last executing test programs:

41.088934707s ago: executing program 2 (id=690):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c090}, 0xa111)
accept4$llc(r5, 0x0, 0x0, 0x800)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x238, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7bf3aa5211fc077d851a178d702789c4cbe4e6f09d3e55b00fa25810105c4161a7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "6533b59f06d32e9a1852805db46247dd5fe26cb4c1cf733fa9f4eee6c8f098"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1ab8e5deda65dd1137838bfaf5c79bec2317c7e95d4c1fe8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "1993f8f377d96309f928bb50eb9ba1c1c18a691062c499efe28c5d11d9fabe779c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e42}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf24}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000004}, 0x40054)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r8, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r8, 0x4)
listen(r8, 0x1)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x518d5e6bacfa5108)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="c7", 0xffffffffffffff5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76300463926b4d366ce0abf330fc0d39b5fdbbdf1652c643281f11423bfde8498bef608f29d698247212b2765be3f3c1651caf0934b31a4d2a925bb17a410a134be640ef42cc8ceb0adc2e69e958d348a938e9c74496c3c868aecb3aef864ef197597eb1e7a81d95952ba5c2ff95", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884)

40.953034827s ago: executing program 2 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket$inet(0x2, 0x3, 0x2) (async)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

33.489872356s ago: executing program 2 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket$inet(0x2, 0x3, 0x2) (async)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

25.943930181s ago: executing program 2 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket$inet(0x2, 0x3, 0x2) (async)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

18.350296516s ago: executing program 2 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket$inet(0x2, 0x3, 0x2) (async)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

9.225290582s ago: executing program 2 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket$inet(0x2, 0x3, 0x2) (async)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

2.468456476s ago: executing program 0 (id=1074):
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x48, &(0x7f0000000840), &(0x7f0000000880)=0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000004300)=""/49, 0x31}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0)

2.315079946s ago: executing program 4 (id=1076):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x87) (async)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x100000, 0x5}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000800000000000001a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0)

2.269778574s ago: executing program 4 (id=1077):
syz_emit_ethernet(0x6e, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7e71a450b13fc"}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119388f76a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x8e, &(0x7f00000001c0)}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000044000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="26000000d88d8f0000000000", @ANYRES32, @ANYBLOB], 0x10)
r6 = socket(0x1, 0x2, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c00018006000600800a0000100002800c00150005000200"], 0x34}}, 0xc000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000008c0)=r9, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r3, 0x1}, 0x20)
getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x10, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000100000004001f00d04601", @ANYBLOB="82aeee971e5442ba2c4cbeb4f9707bcde562eba2d93aed6169b2186821ad058bc4474c5e58f791b90a901de4492882f32bba3bec4940ce848804b822c6920aa55980d265df794f602f46e67c783348abe20f3128f39c59db2a654ce15d66fcaf7cd78efc50362ec34c6e5affc44aeb64604c523da0acff7eb345cf67cf7c2915f6fff7299698eefb3a01eec95919f8c324464b43ce46bf35cc0d4555a5", @ANYBLOB="2c00082ca35204b2bc195036cf6168122ce481964eb97567576c1b0bf460eafc187bf8755ce240"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040000}, 0x91)

2.219553773s ago: executing program 3 (id=1078):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x8, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x42051}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x18, 0xa, 0xa, 0x401, 0x4, 0x25dfdbfe, {0x2, 0x0, 0xa}, [@generic="438a"]}, 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x804)
close(0x4)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)

2.093291832s ago: executing program 4 (id=1080):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000e08ea4ddbbb82c8de72c2b6ae05f4e841542cb6a6e9964ffe8eb972667e6439c73514d78f440f6253d432bfdd5049a296a6b536317d4cf5050a29d53ce2df1edf2b40e4c4e91900616f77aa22c24bb3cfe25769c0b0400000046b6b196fed72a0068d11aaca9fb830c2427a4f810015a0203d4c4ebba9660000000000000001025d7aaef856aaa674fc731f83561fd7f3cdb50d0c9f683a9dcc0af25a546248a281ff82f8354d03c78d1e096249c5c03b564b700"/198, @ANYRES16=<r2=>r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xeaac5c46a602cb14, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x387}], 0x1}}], 0x1, 0x0)
sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840)
recvmsg$can_j1939(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x24008804)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, 0x1}, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3f, 0x0, 0x400000, 0x0, 0x10000, @value}, 0x28)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448cb, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES64=r5, @ANYRESHEX=r7], 0x140}}, 0x40064)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r10 = socket$inet(0x2, 0x2, 0x0)
r11 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r11, 0x1, 0x22, &(0x7f0000000300)=0x80000004, 0x4)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
write(r9, &(0x7f0000000040)="05000000010000", 0x7)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x8)

1.873103233s ago: executing program 3 (id=1082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030005000000050003000500000055fe0300020000000500030000000000050003000100000008000200020000000800010003"], 0x68}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) (async)
r4 = socket(0x1e, 0x1, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x800) (async)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0) (async)
r6 = socket(0x28, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
close(0x3) (async)
sendmmsg$inet6(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0x200}}], 0x1, 0x6) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@loopback}, &(0x7f00000000c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_getaddr={0x28, 0x16, 0x20, 0x70bd2c, 0x25dfdbfb, {0x2, 0x1, 0x94, 0xfd, r11}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x10)

1.854174392s ago: executing program 4 (id=1083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', <r1=>0x0, 0x8000, 0x7, 0x9c, 0xff, {{0x6, 0x4, 0x3, 0x17, 0x18, 0x66, 0x0, 0x2d, 0x29, 0x0, @local, @private=0xa010102, {[@noop]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0d}, 0x1, 0x0, 0x0, 0x24000899}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10002}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000016c0)=""/100, 0x64}, {&(0x7f0000001b40)=""/4109, 0x100d}, {0x0}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000440)}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f0000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000004c0)=""/123, &(0x7f0000000540)=0x7b)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x4000010)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r7)
socket(0x15, 0x800, 0x431)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="640000001600000229bd7000fcdbdf250a4049c8", @ANYRES32=r1, @ANYBLOB="14000600040000000800000003000000feffffff08000800640000001400060000000000040000000700000001000000140006000100001209000000c000000000000000080009008fd00000020b9616cb26b831ba8601042ba5453513dca7eadccced79d7bff29c70f7da10203f4e3d6a135bb0f0f6bafe2ac353efa3a7155fa2536fd7445487513c0dad06746db191afada4176c46bb8dab329eeff42bbfdb836423e065bafadf13f6a7179a197ae12b5b5e9ec1774651"], 0x64}, 0x1, 0x0, 0x0, 0x4008800}, 0x20046809)
r9 = socket$inet6(0xa, 0x4, 0x8000002)
sendto$inet6(r9, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

1.741098553s ago: executing program 3 (id=1085):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000fb1f000007200000000006004dee000000000000000000000000000000000104"], 0x60)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) (async)
setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
shutdown(r5, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 64)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={<r10=>0x0}, &(0x7f0000000280)=0xc) (async, rerun: 64)
r11 = getpid() (async, rerun: 64)
r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r13 = socket$qrtr(0x2a, 0x2, 0x0)
r14 = socket$nl_audit(0x10, 0x3, 0x9) (async)
ioctl$sock_SIOCGPGRP(r13, 0x8904, &(0x7f0000000180)=<r15=>0x0)
sendmsg$AUDIT_SET(r14, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x2, 0x70bd2b, 0x25dfdbff, {0x2, 0x1, 0x0, r15, 0x343, 0x7, 0x1ff, 0xffffff00, 0x0, 0x3, 0x401}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000000) (async)
syz_open_procfs$namespace(r15, &(0x7f0000002180)='ns/ipc\x00') (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@RTM_NEWNSID={0x44, 0x58, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r9}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_PID={0x8, 0x2, r11}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r12}, @NETNSA_PID={0x8, 0x2, r15}]}, 0x44}}, 0x2000000) (rerun: 64)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x1, 0xffffffff, 0xffff})

1.576903633s ago: executing program 3 (id=1086):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000980)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x3, 0xb6, &(0x7f0000000a00)=""/182, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x7, 0x3, 0xffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x2, 0x3, 0x5}, {0x3, 0x7fffffff, 0xc, 0xa}, {0x2, 0x2, 0xd, 0x4}, {0x1, 0x5, 0x8, 0x2}, {0x8, 0x4, 0xa, 0xc}, {0x2, 0x1, 0x4, 0xc59e2a1801f7916b}], 0x10, 0x97, @void, @value}, 0x94) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x1e, 0x0, 0x401, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], <r1=>0x0}, 0x40) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r5 = socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="1c43b3d629546872aea209f9840065000100c47c10000000"], 0x28}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x13, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (rerun: 64)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x1f, &(0x7f0000000540)=ANY=[@ANYBLOB="18430000feffffff000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="060101000000000000160000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000000d36f6ff7a000000"], &(0x7f0000000680)='GPL\x00', 0xfffffffd, 0x24, &(0x7f0000000740)=""/36, 0x21600, 0x1c, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x9, 0x55aa5163, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[0x1, 0xffffffffffffffff], &(0x7f0000000840)=[{0x2, 0x1, 0xf, 0x6}, {0x2, 0x4, 0xe, 0xa}, {0x4, 0x4, 0x0, 0xa}, {0x5, 0x4, 0x1, 0x8}], 0x10, 0x101, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback=r11, r0, 0x1, 0x4, 0x0, @void, @value=r13, @void, @void, r1}, 0x20)
socket$inet(0xa, 0x801, 0x0) (async)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={<r16=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r15, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES16=r16], 0x90}}, 0x0)

1.493108402s ago: executing program 0 (id=1087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x7c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10020}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x40000)

1.119558517s ago: executing program 0 (id=1089):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x6, [{@loopback, 0x2}]}]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x0, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1e, 0x1, 0x0)
shutdown(r4, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x550fe000)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
socket(0x2, 0x3, 0x3)

943.106878ms ago: executing program 3 (id=1091):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000001c0)={@local, @multicast2, @remote}, 0xc) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x2c}}, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x5, 0x6, 0x19, 0x8, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x7800, 0x7, 0x1, 0x1}})
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000bf67f8ea85949ecc4f736b785baaa031f912b14ec32450600dc4d8c93da5dd396ce1fc727a0ba6316a5e5acf6dee220d55e654bee2ff239d87987a411cde92c6c299e201ebf9de63857b1daaf8ac7a68bb6a4b179af40a6e49fb34eace135393dbb1cbf43e45d4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(r10, r11, 0x0, 0xffffffff000) (async)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x8c, r12, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4008000) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (rerun: 64)

837.561305ms ago: executing program 0 (id=1092):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
socket(0x3, 0x0, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8830}, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "0e38e85c4774a34d3563508464af4600012efa571a6e55cdba1dede74d373cde"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800)

743.307809ms ago: executing program 1 (id=1093):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="4c1f", 0x2}], 0x1}}], 0x2, 0x0)
close(0x3)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x4, 0xfffffffa, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0xa00}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

644.979979ms ago: executing program 3 (id=1094):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000e08ea4ddbbb82c8de72c2b6ae05f4e841542cb6a6e9964ffe8eb972667e6439c73514d78f440f6253d432bfdd5049a296a6b536317d4cf5050a29d53ce2df1edf2b40e4c4e91900616f77aa22c24bb3cfe25769c0b0400000046b6b196fed72a0068d11aaca9fb830c2427a4f810015a0203d4c4ebba9660000000000000001025d7aaef856aaa674fc731f83561fd7f3cdb50d0c9f683a9dcc0af25a546248a281ff82f8354d03c78d1e096249c5c03b564b700"/198, @ANYRES16=<r2=>r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xeaac5c46a602cb14, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x54a}], 0x1}}], 0x1, 0x0)
sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840)
recvmsg$can_j1939(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x24008804)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, 0x1}, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3f, 0x0, 0x400000, 0x0, 0x10000, @value}, 0x28)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448cb, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES64=r5, @ANYRESHEX=r7], 0x140}}, 0x40064)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r10 = socket$inet(0x2, 0x2, 0x0)
r11 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r11, 0x1, 0x22, &(0x7f0000000300)=0x80000004, 0x4)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
write(r9, &(0x7f0000000040)="05000000010000", 0x7)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x8)

596.23659ms ago: executing program 1 (id=1095):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000003"], 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

489.81811ms ago: executing program 0 (id=1096):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000)
recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/230, 0xe6}], 0x2}}], 0x1, 0x12040, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_dccp(0x2, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
gettid()

463.092262ms ago: executing program 1 (id=1097):
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), 0x4)
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2c, 0x400, 0x70bd25, 0x25dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000)
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "ed7d1c710bd9eb72"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
socketpair(0x2b, 0x6, 0x4, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={<r6=>0x0, 0x62, "bc6eb239e1293190e75b42380f113d9d4b49a1ea9052160aba4ade9e7009f2fb25f925dca81d2b9e1a5076b52ca7811a9df040b06d3dbd18b3a584b1d52d849b30e08a31c0dc31f14334088c4eb8aac6bddf9d75bdb045b99e531d35b8a41a344c6d"}, &(0x7f00000003c0)=0x6a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000400)={r6, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}}, 0xd724, 0x7}, &(0x7f00000004c0)=0x90)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x9, <r8=>0x0}, 0x8)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x0, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x67}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x2, 0x0, 0x4, 0x0, 0x100, 0x8000000000000008}, @alu={0x7, 0x1, 0x2, 0x0, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3c2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa9c, 0x0, 0x0, 0x0, 0xa6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x66, &(0x7f0000000600)=""/102, 0x40f00, 0x40, '\x00', r3, @fallback=0x33, r7, 0x8, &(0x7f00000006c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xf, 0xc}, 0x10, r8, 0xffffffffffffffff, 0x6, &(0x7f00000007c0)=[0x1, 0x1, r9], &(0x7f0000000800)=[{0x1, 0x2, 0x0, 0xb}, {0x2, 0x5, 0x8, 0x7}, {0x5, 0x4, 0xd, 0x1}, {0x1, 0x1, 0x0, 0xc}, {0x4, 0x4, 0xb, 0x2}, {0x1, 0x5, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6c}, @void, @val={0xc, 0x99, {0x7, 0x61}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000a80)={@private=0xa010100, @multicast2, r3}, 0xc)
clock_gettime(0x0, &(0x7f0000000b00)={<r11=>0x0, <r12=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x3, 0x0, 0x80000000, {}, {r11, r12/1000+10000}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "4aa2556dde93a04b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000814}, 0x4)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r13, 0x84, 0x1c, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r1)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)={0x1d0, r14, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xec}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc8c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x61}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20040880}, 0x40001)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={&(0x7f0000000fc0)="8a9153e4b28e3c737d21d222a7ba4d84ba7f19728af83704f572bc663c6053c221ab5f16568749970f9fc2961f4edc289b9d8f82c62cc851256ea8e17d8acd00d439ed3907a0b1f8660e2baa362c3b8871c82bec3c95ea984829", &(0x7f0000001040)=""/103, &(0x7f00000010c0)="6c807e038026db176f1a4d53eb359aaf10c7272ca1ce0b36f56f188ecfc5a6f424cbb788125c57e92b2fca5152f9039b46b23acc3c8f3de111c158f82700f8b7b1df8caf3d7334232f82cd8661cd8315f657e72aeb12bd6fe224fccf910a474dcb087a6cc65cccad5c9b1e1d228e1fefb22e429ab0", &(0x7f0000001140)='o\'', 0x6, r9}, 0x38)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r15, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r16, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10800}, 0x90)

204.756282ms ago: executing program 1 (id=1098):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000400095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@mpls_newroute={0x1c, 0x18, 0x20, 0x70bd25, 0x25dfdbfe, {0x1c, 0x80, 0x80, 0x6, 0xfd, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@mpls_newroute={0x1c, 0x18, 0x20, 0x70bd25, 0x25dfdbfe, {0x1c, 0x80, 0x80, 0x6, 0xfd, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000180)="0a8146eac8f5c2e109ac5a047041a417f78fc6c9415f5cf4781c053315ac5e55978b279183c8cc99a235efaa708bf84cd8970289967917be657f717b5e99a3f593310ee5fa2a00f6c4bc48206297c40fd18f8eac37ed102d1608367809cebff74bc66c3fbd98815405a6118151b7717d7fecf01846f878a275b5a1422acadc9b9ede2b5e78c7a3e01121a365b55b61d67b9e0a17b917e1cb382cadc2f9505b6a413d0cf1617a3427097ce4f2a58c257dc6a779b702067c0d3dcbb2ca2f", 0xbd)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="35a0f183", @ANYRES16=r2, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c0000800500040000000000"], 0x2c}}, 0x0)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fdfff"}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fdfff"})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r11}, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) (async)
r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r14, &(0x7f0000000240), 0x100000000000007d)
close(r13)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711297000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711297000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r15, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r15, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

187.69614ms ago: executing program 0 (id=1099):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)=ANY=[@ANYBLOB='(\x00\b\x00', @ANYRES16=r2, @ANYBLOB="010009bd7000f9dbdf255500000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000400000048000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000a0}, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20)
r5 = socket$inet(0x2b, 0x801, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x5)
poll(&(0x7f0000000000)=[{r5, 0x6040}], 0x1, 0xfffffdf9)
r6 = socket$inet6(0xa, 0x6, 0x7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x9}, @in={0x2, 0x4e24, @multicast2}], 0x2c)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040), 0x4)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000840)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0)
unshare(0x24020400)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000030101010000000000000000000000044c00188008000140000000000800014000000a9107000340000013cb08000240000000030800024000000001080003400000000008000140000000010800014000000008080002400000000704000680"], 0x64}, 0x1, 0x0, 0x0, 0x20008005}, 0x48000)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @remote}, 'tunl0\x00'})
getsockname(r9, 0x0, &(0x7f0000000000))
socket$inet_tcp(0x2, 0x1, 0x0)

127.95978ms ago: executing program 1 (id=1100):
socket$inet6(0xa, 0x3, 0x9)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000000140), &(0x7f00000000c0)=0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ec, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000500)="d81f23ea39f73bbcebe83c129c0419e3bf058cdcf35029bd3ea9e44efde09eb95aafe496addd0621ed3732e321846f9fdb90788f95515b5186d21cbae580237f83cae5069b23b31c9c1fccb137907c0bcbfc3f0476a34a0eb19eb58e43d99fce34af9f4b96530046339d8af65a58591b9bd65a146f72951d607c58abec910f3824e04f8e118055b25e31c7757a08f1", &(0x7f00000005c0)=""/15}, 0x20)
close(r1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@security={'security\x00', 0xe, 0x4, 0x570, 0xffffffff, 0x1a8, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0xff], [0xffffff00, 0xff, 0x50fb2c5c49905cad, 0xffffff00], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x4, 0x2, 0x21}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0xa}}, @common=@srh1={{0x90}, {0x21, 0x0, 0x5, 0xc0, 0xcce, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff], [0xff, 0xff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 0x582, 0x200}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'bond0\x00'}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0x0, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'ip6tnl0\x00', {}, {0xff}, 0x33, 0x10, 0x3, 0x24}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "eac6"}}, @common=@dst={{0x48}, {0x7, 0x6, 0x1, [0xfff8, 0x2, 0x8, 0x8000, 0x9, 0x8, 0x26, 0xe5f, 0x0, 0xfffb, 0x1, 0x7b, 0xdb09, 0x5, 0x2, 0x8], 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xd, 0x5, 0x7fffffff, 0x1}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x1, 0xf9, 0x0, 0x2, @private1, @dev={0xfe, 0x80, '\x00', 0x16}, @remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 0x200}}, @common=@inet=@esp={{0x30}, {[0x4d3, 0x4d3]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x9, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005", 0x15}], 0x1}, 0x20040883)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x48)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)=r0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

52.005391ms ago: executing program 4 (id=1101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000d220dd4629e1170a89ef785ce70900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a580000fe060a0b04000000000000000002000000010063028008000240000000130501030024000000080001400000000d0900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x44011}, 0x20004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x11c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xf8, 0x2, 0x0, 0x1, [@typed={0xf4, 0xcb, 0x0, 0x0, @str='\x00\x1e\x95*\xe0&/9AR\xaf8\xd5\xc1Q\xcax\xac\t\xcaA\x12\xb4\xbc\"I\x00\xa4/%\x99\xd0\xc6\x9do5\x85\xae\x12\f\x0e\\\xf9\xbd\xe8zDof\xa6\x83wzj\x10As\xc4\xad\t\a\x92\v\xa4\xc3\xef[\xde\xd2m[\xc1\x88C\xba=9\x11\x98\xee\x8c\x05\xb4\xcd\r\x8d\xfb\x8dxz\xf7\x04\x00\x00\x00\x00\x00\x00\x00T\x1av\xa0&!\x1c\x8aM,\xa4\'\x99t\xb94\x14\xf3}.`R\xeeF49\xe4\x05\xa5\x17\x11\x80@o5\xaa\x82*\n\xcf\x16N\xea\xc8\xbe\xc9\x9e\xe64\x85\f\x19\xa85\xd9\x15x\xbcvnFR;C\xae-\x98\x01\xdf\xba{@\xbf\x04M\xb4\xe2be~\'\'\xba\xd0\xc7!\xff\xaa\xd0\xdf\x1c\xc1ddx\xa7\x9f\\\x11\x95J\'S\x9d\xaa\xf3\x81\xb2\xbf$|\x94miU\xd8\n\xecU\xfa`\xf0\xb6\x85\x8ex$\x1fu\xda\xe3\x91FJ\xdd\x95\xb0-\xcfA\xd2'}]}]}, 0x11c}}, 0xc000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4)
sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x150, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "f300b5976f83bbabc44a944f58922f854ee02fede83e66ab16"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "6a8c6d1f2f8539fbe8abc9f27d4dd1f3940024e9765675"}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x63a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20055}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='tlb_flush\x00', r6}, 0x10)
r7 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@bcast, @bcast, @netrom, @netrom, @rose, @netrom, @rose, @bcast]}, &(0x7f0000000140)=0x48)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x2c, r8, 0x18, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200540b4}, 0x800)
connect$netrom(r7, &(0x7f0000000180)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

18.134034ms ago: executing program 1 (id=1102):
r0 = socket$netlink(0x10, 0x3, 0x0)
gettid()
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x6}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x4000080)
ppoll(&(0x7f0000000080)=[{r0, 0xb}, {r0, 0x201}, {r0, 0x204}], 0x3, &(0x7f0000000100), &(0x7f0000000140)={[0x10001]}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000400028008001300", @ANYRES8=r0], 0x44}}, 0x4008040)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

0s ago: executing program 4 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000400)={'syz_tun\x00'})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bind$can_raw(r2, &(0x7f00000002c0)={0x1d, r9}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9f}, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x800}, 0x6e)
sendmmsg$unix(r13, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
readv(r12, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r15 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r16=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16], 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

 process `syz.0.71'.
[   82.058655][ T6292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.75'.
[   82.114806][ T6299] Bluetooth: MGMT ver 1.23
[   82.121354][ T6291] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   82.613761][ T6318] bridge0: port 3(gretap0) entered blocking state
[   82.649118][ T6318] bridge0: port 3(gretap0) entered disabled state
[   82.656391][ T6318] gretap0: entered allmulticast mode
[   82.690629][ T6318] gretap0: entered promiscuous mode
[   82.725684][ T6318] bridge0: port 3(gretap0) entered blocking state
[   82.732550][ T6318] bridge0: port 3(gretap0) entered forwarding state
[   82.749835][ T6320] vlan2: entered promiscuous mode
[   82.755055][ T6320] vlan2: entered allmulticast mode
[   82.771504][ T6286] delete_channel: no stack
[   82.778282][ T6320] hsr_slave_1: entered allmulticast mode
[   82.804449][ T6324] tun0: tun_chr_ioctl cmd 1074025675
[   82.805816][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[   82.811591][ T6324] tun0: persist disabled
[   82.859119][ T6323] tun0: tun_chr_ioctl cmd 1074025675
[   82.881818][ T6323] tun0: persist disabled
[   83.348778][ T6346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.89'.
[   83.373965][ T6349] syzkaller1: entered promiscuous mode
[   83.405965][ T6349] syzkaller1: entered allmulticast mode
[   83.664643][   T30] audit: type=1800 audit(1743504467.223:2): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.95" name="memory.events" dev="tmpfs" ino=110 res=0 errno=0
[   83.700633][   T30] audit: type=1804 audit(1743504467.253:3): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.95" name="/newroot/18/memory.events" dev="tmpfs" ino=110 res=1 errno=0
[   83.730597][   T30] audit: type=1804 audit(1743504467.253:4): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.95" name="/newroot/18/memory.events" dev="tmpfs" ino=110 res=1 errno=0
[   83.761666][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   83.781024][ T6367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.821159][ T6365] erspan1: entered promiscuous mode
[   83.826636][ T6365] erspan1: entered allmulticast mode
[   83.904650][ T6367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.935929][ T6373] warning: `syz.3.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.956066][ T6373] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   83.968085][ T6373] Cannot find set identified by id 0 to match
[   84.017118][ T6367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.128212][ T6367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.162411][ T6379] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   84.173255][ T6379] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   84.190222][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   84.237890][ T6367] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.259415][ T6367] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.274796][ T6367] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.293723][ T6367] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.487835][ T6393] __nla_validate_parse: 4 callbacks suppressed
[   84.487854][ T6393] netlink: 9 bytes leftover after parsing attributes in process `syz.2.101'.
[   84.517646][ T6393] gretap0: entered promiscuous mode
[   84.543868][ T6392] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   84.554048][ T6393] netlink: 5 bytes leftover after parsing attributes in process `syz.2.101'.
[   84.571678][ T6393] 0ªX¹¦D: renamed from gretap0
[   84.587858][ T6393] 0ªX¹¦D: left promiscuous mode
[   84.604054][ T6393] 0ªX¹¦D: entered allmulticast mode
[   84.642966][ T6393] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   84.690058][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'.
[   84.725691][ T6401] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.767843][ T6397] syzkaller1: entered promiscuous mode
[   84.774882][ T6397] syzkaller1: entered allmulticast mode
[   84.847519][ T6401] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.944203][ T6401] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.084846][ T6401] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.114592][ T6410] netlink: 'syz.2.108': attribute type 15 has an invalid length.
[   85.147428][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   85.199227][ T6410] Cannot find add_set index 0 as target
[   85.534782][ T6421] tipc: Started in network mode
[   85.539906][ T6421] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711
[   85.565940][ T6421] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   85.657937][ T6406] netlink: 'syz.0.107': attribute type 4 has an invalid length.
[   85.819917][ T6420] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[   86.035764][ T6433] netlink: 'syz.3.113': attribute type 10 has an invalid length.
[   86.055506][ T6433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.113'.
[   86.129172][ T6433] batman_adv: batadv0: Adding interface: virt_wifi0
[   86.176528][ T6433] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.222706][ T6433] batman_adv: batadv0: Interface activated: virt_wifi0
[   86.317659][ T6445] netlink: 'syz.3.116': attribute type 29 has an invalid length.
[   86.515321][ T6445] netlink: 'syz.3.116': attribute type 29 has an invalid length.
[   86.578781][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   86.598040][ T6447] IPv6: sit1: Disabled Multicast RS
[   86.613478][ T6447] sit1: entered allmulticast mode
[   86.762357][  T975] cfg80211: failed to load regulatory.db
[   87.050942][ T6442] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   87.487486][ T6471] netlink: 'syz.3.125': attribute type 11 has an invalid length.
[   87.496352][ T6471] netlink: 232 bytes leftover after parsing attributes in process `syz.3.125'.
[   87.785345][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'.
[   87.820654][ T6401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.837930][ T6401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.852948][ T6401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.855776][ T6485] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   87.875490][ T6401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.147737][ T6496] batadv_slave_1: entered promiscuous mode
[   88.292290][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'.
[   88.441306][ T6498] batadv_slave_1: left promiscuous mode
[   88.452085][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[   89.064397][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'.
[   89.064452][ T6532] netlink: 'syz.1.140': attribute type 58 has an invalid length.
[   89.265217][ T6543] netlink: 'syz.4.143': attribute type 21 has an invalid length.
[   89.358611][ T6543] netlink: 'syz.4.143': attribute type 6 has an invalid length.
[   89.386442][ T6545] veth1: entered promiscuous mode
[   89.393874][ T6545] veth1: left promiscuous mode
[   89.939650][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   89.968820][ T6539] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   90.217238][ T6581] IPv6: addrconf: prefix option has invalid lifetime
[   90.427840][ T6556] trusted_key: syz.4.148 sent an empty control message without MSG_MORE.
[   90.453184][ T6556] __nla_validate_parse: 2 callbacks suppressed
[   90.453203][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'.
[   90.473817][ T6594] Illegal XDP return value 2585499129 on prog  (id 91) dev N/A, expect packet loss!
[   90.485115][ T6556] netlink: 'syz.4.148': attribute type 4 has an invalid length.
[   90.502819][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.516860][ T6597] batadv_slave_1: entered promiscuous mode
[   90.865088][ T6613] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.948067][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'.
[   91.103722][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'.
[   91.317131][ T6645] netlink: 'syz.4.166': attribute type 1 has an invalid length.
[   91.328693][ T6645] netlink: 'syz.4.166': attribute type 3 has an invalid length.
[   91.360188][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.169'.
[   91.615330][ T6664] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   91.681364][ T6672] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20004
[   91.694649][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   91.727369][ T6677] netdevsim0: mtu less than device minimum
[   91.956656][ T6685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.968893][ T6688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.178'.
[   92.003793][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'.
[   92.014997][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'.
[   92.024644][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'.
[   92.105682][ T6696] netlink: 'syz.2.182': attribute type 2 has an invalid length.
[   92.138769][ T6685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.154908][ T6696] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.182'.
[   92.217444][ T6685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.269314][ T6702] pim6reg1: entered promiscuous mode
[   92.289564][ T6702] pim6reg1: entered allmulticast mode
[   92.300989][ T6685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.453450][ T6685] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.468294][ T6685] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.483013][ T6685] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.513358][ T6685] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.814188][ T6724] netlink: 'syz.1.192': attribute type 4 has an invalid length.
[   92.909195][ T6721] lo: entered allmulticast mode
[   92.916377][ T6721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.508265][ T6762] tipc: Started in network mode
[   93.521571][ T6762] tipc: Node identity ff, cluster identity 4711
[   93.558811][ T6762] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.717676][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   94.156380][ T6782] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   94.220226][ T6785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   94.265758][ T6782] smc: net device bond0 applied user defined pnetid S
[   94.346123][ T6790] pim6reg1: entered promiscuous mode
[   94.365974][ T6790] pim6reg1: entered allmulticast mode
[   94.492533][ T6806] xt_hashlimit: size too large, truncated to 1048576
[   94.506037][ T6806] xt_hashlimit: max too large, truncated to 1048576
[   94.557842][ T6809] batadv_slave_1: entered promiscuous mode
[   94.583704][ T6808] batadv_slave_1: left promiscuous mode
[   94.743747][ T6818] gre1: entered allmulticast mode
[   95.684118][ T6854] netlink: 'syz.1.230': attribute type 10 has an invalid length.
[   95.749230][ T6854] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.935932][ T6866] raw_sendmsg: syz.4.234 forgot to set AF_INET. Fix it!
[   95.948760][ T6864] __nla_validate_parse: 15 callbacks suppressed
[   95.948781][ T6864] netlink: 160 bytes leftover after parsing attributes in process `syz.2.232'.
[   96.030128][ T6869] netlink: 160 bytes leftover after parsing attributes in process `syz.2.232'.
[   96.206106][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'.
[   96.541253][ T6868] netlink: 'syz.3.235': attribute type 4 has an invalid length.
[   96.760050][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'.
[   96.808372][ T6912] vlan2: entered allmulticast mode
[   96.817607][ T6912] bond0: entered allmulticast mode
[   96.842423][ T6912] bond_slave_0: entered allmulticast mode
[   96.848355][ T6912] bond_slave_1: entered allmulticast mode
[   96.866040][ T6912] bridge0: port 4(vlan2) entered blocking state
[   96.914149][ T6912] bridge0: port 4(vlan2) entered disabled state
[   96.946754][ T6912] vlan2: entered promiscuous mode
[   96.952442][ T6912] bond0: entered promiscuous mode
[   96.957707][ T6912] bond_slave_0: entered promiscuous mode
[   96.967952][ T6912] bond_slave_1: entered promiscuous mode
[   96.989617][ T6912] bridge0: port 4(vlan2) entered blocking state
[   96.989891][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'.
[   96.996259][ T6912] bridge0: port 4(vlan2) entered forwarding state
[   97.013106][ T6918] netlink: 'syz.0.245': attribute type 5 has an invalid length.
[   97.028301][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'.
[   97.039711][ T6922] netlink: 'syz.2.247': attribute type 7 has an invalid length.
[   97.151199][ T6928] x_tables: ip6_tables: mh match: only valid for protocol 135
[   97.483461][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.255'.
[   97.582541][ T6956] IPv6: sit1: Disabled Multicast RS
[   97.604572][ T6956] sit1: entered allmulticast mode
[   97.746509][ T6954] netlink: set zone limit has 4 unknown bytes
[   97.881222][ T6971] ipip1: entered promiscuous mode
[   98.092375][ T6986] xt_hashlimit: overflow, try lower: 1125899906842624/8
[   98.323179][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[   98.354441][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   98.368310][ T6996] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   98.600800][ T7012] netlink: 96 bytes leftover after parsing attributes in process `syz.1.273'.
[   98.699745][ T7022] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[   98.827553][ T7027] xt_TPROXY: Can be used only with -p tcp or -p udp
[   99.106563][ T7049] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   99.107425][ T7045] netlink: 'syz.4.283': attribute type 7 has an invalid length.
[   99.370472][ T7068] netlink: 'syz.4.289': attribute type 4 has an invalid length.
[  100.170496][ T7065] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  100.401466][ T7099] netlink: 'syz.1.297': attribute type 1 has an invalid length.
[  100.565459][ T7099] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  101.210184][ T7112] __nla_validate_parse: 7 callbacks suppressed
[  101.210207][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'.
[  101.280940][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'.
[  101.302264][ T7114] bridge0: port 3(netdevsim2) entered blocking state
[  101.309433][ T7114] bridge0: port 3(netdevsim2) entered disabled state
[  101.316350][ T7114] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  101.348673][ T7114] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  101.379438][ T5847] Bluetooth: hci1: command 0x0401 tx timeout
[  101.383938][ T7114] bridge0: port 3(netdevsim2) entered blocking state
[  101.392302][ T7114] bridge0: port 3(netdevsim2) entered forwarding state
[  101.475309][ T7117] netlink: 'syz.4.301': attribute type 11 has an invalid length.
[  101.660346][ T7122] af_packet: tpacket_rcv: packet too big, clamped from 65535 to 3952. macoff=96
[  101.702714][ T7137] x_tables: duplicate underflow at hook 2
[  101.725785][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.308'.
[  102.097151][ T7138] netlink: 88 bytes leftover after parsing attributes in process `syz.2.305'.
[  102.156227][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'.
[  102.207437][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'.
[  102.268531][ T7138] netlink: 80 bytes leftover after parsing attributes in process `syz.2.305'.
[  102.861070][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'.
[  102.933337][ T7138] x_tables: duplicate entry at hook 2
[  103.319179][ T7202] netlink: 'syz.4.323': attribute type 5 has an invalid length.
[  103.402786][ T7202] : entered promiscuous mode
[  103.491575][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'.
[  103.531199][ T7217] netlink: 108 bytes leftover after parsing attributes in process `syz.0.327'.
[  103.757321][ T7227] ieee802154 phy0 wpan0: encryption failed: -22
[  104.097407][ T7242] nftables ruleset with unbound chain
[  104.281874][ T7248] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[  104.298820][ T7248] netlink: 'syz.2.335': attribute type 2 has an invalid length.
[  104.323851][ T7248] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[  104.363228][ T7248] netlink: 'syz.2.335': attribute type 2 has an invalid length.
[  104.431089][ T7252] netlink: 'syz.1.336': attribute type 1 has an invalid length.
[  104.528967][ T7260] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  104.533916][ T7252] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.537428][ T7260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.623771][ T7257] gretap1: entered promiscuous mode
[  104.667219][ T7257] bond1: (slave gretap1): making interface the new active one
[  104.683833][ T7257] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  106.125592][ T7344] openvswitch: netlink: Actions may not be safe on all matching packets
[  106.199766][ T7351] pimreg0: tun_chr_ioctl cmd 1074025673
[  106.227015][ T7350] bridge0: entered promiscuous mode
[  106.260236][ T7350] ip6gretap0: entered promiscuous mode
[  106.498838][ T7365] xt_TCPMSS: Only works on TCP SYN packets
[  106.521527][ T7372] x_tables: duplicate underflow at hook 3
[  106.570687][ T7365] __nla_validate_parse: 13 callbacks suppressed
[  106.570709][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.365'.
[  106.781051][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.369'.
[  106.811390][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.369'.
[  106.843024][ T7389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.371'.
[  106.893001][ T7385] IPVS: length: 24 != 14495514648
[  107.067089][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'.
[  107.198352][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.373'.
[  107.249352][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'.
[  107.328385][ T7410] can: request_module (can-proto-5) failed.
[  107.557369][ T7423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.378'.
[  107.755079][ T7431] netlink: 14 bytes leftover after parsing attributes in process `syz.2.380'.
[  107.765139][ T7431] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  107.933714][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'.
[  107.993777][ T7440] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x5
[  108.157412][ T7454] bond_slave_0: entered allmulticast mode
[  108.232064][ T7460] tun0: tun_chr_ioctl cmd 2148553947
[  108.500840][   T30] audit: type=1804 audit(1743504492.053:5): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.394" name="/newroot/82/cgroup.controllers" dev="tmpfs" ino=439 res=1 errno=0
[  108.526812][ T7472] xt_hashlimit: size too large, truncated to 1048576
[  108.592114][   T30] audit: type=1800 audit(1743504492.053:6): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.394" name="cgroup.controllers" dev="tmpfs" ino=439 res=0 errno=0
[  108.922865][ T7494] netlink: 'syz.1.402': attribute type 18 has an invalid length.
[  109.359863][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.388220][ T7513] x_tables: duplicate underflow at hook 2
[  110.068157][ T7547] netlink: 'syz.2.415': attribute type 4 has an invalid length.
[  110.186577][ T7558] netlink: 'syz.1.419': attribute type 2 has an invalid length.
[  110.833374][ T7594] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !åÀØ¢
…D£øUDŒw˜}�zR3âëp(@Oš>Æ
[  111.049369][ T7604] syzkaller1: entered promiscuous mode
[  111.074719][ T7604] syzkaller1: entered allmulticast mode
[  111.545387][ T7629] syzkaller1: entered promiscuous mode
[  111.574442][ T7629] syzkaller1: entered allmulticast mode
[  111.611872][ T7629] __nla_validate_parse: 8 callbacks suppressed
[  111.611891][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'.
[  111.709443][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'.
[  111.849911][ T7649] netlink: 'syz.4.437': attribute type 1 has an invalid length.
[  111.937072][ T7649] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.306277][ T7681] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  112.367735][ T7681] tap0: tun_chr_ioctl cmd 1074025677
[  112.390010][ T7681] tap0: linktype set to 0
[  112.638850][ T7699] lo: entered allmulticast mode
[  112.650659][ T7699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.819216][ T7699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.857838][ T7708] netlink: 'syz.4.450': attribute type 4 has an invalid length.
[  112.898294][ T7699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.912992][ T7714] netlink: 'syz.4.450': attribute type 4 has an invalid length.
[  112.990346][ T7699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.143998][ T7699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.159356][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'.
[  113.426129][ T7699] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.546359][ T7699] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.587127][ T7699] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.642021][ T7699] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.701118][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  113.731713][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  113.802876][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  113.873911][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  113.886445][ T7760] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[  113.923148][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  113.941580][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'.
[  113.956866][ T7765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.462'.
[  114.020646][ T7773] lo: left allmulticast mode
[  114.115862][ T7773] 0ªX¹¦D: left allmulticast mode
[  114.524438][ T7773] bond_slave_0: left allmulticast mode
[  114.653430][ T7773] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.662224][ T7773] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.671092][ T7773] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.679716][ T7773] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.706489][ T7773] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  115.243893][ T7832] netlink: zone id is out of range
[  115.263439][ T7832] netlink: zone id is out of range
[  115.279819][ T7832] netlink: zone id is out of range
[  115.307203][ T7832] netlink: zone id is out of range
[  115.363908][ T7832] netlink: zone id is out of range
[  115.406289][ T7832] netlink: zone id is out of range
[  115.438388][ T7832] netlink: zone id is out of range
[  115.448925][ T7832] netlink: zone id is out of range
[  115.845288][ T7813] netlink: 'syz.4.474': attribute type 1 has an invalid length.
[  116.504665][ T7860] wireguard0: entered promiscuous mode
[  116.535374][ T7860] wireguard0: entered allmulticast mode
[  116.557230][ T7862] gre1: entered allmulticast mode
[  116.588311][ T7868] 8021q: VLANs not supported on vxcan1
[  116.780448][ T7878] netlink: 'syz.4.487': attribute type 10 has an invalid length.
[  116.794047][ T7878] bridge0: port 3(netdevsim2) entered disabled state
[  116.800932][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.809235][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.876401][ T7878] bridge0: port 3(netdevsim2) entered blocking state
[  116.883694][ T7878] bridge0: port 3(netdevsim2) entered forwarding state
[  116.890856][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.897986][ T7878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.905452][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.912616][ T7878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.929787][ T7881] __nla_validate_parse: 73 callbacks suppressed
[  116.929806][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'.
[  116.951380][ T7878] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  117.007163][ T7886] xt_TPROXY: Can be used only with -p tcp or -p udp
[  117.258427][ T7900] sctp: [Deprecated]: syz.3.493 (pid 7900) Use of int in maxseg socket option.
[  117.258427][ T7900] Use struct sctp_assoc_value instead
[  118.007206][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  118.052299][ T7927] net_ratelimit: 338 callbacks suppressed
[  118.052319][ T7927] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[  118.102280][ T7895] syz.1.492: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  118.123064][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.1.492 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  118.123096][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.123114][ T7895] Call Trace:
[  118.123122][ T7895]  <TASK>
[  118.123130][ T7895]  dump_stack_lvl+0x241/0x360
[  118.123174][ T7895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.123202][ T7895]  ? __pfx__printk+0x10/0x10
[  118.123227][ T7895]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  118.123254][ T7895]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  118.123278][ T7895]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  118.123305][ T7895]  warn_alloc+0x27c/0x410
[  118.123329][ T7895]  ? __pfx_warn_alloc+0x10/0x10
[  118.123354][ T7895]  ? hash_ipportnet_create+0x356/0x1040
[  118.123380][ T7895]  ? __get_vm_area_node+0x1c8/0x2d0
[  118.123410][ T7895]  ? __get_vm_area_node+0x25c/0x2d0
[  118.123445][ T7895]  __vmalloc_node_range_noprof+0x634/0x1390
[  118.123486][ T7895]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  118.123507][ T7895]  ? __kasan_kmalloc_large+0x1a/0xa0
[  118.123536][ T7895]  ? hash_ipportnet_create+0x356/0x1040
[  118.123562][ T7895]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  118.123592][ T7895]  ? hash_ipportnet_create+0x356/0x1040
[  118.123616][ T7895]  ? hash_ipportnet_create+0x356/0x1040
[  118.123641][ T7895]  ? hash_ipportnet_create+0x2fa/0x1040
[  118.123669][ T7895]  hash_ipportnet_create+0x356/0x1040
[  118.123703][ T7895]  ? __pfx_hash_ipportnet_create+0x10/0x10
[  118.123729][ T7895]  ip_set_create+0xa7d/0x1960
[  118.123757][ T7895]  ? ip_set_create+0x48c/0x1960
[  118.123786][ T7895]  ? __pfx_ip_set_create+0x10/0x10
[  118.123839][ T7895]  ? nfnetlink_rcv_msg+0x227/0x1190
[  118.123865][ T7895]  nfnetlink_rcv_msg+0xbf7/0x1190
[  118.123891][ T7895]  ? nfnetlink_rcv_msg+0x227/0x1190
[  118.123933][ T7895]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  118.123958][ T7895]  ? stack_trace_save+0x11a/0x1d0
[  118.123999][ T7895]  ? dev_hard_start_xmit+0x2d4/0x840
[  118.124025][ T7895]  ? __dev_queue_xmit+0x1b80/0x3f60
[  118.124052][ T7895]  ? __netlink_deliver_tap+0x561/0x7f0
[  118.124072][ T7895]  ? netlink_deliver_tap+0x19d/0x1b0
[  118.124091][ T7895]  ? netlink_unicast+0x7c6/0x9a0
[  118.124119][ T7895]  ? netlink_sendmsg+0x8c3/0xcd0
[  118.124138][ T7895]  ? __sock_sendmsg+0x221/0x270
[  118.124156][ T7895]  ? ____sys_sendmsg+0x523/0x860
[  118.124180][ T7895]  ? __sys_sendmsg+0x271/0x360
[  118.124216][ T7895]  netlink_rcv_skb+0x208/0x480
[  118.124237][ T7895]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  118.124265][ T7895]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.124295][ T7895]  ? apparmor_capable+0x13b/0x1b0
[  118.124317][ T7895]  ? bpf_lsm_capable+0x9/0x10
[  118.124346][ T7895]  ? security_capable+0x7e/0x2d0
[  118.124376][ T7895]  nfnetlink_rcv+0x296/0x28f0
[  118.124404][ T7895]  ? __dev_queue_xmit+0x2f9/0x3f60
[  118.124432][ T7895]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  118.124466][ T7895]  ? __dev_queue_xmit+0x2f9/0x3f60
[  118.124494][ T7895]  ? __dev_queue_xmit+0x2f9/0x3f60
[  118.124523][ T7895]  ? __dev_queue_xmit+0x1780/0x3f60
[  118.124549][ T7895]  ? kasan_save_track+0x3f/0x80
[  118.124570][ T7895]  ? __kasan_slab_alloc+0x66/0x80
[  118.124598][ T7895]  ? do_syscall_64+0xf3/0x230
[  118.124629][ T7895]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  118.124653][ T7895]  ? __dev_queue_xmit+0x2f9/0x3f60
[  118.124684][ T7895]  ? __pfx___dev_queue_xmit+0x10/0x10
[  118.124725][ T7895]  ? ref_tracker_free+0x63e/0x7e0
[  118.124757][ T7895]  ? __asan_memcpy+0x40/0x70
[  118.124777][ T7895]  ? __pfx_ref_tracker_free+0x10/0x10
[  118.124826][ T7895]  ? skb_clone+0x240/0x390
[  118.124862][ T7895]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.124882][ T7895]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.124904][ T7895]  netlink_unicast+0x7f8/0x9a0
[  118.124941][ T7895]  ? __pfx_netlink_unicast+0x10/0x10
[  118.124973][ T7895]  ? skb_put+0x114/0x1f0
[  118.125001][ T7895]  netlink_sendmsg+0x8c3/0xcd0
[  118.125031][ T7895]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.125055][ T7895]  ? aa_sock_msg_perm+0x91/0x160
[  118.125086][ T7895]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.125106][ T7895]  __sock_sendmsg+0x221/0x270
[  118.125128][ T7895]  ____sys_sendmsg+0x523/0x860
[  118.125161][ T7895]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.125186][ T7895]  ? __fget_files+0x2a/0x420
[  118.125236][ T7895]  ? __fget_files+0x2a/0x420
[  118.125271][ T7895]  __sys_sendmsg+0x271/0x360
[  118.125302][ T7895]  ? __pfx___sys_sendmsg+0x10/0x10
[  118.125368][ T7895]  ? do_syscall_64+0xb6/0x230
[  118.125400][ T7895]  do_syscall_64+0xf3/0x230
[  118.125429][ T7895]  ? clear_bhb_loop+0x45/0xa0
[  118.125453][ T7895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.125480][ T7895] RIP: 0033:0x7f3cccd8d169
[  118.125504][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.125523][ T7895] RSP: 002b:00007f3ccdb24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.125546][ T7895] RAX: ffffffffffffffda RBX: 00007f3cccfa5fa0 RCX: 00007f3cccd8d169
[  118.125563][ T7895] RDX: 0000000000010000 RSI: 00002000000002c0 RDI: 0000000000000003
[  118.125576][ T7895] RBP: 00007f3ccce0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  118.125590][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.125602][ T7895] R13: 0000000000000000 R14: 00007f3cccfa5fa0 R15: 00007ffef7debe68
[  118.125628][ T7895]  </TASK>
[  118.125691][ T7895] Mem-Info:
[  118.294921][ T7932] vlan3: entered promiscuous mode
[  118.307190][ T7895] active_anon:4999 inactive_anon:0 isolated_anon:0
[  118.307190][ T7895]  active_file:1430 inactive_file:38312 isolated_file:0
[  118.307190][ T7895]  unevictable:768 dirty:207 writeback:0
[  118.307190][ T7895]  slab_reclaimable:9997 slab_unreclaimable:102120
[  118.307190][ T7895]  mapped:30821 shmem:1444 pagetables:926
[  118.307190][ T7895]  sec_pagetables:0 bounce:0
[  118.307190][ T7895]  kernel_misc_reclaimable:0
[  118.307190][ T7895]  free:1338575 free_pcp:688 free_cma:0
[  118.342929][ T7932] vlan3: entered allmulticast mode
[  118.378626][ T7895] Node 0 active_anon:19996kB inactive_anon:0kB active_file:5720kB inactive_file:153172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123284kB dirty:828kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11032kB pagetables:3604kB sec_pagetables:0kB all_unreclaimable? no
[  118.426712][ T7932] hsr_slave_1: entered allmulticast mode
[  118.458686][ T7895] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  118.536699][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'.
[  118.544095][ T7895] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  118.861475][ T7895] lowmem_reserve[]: 0 2490 2490 2490 2490
[  118.867346][ T7895] Node 0 DMA32 free:1435704kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19948kB inactive_anon:0kB active_file:5720kB inactive_file:152860kB unevictable:1536kB writepending:828kB present:3129332kB managed:2550096kB mlocked:0kB bounce:0kB free_pcp:876kB local_pcp:876kB free_cma:0kB
[  118.908000][ T7895] lowmem_reserve[]: 0 0 0 0 0
[  118.923200][ T7895] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  118.951200][ T7895] lowmem_reserve[]: 0 0 0 0 0
[  118.956142][ T7895] Node 1 Normal free:3905244kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  118.988983][ T7895] lowmem_reserve[]: 0 0 0 0 0
[  118.994052][ T7895] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  119.008141][ T7895] Node 0 DMA32: 26*4kB (UME) 105*8kB (UME) 118*16kB (UM) 87*32kB (UME) 112*64kB (UME) 44*128kB (UM) 33*256kB (UME) 33*512kB (UME) 18*1024kB (UME) 
[  119.011652][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'.
[  119.037512][ T7895] 12*2048kB (UME) 329*4096kB (UM) = 1434352kB
[  119.044060][ T7895] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  119.056744][ T7895] Node 1 Normal: 204*4kB (UE) 57*8kB (UME) 37*16kB (UME) 202*32kB (UME) 98*64kB (UME) 30*128kB (UME) 11*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3905288kB
[  119.108644][ T7895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  119.157963][ T7895] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  119.203040][ T7895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  119.213367][ T7895] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  119.231655][ T7895] 41189 total pagecache pages
[  119.236406][ T7895] 0 pages in swap cache
[  119.246927][ T7895] Free swap  = 124996kB
[  119.278916][ T7895] Total swap = 124996kB
[  119.283142][ T7895] 2097051 pages RAM
[  119.286975][ T7895] 0 pages HighMem/MovableOnly
[  119.304441][ T7895] 427805 pages reserved
[  119.310484][ T7895] 0 pages cma reserved
[  119.371394][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'.
[  119.439912][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'.
[  119.468112][ T7955] netlink: 'syz.4.510': attribute type 30 has an invalid length.
[  119.522376][ T7955] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.531555][ T7955] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.540816][ T7955] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.549905][ T7955] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.849311][ T7974] netlink: 64 bytes leftover after parsing attributes in process `syz.4.514'.
[  119.910137][ T7974] xt_hashlimit: size too large, truncated to 1048576
[  119.923464][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'.
[  119.934430][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'.
[  120.200213][ T7984] batadv_slave_1: entered promiscuous mode
[  120.208098][ T7982] batadv_slave_1: left promiscuous mode
[  120.526509][ T5888] IPVS: starting estimator thread 0...
[  120.644127][ T7997] IPVS: using max 29 ests per chain, 69600 per kthread
[  120.809401][ T7981] delete_channel: no stack
[  120.940471][ T8015] blkio.reset_stats is deprecated
[  121.243960][ T8028] netlink: 'syz.1.531': attribute type 10 has an invalid length.
[  121.252106][ T8028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'.
[  121.346116][ T7850] Set syz1 is full, maxelem 65536 reached
[  121.544910][ T8028] team0: Port device geneve0 added
[  121.999408][ T8077] netlink: 'syz.3.540': attribute type 3 has an invalid length.
[  122.014728][ T8087] tipc: Started in network mode
[  122.019874][ T8087] tipc: Node identity 7f000001, cluster identity 4711
[  122.028500][ T8087] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.040589][ T8087] tipc: Enabled bearer <udp:sy>, priority 1
[  122.160067][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.298598][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.438539][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.579246][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.682574][ T8120] __nla_validate_parse: 1 callbacks suppressed
[  122.682593][ T8120] netlink: 64 bytes leftover after parsing attributes in process `syz.1.552'.
[  122.718649][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.743154][ T8127] netlink: 52 bytes leftover after parsing attributes in process `syz.4.554'.
[  122.858614][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  122.998796][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  123.037377][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[  123.046395][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.556'.
[  123.071358][ T8133] Cannot find map_set index 0 as target
[  123.091642][ T8131] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  123.115978][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'.
[  123.139136][ T5888] tipc: Node number set to 2130706433
[  123.159349][ T8131] gretap0: entered promiscuous mode
[  123.278536][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  123.445965][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'.
[  123.462501][ T8161] netlink: 'syz.4.563': attribute type 1 has an invalid length.
[  123.474369][ T8161] netlink: 'syz.4.563': attribute type 2 has an invalid length.
[  123.507427][ T8161] netlink: 80 bytes leftover after parsing attributes in process `syz.4.563'.
[  123.548679][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  123.722557][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'.
[  123.725599][ T8176] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.569'.
[  123.749658][ T8176] openvswitch: netlink: Message has 8 unknown bytes.
[  123.764436][ T8179] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.569'.
[  123.775541][ T8179] openvswitch: netlink: Message has 8 unknown bytes.
[  123.940459][ T8183] ip6gre1: entered allmulticast mode
[  124.078923][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  124.260831][ T8199] wg1: entered promiscuous mode
[  124.268041][ T8199] wg1: entered allmulticast mode
[  124.561500][ T8207] tipc: Started in network mode
[  124.566448][ T8207] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  124.600780][ T8207] tipc: Enabled bearer <udp:syz0>, priority 1
[  124.682813][ T8212] nr0: entered allmulticast mode
[  124.704521][ T8221] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.778234][ T8225] xt_bpf: check failed: parse error
[  125.139328][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  125.384438][ T8247] netlink: 'syz.0.587': attribute type 10 has an invalid length.
[  125.515434][ T8247] team0: Port device geneve0 added
[  125.729190][ T5887] tipc: Node number set to 4269801491
[  126.178630][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  126.281440][ T8272] IPVS: Error connecting to the multicast addr
[  127.112867][ T8323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  127.155812][ T8325] ipt_ECN: cannot use operation on non-tcp rule
[  127.219241][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  127.404087][ T8322] batadv0: entered promiscuous mode
[  127.429209][ T8322] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  127.448058][ T8322] batadv0: left promiscuous mode
[  127.535163][ T8306] sch_fq: defrate 2048 ignored.
[  127.579346][   T24] IPVS: starting estimator thread 0...
[  127.586352][ T8290] x_tables: duplicate underflow at hook 3
[  127.687619][ T8336] IPVS: using max 29 ests per chain, 69600 per kthread
[  127.712139][ T8338] netlink: 'syz.1.607': attribute type 1 has an invalid length.
[  127.748759][ T8338] netlink: 'syz.1.607': attribute type 4 has an invalid length.
[  127.756467][ T8338] __nla_validate_parse: 14 callbacks suppressed
[  127.756481][ T8338] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.607'.
[  128.152063][ T8353] netlink: 9 bytes leftover after parsing attributes in process `syz.1.611'.
[  128.164125][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  128.174986][ T8353] 0·: renamed from hsr0 (while UP)
[  128.214156][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  128.258527][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  128.260232][ T8353] 0·: entered allmulticast mode
[  128.310541][ T8353] hsr_slave_0: entered allmulticast mode
[  128.331428][ T8353] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  128.461879][ T8045] IPVS: stop unused estimator thread 0...
[  128.608853][ T8380] netlink: 104 bytes leftover after parsing attributes in process `syz.3.616'.
[  128.631188][ T8380] netlink: 'syz.3.616': attribute type 8 has an invalid length.
[  128.710640][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.617'.
[  128.960577][ T8400] netlink: 176 bytes leftover after parsing attributes in process `syz.4.621'.
[  129.085993][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'.
[  129.234819][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'.
[  129.276887][ T8419] netlink: 96 bytes leftover after parsing attributes in process `syz.3.625'.
[  129.298520][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  129.775001][ T8433] wireguard0: entered promiscuous mode
[  129.780978][ T8433] wireguard0: entered allmulticast mode
[  130.148137][ T8455] syz.3.639 (8455) used obsolete PPPIOCDETACH ioctl
[  130.159844][ T8455] netlink: 'syz.3.639': attribute type 1 has an invalid length.
[  130.338583][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  130.427700][ T8469] veth1_macvtap: left promiscuous mode
[  130.650285][ T8478] syzkaller0: entered promiscuous mode
[  130.655940][ T8478] syzkaller0: entered allmulticast mode
[  130.819088][ T8496] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[  131.379623][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  132.117092][ T8513] macvlan2: entered promiscuous mode
[  132.128683][ T8513] bond0: entered promiscuous mode
[  132.144235][ T8513] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  132.223736][ T8518] openvswitch: netlink: Message has 8 unknown bytes.
[  132.293478][ T8518] netlink: 'syz.1.656': attribute type 12 has an invalid length.
[  132.418591][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  132.431323][ T8525] wireguard0: left promiscuous mode
[  132.451231][ T8525] wireguard0: left allmulticast mode
[  132.467141][ T8525] gretap0: left promiscuous mode
[  132.486702][ T8525] bond0: left promiscuous mode
[  132.495162][ T8525] macvlan2: left promiscuous mode
[  132.821720][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.828973][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.423673][ T8543] __nla_validate_parse: 11 callbacks suppressed
[  133.423693][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'.
[  133.460881][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  133.556300][ T8547] batadv_slave_1: entered promiscuous mode
[  133.562349][ T8547] batadv_slave_1: entered allmulticast mode
[  133.568827][ T8547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.580796][ T8547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.594348][ T8551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'.
[  133.614916][ T8547] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  133.685122][ T8551] netlink: 'syz.2.667': attribute type 10 has an invalid length.
[  133.717604][ T8551] bond0: (slave wlan1): refused to change device type
[  133.736101][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'.
[  133.791969][ T8559] netlink: 908 bytes leftover after parsing attributes in process `syz.4.670'.
[  134.113283][ T8568] netlink: 'syz.0.672': attribute type 13 has an invalid length.
[  134.340373][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[  134.401710][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'.
[  134.432785][ T8585] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  134.464061][ T8585] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  134.498599][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  134.562081][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'.
[  134.719592][ T8602] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  134.728843][ T8602] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  134.831246][ T8608] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  134.840683][ T8608] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1
[  135.538736][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  135.806031][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  135.815057][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  135.825112][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  135.838307][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  135.847526][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.021537][ T8630] can: request_module (can-proto-0) failed.
[  136.041317][ T1147] bond0 (unregistering): Released all slaves
[  136.054497][ T1147] bond1 (unregistering): Released all slaves
[  136.064636][ T1147] bond2 (unregistering): Released all slaves
[  136.160793][ T1147] tipc: Left network mode
[  136.237029][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  136.245995][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  136.321661][ T8643] vlan2: entered promiscuous mode
[  136.327554][ T8643] macvtap0: entered promiscuous mode
[  136.550929][ T1147] hsr_slave_0: left promiscuous mode
[  136.567652][ T1147] hsr_slave_1: left promiscuous mode
[  136.581111][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  136.736694][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'.
[  137.413738][ T8674] netlink: 'syz.1.704': attribute type 1 has an invalid length.
[  137.430664][ T8677] netlink: 'syz.4.706': attribute type 39 has an invalid length.
[  137.566197][ T8674] bond2: entered promiscuous mode
[  137.572625][ T8674] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.618519][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  137.686180][ T8637] chnl_net:caif_netlink_parms(): no params data found
[  137.796768][ T8685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.940289][ T5847] Bluetooth: hci0: command tx timeout
[  137.969988][ T8685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.143294][ T8685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.196282][ T8705] sctp: [Deprecated]: syz.3.712 (pid 8705) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.196282][ T8705] Use struct sctp_sack_info instead
[  138.216906][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.230344][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.237686][ T8637] bridge_slave_0: entered allmulticast mode
[  138.252015][ T8637] bridge_slave_0: entered promiscuous mode
[  138.337771][ T8685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.356990][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.373607][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.381526][ T8637] bridge_slave_1: entered allmulticast mode
[  138.394543][ T8637] bridge_slave_1: entered promiscuous mode
[  138.400860][ T8713] Bluetooth: MGMT ver 1.23
[  138.406460][ T8712] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  138.464729][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.474993][ T8717] __nla_validate_parse: 5 callbacks suppressed
[  138.475009][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'.
[  138.517658][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.718'.
[  138.537666][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'.
[  138.554870][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.639873][ T8637] team0: Port device team_slave_0 added
[  138.648185][ T8637] team0: Port device team_slave_1 added
[  138.658561][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  138.687657][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'.
[  138.723031][ T8685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.757452][ T8731] wireguard0: entered promiscuous mode
[  138.763543][ T8731] wireguard0: entered allmulticast mode
[  138.855358][ T8685] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.881355][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.888492][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.919369][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.941451][ T8685] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.963007][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.976971][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.020391][ T8739] netlink: 'syz.4.723': attribute type 9 has an invalid length.
[  139.027530][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.066667][ T8685] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.222766][ T8749] veth1_to_team: entered promiscuous mode
[  139.262167][ T8637] hsr_slave_0: entered promiscuous mode
[  139.268703][ T8637] hsr_slave_1: entered promiscuous mode
[  139.276452][ T8637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.299014][ T8637] Cannot create hsr debugfs directory
[  139.409780][ T8761] syz_tun: entered allmulticast mode
[  139.509231][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'.
[  139.583943][ T8760] syz_tun: left allmulticast mode
[  139.666695][ T8779] netlink: 'syz.0.735': attribute type 1 has an invalid length.
[  139.679236][ T8779] netlink: 'syz.0.735': attribute type 4 has an invalid length.
[  139.687115][ T8779] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.735'.
[  139.698570][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  139.813783][ T8784] openvswitch: netlink: Actions may not be safe on all matching packets
[  139.901369][ T8637] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  139.913900][ T8637] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  139.924503][ T8637] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  139.935119][ T8637] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  140.040995][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.080615][ T8637] 8021q: adding VLAN 0 to HW filter on device team0
[  140.101199][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.108336][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.122998][ T8790] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.141194][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.148294][ T8034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.167877][ T8790] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.211650][ T8637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.227050][ T8790] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.270088][ T8790] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.405331][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.479813][ T8637] veth0_vlan: entered promiscuous mode
[  140.496569][ T8637] veth1_vlan: entered promiscuous mode
[  140.506587][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  140.556768][ T8637] veth0_macvtap: entered promiscuous mode
[  140.566060][ T8637] veth1_macvtap: entered promiscuous mode
[  140.584378][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.601616][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.611698][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.623536][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.633909][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.644640][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.656762][ T8805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.743'.
[  140.659968][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.677690][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.692102][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.702060][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.733474][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.738619][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  140.769503][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.795911][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.813493][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.825827][ T8808] netlink: 'syz.3.747': attribute type 1 has an invalid length.
[  140.846295][ T8637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.856767][ T8637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.875763][ T8815] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  140.880490][ T8637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.892582][ T8637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.034946][ T8820] netlink: 'syz.1.749': attribute type 14 has an invalid length.
[  141.063196][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.105983][ T8035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.127754][ T8035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.162702][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.177173][ T8820] syz.1.749 (8820) used greatest stack depth: 18040 bytes left
[  141.187453][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.217393][ T8827] xt_bpf: check failed: parse error
[  141.238033][ T8827] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001
[  141.340196][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'.
[  141.499857][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'.
[  141.644829][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'.
[  141.778816][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  141.786557][ T8860] atomic_op ffff8880769aa998 conn xmit_atomic 0000000000000000
[  141.931216][ T8868] FAULT_INJECTION: forcing a failure.
[  141.931216][ T8868] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  141.948107][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.4.761 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  141.948134][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  141.948145][ T8868] Call Trace:
[  141.948151][ T8868]  <TASK>
[  141.948159][ T8868]  dump_stack_lvl+0x241/0x360
[  141.948190][ T8868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.948215][ T8868]  ? __pfx__printk+0x10/0x10
[  141.948247][ T8868]  should_fail_ex+0x424/0x570
[  141.948278][ T8868]  _copy_from_user+0x2d/0xb0
[  141.948302][ T8868]  sctp_getsockopt_scheduler_value+0xdd/0x510
[  141.948327][ T8868]  ? __pfx_sctp_getsockopt_scheduler_value+0x10/0x10
[  141.948355][ T8868]  sctp_getsockopt+0x749/0xbb0
[  141.948375][ T8868]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  141.948398][ T8868]  do_sock_getsockopt+0x391/0x740
[  141.948426][ T8868]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  141.948448][ T8868]  ? __fget_files+0x2a/0x420
[  141.948476][ T8868]  ? __fget_files+0x39d/0x420
[  141.948501][ T8868]  ? __fget_files+0x2a/0x420
[  141.948533][ T8868]  __x64_sys_getsockopt+0x2a3/0x370
[  141.948562][ T8868]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  141.948590][ T8868]  ? do_syscall_64+0xb6/0x230
[  141.948625][ T8868]  do_syscall_64+0xf3/0x230
[  141.948650][ T8868]  ? clear_bhb_loop+0x45/0xa0
[  141.948672][ T8868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.948689][ T8868] RIP: 0033:0x7f700658d169
[  141.948705][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.948720][ T8868] RSP: 002b:00007f7007384038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  141.948740][ T8868] RAX: ffffffffffffffda RBX: 00007f70067a5fa0 RCX: 00007f700658d169
[  141.948753][ T8868] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000004
[  141.948764][ T8868] RBP: 00007f7007384090 R08: 0000200000000140 R09: 0000000000000000
[  141.948776][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.948787][ T8868] R13: 0000000000000000 R14: 00007f70067a5fa0 R15: 00007ffd098a7738
[  141.948810][ T8868]  </TASK>
[  142.652885][ T8887] netlink: 'syz.1.767': attribute type 1 has an invalid length.
[  142.722717][ T8887] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.794144][ T8889] bond3: (slave veth3): Enslaving as an active interface with a down link
[  142.818532][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  143.017517][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.027923][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.035900][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.044272][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.052916][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.313161][ T8900] chnl_net:caif_netlink_parms(): no params data found
[  143.319122][ T8915] FAULT_INJECTION: forcing a failure.
[  143.319122][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.363804][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.1.773 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  143.363833][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  143.363844][ T8915] Call Trace:
[  143.363851][ T8915]  <TASK>
[  143.363859][ T8915]  dump_stack_lvl+0x241/0x360
[  143.363890][ T8915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.363914][ T8915]  ? __pfx__printk+0x10/0x10
[  143.363944][ T8915]  should_fail_ex+0x424/0x570
[  143.363974][ T8915]  _copy_to_user+0x31/0xb0
[  143.363999][ T8915]  simple_read_from_buffer+0xc4/0x170
[  143.364026][ T8915]  proc_fail_nth_read+0x1ef/0x260
[  143.364056][ T8915]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  143.364086][ T8915]  ? rw_verify_area+0x246/0x630
[  143.364104][ T8915]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  143.364132][ T8915]  vfs_read+0x21f/0xb90
[  143.364154][ T8915]  ? __pfx___mutex_lock+0x10/0x10
[  143.364180][ T8915]  ? __pfx_vfs_read+0x10/0x10
[  143.364200][ T8915]  ? __fget_files+0x2a/0x420
[  143.364228][ T8915]  ? __fget_files+0x39d/0x420
[  143.364252][ T8915]  ? __fget_files+0x2a/0x420
[  143.364284][ T8915]  ksys_read+0x19d/0x2d0
[  143.364303][ T8915]  ? __pfx_ksys_read+0x10/0x10
[  143.364325][ T8915]  ? do_syscall_64+0xb6/0x230
[  143.364352][ T8915]  do_syscall_64+0xf3/0x230
[  143.364377][ T8915]  ? clear_bhb_loop+0x45/0xa0
[  143.364406][ T8915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.364424][ T8915] RIP: 0033:0x7f3cccd8bb7c
[  143.364440][ T8915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  143.364455][ T8915] RSP: 002b:00007f3ccdb24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  143.364474][ T8915] RAX: ffffffffffffffda RBX: 00007f3cccfa5fa0 RCX: 00007f3cccd8bb7c
[  143.364488][ T8915] RDX: 000000000000000f RSI: 00007f3ccdb240a0 RDI: 0000000000000005
[  143.364499][ T8915] RBP: 00007f3ccdb24090 R08: 0000000000000000 R09: 0000000000000000
[  143.364510][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.364521][ T8915] R13: 0000000000000000 R14: 00007f3cccfa5fa0 R15: 00007ffef7debe68
[  143.364544][ T8915]  </TASK>
[  143.725162][ T8922] netlink: 'syz.3.775': attribute type 2 has an invalid length.
[  143.740298][ T8790] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.776472][ T8790] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.834556][ T8790] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.858594][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  143.924155][ T8790] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.964233][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.979748][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.987000][ T8900] bridge_slave_0: entered allmulticast mode
[  144.020393][ T8900] bridge_slave_0: entered promiscuous mode
[  144.046687][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.066923][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.075021][ T8900] bridge_slave_1: entered allmulticast mode
[  144.083780][ T8900] bridge_slave_1: entered promiscuous mode
[  144.139785][ T8940] team_slave_0: entered promiscuous mode
[  144.145665][ T8940] team_slave_1: entered promiscuous mode
[  144.151444][ T8940] geneve0: entered promiscuous mode
[  144.152309][ T8946] ieee802154 phy0 wpan0: encryption failed: -22
[  144.184069][ T8940] macsec1: entered allmulticast mode
[  144.209791][ T8940] team0: entered allmulticast mode
[  144.215049][ T8940] team_slave_0: entered allmulticast mode
[  144.222244][ T8940] team_slave_1: entered allmulticast mode
[  144.228068][ T8940] geneve0: entered allmulticast mode
[  144.235391][ T8940] team0: Device macsec1 is already an upper device of the team interface
[  144.249530][ T8940] team0: left allmulticast mode
[  144.254436][ T8940] team_slave_0: left allmulticast mode
[  144.266461][ T8940] team_slave_1: left allmulticast mode
[  144.273268][ T8940] geneve0: left allmulticast mode
[  144.279272][ T8940] team_slave_0: left promiscuous mode
[  144.284705][ T8940] team_slave_1: left promiscuous mode
[  144.290319][ T8940] geneve0: left promiscuous mode
[  144.318417][ T8957] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  144.326712][ T8957] __nla_validate_parse: 2 callbacks suppressed
[  144.326731][ T8957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.786'.
[  144.350060][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.361950][ T8955] tunl0: entered promiscuous mode
[  144.370321][ T8955] netlink: 'syz.4.784': attribute type 4 has an invalid length.
[  144.378159][ T8955] netlink: 9 bytes leftover after parsing attributes in process `syz.4.784'.
[  144.424320][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.519656][ T8961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.787'.
[  144.543976][ T8900] team0: Port device team_slave_0 added
[  144.585715][ T8900] team0: Port device team_slave_1 added
[  144.705142][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.718911][ T8975] netlink: 'syz.4.792': attribute type 1 has an invalid length.
[  144.737208][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.769122][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.782283][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.789416][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.823366][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.876684][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'.
[  144.886894][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  144.898569][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  144.955354][ T8900] hsr_slave_0: entered promiscuous mode
[  144.975165][ T8900] hsr_slave_1: entered promiscuous mode
[  144.985113][ T8900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.993293][ T8900] Cannot create hsr debugfs directory
[  145.138716][ T5149] Bluetooth: hci0: command tx timeout
[  145.237906][ T8900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.412185][ T8900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.523230][ T8900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.570357][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'.
[  145.595274][ T9028] openvswitch: netlink: Actions may not be safe on all matching packets
[  145.603644][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'.
[  145.657626][ T9031] netlink: 'syz.4.806': attribute type 10 has an invalid length.
[  145.675923][ T8900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.701676][ T9031] team0: Device veth1_macvtap failed to register rx_handler
[  145.880028][ T8900] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.902369][ T8900] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.917370][ T9046] netlink: 165 bytes leftover after parsing attributes in process `syz.3.815'.
[  145.937281][ T9046] netlink: 277 bytes leftover after parsing attributes in process `syz.3.815'.
[  145.938518][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  145.965784][ T8900] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  146.003597][ T9049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.816'.
[  146.018264][ T8900] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  146.034416][ T9054] netlink: 'syz.0.818': attribute type 1 has an invalid length.
[  146.045698][ T9054] netlink: 'syz.0.818': attribute type 1 has an invalid length.
[  146.363908][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.418160][ T8900] 8021q: adding VLAN 0 to HW filter on device team0
[  146.510238][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.517367][ T8035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.567669][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.575601][ T8035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.945434][ T9106] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:0
[  146.978534][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  147.095256][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.126144][ T9116] pim6reg: entered allmulticast mode
[  147.218708][ T5149] Bluetooth: hci0: command tx timeout
[  147.236087][ T8900] veth0_vlan: entered promiscuous mode
[  147.280927][ T8900] veth1_vlan: entered promiscuous mode
[  147.348332][ T8900] veth0_macvtap: entered promiscuous mode
[  147.516188][ T9132] sctp: [Deprecated]: syz.0.837 (pid 9132) Use of int in max_burst socket option deprecated.
[  147.516188][ T9132] Use struct sctp_assoc_value instead
[  147.651677][ T9126] warn_alloc: 1 callbacks suppressed
[  147.651696][ T9126] syz.4.836: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  147.726061][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.4.836 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  147.726091][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  147.726102][ T9126] Call Trace:
[  147.726109][ T9126]  <TASK>
[  147.726116][ T9126]  dump_stack_lvl+0x241/0x360
[  147.726148][ T9126]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.726173][ T9126]  ? __pfx__printk+0x10/0x10
[  147.726194][ T9126]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  147.726220][ T9126]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  147.726244][ T9126]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  147.726272][ T9126]  warn_alloc+0x27c/0x410
[  147.726297][ T9126]  ? __pfx_warn_alloc+0x10/0x10
[  147.726323][ T9126]  ? xskq_create+0xb6/0x170
[  147.726348][ T9126]  ? __get_vm_area_node+0x1c8/0x2d0
[  147.726389][ T9126]  ? __get_vm_area_node+0x25c/0x2d0
[  147.726423][ T9126]  __vmalloc_node_range_noprof+0x634/0x1390
[  147.726463][ T9126]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  147.726487][ T9126]  ? __kasan_kmalloc+0x9d/0xb0
[  147.726513][ T9126]  vmalloc_user_noprof+0x74/0x80
[  147.726532][ T9126]  ? xskq_create+0xb6/0x170
[  147.726555][ T9126]  xskq_create+0xb6/0x170
[  147.726580][ T9126]  xsk_init_queue+0xa1/0x100
[  147.726618][ T9126]  xsk_setsockopt+0x4f9/0x840
[  147.726641][ T9126]  ? __pfx_xsk_setsockopt+0x10/0x10
[  147.726661][ T9126]  ? virtio_transport_send_pkt_info+0xd15/0x10b0
[  147.726684][ T9126]  ? __pfx_aa_sk_perm+0x10/0x10
[  147.726709][ T9126]  ? aa_sock_opt_perm+0x79/0x120
[  147.726737][ T9126]  ? __pfx_xsk_setsockopt+0x10/0x10
[  147.726757][ T9126]  do_sock_setsockopt+0x3b1/0x710
[  147.726785][ T9126]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  147.726807][ T9126]  ? __fget_files+0x2a/0x420
[  147.726837][ T9126]  ? __fget_files+0x39d/0x420
[  147.726861][ T9126]  ? __fget_files+0x2a/0x420
[  147.726892][ T9126]  __x64_sys_setsockopt+0x1ee/0x280
[  147.726921][ T9126]  do_syscall_64+0xf3/0x230
[  147.726947][ T9126]  ? clear_bhb_loop+0x45/0xa0
[  147.726976][ T9126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.726994][ T9126] RIP: 0033:0x7f700658d169
[  147.727009][ T9126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.727024][ T9126] RSP: 002b:00007f7007363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.727044][ T9126] RAX: ffffffffffffffda RBX: 00007f70067a6080 RCX: 00007f700658d169
[  147.727059][ T9126] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000c
[  147.727069][ T9126] RBP: 00007f700660e2a0 R08: 0000000000000004 R09: 0000000000000000
[  147.727078][ T9126] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  147.727088][ T9126] R13: 0000000000000000 R14: 00007f70067a6080 R15: 00007ffd098a7738
[  147.727108][ T9126]  </TASK>
[  147.739549][ T8900] veth1_macvtap: entered promiscuous mode
[  147.758599][ T9126] Mem-Info:
[  147.903699][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.928569][ T9126] active_anon:6774 inactive_anon:0 isolated_anon:0
[  147.928569][ T9126]  active_file:1550 inactive_file:38333 isolated_file:0
[  147.928569][ T9126]  unevictable:768 dirty:203 writeback:0
[  147.928569][ T9126]  slab_reclaimable:10869 slab_unreclaimable:108213
[  147.928569][ T9126]  mapped:29541 shmem:4229 pagetables:732
[  147.928569][ T9126]  sec_pagetables:0 bounce:0
[  147.928569][ T9126]  kernel_misc_reclaimable:0
[  147.928569][ T9126]  free:1327445 free_pcp:526 free_cma:0
[  147.986357][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.026363][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  148.053369][ T9126] Node 0 active_anon:27696kB inactive_anon:0kB active_file:6200kB inactive_file:153256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118164kB dirty:812kB writeback:0kB shmem:16080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11772kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no
[  148.118480][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.137593][ T9126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  148.169981][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.211379][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.238041][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.268400][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.288704][ T9126] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.328737][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.341655][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.373613][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.388651][ T9126] lowmem_reserve[]: 0 2490 2490 2490 2490
[  148.403686][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.416244][ T9126] Node 0 DMA32 free:1382676kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28156kB inactive_anon:0kB active_file:6200kB inactive_file:152944kB unevictable:1536kB writepending:808kB present:3129332kB managed:2550096kB mlocked:0kB bounce:0kB free_pcp:6084kB local_pcp:768kB free_cma:0kB
[  148.451619][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.481307][ T9126] lowmem_reserve[]: 0 0 0 0 0
[  148.482429][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.491648][ T9126] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  148.526789][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.578473][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.601599][ T9126] lowmem_reserve[]: 0 0 0 0 0
[  148.608702][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.621963][ T9126] Node 1 Normal free:3905484kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[  148.629461][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.688412][ T9126] lowmem_reserve[]: 0 0 0 0 0
[  148.693322][ T9126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  148.717172][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.742495][ T9145] tc_dump_action: action bad kind
[  148.777625][ T8900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.806847][ T9126] Node 0 DMA32: 268*4kB (UM) 265*8kB (UME) 188*16kB (UME) 186*32kB (UME) 76*64kB (UME) 52*128kB (UME) 31*256kB (UME) 25*512kB (UME) 15*1024kB (UME) 7*2048kB (UME) 324*4096kB (UM) = 1401208kB
[  148.836381][ T8900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.863884][ T9126] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  148.867100][ T8900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.899136][ T9126] Node 1 Normal: 197*4kB (UE) 57*8kB (UME) 37*16kB (UME) 196*32kB (UME) 97*64kB (UME) 28*128kB (UME) 10*256kB (UM) 10*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3905516kB
[  148.929327][ T8900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.039359][ T9126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.058521][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  149.072719][ T9126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.086282][ T9126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.131207][ T9126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.158080][ T9126] 41286 total pagecache pages
[  149.167533][ T9126] 0 pages in swap cache
[  149.174911][ T9126] Free swap  = 124996kB
[  149.180561][ T9126] Total swap = 124996kB
[  149.184890][ T9126] 2097051 pages RAM
[  149.189492][ T9126] 0 pages HighMem/MovableOnly
[  149.194305][ T9126] 427805 pages reserved
[  149.199686][ T9126] 0 pages cma reserved
[  149.273684][ T9167] netlink: 'syz.1.847': attribute type 10 has an invalid length.
[  149.284769][ T8035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.298908][ T8035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.300470][ T5149] Bluetooth: hci0: command tx timeout
[  149.325220][ T9167] batman_adv: batadv0: Adding interface: virt_wifi0
[  149.335549][ T9167] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.374769][ T9167] batman_adv: batadv0: Interface activated: virt_wifi0
[  149.390659][ T9174] __nla_validate_parse: 11 callbacks suppressed
[  149.390679][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'.
[  149.416750][ T8035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.427959][ T9167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.847'.
[  149.437375][ T8035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.626310][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'.
[  149.665041][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'.
[  149.720923][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'.
[  149.734442][ T9179] batadv0: entered promiscuous mode
[  149.750897][ T9179] batadv0: left promiscuous mode
[  149.971592][ T9186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.854'.
[  149.983637][ T9186] netlink: 136 bytes leftover after parsing attributes in process `syz.4.854'.
[  150.098587][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  150.252293][ T9201] netlink: 104 bytes leftover after parsing attributes in process `syz.4.856'.
[  150.684371][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'.
[  150.774170][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.
[  151.053593][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.064789][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.074513][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.090422][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.107214][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.117842][ T9224] netlink: 'syz.4.863': attribute type 1 has an invalid length.
[  151.138536][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  151.150697][ T9220] delete_channel: no stack
[  151.477634][ T9223] chnl_net:caif_netlink_parms(): no params data found
[  151.702442][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.720748][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.729960][ T9223] bridge_slave_0: entered allmulticast mode
[  151.737676][ T9223] bridge_slave_0: entered promiscuous mode
[  151.745451][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.748235][ T9267] netlink: 'syz.0.871': attribute type 7 has an invalid length.
[  151.752747][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.768195][ T9223] bridge_slave_1: entered allmulticast mode
[  151.775416][ T9223] bridge_slave_1: entered promiscuous mode
[  151.787042][ T9267] netlink: 'syz.0.871': attribute type 8 has an invalid length.
[  151.811753][ T9267] bridge0: entered promiscuous mode
[  151.819906][ T9267] bridge0: left promiscuous mode
[  151.836870][ T9223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.856805][ T9223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.952155][ T9223] team0: Port device team_slave_0 added
[  151.970287][ T9223] team0: Port device team_slave_1 added
[  152.024845][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.045494][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.072385][ T9223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.104633][ T9289] bridge_slave_0: left allmulticast mode
[  152.110403][ T9289] bridge_slave_0: left promiscuous mode
[  152.116139][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.125481][ T9289] bridge_slave_1: left allmulticast mode
[  152.134250][ T9289] bridge_slave_1: left promiscuous mode
[  152.140743][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.151792][ T9289] bond0: (slave bond_slave_0): Releasing backup interface
[  152.178592][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  152.190756][ T9289] bond0: (slave bond_slave_1): Releasing backup interface
[  152.227144][ T9289] team0: Port device team_slave_0 removed
[  152.257454][ T9289] team0: Port device team_slave_1 removed
[  152.267886][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.276935][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.285374][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.322187][ T9289] team0: Port device geneve0 removed
[  152.346195][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.363127][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.395842][ T9223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.484638][ T9223] hsr_slave_0: entered promiscuous mode
[  152.491289][ T9223] hsr_slave_1: entered promiscuous mode
[  152.499015][ T9223] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.506673][ T9223] Cannot create hsr debugfs directory
[  152.565522][ T9302] ip6gre1: entered allmulticast mode
[  152.773146][ T9223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.107080][ T9223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.148522][ T5149] Bluetooth: hci0: command tx timeout
[  153.218601][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  153.335939][ T9223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.390249][ T9336] gretap0: Device is already in use.
[  153.523490][ T9223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.699624][ T9354] IPv6: NLM_F_CREATE should be specified when creating new route
[  153.831252][ T9223] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  153.862720][ T9223] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  153.882809][ T9223] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  153.902942][ T9362] netlink: ct family unspecified
[  153.913545][ T9362] openvswitch: netlink: Actions may not be safe on all matching packets
[  153.919112][ T9223] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  154.170534][ T9223] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.206238][ T9223] 8021q: adding VLAN 0 to HW filter on device team0
[  154.253164][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.260366][ T8034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.267923][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  154.285893][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.293065][ T8034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.327192][ T9381] tunl0: entered promiscuous mode
[  154.354553][ T9381] netlink: 'syz.1.904': attribute type 4 has an invalid length.
[  154.509545][ T9392] __nla_validate_parse: 13 callbacks suppressed
[  154.509576][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'.
[  154.737910][ T9223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.840068][ T9408] netlink: 'syz.0.911': attribute type 1 has an invalid length.
[  154.872052][ T9408] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.911'.
[  154.906019][ T9223] veth0_vlan: entered promiscuous mode
[  154.921233][ T9223] veth1_vlan: entered promiscuous mode
[  154.999906][ T9223] veth0_macvtap: entered promiscuous mode
[  155.016828][ T9223] veth1_macvtap: entered promiscuous mode
[  155.064040][ T9424] netlink: 52 bytes leftover after parsing attributes in process `syz.0.913'.
[  155.069251][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.098790][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.120141][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.149244][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.163214][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.194679][ T9429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  155.198505][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.219981][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.220645][ T5149] Bluetooth: hci0: command tx timeout
[  155.245279][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.261652][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.273192][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.291789][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.298625][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  155.393182][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.414062][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.424399][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.434994][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.445264][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.456607][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.467781][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.478342][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.489636][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.523468][ T9223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.546798][ T9223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.566087][ T9223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.587264][ T9223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.596421][ T5888] IPVS: starting estimator thread 0...
[  155.639813][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'.
[  155.677596][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'.
[  155.686678][ T9448] netlink: 'syz.1.918': attribute type 29 has an invalid length.
[  155.694836][ T9446] IPVS: using max 30 ests per chain, 72000 per kthread
[  155.837764][ T9444] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.846029][ T9444] tipc: Enabled bearer <udp:s>, priority 1
[  155.856032][ T8045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.876827][ T8045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.911761][ T8045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.925026][ T8045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.968585][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.047082][ T9453] xt_CT: No such helper "pptp"
[  156.067190][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'.
[  156.184368][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'.
[  156.238686][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.248251][ T9461] lo speed is unknown, defaulting to 1000
[  156.256714][ T9461] lo speed is unknown, defaulting to 1000
[  156.270602][ T9461] lo speed is unknown, defaulting to 1000
[  156.338632][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  156.391906][ T9461] infiniband syz0: set active
[  156.396921][ T9461] infiniband syz0: added lo
[  156.408556][ T5887] lo speed is unknown, defaulting to 1000
[  156.435036][ T9461] RDS/IB: syz0: added
[  156.442022][ T9461] smc: adding ib device syz0 with port count 1
[  156.448544][ T9461] smc:    ib device syz0 port 1 has pnetid 
[  156.457248][   T24] lo speed is unknown, defaulting to 1000
[  156.465373][ T9461] lo speed is unknown, defaulting to 1000
[  156.573272][ T9461] lo speed is unknown, defaulting to 1000
[  156.638236][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'.
[  156.673339][ T9461] lo speed is unknown, defaulting to 1000
[  156.769040][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.772653][ T9461] lo speed is unknown, defaulting to 1000
[  156.907790][ T9461] lo speed is unknown, defaulting to 1000
[  157.107641][ T9461] lo speed is unknown, defaulting to 1000
[  157.378702][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  157.385010][ T9461] lo speed is unknown, defaulting to 1000
[  157.744014][ T9461] lo speed is unknown, defaulting to 1000
[  157.778732][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  157.978212][ T9461] lo speed is unknown, defaulting to 1000
[  158.090759][ T9461] lo speed is unknown, defaulting to 1000
[  158.181211][ T9461] lo speed is unknown, defaulting to 1000
[  158.262398][ T9461] lo speed is unknown, defaulting to 1000
[  158.341698][ T9461] lo speed is unknown, defaulting to 1000
[  158.416094][ T9461] lo speed is unknown, defaulting to 1000
[  158.418715][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  158.511528][ T9503] lo: entered allmulticast mode
[  158.533057][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  158.580450][ T9499] lo: left allmulticast mode
[  158.685372][ T9461] lo speed is unknown, defaulting to 1000
[  158.894155][ T9519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.939'.
[  159.064800][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.076887][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.085756][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.094278][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.109125][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.324508][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.354900][ T9527] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  159.451931][ T9527] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.458686][    C0] net_ratelimit: 2 callbacks suppressed
[  159.458710][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  159.464398][ T9527] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.498390][ T9527] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.507639][ T9527] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.621210][ T9524] lo speed is unknown, defaulting to 1000
[  159.737925][ T9540] __nla_validate_parse: 2 callbacks suppressed
[  159.737947][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'.
[  159.801975][ T9540] bond4: entered promiscuous mode
[  159.807379][ T9540] 8021q: adding VLAN 0 to HW filter on device bond4
[  159.858735][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.076687][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'.
[  160.117992][ T9540] bond4 (unregistering): Released all slaves
[  160.272657][ T9551] lo speed is unknown, defaulting to 1000
[  160.395749][ T9558] Bluetooth: MGMT ver 1.23
[  160.449619][ T9557] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  160.498589][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  160.628788][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.953'.
[  160.721151][ T9550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.850651][ T9550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.898675][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.912168][ T9524] chnl_net:caif_netlink_parms(): no params data found
[  160.938400][ T9574] netlink: 48 bytes leftover after parsing attributes in process `syz.4.955'.
[  160.980386][ T9550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.161288][ T9550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.272582][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.280889][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.288129][ T9524] bridge_slave_0: entered allmulticast mode
[  161.296009][ T9524] bridge_slave_0: entered promiscuous mode
[  161.307818][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.316214][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.323869][ T9524] bridge_slave_1: entered allmulticast mode
[  161.331195][ T9524] bridge_slave_1: entered promiscuous mode
[  161.357129][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'.
[  161.371343][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'.
[  161.445503][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.495280][ T9592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.508883][ T9592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.540870][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  161.556063][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.591238][ T9550] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.607627][ T9592] bridge0: port 3(netdevsim2) entered disabled state
[  161.638349][ T9592] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode
[  161.647874][ T9592] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode
[  161.658492][ T9592] bridge0: port 3(netdevsim2) entered disabled state
[  161.670412][ T9592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.680992][ T9592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.710411][ T9524] team0: Port device team_slave_0 added
[  161.726004][ T9550] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.741062][ T9524] team0: Port device team_slave_1 added
[  161.776317][ T9550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.847262][ T9592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.863894][ T9592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.882455][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.895011][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.938655][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  161.960568][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.974967][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.982774][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.009609][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.033289][ T9550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.092885][ T9592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.118942][ T9592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.263167][ T9524] hsr_slave_0: entered promiscuous mode
[  162.271080][ T9524] hsr_slave_1: entered promiscuous mode
[  162.279101][ T9524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.287209][ T9524] Cannot create hsr debugfs directory
[  162.461779][ T9612] tipc: Failed to remove unknown binding: 66,1,1/0:632737480/632737482
[  162.498812][ T5149] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  162.578607][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  162.673626][ T9524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.702963][ T9619] bridge0: port 3(ip6gretap0) entered blocking state
[  162.715790][ T9619] bridge0: port 3(ip6gretap0) entered disabled state
[  162.747359][ T9619] ip6gretap0: entered allmulticast mode
[  162.769297][ T9619] ip6gretap0: entered promiscuous mode
[  162.799497][ T9619] bridge0: port 3(ip6gretap0) entered blocking state
[  162.806336][ T9619] bridge0: port 3(ip6gretap0) entered forwarding state
[  162.902445][ T9524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.936344][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  162.978590][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  163.040907][ T9524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.124865][ T9631] 8021q: VLANs not supported on caif0
[  163.359307][ T9524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.418316][ T9648] netlink: 'syz.4.980': attribute type 1 has an invalid length.
[  163.467849][ T9648] netlink: 240 bytes leftover after parsing attributes in process `syz.4.980'.
[  163.503302][ T9656] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave
[  163.517330][ T9656] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0)
[  163.537983][ T9651] netlink: 'syz.3.982': attribute type 1 has an invalid length.
[  163.552312][ T9654] syzkaller1: entered promiscuous mode
[  163.558889][ T9654] syzkaller1: entered allmulticast mode
[  163.579239][ T9651] netlink: 6 bytes leftover after parsing attributes in process `syz.3.982'.
[  163.618602][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  163.696308][ T9524] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  163.716215][ T9524] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  163.809246][ T9524] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  163.853782][ T9524] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  163.904991][ T9672] xt_hashlimit: size too large, truncated to 1048576
[  163.930671][ T9680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.989'.
[  163.970028][ T9671] xt_hashlimit: size too large, truncated to 1048576
[  164.018656][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.091734][ T9679] 
: renamed from bond0
[  164.161009][ T1793] lo speed is unknown, defaulting to 1000
[  164.214445][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.248019][ T9524] 8021q: adding VLAN 0 to HW filter on device team0
[  164.275932][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.283158][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.440478][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.447677][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.528113][ T9697] 

: renamed from bond_slave_0 (while UP)
[  164.658624][    C0] net_ratelimit: 1 callbacks suppressed
[  164.658643][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  164.883535][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.930314][ T9715] lo speed is unknown, defaulting to 1000
[  165.000804][ T9524] veth0_vlan: entered promiscuous mode
[  165.020667][ T9719] __nla_validate_parse: 2 callbacks suppressed
[  165.020687][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'.
[  165.021435][ T9524] veth1_vlan: entered promiscuous mode
[  165.053146][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'.
[  165.062316][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.114634][ T9524] veth0_macvtap: entered promiscuous mode
[  165.149093][ T9524] veth1_macvtap: entered promiscuous mode
[  165.179386][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.208624][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.228536][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.246654][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.256780][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.267489][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.277438][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.288176][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.299357][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.311083][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.322775][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.340314][ T9727] xfrm0: entered promiscuous mode
[  165.345413][ T9727] xfrm0: entered allmulticast mode
[  165.379600][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.400830][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.421987][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.432701][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.442617][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.453238][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.464435][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.475069][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.485021][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.495807][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.509073][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.610320][ T9524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.627277][ T9524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.648184][ T9524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.665286][ T9524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.675639][ T9730] netlink: 'syz.4.1001': attribute type 1 has an invalid length.
[  165.683680][ T9730] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1001'.
[  165.698554][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  165.993430][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.016020][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.065559][ T8038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.083387][ T8038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.099145][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.374974][ T9756] netlink: 'syz.0.1005': attribute type 3 has an invalid length.
[  166.685216][ T9777] lo speed is unknown, defaulting to 1000
[  166.738762][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  167.138655][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.668695][ T9794] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  167.707379][ T9793] pim6reg1: entered promiscuous mode
[  167.727285][ T9793] pim6reg1: entered allmulticast mode
[  167.778589][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  167.844119][ T9801] lo speed is unknown, defaulting to 1000
[  168.052828][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.076188][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.094534][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.103059][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.120489][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.133212][ T9815] x_tables: duplicate underflow at hook 3
[  168.178586][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  168.179791][ T9819] lo: entered allmulticast mode
[  168.239258][ T9812] lo speed is unknown, defaulting to 1000
[  168.246005][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  168.312442][ T9817] lo: left allmulticast mode
[  168.466514][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1027'.
[  168.664912][ T9800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1019'.
[  168.705722][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'.
[  168.744055][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'.
[  168.744141][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'.
[  168.787844][ T9838] netlink: 'syz.1.1029': attribute type 1 has an invalid length.
[  168.818546][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  168.835308][ T9838] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1029'.
[  168.841671][ T9812] chnl_net:caif_netlink_parms(): no params data found
[  169.064938][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.079104][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.118785][ T9812] bridge_slave_0: entered allmulticast mode
[  169.158700][ T9812] bridge_slave_0: entered promiscuous mode
[  169.170795][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.202502][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.218775][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  169.229606][ T9812] bridge_slave_1: entered allmulticast mode
[  169.237327][ T9812] bridge_slave_1: entered promiscuous mode
[  169.248224][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.271507][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.332687][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.351088][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.368162][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.381163][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.397425][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.447051][ T9884] syz_tun: entered allmulticast mode
[  169.468742][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.499423][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.512409][ T9812] team0: Port device team_slave_0 added
[  169.520829][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.530986][ T9867] netlink: 'syz.4.1035': attribute type 29 has an invalid length.
[  169.551859][ T9812] team0: Port device team_slave_1 added
[  169.614229][ T9883] syz_tun: left allmulticast mode
[  169.654727][ T9895] lo speed is unknown, defaulting to 1000
[  169.759410][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.778029][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.818712][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.858753][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  169.920636][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.974403][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.080328][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.189625][ T5149] Bluetooth: hci0: command tx timeout
[  170.258660][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  170.284958][ T9812] hsr_slave_0: entered promiscuous mode
[  170.314763][ T9812] hsr_slave_1: entered promiscuous mode
[  170.321409][ T9812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.329553][ T9812] Cannot create hsr debugfs directory
[  170.573758][ T9930] __nla_validate_parse: 4 callbacks suppressed
[  170.573780][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'.
[  170.692902][ T9812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.753043][ T9940] openvswitch: netlink: Message has 1159 unknown bytes.
[  170.779049][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  170.799206][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'.
[  170.857873][ T9812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.898560][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  170.908625][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'.
[  171.010348][ T9812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.205236][ T9952] syzkaller0: entered promiscuous mode
[  171.239262][ T9952] syzkaller0: entered allmulticast mode
[  171.284416][ T9812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.298592][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.312492][ T9963] tun0: tun_chr_ioctl cmd 2148553947
[  171.941749][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  172.273272][ T5149] Bluetooth: hci0: command tx timeout
[  172.338661][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.978597][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  173.052955][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1063'.
[  173.074578][ T9812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  173.105095][ T9989] No such timeout policy "syz0"
[  173.117246][ T9990] x_tables: duplicate underflow at hook 1
[  173.124285][ T9991] x_tables: duplicate underflow at hook 1
[  173.133465][ T9812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  173.194644][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'.
[  173.199300][ T9812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  173.259183][ T9812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  173.378622][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.579631][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.615002][ T9812] 8021q: adding VLAN 0 to HW filter on device team0
[  173.654509][T10018] lo: entered allmulticast mode
[  173.667766][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.670952][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'.
[  173.675022][ T9870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.688698][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'.
[  173.711877][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.719171][ T9870] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.752103][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'.
[  173.785705][ T9812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.822555][T10015] lo: left allmulticast mode
[  173.916414][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'.
[  173.934613][T10030] openvswitch: netlink: Actions may not be safe on all matching packets
[  174.118342][T10046] Bluetooth: MGMT ver 1.23
[  174.136292][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.146885][T10044] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  174.195515][T10050] validate_nla: 22 callbacks suppressed
[  174.195534][T10050] netlink: 'syz.3.1082': attribute type 3 has an invalid length.
[  174.247182][ T9812] veth0_vlan: entered promiscuous mode
[  174.266799][ T9812] veth1_vlan: entered promiscuous mode
[  174.317104][ T9812] veth0_macvtap: entered promiscuous mode
[  174.329152][ T9812] veth1_macvtap: entered promiscuous mode
[  174.361414][T10057] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  174.373643][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.405759][T10059] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  174.407050][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.444315][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.463134][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.477337][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.504911][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.524469][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.537964][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.557862][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.588199][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.608872][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.629156][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.647732][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.651084][T10057] nbd: socks must be embedded in a SOCK_ITEM attr
[  174.660204][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.672112][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.682187][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.693333][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.703399][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.714013][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.724779][T10057] block nbd0: shutting down sockets
[  174.736642][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.764889][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.785217][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.800990][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.811063][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.823292][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.834789][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.870867][ T9812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.926748][ T9812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.958728][ T9812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.988547][ T9812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.032770][T10079] syz_tun: entered allmulticast mode
[  175.058881][    C0] net_ratelimit: 3 callbacks suppressed
[  175.058903][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  175.153273][T10078] syz_tun: left allmulticast mode
[  175.180202][ T9872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.206027][ T9872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.290958][ T9874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.299437][ T9874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.305666][T10091] batadv0: entered promiscuous mode
[  175.345071][T10091] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  175.366364][T10091] batadv0: left promiscuous mode
[  175.458618][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.497077][T10098] netlink: 'syz.1.1095': attribute type 1 has an invalid length.
[  175.694566][T10102] ipvlan2: entered promiscuous mode
[  175.720968][T10102] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  175.737603][T10102] team0: Device ipvlan2 is already an upper device of the team interface
[  175.990750][T10115] __nla_validate_parse: 7 callbacks suppressed
[  175.990770][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'.
[  175.993310][T10113] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1100'.
[  176.018037][T10115] openvswitch: netlink: Actions may not be safe on all matching packets
[  176.098705][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  176.135935][T10121] pim6reg: entered allmulticast mode
[  176.155134][T10121] pim6reg: left allmulticast mode
[  176.178999][ T5149] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  176.193329][T10096] ==================================================================
[  176.201428][T10096] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xbb/0x510
[  176.207482][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  176.209676][T10096] Read of size 8 at addr ffff88807d679058 by task syz.3.1094/10096
[  176.209698][T10096] 
[  176.209711][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.3.1094 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  176.209736][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.209750][T10096] Call Trace:
[  176.209757][T10096]  <TASK>
[  176.209765][T10096]  dump_stack_lvl+0x241/0x360
[  176.209799][T10096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.209825][T10096]  ? __virt_addr_valid+0x183/0x530
[  176.209852][T10096]  ? rcu_is_watching+0x15/0xb0
[  176.209873][T10096]  ? __virt_addr_valid+0x183/0x530
[  176.209898][T10096]  ? lock_release+0x4e/0x3e0
[  176.209929][T10096]  ? __virt_addr_valid+0x183/0x530
[  176.209953][T10096]  ? __virt_addr_valid+0x183/0x530
[  176.209979][T10096]  print_report+0x16e/0x5b0
[  176.210004][T10096]  ? __virt_addr_valid+0x183/0x530
[  176.210028][T10096]  ? __virt_addr_valid+0x183/0x530
[  176.210052][T10096]  ? __virt_addr_valid+0x45f/0x530
[  176.210078][T10096]  ? __phys_addr+0xba/0x170
[  176.210107][T10096]  ? skb_queue_purge_reason+0xbb/0x510
[  176.210132][T10096]  kasan_report+0x143/0x180
[  176.210161][T10096]  ? skb_queue_purge_reason+0xbb/0x510
[  176.210189][T10096]  skb_queue_purge_reason+0xbb/0x510
[  176.210211][T10096]  ? hci_dev_reset+0x3f7/0x5d0
[  176.210246][T10096]  ? __mutex_unlock_slowpath+0x229/0x800
[  176.210296][T10096]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  176.210328][T10096]  ? drain_workqueue+0x2d3/0x3a0
[  176.210354][T10096]  ? hci_conn_hash_flush+0x1da/0x240
[  176.210378][T10096]  vhci_flush+0x44/0x50
[  176.210400][T10096]  ? __pfx_vhci_flush+0x10/0x10
[  176.210420][T10096]  hci_dev_reset+0x42a/0x5d0
[  176.210455][T10096]  sock_do_ioctl+0x15a/0x490
[  176.210480][T10096]  ? __pfx_sock_do_ioctl+0x10/0x10
[  176.210503][T10096]  ? __lock_acquire+0xad5/0xd80
[  176.210550][T10096]  sock_ioctl+0x644/0x900
[  176.210586][T10096]  ? __pfx_sock_ioctl+0x10/0x10
[  176.210618][T10096]  ? __fget_files+0x2a/0x420
[  176.210650][T10096]  ? __fget_files+0x2a/0x420
[  176.210684][T10096]  ? __fget_files+0x2a/0x420
[  176.210717][T10096]  ? __pfx_sock_ioctl+0x10/0x10
[  176.210751][T10096]  __se_sys_ioctl+0xf1/0x160
[  176.210776][T10096]  do_syscall_64+0xf3/0x230
[  176.210809][T10096]  ? clear_bhb_loop+0x45/0xa0
[  176.210833][T10096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.210856][T10096] RIP: 0033:0x7f175f78d169
[  176.210877][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.210898][T10096] RSP: 002b:00007f176052d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.210922][T10096] RAX: ffffffffffffffda RBX: 00007f175f9a5fa0 RCX: 00007f175f78d169
[  176.210939][T10096] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009
[  176.210954][T10096] RBP: 00007f175f80e2a0 R08: 0000000000000000 R09: 0000000000000000
[  176.210969][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.210983][T10096] R13: 0000000000000000 R14: 00007f175f9a5fa0 R15: 00007ffe8fcf5d18
[  176.211007][T10096]  </TASK>
[  176.211016][T10096] 
[  176.498695][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  176.499306][T10096] Allocated by task 9812:
[  176.531993][T10096]  kasan_save_track+0x3f/0x80
[  176.536681][T10096]  __kasan_kmalloc+0x9d/0xb0
[  176.541275][T10096]  __kmalloc_cache_noprof+0x236/0x370
[  176.546651][T10096]  vhci_open+0x57/0x360
[  176.550804][T10096]  misc_open+0x2cc/0x340
[  176.555055][T10096]  chrdev_open+0x514/0x600
[  176.559478][T10096]  do_dentry_open+0xdec/0x1960
[  176.564266][T10096]  vfs_open+0x3b/0x370
[  176.568339][T10096]  path_openat+0x2caf/0x35d0
[  176.572935][T10096]  do_filp_open+0x284/0x4e0
[  176.577440][T10096]  do_sys_openat2+0x12b/0x1d0
[  176.582124][T10096]  __x64_sys_openat+0x249/0x2a0
[  176.586979][T10096]  do_syscall_64+0xf3/0x230
[  176.591497][T10096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.597388][T10096] 
[  176.599707][T10096] Freed by task 9812:
[  176.603682][T10096]  kasan_save_track+0x3f/0x80
[  176.608356][T10096]  kasan_save_free_info+0x40/0x50
[  176.613382][T10096]  __kasan_slab_free+0x59/0x70
[  176.618147][T10096]  kfree+0x198/0x430
[  176.622046][T10096]  vhci_release+0xbc/0xd0
[  176.626372][T10096]  __fput+0x3e9/0x9f0
[  176.630365][T10096]  task_work_run+0x251/0x310
[  176.634962][T10096]  do_exit+0xa2a/0x2940
[  176.639117][T10096]  do_group_exit+0x207/0x2c0
[  176.643707][T10096]  __x64_sys_exit_group+0x3f/0x40
[  176.648733][T10096]  x64_sys_call+0x26c3/0x26d0
[  176.653410][T10096]  do_syscall_64+0xf3/0x230
[  176.657916][T10096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.663810][T10096] 
[  176.666131][T10096] The buggy address belongs to the object at ffff88807d679000
[  176.666131][T10096]  which belongs to the cache kmalloc-1k of size 1024
[  176.680191][T10096] The buggy address is located 88 bytes inside of
[  176.680191][T10096]  freed 1024-byte region [ffff88807d679000, ffff88807d679400)
[  176.693993][T10096] 
[  176.696316][T10096] The buggy address belongs to the physical page:
[  176.702733][T10096] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d678
[  176.711495][T10096] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  176.719992][T10096] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  176.727530][T10096] page_type: f5(slab)
[  176.731514][T10096] raw: 00fff00000000040 ffff88801b041dc0 dead000000000122 0000000000000000
[  176.740097][T10096] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  176.748684][T10096] head: 00fff00000000040 ffff88801b041dc0 dead000000000122 0000000000000000
[  176.757355][T10096] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  176.766034][T10096] head: 00fff00000000003 ffffea0001f59e01 ffffffffffffffff 0000000000000000
[  176.774712][T10096] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  176.783401][T10096] page dumped because: kasan: bad access detected
[  176.789831][T10096] page_owner tracks the page as allocated
[  176.795543][T10096] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9789, tgid 9789 (syz-executor), ts 167958811507, free_ts 167064757568
[  176.815000][T10096]  register_dummy_stack+0x8e/0xe0
[  176.820040][T10096]  init_page_owner+0x3e/0x7a0
[  176.824720][T10096]  page_ext_init+0x731/0x790
[  176.829320][T10096]  mm_core_init+0x4c/0x60
[  176.833657][T10096] page last free pid 9496 tgid 9496 stack trace:
[  176.839978][T10096]  free_frozen_pages+0xe16/0x10f0
[  176.845000][T10096]  vfree+0x1c3/0x360
[  176.848901][T10096]  kcov_close+0x28/0x50
[  176.853073][T10096]  __fput+0x3e9/0x9f0
[  176.857058][T10096]  task_work_run+0x251/0x310
[  176.861652][T10096]  do_exit+0xa2a/0x2940
[  176.865806][T10096]  do_group_exit+0x207/0x2c0
[  176.870405][T10096]  __x64_sys_exit_group+0x3f/0x40
[  176.875443][T10096]  x64_sys_call+0x26c3/0x26d0
[  176.880212][T10096]  do_syscall_64+0xf3/0x230
[  176.884720][T10096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.890615][T10096] 
[  176.892936][T10096] Memory state around the buggy address:
[  176.898565][T10096]  ffff88807d678f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.906687][T10096]  ffff88807d678f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.914748][T10096] >ffff88807d679000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.922805][T10096]                                                     ^
[  176.929733][T10096]  ffff88807d679080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.937788][T10096]  ffff88807d679100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.945842][T10096] ==================================================================
[  176.996106][T10096] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  177.003375][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.3.1094 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  177.015128][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  177.025220][T10096] Call Trace:
[  177.028534][T10096]  <TASK>
[  177.031476][T10096]  dump_stack_lvl+0x241/0x360
[  177.036170][T10096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.041381][T10096]  ? __pfx__printk+0x10/0x10
[  177.045983][T10096]  ? vscnprintf+0x5d/0x90
[  177.050326][T10096]  panic+0x349/0x880
[  177.054233][T10096]  ? check_panic_on_warn+0x21/0xb0
[  177.059354][T10096]  ? __pfx_panic+0x10/0x10
[  177.063775][T10096]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  177.069763][T10096]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.076098][T10096]  ? print_report+0x519/0x5b0
[  177.080791][T10096]  check_panic_on_warn+0x86/0xb0
[  177.085734][T10096]  ? skb_queue_purge_reason+0xbb/0x510
[  177.091198][T10096]  end_report+0x77/0x160
[  177.095456][T10096]  kasan_report+0x154/0x180
[  177.099970][T10096]  ? skb_queue_purge_reason+0xbb/0x510
[  177.105436][T10096]  skb_queue_purge_reason+0xbb/0x510
[  177.110731][T10096]  ? hci_dev_reset+0x3f7/0x5d0
[  177.115505][T10096]  ? __mutex_unlock_slowpath+0x229/0x800
[  177.121183][T10096]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  177.127087][T10096]  ? drain_workqueue+0x2d3/0x3a0
[  177.132030][T10096]  ? hci_conn_hash_flush+0x1da/0x240
[  177.137321][T10096]  vhci_flush+0x44/0x50
[  177.141482][T10096]  ? __pfx_vhci_flush+0x10/0x10
[  177.146334][T10096]  hci_dev_reset+0x42a/0x5d0
[  177.151466][T10096]  sock_do_ioctl+0x15a/0x490
[  177.156061][T10096]  ? __pfx_sock_do_ioctl+0x10/0x10
[  177.161183][T10096]  ? __lock_acquire+0xad5/0xd80
[  177.166049][T10096]  sock_ioctl+0x644/0x900
[  177.170392][T10096]  ? __pfx_sock_ioctl+0x10/0x10
[  177.175259][T10096]  ? __fget_files+0x2a/0x420
[  177.179875][T10096]  ? __fget_files+0x2a/0x420
[  177.184480][T10096]  ? __fget_files+0x2a/0x420
[  177.189084][T10096]  ? __pfx_sock_ioctl+0x10/0x10
[  177.193947][T10096]  __se_sys_ioctl+0xf1/0x160
[  177.198543][T10096]  do_syscall_64+0xf3/0x230
[  177.203055][T10096]  ? clear_bhb_loop+0x45/0xa0
[  177.207735][T10096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.213635][T10096] RIP: 0033:0x7f175f78d169
[  177.218052][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.237661][T10096] RSP: 002b:00007f176052d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.246083][T10096] RAX: ffffffffffffffda RBX: 00007f175f9a5fa0 RCX: 00007f175f78d169
[  177.254059][T10096] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009
[  177.262031][T10096] RBP: 00007f175f80e2a0 R08: 0000000000000000 R09: 0000000000000000
[  177.270030][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.278001][T10096] R13: 0000000000000000 R14: 00007f175f9a5fa0 R15: 00007ffe8fcf5d18
[  177.285986][T10096]  </TASK>
[  177.289341][T10096] Kernel Offset: disabled
[  177.293671][T10096] Rebooting in 86400 seconds..