last executing test programs:

4m4.043313466s ago: executing program 2 (id=928):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x10, 0x0, 0xa}, 0x10}, 0x3f)
r1 = socket(0x840000000002, 0x3, 0xff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000050000008e1eb8baffffffff0200000000000000"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f0000000480), &(0x7f00000006c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18112a38", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000cc420000ffffffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000880)=""/235, &(0x7f0000000340)=0xeb)
unshare(0x400)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x569, 0x1}}, 0x20)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x7}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b50200000000000085000000830000004ce300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r11 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r12, 0x50083, 0x40}, [@IFLA_WEIGHT={0x8, 0xf, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2804c050}, 0x0)
sendmmsg$inet(r8, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @local}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000780)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980), 0x0, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @rand_addr=0x64010101, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xc0}}], 0x3, 0x4880)

4m3.795307377s ago: executing program 2 (id=933):
r0 = socket(0xa, 0x3, 0x87)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x807, 0x20000003}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=']', 0x1}, {&(0x7f00000001c0)="abafe7a9d8", 0x5}], 0x2}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24000841) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300340012800b00010067726574617000002400028006000e000200000005000900fb00000008000700ac14142806000f000600000008000a00", @ANYRES32=r4, @ANYBLOB="eb06fcb76eff41e14285dd2565bba6ffce56115703f132366a57e2a8e60acf7dcd624f544947f88679768a40c6cce45aa8ab2fb1ce33325d5e786e9487f1332f46d75dc8a4ba9d62b53bb17db319ab0a4334a9842638b8b788b5657219e52981f6b568bcc6b60a01b09e777250be16189874f92b6966b9466edcb765cfefbfaafebb806d0280dbf5206e73c1281d10c36490"], 0x5c}}, 0x804) (async)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local, 0x3}, 0x10)

4m3.410285597s ago: executing program 2 (id=936):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) (async)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async, rerun: 64)
listen(r0, 0x0) (rerun: 64)
r2 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async)
accept4$inet6(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}]}}]}, 0x3c}}, 0x20004055) (rerun: 32)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={r3, 0x5, 0x7}, 0x8) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e24, 0x80000000, @mcast1}}, 0xfff7, 0x4}, 0x90) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff}) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, <r10=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r9}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r10, &(0x7f00000006c0)}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m3.077769727s ago: executing program 2 (id=939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x4c, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x3c}}, 0x8000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r8 = socket$pppoe(0x18, 0x1, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r9, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000005c0)='e', 0x1}], 0x1}}], 0x1, 0x4000)
connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r11}, 0x18)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r12}, 0x18)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, 0x0, 0x20004450)

4m1.947542612s ago: executing program 4 (id=954):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd70bb00000000000000dbc37d1f3cfe58e290f3255cd75b83119eab78a349c73977421100000008003b100800000006002800020000000500290001000000068e51682573e4b2a4002800030000000800"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

4m1.862617521s ago: executing program 4 (id=956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000001400000000000002000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)

4m1.443408664s ago: executing program 4 (id=962):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000002c0)={@private2, <r0=>0x0}, &(0x7f0000000300)=0x14)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a3100000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd0000000800014000000014240001800a0001007265646972000000140002800800014000000004080002400000fa0b0900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000001c0)={0x0, 0x8000000000000001, 0x2})
r3 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r4, 0x25, 0x0, @void}, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b00000000003444825aa848787c7a47df61b5bedff1209601d98f23f7aada924aa226fd890ab714d8309186743a700d"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

4m1.341068253s ago: executing program 4 (id=965):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) (async)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0)

4m1.288135039s ago: executing program 4 (id=967):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r1, 0x8b32, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0xffffffff, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x2b, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x50}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x24044845)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d100000000000"], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xb, &(0x7f0000000300)=""/11, 0x40f00, 0x55, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0xc, 0xe5, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r3, 0x20, &(0x7f0000000100)={&(0x7f00000004c0)=""/185, 0xb9, 0x0, &(0x7f00000006c0)=""/210, 0xd2}}, 0x10)
r4 = accept4(r0, &(0x7f0000000940)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000010c0)=0x8)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r11)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd700002dcdd25150000000c002b80080001000300000008000300", @ANYRES32=r13, @ANYBLOB="845ccdef26d571f4f2b9172592e032f2daea076eb9351919c13f02c009c7b922e485357e7607e9bf132fd75a73c40689cdeaafa6920ca9ba41004ed0f43926018da8712a84814dc20af88ffd3e9a8e7cc9dda29020385e40238782caec5e8cce2b1621a09a05cdaac04030131a953cf61b09487e2b69db4779a3fc0bd6f38ef144d3c9f03843dc26eae7df08394cf1aa9f8dc74273e179ad18927e8532b12aa589c4c1741b57b42cf43c24c67e699e7283dab233e995384a9040a180298e3e3969ea971afbe4c2a972f6c7ef5fb7324ef1bbc8342ae22b1268d691783f737af1e4ca1f"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x810)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000e00)={0x180, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x130, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xe3ec3efed78ec4cf}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe803}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x4000010)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0)={r7, 0xfffff832}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000b40)={r7, @in6={{0xa, 0x4e24, 0x9, @mcast1, 0x40}}, 0x7f, 0xd, 0x3, 0xaf75, 0x2, 0xa, 0x2}, &(0x7f0000000200)=0x9c)

4m0.351470787s ago: executing program 4 (id=974):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008a33e5d95091cabe0192", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x7, 0x5, 0x80000000, 0x40, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0xf8a0, 0x400, 0x3}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xd, <r3=>0x0}, 0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m0.15636285s ago: executing program 2 (id=975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="f398ea8c", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000"], 0x14}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0)

3m59.897051742s ago: executing program 2 (id=977):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x67, @empty, 0x4e21, 0x4, 'sh\x00', 0x24, 0x3, 0x1a}, 0x2c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58}, 0x10)

3m59.538487139s ago: executing program 32 (id=977):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x67, @empty, 0x4e21, 0x4, 'sh\x00', 0x24, 0x3, 0x1a}, 0x2c)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58}, 0x10)

3m44.92659931s ago: executing program 33 (id=974):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008a33e5d95091cabe0192", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x7, 0x5, 0x80000000, 0x40, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0xf8a0, 0x400, 0x3}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xd, <r3=>0x0}, 0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.30844239s ago: executing program 3 (id=3078):
sendmmsg(0xffffffffffffffff, &(0x7f000000a200)=[{{0x0, 0xffa2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffe60}, {0x0}], 0x2}}], 0x1, 0x20000000)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={<r4=>0xffffffffffffffff})
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
preadv(r5, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000100), &(0x7f00000001c0)=r9}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r12=>r3, 0x1, 0xffffffffffffff7f, 0x6})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r11, <r13=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x14, &(0x7f00000009c0)=ANY=[@ANYRES64=r12, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000010100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080085000000a50000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

7.111165888s ago: executing program 3 (id=3082):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000050000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0)

6.822206008s ago: executing program 3 (id=3085):
unshare(0x58070200)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080))
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x5, 0x3}, 0x10)
close(0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, 0x0, 0x0)

6.28759111s ago: executing program 3 (id=3092):
socket$inet(0xa, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x1}]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

6.072058422s ago: executing program 1 (id=3097):
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32, @ANYBLOB="200000000000000014001a80100004800c"], 0x34}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000400)=@assoc_value, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000200)=0xfffffffa, 0x4)
connect$can_bcm(r8, &(0x7f0000000180)={0x1d, r3}, 0x10)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

5.935666786s ago: executing program 3 (id=3099):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8002, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

5.899904677s ago: executing program 3 (id=3100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180", @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r1], 0xd8}}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="748f7ca135504547bee074f43cf0650c093ebd7c5cb6cc74acd94bcc68fa9b4222135783b94a20810973e98b118a0e6399a37311233261bed4767f221698b22f0a1eebc5e852780c187f11765921d6e38a8a51990fac8d87e19e34947dcc8dc3061bbe0cb829ce8b2deb07de7c1cdffc8ad4561d11f13d5e0cc619b1106d06a9e321d0f6684d8fa2429319bd4f617e0d1b539dded858f8230ff8316e85e143a2fb1ecde05f0b5116cdf36ae3d7ce6dd959e45aef12057831d8b346027508b6d1570756ce5837c8e4"], 0x28}}, 0x2000c058)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0xffff, 0x400000, 0x7ff, 0x6, 0x1000, 0x402, 0xa, 0x7, 0x5, 0x3, 0x4005, 0x4, 0xfffffffb, 0x0, 0x37e9, 0x80000004, 0x8, 0x6, 0xfffffff9, 0x1}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000c000480080002403b7e45420900030073797a32000000005c000000030a010300000000000000000100010000000540fffffffc08000b4000000001100008800c00014000000000000000070c0004800800024006a9a8da0900010073797a300000000008000a4000f8ffff07000b4000000002140000001100010000000000000000000a00000a"], 0xd0}}, 0x0)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a0101020000000000000000000000000a0101000000000000000000000000000a0006092689f295ffebc2757f6539cb7378a3d200ba68254c2e8efcc11a5432ef397e3a75986c5555409316dbc087ce151bdd25d8b82c898be319c66033face0b9ce36329db901cd75b287023e71ab15096f2218673824dea51e96688f9c787a26597cd4e981823cf419e6af8b7ef4128cb9240b7f9c9b6dfa8df71d9522cd20913c76aa441337c8a4e1476f9cef3f829"], 0x38}}, 0x20040810)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRESOCT=0x0, @ANYBLOB="aa24f3308448f23a"], 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x8}}, 0x10)
bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
r12 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
close(0x3)
write(r10, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000240)=0x1, 0x4)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="796129bd7000000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054)

4.723554751s ago: executing program 1 (id=3109):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4133246b8e2b1bf14b365e07b22c032968e9f9dc9f684f9cc1f5acd2b420e64f6d43bc8445dcf9fcb9114641f35ae714e24972ec0e8d2475fc1f19f8bfde5e551517ea7fdbc30aa84dc2cfc129daa0625961e83565d630e1c986050d6a765871c3936f702dd30d1257338660a2a11dea3a5cfe4fbbb417638"], 0x50}, 0x1, 0x0, 0x0, 0x24}, 0x80) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000d40)=@ethtool_perm_addr={0x4b, 0x20, "4376829df3599efad116dd06381cd282cc9ec86809213a000000000000000000"}})
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffffffffecd) (async)
r4 = socket$inet(0x2, 0x6, 0xfe)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000008000000ffffac14142a0500090029000000080004000005fb18e57a3fe8ac36d7e6"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) (async)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
unshare(0x42000000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async)
writev(r7, &(0x7f0000001300), 0x0) (async)
socket(0x1a, 0x2, 0xfffffffc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

4.031549943s ago: executing program 5 (id=3113):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400c600614791d60000d19902000000"], 0x18, 0x4}], 0x1, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x28, 0x0, &(0x7f00000002c0)="52e1119c000000002bf0543786dd", 0x0, 0x4007, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
unshare(0x26020480)
socket$pppoe(0x18, 0x1, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200012, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='rxrpc_connect_call\x00', r4}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket(0xa, 0x5, 0x0)
getsockopt$inet_int(r7, 0x0, 0x16, 0x0, &(0x7f0000000140))
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x140, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8)
setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f0000000100))
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119eed40)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)

3.059738571s ago: executing program 5 (id=3123):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))
getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240))
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf252b000000e9d1bffc22910000"], 0x2c}}, 0x4)

2.971097569s ago: executing program 5 (id=3125):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4850)
pipe(&(0x7f0000000c00)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000002000003f851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000100660002007fffffff180000000000000100000000000000009500040000000000360a020000001000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000140)=""/230}, 0xd0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={<r7=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xa5, 0xfffc}, &(0x7f0000000380)=0x90)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000003c0)={r7, 0x1200, 0x3400, 0x76f, 0x8, 0xb2e}, &(0x7f0000000600)=0x14)
r8 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3ec}}, 0x28}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140092800b00010062617461647600000400020200004000", @ANYRES32=r9, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040))

2.745451404s ago: executing program 5 (id=3127):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xb)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)

2.362627566s ago: executing program 6 (id=3132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
r2 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2004})
epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x2000c800)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x2c000010)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="b4000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000008000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000123d5daa93e53f7bc47b9735c804fa7d7a1bb4ad639e3d9e765ab96a1a435ccef364c085930e4aea1e22537b576d344d3110231cb4fad0bb40dc1dd9cfcb3076f3e960dad0ba2a"], 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0)
recvmsg(r0, &(0x7f0000001840)={&(0x7f00000018c0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000001a40)=""/185, 0xb9}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000600)=""/104, 0xffffffffffffff25}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000001880)=""/15, 0xf}], 0x6, &(0x7f0000000840)=""/4096, 0x1000}, 0x142)
bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
unshare(0x0)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r9, &(0x7f0000001b00)="945ef8325f4bade4f2170b1c8b891f9de6cb99dcc4cc63e4e0ab8e7411c7a6d4c50e1a62da47a5e3b2393f0279ee16c54300196a19262a3e7122c9dbe4c107f5ec466415d7adfecbc8684be7551dcc403d8456b739367f5c74b2acd293330854060e88dae74fac04a434aafa58376034e51bbfd4164f220ccf6965c4118b396a48ecd98c56ad9da030da515eb82496ce2e426056833c039a7d7addd3c2ab0b4222679ad3265e2ad5cf2b60f6116b8cf1ab09e600c7cde01d35a7d13325ab099b6f71e7a4c545bcd529c10f712e10840b5db713718f1968f6bf", 0x62)
vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r8, r10, 0x2, 0x100000000000003)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r4, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1000000000000320}}], 0x1, 0x4004004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000d598cd2a0000", @ANYRES32=0x0], 0x44}, 0x1, 0xba01}, 0x0)

2.043444819s ago: executing program 0 (id=3134):
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000045c3fbe411dc3133c2e361f56c81abd808e281ff74f196a5f4553e1ce9306126bdbfbe0a3dde2cba604188a3369246df34bc140d32f1640f69142244c2661e4c6787a3420f12b7e524abd87f4b2e889c7261be5e38274e77df075c8199360aacd29740ea06b0"], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r0, 0x4)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r0], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000005a52d377c8e0fb6964b9d99e0e9a6dcbaf3722f405b265727d6ef691f421d382a114e93e7f2be6e2b26477dc7588700102b", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x2f0, 0x3d8, 0xffffffff, 0xd8, 0xd8, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xc, @rand_addr=0x64010101, @private=0xa010102, @gre_key=0x5, @icmp_id=0x67}}}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0x0, 0xffffffff, 'pimreg1\x00', 'macsec0\x00', {}, {}, 0x6c, 0x3}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1c, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x7, @icmp_id=0x68}}}}, {{@ip={@multicast2, @broadcast, 0xffff00, 0x0, 'netpci0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x62, 0x3, 0x1a}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x5, @ipv4=@multicast2, @ipv4=@empty, @port=0x4e24, @port=0x4e24}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @multicast2, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x5be5, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x1, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xe2d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0x2}, {}, {0x1c, 0xfffa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}]}}]}, 0x44}}, 0x24004001)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

1.447695276s ago: executing program 1 (id=3135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x1ff)
shutdown(r3, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000040, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)
sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES64=r5, @ANYBLOB="fda44c052186000014001280fb0001006d616376746170000400028008000500", @ANYRES8=r3, @ANYRESDEC=r5, @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)

1.353196365s ago: executing program 0 (id=3136):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000c060101000000000000000000000000120001000700000005000100070000000900020073797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x3400c0d0}, 0x8c0) (async)
r2 = socket$netlink(0x10, 0x3, 0x4) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000300)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x2e8, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000040), 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r9, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c0100001000130700000000a0cb0000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000400ec0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000003c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000020000000000000000000000000000000000000000000000000000000000000000a00030020000000000000001c00040003004e224e210000ff010000000000000000000000000001"], 0x10c}}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x60, 0x7, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "e50a22447298bdf48baa244a0242c98c4e735a1c6e19f0c26877"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async)
sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="380100002100000129bd7000fddbdf2569001c8008009000", @ANYRES32=r0, @ANYBLOB="7654243cf221dd5232d3eaf7e0c252134ca26bdc9941f795d25b613797dc61f7a7435ea850530d3f23643ff0896fac367e38b556457b06220438e70b50d1ac1d3897dbeb5292e5f121be7fce96edf96e08004b0000", @ANYRES32=r0, @ANYBLOB="0400d4800000007d74dae50e3daceda41a6f3d6f456adc351267e842983663daaeea6642f3a42520812ec10e4421b0cd703058523ad6653f441aeede721611b7b97e5228aa5e4a69160eae1a8f945ff70758908de0101beddedb2484befd5198ec0a41dafd6b8b82d81ef65d6ede129eda921ed9322f85c3c80da7dbda590425db87cb1b120318c00bd593c523c0f5bdcb26a7b729fce15568ea3a78e669ae76988a5e521669f830d0544b9f70634edfec1056333723f0a1d80845ac16578fb0bce400"], 0x138}, {&(0x7f0000000b00)={0x294, 0x40, 0x8, 0x70bd27, 0x25dfdbfc, "", [@nested={0x4, 0x5d}, @nested={0xc, 0x150, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x4f}]}, @nested={0x26a, 0xae, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x7}, @generic="83bcaffb103147853233840d12e411488628f818001ed5c134605be41816725f4b3604dfcfbb8a2c67bafb546d141b7c4a2b305fccbc3a51028a1549aa0ea9137436eba77497ee6231742cb941618275948c2276a740a93450ba186474ba6039d375cfcfb4894e5c7837a1bc033672cd9df4b8adc057460f23977c6e204618bc42229592626cdc081ec8f5c39d458be1dc14aa67c066b88d4ce49154903d8f44a0a599d99ce2467e2cc856bd41dffd6718379492c138e6a2a05cb79de4a059d0440a9c0615af39698e6b7e322bed04ec17aea2770fb2289048e81874a0a5c10c69bbccd190c45045ed806aae3aa2b574586aaa0654abdb", @nested={0x4, 0x37}, @generic="be3dd1942130aa22225730f4f29a26a33a0fe9e924d1e8ed2ad1d8a4de8346bc9b4a9c1a6f999006bb8ccf89a54a4aabf09c944ffd938ad0efca67b16e2403f1ddbb7fc3995a6a5adc1a43cc88267ed9d7337d20529fcf53193bf3e6b5cdd4f1aa", @generic="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"]}]}, 0x294}], 0x2, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x20048014}, 0x20000000) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000090000000300002001"], 0x48)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200083a000000007c4db1ac8675c165ff0a010101ff0200000000000000000000000000018f00907803000000"], 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0x25)
getsockopt$inet6_tcp_int(r10, 0x6, 0x11, &(0x7f0000000040), &(0x7f0000002000)=0x4)

1.219196384s ago: executing program 1 (id=3137):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48)
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100003c7cda33e042dbd70023d00000000000000e22d0630008b2de098549409d73f1609cf6b4aae16615b5db7b648f2fddb4811a5c07268df9b15734998e95206c4e0da77b1035a310fb1d2ec5206b2daf48a42501365625db8e5c6a325153db972c5d126c33650230c4454a875a899cf0ba677134b6eeee221ad3283", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002c0012800b00010067656e65766500001c00028005000d0001000000080001000300000005000c0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r3, r2, &(0x7f0000000080)=0x1, 0x5)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000240))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800e700000000000000000000000000950000000000000085000000920000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fdffffff00000000090000008500000013000000180100002020642500000000002020207b1af8ff00000057bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x8, 0x1, 0x1, 0x4, 0x4}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

1.138712649s ago: executing program 0 (id=3138):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000100000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0)

1.088007121s ago: executing program 0 (id=3139):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x60}]}, {0x0, [0x30, 0x0]}}, &(0x7f00000001c0)=""/211, 0x3c, 0xd3, 0x1, 0x7, 0x10000, @value=r0}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10)

966.866784ms ago: executing program 0 (id=3140):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x3, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
shutdown(r1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
getsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, &(0x7f0000000000))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012003, &(0x7f0000002000))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r8, 0x8)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x0, 0x401}, 0xc)
getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0xe, 0xfffffffffffffff0, 0x81, 0x60a1, 0x4, 0x5]}, &(0x7f0000000100)=0x78)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x35, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)

883.507864ms ago: executing program 6 (id=3141):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xb)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000040)="e1c89b", &(0x7f0000000240)=""/121}, 0x20)
getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd2f, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28)
socket(0x10, 0x3, 0x0)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB, @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, 0x0, 0x800)
socket$nl_rdma(0x10, 0x3, 0x14)

581.491361ms ago: executing program 1 (id=3142):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x200, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7ce3fd00104889000100000000000000000000e0000001000000000000000000000000000000000000fffe000000000000000000000000000000000000e50000000051ff04f44e8a2d4caab1c683e6b18b48f4645d68e9766efb8b970a6472d2d61bcdb06693f0e5fb408def8d918c27b7f661378757d520aa60198a7c5046f7a1c04cd24db594972700000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r8], 0x17c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x79110000)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18)

369.014803ms ago: executing program 6 (id=3143):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xa6, &(0x7f00000008c0)={@local, @random="000200080010", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000012", 0x70, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000080000000c", @ANYRES8=r2, @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYBLOB="3561030e35782888b8f5c2dcd2cd6618bb6738cd6eeecaa3a822214c457931dd098a224a371e2e5830d17274ff7ffd7df9ec5361ae70e1bed6e4875526bf09fbb86d4a41a755e2935f82648826e59e91d7554d82886b680c508bcde9855d627dc363f4321911790d99f27d3128d83d0bdc2b4b39c4c89a8ff3b796c78a771ae9a2638595c108699d79a0401c11531d4d3b0eaeb820a20a54634dda85789cee568560cbde85849c97d22c2e9fccceb5bdf1d45c3c04d9b68fdc1c43"], 0x48)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f00000002c0)="23000000010006", 0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r6)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f00000001c0)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x74, r10, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5}]}]}, 0x74}}, 0x20000000)

362.456637ms ago: executing program 6 (id=3144):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
sendfile(r2, r2, 0x0, 0x2000000000000002)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000637030f3ff0000009500000000000000f06960ca6972eacc9372c95a8b8034ca3541"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x13, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4)
listen(r0, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x10, 0xb66}, 0x94)

221.000719ms ago: executing program 1 (id=3145):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={<r0=>0xffffffffffffffff, 0x4af, 0x7, 0x10000000000000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x5, &(0x7f0000000d00)=""/5, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'dvmrp0\x00', @local})
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0)
write$tun(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f60204050008"], 0x124a)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840)
write$nci(r3, &(0x7f0000000640)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @a_listen={0x8, 0x3, 0x4, 0x80, 0x1, 0xd, 0x9, "", 0xf4, 0xc2, 0x10, 0x40, 0x52, "c7d8609407735857f4f7b2ef31465e92d4f619ef2d1a1e3fbdd91dfed33e41e18c24911e17b01835d8615bac432a4297d88330bbae73c71be5327a7ce7af4da5ec0e5b2eaa7c61a8a07e8a26d83401ad35db"}}, 0x61)
pwritev(r2, &(0x7f0000000040), 0x0, 0x8, 0x0)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f00000000c0)={0x2b, 0x3})

219.382492ms ago: executing program 6 (id=3146):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xdc, r2, 0x208, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3ff, @mcast2, 0x12}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x69}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0xdc}}, 0x40880)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) (async)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xdc, r2, 0x208, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3ff, @mcast2, 0x12}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x69}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0xdc}}, 0x40880) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)

218.485616ms ago: executing program 0 (id=3147):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
socketpair(0x3, 0x3, 0x1, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
sendmsg$rds(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000300)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200), 0x3, 0x8001, 0x8, 0x1, 0x10, 0x5}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x9}, &(0x7f0000000240)=0x401, &(0x7f0000000280), 0x8, 0x2, 0x8, 0x3ff, 0x15, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x800, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xaf}], 0x110, 0x4000000}, 0x4)
recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x11000)
writev(r5, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4081, 0xff1}], 0x1}, 0x1)
recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000500)=@ax25={{0x3, @null}, [@remote, @rose, @netrom, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001600)=""/192, 0xc0}], 0x2, &(0x7f00000016c0)=""/235, 0xeb}, 0x22)

87.732351ms ago: executing program 5 (id=3148):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000400000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0)

59.775946ms ago: executing program 6 (id=3149):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = socket(0xa, 0x3, 0xfc)
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000a3942e80274d000000000100000000000000000500000037fbad933554e5eb2f4e5b93ce9fc247b122e24ccf739e7c626e48784f706cffdba63dcbe095ebe7ec06840b2dd4c7ef0d1c1b66ace981d478dc43e1ea6e9577a99873b0bdc8a13874717f6cc431676f3f0002e69d2b17a2b2c7d90665f2b3d0c57b9c2c103bebf828ac70df0e4b9c87f7fd8b417ebf4caaa1e6bfd670c10c590cab70280b25e2a1966ccf58d33861af8398861806bc5a691c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
read(r4, &(0x7f00000000c0)=""/81, 0x51)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="100700000014040027bd7004fb02df25"], 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x1)
setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/ipc\x00')
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f0000001300)={'nr0\x00'})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x21}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed00)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc, 0x0, 0x9, 0xb9f1, 0x1ff}, &(0x7f0000000340)=0x14)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x2, 0x9, 0x40, 0x8, 0x5a, 0xff, 0x9, 0xa}, 0xe)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000023, 0x0)
socket$kcm(0x10, 0x7, 0x0)

0s ago: executing program 5 (id=3150):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x28, 0x5, 0x0) (async)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x4) (async)
listen(r3, 0x4)
accept4$unix(r3, 0x0, 0x0, 0x800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)={0x208, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "0f5089052b92842f66bf7b66c715"}, @NL80211_ATTR_FILS_ERP_RRK={0x8d, 0xfc, "ad365a58d953ff79a93f3513edcac408e5617e40c7998f8ce1779730fece3b030ec5e1a3d72e548221b5912d21746f6d42d75c22b7b75e1ee171081bcf28d15afe4ac3b32f0df2a6bfe13de330b52870c3fd03ee600065ba90ed5d184c9778f6a5bf150fe2a7a36e29c80d54a427e9ec3e22e6e0d5daa25faa571a306eae004a005110c02d839ada88"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "8321b3a065d40ae28de95ae75086174c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x15, 0xfa, "b93a72629a693aa43eaa9310c8d88294a0"}, @NL80211_ATTR_FILS_ERP_RRK={0x67, 0xfc, "269ee06b0815b4c366d14e3cba960e26d9473b7cec943cd26c199fd587083af8c326a21058a999f3b43fea9b20b4e90637d1cb106d477c555756db749352125c432dfe4cf7d29ef683629d38d67337fbad841c0d7d444ce31cd90caad92a85c585ae33"}], @NL80211_ATTR_IE={0x21, 0x2a, [@mic={0x8c, 0x18, {0x0, "de9deb2b57fb", @long="9e8c8557f0a890568f167ce233d93298"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "c92de7df71d6c4509501cbc3c71ae09d7b11e9f158812a0d66a9a968d9338d1df7189890eaeadf38cf6e7a8881bb4099a716e78103ca3a57231f2b637b595e1e5facdf040310cead62e7e66404300613ae94787c5ba838401ea7e9679faeb6d855db87062284e52fd2eee5bc3a328de7f8af"}]]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) (async)
sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c)

kernel console output (not intermixed with test programs):

509] batman_adv: batadv0: Interface deactivated: macvlan2
[  250.726331][  T897] wg1 speed is unknown, defaulting to 1000
[  250.733457][ T7273] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.752102][  T897] syz0: Port: 1 Link DOWN
[  250.756955][ T7273] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.794600][ T7273] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.815567][ T7273] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.841844][T12525] wg1 speed is unknown, defaulting to 1000
[  250.848481][ T7273] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.858172][ T7273] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.877236][ T7273] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.886618][ T7273] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.971240][T12536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 56552 - 0
[  251.012474][T12540] ipvlan2: entered promiscuous mode
[  251.018944][T12540] bridge0: port 2(ipvlan2) entered blocking state
[  251.025772][T12540] bridge0: port 2(ipvlan2) entered disabled state
[  251.032392][T12540] ipvlan2: entered allmulticast mode
[  251.038260][T12540] bridge0: entered allmulticast mode
[  251.047419][T12540] ipvlan2: left allmulticast mode
[  251.052578][T12540] bridge0: left allmulticast mode
[  251.098446][T12536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 56552 - 0
[  251.136113][T12547] tipc: Resetting bearer <eth:syzkaller0>
[  251.191026][T12536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 56552 - 0
[  251.393972][T12536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 56552 - 0
[  251.631235][T12562] pim6reg: entered allmulticast mode
[  251.643043][ T3481] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 56552 - 0
[  251.663118][T12563] pim6reg: left allmulticast mode
[  251.735952][ T7271] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 56552 - 0
[  251.841507][ T3481] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 56552 - 0
[  251.889312][ T7273] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 56552 - 0
[  251.974257][T12569] netlink: 'syz.5.1692': attribute type 4 has an invalid length.
[  252.087320][T12575] __nla_validate_parse: 1 callbacks suppressed
[  252.087338][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1693'.
[  252.152767][T12581] lo speed is unknown, defaulting to 1000
[  252.180443][T12581] lo speed is unknown, defaulting to 1000
[  252.196200][T12581] lo speed is unknown, defaulting to 1000
[  252.214914][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1698'.
[  252.222754][T12581] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  252.314304][T12581] lo speed is unknown, defaulting to 1000
[  252.315510][T12587] wg1 speed is unknown, defaulting to 1000
[  252.348015][T12587] lo speed is unknown, defaulting to 1000
[  252.356058][T12581] lo speed is unknown, defaulting to 1000
[  252.378277][T12581] lo speed is unknown, defaulting to 1000
[  252.410757][T12581] lo speed is unknown, defaulting to 1000
[  252.418794][T12596] netlink: 'syz.6.1701': attribute type 2 has an invalid length.
[  252.428511][T12596] netlink: 'syz.6.1701': attribute type 4 has an invalid length.
[  252.482850][T12581] lo speed is unknown, defaulting to 1000
[  252.485378][T12599] netlink: 'syz.6.1701': attribute type 2 has an invalid length.
[  252.526145][T12599] netlink: 'syz.6.1701': attribute type 4 has an invalid length.
[  252.727992][T12585] pim6reg: entered allmulticast mode
[  252.749512][T12609] netlink: 'syz.5.1702': attribute type 11 has an invalid length.
[  252.766208][T12585] pim6reg: left allmulticast mode
[  252.782122][T12609] netlink: 'syz.5.1702': attribute type 11 has an invalid length.
[  252.798245][T12609] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1702'.
[  253.276831][T12597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.617061][T12649] wg1 speed is unknown, defaulting to 1000
[  253.652977][T12656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.739230][T12650] bridge_slave_0: default FDB implementation only supports local addresses
[  253.765987][T12649] lo speed is unknown, defaulting to 1000
[  253.973576][T12667] netlink: 'syz.1.1718': attribute type 10 has an invalid length.
[  253.987221][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1718'.
[  254.008593][T12667] `: Port device geneve0 added
[  254.017454][ T7271] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.029580][ T7271] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.053412][ T7271] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.063881][ T7271] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.149638][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1716'.
[  254.210106][T12677] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1722'.
[  254.421304][T12683] wg1 speed is unknown, defaulting to 1000
[  254.470592][T12683] lo speed is unknown, defaulting to 1000
[  254.565746][T12688] wg1 speed is unknown, defaulting to 1000
[  254.693534][T12688] lo speed is unknown, defaulting to 1000
[  255.188277][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1730'.
[  255.206292][T12710] batadv_slave_1: entered promiscuous mode
[  255.238287][T12709] batadv_slave_1: left promiscuous mode
[  255.290799][T12716] netlink: 'syz.3.1731': attribute type 9 has an invalid length.
[  255.316506][T12716] netlink: 'syz.3.1731': attribute type 7 has an invalid length.
[  255.324397][T12716] netlink: 'syz.3.1731': attribute type 8 has an invalid length.
[  255.329789][T12720] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1732'.
[  255.467544][T12720] unsupported nlmsg_type 40
[  255.597784][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'.
[  255.618716][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'.
[  255.674142][T12730] wg1 speed is unknown, defaulting to 1000
[  255.696950][T12730] lo speed is unknown, defaulting to 1000
[  255.903256][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.009261][T12761] wg1: entered allmulticast mode
[  256.353304][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.362465][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.371674][T12783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.381749][T12783] syzkaller0: entered promiscuous mode
[  256.390029][T12783] syzkaller0: entered allmulticast mode
[  256.433508][T12783] tipc: Resetting bearer <eth:syzkaller0>
[  256.441989][T12782] tipc: Resetting bearer <eth:syzkaller0>
[  256.458463][T12782] tipc: Disabling bearer <eth:syzkaller0>
[  256.514688][T12791] x_tables: duplicate underflow at hook 1
[  256.605925][T12795] netlink: 'syz.3.1753': attribute type 13 has an invalid length.
[  256.782566][T12795] tipc: Resetting bearer <eth:syzkaller0>
[  256.860824][ T7271] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 56552 - 0
[  256.885538][ T7271] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 56552 - 0
[  256.894334][ T7271] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 56552 - 0
[  256.973575][ T7271] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 56552 - 0
[  256.989547][T12805] wg1 speed is unknown, defaulting to 1000
[  257.027133][T12805] lo speed is unknown, defaulting to 1000
[  257.526482][T12826] __nla_validate_parse: 5 callbacks suppressed
[  257.526501][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1763'.
[  258.121143][T12848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.132431][T12848] tipc: Resetting bearer <eth:syzkaller0>
[  258.304242][T12855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.467983][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1776'.
[  258.615113][T12887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1778'.
[  258.745155][T12893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1780'.
[  258.788884][T12896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1780'.
[  258.856856][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'.
[  259.069474][T12902] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  259.109078][T12907] wg1 speed is unknown, defaulting to 1000
[  259.140344][T12907] lo speed is unknown, defaulting to 1000
[  259.155276][   T10] tipc: Node number set to 3776643189
[  259.591946][T12943] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1792'.
[  260.044122][T12946] wg1 speed is unknown, defaulting to 1000
[  260.065641][T12946] lo speed is unknown, defaulting to 1000
[  260.624679][T12965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'.
[  260.651969][T12957] validate_nla: 3 callbacks suppressed
[  260.651986][T12957] netlink: 'syz.1.1796': attribute type 4 has an invalid length.
[  260.817015][T12970] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1799'.
[  260.879885][T12970] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1799'.
[  261.073709][T12982] xt_bpf: check failed: parse error
[  261.086861][T12982] netlink: 'syz.3.1802': attribute type 1 has an invalid length.
[  261.112560][T12979] wg1 speed is unknown, defaulting to 1000
[  261.181048][T12982] bond6: entered promiscuous mode
[  261.191277][T12982] 8021q: adding VLAN 0 to HW filter on device bond6
[  261.199478][T12979] lo speed is unknown, defaulting to 1000
[  261.246521][T12988] 8021q: adding VLAN 0 to HW filter on device bond7
[  261.256657][T12988] bond6: (slave bond7): making interface the new active one
[  261.267391][T12988] bond7: entered promiscuous mode
[  261.273422][T12988] bond6: (slave bond7): Enslaving as an active interface with an up link
[  261.439063][T12994] bond8: entered allmulticast mode
[  261.481366][T12995] ip6gretap1: entered allmulticast mode
[  261.489827][T12995] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  261.511540][T13004] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  262.039061][T13030] wg1 speed is unknown, defaulting to 1000
[  262.091936][T13030] lo speed is unknown, defaulting to 1000
[  262.099635][T13044] No such timeout policy "syz1"
[  262.453399][T13061] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  262.465037][T13062] netlink: 'syz.0.1815': attribute type 11 has an invalid length.
[  262.480154][ T7273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.510202][T13062] netlink: 'syz.0.1815': attribute type 11 has an invalid length.
[  262.524755][ T7273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.555447][T13062] __nla_validate_parse: 7 callbacks suppressed
[  262.555464][T13062] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1815'.
[  262.677824][T13028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.933638][T13088] siw: device registration error -23
[  262.966242][T13089] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1827'.
[  262.975558][T13089] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1827'.
[  262.988131][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'.
[  263.064689][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'.
[  263.344910][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'.
[  263.358311][T13109] C: renamed from team_slave_0
[  263.366700][T13109] netlink: 'syz.0.1834': attribute type 3 has an invalid length.
[  263.374589][T13109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1834'.
[  263.383792][T13109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  263.577479][  T874] tipc: Node number set to 2330877077
[  263.612915][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1839'.
[  263.783317][T13131] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1841'.
[  263.852929][T13131] nbd: socks must be embedded in a SOCK_ITEM attr
[  263.867663][T13132] bridge4: entered allmulticast mode
[  264.097325][T13158] syz_tun: entered allmulticast mode
[  264.278433][T13175] 0ªX¹¦À: left allmulticast mode
[  264.298221][T13175] C: left allmulticast mode
[  264.310323][T13175] xfrm0: left promiscuous mode
[  264.316331][T13175] xfrm0: left allmulticast mode
[  264.326970][T13175] bond1: left promiscuous mode
[  264.337253][T13175] bond1: left allmulticast mode
[  264.342441][T13175] bridge1: left promiscuous mode
[  264.347595][T13175] bridge1: left allmulticast mode
[  264.360409][T13175] geneve2: left promiscuous mode
[  264.366187][T13175] xfrm1: left promiscuous mode
[  264.371204][T13175] xfrm1: left allmulticast mode
[  264.378246][T13175] gtp0: left promiscuous mode
[  264.383316][T13175] gtp0: left allmulticast mode
[  264.570992][T13192] xt_TCPMSS: Only works on TCP SYN packets
[  264.606455][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1856'.
[  264.632864][T13195] erspan0: left promiscuous mode
[  264.642643][T13195] erspan0: left allmulticast mode
[  264.662176][T12281] IPVS: starting estimator thread 0...
[  264.677248][T13195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.760595][T13199] IPVS: using max 34 ests per chain, 81600 per kthread
[  264.780499][T13189] wg1 speed is unknown, defaulting to 1000
[  264.808533][T13202] macvtap2: entered promiscuous mode
[  264.813947][T13202] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[  264.837138][T13189] lo speed is unknown, defaulting to 1000
[  265.863846][T13246] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  265.876378][T13254] --map-set only usable from mangle table
[  265.881440][T13250] wg1 speed is unknown, defaulting to 1000
[  265.917283][T13250] lo speed is unknown, defaulting to 1000
[  266.712506][T13277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.222691][T13292] netlink: 'syz.6.1883': attribute type 3 has an invalid length.
[  267.383677][T13296] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  267.792838][T13315] sctp: [Deprecated]: syz.1.1892 (pid 13315) Use of int in max_burst socket option.
[  267.792838][T13315] Use struct sctp_assoc_value instead
[  267.979602][T13324] netlink: 'syz.1.1894': attribute type 7 has an invalid length.
[  268.017104][T13324] netlink: 'syz.1.1894': attribute type 8 has an invalid length.
[  268.172937][T13333] __nla_validate_parse: 21 callbacks suppressed
[  268.172957][T13333] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1896'.
[  268.194121][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1897'.
[  268.407428][T13351] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.454855][T13351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.460051][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.463849][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.514285][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.575019][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.613665][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1902'.
[  268.637953][T13360] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.711938][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'.
[  268.737355][T13360] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.838156][T13360] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.930079][T13360] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.046786][T13382] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.122324][T13392] FAULT_INJECTION: forcing a failure.
[  269.122324][T13392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  269.141482][T13392] CPU: 1 UID: 0 PID: 13392 Comm: syz.1.1914 Not tainted syzkaller #0 PREEMPT(full) 
[  269.141509][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  269.141529][T13392] Call Trace:
[  269.141537][T13392]  <TASK>
[  269.141546][T13392]  dump_stack_lvl+0x189/0x250
[  269.141573][T13392]  ? __pfx____ratelimit+0x10/0x10
[  269.141599][T13392]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.141621][T13392]  ? __pfx__printk+0x10/0x10
[  269.141638][T13392]  ? __might_fault+0xb0/0x130
[  269.141670][T13392]  should_fail_ex+0x414/0x560
[  269.141699][T13392]  _copy_from_user+0x2d/0xb0
[  269.141719][T13392]  __sys_sendto+0x25c/0x520
[  269.141739][T13392]  ? __pfx___sys_sendto+0x10/0x10
[  269.141752][T13392]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  269.141781][T13392]  ? __fget_files+0x3a0/0x420
[  269.141809][T13392]  ? ksys_write+0x22a/0x250
[  269.141842][T13392]  ? __pfx_ksys_write+0x10/0x10
[  269.141867][T13392]  __x64_sys_sendto+0xde/0x100
[  269.141888][T13392]  do_syscall_64+0xfa/0xfa0
[  269.141904][T13392]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.141920][T13392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.141938][T13392]  ? clear_bhb_loop+0x60/0xb0
[  269.141959][T13392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.141974][T13392] RIP: 0033:0x7fd7af98f6c9
[  269.141992][T13392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.142006][T13392] RSP: 002b:00007fd7adbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  269.142024][T13392] RAX: ffffffffffffffda RBX: 00007fd7afbe5fa0 RCX: 00007fd7af98f6c9
[  269.142036][T13392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  269.142046][T13392] RBP: 00007fd7adbf6090 R08: 0000200000000000 R09: 000000000000001c
[  269.142057][T13392] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001
[  269.142068][T13392] R13: 00007fd7afbe6038 R14: 00007fd7afbe5fa0 R15: 00007ffd580b58c8
[  269.142099][T13392]  </TASK>
[  269.338931][ T1150] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.419184][T13382] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.505131][T13400] xt_l2tp: v2 doesn't support IP mode
[  269.558378][T13382] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.610857][T13147] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.650585][T13382] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.689626][ T7271] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.714605][ T7271] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.847808][ T7271] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.879581][ T7271] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.897053][ T7271] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.932624][T13147] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.995128][T13415] wg1 speed is unknown, defaulting to 1000
[  270.002698][T13415] lo speed is unknown, defaulting to 1000
[  270.149956][T13147] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.158530][T13147] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.210983][T13147] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.239948][T13147] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.377008][ T5149] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  270.501616][T13454] SET target dimension over the limit!
[  270.844236][T13466] 8021q: adding VLAN 0 to HW filter on device bond5
[  271.754053][T13523] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.835646][T13523] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.921914][T13523] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.996835][T13523] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.077860][T13550] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  272.087472][T13147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.114816][T13147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.137777][ T7274] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.159812][T13147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.237969][T13556] netlink: 'syz.6.1961': attribute type 11 has an invalid length.
[  272.283042][T13559] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  272.293436][T13559] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  272.675436][T13583] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.082089][   T10] IPVS: starting estimator thread 0...
[  273.114199][T13602] wg1 speed is unknown, defaulting to 1000
[  273.122692][T13602] lo speed is unknown, defaulting to 1000
[  273.175119][T13603] IPVS: using max 30 ests per chain, 72000 per kthread
[  273.258116][T13604] wg1 speed is unknown, defaulting to 1000
[  273.288337][T13604] lo speed is unknown, defaulting to 1000
[  273.387377][T13619] __nla_validate_parse: 19 callbacks suppressed
[  273.387396][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'.
[  273.624512][T13622] netlink: 'syz.0.1982': attribute type 2 has an invalid length.
[  273.648151][T13624] wg1 speed is unknown, defaulting to 1000
[  273.655994][T13624] lo speed is unknown, defaulting to 1000
[  273.971660][T13641] netlink: 'syz.6.1987': attribute type 5 has an invalid length.
[  274.022151][T13645] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  274.285479][T13656] tc_dump_action: action bad kind
[  274.569072][T13670] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1995'.
[  274.797509][T13681] netlink: 'syz.1.1997': attribute type 30 has an invalid length.
[  274.971431][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'.
[  275.053752][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2003'.
[  275.145289][T13697] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.265453][ T6153] IPVS: ip_vs_send_async error -101
[  275.324020][T13709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2007'.
[  275.457322][T13709] syzkaller0: entered promiscuous mode
[  275.462855][T13709] syzkaller0: entered allmulticast mode
[  275.693394][T13733] trusted_key: syz.0.2011 sent an empty control message without MSG_MORE.
[  275.787019][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  277.184749][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'.
[  277.193942][T13738] netem: unknown loss type 0
[  277.199015][T13738] netem: change failed
[  277.248933][T13699] wg1 speed is unknown, defaulting to 1000
[  277.289879][T13699] lo speed is unknown, defaulting to 1000
[  277.348608][T13753] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2018'.
[  277.380077][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2020'.
[  277.380142][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2018'.
[  277.663564][T13777] syzkaller0: entered promiscuous mode
[  277.674136][T13777] syzkaller0: entered allmulticast mode
[  277.881018][T13789] netlink: 'syz.6.2031': attribute type 1 has an invalid length.
[  277.976100][T13789] 8021q: adding VLAN 0 to HW filter on device bond1
[  278.137668][T13808] v: renamed from vlan0
[  278.447063][T13835] __nla_validate_parse: 3 callbacks suppressed
[  278.447082][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'.
[  278.593315][T13845] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  278.675250][T13853] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2050'.
[  278.738906][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2051'.
[  278.769241][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'.
[  278.984225][T13856] netlink: 'syz.0.2049': attribute type 5 has an invalid length.
[  279.414682][ T6153] IPVS: ip_vs_send_async error -101
[  279.451286][T13895] wg1 speed is unknown, defaulting to 1000
[  279.478703][T13895] lo speed is unknown, defaulting to 1000
[  279.669484][T13913] wg1 speed is unknown, defaulting to 1000
[  279.701134][T13913] lo speed is unknown, defaulting to 1000
[  279.944149][T13925] netlink: 26456 bytes leftover after parsing attributes in process `syz.3.2068'.
[  280.466396][T13948] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2076'.
[  280.939559][T13969] wg1 speed is unknown, defaulting to 1000
[  280.948237][T13969] lo speed is unknown, defaulting to 1000
[  281.120690][T13977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2084'.
[  281.546849][T13987] svc: failed to register nfsdv3 RPC service (errno 111).
[  281.560098][T13987] svc: failed to register nfsaclv3 RPC service (errno 111).
[  281.726353][T14005] wg1 speed is unknown, defaulting to 1000
[  281.745295][T14005] lo speed is unknown, defaulting to 1000
[  281.968461][T14017] openvswitch: netlink: Message has 8 unknown bytes.
[  282.001271][T14017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.178062][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'.
[  282.201156][T14031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2103'.
[  282.290882][ T1150] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  282.306455][T14044] Bluetooth: MGMT ver 1.23
[  282.312179][T14044] netlink: 'syz.6.2107': attribute type 15 has an invalid length.
[  282.325097][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2107'.
[  282.335305][T14044] netlink: 'syz.6.2107': attribute type 15 has an invalid length.
[  282.401002][T14031] wg1 speed is unknown, defaulting to 1000
[  282.417147][T14031] lo speed is unknown, defaulting to 1000
[  282.870285][T14060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9
[  283.076212][T14068] netlink: 'syz.0.2112': attribute type 9 has an invalid length.
[  283.321013][T14079] wg1 speed is unknown, defaulting to 1000
[  283.395406][T14079] lo speed is unknown, defaulting to 1000
[  283.405086][T14078] wg1 speed is unknown, defaulting to 1000
[  283.448812][T14078] lo speed is unknown, defaulting to 1000
[  284.124366][T14118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  284.880734][T14155] __nla_validate_parse: 5 callbacks suppressed
[  284.880754][T14155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2132'.
[  284.896496][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2131'.
[  284.942718][T14155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2132'.
[  285.141139][T14173] netlink: 'syz.6.2135': attribute type 1 has an invalid length.
[  285.227646][T14179] wg1 speed is unknown, defaulting to 1000
[  285.235455][T14179] lo speed is unknown, defaulting to 1000
[  285.249741][T14181] dvmrp0: entered allmulticast mode
[  285.752417][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2145'.
[  285.770392][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2145'.
[  285.864628][T14209] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  285.997717][T14217] xt_l2tp: v2 tid > 0xffff: 37482740
[  286.011450][T14217] tc_dump_action: action bad kind
[  286.210761][T14224] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2152'.
[  286.263933][T14222] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  286.431991][T14235] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  286.458477][T14230] xt_ecn: cannot match TCP bits for non-tcp packets
[  286.470740][T14230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'.
[  286.709191][T14250] wg1 speed is unknown, defaulting to 1000
[  286.717764][T14250] lo speed is unknown, defaulting to 1000
[  286.777954][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'.
[  286.987689][T14265] nftables ruleset with unbound set
[  287.091748][T14270] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  287.124075][T14274] netlink: 'syz.1.2167': attribute type 1 has an invalid length.
[  287.170988][T14274] 8021q: adding VLAN 0 to HW filter on device bond7
[  287.182768][T14278] netlink: 584 bytes leftover after parsing attributes in process `syz.0.2168'.
[  287.198289][T14275] ip6gretap3: entered allmulticast mode
[  287.213157][T14275] bond7: (slave ip6gretap3): making interface the new active one
[  287.224805][T14275] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link
[  287.259501][T14280] wg1 speed is unknown, defaulting to 1000
[  287.282868][T14280] lo speed is unknown, defaulting to 1000
[  287.487047][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'.
[  288.271559][T14314] atomic_op ffff88807922c198 conn xmit_atomic 0000000000000000
[  288.361697][T14337] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  289.063412][T14370] openvswitch: netlink: Message has 16 unknown bytes.
[  289.415033][T14379] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.490430][T14379] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.508450][T14379] bond2: (slave sit1): The slave device specified does not support setting the MAC address
[  289.539623][T14379] bond2: (slave sit1): Error -95 calling set_mac_address
[  289.661032][T14383] wg1 speed is unknown, defaulting to 1000
[  289.690349][T14383] lo speed is unknown, defaulting to 1000
[  289.887673][T14405] tipc: Resetting bearer <eth:syzkaller0>
[  289.896228][T14405] syzkaller0: left promiscuous mode
[  290.296880][T14430] __nla_validate_parse: 4 callbacks suppressed
[  290.296896][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2208'.
[  290.303464][T14443] netlink: 572 bytes leftover after parsing attributes in process `syz.6.2211'.
[  290.361484][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2208'.
[  290.377553][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'.
[  290.643153][T14462] wg1 speed is unknown, defaulting to 1000
[  290.650986][T14462] lo speed is unknown, defaulting to 1000
[  290.938847][T14470] wg1 speed is unknown, defaulting to 1000
[  290.954589][T14470] lo speed is unknown, defaulting to 1000
[  290.957655][T14471] wg1 speed is unknown, defaulting to 1000
[  290.991488][T14471] lo speed is unknown, defaulting to 1000
[  291.387538][T14501] veth1_to_bond: entered allmulticast mode
[  291.418781][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'.
[  291.537863][T14501] veth1_to_bond (unregistering): left allmulticast mode
[  292.490017][T14558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'.
[  292.623470][ T5829] Bluetooth: hci5: command 0x0405 tx timeout
[  292.884867][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'.
[  293.034975][T14554] wg1 speed is unknown, defaulting to 1000
[  293.061377][T14554] lo speed is unknown, defaulting to 1000
[  293.071959][T14591] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2246'.
[  293.329006][T14605] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  293.602041][T14620] bond3: entered promiscuous mode
[  293.615305][T14620] 8021q: adding VLAN 0 to HW filter on device bond3
[  293.802998][T14635] netlink: 'syz.6.2259': attribute type 15 has an invalid length.
[  293.811957][T14635] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2259'.
[  293.853498][T14635] syzkaller1: entered promiscuous mode
[  293.869360][T14635] syzkaller1: entered allmulticast mode
[  293.900175][T14643] netlink: 'syz.5.2263': attribute type 3 has an invalid length.
[  293.910644][T14643] netlink: 'syz.5.2263': attribute type 3 has an invalid length.
[  294.090204][T14642] netlink: 'syz.1.2256': attribute type 1 has an invalid length.
[  294.121956][T14642] bond9: entered promiscuous mode
[  294.127130][T14642] bond9: entered allmulticast mode
[  294.150167][T14642] bond9: (slave ip6gretap4): making interface the new active one
[  294.158108][T14642] ip6gretap4: entered promiscuous mode
[  294.163730][T14642] ip6gretap4: entered allmulticast mode
[  294.170405][T14642] bond9: (slave ip6gretap4): Enslaving as an active interface with an up link
[  294.471444][T14676] netlink: 'syz.0.2271': attribute type 4 has an invalid length.
[  294.552221][T14682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2272'.
[  295.086647][T14699] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  295.454098][T14715] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.461391][T14715] bridge0: port 1(bridge_slave_0) entered listening state
[  295.537930][T14715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.822978][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2283'.
[  295.980676][T14724] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2284'.
[  296.023575][T14724] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2284'.
[  296.051298][T14720] bond3: entered allmulticast mode
[  296.052776][T14724] netlink: 'syz.0.2284': attribute type 6 has an invalid length.
[  296.098096][T14724] netlink: 'syz.0.2284': attribute type 5 has an invalid length.
[  296.100225][T14729] wg1 speed is unknown, defaulting to 1000
[  296.113372][T14729] lo speed is unknown, defaulting to 1000
[  296.133351][T14724] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2284'.
[  296.166083][T14731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10
[  296.213789][T14732] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2285'.
[  296.227328][T14734] ieee802154 phy0 wpan0: encryption failed: -22
[  296.298111][T14734] tap0: tun_chr_ioctl cmd 35111
[  296.396200][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'.
[  296.483543][T14743] FAULT_INJECTION: forcing a failure.
[  296.483543][T14743] name failslab, interval 1, probability 0, space 0, times 0
[  296.516762][T14743] CPU: 0 UID: 0 PID: 14743 Comm: syz.3.2288 Not tainted syzkaller #0 PREEMPT(full) 
[  296.516791][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  296.516800][T14743] Call Trace:
[  296.516813][T14743]  <TASK>
[  296.516820][T14743]  dump_stack_lvl+0x189/0x250
[  296.516847][T14743]  ? __pfx____ratelimit+0x10/0x10
[  296.516872][T14743]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.516893][T14743]  ? __pfx__printk+0x10/0x10
[  296.516910][T14743]  ? __lock_acquire+0xab9/0xd20
[  296.516938][T14743]  should_fail_ex+0x414/0x560
[  296.516967][T14743]  should_failslab+0xa8/0x100
[  296.516986][T14743]  __kmalloc_cache_noprof+0x6f/0x6f0
[  296.517009][T14743]  ? tipc_net+0x45/0x270
[  296.517027][T14743]  ? tipc_disc_create+0x6e/0x4a0
[  296.517061][T14743]  tipc_disc_create+0x6e/0x4a0
[  296.517093][T14743]  __tipc_nl_bearer_enable+0xdee/0x13f0
[  296.517124][T14743]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  296.517140][T14743]  ? __mutex_lock+0xd3b/0x1350
[  296.517172][T14743]  ? tipc_nl_bearer_enable+0x17/0x40
[  296.517195][T14743]  ? __pfx___mutex_lock+0x10/0x10
[  296.517213][T14743]  ? rcu_is_watching+0x15/0xb0
[  296.517243][T14743]  ? __nla_parse+0x40/0x60
[  296.517267][T14743]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  296.517289][T14743]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  296.517316][T14743]  tipc_nl_bearer_enable+0x22/0x40
[  296.517334][T14743]  genl_family_rcv_msg_doit+0x215/0x300
[  296.517365][T14743]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  296.517403][T14743]  ? stack_trace_save+0x9c/0xe0
[  296.517432][T14743]  genl_rcv_msg+0x60e/0x790
[  296.517461][T14743]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.517482][T14743]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  296.517514][T14743]  netlink_rcv_skb+0x208/0x470
[  296.517529][T14743]  ? __lock_acquire+0xab9/0xd20
[  296.517544][T14743]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.517567][T14743]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  296.517606][T14743]  ? down_read+0x1ad/0x2e0
[  296.517625][T14743]  genl_rcv+0x28/0x40
[  296.517644][T14743]  netlink_unicast+0x82f/0x9e0
[  296.517677][T14743]  ? __pfx_netlink_unicast+0x10/0x10
[  296.517704][T14743]  ? netlink_sendmsg+0x642/0xb30
[  296.517719][T14743]  ? skb_put+0x11b/0x210
[  296.517741][T14743]  netlink_sendmsg+0x805/0xb30
[  296.517769][T14743]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.517795][T14743]  ? aa_sock_msg_perm+0xf1/0x1d0
[  296.517819][T14743]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.517835][T14743]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.517855][T14743]  __sock_sendmsg+0x21c/0x270
[  296.517880][T14743]  ____sys_sendmsg+0x505/0x830
[  296.517906][T14743]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.517936][T14743]  ? import_iovec+0x74/0xa0
[  296.517962][T14743]  ___sys_sendmsg+0x21f/0x2a0
[  296.517984][T14743]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.518044][T14743]  ? __fget_files+0x2a/0x420
[  296.518059][T14743]  ? __fget_files+0x3a0/0x420
[  296.518088][T14743]  __x64_sys_sendmsg+0x19b/0x260
[  296.518110][T14743]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  296.518141][T14743]  ? __pfx_ksys_write+0x10/0x10
[  296.518169][T14743]  ? do_syscall_64+0xbe/0xfa0
[  296.518191][T14743]  do_syscall_64+0xfa/0xfa0
[  296.518206][T14743]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.518223][T14743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.518246][T14743]  ? clear_bhb_loop+0x60/0xb0
[  296.518268][T14743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.518284][T14743] RIP: 0033:0x7f796838f6c9
[  296.518301][T14743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.518316][T14743] RSP: 002b:00007f7969162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.518336][T14743] RAX: ffffffffffffffda RBX: 00007f79685e5fa0 RCX: 00007f796838f6c9
[  296.518348][T14743] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  296.518360][T14743] RBP: 00007f7969162090 R08: 0000000000000000 R09: 0000000000000000
[  296.518370][T14743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.518381][T14743] R13: 00007f79685e6038 R14: 00007f79685e5fa0 R15: 00007ffe5f98bdc8
[  296.518414][T14743]  </TASK>
[  296.518495][T14743] tipc: Disabling bearer <eth:ipvlan1>
[  296.946440][T14743] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to create discoverer
[  296.985928][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'.
[  297.203524][T14757] wg1 speed is unknown, defaulting to 1000
[  297.236194][T14757] lo speed is unknown, defaulting to 1000
[  297.353508][T14770] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  297.633134][T14776] netlink: 'syz.3.2297': attribute type 10 has an invalid length.
[  297.755669][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'.
[  297.985689][T14792] netlink: 'syz.3.2303': attribute type 1 has an invalid length.
[  298.155898][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2303'.
[  298.293570][T14799] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  298.306080][T14799] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  298.419615][T14792] bond9: (slave bridge7): Enslaving as an active interface with a down link
[  298.467555][T14807] macvlan2: entered promiscuous mode
[  298.473044][T14807] macvlan2: entered allmulticast mode
[  298.483169][T14807] bond9: entered promiscuous mode
[  298.491187][T14807] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  298.500326][T14807] bond9: left promiscuous mode
[  298.529031][T14803] wg1 speed is unknown, defaulting to 1000
[  298.536538][T14812] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  298.545625][T14803] lo speed is unknown, defaulting to 1000
[  298.551846][T14806] wg1 speed is unknown, defaulting to 1000
[  298.593980][T14806] lo speed is unknown, defaulting to 1000
[  298.865945][T14819] veth0: entered promiscuous mode
[  298.885408][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2310'.
[  299.350885][T14826] wg1 speed is unknown, defaulting to 1000
[  299.379318][T14826] lo speed is unknown, defaulting to 1000
[  299.826560][T14865] netlink: 'syz.1.2321': attribute type 3 has an invalid length.
[  299.842988][T14865] netlink: 'syz.1.2321': attribute type 3 has an invalid length.
[  299.915848][T14868] pim6reg: entered allmulticast mode
[  299.926321][T14874] netlink: 'syz.5.2323': attribute type 1 has an invalid length.
[  299.978313][T14874] 8021q: adding VLAN 0 to HW filter on device bond4
[  300.114668][T14874] netlink: 'syz.5.2323': attribute type 1 has an invalid length.
[  300.186526][T14868] syzkaller0: entered promiscuous mode
[  300.219521][T14868] syzkaller0: entered allmulticast mode
[  300.398241][T14895] netlink: 'syz.0.2326': attribute type 6 has an invalid length.
[  300.407122][T14895] netlink: 'syz.0.2326': attribute type 5 has an invalid length.
[  300.478416][T14900] netlink: 'syz.0.2326': attribute type 4 has an invalid length.
[  300.542144][T14902] netlink: 'syz.0.2326': attribute type 4 has an invalid length.
[  302.001294][T14887] bond4 (unregistering): Released all slaves
[  302.080179][T12282] lo speed is unknown, defaulting to 1000
[  302.088474][T14910] __nla_validate_parse: 9 callbacks suppressed
[  302.088493][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'.
[  302.095655][T14899] wg1 speed is unknown, defaulting to 1000
[  302.113913][T12282] syz1: Port: 1 Link ACTIVE
[  302.125852][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2328'.
[  302.142128][T14899] lo speed is unknown, defaulting to 1000
[  302.298844][T14918] Cannot find del_set index 4 as target
[  302.389002][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'.
[  302.414914][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'.
[  302.527732][T14928] bond4: entered promiscuous mode
[  302.532813][T14928] bond4: entered allmulticast mode
[  302.538550][T14928] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.565677][T14939] sctp: [Deprecated]: syz.0.2337 (pid 14939) Use of int in max_burst socket option.
[  302.565677][T14939] Use struct sctp_assoc_value instead
[  302.658577][T14928] bond4 (unregistering): Released all slaves
[  302.675406][T14926] team0: No ports can be present during mode change
[  302.690990][T14933] vti1: entered promiscuous mode
[  302.715564][T14944] netlink: 'syz.1.2336': attribute type 1 has an invalid length.
[  303.001327][T14956] wg1 speed is unknown, defaulting to 1000
[  303.010192][T14956] lo speed is unknown, defaulting to 1000
[  303.147283][T14970] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  303.190386][T14956] tap0: tun_chr_ioctl cmd 1074025681
[  303.243440][T14972] netlink: 'syz.6.2345': attribute type 11 has an invalid length.
[  303.254220][T14972] netlink: 'syz.6.2345': attribute type 11 has an invalid length.
[  303.268053][T14972] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2345'.
[  303.331994][T14975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2346'.
[  303.480386][T14988] netlink: 'syz.1.2349': attribute type 30 has an invalid length.
[  303.505413][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2349'.
[  303.551423][T14988] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  303.568000][T14988] bond10 (unregistering): Released all slaves
[  303.606730][T14997] vxcan3: entered allmulticast mode
[  303.963555][T14969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.026189][T15007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2354'.
[  304.040907][T15010] xt_recent: hitcount (4294967290) is larger than allowed maximum (65535)
[  304.190868][T15019] FAULT_INJECTION: forcing a failure.
[  304.190868][T15019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.214663][T15010] batadv_slave_0: entered promiscuous mode
[  304.236001][T15019] CPU: 0 UID: 0 PID: 15019 Comm: syz.1.2357 Not tainted syzkaller #0 PREEMPT(full) 
[  304.236028][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  304.236039][T15019] Call Trace:
[  304.236046][T15019]  <TASK>
[  304.236055][T15019]  dump_stack_lvl+0x189/0x250
[  304.236083][T15019]  ? __pfx____ratelimit+0x10/0x10
[  304.236109][T15019]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.236131][T15019]  ? __pfx__printk+0x10/0x10
[  304.236149][T15019]  ? __might_fault+0xb0/0x130
[  304.236183][T15019]  should_fail_ex+0x414/0x560
[  304.236212][T15019]  _copy_from_user+0x2d/0xb0
[  304.236235][T15019]  ___sys_sendmsg+0x158/0x2a0
[  304.236258][T15019]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.236318][T15019]  ? __fget_files+0x2a/0x420
[  304.236334][T15019]  ? __fget_files+0x3a0/0x420
[  304.236361][T15019]  __sys_sendmmsg+0x227/0x430
[  304.236406][T15019]  ? __pfx___sys_sendmmsg+0x10/0x10
[  304.236435][T15019]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  304.236472][T15019]  ? ksys_write+0x22a/0x250
[  304.236504][T15019]  ? __pfx_ksys_write+0x10/0x10
[  304.236532][T15019]  __x64_sys_sendmmsg+0xa0/0xc0
[  304.236582][T15019]  do_syscall_64+0xfa/0xfa0
[  304.236598][T15019]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.236615][T15019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.236632][T15019]  ? clear_bhb_loop+0x60/0xb0
[  304.236653][T15019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.236670][T15019] RIP: 0033:0x7fd7af98f6c9
[  304.236686][T15019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.236701][T15019] RSP: 002b:00007fd7adbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  304.236721][T15019] RAX: ffffffffffffffda RBX: 00007fd7afbe5fa0 RCX: 00007fd7af98f6c9
[  304.236734][T15019] RDX: 0000000000000001 RSI: 0000200000006c00 RDI: 0000000000000003
[  304.236745][T15019] RBP: 00007fd7adbf6090 R08: 0000000000000000 R09: 0000000000000000
[  304.236756][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.236766][T15019] R13: 00007fd7afbe6038 R14: 00007fd7afbe5fa0 R15: 00007ffd580b58c8
[  304.236797][T15019]  </TASK>
[  304.473208][T15015] IPVS: persistence engine module ip_vs_pe_ not found
[  304.847777][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2364'.
[  304.976965][T15053] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  304.995711][T15054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2366'.
[  305.058946][T15057] netlink: 'syz.5.2368': attribute type 5 has an invalid length.
[  305.169859][T15060] netlink: 'syz.0.2370': attribute type 2 has an invalid length.
[  305.239821][T15068] FAULT_INJECTION: forcing a failure.
[  305.239821][T15068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.306389][T15068] CPU: 0 UID: 0 PID: 15068 Comm: syz.0.2371 Not tainted syzkaller #0 PREEMPT(full) 
[  305.306416][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.306427][T15068] Call Trace:
[  305.306434][T15068]  <TASK>
[  305.306441][T15068]  dump_stack_lvl+0x189/0x250
[  305.306470][T15068]  ? __pfx____ratelimit+0x10/0x10
[  305.306495][T15068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.306517][T15068]  ? __pfx__printk+0x10/0x10
[  305.306548][T15068]  should_fail_ex+0x414/0x560
[  305.306578][T15068]  _copy_from_user+0x2d/0xb0
[  305.306600][T15068]  __copy_msghdr+0x3c5/0x5b0
[  305.306625][T15068]  ___sys_sendmsg+0x1a5/0x2a0
[  305.306646][T15068]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.306702][T15068]  ? __fget_files+0x2a/0x420
[  305.306719][T15068]  ? __fget_files+0x3a0/0x420
[  305.306746][T15068]  __sys_sendmmsg+0x227/0x430
[  305.306772][T15068]  ? __pfx___sys_sendmmsg+0x10/0x10
[  305.306799][T15068]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  305.306834][T15068]  ? ksys_write+0x22a/0x250
[  305.306860][T15068]  ? __pfx_ksys_write+0x10/0x10
[  305.306888][T15068]  __x64_sys_sendmmsg+0xa0/0xc0
[  305.306910][T15068]  do_syscall_64+0xfa/0xfa0
[  305.306926][T15068]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.306943][T15068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.306959][T15068]  ? clear_bhb_loop+0x60/0xb0
[  305.306980][T15068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.306996][T15068] RIP: 0033:0x7f5ce058f6c9
[  305.307013][T15068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.307027][T15068] RSP: 002b:00007f5ce13eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  305.307047][T15068] RAX: ffffffffffffffda RBX: 00007f5ce07e5fa0 RCX: 00007f5ce058f6c9
[  305.307060][T15068] RDX: 0000000000000001 RSI: 0000200000006c00 RDI: 0000000000000003
[  305.307071][T15068] RBP: 00007f5ce13eb090 R08: 0000000000000000 R09: 0000000000000000
[  305.307082][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.307092][T15068] R13: 00007f5ce07e6038 R14: 00007f5ce07e5fa0 R15: 00007ffd5897c068
[  305.307130][T15068]  </TASK>
[  306.324644][T15102] FAULT_INJECTION: forcing a failure.
[  306.324644][T15102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.338062][T15102] CPU: 0 UID: 0 PID: 15102 Comm: syz.3.2382 Not tainted syzkaller #0 PREEMPT(full) 
[  306.338088][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.338099][T15102] Call Trace:
[  306.338106][T15102]  <TASK>
[  306.338112][T15102]  dump_stack_lvl+0x189/0x250
[  306.338139][T15102]  ? __pfx____ratelimit+0x10/0x10
[  306.338165][T15102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.338186][T15102]  ? __pfx__printk+0x10/0x10
[  306.338214][T15102]  should_fail_ex+0x414/0x560
[  306.338253][T15102]  _copy_to_user+0x31/0xb0
[  306.338275][T15102]  simple_read_from_buffer+0xe1/0x170
[  306.338309][T15102]  proc_fail_nth_read+0x1b3/0x220
[  306.338333][T15102]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.338354][T15102]  ? rw_verify_area+0x2a6/0x4d0
[  306.338374][T15102]  ? __lock_acquire+0xab9/0xd20
[  306.338389][T15102]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.338412][T15102]  vfs_read+0x200/0xa30
[  306.338433][T15102]  ? fdget_pos+0x247/0x320
[  306.338453][T15102]  ? __pfx___mutex_lock+0x10/0x10
[  306.338469][T15102]  ? __pfx_vfs_read+0x10/0x10
[  306.338492][T15102]  ? __fget_files+0x2a/0x420
[  306.338513][T15102]  ? __fget_files+0x3a0/0x420
[  306.338528][T15102]  ? __fget_files+0x2a/0x420
[  306.338554][T15102]  ksys_read+0x145/0x250
[  306.338578][T15102]  ? __pfx_ksys_read+0x10/0x10
[  306.338605][T15102]  ? do_syscall_64+0xbe/0xfa0
[  306.338626][T15102]  do_syscall_64+0xfa/0xfa0
[  306.338642][T15102]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.338658][T15102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.338675][T15102]  ? clear_bhb_loop+0x60/0xb0
[  306.338697][T15102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.338714][T15102] RIP: 0033:0x7f796838e0dc
[  306.338729][T15102] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  306.338744][T15102] RSP: 002b:00007f7969162030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  306.338764][T15102] RAX: ffffffffffffffda RBX: 00007f79685e5fa0 RCX: 00007f796838e0dc
[  306.338776][T15102] RDX: 000000000000000f RSI: 00007f79691620a0 RDI: 0000000000000004
[  306.338786][T15102] RBP: 00007f7969162090 R08: 0000000000000000 R09: 0000000000000000
[  306.338797][T15102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.338806][T15102] R13: 00007f79685e6038 R14: 00007f79685e5fa0 R15: 00007ffe5f98bdc8
[  306.338834][T15102]  </TASK>
[  306.598957][T15106] netlink: 'syz.5.2384': attribute type 5 has an invalid length.
[  306.660282][T15106] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  307.102237][T15137] siw: device registration error -23
[  307.172671][T15138] wg1 speed is unknown, defaulting to 1000
[  307.196673][T15137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11
[  307.220457][T15138] lo speed is unknown, defaulting to 1000
[  307.609085][T15163] vxcan3: entered allmulticast mode
[  308.010884][T15165] wg1 speed is unknown, defaulting to 1000
[  308.026208][T15165] lo speed is unknown, defaulting to 1000
[  308.418564][T15197] __nla_validate_parse: 5 callbacks suppressed
[  308.418582][T15197] netlink: 472 bytes leftover after parsing attributes in process `syz.3.2404'.
[  308.460114][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'.
[  308.505148][T15200] wg1 speed is unknown, defaulting to 1000
[  308.589395][T15193] ip6tnl3: entered promiscuous mode
[  308.599844][T15193] ip6tnl3: entered allmulticast mode
[  308.625512][T15200] lo speed is unknown, defaulting to 1000
[  309.271308][T15233] wg1 speed is unknown, defaulting to 1000
[  309.292628][T15233] lo speed is unknown, defaulting to 1000
[  309.429183][T15253] dvmrp1: entered allmulticast mode
[  309.547050][T15257] syzkaller1: entered promiscuous mode
[  309.552765][T15257] syzkaller1: entered allmulticast mode
[  309.581946][T15257] wg1 speed is unknown, defaulting to 1000
[  309.591013][T15257] lo speed is unknown, defaulting to 1000
[  309.639401][T15261] netlink: 'syz.1.2421': attribute type 1 has an invalid length.
[  309.706476][T15261] bond10: entered promiscuous mode
[  309.719621][T15261] 8021q: adding VLAN 0 to HW filter on device bond10
[  309.753199][T15264] 8021q: adding VLAN 0 to HW filter on device bond10
[  309.760780][T15264] bond10: (slave gre1): The slave device specified does not support setting the MAC address
[  309.771536][T15264] bond10: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  309.789029][T15264] bond10: (slave gre1): making interface the new active one
[  309.796830][T15264] gre1: entered promiscuous mode
[  309.803424][T15264] bond10: (slave gre1): Enslaving as an active interface with an up link
[  310.168054][T15276] netlink: 'syz.6.2425': attribute type 32 has an invalid length.
[  310.255611][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2427'.
[  310.346431][T15283] macsec1: entered allmulticast mode
[  310.351847][T15283] macsec0: entered allmulticast mode
[  310.359684][T15283] veth1_macvtap: entered allmulticast mode
[  310.376718][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2428'.
[  310.405188][T15288] netlink: 'syz.3.2428': attribute type 4 has an invalid length.
[  310.414213][T15288] netlink: 'syz.3.2428': attribute type 1 has an invalid length.
[  310.447282][T15288] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2428'.
[  310.472661][T15290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.501068][T15290] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.829616][T15270] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  310.926469][T15297] delete_channel: no stack
[  310.993217][T15305] gre0: entered allmulticast mode
[  311.017705][T15309] netlink: 'syz.0.2437': attribute type 298 has an invalid length.
[  311.027951][T15311] netlink: 'syz.0.2437': attribute type 298 has an invalid length.
[  311.140496][T15317] IPVS: set_ctl: invalid protocol: 58 172.20.20.17:20002
[  311.266981][T15329] FAULT_INJECTION: forcing a failure.
[  311.266981][T15329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.282808][T15329] CPU: 0 UID: 0 PID: 15329 Comm: syz.0.2442 Not tainted syzkaller #0 PREEMPT(full) 
[  311.282835][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  311.282845][T15329] Call Trace:
[  311.282852][T15329]  <TASK>
[  311.282858][T15329]  dump_stack_lvl+0x189/0x250
[  311.282876][T15329]  ? __pfx____ratelimit+0x10/0x10
[  311.282891][T15329]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.282903][T15329]  ? __pfx__printk+0x10/0x10
[  311.282913][T15329]  ? __might_fault+0xb0/0x130
[  311.282933][T15329]  should_fail_ex+0x414/0x560
[  311.282950][T15329]  _copy_from_user+0x2d/0xb0
[  311.282964][T15329]  ipv6_flowlabel_opt+0x136/0x2200
[  311.282983][T15329]  ? __pfx_ipv6_flowlabel_opt+0x10/0x10
[  311.282995][T15329]  ? register_lock_class+0x51/0x320
[  311.283008][T15329]  ? __lock_acquire+0xab9/0xd20
[  311.283025][T15329]  ? __local_bh_enable_ip+0x12d/0x1c0
[  311.283035][T15329]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.283047][T15329]  ? __local_bh_enable_ip+0x12d/0x1c0
[  311.283064][T15329]  do_ipv6_setsockopt+0xdb0/0x2eb0
[  311.283080][T15329]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  311.283092][T15329]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  311.283112][T15329]  ? vfs_write+0x956/0xb30
[  311.283127][T15329]  ? __pfx___might_resched+0x10/0x10
[  311.283142][T15329]  ? __lock_acquire+0xab9/0xd20
[  311.283155][T15329]  ? aa_sk_perm+0x81e/0x950
[  311.283170][T15329]  ? __pfx_aa_sk_perm+0x10/0x10
[  311.283184][T15329]  ? aa_sock_opt_perm+0xff/0x1b0
[  311.283199][T15329]  ipv6_setsockopt+0x59/0x170
[  311.283208][T15329]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  311.283224][T15329]  do_sock_setsockopt+0x17c/0x1b0
[  311.283238][T15329]  __x64_sys_setsockopt+0x13f/0x1b0
[  311.283251][T15329]  do_syscall_64+0xfa/0xfa0
[  311.283265][T15329]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.283275][T15329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.283284][T15329]  ? clear_bhb_loop+0x60/0xb0
[  311.283296][T15329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.283306][T15329] RIP: 0033:0x7f5ce058f6c9
[  311.283322][T15329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.283336][T15329] RSP: 002b:00007f5ce13eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  311.283355][T15329] RAX: ffffffffffffffda RBX: 00007f5ce07e5fa0 RCX: 00007f5ce058f6c9
[  311.283367][T15329] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  311.283377][T15329] RBP: 00007f5ce13eb090 R08: 0000000000000020 R09: 0000000000000000
[  311.283387][T15329] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  311.283402][T15329] R13: 00007f5ce07e6038 R14: 00007f5ce07e5fa0 R15: 00007ffd5897c068
[  311.283426][T15329]  </TASK>
[  311.595251][T15326] tipc: Resetting bearer <eth:syzkaller0>
[  311.641662][T15333] veth0_to_bridge: entered allmulticast mode
[  311.667339][T15333] team0: Port device veth0_to_bridge added
[  311.715729][T15339] netlink: 'syz.0.2446': attribute type 1 has an invalid length.
[  311.789879][T15339] 8021q: adding VLAN 0 to HW filter on device bond6
[  311.928358][T15339] veth5: entered promiscuous mode
[  311.941772][T15339] bond6: (slave veth5): Enslaving as an active interface with a down link
[  311.953856][T15347] erspan0: entered allmulticast mode
[  311.969496][T15347] bond6: (slave erspan0): making interface the new active one
[  311.985605][T15347] erspan0: entered promiscuous mode
[  311.992036][T15347] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  312.013781][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2450'.
[  312.223769][T15371] FAULT_INJECTION: forcing a failure.
[  312.223769][T15371] name failslab, interval 1, probability 0, space 0, times 0
[  312.255883][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.0.2453 Not tainted syzkaller #0 PREEMPT(full) 
[  312.255911][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  312.255922][T15371] Call Trace:
[  312.255930][T15371]  <TASK>
[  312.255938][T15371]  dump_stack_lvl+0x189/0x250
[  312.255966][T15371]  ? __pfx____ratelimit+0x10/0x10
[  312.255992][T15371]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.256014][T15371]  ? __pfx__printk+0x10/0x10
[  312.256034][T15371]  ? __pfx___might_resched+0x10/0x10
[  312.256052][T15371]  ? fs_reclaim_acquire+0x7d/0x100
[  312.256073][T15371]  should_fail_ex+0x414/0x560
[  312.256102][T15371]  should_failslab+0xa8/0x100
[  312.256122][T15371]  __kmalloc_cache_noprof+0x6f/0x6f0
[  312.256146][T15371]  ? ipv6_flowlabel_opt+0xd49/0x2200
[  312.256173][T15371]  ipv6_flowlabel_opt+0xd49/0x2200
[  312.256205][T15371]  ? __pfx_ipv6_flowlabel_opt+0x10/0x10
[  312.256226][T15371]  ? register_lock_class+0x51/0x320
[  312.256253][T15371]  ? __lock_acquire+0xab9/0xd20
[  312.256284][T15371]  ? __local_bh_enable_ip+0x12d/0x1c0
[  312.256303][T15371]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.256322][T15371]  ? __local_bh_enable_ip+0x12d/0x1c0
[  312.256354][T15371]  do_ipv6_setsockopt+0xdb0/0x2eb0
[  312.256384][T15371]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  312.256406][T15371]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  312.256440][T15371]  ? vfs_write+0x956/0xb30
[  312.256467][T15371]  ? __pfx___might_resched+0x10/0x10
[  312.256494][T15371]  ? __lock_acquire+0xab9/0xd20
[  312.256518][T15371]  ? aa_sk_perm+0x81e/0x950
[  312.256546][T15371]  ? __pfx_aa_sk_perm+0x10/0x10
[  312.256571][T15371]  ? aa_sock_opt_perm+0xff/0x1b0
[  312.256599][T15371]  ipv6_setsockopt+0x59/0x170
[  312.256616][T15371]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  312.256643][T15371]  do_sock_setsockopt+0x17c/0x1b0
[  312.256667][T15371]  __x64_sys_setsockopt+0x13f/0x1b0
[  312.256692][T15371]  do_syscall_64+0xfa/0xfa0
[  312.256708][T15371]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.256729][T15371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.256747][T15371]  ? clear_bhb_loop+0x60/0xb0
[  312.256767][T15371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.256784][T15371] RIP: 0033:0x7f5ce058f6c9
[  312.256800][T15371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.256814][T15371] RSP: 002b:00007f5ce13eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  312.256833][T15371] RAX: ffffffffffffffda RBX: 00007f5ce07e5fa0 RCX: 00007f5ce058f6c9
[  312.256846][T15371] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  312.256857][T15371] RBP: 00007f5ce13eb090 R08: 0000000000000020 R09: 0000000000000000
[  312.256869][T15371] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  312.256880][T15371] R13: 00007f5ce07e6038 R14: 00007f5ce07e5fa0 R15: 00007ffd5897c068
[  312.256912][T15371]  </TASK>
[  312.716089][T15384] netlink: 'syz.1.2457': attribute type 3 has an invalid length.
[  312.766665][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'.
[  313.100591][ T5829] Bluetooth: hci5: command 0x0405 tx timeout
[  313.210969][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.344240][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2465'.
[  313.556981][T15421] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2470'.
[  313.572441][T15421] netlink: 'syz.6.2470': attribute type 1 has an invalid length.
[  313.581283][T15421] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2470'.
[  313.616938][T15421] netlink: 'syz.6.2470': attribute type 4 has an invalid length.
[  313.639707][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'.
[  313.822402][T15441] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  313.889289][T15443] wg1 speed is unknown, defaulting to 1000
[  313.899423][T15443] lo speed is unknown, defaulting to 1000
[  313.934572][T15447] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  313.988212][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2476'.
[  314.175875][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'.
[  314.285924][T15457] 8021q: adding VLAN 0 to HW filter on device bond10
[  314.338711][T15466] wg1 speed is unknown, defaulting to 1000
[  314.346469][T15466] lo speed is unknown, defaulting to 1000
[  314.520420][T15467] wg1 speed is unknown, defaulting to 1000
[  314.579800][T15467] lo speed is unknown, defaulting to 1000
[  314.649712][T15486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.726602][T15486] tipc: Disabling bearer <eth:syzkaller0>
[  314.759348][T15494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2486'.
[  315.164812][T15516] xt_limit: Overflow, try lower: 268435456/134217728
[  315.195822][T15516] erspan0: entered promiscuous mode
[  315.352926][T15518] wg1 speed is unknown, defaulting to 1000
[  315.361444][T15518] lo speed is unknown, defaulting to 1000
[  315.384273][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2492'.
[  315.408481][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'.
[  315.484369][   T30] audit: type=1800 audit(1763041273.336:7): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2493" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1552 res=0 errno=0
[  315.527702][T15526] wg1 speed is unknown, defaulting to 1000
[  315.538046][T15526] lo speed is unknown, defaulting to 1000
[  315.722410][T15531] pim6reg1: entered promiscuous mode
[  315.748559][T15531] pim6reg1: entered allmulticast mode
[  315.779471][T15535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2497'.
[  315.804217][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2497'.
[  315.958779][T15535] 8021q: adding VLAN 0 to HW filter on device bond7
[  316.022238][T15550] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  316.030906][T15550] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20000
[  316.430677][T15578] netlink: set zone limit has 8 unknown bytes
[  316.571769][T15589] hsr_slave_0: left promiscuous mode
[  316.591182][T15589] hsr_slave_1: left promiscuous mode
[  316.719599][T15593] wg1 speed is unknown, defaulting to 1000
[  316.731855][T15593] lo speed is unknown, defaulting to 1000
[  316.925698][T15607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.936779][T15606] syzkaller0: entered promiscuous mode
[  316.942588][T15606] syzkaller0: entered allmulticast mode
[  317.347047][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.475245][T15607] tipc: Resetting bearer <eth:syzkaller0>
[  317.774949][T15587] tipc: Resetting bearer <eth:syzkaller0>
[  317.835123][T15587] tipc: Disabling bearer <eth:syzkaller0>
[  317.957149][T15625] wg1 speed is unknown, defaulting to 1000
[  317.964819][T15625] lo speed is unknown, defaulting to 1000
[  318.257676][T15644] netlink: 'syz.0.2523': attribute type 1 has an invalid length.
[  318.268873][T15644] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  318.270148][T15646] sctp: [Deprecated]: syz.5.2529 (pid 15646) Use of int in max_burst socket option deprecated.
[  318.270148][T15646] Use struct sctp_assoc_value instead
[  318.552761][T15663] geneve3: entered promiscuous mode
[  318.563006][T15668] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  318.623633][ T7270] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.639733][ T7270] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.669332][ T7270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.684243][ T7270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.849416][T15674] 8021q: adding VLAN 0 to HW filter on device team0
[  318.874104][T15674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  318.894764][T12282] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  318.937581][T13146] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  318.959314][T13146] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  319.415681][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[  319.734945][  T897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  319.895480][  T874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  322.934785][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  323.164986][ T7270] erspan0: left promiscuous mode
[  325.656602][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  330.784625][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  339.974676][ T6153] IPVS: ip_vs_send_async error -101
[  346.774790][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.375552][T15739] geneve3: entered promiscuous mode
[  355.453173][T13147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.515337][T13147] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.535079][T13147] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.734559][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.741869][    C0] bridge0: topology change detected, propagating
[  356.037628][T15763] xt_l2tp: missing protocol rule (udp|l2tpip)
[  356.362424][T15779] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.433794][T15785] __nla_validate_parse: 9 callbacks suppressed
[  356.433812][T15785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2563'.
[  356.451667][T15785] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  356.466642][T15779] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.534265][T15779] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.606419][T15779] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.653920][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2567'.
[  356.685951][T15796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2567'.
[  356.692308][T15793] wg1 speed is unknown, defaulting to 1000
[  356.716592][T15793] lo speed is unknown, defaulting to 1000
[  356.733830][T15796] netlink: 'syz.0.2567': attribute type 33 has an invalid length.
[  356.752113][T15796] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2567'.
[  356.787738][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'.
[  356.813750][T15796] `: renamed from team0
[  356.899588][T13146] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.950791][T15739] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.984899][ T3527] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.015832][T15739] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.050719][ T3527] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.082323][ T3527] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.117621][T15739] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.338335][T13147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.399442][ T7274] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.431030][ T7274] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.467458][T15832] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  357.479816][ T3527] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.576473][T15832] 8021q: adding VLAN 0 to HW filter on device bond11
[  357.591424][T15838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2577'.
[  357.609888][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2576'.
[  357.629821][T15832] veth7: entered promiscuous mode
[  357.648854][T15832] bond11: (slave veth7): Enslaving as an active interface with a down link
[  357.838903][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'.
[  357.883453][T15852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2579'.
[  357.900147][T15852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2579'.
[  357.936619][T15852] erspan0: entered promiscuous mode
[  357.942706][T15852] erspan0: left promiscuous mode
[  358.198139][T15862] wg1 speed is unknown, defaulting to 1000
[  358.218607][T15862] lo speed is unknown, defaulting to 1000
[  358.358079][T15868] ieee802154 phy0 wpan0: encryption failed: -22
[  358.547734][T15891] xt_bpf: check failed: parse error
[  358.803705][T15912] macsec0: entered promiscuous mode
[  358.820399][T15912] macsec0: left promiscuous mode
[  358.994804][T15925] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  359.148122][T15936] netlink: 'syz.0.2603': attribute type 9 has an invalid length.
[  359.271484][T15940] wg1 speed is unknown, defaulting to 1000
[  359.286409][T15940] lo speed is unknown, defaulting to 1000
[  359.421095][T15954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.428321][T15955] syzkaller0: entered promiscuous mode
[  359.433817][T15955] syzkaller0: entered allmulticast mode
[  359.609116][T15953] tipc: Resetting bearer <eth:syzkaller0>
[  359.628014][T15953] tipc: Disabling bearer <eth:syzkaller0>
[  359.972057][T15963] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  359.986178][T15963] bond8 (unregistering): Released all slaves
[  360.046657][T15964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.067382][T15964] syzkaller0: left allmulticast mode
[  360.334157][T15994] netlink: 'syz.6.2618': attribute type 1 has an invalid length.
[  360.715380][T16015] dummy0: entered promiscuous mode
[  360.730441][T16009] dummy0: left promiscuous mode
[  360.790106][T16017] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma?
[  361.147788][T16039] sctp: [Deprecated]: syz.6.2628 (pid 16039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  361.147788][T16039] Use struct sctp_sack_info instead
[  361.176231][T16040] netlink: 'syz.1.2629': attribute type 49 has an invalid length.
[  361.753456][T16079] __nla_validate_parse: 7 callbacks suppressed
[  361.753474][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'.
[  361.770612][T16083] netem: incorrect ge model size
[  361.776540][T16083] netem: change failed
[  361.780871][T16079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2641'.
[  361.798702][T16079] gretap1: entered promiscuous mode
[  361.815731][T16082] syzkaller1: entered promiscuous mode
[  361.821258][T16082] syzkaller1: entered allmulticast mode
[  361.956862][T16094] netlink: 'syz.5.2645': attribute type 13 has an invalid length.
[  361.972752][T16094] netlink: 'syz.5.2645': attribute type 17 has an invalid length.
[  362.190064][T16094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.360529][T16121] netlink: 'syz.1.2650': attribute type 1 has an invalid length.
[  362.399517][T16121] bond12: entered promiscuous mode
[  362.410396][T16121] 8021q: adding VLAN 0 to HW filter on device bond12
[  362.436738][T16121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2650'.
[  362.459576][T16121] bond12: entered allmulticast mode
[  362.502464][T16121] bond12: (slave bridge0): making interface the new active one
[  362.522174][T16121] bridge0: entered promiscuous mode
[  362.532471][T16121] bridge0: entered allmulticast mode
[  362.541638][T16121] bond12: (slave bridge0): Enslaving as an active interface with an up link
[  362.651601][T16142] xt_hashlimit: max too large, truncated to 1048576
[  362.663082][T16142] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.672695][T16142] netlink: 'syz.0.2657': attribute type 11 has an invalid length.
[  363.035707][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'.
[  363.066703][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'.
[  363.122281][T16174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2666'.
[  363.294739][T16178] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2668'.
[  363.496137][T16199] wg1 speed is unknown, defaulting to 1000
[  363.502070][T16199] wg1 speed is unknown, defaulting to 1000
[  363.510633][T16199] wg1 speed is unknown, defaulting to 1000
[  363.535668][T16199] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  363.583738][T16199] wg1 speed is unknown, defaulting to 1000
[  363.603783][T16199] wg1 speed is unknown, defaulting to 1000
[  363.622459][T16199] wg1 speed is unknown, defaulting to 1000
[  363.633121][T16199] wg1 speed is unknown, defaulting to 1000
[  363.641235][T16199] wg1 speed is unknown, defaulting to 1000
[  363.701659][T16199] xt_TCPMSS: Only works on TCP SYN packets
[  363.822938][T16210] netlink: 'syz.0.2673': attribute type 10 has an invalid length.
[  364.368877][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'.
[  364.381009][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'.
[  364.390610][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'.
[  364.500685][T16239] IPVS: length: 139 != 8
[  364.893725][T16252] netlink: 'syz.3.2687': attribute type 6 has an invalid length.
[  366.100081][T16259] ip6tnl3: entered promiscuous mode
[  366.133361][T16252] wg1 speed is unknown, defaulting to 1000
[  366.162452][T16261] wg1 speed is unknown, defaulting to 1000
[  366.195479][T16252] lo speed is unknown, defaulting to 1000
[  366.216191][T16252] wg1 speed is unknown, defaulting to 1000
[  366.256189][T16261] lo speed is unknown, defaulting to 1000
[  366.311824][T16261] wg1 speed is unknown, defaulting to 1000
[  366.334015][T16280] netlink: 'syz.6.2695': attribute type 5 has an invalid length.
[  366.504135][T16287] wg1 speed is unknown, defaulting to 1000
[  366.512076][T16287] lo speed is unknown, defaulting to 1000
[  366.523556][T16287] wg1 speed is unknown, defaulting to 1000
[  366.703324][T16299] netlink: 'syz.0.2700': attribute type 8 has an invalid length.
[  366.714072][T16301] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  366.738604][T16294] wg1 speed is unknown, defaulting to 1000
[  366.779541][T16294] lo speed is unknown, defaulting to 1000
[  366.797663][T16294] wg1 speed is unknown, defaulting to 1000
[  366.840192][T16307] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  367.361895][T16313] __nla_validate_parse: 5 callbacks suppressed
[  367.361913][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2703'.
[  367.687306][T16334] vxcan1: entered promiscuous mode
[  367.692658][T16334] vxcan1: entered allmulticast mode
[  367.707970][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2710'.
[  367.788622][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2714'.
[  367.840734][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'.
[  368.303416][T16380] sctp: [Deprecated]: syz.5.2720 (pid 16380) Use of int in maxseg socket option.
[  368.303416][T16380] Use struct sctp_assoc_value instead
[  368.351795][T16380] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2720'.
[  368.372003][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2720'.
[  368.394750][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2720'.
[  368.736483][T16400] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2722'.
[  368.948064][   T30] audit: type=1800 audit(1763041326.786:8): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2723" name="memory.events" dev="tmpfs" ino=2924 res=0 errno=0
[  369.091279][T16404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2726'.
[  369.106333][T16404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.156761][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2726'.
[  369.485206][T16433] openvswitch: netlink: IP tunnel dst address not specified
[  369.752193][T16449] wg1 speed is unknown, defaulting to 1000
[  369.786333][T16449] lo speed is unknown, defaulting to 1000
[  369.839211][T16450] netlink: 'syz.0.2741': attribute type 1 has an invalid length.
[  369.857486][T16449] wg1 speed is unknown, defaulting to 1000
[  369.880937][T16451] wg1 speed is unknown, defaulting to 1000
[  369.929234][T16451] lo speed is unknown, defaulting to 1000
[  369.972736][T16451] wg1 speed is unknown, defaulting to 1000
[  370.043557][T16460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.080508][T16460] syzkaller0: entered promiscuous mode
[  370.092273][T16460] syzkaller0: entered allmulticast mode
[  370.325627][T16491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.343639][T16484] syzkaller0: entered promiscuous mode
[  370.361384][T16484] syzkaller0: entered allmulticast mode
[  370.425050][T16484] tipc: Resetting bearer <eth:syzkaller0>
[  370.470206][T16498] wg1 speed is unknown, defaulting to 1000
[  370.477591][T16498] lo speed is unknown, defaulting to 1000
[  370.484445][T16498] wg1 speed is unknown, defaulting to 1000
[  370.509075][T16499] netlink: 'syz.3.2754': attribute type 8 has an invalid length.
[  370.725001][T16452] tipc: Resetting bearer <eth:syzkaller0>
[  370.759529][T16452] tipc: Disabling bearer <eth:syzkaller0>
[  370.968911][T16510] netlink: 'syz.6.2755': attribute type 1 has an invalid length.
[  370.991680][T16473] tipc: Resetting bearer <eth:syzkaller0>
[  371.044814][T16473] tipc: Disabling bearer <eth:syzkaller0>
[  371.620403][T16540] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.688726][ T7270] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  371.707743][T16540] bond4: option arp_all_targets: invalid value (3)
[  371.718112][T16540] bond4 (unregistering): Released all slaves
[  371.770311][T16556] IPv6: addrconf: prefix option has invalid lifetime
[  371.796470][T16539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  372.312249][T16595] vlan1: entered promiscuous mode
[  372.338525][T16595] geneve1: entered promiscuous mode
[  372.354233][T16595] vlan1: entered allmulticast mode
[  372.385439][T16595] geneve1: entered allmulticast mode
[  372.528559][T16615] __nla_validate_parse: 10 callbacks suppressed
[  372.528579][T16615] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2779'.
[  372.560184][T16621] IPv6: NLM_F_CREATE should be specified when creating new route
[  372.571353][T16615] hsr_slave_0: left promiscuous mode
[  372.586904][T16615] hsr_slave_1: left promiscuous mode
[  372.621159][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2779'.
[  372.661522][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2779'.
[  372.678100][T16625] netlink: 'syz.5.2779': attribute type 19 has an invalid length.
[  372.688541][T16625] netlink: 'syz.5.2779': attribute type 20 has an invalid length.
[  372.793639][T16626] wg1 speed is unknown, defaulting to 1000
[  372.801392][T16626] lo speed is unknown, defaulting to 1000
[  372.811171][T16626] wg1 speed is unknown, defaulting to 1000
[  373.467100][T16661] wg1 speed is unknown, defaulting to 1000
[  373.499073][T16661] lo speed is unknown, defaulting to 1000
[  373.523636][T16661] wg1 speed is unknown, defaulting to 1000
[  373.729812][T16669] netlink: 'syz.1.2796': attribute type 1 has an invalid length.
[  374.176812][T16683] syzkaller0: entered promiscuous mode
[  374.182341][T16683] syzkaller0: entered allmulticast mode
[  374.284363][T16695] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2799'.
[  374.353372][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'.
[  374.364500][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'.
[  374.390040][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'.
[  374.936619][T16715] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2808'.
[  376.807660][T16742] wg1 speed is unknown, defaulting to 1000
[  376.826835][T16742] lo speed is unknown, defaulting to 1000
[  376.857396][T16742] wg1 speed is unknown, defaulting to 1000
[  377.203480][T16770] netlink: 'syz.6.2823': attribute type 11 has an invalid length.
[  377.244287][T16768] wg1 speed is unknown, defaulting to 1000
[  377.254027][T16768] lo speed is unknown, defaulting to 1000
[  377.271924][T16768] wg1 speed is unknown, defaulting to 1000
[  377.309529][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2824'.
[  377.371312][T16776] 8021q: adding VLAN 0 to HW filter on device bond4
[  377.397987][T16782] erspan0: entered allmulticast mode
[  377.428220][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2825'.
[  377.442069][T16780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.476722][T16780] syzkaller0: entered promiscuous mode
[  377.487876][T16780] syzkaller0: entered allmulticast mode
[  378.050966][T16807] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2832'.
[  378.086121][T16809] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2832'.
[  378.120331][T16807] 0ªX¹¦À: renamed from caif0
[  378.133345][T16811] netlink: 'syz.1.2833': attribute type 13 has an invalid length.
[  378.166904][T16811] netlink: 'syz.1.2833': attribute type 17 has an invalid length.
[  378.195156][T16807] 0ªX¹¦À: entered allmulticast mode
[  378.200898][T16807] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  378.225701][T16809] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  378.248479][T16809] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  378.379579][T16811] gre0: left allmulticast mode
[  378.436250][  T874] tipc: Node number set to 329719328
[  378.483764][T16811] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.516926][T16811] 8021q: adding VLAN 0 to HW filter on device `
[  378.576061][T16811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.799279][T16779] tipc: Resetting bearer <eth:syzkaller0>
[  378.880096][T16779] tipc: Disabling bearer <eth:syzkaller0>
[  378.916079][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2837'.
[  379.293286][T16842] wg1: entered promiscuous mode
[  379.303502][T16842] wg1: entered allmulticast mode
[  379.345857][T12282] wg1 speed is unknown, defaulting to 1000
[  379.351928][T12282] syz0: Port: 1 Link ACTIVE
[  379.414913][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  379.665486][T16871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2850'.
[  379.749730][T16876] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2851'.
[  380.149004][T16887] bond6: (slave erspan0): Releasing active interface
[  380.150865][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2856'.
[  380.194678][T16898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2856'.
[  380.211518][T16887] veth0_to_bridge: left allmulticast mode
[  380.285939][T16887] `: Port device veth0_to_bridge removed
[  380.328387][T16887] batman_adv: batadv0: Removing interface: macvlan2
[  380.373163][T16887] bond1: (slave bridge1): Releasing backup interface
[  380.402882][T16887] bond2: (slave ip6erspan0): Releasing active interface
[  380.410794][T16907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.432341][T16887] bond6: (slave veth5): Releasing active interface
[  380.487824][T16896] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  380.720416][T16915] netlink: 'syz.3.2859': attribute type 4 has an invalid length.
[  380.828511][T16920] netlink: 'syz.3.2859': attribute type 16 has an invalid length.
[  380.848103][T16920] netlink: 'syz.3.2859': attribute type 17 has an invalid length.
[  380.995608][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.022860][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.046146][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.057376][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.065392][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.451683][T16920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.475342][  T897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  382.534254][T16922] wg1 speed is unknown, defaulting to 1000
[  382.553634][T16922] lo speed is unknown, defaulting to 1000
[  382.570022][T16922] wg1 speed is unknown, defaulting to 1000
[  382.617025][T16933] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2865'.
[  382.657993][T16933] netlink: 'syz.6.2865': attribute type 13 has an invalid length.
[  382.683738][T16933] netlink: 'syz.6.2865': attribute type 17 has an invalid length.
[  382.712588][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2865'.
[  382.811752][T16933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.948756][T16922] chnl_net:caif_netlink_parms(): no params data found
[  382.984742][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.109488][ T5149] Bluetooth: hci1: command tx timeout
[  383.263878][T13147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.299239][T13147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.414689][T16967] netlink: 'syz.6.2869': attribute type 26 has an invalid length.
[  383.494804][T16966] can: request_module (can-proto-0) failed.
[  383.587037][T16922] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.594204][T16922] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.619249][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'.
[  383.628916][T16922] bridge_slave_0: entered allmulticast mode
[  383.646422][T16922] bridge_slave_0: entered promiscuous mode
[  383.664190][T16922] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.675033][T16922] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.687286][T16922] bridge_slave_1: entered allmulticast mode
[  383.699812][T16922] bridge_slave_1: entered promiscuous mode
[  383.744713][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.877099][T16922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.920704][T16922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.048276][T16922] team0: Port device team_slave_0 added
[  384.065807][T16922] team0: Port device team_slave_1 added
[  384.133837][T17000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2876'.
[  384.163378][T16922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.172074][T16922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.198247][T16922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.209589][T16999] wg1 speed is unknown, defaulting to 1000
[  384.217216][T16999] lo speed is unknown, defaulting to 1000
[  384.225680][T16999] wg1 speed is unknown, defaulting to 1000
[  384.269496][T16922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.277238][T16922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.309314][T16922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.766548][T16922] hsr_slave_0: entered promiscuous mode
[  384.805507][T16922] hsr_slave_1: entered promiscuous mode
[  385.175947][ T5149] Bluetooth: hci1: command tx timeout
[  385.254244][T17037] xt_CT: You must specify a L4 protocol and not use inversions on it
[  385.296864][T16922] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.458886][T16922] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.508729][T17048] wg1 speed is unknown, defaulting to 1000
[  385.516390][T17052] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2890'.
[  385.527779][T16922] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.529624][T17056] netlink: 'syz.5.2892': attribute type 21 has an invalid length.
[  385.545874][T17048] lo speed is unknown, defaulting to 1000
[  385.554598][T17056] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2892'.
[  385.580100][T17054] wg1 speed is unknown, defaulting to 1000
[  385.587865][T17048] wg1 speed is unknown, defaulting to 1000
[  385.606671][T16922] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.622227][T17056] Unsupported ieee802154 address type: 0
[  385.645916][T17054] lo speed is unknown, defaulting to 1000
[  385.702118][T17054] wg1 speed is unknown, defaulting to 1000
[  386.645953][T17088] vxcan1 speed is unknown, defaulting to 1000
[  386.682781][T17088] vxcan1 speed is unknown, defaulting to 1000
[  386.697681][T16922] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  386.764525][T17088] vxcan1 speed is unknown, defaulting to 1000
[  386.772527][T17096] sit0: entered promiscuous mode
[  386.783309][T17096] netlink: 'syz.5.2900': attribute type 1 has an invalid length.
[  386.802503][T17096] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2900'.
[  386.837504][T16922] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  386.880155][T16922] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  386.918020][T16922] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  387.113000][T17099] wg1 speed is unknown, defaulting to 1000
[  387.136173][T17101] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  387.254586][ T5149] Bluetooth: hci1: command tx timeout
[  387.323597][T17116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2902'.
[  387.413724][T17099] lo speed is unknown, defaulting to 1000
[  387.437563][T17120] netlink: 'syz.0.2904': attribute type 1 has an invalid length.
[  387.492178][T17099] wg1 speed is unknown, defaulting to 1000
[  387.516614][T17088] infiniband syz2: set active
[  387.521585][T17088] infiniband syz2: added vxcan1
[  387.529997][T17105] wg1 speed is unknown, defaulting to 1000
[  387.543114][T17088] syz2: rxe_create_cq: returned err = -12
[  387.544326][T16922] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.549676][T17088] infiniband syz2: Couldn't create ib_mad CQ
[  387.574662][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.584283][T17088] infiniband syz2: Couldn't open port 1
[  387.599551][  T897] vxcan1 speed is unknown, defaulting to 1000
[  387.616987][T17105] lo speed is unknown, defaulting to 1000
[  387.643687][T17105] wg1 speed is unknown, defaulting to 1000
[  387.645400][T17088] RDS/IB: syz2: added
[  387.653902][T16922] 8021q: adding VLAN 0 to HW filter on device team0
[  387.671720][T17088] smc: adding ib device syz2 with port count 1
[  387.680639][T17105] vxcan1 speed is unknown, defaulting to 1000
[  387.686433][T17088] smc:    ib device syz2 port 1 has no pnetid
[  387.697539][T13147] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.704754][T13147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.746168][   T50] vxcan1 speed is unknown, defaulting to 1000
[  387.762703][T13147] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.769931][T13147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.022199][T17088] vxcan1 speed is unknown, defaulting to 1000
[  388.218206][T16922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.327811][T16922] veth0_vlan: entered promiscuous mode
[  388.341884][T16922] veth1_vlan: entered promiscuous mode
[  388.352086][T17088] vxcan1 speed is unknown, defaulting to 1000
[  388.397560][T16922] veth0_macvtap: entered promiscuous mode
[  388.423639][T16922] veth1_macvtap: entered promiscuous mode
[  388.465763][T16922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.485151][T16922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.497275][T17132] netlink: 'syz.0.2906': attribute type 1 has an invalid length.
[  388.502486][ T7270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.543883][T17132] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.555679][ T7270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.565792][ T7270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.585106][T17132] bond8: entered promiscuous mode
[  388.596417][ T7270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.650130][T17088] vxcan1 speed is unknown, defaulting to 1000
[  388.686603][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.695203][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.733357][T13146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.743964][T13146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.822305][T17136] IPVS: length: 35 != 24
[  388.890925][T17088] vxcan1 speed is unknown, defaulting to 1000
[  388.901812][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'.
[  389.054038][T17088] vxcan1 speed is unknown, defaulting to 1000
[  389.336890][ T5149] Bluetooth: hci1: command tx timeout
[  389.379521][T17088] vxcan1 speed is unknown, defaulting to 1000
[  389.760311][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  389.780133][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  389.789617][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  389.807574][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  389.825121][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  389.892461][T17088] vxcan1 speed is unknown, defaulting to 1000
[  389.980380][T13147] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.027631][T17147] tipc: Started in network mode
[  390.032650][T17147] tipc: Node identity 12372eb933c3, cluster identity 4711
[  390.040300][T17147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.048277][T17147] syzkaller0: entered promiscuous mode
[  390.053921][T17147] syzkaller0: entered allmulticast mode
[  390.073609][T13147] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.106227][T17147] tipc: Resetting bearer <eth:syzkaller0>
[  390.113675][T17146] tipc: Resetting bearer <eth:syzkaller0>
[  390.136005][T17146] tipc: Disabling bearer <eth:syzkaller0>
[  390.150331][T13147] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.175447][T17088] vxcan1 speed is unknown, defaulting to 1000
[  390.228944][T13147] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.320043][T13147] dvmrp0 (unregistering): left allmulticast mode
[  391.720786][T13147] bond0 (unregistering): Released all slaves
[  391.733674][T13147] bond1 (unregistering): Released all slaves
[  391.848838][T13147] bond2 (unregistering): Released all slaves
[  391.897435][ T5149] Bluetooth: hci4: command tx timeout
[  391.959186][T13147] bond3 (unregistering): Released all slaves
[  391.972283][T13147] bond4 (unregistering): Released all slaves
[  392.083270][T13147] bond5 (unregistering): Released all slaves
[  392.186622][T13147] bond6 (unregistering): Released all slaves
[  392.291692][T13147] bond7 (unregistering): Released all slaves
[  392.394341][T13147] bond8 (unregistering): Released all slaves
[  392.412783][T17139] wg1 speed is unknown, defaulting to 1000
[  392.416598][   T10] wg1 speed is unknown, defaulting to 1000
[  392.424753][   T10] syz0: Port: 1 Link DOWN
[  392.474727][T17139] lo speed is unknown, defaulting to 1000
[  392.526730][T17139] wg1 speed is unknown, defaulting to 1000
[  392.556100][T13147] tipc: Left network mode
[  392.755591][T13147] IPVS: stopping master sync thread 6153 ...
[  392.773999][T13147] IPVS: stopping backup sync thread 12158 ...
[  392.839836][T17167] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.940454][T17167] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.969961][T17169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.012284][T17169] syzkaller0: entered promiscuous mode
[  393.017978][T17169] syzkaller0: entered allmulticast mode
[  393.055682][T17167] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.075081][T17179] netlink: zone id is out of range
[  393.078425][T17169] tipc: Resetting bearer <eth:syzkaller0>
[  393.080240][T17179] netlink: zone id is out of range
[  393.132208][T17139] chnl_net:caif_netlink_parms(): no params data found
[  393.163918][T17168] tipc: Resetting bearer <eth:syzkaller0>
[  393.197622][T17168] tipc: Disabling bearer <eth:syzkaller0>
[  393.221678][T17187] ip6t_srh: unknown srh match flags  C404
[  393.246766][T17167] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.392198][T17193] nbd: must specify at least one socket
[  393.556871][ T3527] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.758826][T17139] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.766326][T17139] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.773599][T17139] bridge_slave_0: entered allmulticast mode
[  393.793157][T17139] bridge_slave_0: entered promiscuous mode
[  393.806079][T17139] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.813403][T17139] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.822396][T17139] bridge_slave_1: entered allmulticast mode
[  393.830664][T17139] bridge_slave_1: entered promiscuous mode
[  393.955912][T13146] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.964295][T13146] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.975145][ T5149] Bluetooth: hci4: command tx timeout
[  394.070766][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.081120][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  394.094305][ T1150] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.139514][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.508802][T17139] team0: Port device team_slave_0 added
[  394.532105][T17139] team0: Port device team_slave_1 added
[  395.413150][ T7931] lo speed is unknown, defaulting to 1000
[  395.419616][ T7931] infiniband syz1: ib_query_port failed (-19)
[  395.427303][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.434290][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.504074][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.517539][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.525215][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.561845][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.588545][T17262] x_tables: unsorted entry at hook 2
[  395.739274][T17139] hsr_slave_0: entered promiscuous mode
[  395.753966][T17139] hsr_slave_1: entered promiscuous mode
[  395.771490][T17139] debugfs: 'hsr0' already exists in 'hsr'
[  395.785740][T17139] Cannot create hsr debugfs directory
[  395.841196][T17266] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  395.843724][T17268] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  395.906725][T17275] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  395.926512][T17281] netlink: 'syz.3.2940': attribute type 10 has an invalid length.
[  395.953905][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'.
[  395.976232][T17275] bond11 (unregistering): Released all slaves
[  396.027119][T17284] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2941'.
[  396.054146][T17264] wg1 speed is unknown, defaulting to 1000
[  396.061487][ T5149] Bluetooth: hci4: command tx timeout
[  396.069228][T17264] vxcan1 speed is unknown, defaulting to 1000
[  396.115727][T13147] IPVS: stop unused estimator thread 0...
[  396.117847][T17279] wg1 speed is unknown, defaulting to 1000
[  396.316964][T17279] vxcan1 speed is unknown, defaulting to 1000
[  396.363983][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2944'.
[  396.427767][T17292] veth1: entered promiscuous mode
[  396.447656][T17292] veth1: left promiscuous mode
[  396.667487][T17302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'.
[  396.673574][T17300] xt_hashlimit: size too large, truncated to 1048576
[  396.708721][T17295] batadv_slave_1: entered promiscuous mode
[  396.745536][T17302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.882584][T17302] batadv_slave_1 (unregistering): left promiscuous mode
[  396.891216][T17302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.077204][T17314] netlink: 404 bytes leftover after parsing attributes in process `syz.6.2950'.
[  397.102129][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2950'.
[  397.122929][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2950'.
[  397.143931][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2950'.
[  397.332130][T17316] syzkaller0: entered promiscuous mode
[  397.338839][T17316] syzkaller0: entered allmulticast mode
[  397.357058][T17326] netlink: 'syz.1.2951': attribute type 11 has an invalid length.
[  397.386598][T17326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2951'.
[  397.401157][T17324] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  397.461578][T17322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.135567][ T5149] Bluetooth: hci4: command tx timeout
[  398.993835][T17331] netlink: 'syz.5.2955': attribute type 13 has an invalid length.
[  399.023761][T17334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.193853][T17331] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.282728][T17331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.385929][T17348] xt_ecn: cannot match TCP bits for non-tcp packets
[  399.423558][T17331] batman_adv: batadv0: Interface deactivated: gretap2
[  399.444351][T17331] mac80211_hwsim hwsim19 wlan1: left promiscuous mode
[  399.571756][T17336] bond1: entered promiscuous mode
[  399.578211][T17336] bond1: entered allmulticast mode
[  399.583840][T17336] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.599635][   T10] wg1 speed is unknown, defaulting to 1000
[  399.605934][   T10] syz: Port: 1 Link DOWN
[  399.613855][T17334] __nla_validate_parse: 1 callbacks suppressed
[  399.613870][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'.
[  399.629241][T17334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'.
[  399.638323][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'.
[  399.647805][T17334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'.
[  399.657326][T17334] netlink: 'syz.1.2954': attribute type 6 has an invalid length.
[  399.669579][ T3527] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.678081][ T3527] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.687537][ T3527] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.696017][ T3527] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.704867][T17351] syzkaller1: entered promiscuous mode
[  399.710346][T17351] syzkaller1: entered allmulticast mode
[  399.731170][ T3527] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.739976][ T3527] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.748459][ T3527] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.757254][ T3527] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.015527][T17361] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2959'.
[  400.041403][T17361] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  400.084230][T17139] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  400.108375][T17139] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  400.135946][T17139] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  400.161702][T17139] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  400.253045][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2964'.
[  400.266283][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2964'.
[  400.288153][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2965'.
[  400.484329][T17139] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.545215][T17139] 8021q: adding VLAN 0 to HW filter on device team0
[  400.711923][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.719162][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.761031][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.768344][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.929307][T17139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  400.968980][T17139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  401.080271][T17413] wg1 speed is unknown, defaulting to 1000
[  401.088229][T17413] vxcan1 speed is unknown, defaulting to 1000
[  401.148047][T17419] tls_set_device_offload: netdev not found
[  401.249826][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'.
[  401.529733][T17436] 8021q: adding VLAN 0 to HW filter on device bond5
[  401.587669][T17436] bond_slave_0: entered promiscuous mode
[  401.593692][T17436] bond_slave_1: entered promiscuous mode
[  401.620413][T17436] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  401.642890][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2973'.
[  401.657550][T17436] bond5: (slave macvlan0): Enslaving as a backup interface with an up link
[  401.709790][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.824229][T17447] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  401.851435][T17139] veth0_vlan: entered promiscuous mode
[  401.893252][T17139] veth1_vlan: entered promiscuous mode
[  402.049332][T17449] wg1 speed is unknown, defaulting to 1000
[  402.067756][T17139] veth0_macvtap: entered promiscuous mode
[  402.084339][T17449] vxcan1 speed is unknown, defaulting to 1000
[  402.087999][T17139] veth1_macvtap: entered promiscuous mode
[  402.140213][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.159919][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.178619][ T7274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.205682][ T7274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.351003][ T7274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.378434][T17469] netlink: 'syz.6.2982': attribute type 13 has an invalid length.
[  402.389171][ T7274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.572905][ T7931] vxcan1 speed is unknown, defaulting to 1000
[  402.917164][ T7274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.937447][ T7274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.125486][ T7274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.164133][ T7274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.440222][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.496829][T17495] netlink: 'syz.1.2989': attribute type 21 has an invalid length.
[  403.547585][T17495] netlink: 'syz.1.2989': attribute type 5 has an invalid length.
[  403.567754][T17496] netlink: 'syz.0.2990': attribute type 10 has an invalid length.
[  403.584668][T17495] netlink: 'syz.1.2989': attribute type 6 has an invalid length.
[  403.615124][T17496] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  403.791592][T17509] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  404.267534][T17540] tipc: Resetting bearer <eth:ipvlan1>
[  404.287065][T17540] tipc: Resetting bearer <eth:ipvlan1>
[  404.530391][T17550] Unsupported ieee802154 address type: 0
[  404.636081][T17535] __nla_validate_parse: 19 callbacks suppressed
[  404.636101][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.655804][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.676189][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.724794][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.748315][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.764208][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.816046][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.836860][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.874301][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.883775][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  404.895036][T17535] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.904234][T17535] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.396579][T17535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.737415][T17577] syz_tun (unregistering): left allmulticast mode
[  405.786961][T17581] ip6tnl2: entered promiscuous mode
[  405.792370][T17581] ip6tnl2: entered allmulticast mode
[  405.808987][T17581] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  405.870006][T13146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.925197][T13146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.945931][T13146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.961366][T13146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.119209][T17615] xt_TCPMSS: Only works on TCP SYN packets
[  406.240176][T17626] tap0: tun_chr_ioctl cmd 1074025673
[  406.262588][T17630] tipc: Resetting bearer <eth:syzkaller0>
[  406.277720][T17630] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  406.566489][T17646] IPv6: addrconf: prefix option has invalid lifetime
[  406.870172][T17672] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  406.886480][T17672] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  406.898292][T17672] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.056163][T17686] ip6tnl0: Caught tx_queue_len zero misconfig
[  407.296081][T17702] syzkaller0: entered promiscuous mode
[  407.301724][T17702] syzkaller0: entered allmulticast mode
[  407.342744][T17708] xt_bpf: check failed: parse error
[  407.725825][T17728] erspan0: left allmulticast mode
[  407.731298][T17728] sit0: left promiscuous mode
[  407.769956][T17728] 1ªX¹¦À: left allmulticast mode
[  407.799752][T17728] macvlan2: left promiscuous mode
[  407.838012][T17728] macvlan2: left allmulticast mode
[  407.843830][T17728] gretap1: left promiscuous mode
[  407.849450][T17728] bond2: left promiscuous mode
[  407.854306][T17728] bond2: left allmulticast mode
[  407.859639][T17728] geneve2: left promiscuous mode
[  407.865660][T17728] macvtap2: left promiscuous mode
[  407.872267][T17728] bond3: left allmulticast mode
[  408.378811][T17746] tipc: Invalid UDP bearer configuration
[  408.378871][T17746] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  410.245839][T17764] syzkaller0: entered promiscuous mode
[  410.251345][T17764] syzkaller0: entered allmulticast mode
[  410.277160][T17776] __nla_validate_parse: 157 callbacks suppressed
[  410.277178][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'.
[  410.313871][T17790] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3068'.
[  410.629766][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'.
[  410.733382][T17826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.778209][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'.
[  410.792010][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'.
[  410.867875][T17837] netlink: 'syz.6.3080': attribute type 1 has an invalid length.
[  410.884067][T17837] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3080'.
[  410.963859][T17829] wg1 speed is unknown, defaulting to 1000
[  411.000673][T17829] vxcan1 speed is unknown, defaulting to 1000
[  411.001379][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'.
[  411.034724][T17844] netlink: 'syz.0.3084': attribute type 30 has an invalid length.
[  411.055452][T17847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3084'.
[  411.092233][ T7274] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  411.104683][ T7274] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  411.128061][ T7274] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  411.155938][ T7274] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  411.346653][T17856] xt_hashlimit: overflow, try lower: 3/0
[  411.478096][T17857] gretap1: entered promiscuous mode
[  411.560343][   T30] audit: type=1107 audit(1763041369.416:9): pid=17864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  411.583844][T17865] Cannot find del_set index 0 as target
[  411.684924][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'.
[  411.713454][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'.
[  412.055002][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  412.327315][T13146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.348475][T13146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.477924][T17905] vlan2: entered allmulticast mode
[  412.483230][T17905] bridge0: entered allmulticast mode
[  412.662890][T17913] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode
[  412.695027][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.380279][T17930] wg1 speed is unknown, defaulting to 1000
[  413.477420][T17930] vxcan1 speed is unknown, defaulting to 1000
[  413.502924][T17934] wg1 speed is unknown, defaulting to 1000
[  413.531061][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  413.557603][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  413.572514][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  413.595044][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  413.602755][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  413.605300][T17939] netlink: 'syz.0.3110': attribute type 39 has an invalid length.
[  413.788804][T17935] wg1 speed is unknown, defaulting to 1000
[  414.050759][T17955] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12
[  414.077452][T17934] vxcan1 speed is unknown, defaulting to 1000
[  414.362720][T17935] vxcan1 speed is unknown, defaulting to 1000
[  414.860772][T17988] IPVS: set_ctl: invalid protocol: 47 172.20.20.60:20002
[  414.883493][T17988] IPVS: length: 95 != 24
[  415.306349][T18009] batadv_slave_1: entered promiscuous mode
[  415.348999][T18006] batadv_slave_1: left promiscuous mode
[  415.396947][T18015] vlan0: entered promiscuous mode
[  415.467006][T18008] wg1 speed is unknown, defaulting to 1000
[  415.520556][T18008] vxcan1 speed is unknown, defaulting to 1000
[  415.665309][ T5829] Bluetooth: hci0: command tx timeout
[  415.733887][T17935] chnl_net:caif_netlink_parms(): no params data found
[  415.952859][T18036] __nla_validate_parse: 21 callbacks suppressed
[  415.952877][T18036] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3132'.
[  415.992481][T18036] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3132'.
[  416.566067][T18045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3135'.
[  416.661428][T17935] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.675380][T18047] netlink: 'syz.0.3136': attribute type 1 has an invalid length.
[  416.684622][T17935] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.697868][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'.
[  416.702198][T17935] bridge_slave_0: entered allmulticast mode
[  416.725092][T17935] bridge_slave_0: entered promiscuous mode
[  416.789442][T17935] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.802774][T17935] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.814655][T17935] bridge_slave_1: entered allmulticast mode
[  416.832850][T17935] bridge_slave_1: entered promiscuous mode
[  416.839201][T18055] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3137'.
[  417.038481][T17935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.092079][T17935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.240846][T18064] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3141'.
[  417.308686][T17935] team0: Port device team_slave_0 added
[  417.339469][T17935] team0: Port device team_slave_1 added
[  417.450065][T17935] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.463702][T17935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.506401][T18075] Bluetooth: MGMT ver 1.23
[  417.548318][T17935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.598001][T17935] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.611816][T17935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.637974][T17935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.734486][ T5829] Bluetooth: hci0: command tx timeout
[  417.760808][T17935] hsr_slave_0: entered promiscuous mode
[  417.769493][T17935] hsr_slave_1: entered promiscuous mode
[  417.776317][T17935] debugfs: 'hsr0' already exists in 'hsr'
[  417.782183][T17935] Cannot create hsr debugfs directory
[  418.117927][T18079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  418.708519][T17956] ==================================================================
[  418.716633][T17956] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  418.724196][T17956] Read of size 8 at addr ffff8880306780a0 by task khidpd_16bf5505/17956
[  418.732525][T17956] 
[  418.734861][T17956] CPU: 1 UID: 0 PID: 17956 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  418.734884][T17956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  418.734894][T17956] Call Trace:
[  418.734902][T17956]  <TASK>
[  418.734910][T17956]  dump_stack_lvl+0x189/0x250
[  418.734934][T17956]  ? __kasan_check_byte+0x12/0x40
[  418.734953][T17956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.734975][T17956]  ? lock_release+0x4b/0x3e0
[  418.734996][T17956]  ? __virt_addr_valid+0x4a5/0x5c0
[  418.735019][T17956]  print_report+0xca/0x240
[  418.735039][T17956]  ? __mutex_lock+0x801/0x1350
[  418.735056][T17956]  kasan_report+0x118/0x150
[  418.735074][T17956]  ? __mutex_lock+0x801/0x1350
[  418.735096][T17956]  __mutex_lock+0x801/0x1350
[  418.735115][T17956]  ? __mutex_lock+0x5bb/0x1350
[  418.735135][T17956]  ? l2cap_unregister_user+0x6a/0x1b0
[  418.735159][T17956]  ? __pfx___mutex_lock+0x10/0x10
[  418.735177][T17956]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  418.735209][T17956]  l2cap_unregister_user+0x6a/0x1b0
[  418.735232][T17956]  hidp_session_thread+0x3c9/0x410
[  418.735256][T17956]  ? __pfx_hidp_session_thread+0x10/0x10
[  418.735276][T17956]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  418.735300][T17956]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  418.735326][T17956]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  418.735349][T17956]  ? __kthread_parkme+0x7b/0x200
[  418.735369][T17956]  ? __kthread_parkme+0x1a1/0x200
[  418.735391][T17956]  kthread+0x711/0x8a0
[  418.735414][T17956]  ? __pfx_hidp_session_thread+0x10/0x10
[  418.735436][T17956]  ? __pfx_kthread+0x10/0x10
[  418.735456][T17956]  ? _raw_spin_unlock_irq+0x23/0x50
[  418.735479][T17956]  ? lockdep_hardirqs_on+0x9c/0x150
[  418.735495][T17956]  ? __pfx_kthread+0x10/0x10
[  418.735515][T17956]  ret_from_fork+0x4bc/0x870
[  418.735535][T17956]  ? __pfx_ret_from_fork+0x10/0x10
[  418.735556][T17956]  ? __switch_to_asm+0x39/0x70
[  418.735577][T17956]  ? __switch_to_asm+0x33/0x70
[  418.735590][T17956]  ? __pfx_kthread+0x10/0x10
[  418.735611][T17956]  ret_from_fork_asm+0x1a/0x30
[  418.735635][T17956]  </TASK>
[  418.735641][T17956] 
[  418.937395][T17956] Allocated by task 17935:
[  418.941784][T17956]  kasan_save_track+0x3e/0x80
[  418.946489][T17956]  __kasan_kmalloc+0x93/0xb0
[  418.951062][T17956]  __kmalloc_noprof+0x411/0x7f0
[  418.955889][T17956]  hci_alloc_dev_priv+0x28/0x2060
[  418.960892][T17956]  vhci_create_device+0x120/0x650
[  418.965892][T17956]  vhci_write+0x3ce/0x4a0
[  418.970229][T17956]  vfs_write+0x5c9/0xb30
[  418.974455][T17956]  ksys_write+0x145/0x250
[  418.978780][T17956]  do_syscall_64+0xfa/0xfa0
[  418.983283][T17956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.989159][T17956] 
[  418.991474][T17956] Freed by task 17935:
[  418.995530][T17956]  kasan_save_track+0x3e/0x80
[  419.000219][T17956]  __kasan_save_free_info+0x46/0x50
[  419.005406][T17956]  __kasan_slab_free+0x5c/0x80
[  419.010154][T17956]  kfree+0x19a/0x6d0
[  419.014025][T17956]  bt_host_release+0x82/0x90
[  419.018598][T17956]  device_release+0x9c/0x1c0
[  419.023182][T17956]  kobject_put+0x22b/0x480
[  419.027578][T17956]  vhci_release+0x15a/0x1a0
[  419.032058][T17956]  __fput+0x44c/0xa70
[  419.036015][T17956]  task_work_run+0x1d4/0x260
[  419.040759][T17956]  do_exit+0x6b5/0x2300
[  419.044895][T17956]  do_group_exit+0x21c/0x2d0
[  419.049469][T17956]  get_signal+0x1285/0x1340
[  419.053970][T17956]  arch_do_signal_or_restart+0xa0/0x790
[  419.059503][T17956]  exit_to_user_mode_loop+0x72/0x130
[  419.064774][T17956]  do_syscall_64+0x2bd/0xfa0
[  419.069399][T17956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.075269][T17956] 
[  419.077572][T17956] Last potentially related work creation:
[  419.083259][T17956]  kasan_save_stack+0x3e/0x60
[  419.087925][T17956]  kasan_record_aux_stack+0xbd/0xd0
[  419.093104][T17956]  insert_work+0x3d/0x330
[  419.097415][T17956]  __queue_work+0xbaf/0xfb0
[  419.101914][T17956]  queue_work_on+0x181/0x270
[  419.106483][T17956]  process_scheduled_works+0xae1/0x17b0
[  419.112009][T17956]  worker_thread+0x8a0/0xda0
[  419.116575][T17956]  kthread+0x711/0x8a0
[  419.120622][T17956]  ret_from_fork+0x4bc/0x870
[  419.125190][T17956]  ret_from_fork_asm+0x1a/0x30
[  419.129931][T17956] 
[  419.132229][T17956] Second to last potentially related work creation:
[  419.138785][T17956]  kasan_save_stack+0x3e/0x60
[  419.143443][T17956]  kasan_record_aux_stack+0xbd/0xd0
[  419.148621][T17956]  insert_work+0x3d/0x330
[  419.152928][T17956]  __queue_work+0xcd2/0xfb0
[  419.157406][T17956]  call_timer_fn+0x17e/0x5f0
[  419.161974][T17956]  __run_timer_base+0x646/0x860
[  419.166804][T17956]  run_timer_softirq+0xb7/0x180
[  419.171909][T17956]  handle_softirqs+0x286/0x870
[  419.176669][T17956]  __irq_exit_rcu+0xca/0x1f0
[  419.181244][T17956]  irq_exit_rcu+0x9/0x30
[  419.185639][T17956]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  419.191254][T17956]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.197214][T17956] 
[  419.199517][T17956] The buggy address belongs to the object at ffff888030678000
[  419.199517][T17956]  which belongs to the cache kmalloc-8k of size 8192
[  419.213552][T17956] The buggy address is located 160 bytes inside of
[  419.213552][T17956]  freed 8192-byte region [ffff888030678000, ffff88803067a000)
[  419.227521][T17956] 
[  419.229840][T17956] The buggy address belongs to the physical page:
[  419.236260][T17956] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30678
[  419.245003][T17956] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  419.253492][T17956] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  419.261042][T17956] page_type: f5(slab)
[  419.265012][T17956] raw: 00fff00000000040 ffff88801a027280 dead000000000100 dead000000000122
[  419.273589][T17956] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  419.282154][T17956] head: 00fff00000000040 ffff88801a027280 dead000000000100 dead000000000122
[  419.290809][T17956] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  419.299461][T17956] head: 00fff00000000003 ffffea0000c19e01 00000000ffffffff 00000000ffffffff
[  419.308117][T17956] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  419.316767][T17956] page dumped because: kasan: bad access detected
[  419.323174][T17956] page_owner tracks the page as allocated
[  419.328868][T17956] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5816, tgid 5816 (sh), ts 72393987071, free_ts 72393187500
[  419.348556][T17956]  post_alloc_hook+0x240/0x2a0
[  419.353339][T17956]  get_page_from_freelist+0x2365/0x2440
[  419.358859][T17956]  __alloc_frozen_pages_noprof+0x181/0x370
[  419.364642][T17956]  alloc_pages_mpol+0x232/0x4a0
[  419.369491][T17956]  allocate_slab+0x96/0x350
[  419.374064][T17956]  ___slab_alloc+0xe94/0x18a0
[  419.378757][T17956]  __slab_alloc+0x65/0x100
[  419.383156][T17956]  __kmalloc_cache_noprof+0x411/0x6f0
[  419.388508][T17956]  tomoyo_init_log+0x111f/0x1f70
[  419.393435][T17956]  tomoyo_supervisor+0x340/0x1480
[  419.398441][T17956]  tomoyo_env_perm+0x149/0x1e0
[  419.403184][T17956]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  419.408883][T17956]  tomoyo_bprm_check_security+0x11c/0x180
[  419.414588][T17956]  security_bprm_check+0x89/0x270
[  419.419610][T17956]  bprm_execve+0x8ee/0x1450
[  419.424105][T17956]  do_execveat_common+0x510/0x6a0
[  419.429109][T17956] page last free pid 5816 tgid 5816 stack trace:
[  419.435413][T17956]  __free_frozen_pages+0xbc4/0xd30
[  419.440506][T17956]  __put_partials+0x146/0x170
[  419.445159][T17956]  put_cpu_partial+0x1f2/0x2e0
[  419.449901][T17956]  __slab_free+0x2b9/0x390
[  419.454289][T17956]  qlist_free_all+0x97/0x140
[  419.458860][T17956]  kasan_quarantine_reduce+0x148/0x160
[  419.464300][T17956]  __kasan_slab_alloc+0x22/0x80
[  419.469131][T17956]  __kmalloc_noprof+0x3c3/0x7f0
[  419.473963][T17956]  tomoyo_supervisor+0xbd5/0x1480
[  419.478965][T17956]  tomoyo_env_perm+0x149/0x1e0
[  419.483706][T17956]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  419.489337][T17956]  tomoyo_bprm_check_security+0x11c/0x180
[  419.495043][T17956]  security_bprm_check+0x89/0x270
[  419.500063][T17956]  bprm_execve+0x8ee/0x1450
[  419.504548][T17956]  do_execveat_common+0x510/0x6a0
[  419.509568][T17956]  __x64_sys_execve+0x94/0xb0
[  419.514230][T17956] 
[  419.516541][T17956] Memory state around the buggy address:
[  419.522145][T17956]  ffff888030677f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.530182][T17956]  ffff888030678000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.538230][T17956] >ffff888030678080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.546286][T17956]                                ^
[  419.551641][T17956]  ffff888030678100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.559683][T17956]  ffff888030678180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.567718][T17956] ==================================================================
[  419.576672][T17956] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  419.583875][T17956] CPU: 1 UID: 0 PID: 17956 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  419.593665][T17956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  419.603714][T17956] Call Trace:
[  419.606990][T17956]  <TASK>
[  419.609908][T17956]  dump_stack_lvl+0x99/0x250
[  419.614491][T17956]  ? __asan_memcpy+0x40/0x70
[  419.619080][T17956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.624306][T17956]  ? __pfx__printk+0x10/0x10
[  419.629060][T17956]  vpanic+0x237/0x6d0
[  419.633037][T17956]  ? __pfx_vpanic+0x10/0x10
[  419.637527][T17956]  panic+0xb9/0xc0
[  419.641235][T17956]  ? __pfx_panic+0x10/0x10
[  419.645634][T17956]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  419.651516][T17956]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  419.657398][T17956]  ? __mutex_lock+0x801/0x1350
[  419.662149][T17956]  check_panic_on_warn+0x89/0xb0
[  419.667075][T17956]  ? __mutex_lock+0x801/0x1350
[  419.671912][T17956]  end_report+0x78/0x160
[  419.676231][T17956]  kasan_report+0x129/0x150
[  419.680730][T17956]  ? __mutex_lock+0x801/0x1350
[  419.685487][T17956]  __mutex_lock+0x801/0x1350
[  419.690060][T17956]  ? __mutex_lock+0x5bb/0x1350
[  419.694809][T17956]  ? l2cap_unregister_user+0x6a/0x1b0
[  419.700177][T17956]  ? __pfx___mutex_lock+0x10/0x10
[  419.705185][T17956]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  419.711070][T17956]  l2cap_unregister_user+0x6a/0x1b0
[  419.716257][T17956]  hidp_session_thread+0x3c9/0x410
[  419.721361][T17956]  ? __pfx_hidp_session_thread+0x10/0x10
[  419.726976][T17956]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  419.732858][T17956]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  419.739088][T17956]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  419.745321][T17956]  ? __kthread_parkme+0x7b/0x200
[  419.750246][T17956]  ? __kthread_parkme+0x1a1/0x200
[  419.755343][T17956]  kthread+0x711/0x8a0
[  419.759397][T17956]  ? __pfx_hidp_session_thread+0x10/0x10
[  419.765019][T17956]  ? __pfx_kthread+0x10/0x10
[  419.769595][T17956]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.775040][T17956]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.780217][T17956]  ? __pfx_kthread+0x10/0x10
[  419.784795][T17956]  ret_from_fork+0x4bc/0x870
[  419.789382][T17956]  ? __pfx_ret_from_fork+0x10/0x10
[  419.794481][T17956]  ? __switch_to_asm+0x39/0x70
[  419.799235][T17956]  ? __switch_to_asm+0x33/0x70
[  419.803975][T17956]  ? __pfx_kthread+0x10/0x10
[  419.808551][T17956]  ret_from_fork_asm+0x1a/0x30
[  419.813299][T17956]  </TASK>
[  419.816576][T17956] Kernel Offset: disabled
[  419.820881][T17956] Rebooting in 86400 seconds..