last executing test programs:

12.440213941s ago: executing program 0 (id=1236):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async)
listen(r0, 0xfffffffe) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4", 0x3}], 0x1)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0xb9e6e000)

12.439046468s ago: executing program 0 (id=1238):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0xc, &(0x7f00000028c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
sendmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0xfffffffffffffdae, &(0x7f0000000240)=[{&(0x7f0000000100)="0a63a9f5c154e19743c18540cf5052c35f00087d4de77bb94a76ccf731adafa50d8216a2d3da1c58d84ff5f83f7187bcbc19b7f72d4e3e39c2766b6842db541b389621a316ecac95895c432580b019aacf7ebcb6d29df09af96d8af18c1c9da3251b8ac038e6057f3f59c6937490e537bd385afacbbd8bea930d97bee087ac73b99f4b752262a9eb17dfc9755d32bc546dc8e2eb3476aa1a01191b05ff95ac442b3090355c09c313461ff3c385fcc4df4026a064a992a1266d5526fd1cc6a0d3526624ec02a7c562c460d956492e0d8d46810146012f9df6", 0x1}], 0x1}}], 0x1, 0x4000)
accept4$vsock_stream(r0, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000)

11.587121252s ago: executing program 0 (id=1247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="0000000d0000120000000007000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfce)

11.509471399s ago: executing program 1 (id=1248):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1)

11.508874975s ago: executing program 1 (id=1249):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r0, 0x8) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) (async)
sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) (async)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r1) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="620ac4ff000400007110030000000000950043"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r4 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, 0x0, &(0x7f0000000100)=0xfe5c) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="62a25641596b45acca0327943560ec44", 0x10) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="e7876c63034b5ea06b5f66200cd40400cdb3470679dfdd910411e969c9a42012fbd97a9e0eceaf0ac5fa884482339d79ab93c255e557b67c687b5975452d1a4e14eccabd1abfcd7ac9bc51dc2c4ce133cb"], 0x34c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

11.419929665s ago: executing program 1 (id=1251):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18007412c6bb00000000000000008500000007000000950000000000000000000000000000000000eaa55453aeced3a01a80f8b4ac57b37d3b358a3e50b5e4777f9590a47eec2f158f36e43e71e6f05abf8a669c827b83b6136b6d840ce586a70705d16b3904fc6495bb8c1bd79f025265c21bfefb2449f9b43be4d53ffeb49d5205f5e2fc"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2, 0x2, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x1f8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x79}}, @filter_kind_options=@f_bpf={{0x8}, {0x1bc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x1}}, @TCA_CTINFO_ACT={0x45, 0x3, {0x8, 0x8, 0x5, 0x0, 0xff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0xc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xc0, 0x1, [@m_ct={0xbc, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x92, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b6209427e7f3ac341d7c17699720b480343199351638cf1aaa801e3ac2d7f47644169b0fb5df7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket(0x28, 0x803, 0xfffffffe)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@getchain={0x44, 0x11, 0x43d, 0x1000000, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x6}, {0x3}, {0x0, 0x7}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xffffffeb}, {0x8, 0xb, 0x3b}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x800)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="383c74041001"], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r3, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
write$cgroup_subtree(r0, 0x0, 0x10448)
r7 = socket(0x2, 0x3, 0xfc)
setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000240)=0x13, 0x4)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd0, 0x0, 0x0)
recvfrom$inet(r7, 0x0, 0x0, 0x122, 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0xac7f4000)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8)

11.419572816s ago: executing program 0 (id=1252):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="3ac4f346136a09ae1c", 0x9, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c)
epoll_create1(0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
shutdown(r4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x5}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r6, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000d40)={0x57, 0x2})
listen(r0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x56, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028008000b408000000005000d000100e5ff"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

11.285471128s ago: executing program 1 (id=1255):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xaf01, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x4008af03, &(0x7f0000000040)=0x5)
r1 = socket(0x2b, 0xa, 0x1)
setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0)
bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x6, 0x6, 0x1c, 0x8}, 0x6)

11.285183264s ago: executing program 0 (id=1256):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1)

11.28484235s ago: executing program 1 (id=1257):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000880)=0x7ffffffd, 0x4)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
socket$inet(0xa, 0x801, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0x124, &(0x7f00000003c0)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)

11.147723457s ago: executing program 0 (id=1260):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x3c}}, 0x800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)

11.058427555s ago: executing program 32 (id=1260):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x3c}}, 0x800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)

11.008169312s ago: executing program 1 (id=1264):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="3ac4f346136a09ae1c", 0x9, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c)
epoll_create1(0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
shutdown(r4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x5}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r6, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000d40)={0x57, 0x2})
listen(r0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x56, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028008000b408000000005000d000100e5ff"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

10.916557022s ago: executing program 33 (id=1264):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="3ac4f346136a09ae1c", 0x9, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c)
epoll_create1(0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
shutdown(r4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x5}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r6, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000d40)={0x57, 0x2})
listen(r0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x56, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028008000b408000000005000d000100e5ff"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

1.77922321s ago: executing program 4 (id=1343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000003", @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)

1.689392246s ago: executing program 4 (id=1344):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.616257839s ago: executing program 2 (id=1345):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000003000000010000000000000011c20000", @ANYRES32, @ANYBLOB="6f0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050000000900000000000000", @ANYRES16, @ANYBLOB="148c7e1015aa0d000000f4269dcce3a0040000000c143fa47354eeedb50b45ef1b106ad7d55fa4a80729d825a7a3ce73175efb3234863c53a5136d431676b34692692a3815d80c313c46661fd1869db4c665e8c9fb"], 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x800, 0x32a, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x68, 0x0, 0x72, 0x2f, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x19, 0x2, [{0x2, 0x4, 'cs'}, {0x5, 0xf, "48e54dd24ba8e449f241078c02"}]}, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0x2, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}}]}, @generic={0x7, 0x10, "f5b64597ac2adeca4e131f06bce7"}, @generic={0x89, 0xe, "882ab44fbc3bcf55e19fcf15"}, @generic={0x83, 0x8, "10626ae12608"}, @ssrr={0x89, 0x17, 0xe7, [@remote, @remote, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}]}, @end, @end, @rr={0x7, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101]}]}}}}})
accept(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r4, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x48}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

1.615231859s ago: executing program 4 (id=1346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000001540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40814}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x1154, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x128, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7a, 0x1, "ab1d6a48a2095388f06261d1c9fa6eaefb5320e5be09f6747ff35b86d99fa216e57487185701295552a61d78a1bae9a8be6ebe0d51fda4c876125fe12b06b15ca41635aa7d06527bfd4fb82f7b9a349d7db92929d00f63262d1cf2bf2c9d2e978536f64192210f5e8f5a292c520b15a770a7c98699ce"}}, {0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9e, 0x2, "37b2d464dbb8861a272c4eb8b9cac5d245ea96285a7c3ab2e16ef157010cead50ab4dfbd49f028710f4170a6244f30cd2522ec647a7768e72085bdaedb1af1cef9a2bf1e94caa3f59572a4f123e71840385acbc3fc32b1cf0d8181e6b3e6be2689046c4ed530f5a863bb2bfe4cd7ef99f92ce41aa2e71f51fddfd113b2aa6d23137eec4111528122e43ead032a724869de8b907c49e66f777fa2"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1018, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "115b39a61913784729d82904468566ae981d95f2f88aa3fb6eac4d9779b5accc6b6cd14d696da6a4cb1df7263b7db3840b9adc7dea6cf201b56f31f4d6620b0cd8e15b88e89a45cb8defdffdbc2e3047eb098065670ca1c9ee1a2545344f28cde476128cd54688c70cd9ddcf9943941fcbdfc3e9926b1ee64af6c9cfeac50555dc6f817e130e88c11599189b59c15b238f1c77fd5b53d0ecde6e1383884b1d06e5236662e22cb79bdad5f6e35321f6cb12d491756629486a636366a4f541722f4197ae59260184d95079328b126f796cd2010a1e9cb07e0d19018c03bf21921dfd8959c1a8d56064709c47b5625ae474af6c915214508c050893c40982bcdb4f27a825194462df1c0a8d88ad655ee6abc462e1f240db942991f222cf25308c1b024f1d64818f92060bad89c20d25d317140e7624d65acf0775941866d437d1d369c9a4d3f26a604e888e0fd30bbbd6932430e285dd3a4162432faac9a67a9cef553c07252dde1f01aa1a20d7a1d8665d78617d6507d29540f68874116c16fcbd489cee2710c08710a57693f76770fcfb966f9091dca369b2ee68a52e42ca6924aa29eb183d55aefe4d981badbb3a1f82e29eaa80890e7b6f54a49ac8293db81e268f0f4457d41aa06b6f4e3baeaa202f7832c01f6868722afe9fa900b0345bdde64a69f23f216d2ce934f25bfd62e1b1b1c72c4e571b7a518758b587edbc26a771e21d605f95d172b9ee52ea9386292925579ecd7dff8ede69e17c22a79142014eab8133f020aca8db3b5f45e2a31ccd2d54d04049c03d95307ef5f3a199b65060fb7deea4780d5ec9eae3e72fa314d90d0d624f28bae89332b1db0e38e294e7ee5ed6fb9855816a3b6d34f14e0c29350cea2fffafd1d98dadf8b29a8d4ea4d1ca49afe7d2ad77615eeeaeb08f1f9a08582519d99403c23d80d66b695a727cd4ddf2f7792b226ef6a2ce65615c7312542e2a8e5224df1f9d1873dd4ffde30804f9f42a7fc712d687493173330cbd5c83fdea79a2b075bb6596343f3801b3fffd9ffab0d42ef12a88c4163b03c10b57ebfa5e47c4460f0e4b9bfcb87ba61b69c6d5172a0f7b0eb654277e3b08a9e388397c0257848aa7ff34d61f92472b05b56ac1d3b0c4cf01d9de579c6c8e9220fe150259ca1de36e2dc6a9683f1f6775c1195786167915aa24ae327733574d860e65bcf14d913e307e15f28ef465a40bf33b813326a6b108d7f221bb5e406c1e8d5849d05017d72d7e125c5d3d5921da282b85294eb18f42d7e53a37bac0bf6065b9df416d8541a2b5edf5765483e760f304d2fcf80b43f5514acb8faa76253005a104bf77d5b36c84b2264d970cdbf96267913550bc3044e0c9b7394a7f2864418065765931515d52cd10be43e049087ba51fec118962388660db2a2ca6a8fdaf966c2f8b8d7798a418f069447dce2a300114e576841af40e5be4b6a973b6c69d4b647f98b31ef77e0af8c24764466202aec88b47ae58a4486aa4255b41f24c352e9d81f3192d412cd77d019c1cc3eefee55f6b4b0a3f509a16fa9cc33d81482672e184d46d958ffbac06e8ff2014742d7f48da52ac2710a33703447887ebcd3518931f01a4a63fe640d39dde06d2af1fdc04cb04403783d65a4ebca31ffd3ea75580566a9871cdd70863302a5c5a75b1c5b45d3011fe4e017fd7d85e8426fc390111344c20c62c8884fca69ee258ba18f4ffdbbb102a35d7bf1f5a3ee518042e6e52c035ff8d0ad28ec16ad4d7cdcc350cc9155d2bdfc9beb0bbbe6fd200e410d4ca39c6a68d257506374694861925d28c8963a8b7afe58e46e656caa1f0e07f5f2ca2389b63399127cfc205a757beca963f8efe5fc5f47ec83c6bf55322a2e50099412ef724130ade9ee35d5cf5f149d4294d55220a57c9f0eeb8045e281bd9f843a630911a4e9c3613b3186a58ea0ffb8a0b94507c4be3232a41f0a9049dadaa82a05edc5426457a56968ca48da138f6ec43e4d0a5801e3ddc3f2c7126d0c52235cfe9e7ae654a7fc28edb0a95bf58ffdb97cf7f42957b0a80968878e268db6db601ee6e427c63f30dcb3d028f1938bb3438dbfd289e1eaa3f5be70b01e61262c550f3923da948341d5cb460bf4030b498a072c44165ef0dc57c2a93383386154d379a9fcd94b6b32710415633f3e8e2d0c2450a9bde6f4096e2bdb9b61fc6d74c00395c243498b5937e62a59a534810957c5e68e04403496019412e0b983e300d98c050bc18c28f867f4b3f5b9d4805ecabca902faa74e508cb890659a588b604b5dbccbaae70ba593236d289591deddeba2b4b8528aa80ecbd26ce30f535737a23bfb247fa56dce571a6360b074c7536c94eb7819c91e99fb2d77ef0c3d0d577df5c1212d2579c3e795bef5f24b5258d81d92838497c451c86cb5c52bb313983b005650f3d4281f280b79ded10e7244809ae157fe6b46738865329cfc432cbdb36dc823d0fdff1471e61babb21c2172dc9902a16140397f0c07cb29f6795b10a0238e392196d523ef0d88409e9f83a727d4998edce148d8b859568536df5fa171de30c3624626ce734c51573cf14c6b207116392fbf4b80fd2637aaac9c29ad0ca7ceb73b2d2c5b334f10ffa41a408456bc49f197bc87d4df5524b246c71133fb25158b6a5b1ac2c9c51a32c2b31111aad6c8bb248f5561024d427b308b8498f16558f85174f7942f2647d8cfb8c7502798284a7c6c39347dbc5c8d9f107e5b664c073ca8b7a30ccfd0ecd703a97f922cd01676adcc2455443d7840a381df9ccbe12f477d57f8ff834f0234761b7bc45170082b1f3616dc3e329bc3b9aba69c4a7e5023cc4610bfec42ae0ca07bb1e0fc00782025c4dbc30738f878a8043f8e716b13f8f6194c625cccb1271f7677149da827a790d24eee9c769baece557af3c61ec8b1551c22159c88724828b282a33f21b0caa54cea2c7cf3fc7fc8631da16a69a4e0dda2f1215c43223bbdb7d5a3b428fbe5162bf9841ddc82a428157f23fdf0a9134cf2eef8e8f4c863f0d4f42d685bced3625e5478ee95608c3f3027e12530990c04bfe89d472c96e7afc184dc6ee7f35d38860b09384207016cb2b9a0ec3c93f9d69554913931b206522f7f49181f5f01d3f7083fb56046872f8f09caefe9abb16da961c788b1660dd2726fcb3f709981c21566c4c1f0221197dd532df04ca487d07cf46df691a35c38710f132135e669fcdae01bdd6431ba49bdc33fe6cd219545af88c358c63eeac40a6d179c13fea890ba6b04cf1291ecea331ea224e3f92b8bb8f166ea16556cbd409a0b8eb776c72c9b9faa7acf257e9b45704600f75591b894516c12889fae8bf9e5ea3a7d0b063117120d29276d18b518c875d742621d8beb5fe891962d2143bbbca708878f860485cba7523f79ff33407665fb991f2119991cd7b54ffcad7d7b9b58623b79b8bb4030e5b38ec74383c97e91842daf2e8a64d13e484941bb2bbd47005d263e2bb65e7a33f65df3f8dd73536a7e2d9ab95cfeb9d204df93094a40a0a491a8a4d040b31a6404cb3ca689671b61309878eaf6b9a985eb19d8f1ca6f2d8ab6289710e409a1722a431f327ca6dc756f38629f21afd7afecca3b3553b94ff00ffd43cf617a04dcf0c106d27ca3972908cb5b6bf089b9fe53d147080855f770222d1f0851a2852fa985da0f1863ecd479eedb431d3d5b7bfd28dbd5fa4d367c4689278b56845758950af147b2cb8857455e66012f7d897ec9ea4e7c9f2c3d662e0efa02ffcac9fc5f3d44fb86bebf82b5d148e4a236ab683fd487a2b1c5e3b597bc53b47e03c599dbb1bfb5108b2d05c2072c476bbc718d28e5ca84fb597d22ca7012b55a83e8ef1adafd79c09ad144f106497b1e95575328cec1f4cdc1a0bbb63d010d17b167a867755bd2497221c5d53ab4a98029505180abb2dc680e437a4923f5b17101b2e1d7f21b35b4741009b74a226db638aaeab3dc597161ebefe484ce3a468639df9d0033416ac46d842fe9abbea168c3318d8e66dee954ec6ed6a9925d1d71574e7bfe85e2eed55b83f7bcc6b4ef8556008bb14cd2127017771e1a6048d81dfd4928e03ed31583cd7d1d39781e7d2adf57a02ed3f5c5421fd3147b33f6f6cb8a7258815bc728afbdde524a172a85cbe131b402a49a024c20ca3e3a3ca8758041d11637554312e8320bf4aced4e1c58cf6fd8126b504bbf06656772dd1d5d6e8db9aaa4860e7f9dc3df54752c9d9e90aa6c8a85480c31258d41e9dc809c5e00ea4cb992a2be05354427ac54d56e2a9634992cf85422d95dd4da93f15ef37ff9b10f03e057ef36a5e69fc7a7e852801642400b3b19ad46e2fb747d2fe565d8cc206c9138a7d526f4b5565e122f779735400be46ca34c8bab651215d88e7bff6473273658bb0d5840704d9f7f128d53d72aed3985c777ad5df2d63a1043e798e936c83acec07f4eb95c8ce6467cff7a77f5ad35e31b7436dec3cd8d0a7d377fe72fac587135b67268e948dbefc69fe7807588c629d863cf8ea72e008f592f7c285110db39eca3b2662905341d157fb5a2dbbdde3f032b4d601eae527dd46894a0a02804e313b31307376dbab5e8de3ccae80c8384e3029dabcb29fd537f2f8d596aa6cbb7da3392ffd50ff7cb15654e84ac427c8e1a457fcb28f9cf58b899dc2e6bce64dea81933647aea9c9b1d965f2c6b4e37e9aadcea9023195a37ba9dad040f315ae628836dd1c43075736960846e238395500a9ca2e895711c9b132c9f489cf86359c875860ddd3ae7509d37fc28b4d4b7d21b97756683ea86c364d3fe559a1cb52ba0fd3c216e0c9d8432b19dd184118c071841e13aa94111a480b375a45792ad693476389462f3a728c91ea04318bd3abf501f0b5ed7cfe27e3ce4114edef1775c0cc7491b02aedac73448a4d238dcc2181bff23d9dd371f9465ed9db2fc049e0d1228af0aed3bd7ca9c419363f85046d8d8d8f522ea5bd8febcefa9c73d308def4c1bb25b7a2d74147df4eb7e9b2ea96051dc7fb3ba133a34638af58055c279d1d13d3da1d71da6ac96d4e2ab9e33e0c03ee3c839d9d25d69b87b04ece605f2bde82a7abe7f778e86d5493e577089c692f259b8eb13be0cf61fb7616ebadd16381e0fd1f71041c5e2093dc2d3d1b9e0c77ca1d36ad8613c36440d31bd37b8c50fc1524d5c064b926f15e4ea4095a547dec8e7e02795db2c72fa1b7dbe4e255a23ec3f3696810753312c17f8c5b03bff50b5c021ada688dc35a4c883236a5f15e5cca86f7b9c673f050b90cb4c2c08773ed3ba254bf14ccf2ebecd21dbaa739b92976aa88056b38d8c83d065935031f7b971490772d87a4655021c38c30050d17c8f4b41ee7bb63b9f8e94602f50035a66530b9a69797aacdd33fa2d3c8f665886140432a8b8ee205fb4293dd14e34018cfd1ead5c40299b8b152b7592c39316f47341eaff9784884647f535ece9798ad5c085c645d86ccb0db662a2a8fe3c4190d685498dfb1b79226b5e3c1db1275b308d9ddafae0dfaa8e7be56c2e92369888d0b0064e45650c49dc93399cfb6fa26fecabe2607560834d0cb2f8f971f09b606236c9a4681b5e95d37e79a141d38554c08f17dc17ada2766dbb5095be1385c7d63bce0ed89dd9697d90e138081221318d421ee366132aa3d8f9e65558e124183c0feb83488ec101e04c9eb5fd267aa3d4789551c178680e400984bd260dab2c3fb9dd6a668f930f63a25f51704b00219b9a9a19ae5e347883afe33f10c76f673d9c269d085441d115d8cc6609518e647537de1fdfd88"}}]}]}, 0x1154}, 0x1, 0x0, 0x0, 0x20040050}, 0x4884)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xaf01, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x4004af07, &(0x7f0000000040)=0x5)

1.613493839s ago: executing program 2 (id=1347):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x207, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
unshare(0x6020480)
r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0xffff}}, 0x14)
ioctl$BTRFS_IOC_SCRUB(r0, 0x4008af21, &(0x7f0000001880)={0x0, 0x850, 0x401, 0x1})

1.483326957s ago: executing program 4 (id=1348):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000880)=0x7ffffffd, 0x4)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
socket$inet(0xa, 0x801, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0x124, &(0x7f00000003c0)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.396168947s ago: executing program 2 (id=1350):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfffffffffffffffc, 0x200, 0xf})
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r3, 0x5, 0x20}, &(0x7f00000001c0)=0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x7cc, 0x5, 0x3, 0x4}, {0xfff8, 0x80, 0x2, 0x1c}]}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)

1.39192666s ago: executing program 2 (id=1351):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0xedd2, 0x9, 0x2, [0x8, 0xc9]}})
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x64}], 0x1, 0x40010001, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1000400121bf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000480)={{0x0, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xfff, 0x7, 0x7, 0x5, 0x2, 0x7, 0x80000001, 0x5f38}, 0x8, [0x0]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff000)
recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xffffffffffffff4f}], 0x1, 0x0, 0xfffffffffffffdb7}, 0x10000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001040), 0x59, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xe1}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0xfffffffffffffe37}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0xfffffffffffffd81}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x40000083)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1.203366406s ago: executing program 3 (id=1352):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

949.105179ms ago: executing program 3 (id=1353):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000100)='\xd4u\xe5\x84D\xff\x86\x11\x1d\xf4\x84\xea\x0e\x9f\xc4\"\xa6\r\x7f`\xcb\xb7\x8f\xaa\xdb\x0f\x89\xf48\xee\x99\xfd\xb4\xfb\xd9=\xf2\xf7\xc4\xa9~\xcf\xdc\x1d\x05\x148\a?#8H\xfd\x84\xa1c\xeex\xcd\xef\x18\xa6]?\xd7\xc4)/D\x90(\x8etSO\n:F\x95s\xf7\x031\x9b3\xeb\x97\x0e\xb4\x19\x1d\xa0<a\xe7M #(\xdf~ta\x84\xa0\x84i,\xd1\\\x00x\x978\x11\x18\xfa\xa4G\x96\x93\x1bRTq\x80;3\xe6x\x9b\xae\x06\x02V\x06t\n\xc4\x12}\\o\x17-\xeb\xa7\x06l\xbfB8F\xea\xfd\xc6s\xb1|#\x17\xdd\xa6\xe8\x82\xcc@\x1e\x7f\xd4\xe7\x9c\xb7\xe8\\\xa4\x8a]V\xea\a\x00\x83\xbb\xfaw\x11\xdc\x8e\nH\xc1j\x88c\xeb\xe0W~\xdaAU>U:\xc1\x94\x83P\x8b\xbe\xd0\xaa\xa4v\xdc\r\bZ\xe5\xc9!\xe7\xc8\xb2\x17\xca\x93\xa7\xff\xf3\x88\x96<\xc4~5\xbd\x13\x932dg\x8d>g\xb8\xe8\xbbz)\x9fC,\xd7y\xbc\x02U67\xde\xb6\b\x96E>\"\xbedB\x14\xbe1\xca\xdd\fR\xc6=\xbc-6{\xc6};\a\x14\xa6\x8fR\x80E(\xa7n\x93\xd7\\\xf1Z\x8fP\x98\x1bg\xd5\x12\xc7\x82\xef\xdf#\x8d\x19,\xb0\\\xf3\x85Z\xe4\xa4!\xe4O\xfe\x12Hz3\x10$\x8a\xe4\xab\xd6\xcc8|#]6\xde%\xdfR\xafA\xc4]ft\x95\x8b\xd7\xc6\xb63bO\x1f\x95\x17\x8f^\x83\x01\x1c\xa2W*\xe8L\xfe\xb6[\xfe\xbd', 0xfda2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100fffe08000b4000000000300004802c0001800b0001007470726f787900001c00028008000140000000020800024002000000000000000000000a0900010073797a300000"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7, @ANYRES32, @ANYRES32=0x0, @ANYRES16=r7, @ANYBLOB="0000000014feff070000000001000000012fcb2eaf400fdae52a41"], 0x38, 0x2404c040}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10)
ioctl$int_in(r7, 0x5452, &(0x7f0000002d40)=0x4)
recvmmsg(r7, &(0x7f0000002c40)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000140)=""/80, 0x50}], 0x3, &(0x7f0000002240)=""/125, 0x7d}, 0x4}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)=""/211, 0xd3}], 0x1, &(0x7f0000002480)=""/208, 0xd0}, 0x5}, {{&(0x7f0000002580)=@rc, 0x80, &(0x7f0000002980)=[{&(0x7f0000002600)=""/205, 0xcd}, {&(0x7f0000002700)=""/219, 0xdb}, {&(0x7f0000002800)=""/206, 0xce}, {&(0x7f0000002900)=""/126, 0x7e}], 0x4, &(0x7f00000029c0)=""/201, 0xc9}, 0x6}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/84, 0x54}, {&(0x7f0000002b40)=""/52, 0x34}, {&(0x7f0000002b80)=""/74, 0x4a}], 0x3}, 0x6}], 0x4, 0x0, 0x0)

771.937874ms ago: executing program 3 (id=1354):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000003000000010000000000000011c20000", @ANYRES32, @ANYBLOB="6f0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050000000900000000000000", @ANYRES16, @ANYBLOB="148c7e1015aa0d000000f4269dcce3a0040000000c143fa47354eeedb50b45ef1b106ad7d55fa4a80729d825a7a3ce73175efb3234863c53a5136d431676b34692692a3815d80c313c46661fd1869db4c665e8c9fb"], 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x800, 0x32a, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x68, 0x0, 0x72, 0x2f, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x19, 0x2, [{0x2, 0x4, 'cs'}, {0x5, 0xf, "48e54dd24ba8e449f241078c02"}]}, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0x2, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}}]}, @generic={0x7, 0x10, "f5b64597ac2adeca4e131f06bce7"}, @generic={0x89, 0xe, "882ab44fbc3bcf55e19fcf15"}, @generic={0x83, 0x8, "10626ae12608"}, @ssrr={0x89, 0x17, 0xe7, [@remote, @remote, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}]}, @end, @end, @rr={0x7, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101]}]}}}}})
accept(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r4, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x48}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

650.215751ms ago: executing program 3 (id=1355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000001540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40814}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x1154, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x128, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7a, 0x1, "ab1d6a48a2095388f06261d1c9fa6eaefb5320e5be09f6747ff35b86d99fa216e57487185701295552a61d78a1bae9a8be6ebe0d51fda4c876125fe12b06b15ca41635aa7d06527bfd4fb82f7b9a349d7db92929d00f63262d1cf2bf2c9d2e978536f64192210f5e8f5a292c520b15a770a7c98699ce"}}, {0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9e, 0x2, "37b2d464dbb8861a272c4eb8b9cac5d245ea96285a7c3ab2e16ef157010cead50ab4dfbd49f028710f4170a6244f30cd2522ec647a7768e72085bdaedb1af1cef9a2bf1e94caa3f59572a4f123e71840385acbc3fc32b1cf0d8181e6b3e6be2689046c4ed530f5a863bb2bfe4cd7ef99f92ce41aa2e71f51fddfd113b2aa6d23137eec4111528122e43ead032a724869de8b907c49e66f777fa2"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1018, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}]}]}, 0x1154}, 0x1, 0x0, 0x0, 0x20040050}, 0x4884)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xaf01, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x4004af07, &(0x7f0000000040)=0x5)

648.355743ms ago: executing program 2 (id=1361):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{r0}, 0x8, &(0x7f00000000c0)=[0x81, 0x200, 0x9, 0x81, 0x7cc, 0xf4a, 0x80, 0x9], 0x1, 0xf, 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0)
listen(r0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)

161.81493ms ago: executing program 4 (id=1356):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x207, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
unshare(0x6020480)
r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0xffff}}, 0x14)
ioctl$BTRFS_IOC_SCRUB(r0, 0x4008af21, &(0x7f0000001880)={0x0, 0x850, 0x401, 0x1})

158.512843ms ago: executing program 2 (id=1363):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000880)=0x7ffffffd, 0x4)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
socket$inet(0xa, 0x801, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0x124, &(0x7f00000003c0)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

119.625961ms ago: executing program 3 (id=1357):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfffffffffffffffc, 0x200, 0xf})
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r3, 0x5, 0x20}, &(0x7f00000001c0)=0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x7cc, 0x5, 0x3, 0x4}, {0xfff8, 0x80, 0x2, 0x1c}]}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)

4.584798ms ago: executing program 3 (id=1358):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400001260ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000191"], 0xfdef)

0s ago: executing program 4 (id=1359):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27244' (ED25519) to the list of known hosts.
syzkaller login: [   47.296998][ T5799] cgroup: Unknown subsys name 'net'
[   47.463942][ T5799] cgroup: Unknown subsys name 'cpuset'
[   47.467817][ T5799] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.782267][ T5799] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.299663][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.302771][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.305865][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.309492][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.312290][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.360257][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.375125][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.378034][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.382152][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.384731][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.387796][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.391060][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.399636][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.419771][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.423187][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.531574][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   52.643916][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.646947][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.650523][ T5846] bridge_slave_0: entered allmulticast mode
[   52.653386][ T5846] bridge_slave_0: entered promiscuous mode
[   52.657425][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.660430][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.662844][ T5846] bridge_slave_1: entered allmulticast mode
[   52.665621][ T5846] bridge_slave_1: entered promiscuous mode
[   52.694457][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.712453][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.784498][ T5846] team0: Port device team_slave_0 added
[   52.787881][ T5846] team0: Port device team_slave_1 added
[   52.793219][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   52.826938][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.830722][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.839770][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.844548][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   52.861741][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.864189][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.873280][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.934234][ T5846] hsr_slave_0: entered promiscuous mode
[   52.936771][ T5846] hsr_slave_1: entered promiscuous mode
[   52.974377][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.976841][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.980151][ T5852] bridge_slave_0: entered allmulticast mode
[   52.983385][ T5852] bridge_slave_0: entered promiscuous mode
[   53.000900][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.003456][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.005943][ T5851] bridge_slave_0: entered allmulticast mode
[   53.010404][ T5851] bridge_slave_0: entered promiscuous mode
[   53.013818][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.016497][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.019567][ T5852] bridge_slave_1: entered allmulticast mode
[   53.022432][ T5852] bridge_slave_1: entered promiscuous mode
[   53.044044][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.046597][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.051317][ T5851] bridge_slave_1: entered allmulticast mode
[   53.054195][ T5851] bridge_slave_1: entered promiscuous mode
[   53.073905][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.078766][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.114688][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.118850][ T5852] team0: Port device team_slave_0 added
[   53.126469][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.132217][ T5852] team0: Port device team_slave_1 added
[   53.172762][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.175177][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.184263][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.201796][ T5851] team0: Port device team_slave_0 added
[   53.204422][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.206992][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.216630][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.225571][ T5851] team0: Port device team_slave_1 added
[   53.280397][ T5852] hsr_slave_0: entered promiscuous mode
[   53.283469][ T5852] hsr_slave_1: entered promiscuous mode
[   53.285852][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   53.288334][ T5852] Cannot create hsr debugfs directory
[   53.291730][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.294758][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.304093][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.317102][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.319640][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.328642][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.382958][ T5851] hsr_slave_0: entered promiscuous mode
[   53.385967][ T5851] hsr_slave_1: entered promiscuous mode
[   53.388659][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   53.391101][ T5851] Cannot create hsr debugfs directory
[   53.431287][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.451780][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.468743][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.485480][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.587772][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.594841][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.601903][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.610777][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.673985][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.682939][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.688201][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.695977][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.756354][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.801594][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.808523][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   53.829030][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.831879][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.840979][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   53.850446][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.854415][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.856945][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.867854][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.870809][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.884484][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.887005][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.913759][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   53.929935][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.932492][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.952245][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.954979][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.124323][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.139320][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.144337][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.176481][ T5852] veth0_vlan: entered promiscuous mode
[   54.194438][ T5852] veth1_vlan: entered promiscuous mode
[   54.223806][ T5851] veth0_vlan: entered promiscuous mode
[   54.226870][ T5846] veth0_vlan: entered promiscuous mode
[   54.235646][ T5846] veth1_vlan: entered promiscuous mode
[   54.240990][ T5851] veth1_vlan: entered promiscuous mode
[   54.256466][ T5852] veth0_macvtap: entered promiscuous mode
[   54.265934][ T5852] veth1_macvtap: entered promiscuous mode
[   54.282458][ T5846] veth0_macvtap: entered promiscuous mode
[   54.294806][ T5851] veth0_macvtap: entered promiscuous mode
[   54.303285][ T5846] veth1_macvtap: entered promiscuous mode
[   54.307233][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.316536][ T5851] veth1_macvtap: entered promiscuous mode
[   54.322433][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.336933][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.340583][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.345709][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.351715][ T5855] Bluetooth: hci0: command tx timeout
[   54.363170][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.369972][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.381239][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.390428][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.400809][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.407443][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.411918][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.423618][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.428027][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.439603][ T5855] Bluetooth: hci1: command tx timeout
[   54.451950][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.455240][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.458656][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.476543][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.509423][ T5855] Bluetooth: hci2: command tx timeout
[   54.538750][ T5055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.542752][ T5055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.553122][ T4861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.557513][ T4861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.584986][ T4861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.587707][ T4861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.598684][ T5055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.604109][ T5055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.636504][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.642601][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.677468][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.682639][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.699816][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.753640][ T5913] vlan2: entered promiscuous mode
[   54.760121][ T5913] vlan2: entered allmulticast mode
[   54.761910][ T5913] hsr_slave_1: entered allmulticast mode
[   54.799752][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   54.822216][ T5917] Bluetooth: MGMT ver 1.23
[   55.057115][ T5924] netlink: 'syz.0.4': attribute type 2 has an invalid length.
[   55.065277][ T5924] Zero length message leads to an empty skb
[   55.358585][ T5928] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   55.373060][ T5925] IPv6: NLM_F_CREATE should be specified when creating new route
[   56.172921][ T5937] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   56.194309][ T5942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   56.264540][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.288167][ T5947] syzkaller0: entered promiscuous mode
[   56.299495][ T5947] syzkaller0: entered allmulticast mode
[   56.446230][ T5855] Bluetooth: hci0: command tx timeout
[   56.510168][ T5855] Bluetooth: hci1: command tx timeout
[   56.591969][ T5855] Bluetooth: hci2: command tx timeout
[   57.928668][ T5992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'.
[   57.950785][ T5949] Set syz1 is full, maxelem 65536 reached
[   58.240040][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.244359][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.321596][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.331616][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.398624][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.405931][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.415578][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.422905][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.589858][ T5855] Bluetooth: hci1: command tx timeout
[   58.677956][ T5855] Bluetooth: hci2: command tx timeout
[   59.251808][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[   59.457969][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.668311][ T6068] bridge_slave_0: left allmulticast mode
[   59.670886][ T6068] bridge_slave_0: left promiscuous mode
[   59.673499][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.677761][ T6068] bridge_slave_1: left allmulticast mode
[   59.680723][ T6068] bridge_slave_1: left promiscuous mode
[   59.683195][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.688779][ T6068] bond0: (slave bond_slave_0): Releasing backup interface
[   59.692901][ T6068] bond0: (slave bond_slave_1): Releasing backup interface
[   59.696906][ T6068] team0: Port device team_slave_0 removed
[   59.700297][ T6068] team0: Port device team_slave_1 removed
[   59.702937][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.706739][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.080678][ T6099] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[   60.091653][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'.
[   60.214826][ T6109] team0: Device gtp0 is of different type
[   60.679172][ T5855] Bluetooth: hci1: command tx timeout
[   60.749170][ T5855] Bluetooth: hci2: command tx timeout
[   61.366951][ T6148] vxcan2: entered promiscuous mode
[   61.813500][ T6173] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.69'.
[   61.819061][ T6173] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   61.822171][ T6173] openvswitch: netlink: Duplicate key (type 0).
[   61.839306][ T6167] nbd0: detected capacity change from 0 to 875674160
[   61.845203][   T56] block nbd0: Receive control failed (result -32)
[   61.846465][ T5850] block nbd0: Send control failed (result -32)
[   61.851431][ T5850] block nbd0: Request send failed, requeueing
[   61.856742][ T1117] block nbd0: Dead connection, failed to find a fallback
[   61.861610][ T1117] block nbd0: shutting down sockets
[   61.863670][ T1117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.866855][ T1117] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.870648][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.874154][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.879774][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.884072][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.887814][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.896775][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.904238][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.912200][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.915864][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.927235][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.932313][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.935634][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.938780][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.944986][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.950187][ T5850] ldm_validate_partition_table(): Disk read failed.
[   61.952600][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.955582][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.960574][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   61.964456][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.967585][ T5850] Dev nbd0: unable to read RDB block 0
[   61.973338][ T5850]  nbd0: unable to read partition table
[   61.975521][ T6181] sctp: [Deprecated]: syz.1.74 (pid 6181) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.975521][ T6181] Use struct sctp_sack_info instead
[   61.986390][ T5850] ldm_validate_partition_table(): Disk read failed.
[   61.990579][ T5850] Dev nbd0: unable to read RDB block 0
[   61.994728][ T5850]  nbd0: unable to read partition table
[   62.041929][ T6187] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[   62.143842][ T6189] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   62.152902][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   62.156201][ T6190] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   62.160853][ T6190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.165239][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   62.165421][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   62.185096][  T791] IPVS: starting estimator thread 0...
[   62.257675][ T6197] syzkaller1: entered promiscuous mode
[   62.263332][ T6197] syzkaller1: entered allmulticast mode
[   62.289618][ T6192] IPVS: using max 78 ests per chain, 187200 per kthread
[   62.322490][ T6201] netlink: 'syz.0.80': attribute type 4 has an invalid length.
[   62.326108][ T6201] netlink: 152 bytes leftover after parsing attributes in process `syz.0.80'.
[   62.338275][ T6201] : renamed from bond0 (while UP)
[   62.443669][ T6210] openvswitch: netlink: Missing key (keys=40, expected=80)
[   62.744210][ T6224] netlink: 176 bytes leftover after parsing attributes in process `syz.0.87'.
[   62.873473][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   63.036844][ T6230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.90'.
[   63.534164][ T6243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.93'.
[   63.689657][ T6253] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.485577][ T6284] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   64.500558][ T6284] bond0: entered promiscuous mode
[   64.502387][ T6284] bond0: entered allmulticast mode
[   64.504615][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.760910][ T6292] vlan0: entered promiscuous mode
[   64.768225][ T6292] team0: Port device vlan0 added
[   64.908182][ T6299] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.917114][ T6301] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.926317][ T6299] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.931032][ T6301] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.933922][ T6299] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.936856][ T6299] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.942043][ T6301] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.944190][ T6299] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   64.947061][ T6301] netlink: 'syz.1.114': attribute type 4 has an invalid length.
[   65.387327][ T6320] __nla_validate_parse: 3 callbacks suppressed
[   65.387339][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   65.712284][ T6343] syzkaller1: entered promiscuous mode
[   65.714155][ T6343] syzkaller1: entered allmulticast mode
[   65.718699][ T6343] netlink: 14 bytes leftover after parsing attributes in process `syz.0.126'.
[   65.805699][ T6343]  (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.810880][ T6343]  (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.814881][ T6343]  (unregistering): Released all slaves
[   66.479342][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[   66.547656][ T6400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.557025][  T791] IPVS: starting estimator thread 0...
[   66.561009][ T6400] tipc: Failed to remove unknown binding: 66,1,1/0:4094102194/4094102196
[   66.648975][ T6406] IPVS: using max 82 ests per chain, 196800 per kthread
[   66.651663][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'.
[   66.654878][ T6411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'.
[   66.929968][ T6429] sock: sock_set_timeout: `syz.1.158' (pid 6429) tries to set negative timeout
[   66.991377][ T6432] syzkaller1: entered promiscuous mode
[   66.993400][ T6432] syzkaller1: entered allmulticast mode
[   66.996805][ T6432] netlink: 14 bytes leftover after parsing attributes in process `syz.0.160'.
[   67.528305][ T6465] validate_nla: 23 callbacks suppressed
[   67.528316][ T6465] netlink: 'syz.0.172': attribute type 3 has an invalid length.
[   67.537107][ T6465] netlink: 'syz.0.172': attribute type 1 has an invalid length.
[   67.584500][ T6467] trusted_key: syz.2.173 sent an empty control message without MSG_MORE.
[   67.625663][ T6469] syzkaller1: entered allmulticast mode
[   68.216798][ T6486] bridge0: port 3(macsec1) entered blocking state
[   68.219669][ T6486] bridge0: port 3(macsec1) entered disabled state
[   68.223013][ T6486] macsec1: entered allmulticast mode
[   68.227213][ T6486] macsec1: left allmulticast mode
[   68.442013][ T6493] syzkaller0: entered promiscuous mode
[   68.444136][ T6493] syzkaller0: entered allmulticast mode
[   69.315742][ T6524] netlink: 'syz.2.195': attribute type 11 has an invalid length.
[   69.320445][ T6524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.195'.
[   69.698153][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.917359][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   69.921015][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'.
[   70.025604][ T6580] netlink: 'syz.2.214': attribute type 2 has an invalid length.
[   70.085933][ T6589] netlink: 'syz.2.216': attribute type 4 has an invalid length.
[   70.094541][ T6589] netlink: 'syz.2.216': attribute type 4 has an invalid length.
[   70.365375][ T6623] netlink: 248 bytes leftover after parsing attributes in process `syz.1.229'.
[   70.402014][ T6627] netlink: 'syz.0.230': attribute type 2 has an invalid length.
[   70.405340][ T6627] netlink: 'syz.0.230': attribute type 8 has an invalid length.
[   70.408654][ T6627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.230'.
[   70.813960][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'.
[   70.869709][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'.
[   70.911375][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[   70.986699][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'.
[   70.994312][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'.
[   71.013585][ T6672] team0: Mode "" not found
[   71.017271][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'.
[   71.020217][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'.
[   71.072749][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.075151][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.193701][ T6690] team0: Port device gtp0 added
[   71.655429][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   71.928317][ T6727] netlink: 'syz.2.266': attribute type 1 has an invalid length.
[   71.933485][ T6727] netlink: 'syz.2.266': attribute type 1 has an invalid length.
[   72.056593][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'.
[   73.044646][ T6763] syzkaller1: entered promiscuous mode
[   73.046605][ T6763] syzkaller1: entered allmulticast mode
[   73.239156][ T5855] Bluetooth: hci2: command tx timeout
[   73.911777][ T6841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.955444][ T6841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.000543][ T6841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.066228][ T6841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.134216][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.167603][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.172115][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.191388][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.376286][ T6940] __nla_validate_parse: 9 callbacks suppressed
[   76.376297][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'.
[   76.536081][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[   76.590285][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'.
[   77.098058][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   77.104256][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'.
[   77.257459][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'.
[   78.922645][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'.
[   78.977665][ T7060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.375'.
[   79.075761][ T7069] team0: Port device gtp1 added
[   79.170350][ T7079] tipc: Started in network mode
[   79.172080][ T7079] tipc: Node identity , cluster identity 4711
[   79.174137][ T7079] tipc: Failed to obtain node identity
[   79.176385][ T7079] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.404032][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'.
[   79.415425][ T7110] syzkaller1: entered promiscuous mode
[   79.419377][ T7110] syzkaller1: entered allmulticast mode
[   79.424404][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'.
[   80.417544][ T7150] netlink: 'syz.1.409': attribute type 16 has an invalid length.
[   80.421010][ T7150] netlink: 'syz.1.409': attribute type 1 has an invalid length.
[   80.424156][ T7150] netlink: 'syz.1.409': attribute type 2 has an invalid length.
[   80.725050][ T7164] tap0: tun_chr_ioctl cmd 1074025676
[   80.727552][ T7164] tap0: owner set to 0
[   80.823887][ T7170] netlink: 'syz.1.418': attribute type 2 has an invalid length.
[   80.986543][ T7192] syz.1.425 uses old SIOCAX25GETINFO
[   81.155566][ T7199] netlink: 'syz.0.427': attribute type 13 has an invalid length.
[   81.161827][ T7199] netlink: 'syz.0.427': attribute type 17 has an invalid length.
[   81.215877][ T7199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.310513][   T10] cfg80211: failed to load regulatory.db
[   81.496910][ T7232] __nla_validate_parse: 7 callbacks suppressed
[   81.496922][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'.
[   81.550189][ T7232] macvlan2: entered promiscuous mode
[   81.552009][ T7232] macvlan2: entered allmulticast mode
[   81.555108][ T7232] bond1: (slave macvlan2): Opening slave failed
[   81.907287][ T7279] netlink: 'syz.0.457': attribute type 178 has an invalid length.
[   81.915283][ T7279] netlink: 'syz.0.457': attribute type 2 has an invalid length.
[   81.918494][ T7279] netlink: 'syz.0.457': attribute type 5 has an invalid length.
[   82.044432][ T7299] netlink: 676 bytes leftover after parsing attributes in process `syz.0.464'.
[   82.047437][ T7299] netlink: 676 bytes leftover after parsing attributes in process `syz.0.464'.
[   82.076167][ T7302] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   82.140385][ T7305] netlink: 'syz.0.466': attribute type 7 has an invalid length.
[   82.150849][ T7305] : entered promiscuous mode
[   82.226311][ T7316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.470'.
[   82.235001][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'.
[   82.604348][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'.
[   82.671047][ T7351] team0: entered promiscuous mode
[   82.673108][ T7351] team_slave_0: entered promiscuous mode
[   82.675297][ T7351] team_slave_1: entered promiscuous mode
[   82.681238][ T7350] team0: left promiscuous mode
[   82.683587][ T7350] team_slave_0: left promiscuous mode
[   82.685947][ T7350] team_slave_1: left promiscuous mode
[   82.775179][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.781030][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.937158][ T7371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.490'.
[   83.184091][ T7376] pim6reg: entered allmulticast mode
[   83.517295][ T7382] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.493'.
[   84.706622][ T7444] tipc: Started in network mode
[   84.708666][ T7444] tipc: Node identity 26edb18d184e, cluster identity 4711
[   84.714797][ T7444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.718999][ T7444] syzkaller0: entered promiscuous mode
[   84.721321][ T7444] syzkaller0: entered allmulticast mode
[   84.742365][ T7444] tipc: Resetting bearer <eth:syzkaller0>
[   84.745147][ T7447] tipc: Started in network mode
[   84.747357][ T7447] tipc: Node identity 2, cluster identity 5
[   84.749970][ T7447] tipc: Node number set to 2
[   84.751908][ T7447] tipc: Cannot configure node identity twice
[   84.758004][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'.
[   84.779248][ T7447] syzkaller0: entered promiscuous mode
[   84.781347][ T7447] syzkaller0: entered allmulticast mode
[   84.952272][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'.
[   85.677722][ T7442] tipc: Resetting bearer <eth:syzkaller0>
[   85.689059][ T7442] tipc: Disabling bearer <eth:syzkaller0>
[   85.840008][ T7476] batadv_slave_0: entered promiscuous mode
[   85.852647][ T7476] vlan2: entered allmulticast mode
[   85.854884][ T7476] bridge_slave_0: entered allmulticast mode
[   85.913485][ T7475] batadv_slave_0: left promiscuous mode
[   86.725401][   T24] IPVS: starting estimator thread 0...
[   86.735174][ T7522] syzkaller1: entered promiscuous mode
[   86.737006][ T7522] syzkaller1: entered allmulticast mode
[   86.809008][ T7523] IPVS: using max 81 ests per chain, 194400 per kthread
[   86.834360][ T7528] __nla_validate_parse: 3 callbacks suppressed
[   86.834373][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'.
[   87.232702][ T7541] syzkaller0: entered promiscuous mode
[   87.235086][ T7541] syzkaller0: entered allmulticast mode
[   87.581530][ T7565] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   87.585706][ T7565] warning: `syz.2.554' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.598427][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'.
[   87.602166][ T7565] validate_nla: 11 callbacks suppressed
[   87.602174][ T7565] netlink: 'syz.2.554': attribute type 10 has an invalid length.
[   87.606937][ T7565] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   87.612362][ T7565] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   87.621330][ T7565] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.624649][ T7565] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.067865][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'.
[   88.078391][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.085128][ T7584] bond0: (slave rose0): Enslaving as an active interface with an up link
[   88.230578][ T7599] team0: Device gtp0 is of different type
[   88.524006][ T7627] netlink: 'syz.2.569': attribute type 13 has an invalid length.
[   88.529706][ T7627] netlink: 'syz.2.569': attribute type 17 has an invalid length.
[   88.592603][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.597310][ T7627] 8021q: adding VLAN 0 to HW filter on device team0
[   88.605232][ T7627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.847561][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[   88.856135][ T7638] netlink: 'syz.2.573': attribute type 3 has an invalid length.
[   88.861879][ T7638] netlink: 'syz.2.573': attribute type 3 has an invalid length.
[   88.913382][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'.
[   89.156409][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'.
[   89.178350][ T7654] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.184377][ T7654] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   89.228249][ T7656] macvlan3: entered promiscuous mode
[   89.230840][ T7656] macvlan3: entered allmulticast mode
[   89.233182][ T7656] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   89.279269][ T7654] netlink: 'syz.2.578': attribute type 1 has an invalid length.
[   89.607051][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.628624][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.647545][ T7684] netlink: 'syz.0.591': attribute type 2 has an invalid length.
[   89.657341][ T7684] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[   89.661779][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[   89.677713][ T7684] netlink: 140 bytes leftover after parsing attributes in process `syz.0.591'.
[   89.823023][   T33] audit: type=1800 audit(1755550444.426:2): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.588" name="cgroup.controllers" dev="tmpfs" ino=1016 res=0 errno=0
[   89.842054][ T7692] pim6reg: entered allmulticast mode
[   89.846469][ T7692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.968325][ T7705] veth2: entered allmulticast mode
[   90.014052][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'.
[   90.021246][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'.
[   90.203940][ T7718] netlink: 'syz.0.603': attribute type 13 has an invalid length.
[   91.369455][ T7779] batadv0: entered promiscuous mode
[   91.372243][ T7779] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   91.375555][ T7779] hsr1: entered allmulticast mode
[   91.377341][ T7779] batadv0: entered allmulticast mode
[   91.380832][ T7779] 8021q: adding VLAN 0 to HW filter on device hsr1
[   91.386123][ T7779] batadv0: left promiscuous mode
[   91.577307][ T7790] delete_channel: no stack
[   91.753337][ T7798] vlan0: entered promiscuous mode
[   91.763870][ T7798] team0: Port device vlan0 added
[   92.002600][ T7809] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20004
[   92.161931][ T7812] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   93.504349][ T7886] __nla_validate_parse: 9 callbacks suppressed
[   93.504363][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'.
[   93.871793][ T7908] syz.0.663 (7908) used greatest stack depth: 17560 bytes left
[   94.614841][ T7924] vlan0: left promiscuous mode
[   94.627956][ T7924] veth0_to_team: entered promiscuous mode
[   94.631337][ T7924] veth0_to_team: entered allmulticast mode
[   94.671894][ T7926] sctp: [Deprecated]: syz.2.668 (pid 7926) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.671894][ T7926] Use struct sctp_sack_info instead
[   94.909538][ T7953] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[   94.925171][ T7953] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.944672][ T7953] 8021q: adding VLAN 0 to HW filter on device batadv1
[   94.950005][ T7953] bond1: (slave batadv1): making interface the new active one
[   94.954433][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'.
[   94.956052][ T7953] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   95.674331][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'.
[   95.677317][ T7989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.687'.
[   95.684254][ T7989] bridge0: port 3(vlan2) entered blocking state
[   95.686687][ T7989] bridge0: port 3(vlan2) entered disabled state
[   95.689725][ T7989] vlan2: entered allmulticast mode
[   95.691438][ T7989] bridge0: entered allmulticast mode
[   95.694555][ T7989] vlan2: left allmulticast mode
[   95.696246][ T7989] bridge0: left allmulticast mode
[   95.804064][ T7997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.807287][ T7998] syzkaller0: entered promiscuous mode
[   95.814306][ T7998] syzkaller0: entered allmulticast mode
[   95.826240][ T7997] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   95.849081][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.855575][ T7999] tipc: Resetting bearer <eth:syzkaller0>
[   95.859326][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.862383][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.865398][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.868609][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.881135][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.885851][   T33] audit: type=1800 audit(1755550450.486:3): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.690" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1214 res=0 errno=0
[   95.902270][ T7996] tipc: Resetting bearer <eth:syzkaller0>
[   95.912042][ T7996] tipc: Disabling bearer <eth:syzkaller0>
[   96.361674][ T8039] syzkaller0: entered promiscuous mode
[   96.364168][ T8039] syzkaller0: entered allmulticast mode
[   96.378072][ T8039] netem: change failed
[   96.790467][ T8069] netlink: 'syz.0.717': attribute type 83 has an invalid length.
[   98.556025][ T8106] syzkaller1: entered promiscuous mode
[   98.558301][ T8106] syzkaller1: entered allmulticast mode
[   99.010322][ T8158] veth4: entered allmulticast mode
[   99.478523][ T8196] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.621403][ T8207] team0: Port device gtp2 added
[   99.816019][ T8222] __nla_validate_parse: 4 callbacks suppressed
[   99.816031][ T8222] netlink: 488 bytes leftover after parsing attributes in process `syz.2.770'.
[   99.822405][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'.
[  100.324477][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'.
[  100.340500][ T8253] netlink: 19 bytes leftover after parsing attributes in process `syz.1.782'.
[  101.598496][ T8378] netlink: 'syz.2.800': attribute type 4 has an invalid length.
[  101.645687][ T8382] IPVS: set_ctl: invalid protocol: 135 172.30.1.1:20001
[  101.664332][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  101.671716][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  101.757272][ T8393] netlink: 'syz.0.810': attribute type 1 has an invalid length.
[  101.771765][ T8395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.811'.
[  101.782609][ T8393] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  101.796357][ T8393] veth3: entered promiscuous mode
[  101.801499][ T8393] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  101.810248][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'.
[  101.821014][ T5884] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  101.821070][ T8393] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.941258][ T5875] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  102.054507][ T8419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.136205][ T8432] delete_channel: no stack
[  102.186791][ T8439] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  102.627284][ T8467] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  102.947327][ T5855] Bluetooth: hci2: link tx timeout
[  102.951856][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.958616][ T5855] Bluetooth: hci2: link tx timeout
[  102.960553][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.963332][ T5855] Bluetooth: hci2: link tx timeout
[  102.967536][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.970092][ T5855] Bluetooth: hci2: link tx timeout
[  102.971790][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.572875][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'.
[  103.597082][ T8534] tipc: Started in network mode
[  103.598766][ T8534] tipc: Node identity e0000001, cluster identity 4711
[  103.601426][ T8534] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.774832][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.867'.
[  103.783468][ T8560] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  103.788250][ T8560] gretap1: entered promiscuous mode
[  103.792367][ T8560] gretap1: entered allmulticast mode
[  103.794752][ T8559] syzkaller1: entered promiscuous mode
[  103.797516][ T8559] syzkaller1: entered allmulticast mode
[  104.860631][ T8617] IPv6: Can't replace route, no match found
[  104.989391][ T5855] Bluetooth: hci2: command 0x0406 tx timeout
[  105.003116][ T8624] __nla_validate_parse: 1 callbacks suppressed
[  105.003129][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'.
[  105.223235][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  105.235180][ T8649] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.610861][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.615226][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.618345][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.624602][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.628108][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.633003][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.637782][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.641413][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.644533][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  106.647640][ T8702] netlink: 'syz.0.916': attribute type 2 has an invalid length.
[  109.184249][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.188713][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.253344][ T8809] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  109.425961][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  109.546178][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[  109.549874][ T8844] tipc: Enabled bearer <eth:vlan0>, priority 18
[  109.553888][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'.
[  109.669998][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'.
[  109.674512][ T8850] block nbd1: shutting down sockets
[  109.701677][ T8852] openvswitch: netlink: IP tunnel dst address not specified
[  109.906983][ T8861] tipc: Enabled bearer <eth:gre0>, priority 10
[  110.037060][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'.
[  110.241502][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.968'.
[  110.401858][ T8903] team0: Port device gtp3 added
[  110.665440][ T8927] sctp: [Deprecated]: syz.2.977 (pid 8927) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.665440][ T8927] Use struct sctp_sack_info instead
[  110.671591][   T24] tipc: Node number set to 3758096385
[  110.908590][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'.
[  110.991879][ T8957] syzkaller0: entered promiscuous mode
[  110.994361][ T8957] syzkaller0: entered allmulticast mode
[  112.314935][ T8991] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.804036][ T9012] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  113.119902][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'.
[  113.126164][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'.
[  113.461893][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1022'.
[  113.757817][ T9083] validate_nla: 58 callbacks suppressed
[  113.757833][ T9083] netlink: 'syz.0.1033': attribute type 1 has an invalid length.
[  113.766749][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'.
[  113.903933][ T9100] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1039'.
[  113.930991][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'.
[  113.934713][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'.
[  113.943781][ T9106] tipc: Resetting bearer <eth:vlan0>
[  113.946757][ T9106] vlan0: entered promiscuous mode
[  114.107064][   T33] audit: type=1804 audit(1755550468.706:4): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1048" name="/newroot/318/cgroup.controllers" dev="tmpfs" ino=1629 res=1 errno=0
[  114.116987][   T33] audit: type=1800 audit(1755550468.706:5): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1048" name="cgroup.controllers" dev="tmpfs" ino=1629 res=0 errno=0
[  114.166885][ T9125] syzkaller1: entered allmulticast mode
[  114.292692][ T9138] syzkaller1: entered promiscuous mode
[  114.294872][ T9138] syzkaller1: entered allmulticast mode
[  114.427792][ T9148] netlink: 'syz.1.1058': attribute type 12 has an invalid length.
[  114.657123][ T9174] syzkaller0: entered promiscuous mode
[  114.659990][ T9174] syzkaller0: entered allmulticast mode
[  115.358844][ T9209] netlink: 'syz.0.1079': attribute type 4 has an invalid length.
[  115.537536][ T9217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.540063][ T9218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.544000][ T9217] syzkaller0: entered promiscuous mode
[  115.546090][ T9217] syzkaller0: entered allmulticast mode
[  115.568714][ T9217] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  115.583846][ T9217] tipc: Resetting bearer <eth:syzkaller0>
[  115.640903][ T9216] tipc: Resetting bearer <eth:syzkaller0>
[  115.653871][ T9216] tipc: Disabling bearer <eth:syzkaller0>
[  115.799674][ T9237] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  115.803318][ T9237] __nla_validate_parse: 4 callbacks suppressed
[  115.803336][ T9237] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1090'.
[  115.805006][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  115.830385][ T9240] gtp4: entered promiscuous mode
[  115.832299][ T9240] gtp4: entered allmulticast mode
[  116.073268][ T9260] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  116.308746][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.312244][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.322256][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'.
[  116.422331][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.431915][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.541326][ T5884] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.545903][ T5884] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.548725][ T5884] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.558029][ T5884] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.652123][ T9305] netlink: 'syz.1.1110': attribute type 12 has an invalid length.
[  117.547659][ T9309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  117.614467][ T5884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.618453][ T5884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.624724][ T5884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.634942][ T5884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.791758][ T9321] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1115'.
[  117.829519][ T9326] netlink: 'syz.2.1117': attribute type 12 has an invalid length.
[  118.103138][ T9351] sctp: [Deprecated]: syz.2.1124 (pid 9351) Use of int in maxseg socket option.
[  118.103138][ T9351] Use struct sctp_assoc_value instead
[  118.198564][ T9358] netlink: 'syz.2.1126': attribute type 12 has an invalid length.
[  118.291870][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'.
[  119.236163][ T9402] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  119.337445][ T9419] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1148'.
[  119.350727][ T9421] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1149'.
[  119.457598][ T9432] syzkaller0: entered promiscuous mode
[  119.460865][ T9432] syzkaller0: entered allmulticast mode
[  120.385575][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'.
[  120.515237][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.521506][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.128554][ T9468] syzkaller0: entered promiscuous mode
[  121.131233][ T9468] syzkaller0: entered allmulticast mode
[  121.638558][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'.
[  121.642824][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'.
[  122.060316][ T9483] gretap0: entered promiscuous mode
[  122.064327][ T9483] gretap0: left promiscuous mode
[  122.212381][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'.
[  122.217668][ T9490] veth1: entered promiscuous mode
[  122.224317][ T9490] netlink: 'syz.2.1172': attribute type 1 has an invalid length.
[  122.228128][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1172'.
[  122.234914][ T9490] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  122.235945][ T9493] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  122.587006][ T9519] team0: Device gtp0 is of different type
[  122.794671][ T9527] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  122.889559][ T9520] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.043117][ T9535] netlink: 'syz.1.1186': attribute type 33 has an invalid length.
[  123.046539][ T9535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1186'.
[  124.051238][ T9561] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  124.118114][ T9563] vlan2: entered promiscuous mode
[  124.120395][ T9563] vlan2: entered allmulticast mode
[  124.122329][ T9563] hsr_slave_1: entered allmulticast mode
[  124.175522][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  124.585874][ T9565] netlink: 'syz.1.1194': attribute type 1 has an invalid length.
[  124.590176][ T9565] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1194'.
[  124.680408][ T9572] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  125.008463][ T9577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.015724][ T9577] syzkaller0: entered promiscuous mode
[  125.018414][ T9577] syzkaller0: entered allmulticast mode
[  125.100754][ T9584] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  125.256911][ T9590] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  125.367120][ T9595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.378532][ T9595] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1204'.
[  125.607514][ T9601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1205'.
[  125.877354][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  126.135307][ T9618] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  126.233653][ T9621] netlink: 'syz.2.1210': attribute type 2 has an invalid length.
[  126.612717][ T9639] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  127.233169][ T9646] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  128.486509][ T9683] __nla_validate_parse: 3 callbacks suppressed
[  128.486526][ T9683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1228'.
[  128.544982][ T9686] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  129.171501][ T9699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1234'.
[  129.273313][ T9709] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  129.359658][ T9714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1239'.
[  130.006613][ T9736] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  130.098071][ T9738] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1246'.
[  130.102049][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  130.105766][ T9738] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  130.115994][ T9738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1246'.
[  130.230713][ T9746] netlink: 'syz.1.1249': attribute type 29 has an invalid length.
[  130.268509][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1251'.
[  130.273458][ T9751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.294397][ T9751] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.302858][ T9754] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  130.540440][ T9771] netlink: 'syz.2.1258': attribute type 13 has an invalid length.
[  130.830705][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.834273][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.837337][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.841058][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.844622][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.988279][ T9787] chnl_net:caif_netlink_parms(): no params data found
[  131.007976][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.013768][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.018069][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.025431][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.030915][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.108278][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.111719][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.114221][ T9787] bridge_slave_0: entered allmulticast mode
[  131.117068][ T9787] bridge_slave_0: entered promiscuous mode
[  131.121094][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.123512][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.126015][ T9787] bridge_slave_1: entered allmulticast mode
[  131.129440][ T9787] bridge_slave_1: entered promiscuous mode
[  131.161686][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.175977][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.209785][ T9787] team0: Port device team_slave_0 added
[  131.217336][ T9787] team0: Port device team_slave_1 added
[  131.254752][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.257212][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.266000][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.272520][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.274951][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.283827][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.317044][ T9787] hsr_slave_0: entered promiscuous mode
[  131.319942][ T9787] hsr_slave_1: entered promiscuous mode
[  131.322379][ T9787] debugfs: 'hsr0' already exists in 'hsr'
[  131.324308][ T9787] Cannot create hsr debugfs directory
[  131.445780][ T9798] chnl_net:caif_netlink_parms(): no params data found
[  131.563227][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.568448][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.572590][ T9798] bridge_slave_0: entered allmulticast mode
[  131.576492][ T9798] bridge_slave_0: entered promiscuous mode
[  131.585212][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.590227][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.593255][ T9798] bridge_slave_1: entered allmulticast mode
[  131.596791][ T9798] bridge_slave_1: entered promiscuous mode
[  131.663540][ T9798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.674438][ T9787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  131.680134][ T9787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  131.688301][ T9798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.705643][ T9787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  131.724946][ T9787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  131.731710][ T9798] team0: Port device team_slave_0 added
[  131.738059][ T9798] team0: Port device team_slave_1 added
[  131.774327][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.777396][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.789627][ T9798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.802632][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.805620][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.816976][ T9798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.891005][ T9798] hsr_slave_0: entered promiscuous mode
[  131.894426][ T9798] hsr_slave_1: entered promiscuous mode
[  131.897114][ T9798] debugfs: 'hsr0' already exists in 'hsr'
[  131.900369][ T9798] Cannot create hsr debugfs directory
[  132.066499][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.096196][ T9798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  132.103564][ T9798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  132.113135][ T9798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  132.118613][ T9798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  132.126266][ T9787] 8021q: adding VLAN 0 to HW filter on device team0
[  132.144680][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.147210][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.155670][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.158168][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.258218][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.284984][ T9798] 8021q: adding VLAN 0 to HW filter on device team0
[  132.295447][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.298317][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.308041][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.311134][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.347027][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.391519][ T9787] veth0_vlan: entered promiscuous mode
[  132.402137][ T9787] veth1_vlan: entered promiscuous mode
[  132.423883][ T9787] veth0_macvtap: entered promiscuous mode
[  132.428455][ T9787] veth1_macvtap: entered promiscuous mode
[  132.443639][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.455061][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.467969][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.482732][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.486497][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.495207][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.513213][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.521139][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.563711][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.567165][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.603702][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.606939][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.681324][ T9798] veth0_vlan: entered promiscuous mode
[  132.695365][ T9798] veth1_vlan: entered promiscuous mode
[  132.737855][ T9798] veth0_macvtap: entered promiscuous mode
[  132.753895][ T9798] veth1_macvtap: entered promiscuous mode
[  132.772329][ T9851] Bluetooth: MGMT ver 1.23
[  132.792273][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.810302][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.821720][ T5875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.825875][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.842046][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.845811][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.909750][ T5855] Bluetooth: hci0: command tx timeout
[  132.930453][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.934088][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.957793][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.961156][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.070893][ T5855] Bluetooth: hci1: command tx timeout
[  133.143394][ T9870] netlink: 'syz.4.1279': attribute type 12 has an invalid length.
[  133.935752][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'.
[  134.597036][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.990238][ T5855] Bluetooth: hci0: command tx timeout
[  135.150106][ T5855] Bluetooth: hci1: command tx timeout
[  135.916927][ T9950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  136.032574][ T9969] Unsupported ieee802154 address type: 0
[  136.154919][   T12] bridge_slave_1: left allmulticast mode
[  136.157699][   T12] bridge_slave_1: left promiscuous mode
[  136.166190][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.180016][   T12] bridge_slave_0: left allmulticast mode
[  136.184179][   T12] bridge_slave_0: left promiscuous mode
[  136.186686][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.248047][   T12] bond2 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  136.255656][   T12] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface
[  136.258562][   T12] bond2 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 42:6a:8e:6b:81:27 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  136.628766][   T12] bond0 (unregistering): Released all slaves
[  136.637977][   T12] bond1 (unregistering): Released all slaves
[  136.740659][   T12] bond2 (unregistering): (slave veth3): Releasing backup interface
[  136.744148][   T12] bond2 (unregistering): Released all slaves
[  136.841332][ T9990] netlink: 'syz.2.1315': attribute type 21 has an invalid length.
[  136.872790][   T12] : left promiscuous mode
[  137.007993][   T12] tipc: Left network mode
[  137.084868][ T5855] Bluetooth: hci0: command tx timeout
[  137.229269][ T5855] Bluetooth: hci1: command tx timeout
[  137.748225][   T12] hsr_slave_0: left promiscuous mode
[  137.750749][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.754384][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.782892][   T12] pim6reg (unregistering): left allmulticast mode
[  137.905556][   T12] team0 (unregistering): Port device vlan0 removed
[  138.059163][   T12] team0 (unregistering): Port device team_slave_1 removed
[  138.082513][   T12] team0 (unregistering): Port device team_slave_0 removed
[  138.661992][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'.
[  138.665515][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1332'.
[  138.675385][T10083] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1332'.
[  138.722139][   T12] IPVS: stop unused estimator thread 0...
[  138.845917][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.920835][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.028243][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.092896][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.271557][   T12] bridge_slave_1: left allmulticast mode
[  139.279990][   T12] bridge_slave_1: left promiscuous mode
[  139.282741][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.304494][   T12] bridge_slave_0: left allmulticast mode
[  139.307050][   T12] bridge_slave_0: left promiscuous mode
[  139.309885][ T5855] Bluetooth: hci1: command tx timeout
[  139.310030][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.433989][T10117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1341'.
[  139.758294][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.763661][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.767557][   T12] bond0 (unregistering): Released all slaves
[  139.837067][   T12] bond1 (unregistering): (slave batadv1): Releasing active interface
[  139.842212][   T12] bond1 (unregistering): Released all slaves
[  139.930810][   T12] tipc: Disabling bearer <eth:vlan0>
[  139.948333][   T12] tipc: Left network mode
[  139.953082][T10133] netlink: 'syz.2.1342': attribute type 16 has an invalid length.
[  139.955854][T10133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1342'.
[  140.134605][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'.
[  140.144371][T10149] netlink: 'syz.2.1347': attribute type 33 has an invalid length.
[  140.147818][T10149] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1347'.
[  140.190821][T10147] netlink: 'syz.4.1346': attribute type 3 has an invalid length.
[  140.193517][T10147] netlink: 'syz.4.1346': attribute type 3 has an invalid length.
[  140.371634][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'.
[  140.549201][   T12] hsr_slave_0: left promiscuous mode
[  140.557743][   T12] hsr_slave_1: left promiscuous mode
[  140.564176][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.570194][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.586212][   T12] veth1_macvtap: left promiscuous mode
[  140.590823][   T12] veth0_macvtap: left promiscuous mode
[  140.595048][   T12] veth1_vlan: left promiscuous mode
[  140.907673][   T12] pim6reg (unregistering): left allmulticast mode
[  141.045327][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'.
[  141.066179][   T12] team0 (unregistering): Port device vlan0 removed
[  141.163940][T10191] netlink: 'syz.3.1355': attribute type 3 has an invalid length.
[  141.173265][T10191] netlink: 'syz.3.1355': attribute type 3 has an invalid length.
[  141.254677][   T12] team0 (unregistering): Port device team_slave_1 removed
[  141.281757][   T12] team0 (unregistering): Port device team_slave_0 removed
[  141.583445][T10197] netlink: 'syz.4.1356': attribute type 33 has an invalid length.
[  141.590157][T10197] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1356'.
[  141.762990][   T12] ------------[ cut here ]------------
[  141.764874][   T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  141.768187][   T12] Modules linked in:
[  141.770062][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  141.774831][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.778209][   T12] Workqueue: netns cleanup_net
[  141.780322][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  141.782487][   T12] Code: 28 80 df f7 4b 83 3c 2c 00 75 19 e8 cc 16 7c f7 49 81 fd f8 07 00 00 74 1d e8 be 16 7c f7 49 83 c5 08 eb c9 e8 b3 16 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  141.788584][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  141.790818][   T12] RAX: ffffffff8a4394dd RBX: ffff88810ac78000 RCX: ffff88801c2f5640
[  141.793403][   T12] RDX: 0000000000000000 RSI: ffffffff8dba61aa RDI: ffff88810ac780b8
[  141.795980][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  141.798599][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88810ac78000
[  141.801966][   T12] R13: 00000000000000b8 R14: ffff8880233a8000 R15: dffffc0000000000
[  141.805208][   T12] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  141.808708][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  141.811447][   T12] CR2: 00007f8e21ad3270 CR3: 0000000023852000 CR4: 00000000000006f0
[  141.814738][   T12] Call Trace:
[  141.816148][   T12]  <TASK>
[  141.817397][   T12]  ops_undo_list+0x49a/0x990
[  141.819418][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  141.821573][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  141.823724][   T12]  cleanup_net+0x4c5/0x800
[  141.825590][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  141.827663][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  141.829977][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  141.832432][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  141.834911][   T12]  process_scheduled_works+0xae1/0x17b0
[  141.837221][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  141.839749][   T12]  worker_thread+0x8a0/0xda0
[  141.841635][   T12]  kthread+0x711/0x8a0
[  141.843335][   T12]  ? __pfx_worker_thread+0x10/0x10
[  141.845444][   T12]  ? __pfx_kthread+0x10/0x10
[  141.847358][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  141.849949][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.852093][   T12]  ? __pfx_kthread+0x10/0x10
[  141.853978][   T12]  ret_from_fork+0x3fc/0x770
[  141.855886][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  141.857916][   T12]  ? __switch_to_asm+0x39/0x70
[  141.860227][   T12]  ? __switch_to_asm+0x33/0x70
[  141.862361][   T12]  ? __pfx_kthread+0x10/0x10
[  141.864279][   T12]  ret_from_fork_asm+0x1a/0x30
[  141.866307][   T12]  </TASK>
[  141.867641][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  141.870631][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  141.875632][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.879753][   T12] Workqueue: netns cleanup_net
[  141.881745][   T12] Call Trace:
[  141.883151][   T12]  <TASK>
[  141.884396][   T12]  dump_stack_lvl+0x99/0x250
[  141.886320][   T12]  ? __asan_memcpy+0x40/0x70
[  141.888241][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.890404][   T12]  ? __pfx__printk+0x10/0x10
[  141.892337][   T12]  vpanic+0x281/0x750
[  141.893982][   T12]  ? __pfx__printk+0x10/0x10
[  141.895935][   T12]  ? __pfx_vpanic+0x10/0x10
[  141.897839][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  141.900040][   T12]  panic+0xb9/0xc0
[  141.901604][   T12]  ? __pfx_panic+0x10/0x10
[  141.903479][   T12]  __warn+0x31b/0x4b0
[  141.905152][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  141.907364][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  141.909631][   T12]  report_bug+0x2be/0x4f0
[  141.911414][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  141.913628][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  141.915784][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  141.917988][   T12]  handle_bug+0x84/0x160
[  141.919751][   T12]  exc_invalid_op+0x1a/0x50
[  141.921604][   T12]  asm_exc_invalid_op+0x1a/0x20
[  141.923615][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  141.926036][   T12] Code: 28 80 df f7 4b 83 3c 2c 00 75 19 e8 cc 16 7c f7 49 81 fd f8 07 00 00 74 1d e8 be 16 7c f7 49 83 c5 08 eb c9 e8 b3 16 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  141.933843][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  141.936387][   T12] RAX: ffffffff8a4394dd RBX: ffff88810ac78000 RCX: ffff88801c2f5640
[  141.939614][   T12] RDX: 0000000000000000 RSI: ffffffff8dba61aa RDI: ffff88810ac780b8
[  141.942854][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  141.946093][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88810ac78000
[  141.949328][   T12] R13: 00000000000000b8 R14: ffff8880233a8000 R15: dffffc0000000000
[  141.952464][   T12]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  141.954635][   T12]  ops_undo_list+0x49a/0x990
[  141.956560][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  141.958679][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  141.960825][   T12]  cleanup_net+0x4c5/0x800
[  141.962657][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  141.964716][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  141.966882][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  141.969250][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  141.971597][   T12]  process_scheduled_works+0xae1/0x17b0
[  141.973897][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  141.976332][   T12]  worker_thread+0x8a0/0xda0
[  141.978276][   T12]  kthread+0x711/0x8a0
[  141.979914][   T12]  ? __pfx_worker_thread+0x10/0x10
[  141.981984][   T12]  ? __pfx_kthread+0x10/0x10
[  141.983858][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  141.985979][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.988115][   T12]  ? __pfx_kthread+0x10/0x10
[  141.990015][   T12]  ret_from_fork+0x3fc/0x770
[  141.991910][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  141.994019][   T12]  ? __switch_to_asm+0x39/0x70
[  141.996017][   T12]  ? __switch_to_asm+0x33/0x70
[  141.998001][   T12]  ? __pfx_kthread+0x10/0x10
[  141.999908][   T12]  ret_from_fork_asm+0x1a/0x30
[  142.001906][   T12]  </TASK>
[  142.003882][   T12] Kernel Offset: disabled
[  142.005670][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:54:56  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7050
R8 =ffff888020ae8237 R9 =1ffff1100415d046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98c7 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8e21ad3270 CR3=0000000023852000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888024bc1980 RCX=ffff8881084eb980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc900035bfda0
R8 =0000000000000000 R9 =ffffffff818c5508 R10=ffffc900035bfe40 R11=fffff520006b7fcc
R12=0000000000000001 R13=dffffc0000000000 R14=ffff88811eeed398 R15=0000000000000001
RIP=ffffffff818c5718 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555588cea500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa9195c2780 CR3=0000000107030000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fa91a2ed6c0 00007fa91a2ed6c0 XMM01=00007fa91a2ed6b0 00007fa91a2ed6b0
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa919612e53
XMM06=0000000000000000 00007fa919612e4d XMM07=0000000000000000 00007fa919612e61
XMM08=0000000000000000 00007fa919612ee7 XMM09=0000000000000000 00007fa919612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
