last executing test programs:

2m11.672025219s ago: executing program 1 (id=3133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x20000000)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r5=>0x0})
close(r4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000600))
pipe(0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r10, 0x2f}, 0x20)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r11=>0x0})
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r12}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0x7, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x1, 0x7, 0x3000, 0x43b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x7, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x3, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x2d0, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x91f, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x4, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x8, 0x7d96, 0xfe000000, 0x175, 0x5, 0x400, 0x40000000, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x1, 0x1, 0x81, 0x1, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0x9, 0x80000000, 0x15ae, 0x1, 0x0, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x1, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x400002, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0x5, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0xfffd, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x200, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x0, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)

2m11.181014331s ago: executing program 1 (id=3135):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x200000000000010d, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x5, 0x0)
listen(r1, 0x10000)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r8, 0x0, 0x6df33d3f}, 0x18)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd0600fcdbdf250100000006000a004e24000014000700ff02000000000000000000000000000108000800e00000021400090000000000000000000000000000000000c89e5df3d535251136e43729856297edcbe2b5e4170aeb6313b1c40f76bbe6cfb7a05e53d13a598974860f036fd8dbb149d18618"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket(0x10, 0x3, 0xc)
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4, @empty}, 0x1c)

1m56.745888288s ago: executing program 1 (id=3153):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3504000030000511d25a80648c63940d1124fc60040035400c0002000a00002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767306b74b4098e9e71fa51bde29f19b06fb9b3ba96da0e93d5a402dc7fe462a6cc4718c94c1747fff68092705b44bb48dd2db4f3127aab13b4af05549571a6c0e03db227b65d459fa5c1232d7b62f12b65354b7e70d32998da02ae0dc28942f682d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85c6711cd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee0493ffe3b72b508c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b9b0bba0ba2deac12f0257c64ceca8a0a62db179c7d9df7749da38624aab1865024e56a1b2a41e1c7e3a29c01adb31f1865bf6f44aa1e0fd6d827fbae1d57b5ff0026b580c890df83592aceb316fcd6ca200d007b786f9ae", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @noop, @rr={0x7, 0xf, 0xe0, [@loopback, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000801010000fffffff3000002000005270221c6b9931accad899d8013a90c511774bcddf193c52e9f7dbbcaa8c8d4c597718a4b6070cd874c5a58b5d5b25c38148e1c91af99adefa9"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendfile(r3, r7, &(0x7f0000000240)=0x6, 0x9)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1)

1m56.159094929s ago: executing program 1 (id=3255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r6=>0x0})
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x21, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e20, 0x0, 'sed\x00', 0x8, 0x7, 0x11}, {@rand_addr=0x64010102, 0x4e21, 0x4, 0x7, 0x5, 0x6}}, 0x44) (async, rerun: 32)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) (rerun: 32)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0) (async)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000540)) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0) (rerun: 64)

1m55.64662057s ago: executing program 1 (id=3264):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003780)=@newchain={0x30, 0x1e, 0x400, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x44004)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003780)=@newchain={0x30, 0x1e, 0x400, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x44004) (async)

1m55.483791849s ago: executing program 1 (id=3268):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="922f51c2652f78e8f95fb039c6f202a8e9581eee20d85e47931757ced8046519", 0x20}], 0x1}], 0x1, 0xc8d0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="67f48fd0dc64eb9da54aeb1e3604470c5322b8094632923c469beea4244656bb328489c7cffa75a56b4086ca3cb0"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="1c721c3eba50892646093830c21739b7bd", 0x11)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1m54.798521742s ago: executing program 3 (id=3273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'bond_slave_1\x00', {0x40000}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x6a, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x6}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0)

1m54.698667699s ago: executing program 3 (id=3275):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @multicast2, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xff, r2, 0x4}, 0x38) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

1m54.245262415s ago: executing program 3 (id=3281):
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
unshare(0x2c060400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0b036c00e0ff64000200475400f6a13bb10000000800884748", 0x19, 0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022abd7001000000250f0000002a000e00"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000900))

1m53.984762206s ago: executing program 3 (id=3284):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
poll(0x0, 0x0, 0x7)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r2}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xb, 0x4}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x1}, {0xd, 0x4}, {0x1}, {0xb, 0x3}, {0x6, 0x1}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x5, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000012c0)={0x6, 'team_slave_0\x00', {0xfb4}, 0x1000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r6, r3], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x1}, 0x94)
sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r9, 0x112, 0x13, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x1ad72f7)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)

1m52.88698145s ago: executing program 3 (id=3290):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0xfffffffffffffffe, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r2, &(0x7f0000000100)='\x00', 0x1c)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e618", 0x56}], 0x1}, 0x24000008)
splice(r2, &(0x7f0000000180), r1, 0x0, 0x4, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r5=>0x0}, 0x8)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, 0x0, 0x300400d0)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000003c0)={0x7, 'bond0\x00', {0x8}})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0xc)

1m51.662307841s ago: executing program 3 (id=3299):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) (async, rerun: 32)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 32)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(chacha20,sha512-avx2)\x00'}, 0x58) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x38}}, 0x40808c4) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r6, 0x0, 0xf}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x51, 0x0, 0x0, 0x400048c0}, 0x10) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1m40.087921109s ago: executing program 32 (id=3268):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="922f51c2652f78e8f95fb039c6f202a8e9581eee20d85e47931757ced8046519", 0x20}], 0x1}], 0x1, 0xc8d0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="67f48fd0dc64eb9da54aeb1e3604470c5322b8094632923c469beea4244656bb328489c7cffa75a56b4086ca3cb0"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="1c721c3eba50892646093830c21739b7bd", 0x11)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1m36.487042197s ago: executing program 33 (id=3299):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) (async, rerun: 32)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 32)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(chacha20,sha512-avx2)\x00'}, 0x58) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x38}}, 0x40808c4) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r6, 0x0, 0xf}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x51, 0x0, 0x0, 0x400048c0}, 0x10) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

19.982345932s ago: executing program 2 (id=4198):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1938, 0x4)
sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000600)=""/102, 0x66, 0x10150, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)

19.940457647s ago: executing program 2 (id=4200):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

19.853513792s ago: executing program 2 (id=4201):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="620ac4ff000000ffe400"], &(0x7f0000000480)='GPL\x00'}, 0x94)
socket$igmp(0x2, 0x3, 0x2)

19.678363259s ago: executing program 2 (id=4205):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) (async)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x4d, 0x2, 0x2, 0x4}, {0x6, 0x40, 0x0, 0x42}, {0x3d, 0x0, 0x1, 0x20}]}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x4, 0xfffffff8)
sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="cee42edc1f175b2bc58dbaacd4862137140f020b4c5f1bdbc58c06c316df93c82a58db0cf6a8a5200cfc8ed7bc9805522c0378e7892703", 0x37}, {&(0x7f00000002c0)="b4a7aab616a1b7d66597c70e30d5d8b35e57af4197d49a5cfc07ed964ad1e6fdcba7e1ba5da2c28d5628e9d11349b04f0193c64824c0d40cd15ce7499ad948d3b8014d30a54e37d2f15e75696ce4b7a74d8ee7171746f211eff6f852f1c22910b11943e3527af5de807fe947631e96d8a1e36d87d88347f14e48f59b5f8e8a53bcc7638cd434fef06b26d8076688aff0caf2e1a9169130bd853bc1b3", 0x9c}, {&(0x7f00000003c0)="1d61fda70d29f797844c8c7d94a48eb965208ae2405c62e090e75bc3bc66bcf052e3b1502e114717eb227cef60088bd906975efc54e6d950971e4199542f91c3464fb4335472126450edf6a2de18d1547d3a5083cbc348e9077416771bc717628e44ee8e9952a71b89fa925c", 0x6c}], 0x3, &(0x7f0000000100)=ANY=[], 0x40}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x800) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80010, r7, 0x0) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) (async)
bind$alg(r6, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async)
openat$cgroup_ro(r7, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe7", 0x11)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]})
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000180)=[{0x6, 0xba, 0x1, 0x8}, {0x9, 0x13, 0x9, 0x5}, {0x0, 0x2, 0x2, 0x9}, {0x5, 0x2, 0x7, 0x9}]}) (async)
r9 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async)
ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000240)="a6cc043a")
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000001c0), 0x10)

19.410295511s ago: executing program 2 (id=4210):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000004000a200000000000007220000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_devices(r0, 0x0, 0x8)
write$cgroup_int(r0, &(0x7f0000000240)=0x9, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000000000)='cgroup\x00', <r1=>0x0}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_coalesce={0xf, 0x9, 0x1, 0x0, 0x401, 0x1, 0x7, 0x5, 0x7, 0x8, 0xfff, 0x5, 0x200, 0x2, 0x9, 0x8, 0x5, 0x9, 0x2, 0xc, 0xfff, 0xfffff800, 0xd3db}})
r3 = openat$cgroup_pressure(r2, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x40000000000004)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007ffffb7020000080000e2b602e8000000008385000000710000009500"/88], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x47)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x97)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r7}, 0x38)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="99742bbd7000fbdbdf25150000004c0001"], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)

18.689504145s ago: executing program 2 (id=4219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xb}, 0x1c) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) (async, rerun: 32)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async)
pread64(r3, 0x0, 0x0, 0x3)
read(r3, 0x0, 0x0) (async, rerun: 64)
write$ppp(r3, &(0x7f0000000200)="bc72", 0x2) (rerun: 64)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000140)) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r8, r7, 0x0, 0x9c) (async, rerun: 64)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (rerun: 64)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c)

6.706487061s ago: executing program 6 (id=4327):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x7ff, 0x4)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="e8000000100001002abd7000fcdbdf2565636861696e69762873657169762861757468656e6328626c616b6532732d3232342c63626328626c6f77666973682928"], 0xe8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5f5d, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e1f, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0xa65}], 0x1, 0x45833af96e4b38dd, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
recvfrom$inet6(r2, &(0x7f0000000000)=""/30, 0x1e, 0x40010020, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @mcast2, 0x80000001}, 0x1c)

6.32703795s ago: executing program 6 (id=4334):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x10001, @empty, 0x1}, 0x1c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000280)=0x3, 0x4)
bind$can_raw(r3, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
unshare(0x62040200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r7, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce)
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000000400)="0dd2e7", 0x3}], 0x1, 0x0)
tee(r6, r8, 0xfffffffffffffffd, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="10020000000000000000220000000080654dd70008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8918, &(0x7f0000000000)={r10})
accept4(r4, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401})

5.386329776s ago: executing program 6 (id=4340):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x7, 0x4, 0x0, 0x0, 0x3, 0x10010}}, 0x1c}}, 0x4850)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x0)
recvmmsg(r3, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9], 0x40}}, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000083a70cfaecc294000000000000189575002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffb70200002d7a5e9485a7e7af20ceaa312e08000000b7030000922049553519deb5293aac51d0f5215b6e0c802c4733e287256652e1517e0c8ff067f24041d7a5cce2165429b1659fc7094218fae1cad1a368590680a59299392fd6070a5254cc0b2b2a5811"], &(0x7f0000000000)='GPL\x00', 0xf}, 0x90)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000300)=0xc8d, 0x4)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3d, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@getchain={0x5c, 0x66, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x2, 0x7}, {0x18, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xd3b7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x1, 0x4)
syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f51002b1f03003a000000000011000000000000fe8000000000000000000000000000aa84ffc2"], 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)

5.022440311s ago: executing program 6 (id=4343):
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000400000002000003140000001100010000000000000000000000000a"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000053f1dc7eff030000000000006a7fc28600000000000000000066a6b6a86f94562684ac9af43256cebd4d7a6fab9939ecbc96280d28ae2e972790feffc844694ff2187f6002162ddba4f705f195d321858fd31a8b44785a56465dd610f5c90f4ecf37ad1eb963a15c767a3c34c2e4ff7abf07f5c007b222b7d070f19f8614b8f678b1a5b2bc404aa60b9d00d0f78d7aa75d5fb1818233af199d10b9f657a878839c50fe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00feff030000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
close(0x3)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x74, 0x0, 0x3, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

4.098418698s ago: executing program 5 (id=4355):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r3, 0x8)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x751, 0x6ec}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

3.655938836s ago: executing program 34 (id=4219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xb}, 0x1c) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) (async, rerun: 32)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async)
pread64(r3, 0x0, 0x0, 0x3)
read(r3, 0x0, 0x0) (async, rerun: 64)
write$ppp(r3, &(0x7f0000000200)="bc72", 0x2) (rerun: 64)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000140)) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r8, r7, 0x0, 0x9c) (async, rerun: 64)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (rerun: 64)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c)

3.216651932s ago: executing program 5 (id=4364):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) (async)
sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, 0x0, 0x0, 0x30000040}], 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x9, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001380)={<r8=>0xffffffffffffffff}) (rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000027c0)=@deltfilter={0xc30, 0x2d, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xf}, {0x10, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc04, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xa}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xb}}, @TCA_BPF_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xffffffff, 0x8, 0x1, 0x3, 0xfd6a, 0x0, 0xf9d, 0x5, 0x4, 0x4, 0xfffffffc, 0xb31d, 0x1000, 0xfffffffe, 0x2, 0xfffffffe, 0x1, 0x6, 0x80, 0x3, 0x7, 0x4, 0x10001, 0x1, 0x4, 0x2, 0x3, 0x80000000, 0x2, 0x3, 0x3ff, 0x69cf, 0x454f, 0x8, 0x55, 0x97f, 0x7, 0x3, 0x1ff, 0x8, 0x0, 0x0, 0x8000, 0x8001, 0x8, 0x9, 0x401, 0x72, 0x101, 0x0, 0xfffffffd, 0x9, 0x8, 0x0, 0x7f, 0x5, 0x40, 0x100, 0x2, 0x1ff, 0x5, 0x9, 0x4, 0x3, 0x2, 0x5, 0x8, 0x9, 0xf, 0xd2db, 0x1, 0x3, 0x9, 0x4, 0x744, 0x10001, 0x6, 0x7ff, 0x5, 0x800, 0x6, 0x282c, 0xfffffff5, 0x8, 0x1ff, 0x8c, 0x9, 0xbca, 0x9, 0x0, 0x9, 0x7, 0x4, 0x3, 0x80, 0x2, 0x6e69, 0x8, 0x1, 0x2, 0x3, 0xa, 0x9, 0x0, 0x0, 0xe2, 0xe6, 0x8, 0x8, 0x3ff, 0x1, 0x55, 0x6, 0x1, 0xfffffffd, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0xc1e7, 0x87, 0x1, 0xffffffff, 0x7, 0xa, 0x1, 0x9, 0x3, 0x505, 0x101, 0x0, 0xfffffffe, 0x0, 0x2, 0x4, 0xffffffff, 0x200, 0x40, 0x9, 0xba0, 0x2dc, 0x7, 0x3ff, 0x6c87, 0x4, 0xa, 0x7da8c5ad, 0x6, 0x1, 0x800, 0x4, 0x6, 0x2, 0x4, 0x0, 0x5, 0x7, 0x1, 0x9, 0x22, 0x10000000, 0x4, 0x5, 0x6, 0x4f, 0x6, 0x5, 0x10001, 0x4, 0x717ddf47, 0x1, 0xff, 0xa50, 0x9, 0x5, 0xa9f, 0x800, 0x80000000, 0x6, 0x2, 0x7, 0x9, 0x7, 0x4, 0x1, 0x5, 0x10000, 0x2, 0xfff, 0xb3, 0x948, 0x3, 0x2, 0x6, 0x2, 0x4, 0x8, 0xa, 0x14, 0x8, 0x6, 0x1, 0xedc, 0x7, 0x28, 0xfffffffc, 0x3, 0x7f, 0x2, 0x82, 0x8, 0x8, 0x6, 0x8, 0x4, 0x21, 0x3, 0x5, 0x9, 0x9, 0x7, 0x8001, 0x8, 0x59, 0x7, 0x0, 0x10001, 0x7, 0x1, 0x101, 0x8, 0x7, 0x0, 0xadae, 0x2, 0x6, 0x1b6, 0x81, 0x80000001, 0x5a, 0x7, 0x401, 0x2c7, 0x6, 0x9, 0x7fffffff, 0x3, 0x7, 0x80000001, 0x0, 0x100, 0x7fff, 0xb]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x9, 0x55b, 0x2, 0x7, 0x3, 0x4, 0x3, 0x51, 0x3, 0x0, 0x0, 0x7fff, 0xfffffffd, 0x0, 0x8, 0x0, 0x445, 0x6b1c, 0x78ee, 0xae, 0x6, 0x1, 0x0, 0x8, 0x7ac, 0x7, 0x10, 0xc3, 0xffffff49, 0xad, 0x387c, 0x8, 0x5, 0x8, 0x5, 0x0, 0x3, 0x6, 0xae8, 0x570, 0x8c, 0x9229, 0x3, 0x1, 0x504, 0x8, 0x85, 0x7, 0x6, 0x28, 0x7, 0x802, 0x3, 0x4, 0x7, 0x5, 0x8, 0x4, 0x6, 0x1, 0x9, 0x2, 0xc, 0x2, 0x0, 0x8001, 0x5, 0x7fffffff, 0x4, 0x9, 0x9, 0x38d8, 0xffffffff, 0x572e, 0x9, 0x800, 0x8, 0xbd, 0x0, 0x81, 0x8, 0x4, 0x280000, 0x6, 0x0, 0x3, 0xc, 0x1, 0x0, 0x4, 0x41, 0xff, 0x9, 0x6, 0x400, 0x40, 0x5, 0x7, 0x1, 0xc692, 0x9, 0x3, 0x7fff, 0x40, 0x3242, 0x3, 0x0, 0x7, 0x5, 0x101, 0xa, 0x1, 0x9, 0x200, 0x8, 0x5, 0x8001, 0x7, 0xfff, 0x2, 0x5, 0x9, 0x2, 0x4, 0x7, 0x4, 0x81, 0x2, 0x7da6, 0xa0, 0x400, 0x400, 0xfff, 0x26, 0x5, 0x101, 0x6bf9, 0x80a3, 0x9, 0x4f00, 0x2, 0x0, 0x1ff, 0x0, 0x6d800000, 0x2, 0x2, 0xfffffff8, 0xf0, 0x3, 0x8, 0x12, 0x4, 0x2fd2, 0x3b, 0x3770, 0x0, 0x6, 0x2, 0x1, 0x4, 0x8d, 0x8, 0x8f7, 0x0, 0x2, 0xde8, 0x6, 0x3, 0x1, 0xd, 0x9, 0xc9a, 0x6, 0xa, 0x2, 0x2, 0x3, 0x3, 0x1, 0x4, 0x2, 0x20a5, 0x4, 0x3, 0x0, 0x3, 0x10001, 0x2, 0x1, 0xffffff8b, 0x7, 0xfffffd81, 0xe6a, 0x1f, 0x0, 0x2, 0x9, 0xa, 0x1, 0x8000, 0xc152, 0x1, 0x0, 0x6, 0xab1, 0x8001, 0x2, 0x9, 0x401, 0xc080, 0x81, 0xd, 0x401, 0x6, 0x5, 0x8, 0x2e, 0x3, 0x3, 0x2, 0xe, 0xffffffff, 0x8, 0xa3, 0x4, 0xd, 0x5, 0xdbe0, 0x8, 0x41f, 0x1, 0xfffffff8, 0x1, 0x834f, 0x4, 0x28a3, 0x5, 0x6, 0x1, 0x8, 0x2, 0x1, 0x12d, 0x2, 0x2, 0x2, 0x7f, 0x3, 0x4, 0x80, 0xed8, 0x1ff, 0x7, 0x2]}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x3dc, 0x1, [@m_nat={0x228, 0x0, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x401, 0x8, 0x0, 0x5}, @local, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0x6, 0x292, 0x3}, @multicast1, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x2, 0x2, 0x3ff}, @multicast2, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x9, 0x1}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xb3, 0x7, 0xfe0, 0x1000}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0x2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0x2, 0x0, 0x2a388a60}, @empty, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x4, 0x8, 0x89a9, 0x2}, @multicast1, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xd, 0x7, 0xca, 0x10000}, @rand_addr=0x64010100, @private=0xa010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x55, 0x10000000, 0x4, 0x3}, @multicast2, @private=0xa010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x5, 0x3, 0xe203, 0x9}, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, 0xff000000, 0x1}}]}, {0x6e, 0x6, "b6e43581c23afe6d6f49bdc5c3c8686cf924f723fd79d02b34caaa42e433b7e54dcf76b1d4e6af8a1731d8da3d15338cc766bbd2206f2f6c95b96159a82b7f65b6478827f42488341709dfa77bee6e1446f03dc2573c5108ad3f10422bd94842cdea343ffffe3cae3dc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x1b0, 0x19, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xffffffff, 0x20000000, 0x3, 0xa7ff}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x8, 0xffffffffffffffff, 0x44c, 0x923}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x7, 0x8, 0x9, 0x7}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x9, 0x4, 0xfffffffc}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf7, 0x9, 0x2, 0x5, 0x1}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="825d387906bc"}]}, {0xa4, 0x6, "8165b7f477bb5156442cf4ec1b856465ac5a5762d02f0eddcff113f3ed1b782abc42b577a9083390ecdbfcfff22515349fdf557b4a0650a4837327a020e40426cbfb4752acb8822ec7576045b330e31ae0e421a9aa71e0658adc8702ad73bac76fc8782c41476e8fb2594c7cf9ef0531a8a8816f9f84db34a72d01bddde634a64b8ed9e7b880a8169eeb50766512092f74bcb230980e7176c9de5e780226bd53"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}]}]}}]}, 0xc30}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) (async, rerun: 32)
sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r13, &(0x7f0000000580)=[{&(0x7f0000000280)="00000a235f0b8f", 0x7}, {&(0x7f0000000340)="97965de2c55a26cf22984d7c7d2a11fc2149475383591f96f5facfb33081c264b1c1c4", 0x23}, {&(0x7f0000000500)="7bf11c0a85d75e785f8ace49918ad5102070bbead379034b6a62bffa012354fe4031b8a7b4db9d77be3763da617b736664e8450c48fbed229f71fff6b4cee30dc92cd0329687937941bf497889080c84bd6696482145524e09c775c3039a19a820a258244139d6eb275b9d7e", 0x6c}], 0x3, 0x7f, 0x80) (async)
sendfile(r13, r12, 0x0, 0xf03a0005) (async, rerun: 32)
preadv(r11, &(0x7f0000000300)=[{&(0x7f0000000140)=""/108, 0x6c}], 0x1, 0x3f, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtfilter={0x44, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}]}, 0x44}}, 0x4000)

2.948231418s ago: executing program 5 (id=4367):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x6c, 0xd, 0x6, 0x101, 0x0, 0x0, {0xf, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40490}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000e56f0a00000000000073013d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
socketpair(0x1e, 0x2, 0xf35, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x8, 0x6, 0x401, 0x0, 0x0, {0x9900a647da42bb7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8804)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe000000007110bf00000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2.697439469s ago: executing program 0 (id=4369):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0xffffffffffffff3b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='spi_setup\x00', r2}, 0x18)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000201010200000f0000000002308dfb050800084000000000080015400000000408001a40c0000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100002010ff"}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100002010ff"})

2.566877305s ago: executing program 0 (id=4371):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x5, 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet(0x2b, 0x801, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000f2ffffff978a000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x4, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x3, 0x7fffffff}, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
socket(0x10, 0x803, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r8)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast})

2.557563028s ago: executing program 5 (id=4373):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="110000000820000000000000", @ANYRES32, @ANYBLOB="8ac26cdf236ce83eabcacc2602152e2432d25832683f6dfcc4461f084ef00806549bbeb51f33f0472bff4d8b0f99bb0a35e9e81b41ae08d606e125dd96fffc001e14dda2ee3610424411c694b16ff4bc398faea4eb0800000000000000ebddb2f94d4a530a896ce2", @ANYRES64=0x0], 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x7}}, 0x14}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40)
recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000074601010000000000000000020000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)

2.330559594s ago: executing program 5 (id=4374):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
r1 = accept$netrom(r0, &(0x7f0000000200)={{0x3, @default}, [@bcast, @netrom, @remote, @remote, @bcast, @remote, @default, @bcast]}, &(0x7f0000000080)=0x6d)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async, rerun: 64)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r4=>0x0) (rerun: 64)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r4) (async)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000840)="a1c0ffff000039a9fe81bb4f6f1c0000a81eef54", 0x14}, {0x0}], 0x2}}], 0x1, 0x0)

2.251931469s ago: executing program 5 (id=4375):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080))
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8)
sendmsg$nl_generic(r8, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x274, 0x3b, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@nested={0x1a5, 0x51, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r9}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000}, @generic="f600c66ef305935340f0dcb491d24ff873ea4e5b030afb7d1db9dd537f0ce436bf029b2ce961a491836f37b11db29ca88393f915c2888edbd74ad980e15783220f6c8c66c9276c338c3d21c677f36aa826728d92eabe8d6df869185263c7b8d2881f48b6e4559f946a3ba46ee526fd944a8a00a94fa797970a6e2098643c36d4be822cdda1403515c870c32ed960ea35418d9ef667ca9153363be94f5c5d10cd912f8a8987f94c2fd29152937d4758ea79d2b1dd2545b8f8e2b9c1add81a07372a", @generic="ef55e143643999614e271821910d5806bccf265aa1f826a50951015be7a81343ecee58cc2204c8c45c0d36d0ac088211c26aa7f654d2bfb1d7e44556087c38789f27880a0d6c7b6ac950de038d052d7d7e628e71204fb9d16557c3a68ece709e7a3dc74f5b0cc46a6c6036ec0286c462ded9574f172455b799494605717056c01284053d0afc2c97a9864963f078e176535e79e182c8f919bdb3ed2185bdd470683b68e48da99348dd0c389b6302a25cab616133215fa43c69ff10b9640d339b", @nested={0x4, 0x1}]}, @generic, @generic="46dbdec4a03a252ec95ea8ed2bf0188e68d3911ed6a7266e11429fac07bf5ccf9337bdbaefb4433cb2027e8828a6984662aaba211a875d7beeae392691e2245137b519736fa2ae4b7eca58d8f15e0c042fbf2ea7e97dd6cba1f7b61109a4549fe272404c0c20f9aacf98fc491767b0886ebedd38c0e226d5fa9ebdcdf13c97bbcf315a36a46ddcbc337127526585c4e2232243adf6abd9f71296e1fe4489fd2ce2dfcdda0a2f7c37d64c4a4c8708ffe13fd86d1502e256fc"]}, 0x274}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000018}, 0x4000080)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r11 = socket(0x21, 0x800, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r11)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0)

2.138349296s ago: executing program 6 (id=4377):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200010086dd60e4d70000383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300003a0000000000000000000000000000000000fec0ffff000000000000ff"], 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000043142ac107f5e1853ea80c82e4f1a504e0b0fc8f91d587b4f88cfc06afc94d1c4a79d8321319dd3e85291964f6b4850f6c158c221c9fd49556c944a4f6ba9938ea137d1346da3bfe6834e8a883f83c69763e24dece95c73aaeede2a9680185afa7201dbd71ad7033009d34009cdc2de9aa26100076af1f91ae68a463cc584dec71678537b1b8b1e0100519e012df4d0c49869deca3f09ff0026f2b8faeb187d71e15f3395c64bf8f", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf250400000008000400030000000800020003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="00000000002100006be65560d127", 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

2.070823409s ago: executing program 6 (id=4379):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$netlink(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x8000}, 0x20008001)
socket$kcm(0x21, 0x4, 0xa) (async)
r2 = socket$kcm(0x21, 0x4, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38"], 0x18}, 0xfc00) (async)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38"], 0x18}, 0xfc00)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000380)='/', 0x0}, 0x20)
recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$NFT_BATCH(r5, 0x0, 0x40) (async)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
close(0x3)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x91f, 0x4) (async)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x91f, 0x4)
r7 = socket$inet6(0xa, 0x805, 0x0)
r8 = accept(r1, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000180)=0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0xfe, 0xfc, 0x40000, 0x2, @mcast1, @rand_addr=' \x01\x00', 0x1, 0x0, 0x2, 0x10007}})

1.826076696s ago: executing program 4 (id=4380):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x64}, {@in, 0x0, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x200}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x2, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x9f, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

1.705566516s ago: executing program 4 (id=4381):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/151, 0x97}], 0x4, &(0x7f0000000640)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x10, 0x52}, &(0x7f0000000480)=0x8, &(0x7f00000004c0)=0x5, 0x6, 0xffffffffffffffd8, 0x6, 0x2, 0x51}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/254, 0xfe}, &(0x7f0000000600), 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x400}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x3}}], 0xd0, 0x4800}, 0x8054)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x48, r4, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}}, 0x4040084)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x21)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)

1.351907778s ago: executing program 0 (id=4382):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000480)=0x3, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r5 = gettid()
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000240)=0xe8)
r7 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000280), 0x4)
write$tun(r6, &(0x7f00000010c0)={@void, @val={0x1, 0x3, 0x5000, 0x8, 0x10, 0xfd}, @x25={0x0, 0x1, 0x1b, "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"}}, 0x10b)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000840)=ANY=[@ANYBLOB="98020000210002002bbd7000fbdbdf250c008f0003000000000000000800a700", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB='\b\x00F\x00', @ANYRES32=r4, @ANYBLOB="08002800a3bae9b722f473c50541c60b0422482cef3679cf30f4bd17e32575423b0c1e0d581000ec0c1a789741b6c8ddf24925cae603b1455b6ee497ba94175ea345ae41928f5dd873702320ceddd7872495ac1bcd16e50324e80550509bfed7f3627506dc5ea318e92c3d48ca7dfe43e861b9d4103f3defe593315c5998083b8c42a1569e38e470ef7822ef2024f700"/158, @ANYRES32=r0, @ANYBLOB="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"], 0x298}], 0x2, 0x0, 0x0, 0x200040e4}, 0x80)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=<r10=>0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0xfffffffffffffff4)
bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r10, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r8, 0x0)
close(r9)

613.559918ms ago: executing program 0 (id=4383):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1, 0x0, 0x0, 0x21}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000453e9553abb39c4c70000000234a9ca89fbe0ee595dc548ef72357000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0x9}, {0x2, 0x5}, {0xc, 0x9}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0x9}, {0x2, 0x5}, {0xc, 0x9}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)

600.615913ms ago: executing program 4 (id=4384):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xe, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r4=>r2})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r5, 0x208, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", ""]}, 0x24}}, 0x14)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}], 0x20)
sendto$inet(r3, &(0x7f0000000300)="fa", 0x1, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)

438.697734ms ago: executing program 4 (id=4385):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x2040400)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x25, 0x0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

246.557391ms ago: executing program 0 (id=4386):
r0 = socket(0x2c, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0)

243.630782ms ago: executing program 4 (id=4387):
r0 = socket(0x8, 0x3, 0x10001)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffff8, 0x1, 0x9, 0x3f, 0x401, 0x5, 0xfffffffa, 0x7}}}}]}, 0x58}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001840), 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r6, 0x0, 0x804)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r5, 0x0, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000080)={0x80})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35ef, 0x1, 0x1, 0x6}]}, 0x10)
getsockname$netlink(r0, 0x0, &(0x7f0000000140))

143.407711ms ago: executing program 0 (id=4388):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
unshare(0x2c020400)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="3b667bd2fff43321e79cbb29e411", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000680)=""/134}, 0x20)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@local, @broadcast}, &(0x7f0000000540)=0xc)
sendto$packet(r0, &(0x7f00000000c0)="0300f998aaaebabeca00008586dd", 0xe, 0x4c802, &(0x7f0000000200)={0x11, 0x1a, r2, 0x1, 0xfe, 0x6, @random="582e6452ad7b"}, 0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c1}, 0x4004)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000400)=ANY=[@ANYBLOB="fb3dc793aabc2b7069647320"], 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000040), &(0x7f0000000240)}, 0x20)

0s ago: executing program 4 (id=4389):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x10f, 0x0, 0x0, 0x0, 0x42}, 0x10) (async)
connect$llc(r2, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async)
r3 = accept(r0, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0)
bind$llc(r4, &(0x7f0000000180)={0x1a, 0xfffe, 0x0, 0x3, 0xff, 0x42}, 0x10) (async)
socket$rds(0x15, 0x5, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket(0x22, 0x4, 0x3)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r3) (async)
sendmsg$SEG6_CMD_SETHMAC(r6, 0x0, 0x80) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async)
ioctl$int_in(r1, 0x5421, 0x0) (async)
recvmmsg(r7, &(0x7f0000000200), 0x1, 0x12001, 0x0) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2000000000000000, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r10 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0x9, "a1a435a1315b59f11969952b3bd6d954"}}}]}, 0xfffffe82}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22051, r8, 0x0)

kernel console output (not intermixed with test programs):

] bond7: entered promiscuous mode
[  403.390989][T17387] bond7: entered allmulticast mode
[  403.398790][T17387] 8021q: adding VLAN 0 to HW filter on device bond7
[  403.520643][T17387] bond7 (unregistering): Released all slaves
[  403.547599][T17280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.562668][T17373] wg1 speed is unknown, defaulting to 1000
[  403.635114][T17280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.779855][T17280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.810076][T17408] __nla_validate_parse: 4 callbacks suppressed
[  403.810092][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2909'.
[  403.833693][T17408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'.
[  403.854657][T17410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2909'.
[  403.882376][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'.
[  403.982527][T17416] netlink: 'syz.0.2910': attribute type 12 has an invalid length.
[  404.170047][T17425] sctp: [Deprecated]: syz.1.2915 (pid 17425) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.170047][T17425] Use struct sctp_sack_info instead
[  404.226288][T17280] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  404.258608][T17280] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  404.272055][T17280] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  404.316986][T17280] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  404.457656][T17280] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.485614][T17280] 8021q: adding VLAN 0 to HW filter on device team0
[  404.500838][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.508029][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.526800][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.533959][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.567946][ T5881] Bluetooth: hci1: command tx timeout
[  404.867146][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.994166][T17280] veth0_vlan: entered promiscuous mode
[  405.027103][T17280] veth1_vlan: entered promiscuous mode
[  405.099935][T17280] veth0_macvtap: entered promiscuous mode
[  405.105874][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'.
[  405.112058][T17280] veth1_macvtap: entered promiscuous mode
[  405.147042][T17451] netlink: 'syz.0.2921': attribute type 1 has an invalid length.
[  405.182736][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.218695][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.248273][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.260937][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.281111][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.295963][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.455878][T17463] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.2924'.
[  405.559255][T17471] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.2924'.
[  405.581982][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'.
[  405.584488][ T7804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.591880][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'.
[  405.605746][ T7804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.615957][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'.
[  405.628496][T17469] netlink: 'syz.4.2927': attribute type 18 has an invalid length.
[  405.661691][T17475] macvlan4: entered promiscuous mode
[  405.667234][T17475] macvlan4: entered allmulticast mode
[  405.760959][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.790514][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.989933][T17486] netlink: 'syz.3.2871': attribute type 2 has an invalid length.
[  406.023004][T17486] netlink: 'syz.3.2871': attribute type 3 has an invalid length.
[  406.068438][T17491] netlink: 'syz.0.2932': attribute type 6 has an invalid length.
[  406.285267][T17497] dummy0: entered promiscuous mode
[  406.308693][T17497] dummy0: left promiscuous mode
[  406.492063][T17510] netlink: 'syz.1.2937': attribute type 10 has an invalid length.
[  406.650457][ T5881] Bluetooth: hci1: command tx timeout
[  407.645121][T17549] netlink: 'syz.3.2947': attribute type 1 has an invalid length.
[  407.671311][T17551] netlink: 'syz.2.2948': attribute type 3 has an invalid length.
[  407.783402][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  407.785376][ T5864] bond0: (slave syz_tun): Releasing backup interface
[  407.800449][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  407.810487][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  407.821310][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  407.830742][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  407.949160][T17549] bond1: entered promiscuous mode
[  407.958107][T17549] bond1: entered allmulticast mode
[  407.976955][T17556] netlink: 'syz.1.2946': attribute type 2 has an invalid length.
[  408.128575][T17546] wg1 speed is unknown, defaulting to 1000
[  408.174931][T17577] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.184888][T17577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.211366][T17577] tipc: Resetting bearer <eth:syzkaller0>
[  409.176992][T17559] wg1 speed is unknown, defaulting to 1000
[  409.219092][T17603] dvmrp8: entered allmulticast mode
[  409.267975][T17603] __nla_validate_parse: 6 callbacks suppressed
[  409.267991][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2960'.
[  409.841593][T17621] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2965'.
[  409.933014][ T5881] Bluetooth: hci2: command tx timeout
[  410.001793][T17624] syzkaller0: entered promiscuous mode
[  410.019213][T17624] syzkaller0: entered allmulticast mode
[  410.028007][T17623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.155333][T17623] tipc: Resetting bearer <eth:syzkaller0>
[  410.246617][T17623] tipc: Disabling bearer <eth:syzkaller0>
[  410.293795][T17587] wg1 speed is unknown, defaulting to 1000
[  410.378344][T17559] chnl_net:caif_netlink_parms(): no params data found
[  411.265817][T17559] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.281035][T17559] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.294621][T17559] bridge_slave_0: entered allmulticast mode
[  411.305176][T17559] bridge_slave_0: entered promiscuous mode
[  411.314011][T17559] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.321270][T17559] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.328614][T17559] bridge_slave_1: entered allmulticast mode
[  411.335929][T17559] bridge_slave_1: entered promiscuous mode
[  411.342565][T17653] wg1 speed is unknown, defaulting to 1000
[  411.446660][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.482120][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'.
[  411.485336][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.689173][T17559] team0: Port device team_slave_0 added
[  411.698885][T17559] team0: Port device team_slave_1 added
[  411.741245][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.750098][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.777311][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.796650][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.813954][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.858951][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.028397][ T5881] Bluetooth: hci2: command tx timeout
[  412.088445][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2982'.
[  412.141927][T17559] hsr_slave_0: entered promiscuous mode
[  412.149440][T17559] hsr_slave_1: entered promiscuous mode
[  412.157141][T17559] debugfs: 'hsr0' already exists in 'hsr'
[  412.163658][T17559] Cannot create hsr debugfs directory
[  412.379794][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'.
[  412.494934][T17702] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2988'.
[  412.565116][T17707] netlink: 'syz.0.2989': attribute type 13 has an invalid length.
[  412.591785][T17707] netlink: 'syz.0.2989': attribute type 17 has an invalid length.
[  412.632041][T17707] ip6gretap0: left promiscuous mode
[  412.642690][T17707] ip6gretap0: left allmulticast mode
[  412.682553][T17707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  412.971915][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  413.000841][T17718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2993'.
[  413.040943][T17718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2993'.
[  413.050253][T17559] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  413.072322][T17559] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  413.098141][T17559] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  413.127084][T17559] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  413.254464][T17731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2996'.
[  413.291724][T17725] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  413.307004][T17725] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  413.327496][T17706] wg1 speed is unknown, defaulting to 1000
[  413.440935][T17559] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.509225][T17725] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  413.548976][T17559] 8021q: adding VLAN 0 to HW filter on device team0
[  413.607545][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.614742][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.645695][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.652869][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.671645][T17725] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  413.825368][T17725] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  414.089890][ T5881] Bluetooth: hci2: command tx timeout
[  414.295421][T17776] tipc: Resetting bearer <eth:syzkaller0>
[  414.360768][T17745] wg1 speed is unknown, defaulting to 1000
[  414.549879][T17785] __nla_validate_parse: 8 callbacks suppressed
[  414.549897][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'.
[  414.643693][T17559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.659596][T17792] netlink: 'syz.2.3010': attribute type 1 has an invalid length.
[  414.831887][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'.
[  415.260926][T17559] veth0_vlan: entered promiscuous mode
[  415.297733][T17559] veth1_vlan: entered promiscuous mode
[  415.413721][T17559] veth0_macvtap: entered promiscuous mode
[  415.435821][T17559] veth1_macvtap: entered promiscuous mode
[  415.482403][T17559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.509874][T17559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.540397][ T7865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.565309][ T7865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.586576][ T7865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.617477][ T7865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.772173][ T7865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.813744][ T7865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.881531][T17842] tipc: Enabling of bearer <et‚:g> rejected, media not registered
[  415.902050][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.914617][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3023'.
[  415.925955][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.011619][T17848] tipc: Started in network mode
[  416.023439][T17848] tipc: Node identity 080211, cluster identity 4711
[  416.040674][T17848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.139086][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'.
[  416.168824][ T5881] Bluetooth: hci2: command tx timeout
[  416.521007][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3029'.
[  416.547772][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3031'.
[  416.763891][T17879] syz_tun: entered allmulticast mode
[  416.869363][T17883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3032'.
[  416.960426][T17885] syz_tun: left allmulticast mode
[  417.035242][T17885] netlink: 'syz.3.3033': attribute type 10 has an invalid length.
[  417.076854][T17875] netlink: 'syz.4.3032': attribute type 4 has an invalid length.
[  417.085087][T17885] bridge0: port 3(macsec0) entered blocking state
[  417.091613][T17885] bridge0: port 3(macsec0) entered disabled state
[  417.115822][T17885] macsec0: entered allmulticast mode
[  417.121135][T17885] veth1_macvtap: entered allmulticast mode
[  417.163283][ T5973] tipc: Node number set to 134353152
[  417.174184][T17885] macsec0: entered promiscuous mode
[  417.217616][T17885] bridge0: port 3(macsec0) entered blocking state
[  417.224333][T17885] bridge0: port 3(macsec0) entered forwarding state
[  417.311885][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.325526][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.345723][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.362201][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.378269][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.401548][T17885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3033'.
[  417.607846][T17846] wg1 speed is unknown, defaulting to 1000
[  418.338679][ T3554] tipc: Resetting bearer <eth:syzkaller0>
[  418.359731][ T3554] batman_adv: batadv0: Interface deactivated: gretap2
[  418.491813][ T3554] tipc: Disabling bearer <eth:syzkaller0>
[  418.919498][ T3554] batman_adv: batadv0: Removing interface: gretap2
[  418.977316][ T3554] dvmrp8 (unregistering): left allmulticast mode
[  419.444157][ T5877] Bluetooth: hci0: command tx timeout
[  419.642417][ T3554] .` (unregistering): Released all slaves
[  419.745274][ T3554] bond1 (unregistering): Released all slaves
[  419.836399][ T3554] bond2 (unregistering): Released all slaves
[  419.930571][ T3554] bond4 (unregistering): (slave macvlan2): Releasing backup interface
[  419.944341][ T3554] bond0 (unregistering): Released all slaves
[  420.032834][ T3554] bond3 (unregistering): Released all slaves
[  420.125166][ T3554] bond4 (unregistering): Released all slaves
[  420.212470][ T3554] bond5 (unregistering): (slave bond6): Releasing backup interface
[  420.221082][ T3554] bond6 (unregistering): left promiscuous mode
[  420.227379][ T3554] bond6 (unregistering): left allmulticast mode
[  420.234798][ T3554] bond5 (unregistering): Released all slaves
[  420.325514][ T3554] bond6 (unregistering): Released all slaves
[  420.337804][T17881] wg1 speed is unknown, defaulting to 1000
[  420.369487][T17892] wg1 speed is unknown, defaulting to 1000
[  420.545286][ T3554] tipc: Disabling bearer <udp:s>
[  420.560764][ T3554] tipc: Left network mode
[  420.872359][T17892] chnl_net:caif_netlink_parms(): no params data found
[  421.076163][T17939] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  421.171878][T17916] wg1 speed is unknown, defaulting to 1000
[  421.294951][T17925] wg1 speed is unknown, defaulting to 1000
[  421.349698][T17892] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.360835][T17892] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.377656][T17892] bridge_slave_0: entered allmulticast mode
[  421.388524][T17892] bridge_slave_0: entered promiscuous mode
[  421.435127][T17892] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.442397][T17892] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.450892][T17892] bridge_slave_1: entered allmulticast mode
[  421.466024][T17892] bridge_slave_1: entered promiscuous mode
[  421.525125][ T5877] Bluetooth: hci0: command tx timeout
[  421.591586][T17892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.602708][T17937] wg1 speed is unknown, defaulting to 1000
[  421.612251][T17892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.762633][T17892] team0: Port device team_slave_0 added
[  421.783984][T17892] team0: Port device team_slave_1 added
[  422.334259][T17892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.341241][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.440495][T17892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.087465][T17892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.098495][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.129044][T17892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.553641][T17892] hsr_slave_0: entered promiscuous mode
[  423.560519][T17892] hsr_slave_1: entered promiscuous mode
[  423.567868][T17892] debugfs: 'hsr0' already exists in 'hsr'
[  423.574307][T17892] Cannot create hsr debugfs directory
[  423.605136][ T5877] Bluetooth: hci0: command tx timeout
[  423.751944][ T3554] IPVS: stop unused estimator thread 0...
[  424.078324][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'.
[  424.133076][T17974] Bluetooth: MGMT ver 1.23
[  424.212205][T17970] bond8: left allmulticast mode
[  424.221194][T17970] bond8: left promiscuous mode
[  424.227388][T17970] bridge0: port 1(bond8) entered disabled state
[  425.494171][T17993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.504692][T17993] bond_slave_1: left promiscuous mode
[  425.536143][T17993] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  425.547830][T17993] batadv_slave_0: left promiscuous mode
[  425.565730][T17993] bond0 (unregistering): Released all slaves
[  425.685049][ T5877] Bluetooth: hci0: command tx timeout
[  426.027425][T18035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3062'.
[  426.292408][T17892] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  426.347487][T17892] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  426.385678][T17892] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  426.425388][T17892] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  426.555801][T18071] netlink: del zone limit has 8 unknown bytes
[  426.623877][T18074] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3071'.
[  426.695542][T17892] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.786033][T17892] 8021q: adding VLAN 0 to HW filter on device team0
[  426.819819][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.826984][ T7804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.888015][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.895238][ T7804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.008108][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3074'.
[  427.052931][T18088] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  427.246436][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'.
[  427.674405][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3081'.
[  427.711976][T18113] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3081'.
[  427.723193][T18113] netlink: zone id is out of range
[  427.728343][T18113] netlink: zone id is out of range
[  427.741032][T18113] netlink: get zone limit has 8 unknown bytes
[  427.796920][T18117] IPVS: set_ctl: invalid protocol: 367 10.1.1.1:20003
[  427.828239][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.077167][T17892] veth0_vlan: entered promiscuous mode
[  428.090753][T17892] veth1_vlan: entered promiscuous mode
[  428.197175][T17892] veth0_macvtap: entered promiscuous mode
[  428.223948][T17892] veth1_macvtap: entered promiscuous mode
[  428.251679][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.271726][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.287031][ T3554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.302553][ T3554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.323433][ T3554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.342672][ T3554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.497479][T18140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  428.517641][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.533655][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.571095][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.593798][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.700802][T18144] wg1 speed is unknown, defaulting to 1000
[  428.751911][T18154] wg1 speed is unknown, defaulting to 1000
[  428.860976][T18160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3092'.
[  429.329194][T18170] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3095'.
[  429.636106][T18173] xt_l2tp: missing protocol rule (udp|l2tpip)
[  429.751198][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  429.761994][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  429.783271][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  429.800083][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  429.809702][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  430.139851][T18175] wg1 speed is unknown, defaulting to 1000
[  430.189128][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'.
[  430.599332][T18175] chnl_net:caif_netlink_parms(): no params data found
[  430.887259][T18223] tipc: Can't bind to reserved service type 1
[  430.944784][T18225] netlink: 'syz.0.3106': attribute type 1 has an invalid length.
[  430.960339][T18175] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.990795][T18175] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.002164][T18175] bridge_slave_0: entered allmulticast mode
[  431.011828][T18175] bridge_slave_0: entered promiscuous mode
[  431.085853][T18225] veth3: entered promiscuous mode
[  431.120583][T18175] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.149679][T18175] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.168395][T18175] bridge_slave_1: entered allmulticast mode
[  431.203534][T18175] bridge_slave_1: entered promiscuous mode
[  431.242344][T18228] erspan0: entered allmulticast mode
[  431.275894][T18233] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3109'.
[  431.392531][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3110'.
[  431.495580][T18223] wg1 speed is unknown, defaulting to 1000
[  431.504697][T18239] sch_tbf: burst 88 is lower than device caif0 mtu (1500) !
[  431.537741][T18175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.595988][T18175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.717286][ T5939] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  431.724033][T18247] netlink: 'syz.1.3111': attribute type 11 has an invalid length.
[  431.734936][ T5939] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  431.758791][ T5939] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  431.769912][T18251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.798808][T18175] team0: Port device team_slave_0 added
[  431.818717][T18175] team0: Port device team_slave_1 added
[  431.847099][ T5877] Bluetooth: hci5: command tx timeout
[  431.947464][T18175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.968744][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.001504][T18175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.014848][T18175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.022606][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.049030][T18175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.230998][T18175] hsr_slave_0: entered promiscuous mode
[  432.249895][T18175] hsr_slave_1: entered promiscuous mode
[  432.264425][T18175] debugfs: 'hsr0' already exists in 'hsr'
[  432.276855][T18175] Cannot create hsr debugfs directory
[  432.361830][T18255] wg1 speed is unknown, defaulting to 1000
[  432.640011][T18265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'.
[  432.691152][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'.
[  432.918959][T18175] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  432.944975][T18175] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  432.985999][T18175] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  433.082116][T18175] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  433.104539][T18175] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  433.135300][T18175] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  433.259187][T18175] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  433.293039][T18175] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  433.312021][T18175] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  433.333718][T18294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3126'.
[  433.402183][T18175] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  433.421701][T18175] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  433.431940][T18175] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  433.463314][T18293] wg1 speed is unknown, defaulting to 1000
[  433.641831][T18175] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  433.658626][T18175] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  433.678034][T18175] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  433.705769][T18175] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  433.877758][T18175] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.911042][T18175] 8021q: adding VLAN 0 to HW filter on device team0
[  433.924199][ T5877] Bluetooth: hci5: command tx timeout
[  433.942407][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.950643][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.013941][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.021122][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.493666][T18175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.551442][T18175] veth0_vlan: entered promiscuous mode
[  434.568941][T18175] veth1_vlan: entered promiscuous mode
[  434.615376][T18175] veth0_macvtap: entered promiscuous mode
[  434.626257][T18175] veth1_macvtap: entered promiscuous mode
[  434.654875][T18175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.670883][T18175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.690222][ T3554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.701502][ T3554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.714939][ T3554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.727992][ T3554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.789719][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.798151][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.826037][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.835122][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.876244][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'.
[  434.927441][T18311] warn_alloc: 1 callbacks suppressed
[  434.927458][T18311] syz.2.3094: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  434.948135][T18311] CPU: 0 UID: 0 PID: 18311 Comm: syz.2.3094 Not tainted syzkaller #0 PREEMPT(full) 
[  434.948161][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  434.948178][T18311] Call Trace:
[  434.948189][T18311]  <TASK>
[  434.948198][T18311]  dump_stack_lvl+0x189/0x250
[  434.948230][T18311]  ? __pfx_dump_stack_lvl+0x10/0x10
[  434.948253][T18311]  ? __pfx__printk+0x10/0x10
[  434.948279][T18311]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  434.948301][T18311]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  434.948325][T18311]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  434.948350][T18311]  warn_alloc+0x214/0x310
[  434.948379][T18311]  ? stack_depot_save_flags+0x40/0x860
[  434.948410][T18311]  ? __pfx_warn_alloc+0x10/0x10
[  434.948441][T18311]  ? kasan_save_track+0x4f/0x80
[  434.948465][T18311]  ? xskq_create+0x56/0x170
[  434.948483][T18311]  ? xsk_init_queue+0xb0/0x110
[  434.948499][T18311]  ? xsk_setsockopt+0x4dc/0x8d0
[  434.948528][T18311]  ? do_sock_setsockopt+0x17c/0x1b0
[  434.948549][T18311]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  434.948561][T18311]  ? do_syscall_64+0xfa/0x3b0
[  434.948572][T18311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.948588][T18311]  __vmalloc_node_range_noprof+0x125/0x12f0
[  434.948620][T18311]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  434.948637][T18311]  ? __kasan_kmalloc+0x93/0xb0
[  434.948652][T18311]  vmalloc_user_noprof+0xad/0xf0
[  434.948667][T18311]  ? xskq_create+0xbf/0x170
[  434.948677][T18311]  xskq_create+0xbf/0x170
[  434.948689][T18311]  xsk_init_queue+0xb0/0x110
[  434.948701][T18311]  xsk_setsockopt+0x4dc/0x8d0
[  434.948717][T18311]  ? __pfx_xsk_setsockopt+0x10/0x10
[  434.948733][T18311]  ? __pfx_aa_sk_perm+0x10/0x10
[  434.948749][T18311]  ? aa_sock_opt_perm+0xff/0x1b0
[  434.948761][T18311]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  434.948771][T18311]  ? __pfx_xsk_setsockopt+0x10/0x10
[  434.948787][T18311]  do_sock_setsockopt+0x17c/0x1b0
[  434.948802][T18311]  __x64_sys_setsockopt+0x13f/0x1b0
[  434.948817][T18311]  do_syscall_64+0xfa/0x3b0
[  434.948828][T18311]  ? lockdep_hardirqs_on+0x9c/0x150
[  434.948839][T18311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.948848][T18311]  ? clear_bhb_loop+0x60/0xb0
[  434.948861][T18311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.948871][T18311] RIP: 0033:0x7f28b778eec9
[  434.948882][T18311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  434.948892][T18311] RSP: 002b:00007f28b8570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  434.948903][T18311] RAX: ffffffffffffffda RBX: 00007f28b79e6090 RCX: 00007f28b778eec9
[  434.948911][T18311] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  434.948917][T18311] RBP: 00007f28b7811f91 R08: 0000000000000004 R09: 0000000000000000
[  434.948924][T18311] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.948930][T18311] R13: 00007f28b79e6128 R14: 00007f28b79e6090 R15: 00007ffc7752f0f8
[  434.948947][T18311]  </TASK>
[  434.948956][T18311] Mem-Info:
[  435.250095][T18311] active_anon:5338 inactive_anon:0 isolated_anon:0
[  435.250095][T18311]  active_file:3417 inactive_file:40028 isolated_file:0
[  435.250095][T18311]  unevictable:768 dirty:201 writeback:0
[  435.250095][T18311]  slab_reclaimable:13023 slab_unreclaimable:259695
[  435.250095][T18311]  mapped:30161 shmem:1364 pagetables:1186
[  435.250095][T18311]  sec_pagetables:0 bounce:0
[  435.250095][T18311]  kernel_misc_reclaimable:0
[  435.250095][T18311]  free:1152732 free_pcp:21416 free_cma:0
[  435.299339][T18311] Node 0 active_anon:21352kB inactive_anon:0kB active_file:13668kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120644kB dirty:800kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13248kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  435.331597][T18311] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  435.362110][T18311] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  435.391646][T18311] lowmem_reserve[]: 0 2499 2501 2501 2501
[  435.400286][T18311] Node 0 DMA32 free:712004kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21308kB inactive_anon:0kB active_file:13668kB inactive_file:158096kB unevictable:1536kB writepending:796kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:71632kB local_pcp:30576kB free_cma:0kB
[  435.434754][T18311] lowmem_reserve[]: 0 0 1 1 1
[  435.439501][T18311] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  435.470781][T18311] lowmem_reserve[]: 0 0 0 0 0
[  435.475892][T18311] Node 1 Normal free:3887632kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14176kB local_pcp:9408kB free_cma:0kB
[  435.507496][T18311] lowmem_reserve[]: 0 0 0 0 0
[  435.512244][T18311] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB
[  435.529060][T18311] Node 0 DMA32: 754*4kB (UME) 22*8kB (UME) 18*16kB (UME) 74*32kB (UME) 28*64kB (UME) 369*128kB (UM) 497*256kB (UME) 355*512kB (U) 184*1024kB (UM) 12*2048kB (UME) 33*4096kB (UM) = 712024kB
[  435.549383][T18311] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  435.562273][T18311] Node 1 Normal: 214*4kB (UME) 45*8kB (UME) 39*16kB (UME) 193*32kB (UME) 57*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3887632kB
[  435.580756][T18311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  435.590634][T18311] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  435.599948][T18311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  435.611943][T18311] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  435.622075][T18311] 44806 total pagecache pages
[  435.626790][T18311] 0 pages in swap cache
[  435.630921][T18311] Free swap  = 124996kB
[  435.635137][T18311] Total swap = 124996kB
[  435.639284][T18311] 2097051 pages RAM
[  435.643411][T18311] 0 pages HighMem/MovableOnly
[  435.648125][T18311] 424998 pages reserved
[  435.652269][T18311] 0 pages cma reserved
[  436.003527][ T5877] Bluetooth: hci5: command tx timeout
[  438.082988][ T5877] Bluetooth: hci5: command tx timeout
[  439.927873][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  501.365887][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  523.923001][ T5877] Bluetooth: hci1: command 0x0406 tx timeout
[  534.162985][ T5881] Bluetooth: hci2: command 0x0406 tx timeout
[  554.645629][T18316] Bluetooth: hci5: command 0x0406 tx timeout
[  554.651891][T18316] Bluetooth: hci0: command 0x0406 tx timeout
[  562.816367][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  574.616075][T18324] wg1 speed is unknown, defaulting to 1000
[  574.666731][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3128'.
[  574.730521][T18329] tipc: Started in network mode
[  574.745252][T18329] tipc: Node identity 4, cluster identity 4711
[  574.779919][T18329] tipc: Node number set to 4
[  574.785957][T18332] ieee802154 phy0 wpan0: encryption failed: -22
[  574.868782][T18331] tipc: Resetting bearer <eth:syzkaller0>
[  574.900106][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  574.930066][T18331] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  574.945403][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'.
[  575.314383][T18345] !
: renamed from dummy0 (while UP)
[  575.460359][T18347] wg1 speed is unknown, defaulting to 1000
[  575.706381][T18354] netlink: 'syz.2.3136': attribute type 1 has an invalid length.
[  575.752993][T18354] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3136'.
[  575.939996][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'.
[  576.319780][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'.
[  576.469927][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3143'.
[  576.497720][T18383] bond0: entered promiscuous mode
[  576.525201][T18383] bond_slave_0: entered promiscuous mode
[  576.550081][T18383] bond_slave_1: entered promiscuous mode
[  576.611812][T18383] bond0: left promiscuous mode
[  576.658812][T18383] bond_slave_0: left promiscuous mode
[  576.674661][T18400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3148'.
[  576.693761][T18383] bond_slave_1: left promiscuous mode
[  576.701978][T18401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3148'.
[  576.732229][T18389] tipc: Failed to obtain node identity
[  576.739205][T18389] tipc: Enabling of bearer <ib:macvtap0> rejected, failed to enable media
[  576.748586][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'.
[  577.006128][T18406] 8021q: adding VLAN 0 to HW filter on device bond1
[  577.025739][T18406] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3149'.
[  577.602501][T18440] wg1 speed is unknown, defaulting to 1000
[  577.884411][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  577.902674][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  577.926062][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  577.941897][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  577.956494][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  578.007048][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.032973][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  578.091009][T18461] batadv_slave_1: entered promiscuous mode
[  578.100074][T18461] batman_adv: batadv0: Adding interface: macsec1
[  578.123104][T18461] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.160635][T18461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.222941][T18461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.245502][T18461] batman_adv: batadv0: Interface activated: macsec1
[  578.295526][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.312922][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  578.362787][T18456] wg1 speed is unknown, defaulting to 1000
[  578.447744][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.466659][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  578.574407][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.589630][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  579.259565][T18499] 8021q: adding VLAN 0 to HW filter on device bond1
[  579.314066][T18499] bridge0: port 3(bond1) entered blocking state
[  579.320450][T18499] bridge0: port 3(bond1) entered disabled state
[  579.347510][T18508] netlink: 'syz.4.3174': attribute type 11 has an invalid length.
[  579.355936][T18499] bond1: entered allmulticast mode
[  579.365526][T18499] bond1: entered promiscuous mode
[  579.372595][T18499] bridge0: port 3(bond1) entered blocking state
[  579.378991][T18499] bridge0: port 3(bond1) entered forwarding state
[  579.402620][   T13] bridge0: port 3(bond1) entered disabled state
[  579.410686][T18456] chnl_net:caif_netlink_parms(): no params data found
[  579.436958][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  580.003357][ T5877] Bluetooth: hci3: command tx timeout
[  580.186316][   T12] bond1 (unregistering): (slave geneve2): Releasing active interface
[  580.289471][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  580.481562][   T12] bond1 (unregistering): Released all slaves
[  580.597215][   T12] bond2 (unregistering): Released all slaves
[  580.718414][   T12] bond3 (unregistering): Released all slaves
[  580.843132][   T12] bond4 (unregistering): Released all slaves
[  580.861343][   T12] bond5 (unregistering): Released all slaves
[  580.876941][   T12] bond6 (unregistering): Released all slaves
[  580.890900][   T12] bond7 (unregistering): Released all slaves
[  580.987015][   T12] bond8 (unregistering): Released all slaves
[  581.246621][   T12] tipc: Disabling bearer <udp:syz0>
[  581.283613][   T12] tipc: Left network mode
[  581.309507][T18559] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  581.421592][T18456] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.447318][T18456] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.480202][T18456] bridge_slave_0: entered allmulticast mode
[  581.489876][T18456] bridge_slave_0: entered promiscuous mode
[  581.516361][T18456] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.524497][T18456] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.531685][T18456] bridge_slave_1: entered allmulticast mode
[  581.533644][T18574] __nla_validate_parse: 14 callbacks suppressed
[  581.533660][T18574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3188'.
[  581.541670][T18456] bridge_slave_1: entered promiscuous mode
[  581.555112][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3188'.
[  581.616921][T18456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.647930][T18456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.686654][T18580] IPv6: sit1: Disabled Multicast RS
[  581.758076][T18456] team0: Port device team_slave_0 added
[  581.767755][T18456] team0: Port device team_slave_1 added
[  581.814277][T18456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.821305][T18456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.849158][T18456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.865678][T18456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.873458][T18456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.899638][T18456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.931408][   T12] hsr_slave_0: left promiscuous mode
[  581.939350][   T12] hsr_slave_1: left promiscuous mode
[  581.959918][   T12] veth1_macvtap: left promiscuous mode
[  581.966118][   T12] veth0_macvtap: left promiscuous mode
[  581.971661][   T12] veth1_vlan: left promiscuous mode
[  581.977327][   T12] veth0_vlan: left promiscuous mode
[  582.083048][ T5877] Bluetooth: hci3: command tx timeout
[  582.615714][   T12] team0 (unregistering): Port device team_slave_1 removed
[  582.657555][   T12] team0 (unregistering): Port device team_slave_0 removed
[  583.039748][T18456] hsr_slave_0: entered promiscuous mode
[  583.049580][T18456] hsr_slave_1: entered promiscuous mode
[  583.058202][T18456] debugfs: 'hsr0' already exists in 'hsr'
[  583.065108][T18456] Cannot create hsr debugfs directory
[  583.070713][T18612] !
: renamed from dummy0 (while UP)
[  583.131494][T18621] bridge0: port 3(netdevsim2) entered blocking state
[  583.138884][T18621] bridge0: port 3(netdevsim2) entered disabled state
[  583.146298][T18621] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  583.157502][T18621] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  583.168597][T18621] bridge0: port 3(netdevsim2) entered blocking state
[  583.175414][T18621] bridge0: port 3(netdevsim2) entered forwarding state
[  583.249462][T18626] netlink: 'syz.3.3203': attribute type 1 has an invalid length.
[  583.261121][T18610] syzkaller0: entered promiscuous mode
[  583.266337][T18626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3203'.
[  583.268114][T18610] syzkaller0: entered allmulticast mode
[  583.286690][T18626] netlink: 'syz.3.3203': attribute type 2 has an invalid length.
[  583.320924][T18626] netlink: 'syz.3.3203': attribute type 1 has an invalid length.
[  583.344981][T18626] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3203'.
[  583.380684][T18612] wg1 speed is unknown, defaulting to 1000
[  583.519087][T18624] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.527474][T18624] bridge0: port 4(bond2) entered blocking state
[  583.534545][T18624] bridge0: port 4(bond2) entered disabled state
[  583.540961][T18624] bond2: entered allmulticast mode
[  583.548124][T18624] bond2: entered promiscuous mode
[  583.553774][T18624] bridge0: port 4(bond2) entered blocking state
[  583.560085][T18624] bridge0: port 4(bond2) entered forwarding state
[  583.567145][T18625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  583.784478][   T43] IPVS: starting estimator thread 0...
[  583.857028][T18609] tipc: Resetting bearer <eth:syzkaller0>
[  583.875271][T18639] IPVS: using max 28 ests per chain, 67200 per kthread
[  584.163626][ T5877] Bluetooth: hci3: command tx timeout
[  585.241940][T18609] tipc: Disabling bearer <eth:syzkaller0>
[  585.263438][ T7802] bridge0: port 4(bond2) entered disabled state
[  585.539834][T18456] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  585.595719][T18456] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  585.607112][T18684] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.3214'.
[  585.629110][T18674] netlink: 'syz.3.3213': attribute type 1 has an invalid length.
[  585.639780][T18456] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  585.667821][T18456] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  585.768255][T18691] sctp: [Deprecated]: syz.2.3217 (pid 18691) Use of int in maxseg socket option.
[  585.768255][T18691] Use struct sctp_assoc_value instead
[  585.878942][   T12] IPVS: stop unused estimator thread 0...
[  585.896718][T18703] tipc: Started in network mode
[  585.901605][T18703] tipc: Node identity 5af10a824e71, cluster identity 4711
[  585.927080][T18703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  585.942184][T18703] syzkaller0: entered promiscuous mode
[  585.954929][T18703] syzkaller0: entered allmulticast mode
[  586.049861][T18703] tipc: Resetting bearer <eth:syzkaller0>
[  586.091052][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'.
[  586.144796][T18703] veth1_macvtap: left promiscuous mode
[  586.253101][ T5877] Bluetooth: hci3: command tx timeout
[  586.357228][T18700] tipc: Resetting bearer <eth:syzkaller0>
[  586.451701][T18700] tipc: Disabling bearer <eth:syzkaller0>
[  586.504435][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3227'.
[  586.515282][T18456] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.568234][T18456] 8021q: adding VLAN 0 to HW filter on device team0
[  586.646632][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.653831][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.771533][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.778757][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.788878][T18736] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3229'.
[  586.823587][T18736] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3229'.
[  586.876688][T18736] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  586.898742][T18736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.920591][T18742] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3231'.
[  586.920639][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3230'.
[  587.025480][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3232'.
[  587.046705][T18746] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3232'.
[  587.145324][T18751] delete_channel: no stack
[  587.192183][T18748] veth0_to_bridge: entered promiscuous mode
[  587.222494][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'.
[  587.222831][T18456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  587.282411][T18756] netlink: 'syz.3.3236': attribute type 1 has an invalid length.
[  587.291789][T18747] veth0_to_bridge: left promiscuous mode
[  587.310006][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'.
[  587.341809][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'.
[  587.391253][T18756] 8021q: adding VLAN 0 to HW filter on device bond3
[  587.471183][T18761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3237'.
[  587.630634][T18761] team0: Port device team_slave_0 removed
[  587.906327][T18456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.037542][T18778] wg1 speed is unknown, defaulting to 1000
[  588.282765][T18456] veth0_vlan: entered promiscuous mode
[  588.312026][T18456] veth1_vlan: entered promiscuous mode
[  588.400728][T18456] veth0_macvtap: entered promiscuous mode
[  588.480209][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  588.520776][T18456] veth1_macvtap: entered promiscuous mode
[  588.566628][T18456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  588.580921][T18456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.718084][ T3554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.780163][ T3554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.810117][ T3554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.834035][ T3554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.423087][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.437614][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.603898][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.612710][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.916823][T18840] wg1 speed is unknown, defaulting to 1000
[  589.988795][T18838] wg1 speed is unknown, defaulting to 1000
[  591.080075][T18895] netlink: 'syz.2.3269': attribute type 5 has an invalid length.
[  591.798532][T18915] netlink: 'syz.3.3275': attribute type 4 has an invalid length.
[  591.807328][T18914] netlink: 'syz.3.3275': attribute type 4 has an invalid length.
[  592.254272][T18938] __nla_validate_parse: 78 callbacks suppressed
[  592.254322][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'.
[  592.296684][T18941] wg1 speed is unknown, defaulting to 1000
[  592.419370][T18940] wg1 speed is unknown, defaulting to 1000
[  593.496360][T18975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.588165][T18970] tipc: Resetting bearer <eth:syzkaller0>
[  593.672803][T18977] wg1 speed is unknown, defaulting to 1000
[  593.720726][T18970] tipc: Disabling bearer <eth:syzkaller0>
[  594.051742][T18986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3293'.
[  594.119590][T18987] wg1 speed is unknown, defaulting to 1000
[  594.142571][T18993] bond0: option arp_validate: invalid value (18446744073491447809)
[  594.150731][ T1157] bond0: (slave bond_slave_0): interface is now down
[  594.165463][ T1157] bond0: (slave bond_slave_1): interface is now down
[  594.193763][ T1157] bond0: (slave bond_slave_0): interface is now down
[  594.210697][ T1157] bond0: (slave bond_slave_1): interface is now down
[  594.245682][   T12] bond0: (slave bond_slave_0): interface is now down
[  594.255837][   T12] bond0: (slave bond_slave_1): interface is now down
[  594.268287][   T12] bond0: now running without any active interface!
[  594.611160][T19006] wg1 speed is unknown, defaulting to 1000
[  594.773069][T19012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3299'.
[  595.445345][T19042] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3307'.
[  595.459573][T19037] 8021q: adding VLAN 0 to HW filter on device bond2
[  595.576358][T19043] bridge_slave_0: left allmulticast mode
[  595.609393][T19043] bridge_slave_0: left promiscuous mode
[  595.623210][T19043] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.637007][T19043] bridge_slave_1: left allmulticast mode
[  595.642823][T19043] bridge_slave_1: left promiscuous mode
[  595.656443][T19043] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.674522][T19043] bond0: (slave bond_slave_0): Releasing backup interface
[  595.687814][T19043] bond0: (slave bond_slave_1): Releasing backup interface
[  595.707769][T19043] team0: Port device team_slave_0 removed
[  595.720264][T19043] team0: Port device team_slave_1 removed
[  595.728574][T19043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  595.736815][T19043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.738668][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'.
[  595.757138][T19043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  595.765132][T19043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  595.776418][T19043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  595.905387][T19050] wg1 speed is unknown, defaulting to 1000
[  595.909143][T19053] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3308'.
[  595.922743][T19053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3308'.
[  596.000919][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'.
[  596.655616][T19091] netlink: 'syz.4.3318': attribute type 13 has an invalid length.
[  596.720793][T19096] netlink: 'syz.0.3321': attribute type 1 has an invalid length.
[  596.765594][T19091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  596.855305][T19096] 8021q: adding VLAN 0 to HW filter on device bond2
[  596.872006][T19097] 8021q: adding VLAN 0 to HW filter on device batadv1
[  596.882754][T19097] bond2: (slave batadv1): making interface the new active one
[  596.891844][T19097] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  596.906404][T19101] 8021q: adding VLAN 0 to HW filter on device batadv2
[  596.916708][T19101] bond2: (slave batadv2): Enslaving as an active interface with an up link
[  596.918237][T19086] infiniband syz1: set active
[  596.931648][T19086] infiniband syz1: added bond0
[  597.000846][T19109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3323'.
[  597.017757][T19111] netlink: 'syz.0.3324': attribute type 4 has an invalid length.
[  597.027961][T19086] RDS/IB: syz1: added
[  597.295963][ T5939] IPVS: starting estimator thread 0...
[  597.393928][T19120] IPVS: using max 25 ests per chain, 60000 per kthread
[  597.428424][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'.
[  597.633858][T19130] wg1 speed is unknown, defaulting to 1000
[  597.699181][T19136] netlink: 23432 bytes leftover after parsing attributes in process `syz.0.3330'.
[  597.908383][T19142] netlink: 'syz.0.3332': attribute type 21 has an invalid length.
[  598.386804][T19161] syzkaller1: entered promiscuous mode
[  598.392308][T19161] syzkaller1: entered allmulticast mode
[  598.506473][T19161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3337'.
[  599.124115][T19162] wg1 speed is unknown, defaulting to 1000
[  599.899920][T19174] wg1 speed is unknown, defaulting to 1000
[  600.622490][T19192] wg1 speed is unknown, defaulting to 1000
[  600.799268][T19203] wg1 speed is unknown, defaulting to 1000
[  600.841937][T19204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3348'.
[  601.070163][T19207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3349'.
[  601.704708][T19228] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  601.896833][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'.
[  601.946241][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'.
[  602.350801][T19249] wg1 speed is unknown, defaulting to 1000
[  603.136501][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'.
[  603.920319][T19309] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  604.016429][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'.
[  604.091726][T19324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3379'.
[  604.105081][T19324] netlink: 'syz.0.3379': attribute type 1 has an invalid length.
[  604.112801][T19324] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3379'.
[  604.167791][T19328] netlink: 'syz.0.3380': attribute type 5 has an invalid length.
[  604.180065][T19328] netlink: 'syz.0.3380': attribute type 5 has an invalid length.
[  604.380774][T19340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3384'.
[  604.548729][T19347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3386'.
[  604.600485][T19347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3386'.
[  604.756759][T19357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3389'.
[  605.458242][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'.
[  605.470207][T19387] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3397'.
[  605.525975][T19387] netlink: 'syz.0.3397': attribute type 31 has an invalid length.
[  605.835790][T19399] syz_tun: entered allmulticast mode
[  605.922268][T19403] wg1 speed is unknown, defaulting to 1000
[  605.951524][T19399] erspan0: left allmulticast mode
[  605.973974][T19399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  606.266749][T19398] syz_tun: left allmulticast mode
[  606.607236][T19411] wg1 speed is unknown, defaulting to 1000
[  606.656253][T19414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  606.733249][T19413] wg1 speed is unknown, defaulting to 1000
[  606.870514][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  606.881070][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  606.909412][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  606.927160][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  606.935147][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  607.024654][T19417] wg1 speed is unknown, defaulting to 1000
[  607.357113][T19430] netlink: 'syz.4.3409': attribute type 2 has an invalid length.
[  607.376310][T19430] netlink: 'syz.4.3409': attribute type 5 has an invalid length.
[  607.764048][T19443] netlink: 'syz.4.3413': attribute type 7 has an invalid length.
[  607.772122][T19443] netlink: 'syz.4.3413': attribute type 8 has an invalid length.
[  607.915162][T19448] netlink: 'syz.4.3415': attribute type 4 has an invalid length.
[  608.291409][T19457] netlink: 'syz.4.3418': attribute type 1 has an invalid length.
[  608.316663][T19457] 8021q: adding VLAN 0 to HW filter on device bond1
[  608.373661][T19457] bond1: (slave geneve2): making interface the new active one
[  608.385384][T19457] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  608.431393][T19417] chnl_net:caif_netlink_parms(): no params data found
[  608.602678][T19417] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.615084][T19417] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.622268][T19417] bridge_slave_0: entered allmulticast mode
[  608.630825][T19417] bridge_slave_0: entered promiscuous mode
[  608.654538][T19417] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.664224][T19417] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.671389][T19417] bridge_slave_1: entered allmulticast mode
[  608.679052][T19417] bridge_slave_1: entered promiscuous mode
[  608.685932][T19466] wg1 speed is unknown, defaulting to 1000
[  608.703006][T19475] veth0: entered promiscuous mode
[  608.757315][T19417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.772708][T19417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.850426][T19474] veth0: left promiscuous mode
[  608.862839][T19417] team0: Port device team_slave_0 added
[  608.886227][T19417] team0: Port device team_slave_1 added
[  608.960030][T19417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.968158][ T5877] Bluetooth: hci4: command tx timeout
[  608.983151][T19417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.029245][T19417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.056376][T19417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.063856][T19417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.090916][T19417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.189638][T19417] hsr_slave_0: entered promiscuous mode
[  609.200621][T19417] hsr_slave_1: entered promiscuous mode
[  609.207593][T19417] debugfs: 'hsr0' already exists in 'hsr'
[  609.214003][T19417] Cannot create hsr debugfs directory
[  609.379945][T19491] __nla_validate_parse: 8 callbacks suppressed
[  609.379962][T19491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3427'.
[  609.410035][T19493] vlan0: entered promiscuous mode
[  609.755973][T19514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3433'.
[  609.774528][T19514] xt_limit: Overflow, try lower: 271964/0
[  610.016812][T19417] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  610.071766][T19417] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  610.104456][T19417] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  610.180782][T19417] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  610.455070][T19417] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.497352][T19547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.579666][T19550] syzkaller0: entered promiscuous mode
[  610.589683][T19550] syzkaller0: entered allmulticast mode
[  610.611990][T19417] 8021q: adding VLAN 0 to HW filter on device team0
[  610.639115][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.646305][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.657486][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  610.685025][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  610.693306][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  610.703636][T19546] tipc: Resetting bearer <eth:syzkaller0>
[  610.711559][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  610.720522][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  610.752296][T19546] tipc: Disabling bearer <eth:syzkaller0>
[  610.779306][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.786503][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.889430][T19551] wg1 speed is unknown, defaulting to 1000
[  611.047361][ T5877] Bluetooth: hci4: command tx timeout
[  611.321450][T19417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.600298][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'.
[  611.733462][T19551] chnl_net:caif_netlink_parms(): no params data found
[  612.147221][T19551] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.155236][T19551] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.162442][T19551] bridge_slave_0: entered allmulticast mode
[  612.185612][T19551] bridge_slave_0: entered promiscuous mode
[  612.238596][T19551] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.246856][T19551] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.257187][T19551] bridge_slave_1: entered allmulticast mode
[  612.265299][T19551] bridge_slave_1: entered promiscuous mode
[  612.303596][T19611] netlink: 'syz.2.3453': attribute type 29 has an invalid length.
[  612.327471][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3453'.
[  612.337429][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3453'.
[  612.375907][T19551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  612.387203][T19611] netlink: 'syz.2.3453': attribute type 29 has an invalid length.
[  612.411853][T19551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  612.422204][T19611] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3453'.
[  612.525050][T19551] team0: Port device team_slave_0 added
[  612.535840][T19417] veth0_vlan: entered promiscuous mode
[  612.557226][T19551] team0: Port device team_slave_1 added
[  612.579348][T19417] veth1_vlan: entered promiscuous mode
[  612.655099][T19551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  612.662182][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  612.694962][T19551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  612.708657][T19625] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥±
[  612.731486][T19551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  612.742709][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  612.772177][T19551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.804307][ T5877] Bluetooth: hci6: command tx timeout
[  613.011442][T19551] hsr_slave_0: entered promiscuous mode
[  613.045957][T19551] hsr_slave_1: entered promiscuous mode
[  613.052387][T19551] debugfs: 'hsr0' already exists in 'hsr'
[  613.073964][T19551] Cannot create hsr debugfs directory
[  613.123984][ T5877] Bluetooth: hci4: command tx timeout
[  613.145419][T19640] wg1 speed is unknown, defaulting to 1000
[  613.245899][T19417] veth0_macvtap: entered promiscuous mode
[  613.634405][T19417] veth1_macvtap: entered promiscuous mode
[  613.766344][T19417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.973406][T19417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.043665][ T7802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.117592][ T7802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.148780][ T7802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.303183][ T7802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.583273][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.612339][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.622730][T19551] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  614.647776][T19551] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  614.657975][T19681] netlink: 'syz.2.3472': attribute type 1 has an invalid length.
[  614.725550][T19551] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  614.745286][T19551] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  614.788680][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.840403][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.884056][ T5877] Bluetooth: hci6: command tx timeout
[  614.939718][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3474'.
[  614.989044][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3475'.
[  615.010342][T19551] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.141224][T19551] 8021q: adding VLAN 0 to HW filter on device team0
[  615.175895][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.183138][ T7804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  615.206200][ T5877] Bluetooth: hci4: command tx timeout
[  615.225582][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.232730][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.298836][T19705] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  615.810737][T19551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.944297][T19714] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3477'.
[  616.018130][T19720] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  616.296342][T19725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3479'.
[  616.349624][T19551] veth0_vlan: entered promiscuous mode
[  616.379870][T19740] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  616.402454][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3481'.
[  616.437136][T19551] veth1_vlan: entered promiscuous mode
[  616.448319][T19740] bridge0: port 1(veth0_to_bridge) entered blocking state
[  616.456762][T19740] bridge0: port 1(veth0_to_bridge) entered disabled state
[  616.465519][T19740] veth0_to_bridge: entered allmulticast mode
[  616.486848][T19740] veth0_to_bridge: entered promiscuous mode
[  616.498826][T19740] bridge0: port 1(veth0_to_bridge) entered blocking state
[  616.506066][T19740] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  616.588158][T19551] veth0_macvtap: entered promiscuous mode
[  616.632600][T19551] veth1_macvtap: entered promiscuous mode
[  616.707119][T19551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.760331][T19551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.787371][ T3554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.832343][ T3554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.873087][ T3554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.898575][ T3554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.926924][T19766] netlink: 'syz.0.3490': attribute type 13 has an invalid length.
[  616.946743][T19767] Bluetooth: MGMT ver 1.23
[  616.963959][ T5877] Bluetooth: hci6: command tx timeout
[  616.974048][T19763] netlink: 'syz.4.3489': attribute type 9 has an invalid length.
[  617.040206][T19766] wg1 speed is unknown, defaulting to 1000
[  617.222567][ T7804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.257477][ T7804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.330353][ T7802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.339335][ T7802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.412603][T19782] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3495'.
[  617.508190][T19791] wg1 speed is unknown, defaulting to 1000
[  617.578250][T19794] netlink: 'syz.6.3435': attribute type 1 has an invalid length.
[  617.744947][T19805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3499'.
[  617.801286][T19805] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3499'.
[  617.962349][T19813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3501'.
[  618.062747][T19816] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3502'.
[  618.089679][T19816] netlink: 'syz.6.3502': attribute type 6 has an invalid length.
[  618.482183][T19825] netlink: 'syz.6.3505': attribute type 4 has an invalid length.
[  618.529116][T19825] netlink: 'syz.6.3505': attribute type 4 has an invalid length.
[  618.688477][T19833] netlink: 'syz.6.3508': attribute type 4 has an invalid length.
[  619.043484][ T5877] Bluetooth: hci6: command tx timeout
[  619.262079][T19861] block nbd0: reconnected socket
[  619.276868][T19861] nbd: socks must be embedded in a SOCK_ITEM attr
[  619.400830][T19868] sctp: [Deprecated]: syz.6.3515 (pid 19868) Use of int in max_burst socket option deprecated.
[  619.400830][T19868] Use struct sctp_assoc_value instead
[  619.723660][T19881] netlink: 'syz.4.3521': attribute type 2 has an invalid length.
[  619.732354][T19881] netlink: 'syz.4.3521': attribute type 2 has an invalid length.
[  620.107956][ T5877] block nbd0: Receive control failed (result -32)
[  620.308967][T19901] __nla_validate_parse: 10 callbacks suppressed
[  620.308986][T19901] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3525'.
[  620.349045][T19901] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3525'.
[  620.358443][T19901] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3525'.
[  620.831255][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054778000: rx timeout, send abort
[  620.841532][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054778000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  621.019638][T19928] tipc: New replicast peer: 255.255.255.255
[  621.026445][T19928] tipc: Enabled bearer <udp:s>, priority 10
[  621.259419][T19932] wg1 speed is unknown, defaulting to 1000
[  621.794904][T19946] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  621.910565][T19951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3537'.
[  621.926270][T19955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'.
[  621.966891][T19955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3535'.
[  621.999907][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'.
[  622.023950][ T5969] tipc: Node number set to 343935618
[  622.074248][T19947] wg1 speed is unknown, defaulting to 1000
[  622.289136][T19979] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3542'.
[  622.329802][T19979] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3542'.
[  622.366970][T19984] ieee802154 phy0 wpan0: encryption failed: -22
[  622.383957][T19984] ieee802154 phy0 wpan0: encryption failed: -22
[  622.720517][T19988] wg1 speed is unknown, defaulting to 1000
[  622.779136][T19998] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  622.824169][T19998] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  622.853264][T19998] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  622.900168][T20003] netlink: 'syz.2.3548': attribute type 1 has an invalid length.
[  623.131847][T20009] bond3: (slave gretap2): making interface the new active one
[  623.142053][T20009] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  623.328479][T20023] netlink: 'syz.2.3553': attribute type 1 has an invalid length.
[  623.338234][T20023] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3553'.
[  623.444260][T20011] wg1 speed is unknown, defaulting to 1000
[  623.506583][T20027] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  624.249288][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  624.404644][T20045] wg1 speed is unknown, defaulting to 1000
[  625.077426][   T30] audit: type=1800 audit(1759083297.406:13): pid=20062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3562" name="memory.events" dev="tmpfs" ino=786 res=0 errno=0
[  625.320675][T20076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  625.336826][T20076] __nla_validate_parse: 4 callbacks suppressed
[  625.336843][T20076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3567'.
[  625.365047][T20074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3566'.
[  625.378876][T20076] netlink: 'syz.5.3567': attribute type 10 has an invalid length.
[  625.390049][T20076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3567'.
[  625.762774][T20083] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma?
[  626.278000][T20091] bridge0: port 3(netdevsim2) entered disabled state
[  626.284869][T20091] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.292315][T20091] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.630371][T20091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.683779][T20091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  627.241871][ T7802] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.266977][ T7802] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.310433][ T7802] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.330623][ T7802] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.599121][T20137] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3579'.
[  627.646875][T20144] wg1 speed is unknown, defaulting to 1000
[  627.742390][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'.
[  627.777607][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'.
[  627.799801][T20156] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3584'.
[  627.817317][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3584'.
[  627.834971][T20151] tipc: Enabled bearer <udp:syz2>, priority 10
[  627.857647][T20157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3585'.
[  627.876561][T20159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3585'.
[  628.807898][T20212] 8021q: VLANs not supported on ipvlan1
[  628.822183][T20212] macsec0: entered promiscuous mode
[  628.828085][T20212] macsec0: entered allmulticast mode
[  629.350471][T20216] wg1 speed is unknown, defaulting to 1000
[  629.384804][T20229] veth0_to_bridge: left allmulticast mode
[  629.399837][T20229] veth0_to_bridge: left promiscuous mode
[  629.417178][T20229] bridge0: port 1(veth0_to_bridge) entered disabled state
[  629.430390][T20229] bond1: left allmulticast mode
[  629.439849][T20229] bond1: left promiscuous mode
[  629.447622][T20229] bridge0: port 3(bond1) entered disabled state
[  629.918247][T20255] bridge_slave_0: left allmulticast mode
[  629.948499][T20255] bridge_slave_0: left promiscuous mode
[  629.972948][T20255] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.996066][T20262] openvswitch: netlink: Message has -2 unknown bytes.
[  630.038270][T20255] bridge_slave_1: left allmulticast mode
[  630.064343][T20255] bridge_slave_1: left promiscuous mode
[  630.080482][T20255] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.126685][T20255] bond0: (slave bond_slave_0): Releasing backup interface
[  630.143773][T20255] bond0: (slave bond_slave_1): Releasing backup interface
[  630.171611][T20255] team0: Port device team_slave_0 removed
[  630.219240][T20255] team0: Port device team_slave_1 removed
[  630.230417][T20255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  630.241649][T20255] batman_adv: batadv0: Removing interface: batadv_slave_0
[  630.272737][T20255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  630.299201][T20255] batman_adv: batadv0: Removing interface: batadv_slave_1
[  630.318379][T20255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  630.344678][T20268] tipc: Started in network mode
[  630.349720][T20268] tipc: Node identity 4ef4e0ea8685, cluster identity 4711
[  630.373917][T20268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.476762][T20273] syzkaller0: entered promiscuous mode
[  630.482264][T20273] syzkaller0: entered allmulticast mode
[  630.496705][T20261] tipc: Resetting bearer <eth:syzkaller0>
[  630.509529][T20254] tipc: Resetting bearer <eth:syzkaller0>
[  630.529617][T20254] tipc: Disabling bearer <eth:syzkaller0>
[  630.947642][T20306] __nla_validate_parse: 9 callbacks suppressed
[  630.947660][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'.
[  631.041272][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3623'.
[  631.069831][T20312] netlink: 'syz.5.3625': attribute type 1 has an invalid length.
[  631.240724][T20325] netlink: 'syz.5.3627': attribute type 1 has an invalid length.
[  631.248674][T20325] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.3627'.
[  631.260363][T20325] sctp: [Deprecated]: syz.5.3627 (pid 20325) Use of struct sctp_assoc_value in delayed_ack socket option.
[  631.260363][T20325] Use struct sctp_sack_info instead
[  631.332521][T20327] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3628'.
[  631.358227][T20325] netlink: 5620 bytes leftover after parsing attributes in process `syz.5.3627'.
[  631.428273][T20325] netlink: 'syz.5.3627': attribute type 13 has an invalid length.
[  631.564944][T20352] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3631'.
[  631.605136][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3632'.
[  631.680951][T20357] wg1 speed is unknown, defaulting to 1000
[  631.718970][T20359] netlink: 'syz.0.3633': attribute type 39 has an invalid length.
[  632.551027][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3636'.
[  632.599830][T20377] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  632.632266][T20380] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3638'.
[  632.698529][T20384] dvmrp1: tun_chr_ioctl cmd 1074025677
[  632.707798][T20384] dvmrp1: linktype set to 768
[  633.082640][T20413] veth1_to_bond: entered allmulticast mode
[  633.092126][T20413] veth1_to_bond: entered promiscuous mode
[  633.140303][T20413] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode
[  633.156859][T20413] macsec1: entered promiscuous mode
[  633.172201][T20413] macsec1: entered allmulticast mode
[  633.189410][T20413] mac80211_hwsim hwsim71 wlan0: entered allmulticast mode
[  633.226652][T20416] dvmrp0: entered allmulticast mode
[  633.260297][T20413] veth1_to_bond: left promiscuous mode
[  633.276954][T20413] veth1_to_bond: left allmulticast mode
[  633.461108][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3651'.
[  633.480345][T20442] bridge4: entered allmulticast mode
[  633.509758][T20442] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  633.785646][T20452] netlink: 'syz.0.3656': attribute type 10 has an invalid length.
[  633.897532][T20480] netlink: 'syz.6.3660': attribute type 1 has an invalid length.
[  634.781473][T20523] netlink: 'syz.0.3673': attribute type 7 has an invalid length.
[  634.812978][T20523] netlink: 'syz.0.3673': attribute type 8 has an invalid length.
[  634.866109][T20503] bond0 (unregistering): Released all slaves
[  634.970428][T20525] bond0: entered promiscuous mode
[  634.990458][T20525] bond_slave_0: entered promiscuous mode
[  635.017251][T20525] bond_slave_1: entered promiscuous mode
[  635.184608][T20527] delete_channel: no stack
[  635.368353][ T5938] IPVS: starting estimator thread 0...
[  635.449830][T20535] 8021q: VLANs not supported on caif0
[  635.472978][T20534] IPVS: using max 28 ests per chain, 67200 per kthread
[  636.163615][T20557] __nla_validate_parse: 9 callbacks suppressed
[  636.163633][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3683'.
[  636.232625][T20557] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3683'.
[  636.234176][T20561] netlink: 'syz.5.3683': attribute type 1 has an invalid length.
[  636.289071][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3683'.
[  636.307120][T20557] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3683'.
[  636.316919][T20557] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3683'.
[  636.445051][T20561] 8021q: adding VLAN 0 to HW filter on device bond1
[  636.459909][T20569] syz_tun: entered allmulticast mode
[  636.469780][T20564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3686'.
[  636.548240][T20571] dvmrp8: entered allmulticast mode
[  636.573153][T20571] syz_tun: left allmulticast mode
[  636.578707][T20571] dvmrp8: left allmulticast mode
[  636.610188][T20569] netlink: 'syz.6.3685': attribute type 23 has an invalid length.
[  636.644132][ T5881] Bluetooth: hci6: command 0x0405 tx timeout
[  636.769479][T20565] wg1 speed is unknown, defaulting to 1000
[  636.780932][T20580] wg1 speed is unknown, defaulting to 1000
[  636.790184][T20574] wg1 speed is unknown, defaulting to 1000
[  636.817310][T20582] ¬»: renamed from ip6_vti0
[  637.451404][T20593] Êtï)¤: renamed from veth1_virt_wifi (while UP)
[  637.664356][T20597] netlink: 'syz.5.3694': attribute type 1 has an invalid length.
[  637.985067][T20603] netlink: 'syz.5.3695': attribute type 3 has an invalid length.
[  638.174499][T20612] ieee802154 phy0 wpan0: encryption failed: -22
[  638.202802][T20612] bridge: RTM_NEWNEIGH with invalid ether address
[  638.226356][T20612] syzkaller1: entered promiscuous mode
[  638.244646][T20616] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3700'.
[  638.263022][T20612] syzkaller1: entered allmulticast mode
[  638.377958][T20616] 8021q: VLANs not supported on ipvlan1
[  638.476636][T20619] macsec1: entered promiscuous mode
[  638.502653][T20619] macsec1: entered allmulticast mode
[  638.684677][T20106] hid-generic 0005:15C2:5505.0002: unknown main item tag 0x0
[  638.692229][T20106] hid-generic 0005:15C2:5505.0002: unknown main item tag 0x0
[  638.702312][T20106] hid-generic 0005:15C2:5505.0002: reserved main item tag 0xe
[  638.730180][T20106] hid-generic 0005:15C2:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  638.787008][T20633] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3704'.
[  639.166578][T20637] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3705'.
[  640.351420][T20681] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3713'.
[  640.691868][T20699] netlink: 'syz.5.3719': attribute type 13 has an invalid length.
[  640.700060][T20699] netlink: 'syz.5.3719': attribute type 17 has an invalid length.
[  640.937465][T20699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  641.079113][T20704] wg1 speed is unknown, defaulting to 1000
[  642.095969][T20738] __nla_validate_parse: 5 callbacks suppressed
[  642.095987][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3725'.
[  642.164726][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3725'.
[  642.192900][T20738] netlink: 'syz.0.3725': attribute type 4 has an invalid length.
[  642.568909][T20751] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3732'.
[  642.666523][T20759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'.
[  643.341391][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'.
[  643.382291][T20771] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3735'.
[  643.393463][T20771] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3735'.
[  643.403863][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3737'.
[  643.422553][T20771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3735'.
[  643.467729][T20767] wg1 speed is unknown, defaulting to 1000
[  643.489958][T20773] syzkaller0: entered promiscuous mode
[  643.509969][T20773] syzkaller0: entered allmulticast mode
[  643.667140][T20774] wg1 speed is unknown, defaulting to 1000
[  643.683584][T20790] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3740'.
[  643.944400][T20804] netlink: 'syz.5.3742': attribute type 4 has an invalid length.
[  644.180240][T20824] sctp: [Deprecated]: syz.4.3749 (pid 20824) Use of int in max_burst socket option.
[  644.180240][T20824] Use struct sctp_assoc_value instead
[  644.813976][T20861] wg1 speed is unknown, defaulting to 1000
[  645.338499][T20888] wg1 speed is unknown, defaulting to 1000
[  645.451563][T20898] netlink: 'syz.4.3770': attribute type 9 has an invalid length.
[  645.471491][T20885] wg1 speed is unknown, defaulting to 1000
[  645.576562][T20907] openvswitch: netlink: Missing valid actions attribute.
[  645.596354][T20907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.164319][ T5877] Bluetooth: hci0: command 0x0406 tx timeout
[  646.216937][T20922] tc_dump_action: action bad kind
[  647.266579][T20940] dummy0: entered promiscuous mode
[  647.288567][T20940] vlan2: entered promiscuous mode
[  647.297375][T20947] netlink: 'syz.4.3783': attribute type 1 has an invalid length.
[  647.466680][T20952] netlink: 'syz.0.3784': attribute type 4 has an invalid length.
[  647.623984][T20960] sctp: [Deprecated]: syz.4.3786 (pid 20960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  647.623984][T20960] Use struct sctp_sack_info instead
[  647.642024][T20965] netlink: 'syz.2.3789': attribute type 11 has an invalid length.
[  647.655242][T20965] __nla_validate_parse: 10 callbacks suppressed
[  647.655258][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3789'.
[  647.801276][T20971] wg1 speed is unknown, defaulting to 1000
[  647.818088][T20977] netlink: 'syz.5.3791': attribute type 1 has an invalid length.
[  647.949329][T20993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3796'.
[  648.018759][T20989] gretap1: entered allmulticast mode
[  648.034507][T20989] bond2: (slave gretap1): making interface the new active one
[  648.044869][T20989] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  648.284365][T21009] ip6gre1: entered allmulticast mode
[  648.289177][T21005] netlink: 'syz.2.3800': attribute type 4 has an invalid length.
[  648.533437][T21023] syzkaller1: entered promiscuous mode
[  648.543701][T21023] syzkaller1: entered allmulticast mode
[  648.701338][T21037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3802'.
[  648.762794][T21036] wg1 speed is unknown, defaulting to 1000
[  649.832626][T21073] wg1 speed is unknown, defaulting to 1000
[  650.110259][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3821'.
[  650.142843][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3821'.
[  650.256503][T21088] wg1 speed is unknown, defaulting to 1000
[  651.063340][T21117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3829'.
[  651.093120][T21117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3829'.
[  651.102094][T21117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3829'.
[  651.143220][T21117] netlink: 532 bytes leftover after parsing attributes in process `syz.5.3829'.
[  651.638022][T21130] veth0_to_team: entered promiscuous mode
[  651.653406][T21130] veth0_to_team: entered allmulticast mode
[  652.876609][T21158] wg1 speed is unknown, defaulting to 1000
[  652.973504][ T5881] Bluetooth: hci6: command 0x0405 tx timeout
[  653.426545][T21173] netlink: 'syz.0.3843': attribute type 4 has an invalid length.
[  653.453911][T21173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3843'.
[  653.489836][T21173] .`: renamed from bond0
[  653.826886][T21191] netlink: 'syz.2.3846': attribute type 1 has an invalid length.
[  653.858047][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3846'.
[  654.188183][T21194] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3847'.
[  654.462472][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'.
[  654.763817][T21203] syzkaller0: entered promiscuous mode
[  654.769343][T21203] syzkaller0: entered allmulticast mode
[  654.925860][T21215] ieee802154 phy0 wpan0: encryption failed: -22
[  655.018332][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3856'.
[  655.127439][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3857'.
[  655.180998][T21229] Bluetooth: MGMT ver 1.23
[  655.431343][T21237] netlink: 'syz.5.3861': attribute type 1 has an invalid length.
[  655.448436][T21237] netlink: 15 bytes leftover after parsing attributes in process `syz.5.3861'.
[  655.625243][T21248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3861'.
[  656.948764][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3857'.
[  656.967671][T21248] IPv6: sit1: Disabled Multicast RS
[  656.984057][T21248] sit1: entered allmulticast mode
[  657.134176][T21271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.247402][T21281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3869'.
[  657.303353][T21282] wg1 speed is unknown, defaulting to 1000
[  657.390990][T21284] wg1 speed is unknown, defaulting to 1000
[  657.879453][T21311] netlink: 'syz.4.3881': attribute type 10 has an invalid length.
[  657.896544][T21311] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  657.939596][T21314] netlink: 'syz.2.3882': attribute type 2 has an invalid length.
[  657.952728][T21314] netlink: 'syz.2.3882': attribute type 2 has an invalid length.
[  658.068532][T21316] netlink: 'syz.2.3883': attribute type 1 has an invalid length.
[  658.138996][T21316] 8021q: adding VLAN 0 to HW filter on device bond4
[  658.186168][T21316] veth3: entered promiscuous mode
[  658.211702][T21316] bond4: (slave veth3): Enslaving as a backup interface with a down link
[  658.245580][T21319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  658.513545][T21335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  658.521164][T21335] syzkaller0: entered promiscuous mode
[  658.526818][T21335] syzkaller0: entered allmulticast mode
[  658.538454][T21335] tipc: Resetting bearer <eth:syzkaller0>
[  658.696263][T21335] tipc: Resetting bearer <eth:syzkaller0>
[  658.743057][T21335] tipc: Disabling bearer <eth:syzkaller0>
[  658.772274][T21344] __nla_validate_parse: 4 callbacks suppressed
[  658.772290][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3889'.
[  659.062112][T21344] bridge_slave_1: left allmulticast mode
[  659.083217][T21344] bridge_slave_1: left promiscuous mode
[  659.093199][T21344] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.138212][T21344] bridge_slave_0: left allmulticast mode
[  659.145287][T21344] bridge_slave_0: left promiscuous mode
[  659.151093][T21344] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.695813][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3898'.
[  659.874356][T21388] openvswitch: netlink: Flow key attr not present in new flow.
[  659.884266][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'.
[  660.287352][T21413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3908'.
[  660.438931][T21421] nftables ruleset with unbound chain
[  660.684482][T21431] tipc: Started in network mode
[  660.689362][T21431] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  660.698789][T21431] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  660.760356][T21435] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[  661.352546][T20114] IPVS: starting estimator thread 0...
[  661.443514][T21463] IPVS: using max 31 ests per chain, 74400 per kthread
[  661.489821][T21469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3924'.
[  661.513799][T21470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3924'.
[  661.543362][T21473] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3925'.
[  661.691043][T21483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3929'.
[  661.818268][T21488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3930'.
[  661.849810][T21488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3930'.
[  662.170250][T21506] netlink: 'syz.2.3936': attribute type 39 has an invalid length.
[  662.408871][T21516] can: request_module (can-proto-5) failed.
[  662.656166][T21525] wg1 speed is unknown, defaulting to 1000
[  663.063269][T21550] geneve2: entered promiscuous mode
[  663.256850][T21556] wg1 speed is unknown, defaulting to 1000
[  663.435978][T21563] Bluetooth: MGMT ver 1.23
[  663.617956][T21563] geneve2: entered promiscuous mode
[  663.690312][T21566] wg1 speed is unknown, defaulting to 1000
[  663.780173][T21563] __nla_validate_parse: 6 callbacks suppressed
[  663.780188][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3949'.
[  664.326345][T21585] netlink: 'syz.4.3952': attribute type 9 has an invalid length.
[  664.380556][T21588] netlink: 'syz.0.3953': attribute type 2 has an invalid length.
[  664.412317][T21585] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3952'.
[  664.526108][T21591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  664.986679][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'.
[  665.012025][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'.
[  665.227017][T21634] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3964'.
[  665.917484][T21668] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3973'.
[  665.933785][T21658] vlan0: entered promiscuous mode
[  666.283296][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3974'.
[  666.311993][T21669] syzkaller0: entered promiscuous mode
[  666.348376][T21669] syzkaller0: entered allmulticast mode
[  667.930533][T21689] tipc: MTU too low for tipc bearer
[  668.253674][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  668.390145][T21711] hsr_slave_1 (unregistering): left promiscuous mode
[  668.445697][T21725] sctp: [Deprecated]: syz.0.3988 (pid 21725) Use of int in max_burst socket option.
[  668.445697][T21725] Use struct sctp_assoc_value instead
[  668.810975][T21738] wg1 speed is unknown, defaulting to 1000
[  668.858485][T21749] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3996'.
[  668.877048][T21744] netlink: 'syz.0.3994': attribute type 5 has an invalid length.
[  668.931197][T21749] hsr_slave_0: left promiscuous mode
[  668.995925][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3995'.
[  669.037422][T21749] hsr_slave_1: left promiscuous mode
[  669.049172][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3995'.
[  669.208628][T21747] wg1 speed is unknown, defaulting to 1000
[  670.044004][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4007'.
[  670.328617][T21815] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4009'.
[  670.426600][T21825] netlink: 'syz.6.4010': attribute type 21 has an invalid length.
[  670.444407][T21825] netlink: 'syz.6.4010': attribute type 22 has an invalid length.
[  670.452463][T21825] netlink: 'syz.6.4010': attribute type 23 has an invalid length.
[  670.461422][T21825] netlink: 'syz.6.4010': attribute type 25 has an invalid length.
[  670.493881][T21825] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4010'.
[  670.676427][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4012'.
[  670.695308][T21827] dvmrp0: entered allmulticast mode
[  671.116951][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4016'.
[  671.325223][T21855] wg1 speed is unknown, defaulting to 1000
[  671.635137][T21868] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4023'.
[  671.917661][T21886] netlink: 'syz.5.4026': attribute type 1 has an invalid length.
[  671.985417][T21886] 8021q: adding VLAN 0 to HW filter on device bond3
[  672.019570][T21889] bond3: (slave veth3): Enslaving as an active interface with a down link
[  672.040432][T21891] dummy0: entered allmulticast mode
[  672.081285][T21886] gretap2: entered promiscuous mode
[  672.097864][T21886] bond3: (slave gretap2): making interface the new active one
[  672.110220][T21886] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  672.123820][T21884] delete_channel: no stack
[  672.387961][T21890] dummy0: left allmulticast mode
[  672.648845][T21922] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4037'.
[  672.987480][T21930] syzkaller1: entered promiscuous mode
[  673.001561][T21930] syzkaller1: entered allmulticast mode
[  673.204934][T21945] tipc: Started in network mode
[  673.209844][T21945] tipc: Node identity ac14140f, cluster identity 4711
[  673.283969][T21945] tipc: New replicast peer: 255.255.255.255
[  673.290878][T21945] tipc: Enabled bearer <udp:syz2>, priority 10
[  673.810684][T21975] wg1 speed is unknown, defaulting to 1000
[  673.821185][T21971] wg1 speed is unknown, defaulting to 1000
[  673.945419][T21981] __nla_validate_parse: 2 callbacks suppressed
[  673.945436][T21981] netlink: 284 bytes leftover after parsing attributes in process `syz.5.4050'.
[  673.994672][T21982] wg1 speed is unknown, defaulting to 1000
[  674.124409][T21992] openvswitch: netlink: Message has 8 unknown bytes.
[  674.403154][ T5939] tipc: Node number set to 2886997007
[  674.490494][T22011] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4058'.
[  675.040985][T22032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4065'.
[  675.265209][T22043] netlink: 'syz.5.4067': attribute type 2 has an invalid length.
[  675.302756][T22043] netlink: 'syz.5.4067': attribute type 8 has an invalid length.
[  675.323132][T22043] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4067'.
[  675.517588][T22051] netlink: 'syz.5.4069': attribute type 1 has an invalid length.
[  675.541314][T22051] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4069'.
[  675.563271][T22051] netlink: 97 bytes leftover after parsing attributes in process `syz.5.4069'.
[  676.878198][T22106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4082'.
[  677.010045][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4082'.
[  677.071905][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'.
[  677.151039][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'.
[  678.112764][T22195] netlink: 'syz.0.4109': attribute type 6 has an invalid length.
[  678.125431][T22195] netlink: 'syz.0.4109': attribute type 4 has an invalid length.
[  678.279238][T22205] netlink: 'syz.5.4111': attribute type 1 has an invalid length.
[  678.338969][T22211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  678.373450][T22211] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.657553][T22231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  678.667476][T22223] syzkaller0: entered promiscuous mode
[  678.673135][T22223] syzkaller0: entered allmulticast mode
[  678.737436][T22223] tipc: Resetting bearer <eth:syzkaller0>
[  678.756215][T22222] tipc: Resetting bearer <eth:syzkaller0>
[  678.778539][T22222] tipc: Disabling bearer <eth:syzkaller0>
[  678.846439][T22242] wg1 speed is unknown, defaulting to 1000
[  679.085698][T22253] wg1 speed is unknown, defaulting to 1000
[  679.131216][T22258] __nla_validate_parse: 82 callbacks suppressed
[  679.131234][T22258] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4127'.
[  679.197598][T22258] dvmrp8: entered allmulticast mode
[  679.231628][T22258] wg1 speed is unknown, defaulting to 1000
[  679.477345][T22266] netlink: 248 bytes leftover after parsing attributes in process `syz.6.4129'.
[  679.794114][T22274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'.
[  679.926796][T22279] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4133'.
[  680.063412][T22262] dvmrp8: left allmulticast mode
[  680.141640][T22286] tipc: Resetting bearer <eth:syzkaller0>
[  680.396605][T22293] netlink: 'syz.0.4137': attribute type 1 has an invalid length.
[  680.406247][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4137'.
[  680.415927][T22293] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4137'.
[  680.443097][T22293] netlink: 'syz.0.4137': attribute type 13 has an invalid length.
[  680.451156][T22293] netlink: 'syz.0.4137': attribute type 17 has an invalid length.
[  680.460074][T22291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4136'.
[  680.907998][T22293] .`: left promiscuous mode
[  680.933358][T22293] bond_slave_0: left promiscuous mode
[  680.953401][T22293] bond_slave_1: left promiscuous mode
[  680.975933][T22293] 8021q: adding VLAN 0 to HW filter on device .`
[  681.009131][T22293] 8021q: adding VLAN 0 to HW filter on device team0
[  681.038398][T22293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  681.066207][T22303] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4138'.
[  681.244171][T22298] wg1 speed is unknown, defaulting to 1000
[  681.923781][T22334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4148'.
[  681.962172][T22336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4148'.
[  682.459151][T22347] netlink: 'syz.4.4150': attribute type 12 has an invalid length.
[  683.005577][T22362] macsec1: entered allmulticast mode
[  683.011128][T22362] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode
[  683.138015][T22373] netlink: 'syz.5.4157': attribute type 6 has an invalid length.
[  683.500376][T22396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  683.527496][T22396] tipc: Disabling bearer <eth:syzkaller0>
[  683.611257][T22405] netlink: 'syz.2.4169': attribute type 39 has an invalid length.
[  683.677031][T22410] netlink: 'syz.2.4169': attribute type 5 has an invalid length.
[  683.794712][T22410] vlan2: entered allmulticast mode
[  683.800037][T22410] bridge_slave_0: entered allmulticast mode
[  684.571949][T22463] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  684.612098][T22465] __nla_validate_parse: 17 callbacks suppressed
[  684.612117][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'.
[  684.766709][T22475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4185'.
[  684.778354][T22467] wg1 speed is unknown, defaulting to 1000
[  684.994129][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'.
[  685.013101][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'.
[  685.194281][T22483] netlink: 'syz.5.4187': attribute type 1 has an invalid length.
[  685.202452][T22483] netlink: 'syz.5.4187': attribute type 6 has an invalid length.
[  685.247966][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'.
[  685.284979][T22479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4186'.
[  685.587903][T22492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  685.596844][T22492] syzkaller0: entered promiscuous mode
[  685.602483][T22492] syzkaller0: entered allmulticast mode
[  685.695869][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  685.849014][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4192'.
[  685.852126][T22497] tipc: Resetting bearer <eth:syzkaller0>
[  686.129198][T22506] C: renamed from lo (while UP)
[  686.174701][T22506] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  686.201301][T22491] tipc: Resetting bearer <eth:syzkaller0>
[  686.221501][T22491] tipc: Disabling bearer <eth:syzkaller0>
[  686.400167][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4197'.
[  686.511790][T22527] netlink: 'syz.0.4199': attribute type 1 has an invalid length.
[  686.522851][T22527] netlink: 'syz.0.4199': attribute type 1 has an invalid length.
[  686.610217][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'.
[  686.983700][T22564] ieee802154 phy0 wpan0: encryption failed: -22
[  687.126829][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4212'.
[  687.646136][T22587] erspan0: entered promiscuous mode
[  687.719966][T22589] wg1 speed is unknown, defaulting to 1000
[  689.164519][T22663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  689.182404][T22663] syzkaller0: entered promiscuous mode
[  689.196802][T22663] syzkaller0: entered allmulticast mode
[  689.259870][T22663] tipc: Resetting bearer <eth:syzkaller0>
[  689.272567][T22661] tipc: Resetting bearer <eth:syzkaller0>
[  689.302171][T22661] tipc: Disabling bearer <eth:syzkaller0>
[  689.828353][T22700] netlink: 'syz.5.4251': attribute type 5 has an invalid length.
[  689.908924][T22706] __nla_validate_parse: 13 callbacks suppressed
[  689.908944][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4252'.
[  689.934694][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4252'.
[  689.973411][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4252'.
[  690.003365][T22708] wg1 speed is unknown, defaulting to 1000
[  690.375868][T22719] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  690.598987][T22730] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4259'.
[  690.626626][T22730] pim6reg1: entered promiscuous mode
[  690.636643][T22730] pim6reg1: entered allmulticast mode
[  690.700591][T22732] netlink: 'syz.0.4260': attribute type 1 has an invalid length.
[  690.708995][T22732] netlink: 'syz.0.4260': attribute type 6 has an invalid length.
[  691.686916][T22761] wg1 speed is unknown, defaulting to 1000
[  691.730902][T22768] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  692.599796][T22772] wg1 speed is unknown, defaulting to 1000
[  693.045975][T22804] netlink: 'syz.0.4277': attribute type 10 has an invalid length.
[  693.488095][T22819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4282'.
[  693.654164][T22820] wg1 speed is unknown, defaulting to 1000
[  693.669062][T22824] netlink: 'syz.0.4281': attribute type 1 has an invalid length.
[  693.685350][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'.
[  693.701183][T22824] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4281'.
[  695.210446][T22849] netlink: 'syz.0.4290': attribute type 12 has an invalid length.
[  695.288067][T22850] batadv_slave_0: entered promiscuous mode
[  695.294435][T22850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4290'.
[  695.587577][T22854] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  695.665022][T22857] block nbd1: shutting down sockets
[  696.523126][T22874] wg1 speed is unknown, defaulting to 1000
[  696.608162][T22876] netlink: 'syz.0.4297': attribute type 13 has an invalid length.
[  696.646912][T22876] netlink: 'syz.0.4297': attribute type 17 has an invalid length.
[  696.724853][T22876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  696.855919][T22880] wg1 speed is unknown, defaulting to 1000
[  697.330292][T22896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4302'.
[  697.338465][T22897] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4301'.
[  697.363926][T22897] netlink: 19 bytes leftover after parsing attributes in process `syz.5.4301'.
[  697.380263][T22897] netlink: 'syz.5.4301': attribute type 6 has an invalid length.
[  697.405348][T22897] netlink: 'syz.5.4301': attribute type 4 has an invalid length.
[  697.507465][T22899] block nbd1: shutting down sockets
[  697.570906][T22901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4303'.
[  697.761021][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4304'.
[  697.950335][T22910] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4306'.
[  698.005399][T22912] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4307'.
[  698.017022][T22912] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4307'.
[  698.018513][T22910] netlink: 'syz.6.4306': attribute type 1 has an invalid length.
[  698.042822][T22912] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4307'.
[  698.322121][T22921] tun0: tun_chr_ioctl cmd 1074025681
[  698.504969][T22932] sctp: [Deprecated]: syz.4.4314 (pid 22932) Use of int in max_burst socket option.
[  698.504969][T22932] Use struct sctp_assoc_value instead
[  699.133904][T22960] netlink: 'syz.0.4321': attribute type 1 has an invalid length.
[  700.106398][T23001] netlink: 'syz.6.4334': attribute type 1 has an invalid length.
[  700.131373][T23001] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.156135][T23001] wg1 speed is unknown, defaulting to 1000
[  700.941055][T23015] __nla_validate_parse: 8 callbacks suppressed
[  700.941074][T23015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4338'.
[  700.958429][T23015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4338'.
[  701.061357][T23020] dummy0: entered promiscuous mode
[  701.068356][T23020] batadv_slave_0: entered promiscuous mode
[  701.075113][T23020] debugfs: 'hsr0' already exists in 'hsr'
[  701.080852][T23020] Cannot create hsr debugfs directory
[  701.088438][T23020] hsr0: entered allmulticast mode
[  701.100839][T23020] dummy0: entered allmulticast mode
[  701.125634][T23020] batadv_slave_0: entered allmulticast mode
[  701.254388][T23027] wg1 speed is unknown, defaulting to 1000
[  701.519279][T23031] wg1 speed is unknown, defaulting to 1000
[  701.607421][T23040] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4345'.
[  702.332506][T23071] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4354'.
[  702.573509][T23078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4357'.
[  703.039506][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4361'.
[  703.251434][T23094] vlan2: entered allmulticast mode
[  703.529410][ T5877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  703.549498][ T5877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  703.558456][ T5877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  703.565414][T23110] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4366'.
[  703.579909][ T5877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  703.593710][ T5877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  703.718180][T23107] wg1 speed is unknown, defaulting to 1000
[  704.015097][T23122] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4372'.
[  704.264866][T23138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'.
[  704.485902][T23107] chnl_net:caif_netlink_parms(): no params data found
[  704.961766][T23107] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.969961][T23107] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.981809][T23107] bridge_slave_0: entered allmulticast mode
[  704.997609][T23107] bridge_slave_0: entered promiscuous mode
[  705.024111][T23167] tap0: tun_chr_ioctl cmd 1074812118
[  705.030026][T23107] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.053342][T23107] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.081967][T23107] bridge_slave_1: entered allmulticast mode
[  705.107141][T23107] bridge_slave_1: entered promiscuous mode
[  705.208386][T23107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.240947][T23171] wg1 speed is unknown, defaulting to 1000
[  705.251039][T23107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.306892][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'.
[  705.578712][T23107] team0: Port device team_slave_0 added
[  705.603635][T23107] team0: Port device team_slave_1 added
[  705.683124][ T5877] Bluetooth: hci7: command tx timeout
[  705.755342][T23107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.773753][T23107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.831116][T23107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.855059][T23107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.862013][T23107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.923438][T23107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.954253][T23178] netlink: 'syz.0.4383': attribute type 10 has an invalid length.
[  706.272679][T23188] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4387'.
[  706.309247][T23107] hsr_slave_0: entered promiscuous mode
[  706.325368][T23107] hsr_slave_1: entered promiscuous mode
[  706.350771][T23107] debugfs: 'hsr0' already exists in 'hsr'
[  706.356706][T23107] Cannot create hsr debugfs directory
[  706.697785][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4390'.
[  706.804396][T23202] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4390'.
[  706.823393][T23202] netlink: zone id is out of range
[  706.828560][T23202] netlink: zone id is out of range
[  706.863452][T23202] netlink: get zone limit has 8 unknown bytes
[  706.947109][T23202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4390'.
[  707.126979][T23107] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  707.162673][T23107] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  707.200272][T23107] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  707.227632][T23107] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  707.642493][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'.
[  707.651832][T23224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.692139][T23107] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.740424][T23107] 8021q: adding VLAN 0 to HW filter on device team0
[  707.758393][T23226] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4394'.
[  707.763543][ T5877] Bluetooth: hci7: command tx timeout
[  707.834859][T20477] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.842042][T20477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  707.941920][T20477] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.949105][T20477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.363877][T23107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.882375][T23107] veth0_vlan: entered promiscuous mode
[  708.910994][T23107] veth1_vlan: entered promiscuous mode
[  708.957880][T23107] veth0_macvtap: entered promiscuous mode
[  708.975951][T23107] veth1_macvtap: entered promiscuous mode
[  709.006623][T23107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.025302][T23107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  709.051159][T20478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.060166][T20478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.081009][T20478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.090480][T20478] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  709.176888][T20467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.193340][T20467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.234241][T20467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.242064][T20467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.370879][T23246] tipc: Started in network mode
[  709.379021][T23246] tipc: Node identity ea3eed99c962, cluster identity 4711
[  709.397733][T23246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.419379][T23246] syzkaller0: entered promiscuous mode
[  709.425525][T23246] syzkaller0: entered allmulticast mode
[  709.474250][T23246] tipc: Resetting bearer <eth:syzkaller0>
[  709.488909][T23246] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4360'.
[  709.561842][T23247] tipc: Resetting bearer <eth:syzkaller0>
[  709.581225][T23247] tipc: Disabling bearer <eth:syzkaller0>
[  709.843367][ T5877] Bluetooth: hci7: command tx timeout
[  711.923401][ T5877] Bluetooth: hci7: command tx timeout
[  728.724380][ T5877] Bluetooth: hci3: command 0x0406 tx timeout
[  733.844058][ T5877] Bluetooth: hci4: command 0x0406 tx timeout
[  744.563432][   T31] INFO: task syz.3.3299:19012 blocked for more than 143 seconds.
[  744.571173][   T31]       Not tainted syzkaller #0
[  744.576538][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  744.585241][   T31] task:syz.3.3299      state:D stack:26056 pid:19012 tgid:19011 ppid:17280  task_flags:0x400140 flags:0x00004004
[  744.597281][   T31] Call Trace:
[  744.600548][   T31]  <TASK>
[  744.603816][   T31]  __schedule+0x1798/0x4cc0
[  744.608336][   T31]  ? __lock_acquire+0xab9/0xd20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  744.613481][   T31]  ? __lock_acquire+0xab9/0xd20
[  744.618370][   T31]  ? __pfx___schedule+0x10/0x10
[  744.623305][   T31]  ? schedule+0x91/0x360
[  744.628385][   T31]  schedule+0x165/0x360
[  744.632563][   T31]  schedule_preempt_disabled+0x13/0x30
[  744.638607][   T31]  __mutex_lock+0x7e6/0x1350
[  744.643258][   T31]  ? __mutex_lock+0x5bb/0x1350
[  744.648038][   T31]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  744.654150][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  744.659184][   T31]  ? __asan_memset+0x22/0x50
[  744.664128][   T31]  ? ____sys_sendmsg+0x505/0x830
[  744.669079][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  744.674130][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  744.679266][   T31]  nfsd_nl_listener_set_doit+0x137/0x1690
[  744.685085][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  744.690839][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  744.697548][   T31]  ? __nla_parse+0x40/0x60
[  744.701980][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  744.708676][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  744.715667][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  744.721767][   T31]  ? bpf_lsm_capable+0x9/0x20
[  744.771200][   T31]  ? security_capable+0x7e/0x2e0
[  744.843137][   T31]  genl_rcv_msg+0x60e/0x790
[  744.847716][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  744.872901][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  744.879119][   T31]  netlink_rcv_skb+0x205/0x470
[  744.892944][   T31]  ? __lock_acquire+0xab9/0xd20
[  744.897828][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  744.932924][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  744.938277][   T31]  ? down_read+0x1ad/0x2e0
[  744.942707][   T31]  genl_rcv+0x28/0x40
[  744.952980][   T31]  netlink_unicast+0x82f/0x9e0
[  744.957782][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  744.981300][   T31]  ? netlink_sendmsg+0x642/0xb30
[  744.993311][   T31]  ? skb_put+0x11b/0x210
[  744.997598][   T31]  netlink_sendmsg+0x805/0xb30
[  745.002382][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  745.023329][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  745.028310][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  745.044651][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  745.063036][   T31]  __sock_sendmsg+0x21c/0x270
[  745.067761][   T31]  ____sys_sendmsg+0x505/0x830
[  745.072539][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  745.093118][   T31]  ? import_iovec+0x74/0xa0
[  745.097672][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  745.102368][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  745.123380][   T31]  ? __fget_files+0x2a/0x420
[  745.128009][   T31]  ? __fget_files+0x3a0/0x420
[  745.132714][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  745.143768][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  745.149276][   T31]  ? rcu_is_watching+0x15/0xb0
[  745.163223][   T31]  ? do_syscall_64+0xbe/0x3b0
[  745.167933][   T31]  do_syscall_64+0xfa/0x3b0
[  745.172443][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  745.193919][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.200018][   T31]  ? clear_bhb_loop+0x60/0xb0
[  745.205769][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.211676][   T31] RIP: 0033:0x7f1c4fb8eec9
[  745.216273][   T31] RSP: 002b:00007f1c50961038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  745.224964][   T31] RAX: ffffffffffffffda RBX: 00007f1c4fde5fa0 RCX: 00007f1c4fb8eec9
[  745.233448][   T31] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004
[  745.241422][   T31] RBP: 00007f1c4fc11f91 R08: 0000000000000000 R09: 0000000000000000
[  745.249542][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  745.257561][   T31] R13: 00007f1c4fde6038 R14: 00007f1c4fde5fa0 R15: 00007ffd4b3338d8
[  745.266158][   T31]  </TASK>
[  745.269313][   T31] 
[  745.269313][   T31] Showing all locks held in the system:
[  745.277285][   T31] 1 lock held by khungtaskd/31:
[  745.282133][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  745.292498][   T31] 2 locks held by getty/5626:
[  745.316511][   T31]  #0: ffff888033e360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  745.343401][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  745.373158][   T31] 3 locks held by kworker/1:6/5939:
[  745.378385][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  745.423236][   T31]  #1: ffffc900050c7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  745.462988][   T31]  #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  745.493023][   T31] 5 locks held by syz-executor/17559:
[  745.498423][   T31]  #0: ffff88805e350dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  745.523122][   T31]  #1: ffff88805e3500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  745.533363][   T31]  #2: ffffffff8f69fce8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  745.563178][   T31]  #3: ffff888029b57b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  745.572570][   T31]  #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  745.602973][   T31] 1 lock held by syz-executor/17892:
[  745.608290][   T31]  #0: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  745.633032][   T31] 2 locks held by syz.1.3268/18893:
[  745.638259][   T31]  #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  745.658976][   T31]  #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  745.683264][   T31] 2 locks held by syz.3.3299/19012:
[  745.688567][   T31]  #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  745.702986][   T31]  #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  745.722965][   T31] 4 locks held by syz-executor/19551:
[  745.728371][   T31] 3 locks held by kworker/1:3/20106:
[  745.743765][   T31] 5 locks held by kworker/u8:21/20478:
[  745.749242][   T31] 2 locks held by syz.2.4219/22600:
[  745.779869][   T31]  #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  745.789590][   T31]  #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  745.801154][   T31] 3 locks held by syz-executor/23107:
[  745.807475][   T31]  #0: ffff88807bcbcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  745.817586][   T31]  #1: ffff88807bcbc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  745.827491][   T31]  #2: ffffffff8f69fce8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  745.838005][   T31] 
[  745.840350][   T31] =============================================
[  745.840350][   T31] 
[  745.855660][   T31] NMI backtrace for cpu 0
[  745.855678][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  745.855699][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  745.855711][   T31] Call Trace:
[  745.855718][   T31]  <TASK>
[  745.855727][   T31]  dump_stack_lvl+0x189/0x250
[  745.855756][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  745.855779][   T31]  ? __pfx__printk+0x10/0x10
[  745.855819][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  745.855852][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  745.855885][   T31]  ? __pfx__printk+0x10/0x10
[  745.855916][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  745.855948][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  745.855980][   T31]  watchdog+0xf93/0xfe0
[  745.856011][   T31]  ? watchdog+0x1de/0xfe0
[  745.856044][   T31]  kthread+0x70e/0x8a0
[  745.856085][   T31]  ? __pfx_watchdog+0x10/0x10
[  745.856114][   T31]  ? __pfx_kthread+0x10/0x10
[  745.856139][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  745.856159][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  745.856178][   T31]  ? __pfx_kthread+0x10/0x10
[  745.856200][   T31]  ret_from_fork+0x439/0x7d0
[  745.856222][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  745.856248][   T31]  ? __switch_to_asm+0x39/0x70
[  745.856270][   T31]  ? __switch_to_asm+0x33/0x70
[  745.856292][   T31]  ? __pfx_kthread+0x10/0x10
[  745.856316][   T31]  ret_from_fork_asm+0x1a/0x30
[  745.856357][   T31]  </TASK>
[  745.856364][   T31] Sending NMI from CPU 0 to CPUs 1:
[  746.005444][    C1] NMI backtrace for cpu 1
[  746.005461][    C1] CPU: 1 UID: 0 PID: 20467 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  746.005480][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  746.005491][    C1] Workqueue: events_unbound toggle_allocation_gate
[  746.005517][    C1] RIP: 0010:x2apic_send_IPI+0x73/0xe0
[  746.005540][    C1] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7
[  746.005555][    C1] RSP: 0018:ffffc9001b8cf630 EFLAGS: 00000206
[  746.005568][    C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830
[  746.005579][    C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000
[  746.005590][    C1] RBP: ffffc9001b8cf7e0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6
[  746.005602][    C1] R10: dffffc0000000000 R11: ffffffff81705100 R12: dffffc0000000000
[  746.005614][    C1] R13: dffffc0000000000 R14: ffff8880b86201b0 R15: ffffffff8dbd8d10
[  746.005627][    C1] FS:  0000000000000000(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000
[  746.005641][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  746.005652][    C1] CR2: 000055e818e75fb0 CR3: 000000000df36000 CR4: 00000000003526f0
[  746.005667][    C1] Call Trace:
[  746.005673][    C1]  <TASK>
[  746.005683][    C1]  smp_call_function_many_cond+0xabb/0x12d0
[  746.005704][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  746.005730][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  746.005746][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  746.005766][    C1]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  746.005788][    C1]  ? __pfx___text_poke+0x10/0x10
[  746.005806][    C1]  ? rcu_is_watching+0x15/0xb0
[  746.005821][    C1]  ? trace_contention_end+0x39/0x120
[  746.005842][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  746.005860][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  746.005878][    C1]  smp_text_poke_batch_finish+0xe98/0x1130
[  746.005906][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  746.005931][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  746.005961][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  746.005984][    C1]  static_key_enable_cpuslocked+0x128/0x250
[  746.006008][    C1]  static_key_enable+0x1a/0x20
[  746.006029][    C1]  toggle_allocation_gate+0xad/0x240
[  746.006051][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  746.006072][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  746.006101][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  746.006125][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  746.006149][    C1]  process_scheduled_works+0xae1/0x17b0
[  746.006190][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  746.006225][    C1]  worker_thread+0x8a0/0xda0
[  746.006242][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  746.006264][    C1]  ? __kthread_parkme+0x7b/0x200
[  746.006286][    C1]  kthread+0x70e/0x8a0
[  746.006306][    C1]  ? __pfx_worker_thread+0x10/0x10
[  746.006320][    C1]  ? __pfx_kthread+0x10/0x10
[  746.006345][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  746.006360][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  746.006377][    C1]  ? __pfx_kthread+0x10/0x10
[  746.006396][    C1]  ret_from_fork+0x439/0x7d0
[  746.006412][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  746.006431][    C1]  ? __switch_to_asm+0x39/0x70
[  746.006449][    C1]  ? __switch_to_asm+0x33/0x70
[  746.006468][    C1]  ? __pfx_kthread+0x10/0x10
[  746.006486][    C1]  ret_from_fork_asm+0x1a/0x30
[  746.006516][    C1]  </TASK>
[  746.007739][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  746.007758][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  746.007780][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  746.007792][   T31] Call Trace:
[  746.007799][   T31]  <TASK>
[  746.007808][   T31]  dump_stack_lvl+0x99/0x250
[  746.007831][   T31]  ? __asan_memcpy+0x40/0x70
[  746.007853][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  746.007875][   T31]  ? __pfx__printk+0x10/0x10
[  746.007914][   T31]  vpanic+0x281/0x750
[  746.007938][   T31]  ? __pfx_vpanic+0x10/0x10
[  746.007958][   T31]  ? preempt_schedule+0xae/0xc0
[  746.007980][   T31]  ? preempt_schedule_common+0x83/0xd0
[  746.008008][   T31]  panic+0xb9/0xc0
[  746.008028][   T31]  ? __pfx_panic+0x10/0x10
[  746.008051][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  746.008091][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  746.008123][   T31]  watchdog+0xfd2/0xfe0
[  746.008155][   T31]  ? watchdog+0x1de/0xfe0
[  746.008187][   T31]  kthread+0x70e/0x8a0
[  746.008213][   T31]  ? __pfx_watchdog+0x10/0x10
[  746.008238][   T31]  ? __pfx_kthread+0x10/0x10
[  746.008263][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  746.008281][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  746.008300][   T31]  ? __pfx_kthread+0x10/0x10
[  746.008324][   T31]  ret_from_fork+0x439/0x7d0
[  746.008345][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  746.008371][   T31]  ? __switch_to_asm+0x39/0x70
[  746.008393][   T31]  ? __switch_to_asm+0x33/0x70
[  746.008415][   T31]  ? __pfx_kthread+0x10/0x10
[  746.008439][   T31]  ret_from_fork_asm+0x1a/0x30
[  746.008480][   T31]  </TASK>
[  746.497432][   T31] Kernel Offset: disabled
[  746.501735][   T31] Rebooting in 86400 seconds..