   T31] 2 locks held by syz.2.2510/14835:
[  351.438745][   T31]  #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  351.447275][   T31]  #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  351.457723][   T31] 2 locks held by syz-executor/14866:
[  351.463601][   T31]  #0: ffffffff8fa14f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  351.473331][   T31]  #1: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  351.482467][   T31] 1 lock held by syz.5.2530/14902:
[  351.487780][   T31]  #0: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  351.497104][   T31] 1 lock held by syz.4.2532/14908:
[  351.502317][   T31]  #0: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  351.511658][   T31] 
[  351.514021][   T31] =============================================
[  351.514021][   T31] 
[  351.522985][   T31] NMI backtrace for cpu 0
[  351.523008][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  351.523032][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  351.523044][   T31] Call Trace:
[  351.523054][   T31]  <TASK>
[  351.523064][   T31]  dump_stack_lvl+0x189/0x250
[  351.523115][   T31]  ? __wake_up_klogd+0xd9/0x110
[  351.523141][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.523172][   T31]  ? __pfx__printk+0x10/0x10
[  351.523209][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  351.523240][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  351.523263][   T31]  ? _printk+0xcf/0x120
[  351.523289][   T31]  ? __pfx__printk+0x10/0x10
[  351.523312][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  351.523340][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  351.523369][   T31]  watchdog+0xfee/0x1030
[  351.523398][   T31]  ? watchdog+0x1de/0x1030
[  351.523436][   T31]  kthread+0x70e/0x8a0
[  351.523463][   T31]  ? __pfx_watchdog+0x10/0x10
[  351.523489][   T31]  ? __pfx_kthread+0x10/0x10
[  351.523514][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  351.523546][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.523576][   T31]  ? __pfx_kthread+0x10/0x10
[  351.523601][   T31]  ret_from_fork+0x3fc/0x770
[  351.523635][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  351.523673][   T31]  ? __switch_to_asm+0x39/0x70
[  351.523694][   T31]  ? __switch_to_asm+0x33/0x70
[  351.523714][   T31]  ? __pfx_kthread+0x10/0x10
[  351.523740][   T31]  ret_from_fork_asm+0x1a/0x30
[  351.523779][   T31]  </TASK>
[  351.523788][   T31] Sending NMI from CPU 0 to CPUs 1:
[  351.685253][    C1] NMI backtrace for cpu 1
[  351.685272][    C1] CPU: 1 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  351.685293][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  351.685305][    C1] Workqueue: bat_events batadv_nc_worker
[  351.685335][    C1] RIP: 0010:check_preemption_disabled+0x1/0x120
[  351.685357][    C1] Code: a0 82 e2 8b 48 c7 c6 e0 82 e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 fe ad 36 07 48 89 44 24 08
[  351.685372][    C1] RSP: 0018:ffffc90000aa7900 EFLAGS: 00000092
[  351.685387][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 814545b610c00f00
[  351.685399][    C1] RDX: 0000000000000000 RSI: ffffffff8db6fb53 RDI: ffffffff8be28300
[  351.685411][    C1] RBP: ffffffff8b34530a R08: 0000000000000000 R09: ffffffff8b34530a
[  351.685423][    C1] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: 0000000000000002
[  351.685435][    C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246
[  351.685446][    C1] FS:  0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000
[  351.685461][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  351.685472][    C1] CR2: 00007f4cad45cf98 CR3: 0000000077bf4000 CR4: 00000000003526f0
[  351.685488][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  351.685498][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  351.685509][    C1] Call Trace:
[  351.685517][    C1]  <TASK>
[  351.685523][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  351.685551][    C1]  lock_acquire+0x130/0x360
[  351.685582][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  351.685608][    C1]  ? __pfx_batadv_nc_fwd_flush+0x10/0x10
[  351.685635][    C1]  batadv_nc_process_nc_paths+0xdb/0x3a0
[  351.685662][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  351.685690][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  351.685718][    C1]  batadv_nc_worker+0x429/0x610
[  351.685744][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  351.685776][    C1]  process_scheduled_works+0xae1/0x17b0
[  351.685828][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  351.685864][    C1]  worker_thread+0x8a0/0xda0
[  351.685905][    C1]  kthread+0x70e/0x8a0
[  351.685926][    C1]  ? __pfx_worker_thread+0x10/0x10
[  351.685952][    C1]  ? __pfx_kthread+0x10/0x10
[  351.685972][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  351.685997][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.686023][    C1]  ? __pfx_kthread+0x10/0x10
[  351.686042][    C1]  ret_from_fork+0x3fc/0x770
[  351.686069][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  351.686098][    C1]  ? __switch_to_asm+0x39/0x70
[  351.686116][    C1]  ? __switch_to_asm+0x33/0x70
[  351.686133][    C1]  ? __pfx_kthread+0x10/0x10
[  351.686153][    C1]  ret_from_fork_asm+0x1a/0x30
[  351.686180][    C1]  </TASK>
[  351.686376][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  351.968359][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) 
[  351.980169][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  351.990234][   T31] Call Trace:
[  351.993515][   T31]  <TASK>
[  351.996523][   T31]  dump_stack_lvl+0x99/0x250
[  352.001137][   T31]  ? __asan_memcpy+0x40/0x70
[  352.005741][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.010954][   T31]  ? __pfx__printk+0x10/0x10
[  352.015573][   T31]  panic+0x2db/0x790
[  352.019489][   T31]  ? __pfx_panic+0x10/0x10
[  352.023915][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  352.029738][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  352.035129][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  352.041303][   T31]  watchdog+0x102d/0x1030
[  352.045652][   T31]  ? watchdog+0x1de/0x1030
[  352.050090][   T31]  kthread+0x70e/0x8a0
[  352.054171][   T31]  ? __pfx_watchdog+0x10/0x10
[  352.058861][   T31]  ? __pfx_kthread+0x10/0x10
[  352.063456][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.068664][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.073877][   T31]  ? __pfx_kthread+0x10/0x10
[  352.078477][   T31]  ret_from_fork+0x3fc/0x770
[  352.083084][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  352.088231][   T31]  ? __switch_to_asm+0x39/0x70
[  352.093005][   T31]  ? __switch_to_asm+0x33/0x70
[  352.097779][   T31]  ? __pfx_kthread+0x10/0x10
[  352.102378][   T31]  ret_from_fork_asm+0x1a/0x30
[  352.107159][   T31]  </TASK>
[  352.110527][   T31] Kernel Offset: disabled
[  352.114858][   T31] Rebooting in 86400 seconds..