last executing test programs:

1m11.877123716s ago: executing program 0 (id=580):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000100)={<r1=>0x0, "56b0e9f453664de373bc51f49cd576c5"})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@val={r1}, @actul_num={@void, 0x5, 0x6d}}})
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4040)

1m11.857363585s ago: executing program 0 (id=583):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800e800b70400000200000085000000a60000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r5 = socket(0x15, 0x5, 0x0)
connect$netrom(r5, 0x0, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendto$inet6(r6, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2000000000000037, &(0x7f0000000380)=ANY=[@ANYRES32=<r9=>0xffffffffffffffff], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRES64=r9, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20)
sendmmsg$inet6(r8, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
r11 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

1m11.70734467s ago: executing program 0 (id=586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181209000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff000000000000000085000000cc00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9e5b7a4e697fc968, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1bbf461123c649312b655d01704457039cb266a36f69ed36bc83d829376eb1051f2c8866e113ccd6e22125afc51b72e4e210f27e6e4c1ccdfc2606cca2a1363b03422c88c05817bafdc00efd4428cd0e79889241707c6249bc38cb9dade70c294893a400b80875200c3113cba351cf2b56397f953f55a51f72c80a5d49533a56c42a4d4c4cb77851af396a8738bfc591c0e40391f7cbf9852e2ba2c2ee440afd0918c8c890c888b351331c4c87d7ff9ea5d341b47c4bd242870fe817df69bf2a998d48faa2c9dc470ef8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) (async)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x48040)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d2, &(0x7f0000000100)) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x4bc, 0x1, 0x5, 0x80, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0xe, 0xfd, 0x2, 0x76, 0x17, 'syz0\x00', "aa99d859036a6b889eee6d506f2d3302ee3adf6356c96a6f2511f64f55b7071e", "6d468e56433f37f7eef55bbeb359290a2550ae2a92f8dec203bdd1300463274e", [{0x9, 0x0, {0x1, 0x83c}}, {0x0, 0x6, {0x2}}, {0x9a3, 0x52, {0x3, 0x5}}, {0xfff, 0x1, {0x0, 0xb21a}}, {0xe0, 0x3ff, {0x1, 0x6}}, {0x5b, 0x1, {0x0, 0xf}}, {0x54, 0x9, {0x2, 0x8}}, {0x400, 0x9, {0x2, 0x7fff}}, {0x3, 0x8, {0x3, 0xbf}}, {0x3, 0x5, {0x1, 0x3076}}, {0x1, 0x0, {0xca953729eeb0453e, 0x100}}, {0xf000, 0x2, {0x1, 0x2}}, {0x3, 0x46, {0x1, 0xfffffffd}}, {0x3, 0xb, {0x2, 0x5}}, {0x1, 0x2, {0x2, 0x8}}, {0x7, 0x76, {0x3, 0xffffff51}}, {0x3, 0x9, {0x0, 0x821e}}, {0xffff, 0x1000, {0x2, 0x5}}, {0x26c, 0x3}, {0x0, 0x3, {0x3, 0x100}}, {0x5, 0xb9, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x6}}, {0x8, 0x8, {0x0, 0x2}}, {0xd03, 0x40, {0x3, 0x352}}, {0x52, 0x3}, {0x1, 0x10, {0x1, 0x9}}, {0x3, 0x5, {0x1, 0xffffff5d}}, {0xfff8, 0x7, {0x0, 0x1}}, {0x6, 0x8, {0x2, 0x4}}, {0x2, 0x7, {0x3, 0x1}}, {0x7fff, 0x0, {0x1, 0x6}}, {0x2, 0x72a, {0x2, 0x80000001}}, {0x6, 0xfffc, {0x2, 0x1000}}, {0x0, 0x7, {0x2, 0xfffffffc}}, {0x2, 0x6, {0x1, 0x5}}, {0x33, 0x1000, {0x0, 0x4}}, {0x2, 0xfd, {0x3, 0xfffffffb}}, {0xaca3, 0x6, {0x0, 0xff}}, {0x5, 0xb1d3, {0x0, 0x2}}, {0x20, 0x5, {0x3, 0x3}}]}}}, {{0xfffffffffffffe26, 0x1, {{0x1, 0x80}, 0x7e, 0x6, 0x0, 0xe, 0x1, 'syz1\x00', "969d62ce6277ac8fea891c43c99d24debfb7f7fda2a714bad4f13f2898adb25c", "3677935d751dcd4a3a0bf3a3cfdfd86846b87ea80ace125684c50f8ca7bc63a5", [{0x4, 0x0, {0x1, 0x4}}, {0x4b, 0x0, {0x0, 0x1d}}, {0x2, 0x8c9d, {0x1, 0x1}}, {0xf73b, 0xf, {0x1, 0x410}}, {0xc, 0x1, {0x0, 0x5}}, {0x8, 0x9, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0xa23}}, {0x8, 0x7, {0x1, 0x1}}, {0x8, 0xffff, {0x2, 0x92d}}, {0x4, 0xc41, {0x3, 0x5}}, {0x9, 0x646a, {0x3, 0x7}}, {0xfd7, 0xa, {0x1, 0x8}}, {0xffff, 0x8, {0x3, 0xa}}, {0x5, 0xb4a8, {0x1, 0x9}}, {0x0, 0x8, {0x1, 0x4c33c71a}}, {0x5, 0xff, {0x3, 0x6b6}}, {0x3, 0x3, {0x1, 0x8000}}, {0x2, 0x8, {0x1, 0x7}}, {0x6, 0x4000, {0x3, 0xffffffff}}, {0x3, 0x6, {0x0, 0x80000001}}, {0x1, 0x9, {0x0, 0x1}}, {0x9, 0x8001, {0x249932e8c63cf6ff, 0x7}}, {0x6, 0x5, {0x0, 0xf740}}, {0x1, 0x101, {0x2, 0x1f5}}, {0x7, 0x7ff, {0x2, 0x401}}, {0xdf5, 0x1, {0x2, 0x6}}, {0x6, 0xf9, {0x3, 0x40}}, {0x1, 0xfffb, {0x1, 0x81}}, {0x8, 0x2, {0x1, 0x6}}, {0xb, 0x400, {0x3, 0x8}}, {0x7, 0x4, {0x3}}, {0x9, 0x270, {0x0, 0x570d}}, {0x36c, 0x5, {0x2, 0x7}}, {0x9, 0x7, {0x2, 0x10}}, {0x5, 0x7, {0x0, 0xcd2}}, {0x3, 0x7fff, {0x3, 0x638}}, {0x7ff, 0x3, {0x3, 0xfffffff4}}, {0xadf8, 0x7fff, {0x0, 0x1}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x0, 0x800, {0x1, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff000000007110660000007100009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m11.625115547s ago: executing program 0 (id=589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
unshare(0x20040400)
unshare(0x100) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000000)=0x8, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711082000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xc}, 0x94) (async)
unshare(0x20000000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x8, 0x6c2, 0x64, 0x7, 0x29, 0xc, 0xcf, @remote, @empty}}}}}}, 0x0) (async)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40488d0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x418, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb6, 0x7f}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x3f8, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfb, 0x3, "d07eae561e6cface8a53ed5871a27f75708e6b91a4a143d786fd5f65b39cef1d16456d415b5e7d749e2e7917ec15dd6d97144371ecf65158173977a23eca2d95c280ceb1c1d8e83990895811ba87b72a1fc80849406579ca3da1a183212731b6e3218f44dbdc3151fc0bd81c769bfd761974ce200438571d47d953dc5077453eb3d4b56b2343cfdeb8da3d66d7e9c4078a1ed2b037259f8a3f9951185063979dfaeb11fbcfdaacb91e33e59f81088f399cc30e5ef801bdd73449a3718c7aadd71a26d9767b41e4ea7b4a54811b90aa18feb743ae0bfb01566b179729da9db2ea3bf5f5c981e7e004cb7184075bcae88e051a50414fcf92"}, @NL80211_BAND_6GHZ={0x86, 0x3, "43ecca480ad5fda54ba94ed37c6f32907e60dcf4191c0b29bda1090f81d4b50cf6e1cca69f7ebc1c4ebf044cc817eb3c05de2c4d9bd7415695cce283aee83a5f2c32d04dbad2fcec35a87d50a8346c1c84a408f7cb4a23b83bfd88094fb9a566e8b3b59a8f7b23875e41ca3a154448d257e97bb175a066a1ea26b70122a2d0545b7d"}, @NL80211_BAND_6GHZ={0xf9, 0x3, "c962c6716f0f546449de91128a5baed07157d0e5e4f9a8f7a1c5882b9e4e4c1637ae4e71ca4cf3473f98a9699dff3d3dd5e6d3e5329759f12309a928b84a93493ffebd5ede9c7ade3a7156e7a84a42bbb396f76f8a706c025d12af280c8e0c7c9ca47f41349e7084a20e3b60192b360060eebe509cb57965b753117f01130451c1b28138a4e503449d2cda8dfc9f28452669c2f97b80d9a7da05739832f7a02c51be8c92e4aa2d000557010462b4a4e80a0b96a9a6d1929939434b21983454eb54465ee58ee50992548f592afb3f27943cf77052df9914f80a7b7487a5216990b30a88dbf6a82b48e65e234306201fc4ca36c7c899"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x23, 0x0, "5fc4e67b3a8ee531c91463d26d1fa247227900e8114d1e92dfa011e03b1c86"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x55, 0x0, "34e78fb19001ebef134d6d1a78f57ccbf8e1db196e27e2debd4f0ef4ef9a221df7d84fcba15c4696b1bbecf12479242a9c146e868b924ed2adf04855c6649ccdfabdc6311b26e419924ceed31c40092771"}, @NL80211_BAND_5GHZ={0x10, 0x1, "f2363c3781f4f0efd48e600b"}, @NL80211_BAND_60GHZ={0xe0, 0x2, "15727ef175460167731a6a2911e40d4efc9c6952f2042bdbe1029c2da829a4290e85cbb3ef92f7f92c368bc90fd6082ead2c5d81c7496572da84247d421d196187684d7e1ed86400f9e5723e8acaecc2122a9258e6708ea3b14b2631bc1909b0acb5212ab304c3c2c23c6d84cf8290df85b7fcc4edc29b99600d919201e373ceb599bb180217cf36ce59544bc4722134552ed2c29bd76b5c04f4588340b43813e35b9ce3646773cc576eedf25b3c01335b1fc503f4a6f16c5f82c540262805818da369723e291e50a4ce192e67ceb5a6061f36cfb58bae864be4dfdd"}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async)
write(r3, &(0x7f0000000340)="4700000001003f", 0x7) (async)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000003c0))
r7 = getuid()
r8 = getpid() (async)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x10, 0x5, 0x5, 0xf, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x81, 0x0, 0x690d}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2c, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x78}}, 0x40d0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES8, @ANYRES16=r8, @ANYRES16=0x0, @ANYRES8=r1, @ANYBLOB="0c00fb0003000000000000008179b2a80728a268504050d48b4922531aea53a3b90b7fa2b0431d4e82a76777860a10d7c0831ddba5f62e5ffa549d7abe1de92e8174864e2ecc6b60cdcc45b3c3b0736a8b2277ec7f0de1bd5a4cd54e3898b1679e79d071c20e48e5cc5273126cff42ae50bda21daf32afb4fec9a51a60c3ad1456a678fa7ce3246cf05a6e7dd8540fe6e3252701b8b315ae3bb3536e7678bc8c3e0e5b6a8344e9d231e6e28f45c7079eed657af5e6b3224580d0e4f690239b9ebbbba70000", @ANYRES32=r7, @ANYRES8=r8, @ANYRES8=r8], 0x22f8}}, 0x0) (async)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0x2) (async)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10)

1m11.429651137s ago: executing program 0 (id=591):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001480)={{r3, <r6=>0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001440)='%pK    \x00'}, 0x20) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0xa0}}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x2, 0xffffffffffffffff}, @alu={0x7, 0x0, 0xd, 0x9, 0x6, 0x100, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x80, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x42, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001600)=[r3, r4, r5, 0xffffffffffffffff, r6, r8, r9], &(0x7f0000001640)=[{0x3, 0x3, 0x10, 0xc}, {0x2, 0x3, 0xf}], 0x10, 0x10}, 0x94)

1m11.350385903s ago: executing program 0 (id=594):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x80ff) (async)
r1 = socket$qrtr(0x2a, 0x2, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) (async)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}], 0x40)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) (async)
r6 = epoll_create(0x2)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000f40)) (async)
ioctl$sock_qrtr_TIOCINQ(r1, 0x8919, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000000022257a00000000160a01080000000000000000020000010900020073797a30000000000900010073797a300000000014000680080002400000000008000140000000f51400000011000100"/102], 0x68}}, 0x4000000) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) (async)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000400bf0900000000000055090100000000009500000000000000180000000200000000000000600b0000bf91000000000000b702000001000000870000b7000000000000009500"/112], &(0x7f0000000540)='GPL\x00', 0xe, 0x9e, &(0x7f0000000780)=""/158, 0x40f00, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x1], &(0x7f0000000900)=[{0x4, 0x3, 0xd}, {0x0, 0x4, 0xf}, {0x5, 0x3, 0xf, 0x8}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x8dab}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000002000000000000000400000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000c32146dacb80df19f395211b52e63e03258e430642d148bd816782ff5231edf60f9a27bf50ef08620201e6907b8083c64824cc68b8c8cac6ca5f39647801ddc07da6", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xd1, &(0x7f00000005c0)=""/209, 0x41100, 0x9, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x2, 0x40, 0xf}, 0x10, 0x2452a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1m5.888901271s ago: executing program 1 (id=696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x102080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020600)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
socket$igmp(0x2, 0x3, 0x2)

1m5.739548118s ago: executing program 1 (id=697):
r0 = socket$kcm(0xa, 0x5, 0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={<r2=>r1}) (async)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) (async)
r4 = socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r7, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000240)}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) (async)
r10 = socket$inet6(0x2d, 0x2, 0x0)
recvmmsg(r10, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce47000d"], 0xfc}}, 0x0)

1m5.737725141s ago: executing program 1 (id=699):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x1, 0x9, 0x8, 0x0, 0x62b3}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="d702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28f"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

1m5.678420594s ago: executing program 1 (id=701):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'vlan1\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="00c663000000000000000211a8ae59", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f0000000280), 0x0}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001240)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x180, 0xa8, 0xffffffff, 0x180, 0x0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000640), {[{{@ip={@multicast2, @local, 0xff000000, 0xff, 'ip6gretap0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x44}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @port=0x4e21, @gre_key=0x9}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 'macvlan1\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x0, 0x5}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@private=0xa010101, @icmp_id=0x65, @icmp_id=0x65}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x18}, 0xffffff00, 0xffffff00, 'vxcan1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x89, 0x1, 0x2}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4e838eefe6ae50b7, 0x1}}, @common=@inet=@length={{0x28}, {0x80, 0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xa, [0x2c, 0xa, 0xc, 0x1, 0x26, 0x1d, 0x26, 0xe, 0x3c, 0x33, 0x20, 0x15, 0xe, 0x36, 0x9, 0x8], 0x1, 0x3, 0x1000100000000000}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 'virt_wifi0\x00', 'pim6reg0\x00', {}, {}, 0x2, 0x3, 0xa}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x4, 0x2, 0x0, 0x2, 0x4], 0x6}}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xd, @remote, @private=0xa010101, @gre_key=0x7f, @gre_key=0xfff9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46c", 0x30}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYRESDEC=r6], 0x60}], 0x1, 0x8001)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000001a6b4263"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000097c80000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000003000000b68c52d2ba3c0d90"], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0300000000000000000000000000e3cd347e9d08", @ANYRES32=0x0, @ANYBLOB="030000000500"/24], 0x50)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x0)

1m5.617445461s ago: executing program 1 (id=703):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000003000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0}) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xe4, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r8, 0x0) (async, rerun: 32)
shutdown(r8, 0x0) (rerun: 32)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, 0xff, 0x0, 'vcan0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x0, 0x2, 0x1}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x53a, 0x5f3]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="53c2c1abca4a", 0x83, 0xf, [0x32, 0x6, 0xc, 0x2f, 0x2, 0x17, 0x19, 0x32, 0x4, 0x3e, 0x9, 0x37, 0xd, 0x6, 0x34, 0x2b], 0x2, 0x4, 0xdd56}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x42, 0x4}, {0xffffffffffffffff, 0x4, 0x3}, {0x2, 0x5, 0x6}, 0x3ff, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async)
setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) (async)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x1}, 0x48)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)

1m5.609875536s ago: executing program 1 (id=705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0xc, 0x2002}, 0x20)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x3, 0x10}, 0xc)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x20000400)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newtfilter={0x50, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe7a}]}]}}]}, 0x50}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5402011b", @ANYBLOB="50366993ce1c7fcdbeed2974204c26b148dd254c71b76cccc58fe04eed5b81fe3359a6d565b4c2439225effd4ada2b0a974cc866a556c1decb07684dc3cef512a751c17942087e78507ab72d1a25f8e363493a6cd0a50012c66d21d389e7df6744df5df2310b3005585a0834d21b9d340118a4eef3a47b253bea99fe9bbfbf13bfbc4f9c5ad073d934740bedcfd166145397a0eca11b", @ANYRESHEX=r10, @ANYRESHEX=r9, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004", @ANYRESOCT=r10], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

56.384780703s ago: executing program 32 (id=594):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x80ff) (async)
r1 = socket$qrtr(0x2a, 0x2, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) (async)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}], 0x40)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) (async)
r6 = epoll_create(0x2)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000f40)) (async)
ioctl$sock_qrtr_TIOCINQ(r1, 0x8919, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c40ff80000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000000022257a00000000160a01080000000000000000020000010900020073797a30000000000900010073797a300000000014000680080002400000000008000140000000f51400000011000100"/102], 0x68}}, 0x4000000) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) (async)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000400bf0900000000000055090100000000009500000000000000180000000200000000000000600b0000bf91000000000000b702000001000000870000b7000000000000009500"/112], &(0x7f0000000540)='GPL\x00', 0xe, 0x9e, &(0x7f0000000780)=""/158, 0x40f00, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x1], &(0x7f0000000900)=[{0x4, 0x3, 0xd}, {0x0, 0x4, 0xf}, {0x5, 0x3, 0xf, 0x8}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x8dab}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000002000000000000000400000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000c32146dacb80df19f395211b52e63e03258e430642d148bd816782ff5231edf60f9a27bf50ef08620201e6907b8083c64824cc68b8c8cac6ca5f39647801ddc07da6", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xd1, &(0x7f00000005c0)=""/209, 0x41100, 0x9, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x2, 0x40, 0xf}, 0x10, 0x2452a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

50.562507558s ago: executing program 33 (id=705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0xc, 0x2002}, 0x20)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x3, 0x10}, 0xc)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x20000400)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newtfilter={0x50, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe7a}]}]}}]}, 0x50}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5402011b", @ANYBLOB="50366993ce1c7fcdbeed2974204c26b148dd254c71b76cccc58fe04eed5b81fe3359a6d565b4c2439225effd4ada2b0a974cc866a556c1decb07684dc3cef512a751c17942087e78507ab72d1a25f8e363493a6cd0a50012c66d21d389e7df6744df5df2310b3005585a0834d21b9d340118a4eef3a47b253bea99fe9bbfbf13bfbc4f9c5ad073d934740bedcfd166145397a0eca11b", @ANYRESHEX=r10, @ANYRESHEX=r9, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004", @ANYRESOCT=r10], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

20.386921536s ago: executing program 3 (id=1208):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000900000000000000a67494fcd3a42289070000001e010600f8f8000000000000721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe74cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c035c8d586b2a88d81866930fca15c8a95d29e5b2ea0000080005"], 0x154}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r7=>0x0})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005, 0x2010, r1, 0x51110000)
r8 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0xb8, 0x0, 0x2, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x23, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xb8}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4cd0fc77b4cb9d8472953066b7955f000100000000508207da4681fd5be0cbe8e41c9205d69b00000000000000a16377a1721fd7f8aded7e43129a05bb2760b364bfb16b3edb76e738f0b830df9cebe69532415e9b3c9712177929a8aea475d09418cd054db6acdf72778172d46db1ae4153761132f1608eaf50c337", @ANYRES32=r7, @ANYBLOB="02000000000000002c001a80080002800400018020000a8014000700fe8000000000000000000000000000000500080000000000"], 0x4c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x1}, 0x18)
connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11}, 0x18)
sendmmsg(r10, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1", 0x3}], 0x1}}], 0x1, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0xfffffffc, {0xa}}, 0x14}}, 0x0)

20.278496284s ago: executing program 3 (id=1209):
socket$kcm(0x2, 0x3, 0x2) (async)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x3a, 0xd2, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000003"], 0x114}], 0x1}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
socket(0x1, 0x4, 0x200) (async)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@deltaction={0xa0, 0x31, 0x100, 0x70bd2e, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000101}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5ad1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040}, 0x51105b296addafc7) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) (async)
getsockopt$sock_timeval(r6, 0x1, 0x14, 0x0, &(0x7f0000000080)) (async)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3}}], 0x10)

20.050274708s ago: executing program 3 (id=1211):
socket$inet6(0xa, 0x2, 0x3a) (async)
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a) (async)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a)
sendto$inet6(r0, &(0x7f0000000000)="80003724090000ce", 0x8, 0x800, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x9}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)

14.205011547s ago: executing program 3 (id=1211):
socket$inet6(0xa, 0x2, 0x3a) (async)
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a) (async)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a)
sendto$inet6(r0, &(0x7f0000000000)="80003724090000ce", 0x8, 0x800, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x9}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)

8.239220473s ago: executing program 3 (id=1211):
socket$inet6(0xa, 0x2, 0x3a) (async)
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a) (async)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a)
sendto$inet6(r0, &(0x7f0000000000)="80003724090000ce", 0x8, 0x800, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x9}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1.849250977s ago: executing program 3 (id=1211):
socket$inet6(0xa, 0x2, 0x3a) (async)
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a) (async)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a)
sendto$inet6(r0, &(0x7f0000000000)="80003724090000ce", 0x8, 0x800, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x9}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1.130646863s ago: executing program 2 (id=1458):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xc}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x12, 0x1}, {0x2, 0x1}, {0x32, 0x1}, {0x6, 0x1}, {0x30, 0x1}, {0x2}, {0x3}, {0x30}, {0x6c, 0x1}, {0xb, 0x1}, {0x5}, {0xc}, {0x5}, {0xb}, {0x1}, {0x60, 0x1}, {0xb}, {0x30}, {0x2}, {0x9, 0x1}, {0x0, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x58}}, 0x0)

1.128588715s ago: executing program 4 (id=1460):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000091181b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000091181b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90)
accept4(r0, 0x0, 0x0, 0x0) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x4008000)
recvmsg$kcm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/76, 0x4c}], 0x1}, 0xa0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50)
r3 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x0, 0x56, 0x2, 0x4, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x7, 0x0, 0x4}, 0x3, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10)
close(0x3)
listen(0xffffffffffffffff, 0x0) (async)
listen(0xffffffffffffffff, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
setsockopt$sock_int(r4, 0x28, 0x21, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000280)="902ec00e094d8dc1b5acb91e4980eaf875451420f9df115cb9340eafb3c1203294db0bc9fc95252533d105f4fb8462c930e8fde6601b0467aee9efb2b50b3c531b62faa6", &(0x7f0000000300)=@buf="c37ca6200e3ee9ac8ef3cdb6e01914cb27dbb8fe3a094d154a1a2b86718a700563e6f4cdb09fb5899db6e82f4d97ad9b6feff239ce87bc98242209f12f77c93c089fd1f93cfdc75a9e42b7702aa62e69f5c1dc9506cd3a15e9d65298"}, 0x20)
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) (async)
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1002000001000000000000000100800085000000d95c6869ab137d00000085000000410000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1002000001000000000000000100800085000000d95c6869ab137d00000085000000410000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="6fb355bb7c1e85390de40d0df22a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="6fb355bb7c1e85390de40d0df22a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x1f, 0x2, 0x568, 0x2b0, 0x1e0, 0x0, 0xf0, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@local, @mcast2, [0x0, 0xff, 0xff, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff], 'veth1_to_hsr\x00', 'veth0_vlan\x00', {0xff}, {}, 0x2b, 0x2, 0x0, 0x50}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@local, 0x12, 0x26, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0x1b, 0x2b, 0xf}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1b}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

1.125918996s ago: executing program 2 (id=1461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$inet6(r1, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) (async)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, 0x1c) (async)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x150, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8e24}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_IFACE={0x14, 0x17, 'rose0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf0}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'rose0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x150}, 0x1, 0x0, 0x0, 0x24008884}, 0x44040) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0xffffff79, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x2040) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafbe863cac50580088b", 0x26}, {&(0x7f0000000100)="93823f08c826a46e670b192cd7a2fa", 0x27}], 0x2) (async)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10) (async)
sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) (async)
sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x9, 0x2, 0x0, r0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

1.039631874s ago: executing program 2 (id=1462):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001009e49de6d0100040000002400048005000300020000000500030000000000050003000100000005000300020000000800020002000000256c70d0722d636ecf0f908ff461969172827a340af0ad1c9e8927eb2ca0709ac71205a4d632bc0bf8200160651de2cb06eff6abec53203977e20e5c7be544127486d2aaecdeff410e17c8"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
accept4(r8, 0x0, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
unshare(0x22020600)
socket$pptp(0x18, 0x1, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f0000000380)={0x3fe, 0x0, 0x10000000000000, 0x0, 0x0, 0x1, 0x10001}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)

229.883876ms ago: executing program 4 (id=1463):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xb}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x1100, 0x0, 0x6044028}, 0x40040)

139.955212ms ago: executing program 4 (id=1464):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = accept(r0, &(0x7f00000004c0)=@qipcrtr, &(0x7f0000000540)=0x80)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r4, 0x263fdb8d6b409bc1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
syz_emit_ethernet(0x288, &(0x7f0000000200)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}, {0x9b}, {0x8, 0x0, 0x1}], @ipv4=@gre={{0x6, 0x4, 0x1, 0x2f, 0x26e, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe8, 0x2, [], "9232d27d357dc9676f710058c07a5255268ed0f361fcbd47851d17c2dbab9100a59e14fba4b655754d0b8030eff108764e9176e99f42c37d2e5f9e36825143c54cf2e5cc6b8bdccfb691510170db0a45a26ef63631e229ee7dbaca72da12fb99bca46a9136caca5dcc5fafa8940c339fc360bd1750bb754f90409dcd1936592114140bb8b919eb14942e43627b71dd44a445178344db671a29800563cf4381a3527c7e00bf43da52450f35d382da535a42edc08ce32cf82ee981207430340aa6269f95368beb88beb4615039174768e0cba8dfcc36a337ae63ce113e37d2a6acbb46c118de56649c"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "f0309a79a5b2129588015555164c1c4790751b37df1548ea806d6c9b815691bb65e18aee0208780fa7e43aa07891e261d00a4f1fc8816ed588c3091f9d0060319fd17383dbe1e5998d0b59b4"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x7], "3cebc45987504565b6d70aca014174e4a24554c81829cc3b916e9adbdcaa3b33f71abb3dc65d63fb5e1d70fba7422a00de2a7da3776ecca5a4a85af8a46692c4035804468d39129e64af972a9cbd566e548a6b053efbc0e9c6d3505e9a60bc7fd08400a8c23a6afba145f93d4abd3c98e18d7f5ec459e078cb4b88745ddb2c59a197e6099e894816bd4a4c919fda7fbbf54e7d910440ee5a9af3e00055c3b1"}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x37, 0x3, 0x0, 0x2, 0x2, 0x2}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0xf, 0x2, 0x6, 0x1, 0x0, 0x3, 0x0, 0x4}, 0x2, {0x7, 0x8, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "b11d965c7fbbf4bd0131e06fb3c1f33410cd4ab659732e001da71584643e46d489fa343a2d350af4dc113ec192c45961c1008b5535630a5a70925b"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2d6, 0xd82, 0x903, 0x387]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xc29, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044011}, 0x40010)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRES64=r6], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8000)

139.271995ms ago: executing program 4 (id=1465):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf70}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xd)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b000000d77fe978797d6f15910c0099"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf70}, 0x94) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xd) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b000000d77fe978797d6f15910c0099"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)

68.264955ms ago: executing program 4 (id=1466):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000020000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, &(0x7f0000000100)="31896e45177e3801b2b16672b6ca33", 0x0, 0x4}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [], "fafb17c133"}}}}}}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1434aa0000000000000000000000007f000001000000000000000000000008fe880000000000000000000000000101138100000000000000000000000000aa3c040000020000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

67.827714ms ago: executing program 2 (id=1467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xc}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x12, 0x1}, {0x2, 0x1}, {0x32, 0x1}, {0x6, 0x1}, {0x30, 0x1}, {0x2}, {0x3}, {0x30}, {0x6c, 0x1}, {0xb, 0x1}, {0x5}, {0xc}, {0x5}, {0xb}, {0x1}, {0x60, 0x1}, {0xb}, {0x30}, {0x2}, {0x9, 0x1}, {0x0, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x58}}, 0x0)

63.063258ms ago: executing program 4 (id=1468):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02000000020000", @ANYRES64=0x0], 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4840)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

303.546µs ago: executing program 2 (id=1469):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c8, 0xf8, 0x1f0, 0xfeffffff, 0x310, 0xf8, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}, @ipv4=@multicast1, @gre_key, @icmp_id=0x65}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x7}, [@common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e21], [0x4e20, 0x4e20], 0x6, 0x1, 0x7, 0x4}}, @common=@addrtype={{0x30}, {0x50, 0x61, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@inet=@ecn={{0x28}, {0x69}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4, 0xdff013e6189dd1d4], 0x0, 0x6}}}}, {{@ip={@empty, @multicast2, 0xffffff00, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528)

0s ago: executing program 2 (id=1470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c2000"], 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44706' (ED25519) to the list of known hosts.
syzkaller login: [   49.222780][ T5751] cgroup: Unknown subsys name 'net'
[   49.314487][ T5751] cgroup: Unknown subsys name 'cpuset'
[   49.324008][ T5751] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.400634][ T5751] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.804273][ T5204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.808932][ T5204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.812440][ T5204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.825250][ T5204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.829336][ T5204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.849989][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.854491][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.860040][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.864076][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.868105][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.969497][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.973458][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.977289][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.981045][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.984398][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.166118][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   56.198260][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   56.270521][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.273984][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.276943][ T5812] bridge_slave_0: entered allmulticast mode
[   56.279787][ T5812] bridge_slave_0: entered promiscuous mode
[   56.298447][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.301517][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.303794][ T5812] bridge_slave_1: entered allmulticast mode
[   56.306738][ T5812] bridge_slave_1: entered promiscuous mode
[   56.356755][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.360461][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.363478][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.367015][ T5816] bridge_slave_0: entered allmulticast mode
[   56.370888][ T5816] bridge_slave_0: entered promiscuous mode
[   56.377265][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.379958][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.382808][ T5816] bridge_slave_1: entered allmulticast mode
[   56.387069][ T5816] bridge_slave_1: entered promiscuous mode
[   56.392948][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.452651][ T5812] team0: Port device team_slave_0 added
[   56.469035][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.474023][ T5812] team0: Port device team_slave_1 added
[   56.487304][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.540686][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.543676][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.555543][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.564076][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.566528][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.574727][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.580065][ T5816] team0: Port device team_slave_0 added
[   56.586377][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   56.593864][ T5816] team0: Port device team_slave_1 added
[   56.655851][ T5812] hsr_slave_0: entered promiscuous mode
[   56.658937][ T5812] hsr_slave_1: entered promiscuous mode
[   56.662704][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.665111][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.673264][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.678416][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.680595][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.688599][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.805150][ T5816] hsr_slave_0: entered promiscuous mode
[   56.808415][ T5816] hsr_slave_1: entered promiscuous mode
[   56.811288][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.814539][ T5816] Cannot create hsr debugfs directory
[   56.826648][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.829633][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.832631][ T5820] bridge_slave_0: entered allmulticast mode
[   56.836420][ T5820] bridge_slave_0: entered promiscuous mode
[   56.840234][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.843034][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.846468][ T5820] bridge_slave_1: entered allmulticast mode
[   56.850272][ T5820] bridge_slave_1: entered promiscuous mode
[   56.916821][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.940161][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.006176][ T5820] team0: Port device team_slave_0 added
[   57.024061][ T5820] team0: Port device team_slave_1 added
[   57.075053][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.077468][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.087190][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.107874][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.110123][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.119677][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.186177][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.197359][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.207400][ T5820] hsr_slave_0: entered promiscuous mode
[   57.210144][ T5820] hsr_slave_1: entered promiscuous mode
[   57.212314][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.215009][ T5820] Cannot create hsr debugfs directory
[   57.226106][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.243155][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.307403][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.318962][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.339821][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.351239][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.452199][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.502868][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   57.534737][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.537890][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.554049][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.564223][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.567336][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.579344][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.599992][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.609524][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.638469][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.668428][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   57.690335][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.693214][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.698414][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.701369][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.775913][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.800343][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   57.809916][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.812459][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.818333][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.820792][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.841441][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.874500][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.878892][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.916608][   T55] Bluetooth: hci1: command tx timeout
[   57.916614][ T5204] Bluetooth: hci0: command tx timeout
[   57.922682][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.976670][ T5812] veth0_vlan: entered promiscuous mode
[   57.988310][ T5816] veth0_vlan: entered promiscuous mode
[   57.997802][ T5812] veth1_vlan: entered promiscuous mode
[   58.004286][ T5816] veth1_vlan: entered promiscuous mode
[   58.021063][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.041675][ T5812] veth0_macvtap: entered promiscuous mode
[   58.053873][ T5816] veth0_macvtap: entered promiscuous mode
[   58.058688][ T5812] veth1_macvtap: entered promiscuous mode
[   58.062412][ T5816] veth1_macvtap: entered promiscuous mode
[   58.075335][   T55] Bluetooth: hci2: command tx timeout
[   58.080736][ T5820] veth0_vlan: entered promiscuous mode
[   58.093544][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.097983][ T5820] veth1_vlan: entered promiscuous mode
[   58.111444][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.116984][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.126793][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.134118][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.138300][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.141875][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.146301][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.160366][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.163413][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.167136][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.170238][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.193038][ T5820] veth0_macvtap: entered promiscuous mode
[   58.217548][ T5820] veth1_macvtap: entered promiscuous mode
[   58.258919][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.278979][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.281911][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.284633][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.305079][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.307981][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.311510][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.316474][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.328934][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.329173][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.331441][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.336085][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.368288][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.371229][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.447711][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.456351][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.459616][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.527985][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.536247][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.551524][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.666193][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.925877][ T5903] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   59.022977][ T5910] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9'.
[   59.592218][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   59.606261][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   59.699162][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.731323][ T5940] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   59.743434][ T5940] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.748331][ T5940] netlink: 'syz.2.19': attribute type 10 has an invalid length.
[   59.751120][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.760921][ T5940] team0: Port device geneve0 added
[   59.787349][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.795306][ T5942] netlink: 144 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.799392][ T5942] xt_CT: You must specify a L4 protocol and not use inversions on it
[   59.803543][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.850390][ T5946] tipc: Started in network mode
[   59.852764][ T5946] tipc: Node identity ac14140f, cluster identity 4711
[   59.856590][ T5946] tipc: New replicast peer: 255.255.255.255
[   59.859845][ T5946] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.996590][   T55] Bluetooth: hci0: command tx timeout
[   59.996599][ T5204] Bluetooth: hci1: command tx timeout
[   60.040969][ T5956] Cannot find del_set index 1 as target
[   60.047010][ T5956] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   60.049577][ T5957] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   60.164975][   T55] Bluetooth: hci2: command tx timeout
[   60.266387][ T5980] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   60.653279][ T5991] tipc: Can't bind to reserved service type 1
[   60.734257][ T5997] netlink: 'syz.1.35': attribute type 4 has an invalid length.
[   60.975497][ T5855] tipc: Node number set to 2886997007
[   61.199293][ T6016] Zero length message leads to an empty skb
[   61.374529][ T6028] nftables ruleset with unbound set
[   61.497387][ T6033] sctp: [Deprecated]: syz.0.46 (pid 6033) Use of int in max_burst socket option deprecated.
[   61.497387][ T6033] Use struct sctp_assoc_value instead
[   61.503265][ T6032] sctp: [Deprecated]: syz.0.46 (pid 6032) Use of int in max_burst socket option deprecated.
[   61.503265][ T6032] Use struct sctp_assoc_value instead
[   61.561447][ T6035] netlink: 'syz.0.47': attribute type 83 has an invalid length.
[   61.748452][ T6042] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   61.754211][ T6042] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   62.044640][ T6053] netlink: 'syz.1.53': attribute type 7 has an invalid length.
[   62.050987][ T6053] netlink: 'syz.1.53': attribute type 8 has an invalid length.
[   62.059694][ T6055] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   62.068822][ T6053] erspan0: entered promiscuous mode
[   62.073920][ T6053] erspan0: left promiscuous mode
[   62.078020][ T5204] Bluetooth: hci1: command tx timeout
[   62.078209][ T5817] Bluetooth: hci0: command tx timeout
[   62.081046][ T6055] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   62.236298][ T5817] Bluetooth: hci2: command tx timeout
[   62.390852][ T6077] "syz.1.57" (6077) uses obsolete ecb(arc4) skcipher
[   62.468450][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.120284][ T6131] syzkaller0: entered promiscuous mode
[   63.122202][ T6131] syzkaller0: entered allmulticast mode
[   64.154992][ T5817] Bluetooth: hci1: command tx timeout
[   64.165131][ T5817] Bluetooth: hci0: command tx timeout
[   64.314979][ T5817] Bluetooth: hci2: command 0x0419 tx timeout
[   64.421787][ T6196] warning: `syz.1.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.435911][ T6196] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.439516][ T6191] netlink: 'syz.2.82': attribute type 2 has an invalid length.
[   64.443091][ T6191] __nla_validate_parse: 14 callbacks suppressed
[   64.443101][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.82'.
[   64.609835][ T6208] Bluetooth: MGMT ver 1.23
[   64.762627][ T6216] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   64.778250][ T6216] netlink: 'syz.2.90': attribute type 5 has an invalid length.
[   64.791832][ T6216] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.90'.
[   64.944287][ T6226] netlink: 'syz.0.93': attribute type 11 has an invalid length.
[   65.082987][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'.
[   65.091011][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'.
[   65.299883][ T6251] pim6reg1: entered allmulticast mode
[   65.397035][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'.
[   65.557447][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'.
[   65.825843][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'.
[   65.916963][ T6307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.113'.
[   65.919932][ T6307] netem: unknown loss type 13
[   65.921541][ T6307] netem: change failed
[   65.933777][ T6306] : renamed from batadv_slave_1 (while UP)
[   66.053811][ T6318] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   66.088284][ T6320] openvswitch: netlink: Flow actions attr not present in new flow.
[   66.096159][ T6320] erspan0: entered promiscuous mode
[   66.099962][ T6320] erspan0: left promiscuous mode
[   66.146138][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'.
[   66.192806][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'.
[   66.396773][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   66.501699][ T6348] sctp: [Deprecated]: syz.1.127 (pid 6348) Use of int in max_burst socket option.
[   66.501699][ T6348] Use struct sctp_assoc_value instead
[   66.583897][ T6351] veth0_vlan: entered allmulticast mode
[   66.948745][ T6386] IPv6: sit1: Disabled Multicast RS
[   67.089347][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.091780][ T6403] bridge_slave_0: left allmulticast mode
[   67.094300][ T6403] bridge_slave_0: left promiscuous mode
[   67.099426][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.107685][ T6403] bridge_slave_1: left allmulticast mode
[   67.109606][ T6403] bridge_slave_1: left promiscuous mode
[   67.113604][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.130147][ T6403] bond0: (slave bond_slave_0): Releasing backup interface
[   67.140593][ T6403] bond0: (slave bond_slave_1): Releasing backup interface
[   67.155061][ T6403] team0: Port device team_slave_0 removed
[   67.160060][ T6403] team0: Port device team_slave_1 removed
[   67.162328][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.167748][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.171205][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.173535][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.251189][ T6408] syzkaller0: entered promiscuous mode
[   67.253630][ T6408] syzkaller0: entered allmulticast mode
[   67.866357][ T6403] syz.1.142 (6403) used greatest stack depth: 20056 bytes left
[   68.116676][ T6433] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   68.411648][ T6465] sctp: [Deprecated]: syz.2.159 (pid 6465) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.411648][ T6465] Use struct sctp_sack_info instead
[   68.783743][ T6503] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   68.978186][ T6523] pim6reg1: entered promiscuous mode
[   68.980211][ T6523] pim6reg1: entered allmulticast mode
[   69.186498][ T6525] team0: entered promiscuous mode
[   69.188386][ T6525] team0: entered allmulticast mode
[   69.255720][ T6547] netlink: 'syz.0.185': attribute type 2 has an invalid length.
[   69.576655][ T6573] xt_TCPMSS: Only works on TCP SYN packets
[   69.608102][ T6573] geneve1: entered allmulticast mode
[   69.656499][ T6578] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   69.702869][ T6581] __nla_validate_parse: 17 callbacks suppressed
[   69.702879][ T6581] netlink: 92 bytes leftover after parsing attributes in process `syz.1.195'.
[   69.730091][ T6582] netlink: 'syz.2.196': attribute type 11 has an invalid length.
[   69.745083][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.745918][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   69.750746][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.751099][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.758612][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.765885][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.772149][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.776903][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.777244][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.784145][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.796549][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.900542][ T6592] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[   69.957731][ T6599] netlink: 'syz.1.201': attribute type 21 has an invalid length.
[   70.001258][ T6602] netlink: 'syz.1.203': attribute type 4 has an invalid length.
[   70.056697][ T6605] veth0: entered promiscuous mode
[   70.071661][ T6605] veth0 (unregistering): left promiscuous mode
[   70.235453][ T6624] xt_bpf: check failed: parse error
[   70.310542][ T6633] netlink: 'syz.2.211': attribute type 5 has an invalid length.
[   70.366228][ T6643] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[   71.197863][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.201376][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.835282][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.937022][ T6700] netlink: 'syz.0.229': attribute type 4 has an invalid length.
[   71.960278][ T6701] Driver unsupported XDP return value 0 on prog  (id 66) dev N/A, expect packet loss!
[   72.041879][ T6714] x_tables: duplicate underflow at hook 1
[   72.049312][ T6712] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   72.185075][ T6709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.189811][ T6729] tc_dump_action: action bad kind
[   72.193966][ T6734] tc_dump_action: action bad kind
[   72.249470][ T6709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.256892][ T6709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.357232][ T6740] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   72.983737][ T6779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.258711][ T6798] netlink: 'syz.2.260': attribute type 12 has an invalid length.
[   73.372994][ T6814] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   73.409906][ T6816] xt_CT: You must specify a L4 protocol and not use inversions on it
[   73.744136][ T6841] netlink: 'syz.0.273': attribute type 3 has an invalid length.
[   74.342252][ T6873] netlink: 'syz.0.282': attribute type 5 has an invalid length.
[   74.348047][ T6873] IPv4: Oversized IP packet from 127.202.26.0
[   74.698934][ T6885] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   74.843112][ T6890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.912860][ T6890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.934391][ T6895] netlink: 'syz.1.292': attribute type 2 has an invalid length.
[   74.939330][ T6895] netlink: 'syz.1.292': attribute type 2 has an invalid length.
[   74.942306][ T6895] netlink: 'syz.1.292': attribute type 2 has an invalid length.
[   74.945977][ T6895] netlink: 'syz.1.292': attribute type 2 has an invalid length.
[   74.959681][ T6890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.032430][ T6890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.107623][ T6890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.121118][ T6890] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.129848][ T6890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.141440][ T6890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.212931][ T6920] netlink: 'syz.2.298': attribute type 10 has an invalid length.
[   75.232000][ T6920] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.235768][ T6919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.374233][ T6937] sock: sock_timestamping_bind_phc: sock not bind to device
[   75.472858][ T6951] __nla_validate_parse: 155 callbacks suppressed
[   75.472869][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[   75.479748][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'.
[   75.487945][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.490582][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.514909][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.555148][ T2306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.598214][ T6958] batadv_slave_0: entered allmulticast mode
[   75.622096][ T6959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.676443][ T6959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.699651][ T2306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.722763][ T6959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.771647][ T6959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.853916][ T6979] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.317'.
[   75.873400][ T6959] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.882832][ T6959] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.897461][ T6982] x_tables: duplicate underflow at hook 1
[   75.903262][ T6959] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.913027][ T6959] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.928094][ T6984] netlink: 'syz.2.319': attribute type 1 has an invalid length.
[   75.930637][ T6984] netlink: 208 bytes leftover after parsing attributes in process `syz.2.319'.
[   75.933530][ T6984] netlink: 'syz.2.319': attribute type 1 has an invalid length.
[   75.943912][ T6984] netlink: 'syz.2.319': attribute type 2 has an invalid length.
[   75.947904][ T6984] netlink: 9 bytes leftover after parsing attributes in process `syz.2.319'.
[   75.948155][ T6986] can: request_module (can-proto-0) failed.
[   76.017949][   T33] audit: type=1804 audit(1751822904.779:2): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.322" name="/newroot/113/cgroup.controllers" dev="tmpfs" ino=594 res=1 errno=0
[   76.037985][   T33] audit: type=1800 audit(1751822904.779:3): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="cgroup.controllers" dev="tmpfs" ino=594 res=0 errno=0
[   76.129064][ T7003] bond0: entered promiscuous mode
[   76.140689][ T7003] bond0: left promiscuous mode
[   76.236894][ T7010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.326'.
[   76.243410][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'.
[   76.259058][ T7010] netlink: 'syz.1.326': attribute type 39 has an invalid length.
[   76.327086][ T7008] bridge_slave_0: invalid flags given to default FDB implementation
[   76.767095][ T7013] netlink: 156 bytes leftover after parsing attributes in process `syz.2.327'.
[   76.838617][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'.
[   76.884967][ T7019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   77.190892][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   77.772435][ T7103] Cannot find add_set index 0 as target
[   77.915636][ T7110] netlink: 'syz.1.355': attribute type 6 has an invalid length.
[   79.252487][ T7148] syzkaller0: entered promiscuous mode
[   79.257269][ T7148] syzkaller0: entered allmulticast mode
[   79.516592][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.237912][ T7180] validate_nla: 2 callbacks suppressed
[   80.237930][ T7180] netlink: 'syz.2.383': attribute type 1 has an invalid length.
[   80.253420][ T7180] netlink: 'syz.2.383': attribute type 2 has an invalid length.
[   80.321303][ T7187] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[   80.339475][ T7190] IPv6: Can't replace route, no match found
[   80.393539][ T7187] bond3: (slave bridge3): making interface the new active one
[   80.399526][ T7187] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   80.509456][ T7206] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[   80.522766][ T7211] __nla_validate_parse: 10 callbacks suppressed
[   80.522777][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'.
[   80.533130][ T7206] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.543680][ T7206] erspan0: entered allmulticast mode
[   80.556983][ T7206] bond2: (slave erspan0): making interface the new active one
[   80.564194][ T7206] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   80.671975][ T7227] syzkaller1: entered promiscuous mode
[   80.683029][ T7227] syzkaller1: entered allmulticast mode
[   80.743820][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[   80.749763][ T7241] netlink: 'syz.2.403': attribute type 1 has an invalid length.
[   80.752896][ T7241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.403'.
[   80.862427][ T7256] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.408'.
[   80.889117][ T7259] geneve2: entered promiscuous mode
[   80.906627][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.411'.
[   80.911147][ T7261] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   80.973091][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'.
[   81.009064][ T7273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.416'.
[   81.063610][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.415'.
[   81.162911][ T7285] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.419'.
[   81.222174][ T7287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.299649][ T7292] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[   81.436450][  T789] cfg80211: failed to load regulatory.db
[   82.057887][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   82.169148][ T7331] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   82.316622][ T7350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.402084][ T7359] netlink: 'syz.0.442': attribute type 4 has an invalid length.
[   82.411137][ T7357] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.413886][ T7357] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.416835][ T7357] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.419471][ T7357] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.427224][ T7357] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.430312][ T7357] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.502573][ T7357] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.507782][ T7357] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.524126][ T7357] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.528217][ T7357] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.619084][ T7357] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.630430][ T7357] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.716024][ T7357] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.721055][ T7357] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.750321][ T7357] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.753433][ T7357] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.766851][ T7357] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.769511][ T7357] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.785022][ T7357] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.787958][ T7357] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.831801][ T7392] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002
[   83.712942][ T7440] bond3: entered promiscuous mode
[   83.715620][ T7440] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.107959][ T7486] bridge5: entered allmulticast mode
[   84.158225][ T7489] pim6reg1: entered promiscuous mode
[   84.160612][ T7489] pim6reg1: entered allmulticast mode
[   84.450755][ T7499] syzkaller0: entered promiscuous mode
[   84.452618][ T7499] syzkaller0: entered allmulticast mode
[   84.897007][ T7503] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[   85.367465][ T7508] unsupported nlmsg_type 40
[   85.388601][ T7510] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[   85.532818][ T7517] __nla_validate_parse: 11 callbacks suppressed
[   85.532833][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'.
[   85.700457][ T7526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.495'.
[   85.704615][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[   85.710769][ T7526] IPv6: NLM_F_REPLACE set, but no existing node found!
[   85.762165][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'.
[   85.885992][ T7530] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.498'.
[   85.993706][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.499'.
[   86.000421][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.004399][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.261319][ T7534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.500'.
[   86.308684][ T7536] pim6reg: entered allmulticast mode
[   86.358723][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'.
[   86.528837][ T7545] vlan2: entered promiscuous mode
[   86.530796][ T7545] bridge0: entered promiscuous mode
[   86.563904][ T7548] syzkaller1: entered promiscuous mode
[   86.566886][ T7548] syzkaller1: entered allmulticast mode
[   86.711428][ T7557] can: request_module (can-proto-3) failed.
[   87.013072][ T7583] openvswitch: netlink: Message has 4 unknown bytes.
[   87.018713][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.070395][ T7588] netlink: 'syz.2.518': attribute type 13 has an invalid length.
[   87.073249][ T7588] netlink: 'syz.2.518': attribute type 17 has an invalid length.
[   87.112998][ T7588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.162641][ T7594] xt_TPROXY: Can be used only with -p tcp or -p udp
[   87.212897][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'.
[   87.274295][ T7600] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[   87.277975][ T7600] netlink: 'syz.0.521': attribute type 11 has an invalid length.
[   87.280534][ T7600] netlink: 220 bytes leftover after parsing attributes in process `syz.0.521'.
[   87.550913][ T7623] trusted_key: syz.0.528 sent an empty control message without MSG_MORE.
[   87.557329][ T7623] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   87.568412][ T7623] bridge2: entered promiscuous mode
[   87.570190][ T7623] bridge2: entered allmulticast mode
[   87.576940][ T7623] team0: Port device bridge2 added
[   87.747685][ T7639] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[   87.750844][ T7639] netlink: 'syz.1.532': attribute type 2 has an invalid length.
[   88.067310][ T7652] netlink: 'syz.0.537': attribute type 12 has an invalid length.
[   88.091413][ T7654] netlink: 'syz.2.538': attribute type 9 has an invalid length.
[   88.100872][ T7654] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   88.104349][ T7654] macvlan4: entered allmulticast mode
[   88.107152][ T7654] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   88.143505][ T7658] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[   88.531007][ T7663] xt_TPROXY: Can be used only with -p tcp or -p udp
[   88.570616][ T7666] xt_policy: output policy not valid in PREROUTING and INPUT
[   88.840869][ T7679] netlink: 'syz.1.548': attribute type 1 has an invalid length.
[   88.846259][ T7681] Cannot find add_set index 0 as target
[   89.208262][ T7716] bridge3: entered promiscuous mode
[   89.210360][ T7716] bridge3: entered allmulticast mode
[   89.217936][ T7716] team0: Port device bridge3 added
[   89.268193][ T7724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.402457][ T7747] C: renamed from team_slave_0 (while UP)
[   89.780994][ T7781] 8021q: adding VLAN 0 to HW filter on device bond5
[   89.794791][ T7781] ipvlan2: entered allmulticast mode
[   89.796766][ T7781] bond5: entered allmulticast mode
[   89.812094][ T7781] bond5: (slave gretap1): making interface the new active one
[   89.815384][ T7781] gretap1: entered allmulticast mode
[   89.818897][ T7781] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   89.843420][ T7781] syz.2.573 (7781) used greatest stack depth: 19592 bytes left
[   90.538909][ T7854] __nla_validate_parse: 32 callbacks suppressed
[   90.538926][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'.
[   90.595659][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'.
[   90.677252][ T7877] Dead loop on virtual device ip6_vti0, fix it urgently!
[   90.702657][ T7879] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.742459][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'.
[   90.756254][ T7885] validate_nla: 1 callbacks suppressed
[   90.756263][ T7885] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[   90.974907][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[   90.977832][ T7910] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   90.980340][ T7910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.007142][ T7913] netlink: 'syz.1.603': attribute type 9 has an invalid length.
[   91.204864][ T5817] Bluetooth: hci2: command 0x0419 tx timeout
[   92.009875][ T7938] vxcan1: tx address claim with dlc 2
[   92.071862][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'.
[   92.764822][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.617'.
[   92.844109][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'.
[   92.858066][ T7959] dummy0: entered promiscuous mode
[   92.862812][ T7959] dummy0: left promiscuous mode
[   93.120892][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.623'.
[   93.146501][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[   93.337975][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'.
[   93.632990][ T8013] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   94.306780][ T8062] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   94.579809][ T8085] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   94.713092][ T8099] netlink: 'syz.1.668': attribute type 39 has an invalid length.
[   94.852746][ T8111] SET target dimension over the limit!
[   95.213356][ T8136] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   95.263854][ T8142] xt_TPROXY: Can be used only with -p tcp or -p udp
[   95.338023][ T8148] lo speed is unknown, defaulting to 1000
[   95.340581][ T8148] lo speed is unknown, defaulting to 1000
[   95.349539][ T8145] netlink: 'syz.2.683': attribute type 2 has an invalid length.
[   95.353669][ T8148] lo speed is unknown, defaulting to 1000
[   95.360444][ T8148] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   95.373130][ T8148] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   95.410599][ T8148] lo speed is unknown, defaulting to 1000
[   95.419150][ T8148] lo speed is unknown, defaulting to 1000
[   95.426278][ T8148] lo speed is unknown, defaulting to 1000
[   95.747445][ T8162] __nla_validate_parse: 13 callbacks suppressed
[   95.747456][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'.
[   95.753162][ T8162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.688'.
[   95.799743][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.2.689'.
[   95.850537][ T8166] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   96.088921][ T8178] TCP: TCP_TX_DELAY enabled
[   96.106322][ T8184] tun0: tun_chr_ioctl cmd 1074025677
[   96.114628][ T8184] tun0: linktype set to 778
[   96.245920][ T8194] xt_socket: unknown flags 0x8
[   96.300213][ T8202] netlink: 'syz.2.702': attribute type 1 has an invalid length.
[   96.440517][ T8215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.705'.
[   96.483139][ T8218] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001
[   96.536200][ T8225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.709'.
[   96.540347][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'.
[   96.549878][ T8225] syz_tun: entered allmulticast mode
[   96.557414][ T8224] syz_tun: left allmulticast mode
[   97.589751][ T8235] netlink: 76 bytes leftover after parsing attributes in process `syz.2.713'.
[   97.997205][ T8255] syzkaller0: refused to change device tx_queue_len
[   98.276858][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'.
[   98.279952][ T8272] netlink: 152 bytes leftover after parsing attributes in process `syz.2.725'.
[   98.457923][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'.
[   98.550391][ T8282] gretap2: entered allmulticast mode
[  100.565993][ T8302] netlink: 'syz.2.735': attribute type 1 has an invalid length.
[  100.651076][ T8305] dummy0: entered promiscuous mode
[  100.653313][ T8305] dummy0: entered allmulticast mode
[  100.856440][ T8311] __nla_validate_parse: 7 callbacks suppressed
[  100.856450][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'.
[  100.862284][ T8311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.738'.
[  101.736379][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'.
[  101.788529][ T8322] netlink: 'syz.2.743': attribute type 32 has an invalid length.
[  101.792669][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[  101.877254][ T8322] team0 (unregistering): Port device C removed
[  101.886483][ T8322] team0 (unregistering): Port device team_slave_1 removed
[  101.897840][ T8322] team0 (unregistering): Port device geneve0 removed
[  102.106543][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'.
[  103.081152][ T8341] netlink: 844 bytes leftover after parsing attributes in process `syz.2.750'.
[  103.213396][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'.
[  103.217509][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'.
[  103.417367][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'.
[  104.421651][ T8357] netlink: 'syz.2.755': attribute type 10 has an invalid length.
[  104.477314][ T8358] netlink: 'syz.2.755': attribute type 10 has an invalid length.
[  104.579297][ T8365] wg1: entered promiscuous mode
[  104.581473][ T8365] wg1: entered allmulticast mode
[  104.759220][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.760'.
[  105.562989][ T8375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.754434][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.758989][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.763314][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.768853][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.771724][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.800700][ T8389] lo speed is unknown, defaulting to 1000
[  105.902133][ T8389] chnl_net:caif_netlink_parms(): no params data found
[  105.904645][   T33] audit: type=1800 audit(1751822934.649:4): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.767" name="memory.events" dev="tmpfs" ino=1569 res=0 errno=0
[  105.972333][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.975172][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.977664][ T8389] bridge_slave_0: entered allmulticast mode
[  105.980429][ T8389] bridge_slave_0: entered promiscuous mode
[  105.985799][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.988328][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.990714][ T8389] bridge_slave_1: entered allmulticast mode
[  105.993589][ T8389] bridge_slave_1: entered promiscuous mode
[  106.029639][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'.
[  106.032610][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.056676][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.085139][ T8389] team0: Port device team_slave_0 added
[  106.091013][ T8389] team0: Port device team_slave_1 added
[  106.113211][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.115747][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.124361][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.129581][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.132160][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.141133][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.167681][ T8403] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.769'.
[  106.169461][ T8389] hsr_slave_0: entered promiscuous mode
[  106.173181][ T8389] hsr_slave_1: entered promiscuous mode
[  106.176233][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.178704][ T8389] Cannot create hsr debugfs directory
[  106.293866][ T8389] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.300743][ T8389] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.306096][ T8389] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.309941][ T8411] tipc: Started in network mode
[  106.311584][ T8411] tipc: Node identity 00000000000000008, cluster identity 4711
[  106.314333][ T8389] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.345395][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.348293][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.351405][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.353822][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.390399][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.400248][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.403456][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.413322][ T8389] 8021q: adding VLAN 0 to HW filter on device team0
[  106.421748][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.424252][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.437147][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.439510][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.562478][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.591501][ T8389] veth0_vlan: entered promiscuous mode
[  106.597238][ T8389] veth1_vlan: entered promiscuous mode
[  106.614616][ T8389] veth0_macvtap: entered promiscuous mode
[  106.619177][ T8389] veth1_macvtap: entered promiscuous mode
[  106.629541][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.638733][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.644065][ T8389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.647619][ T8389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.650390][ T8389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.653585][ T8389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.702321][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.709050][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.724074][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.727257][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.832753][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'.
[  107.423500][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  107.488139][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'.
[  107.835168][ T5817] Bluetooth: hci3: command tx timeout
[  108.453993][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'.
[  108.459008][ T8458] netlink: 'syz.2.783': attribute type 12 has an invalid length.
[  108.587253][ T8464] netlink: 'syz.2.785': attribute type 10 has an invalid length.
[  108.593952][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.600009][ T8464] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  108.897987][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'.
[  108.977758][ T8470] pimreg: entered allmulticast mode
[  109.915216][ T5817] Bluetooth: hci3: command tx timeout
[  110.203782][ T8494] veth2: entered allmulticast mode
[  110.267391][ T8498] netlink: 104 bytes leftover after parsing attributes in process `syz.2.796'.
[  110.431891][ T8500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.797'.
[  110.530681][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'.
[  110.711908][ T8510] netlink: 'syz.3.802': attribute type 2 has an invalid length.
[  111.028248][ T8527] ipt_ECN: cannot use operation on non-tcp rule
[  111.648839][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.653099][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.658539][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.663482][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.668295][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.708179][ T8546] lo speed is unknown, defaulting to 1000
[  111.899767][ T8546] chnl_net:caif_netlink_parms(): no params data found
[  111.913900][ T8553] __nla_validate_parse: 4 callbacks suppressed
[  111.913915][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'.
[  111.995172][ T5817] Bluetooth: hci3: command tx timeout
[  112.010169][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.014067][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.018362][ T8546] bridge_slave_0: entered allmulticast mode
[  112.022691][ T8546] bridge_slave_0: entered promiscuous mode
[  112.032029][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.035436][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.038622][ T8546] bridge_slave_1: entered allmulticast mode
[  112.043235][ T8546] bridge_slave_1: entered promiscuous mode
[  112.082008][ T8546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.090100][ T8546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.132168][ T8546] team0: Port device team_slave_0 added
[  112.139132][ T8546] team0: Port device team_slave_1 added
[  112.179019][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.181981][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.192642][ T8546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.200751][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.203688][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.215721][ T8546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.265645][ T8546] hsr_slave_0: entered promiscuous mode
[  112.269071][ T8546] hsr_slave_1: entered promiscuous mode
[  112.272031][ T8546] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.278413][ T8546] Cannot create hsr debugfs directory
[  112.372220][ T8562] netlink: 'syz.2.815': attribute type 4 has an invalid length.
[  112.376709][ T8562] netlink: 17 bytes leftover after parsing attributes in process `syz.2.815'.
[  112.498173][ T8546] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.507909][ T8546] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.516340][ T8546] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.527712][ T8546] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.621768][ T8546] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.647810][ T8546] 8021q: adding VLAN 0 to HW filter on device team0
[  112.663364][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.666607][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.699868][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.700671][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.817'.
[  112.702913][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.943112][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.326114][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'.
[  113.413837][ T8546] veth0_vlan: entered promiscuous mode
[  113.420005][ T8546] veth1_vlan: entered promiscuous mode
[  113.441144][ T8546] veth0_macvtap: entered promiscuous mode
[  113.450417][ T8546] veth1_macvtap: entered promiscuous mode
[  113.477870][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.500323][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.504507][ T8546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.523613][ T8546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.529358][ T8546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.532584][ T8546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.589900][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'.
[  113.660965][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.664251][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.723279][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.728580][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.756651][ T5817] Bluetooth: hci4: command tx timeout
[  113.875760][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  113.881482][ T8622] netlink: 'syz.4.828': attribute type 1 has an invalid length.
[  113.947420][ T8626] netlink: 'syz.3.829': attribute type 8 has an invalid length.
[  113.965695][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'.
[  113.981699][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'.
[  114.037329][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'.
[  114.040921][ T8629] netlink: 'syz.3.831': attribute type 12 has an invalid length.
[  114.076546][ T5817] Bluetooth: hci3: command tx timeout
[  114.109326][ T8631] lo speed is unknown, defaulting to 1000
[  114.292517][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'.
[  114.313106][ T8641] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  114.329957][ T8641] netlink: 'syz.2.834': attribute type 2 has an invalid length.
[  115.412114][ T8688] netlink: 'syz.3.851': attribute type 21 has an invalid length.
[  115.415903][ T8688] netlink: 'syz.3.851': attribute type 6 has an invalid length.
[  115.835090][ T5817] Bluetooth: hci4: command tx timeout
[  115.860686][ T8719] bridge1: entered promiscuous mode
[  115.863096][ T8719] bridge1: entered allmulticast mode
[  115.872005][ T8719] team0: Port device bridge1 added
[  115.881680][ T8719] rdma_rxe: rxe_newlink: failed to add macvlan1
[  116.020852][ T8728] macsec0: entered promiscuous mode
[  116.023927][ T8728] macsec1: entered allmulticast mode
[  116.028148][ T8728] macsec0: entered allmulticast mode
[  116.030431][ T8728] veth1_macvtap: entered allmulticast mode
[  116.301095][ T8758] netlink: 'syz.2.871': attribute type 10 has an invalid length.
[  116.418193][ T8771] netlink: 'syz.2.876': attribute type 2 has an invalid length.
[  116.426364][ T8771] netlink: 'syz.2.876': attribute type 3 has an invalid length.
[  116.702182][ T8800] pim6reg: entered allmulticast mode
[  116.704999][ T8801] pim6reg: left allmulticast mode
[  116.835147][ T8804] sctp: [Deprecated]: syz.3.886 (pid 8804) Use of int in maxseg socket option.
[  116.835147][ T8804] Use struct sctp_assoc_value instead
[  116.898482][ T8815] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[  116.909830][ T8815] syzkaller1: entered promiscuous mode
[  116.912192][ T8815] syzkaller1: entered allmulticast mode
[  117.033017][ T8821] __nla_validate_parse: 10 callbacks suppressed
[  117.033038][ T8821] netlink: 96 bytes leftover after parsing attributes in process `syz.2.892'.
[  117.149824][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'.
[  117.532248][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  117.554991][ T8842] bridge0: entered promiscuous mode
[  117.583419][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  117.590105][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'.
[  117.597003][ T8842] netlink: 10 bytes leftover after parsing attributes in process `syz.4.898'.
[  117.608416][ T8842] nbd: socks must be embedded in a SOCK_ITEM attr
[  117.627430][ T8846] syzkaller0: entered promiscuous mode
[  117.629323][ T8846] syzkaller0: entered allmulticast mode
[  117.638154][ T8846] netlink: 27 bytes leftover after parsing attributes in process `syz.3.900'.
[  117.871156][ T8855] netlink: 68 bytes leftover after parsing attributes in process `syz.4.902'.
[  117.915451][ T5817] Bluetooth: hci4: command tx timeout
[  118.042318][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.905'.
[  118.058442][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'.
[  118.065838][ T8869] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  119.198431][ T8929] validate_nla: 2 callbacks suppressed
[  119.198447][ T8929] netlink: 'syz.2.922': attribute type 39 has an invalid length.
[  119.994830][ T5817] Bluetooth: hci4: command tx timeout
[  120.020416][ T8955] netlink: 'syz.4.931': attribute type 83 has an invalid length.
[  120.332185][ T8975] vlan2: entered allmulticast mode
[  120.334027][ T8975] dummy0: entered allmulticast mode
[  120.419468][ T8938] syz.2.926 (8938) used greatest stack depth: 19288 bytes left
[  120.439258][ T8982] x_tables: duplicate underflow at hook 3
[  120.583234][ T8987] openvswitch: netlink: Multiple metadata blocks provided
[  120.592294][ T8987] netlink: 'syz.4.941': attribute type 4 has an invalid length.
[  120.609369][ T8987] net veth1_virt_wifi : renamed from virt_wifi0
[  121.155988][ T9003] team0 (unregistering): Port device team_slave_0 removed
[  121.163946][ T9003] team0 (unregistering): Port device team_slave_1 removed
[  121.170680][ T9003] team0 (unregistering): Port device bridge1 removed
[  121.761976][ T9011] gretap1: entered promiscuous mode
[  121.764168][ T9011] gretap1: entered allmulticast mode
[  122.195231][ T9026] sock: sock_timestamping_bind_phc: sock not bind to device
[  122.600533][ T9056] netlink: 'syz.3.962': attribute type 11 has an invalid length.
[  122.605608][ T9056] netlink: 'syz.3.962': attribute type 4 has an invalid length.
[  122.608844][ T9056] __nla_validate_parse: 17 callbacks suppressed
[  122.608854][ T9056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.962'.
[  122.759474][ T9071] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  122.824370][ T9076] netlink: 100 bytes leftover after parsing attributes in process `syz.3.967'.
[  122.896462][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'.
[  122.906252][ T9082] netlink: 64 bytes leftover after parsing attributes in process `syz.2.968'.
[  122.981738][ T9080] lo speed is unknown, defaulting to 1000
[  123.060643][ T9085] syzkaller1: entered promiscuous mode
[  123.063870][ T9085] syzkaller1: entered allmulticast mode
[  123.268249][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.973'.
[  123.277478][ T9094] netlink: 84 bytes leftover after parsing attributes in process `syz.4.971'.
[  123.468624][ T9109] 8021q: adding VLAN 0 to HW filter on device bond6
[  123.474925][ T9109] bond0: (slave bond6): Enslaving as an active interface with an up link
[  123.479802][ T9109] pim6reg: left allmulticast mode
[  123.485148][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'.
[  123.494259][ T9112] netlink: 'syz.4.976': attribute type 1 has an invalid length.
[  123.498257][ T9112] netlink: 'syz.4.976': attribute type 2 has an invalid length.
[  123.501350][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'.
[  123.527758][ T9114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'.
[  123.721908][ T9128] netlink: 64 bytes leftover after parsing attributes in process `syz.3.983'.
[  124.129501][ T9140] lo speed is unknown, defaulting to 1000
[  124.392740][ T9144] syzkaller0: entered promiscuous mode
[  124.399425][ T9144] syzkaller0: entered allmulticast mode
[  124.650689][ T5817] Bluetooth: hci2: link tx timeout
[  124.652797][ T5817] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  124.657424][ T5817] Bluetooth: hci2: link tx timeout
[  124.659205][ T5817] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.735141][ T9174] openvswitch: netlink: Actions may not be safe on all matching packets
[  125.913448][ T9195] netlink: 'syz.4.1000': attribute type 1 has an invalid length.
[  125.916346][ T9195] netlink: 'syz.4.1000': attribute type 2 has an invalid length.
[  126.038092][ T9198] veth1_macvtap (unregistering): left allmulticast mode
[  126.050771][ T9198] macsec0 (unregistering): left allmulticast mode
[  126.130429][ T9201] netlink: 'syz.2.1003': attribute type 1 has an invalid length.
[  126.511856][ T9224] netlink: 'syz.2.1012': attribute type 3 has an invalid length.
[  126.652544][ T9236] netlink: 'syz.3.1015': attribute type 6 has an invalid length.
[  126.658487][ T9236] netlink: 'syz.3.1015': attribute type 7 has an invalid length.
[  126.662542][ T9236] netlink: 'syz.3.1015': attribute type 8 has an invalid length.
[  126.693361][ T5855] IPVS: starting estimator thread 0...
[  126.721760][ T5817] Bluetooth: hci2: command 0x0419 tx timeout
[  126.746120][ T9242] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  126.798118][ T9239] IPVS: using max 79 ests per chain, 189600 per kthread
[  126.956955][ T9264] netlink: 'syz.4.1023': attribute type 6 has an invalid length.
[  126.959688][ T9264] netlink: 'syz.4.1023': attribute type 5 has an invalid length.
[  126.997618][ T9267] sit1: entered promiscuous mode
[  127.038417][ T9272] netlink: 'syz.2.1024': attribute type 1 has an invalid length.
[  127.130646][ T9276] xt_policy: too many policy elements
[  127.904192][ T9335] bond0: entered promiscuous mode
[  127.921356][ T9335] bond_slave_0: entered promiscuous mode
[  127.923409][ T9335] bond_slave_1: entered promiscuous mode
[  127.932322][ T9335] bond0: left promiscuous mode
[  127.933949][ T9335] bond_slave_0: left promiscuous mode
[  127.936686][ T9335] bond_slave_1: left promiscuous mode
[  128.028991][ T9340] __nla_validate_parse: 18 callbacks suppressed
[  128.029009][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  128.042038][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'.
[  128.043090][ T9340] geneve2: entered allmulticast mode
[  128.069837][ T9335] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  128.234070][ T9355] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1041'.
[  128.334444][ T9364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.340958][ T9365] Unsupported ieee802154 address type: 0
[  128.468930][ T9375] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.473454][ T9375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.517827][ T9375] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.528056][ T9375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.546843][ T9383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1049'.
[  128.609954][ T9375] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.613574][ T9375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.659624][ T9375] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.663250][ T9375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.733689][ T9375] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.737590][ T9375] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.751765][ T9375] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.757294][ T9375] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.770383][ T9375] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.774174][ T9375] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.786190][ T9375] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.789797][ T9375] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.795129][ T5817] Bluetooth: hci2: command 0x0419 tx timeout
[  129.289983][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'.
[  129.648531][ T9413] syzkaller1: entered promiscuous mode
[  129.651786][ T9413] syzkaller1: entered allmulticast mode
[  129.661375][ T9426] tipc: Started in network mode
[  129.663385][ T9426] tipc: Node identity 4, cluster identity 4711
[  129.668011][ T9426] tipc: Node number set to 4
[  129.807818][ T9428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1060'.
[  129.822890][ T9428] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1060'.
[  129.837336][ T9428] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1060'.
[  130.082425][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'.
[  130.099186][ T9462] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1068'.
[  130.935091][ T9516] validate_nla: 6 callbacks suppressed
[  130.935107][ T9516] netlink: 'syz.4.1081': attribute type 1 has an invalid length.
[  130.940879][ T9516] netlink: 'syz.4.1081': attribute type 2 has an invalid length.
[  131.595293][   T55] Bluetooth: hci4: command tx timeout
[  131.845546][ T9562] ipt_REJECT: TCP_RESET invalid for non-tcp
[  131.993145][ T9573] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  132.517771][ T9598] lo speed is unknown, defaulting to 1000
[  132.648023][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.881279][ T9620] netlink: 'syz.4.1110': attribute type 18 has an invalid length.
[  132.938271][ T9622] netlink: 'syz.4.1111': attribute type 7 has an invalid length.
[  134.148237][ T9638] __nla_validate_parse: 13 callbacks suppressed
[  134.148254][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'.
[  134.162346][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'.
[  134.167538][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'.
[  134.183447][ T9641] syzkaller1: entered promiscuous mode
[  134.186714][ T9641] syzkaller1: entered allmulticast mode
[  134.262730][ T9646] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1118'.
[  134.267302][ T9646] netlink: 'syz.4.1118': attribute type 1 has an invalid length.
[  134.443461][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1119'.
[  134.447848][ T9657] netlink: 'syz.3.1119': attribute type 1 has an invalid length.
[  134.451177][ T9657] netlink: 'syz.3.1119': attribute type 2 has an invalid length.
[  134.457947][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'.
[  135.058772][ T9660] IPv6: Can't replace route, no match found
[  135.114319][ T9663] veth0: entered promiscuous mode
[  135.118363][ T9663] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  135.141292][ T9663] syzkaller0: entered promiscuous mode
[  135.143416][ T9663] syzkaller0: entered allmulticast mode
[  135.151623][ T9662] veth0: left promiscuous mode
[  136.293612][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'.
[  136.346429][ T9679] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  136.720703][ T9708] xfrm1: entered promiscuous mode
[  136.722903][ T9708] xfrm1: entered allmulticast mode
[  136.751013][ T9708] xt_hashlimit: size too large, truncated to 1048576
[  137.027998][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'.
[  137.094428][ T9731] bridge1: entered allmulticast mode
[  137.100480][ T9730] netlink: 'syz.3.1142': attribute type 29 has an invalid length.
[  137.106297][ T9730] netlink: 'syz.3.1142': attribute type 29 has an invalid length.
[  137.112259][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'.
[  137.130286][ T9733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1143'.
[  137.603246][ T9755] lo speed is unknown, defaulting to 1000
[  138.496857][ T9787] netlink: zone id is out of range
[  138.503848][ T9787] netlink: zone id is out of range
[  138.507377][ T9787] netlink: zone id is out of range
[  138.509301][ T9787] netlink: zone id is out of range
[  138.511056][ T9787] netlink: zone id is out of range
[  138.512752][ T9787] netlink: zone id is out of range
[  138.514598][ T9787] netlink: zone id is out of range
[  138.517829][ T9787] netlink: zone id is out of range
[  138.520582][ T9787] netlink: zone id is out of range
[  138.523067][ T9787] netlink: zone id is out of range
[  139.231231][ T9810] __nla_validate_parse: 8 callbacks suppressed
[  139.231246][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'.
[  139.389306][ T9821] tc_dump_action: action bad kind
[  139.533136][ T9835] bond0: entered promiscuous mode
[  139.535403][ T9835] bond_slave_0: entered promiscuous mode
[  139.538178][ T9835] bond_slave_1: entered promiscuous mode
[  139.553968][ T9835] bond0: left promiscuous mode
[  139.557067][ T9835] bond_slave_0: left promiscuous mode
[  139.559230][ T9835] bond_slave_1: left promiscuous mode
[  139.595885][ T9841] netlink: 'syz.4.1177': attribute type 1 has an invalid length.
[  139.600709][ T9841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1177'.
[  139.689230][ T9835] xt_CT: No such helper "syz0"
[  139.774401][ T9854] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1183'.
[  140.136606][ T9866] block nbd0: server does not support multiple connections per device.
[  140.152753][ T9866] block nbd0: shutting down sockets
[  140.418758][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'.
[  140.862313][ T9889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'.
[  140.907516][ T9894] netlink: 'syz.2.1196': attribute type 21 has an invalid length.
[  140.917260][ T9894] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1196'.
[  140.943253][ T9896] netlink: 'syz.4.1195': attribute type 10 has an invalid length.
[  140.972129][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.988937][ T9896] bridge_slave_1: left allmulticast mode
[  140.996061][ T9896] bridge_slave_1: left promiscuous mode
[  141.000435][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.036940][ T9896] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  141.176941][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'.
[  141.272833][ T9918] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  141.301719][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'.
[  141.351875][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'.
[  141.388296][ T9929] netlink: 'syz.2.1204': attribute type 1 has an invalid length.
[  141.397256][ T9929] netlink: 'syz.2.1204': attribute type 1 has an invalid length.
[  141.398476][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'.
[  141.911623][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.042173][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.237150][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.324984][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  142.329984][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  142.335306][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  142.359931][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  142.365098][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.373662][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  142.431238][ T9957] lo speed is unknown, defaulting to 1000
[  142.518450][   T13] bridge_slave_1: left allmulticast mode
[  142.521776][   T13] bridge_slave_1: left promiscuous mode
[  142.525528][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.533908][   T13] bridge_slave_0: left allmulticast mode
[  142.536312][   T13] bridge_slave_0: left promiscuous mode
[  142.538856][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.901766][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.907324][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.912819][   T13] bond0 (unregistering): Released all slaves
[  143.198042][ T9957] chnl_net:caif_netlink_parms(): no params data found
[  143.301763][ T9995] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.304522][ T9995] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.309358][ T9995] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.316526][ T9995] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.360891][ T9998] netlink: 'syz.2.1220': attribute type 11 has an invalid length.
[  143.381760][   T13] hsr_slave_0: left promiscuous mode
[  143.389790][   T13] hsr_slave_1: left promiscuous mode
[  143.394116][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.400503][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.407929][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.410814][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.421466][   T13] veth1_vlan: left promiscuous mode
[  143.423953][   T13] veth0_vlan: left promiscuous mode
[  143.703957][   T13] team0 (unregistering): Port device team_slave_1 removed
[  143.742792][   T13] team0 (unregistering): Port device team_slave_0 removed
[  144.006937][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.011751][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.015022][ T9957] bridge_slave_0: entered allmulticast mode
[  144.018222][ T9957] bridge_slave_0: entered promiscuous mode
[  144.068699][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.073032][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.082492][ T9957] bridge_slave_1: entered allmulticast mode
[  144.096651][ T9957] bridge_slave_1: entered promiscuous mode
[  144.143617][T10008] netlink: 'syz.4.1221': attribute type 1 has an invalid length.
[  144.149475][T10008] netlink: 'syz.4.1221': attribute type 2 has an invalid length.
[  144.174211][ T9957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.200412][ T9957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.273752][ T9957] team0: Port device team_slave_0 added
[  144.289986][ T9957] team0: Port device team_slave_1 added
[  144.378839][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.381379][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.394914][   T55] Bluetooth: hci3: command tx timeout
[  144.402389][ T9957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.412773][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.422608][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.441339][ T9957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.447639][   T33] audit: type=1107 audit(1751822973.209:5): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  144.513637][T10038] Bluetooth: MGMT ver 1.23
[  144.517792][ T9957] hsr_slave_0: entered promiscuous mode
[  144.570731][ T9957] hsr_slave_1: entered promiscuous mode
[  144.573473][ T9957] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.576994][ T9957] Cannot create hsr debugfs directory
[  144.595750][   T13] IPVS: stop unused estimator thread 0...
[  144.614065][T10040] __nla_validate_parse: 6 callbacks suppressed
[  144.614305][T10040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'.
[  144.656498][T10040] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  144.659284][T10040] netlink: 'syz.2.1229': attribute type 2 has an invalid length.
[  144.661867][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'.
[  144.767383][T10052] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  144.892966][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'.
[  144.998742][T10061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1237'.
[  145.001701][T10061] netlink: 'syz.4.1237': attribute type 1 has an invalid length.
[  145.021806][T10061] netlink: 'syz.4.1237': attribute type 2 has an invalid length.
[  145.027531][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1237'.
[  145.199852][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'.
[  145.203234][T10077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.206588][T10077] IPv6: NLM_F_CREATE should be set when creating new route
[  145.226272][ T9957] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.241856][ T9957] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.257427][ T9957] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.268058][ T9957] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.308058][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'.
[  145.317016][T10090] netlink: 'syz.4.1245': attribute type 1 has an invalid length.
[  145.320237][T10090] netlink: 'syz.4.1245': attribute type 2 has an invalid length.
[  145.323464][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1245'.
[  145.400331][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.420671][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'.
[  145.432259][ T9957] 8021q: adding VLAN 0 to HW filter on device team0
[  145.447887][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.450809][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.474144][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.476577][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.696254][ T9957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.733492][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1250'.
[  145.790518][ T9957] veth0_vlan: entered promiscuous mode
[  145.801772][ T9957] veth1_vlan: entered promiscuous mode
[  145.839957][ T9957] veth0_macvtap: entered promiscuous mode
[  145.856995][ T9957] veth1_macvtap: entered promiscuous mode
[  145.890519][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.905996][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.928657][ T9957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.932220][ T9957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.936438][ T9957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.939346][ T9957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.996006][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.001907][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.041404][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.054743][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.297250][T10163] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20002
[  146.431611][T10177] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  146.435712][T10177] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  146.670245][T10185] lo speed is unknown, defaulting to 1000
[  146.947246][T10205] syzkaller0: entered allmulticast mode
[  147.389377][T10222] pimreg: left allmulticast mode
[  147.401314][T10221] netlink: 'syz.4.1274': attribute type 1 has an invalid length.
[  147.409275][T10221] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  147.413931][T10221] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  147.787608][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.038341][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  148.042866][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  148.045691][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  148.048816][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  148.051718][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  148.083705][T10244] lo speed is unknown, defaulting to 1000
[  148.322407][T10252] netlink: 'syz.4.1284': attribute type 1 has an invalid length.
[  148.337309][T10244] chnl_net:caif_netlink_parms(): no params data found
[  148.481057][T10244] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.490474][T10244] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.493162][T10244] bridge_slave_0: entered allmulticast mode
[  148.501327][T10244] bridge_slave_0: entered promiscuous mode
[  148.506127][T10244] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.508728][T10244] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.511084][T10244] bridge_slave_1: entered allmulticast mode
[  148.516414][T10244] bridge_slave_1: entered promiscuous mode
[  148.548046][T10244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.555428][T10244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.597781][T10244] team0: Port device team_slave_0 added
[  148.603518][T10244] team0: Port device team_slave_1 added
[  148.633598][T10244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.640776][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.653243][T10244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.662623][T10244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.669139][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.680684][T10244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.746825][T10244] hsr_slave_0: entered promiscuous mode
[  148.749350][T10244] hsr_slave_1: entered promiscuous mode
[  148.751538][T10244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.753911][T10244] Cannot create hsr debugfs directory
[  148.976407][T10297] bond0: (slave batadv0): Releasing backup interface
[  148.982201][T10297] bridge_slave_0: left allmulticast mode
[  148.984056][T10297] bridge_slave_0: left promiscuous mode
[  148.987283][T10297] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.991545][T10297] bridge_slave_1: left allmulticast mode
[  148.993594][T10297] bridge_slave_1: left promiscuous mode
[  148.998729][T10297] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.004032][T10297] bond0: (slave bond_slave_0): Releasing backup interface
[  149.014394][T10297] bond0: (slave bond_slave_1): Releasing backup interface
[  149.021874][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.024486][T10297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.033320][T10297] bond0: (slave wlan1): Releasing backup interface
[  149.043997][T10297] bond3: (slave bridge3): Releasing active interface
[  149.050053][T10297] bond5: (slave gretap1): Releasing active interface
[  149.052576][T10297] gretap1: left allmulticast mode
[  149.057985][T10297] bond0: (slave bond6): Releasing backup interface
[  149.144468][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.209259][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.281438][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.412090][   T13] bridge_slave_1: left allmulticast mode
[  149.415358][   T13] bridge_slave_1: left promiscuous mode
[  149.418497][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.422502][   T13] bridge_slave_0: left allmulticast mode
[  149.424309][   T13] bridge_slave_0: left promiscuous mode
[  149.427284][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.695345][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.709643][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.717366][   T13] bond0 (unregistering): Released all slaves
[  149.781343][T10319] validate_nla: 1 callbacks suppressed
[  149.781360][T10319] netlink: 'syz.4.1306': attribute type 1 has an invalid length.
[  149.788848][T10319] netlink: 'syz.4.1306': attribute type 2 has an invalid length.
[  149.793221][T10319] netlink: 'syz.4.1306': attribute type 1 has an invalid length.
[  149.797701][T10319] netlink: 'syz.4.1306': attribute type 2 has an invalid length.
[  149.907525][T10323] __nla_validate_parse: 16 callbacks suppressed
[  149.907537][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'.
[  150.038675][   T13] hsr_slave_0: left promiscuous mode
[  150.040953][   T13] hsr_slave_1: left promiscuous mode
[  150.042970][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.048271][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.051583][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.054136][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.069542][   T13] veth1_macvtap: left promiscuous mode
[  150.071639][   T13] veth0_macvtap: left promiscuous mode
[  150.073503][   T13] veth1_vlan: left promiscuous mode
[  150.075802][   T55] Bluetooth: hci3: command tx timeout
[  150.078679][   T13] veth0_vlan: left promiscuous mode
[  150.372612][   T13] team0 (unregistering): Port device team_slave_1 removed
[  150.412532][   T13] team0 (unregistering): Port device team_slave_0 removed
[  150.741669][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1309'.
[  150.753106][T10338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1309'.
[  150.814502][T10341] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  150.826919][T10341] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  150.860982][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1311'.
[  150.905639][T10348] netlink: 'syz.4.1311': attribute type 1 has an invalid length.
[  150.908314][T10348] netlink: 'syz.4.1311': attribute type 2 has an invalid length.
[  150.911615][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1311'.
[  150.938825][T10244] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.962923][T10244] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  150.978790][T10244] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  150.983471][T10244] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  151.080612][T10244] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.097052][T10244] 8021q: adding VLAN 0 to HW filter on device team0
[  151.104094][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.106676][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.136385][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.139140][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.153836][T10362] net_ratelimit: 4 callbacks suppressed
[  151.153848][T10362] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  151.163855][T10364] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1315'.
[  151.249186][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'.
[  151.252485][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'.
[  151.278742][T10244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.314158][T10244] veth0_vlan: entered promiscuous mode
[  151.321329][T10244] veth1_vlan: entered promiscuous mode
[  151.340544][T10385] netlink: 'syz.4.1320': attribute type 2 has an invalid length.
[  151.363462][T10244] veth0_macvtap: entered promiscuous mode
[  151.371090][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'.
[  151.378376][T10244] veth1_macvtap: entered promiscuous mode
[  151.409317][T10244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.420909][T10244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.428022][T10244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.431046][T10244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.434093][T10244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.441637][T10244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.492383][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.501751][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.530885][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.537999][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.574161][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1323'.
[  152.724098][T10424] Unsupported ieee802154 address type: 0
[  152.942704][T10431] netlink: 'syz.2.1334': attribute type 1 has an invalid length.
[  152.948740][T10431] netlink: 'syz.2.1334': attribute type 2 has an invalid length.
[  153.760926][ T5831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.158534][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  154.162927][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  154.168596][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  154.173441][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  154.180253][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  154.211957][T10487] lo speed is unknown, defaulting to 1000
[  154.337097][T10493] xt_hashlimit: max too large, truncated to 1048576
[  154.342696][T10493] xt_bpf: check failed: parse error
[  154.357008][T10487] chnl_net:caif_netlink_parms(): no params data found
[  154.416882][T10498] netlink: 'syz.2.1355': attribute type 1 has an invalid length.
[  154.515674][T10487] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.518126][T10487] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.524938][T10487] bridge_slave_0: entered allmulticast mode
[  154.528907][T10487] bridge_slave_0: entered promiscuous mode
[  154.538892][T10487] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.541764][T10487] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.544122][T10487] bridge_slave_1: entered allmulticast mode
[  154.549638][T10487] bridge_slave_1: entered promiscuous mode
[  154.579295][T10487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.584252][T10487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.612509][T10487] team0: Port device team_slave_0 added
[  154.613234][T10504] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  154.617605][T10487] team0: Port device team_slave_1 added
[  154.661295][T10487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.663736][T10487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.676151][T10487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.683159][T10487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.686342][T10487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.696357][T10487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.787241][T10487] hsr_slave_0: entered promiscuous mode
[  154.790724][T10487] hsr_slave_1: entered promiscuous mode
[  154.793608][T10487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.807035][T10487] Cannot create hsr debugfs directory
[  155.018473][T10528] validate_nla: 1 callbacks suppressed
[  155.018485][T10528] netlink: 'syz.2.1366': attribute type 4 has an invalid length.
[  155.029915][T10528] netlink: 'syz.2.1366': attribute type 4 has an invalid length.
[  155.191214][T10535] __nla_validate_parse: 12 callbacks suppressed
[  155.191236][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1368'.
[  155.251763][T10551] netlink: 'syz.2.1372': attribute type 9 has an invalid length.
[  155.256316][T10551] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1372'.
[  155.556173][ T5831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.618284][ T5831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.714289][ T5831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.878420][ T5831] bridge_slave_1: left allmulticast mode
[  155.880300][ T5831] bridge_slave_1: left promiscuous mode
[  155.882186][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.886874][ T5831] bridge_slave_0: left allmulticast mode
[  155.888916][ T5831] bridge_slave_0: left promiscuous mode
[  155.890895][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.918730][T10594] netlink: 'syz.4.1383': attribute type 11 has an invalid length.
[  156.166912][ T5831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.171898][ T5831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.177073][ T5831] bond0 (unregistering): Released all slaves
[  156.237722][   T55] Bluetooth: hci3: command tx timeout
[  156.495341][ T5831] hsr_slave_0: left promiscuous mode
[  156.497631][ T5831] hsr_slave_1: left promiscuous mode
[  156.501424][ T5831] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.504490][ T5831] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.508696][ T5831] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.511662][ T5831] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.527452][ T5831] veth1_macvtap: left promiscuous mode
[  156.529801][ T5831] veth0_macvtap: left promiscuous mode
[  156.532571][ T5831] veth1_vlan: left promiscuous mode
[  156.538336][ T5831] veth0_vlan: left promiscuous mode
[  156.860032][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'.
[  156.933815][ T5831] team0 (unregistering): Port device team_slave_1 removed
[  156.963648][ T5831] team0 (unregistering): Port device team_slave_0 removed
[  157.237055][T10616] netlink: 'syz.4.1386': attribute type 1 has an invalid length.
[  157.242113][T10616] netlink: 'syz.4.1386': attribute type 2 has an invalid length.
[  157.245913][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1386'.
[  157.311225][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'.
[  157.315299][T10487] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.324587][T10618] vlan2: entered promiscuous mode
[  157.330011][T10618] bond0: entered promiscuous mode
[  157.341832][T10487] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.358142][T10487] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.365062][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'.
[  157.367877][T10487] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  157.460906][T10487] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.472895][T10487] 8021q: adding VLAN 0 to HW filter on device team0
[  157.478737][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.481018][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.491774][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.494345][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.631082][T10487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.662132][T10487] veth0_vlan: entered promiscuous mode
[  157.678329][T10487] veth1_vlan: entered promiscuous mode
[  157.702197][T10487] veth0_macvtap: entered promiscuous mode
[  157.711028][T10487] veth1_macvtap: entered promiscuous mode
[  157.732047][T10487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.738186][T10487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.747445][T10487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.751132][T10487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.755662][T10487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.758817][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'.
[  157.759746][T10487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.778400][T10643] ipvlan2: entered promiscuous mode
[  157.908699][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.912162][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.953602][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.956685][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.055544][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'.
[  158.062202][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  158.069312][T10656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1399'.
[  158.084308][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  158.093137][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  158.460804][T10676] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1408'.
[  158.464279][T10676] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  158.508476][T10680] netlink: 'syz.4.1409': attribute type 1 has an invalid length.
[  158.511634][T10680] netlink: 'syz.4.1409': attribute type 2 has an invalid length.
[  158.829540][T10700] netlink: 'syz.4.1416': attribute type 1 has an invalid length.
[  158.833263][T10700] netlink: 'syz.4.1416': attribute type 2 has an invalid length.
[  158.957714][T10713] openvswitch: netlink: Key type 78 is out of range max 32
[  159.105292][T10726] netlink: 'syz.2.1425': attribute type 1 has an invalid length.
[  159.266354][T10738] syzkaller0: entered promiscuous mode
[  159.270770][T10738] syzkaller0: entered allmulticast mode
[  159.278336][T10741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.282582][T10737] tipc: Resetting bearer <eth:syzkaller0>
[  159.297043][T10737] tipc: Disabling bearer <eth:syzkaller0>
[  159.643315][T10766] block nbd0: Unsupported socket: shutdown callout must be supported.
[  159.779208][T10789] xt_hashlimit: size too large, truncated to 1048576
[  160.054403][T10813] validate_nla: 4 callbacks suppressed
[  160.054419][T10813] netlink: 'syz.4.1452': attribute type 1 has an invalid length.
[  160.064617][T10813] netlink: 'syz.4.1452': attribute type 5 has an invalid length.
[  160.217928][ T5838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.928403][T10846] __nla_validate_parse: 23 callbacks suppressed
[  160.928415][T10846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1462'.
[  160.976172][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  160.979794][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  160.983143][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  160.987898][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  160.992080][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  161.029162][T10847] lo speed is unknown, defaulting to 1000
[  161.169797][T10847] chnl_net:caif_netlink_parms(): no params data found
[  161.248739][T10847] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.251915][T10847] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.256503][T10847] bridge_slave_0: entered allmulticast mode
[  161.262315][T10847] bridge_slave_0: entered promiscuous mode
[  161.268247][T10847] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.271606][T10847] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.274934][T10847] bridge_slave_1: entered allmulticast mode
[  161.279217][T10847] bridge_slave_1: entered promiscuous mode
[  161.314633][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.322773][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.370046][T10847] team0: Port device team_slave_0 added
[  161.376475][T10847] team0: Port device team_slave_1 added
[  161.404245][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.407371][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.418830][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.424387][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.427741][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.438247][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.474369][T10847] hsr_slave_0: entered promiscuous mode
[  161.477591][T10847] hsr_slave_1: entered promiscuous mode
[  161.480221][T10847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.483000][T10847] Cannot create hsr debugfs directory
[  161.845230][T10861] netlink: 'syz.4.1465': attribute type 4 has an invalid length.
[  161.848891][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'.
[  161.881859][T10866] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1466'.
[  161.922853][T10870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.940494][T10870] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1
[  161.952858][T10872] x_tables: ip_tables: dccp match: only valid for protocol 33
[  161.998734][T10875] IPVS: length: 8 != 446622349272
[  162.017787][T10661] ==================================================================
[  162.020688][T10661] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  162.023637][T10661] Read of size 8 at addr ffff8880358a00a0 by task khidpd_16bf5505/10661
[  162.027605][T10661] 
[  162.028422][T10661] CPU: 0 UID: 0 PID: 10661 Comm: khidpd_16bf5505 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  162.028433][T10661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.028438][T10661] Call Trace:
[  162.028442][T10661]  <TASK>
[  162.028445][T10661]  dump_stack_lvl+0x189/0x250
[  162.028461][T10661]  ? __virt_addr_valid+0x1c8/0x5c0
[  162.028470][T10661]  ? rcu_is_watching+0x15/0xb0
[  162.028481][T10661]  ? __kasan_check_byte+0x12/0x40
[  162.028490][T10661]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.028500][T10661]  ? rcu_is_watching+0x15/0xb0
[  162.028510][T10661]  ? lock_release+0x4b/0x3e0
[  162.028521][T10661]  ? __virt_addr_valid+0x1c8/0x5c0
[  162.028528][T10661]  ? __virt_addr_valid+0x4a5/0x5c0
[  162.028535][T10661]  print_report+0xd2/0x2b0
[  162.028546][T10661]  ? __mutex_lock+0x738/0xe80
[  162.028578][T10661]  kasan_report+0x118/0x150
[  162.028586][T10661]  ? __mutex_lock+0x738/0xe80
[  162.028597][T10661]  __mutex_lock+0x738/0xe80
[  162.028608][T10661]  ? __mutex_lock+0x51b/0xe80
[  162.028619][T10661]  ? l2cap_unregister_user+0x6a/0x1b0
[  162.028631][T10661]  ? __pfx___mutex_lock+0x10/0x10
[  162.028641][T10661]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.028653][T10661]  l2cap_unregister_user+0x6a/0x1b0
[  162.028668][T10661]  hidp_session_thread+0x3c9/0x410
[  162.028681][T10661]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.028691][T10661]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.028700][T10661]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.028711][T10661]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.028721][T10661]  ? __kthread_parkme+0x7b/0x200
[  162.028728][T10661]  ? __kthread_parkme+0x1a1/0x200
[  162.028735][T10661]  kthread+0x711/0x8a0
[  162.028744][T10661]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.028754][T10661]  ? __pfx_kthread+0x10/0x10
[  162.028761][T10661]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.028770][T10661]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.028781][T10661]  ? __pfx_kthread+0x10/0x10
[  162.028788][T10661]  ret_from_fork+0x3fc/0x770
[  162.028799][T10661]  ? __pfx_ret_from_fork+0x10/0x10
[  162.028809][T10661]  ? __switch_to_asm+0x39/0x70
[  162.028816][T10661]  ? __switch_to_asm+0x33/0x70
[  162.028822][T10661]  ? __pfx_kthread+0x10/0x10
[  162.028829][T10661]  ret_from_fork_asm+0x1a/0x30
[  162.028839][T10661]  </TASK>
[  162.028842][T10661] 
[  162.119794][T10661] Allocated by task 8546:
[  162.121648][T10661]  kasan_save_track+0x3e/0x80
[  162.123639][T10661]  __kasan_kmalloc+0x93/0xb0
[  162.125577][T10661]  __kmalloc_noprof+0x27a/0x4f0
[  162.127667][T10661]  hci_alloc_dev_priv+0x28/0x2040
[  162.129823][T10661]  vhci_create_device+0x120/0x6e0
[  162.132131][T10661]  vhci_write+0x3ce/0x4a0
[  162.134191][T10661]  vfs_write+0x54b/0xa90
[  162.136068][T10661]  ksys_write+0x145/0x250
[  162.137939][T10661]  do_syscall_64+0xfa/0x3b0
[  162.139859][T10661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.142263][T10661] 
[  162.143344][T10661] Freed by task 8546:
[  162.144966][T10661]  kasan_save_track+0x3e/0x80
[  162.146694][T10661]  kasan_save_free_info+0x46/0x50
[  162.148852][T10661]  __kasan_slab_free+0x62/0x70
[  162.150928][T10661]  kfree+0x18e/0x440
[  162.152678][T10661]  bt_host_release+0x82/0x90
[  162.154744][T10661]  device_release+0x9c/0x1c0
[  162.156895][T10661]  kobject_put+0x22b/0x480
[  162.158901][T10661]  vhci_release+0x88/0xd0
[  162.160603][T10661]  __fput+0x44c/0xa70
[  162.162100][T10661]  task_work_run+0x1d4/0x260
[  162.163987][T10661]  do_exit+0x6b5/0x22e0
[  162.165807][T10661]  do_group_exit+0x21c/0x2d0
[  162.167939][T10661]  __x64_sys_exit_group+0x3f/0x40
[  162.170218][T10661]  x64_sys_call+0x21ba/0x21c0
[  162.172250][T10661]  do_syscall_64+0xfa/0x3b0
[  162.174110][T10661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.176301][T10661] 
[  162.177284][T10661] Last potentially related work creation:
[  162.179813][T10661]  kasan_save_stack+0x3e/0x60
[  162.181957][T10661]  kasan_record_aux_stack+0xbd/0xd0
[  162.184578][T10661]  insert_work+0x3d/0x330
[  162.186574][T10661]  __queue_work+0xbd9/0xfe0
[  162.188313][T10661]  queue_work_on+0x181/0x270
[  162.190199][T10661]  process_scheduled_works+0xae1/0x17b0
[  162.192513][T10661]  worker_thread+0x8a0/0xda0
[  162.194474][T10661]  kthread+0x711/0x8a0
[  162.196209][T10661]  ret_from_fork+0x3fc/0x770
[  162.198141][T10661]  ret_from_fork_asm+0x1a/0x30
[  162.200113][T10661] 
[  162.201161][T10661] Second to last potentially related work creation:
[  162.204152][T10661]  kasan_save_stack+0x3e/0x60
[  162.206248][T10661]  kasan_record_aux_stack+0xbd/0xd0
[  162.208477][T10661]  insert_work+0x3d/0x330
[  162.210206][T10661]  __queue_work+0xcfc/0xfe0
[  162.212189][T10661]  call_timer_fn+0x17e/0x5f0
[  162.214237][T10661]  __run_timer_base+0x646/0x860
[  162.216601][T10661]  run_timer_softirq+0xb7/0x180
[  162.219016][T10661]  handle_softirqs+0x286/0x870
[  162.221138][T10661]  __irq_exit_rcu+0xca/0x1f0
[  162.222986][T10661]  irq_exit_rcu+0x9/0x30
[  162.224735][T10661]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  162.226921][T10661]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.229246][T10661] 
[  162.230326][T10661] The buggy address belongs to the object at ffff8880358a0000
[  162.230326][T10661]  which belongs to the cache kmalloc-8k of size 8192
[  162.236025][T10661] The buggy address is located 160 bytes inside of
[  162.236025][T10661]  freed 8192-byte region [ffff8880358a0000, ffff8880358a2000)
[  162.242052][T10661] 
[  162.243396][T10661] The buggy address belongs to the physical page:
[  162.246405][T10661] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880358a4000 pfn:0x358a0
[  162.250697][T10661] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  162.254208][T10661] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  162.258288][T10661] page_type: f5(slab)
[  162.260014][T10661] raw: 00fff00000000240 ffff88801a442280 ffffea00007f1c10 ffffea0000a1bc10
[  162.263586][T10661] raw: ffff8880358a4000 0000000000020001 00000000f5000000 0000000000000000
[  162.267275][T10661] head: 00fff00000000240 ffff88801a442280 ffffea00007f1c10 ffffea0000a1bc10
[  162.271735][T10661] head: ffff8880358a4000 0000000000020001 00000000f5000000 0000000000000000
[  162.275716][T10661] head: 00fff00000000003 ffffea0000d62801 00000000ffffffff 00000000ffffffff
[  162.279295][T10661] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  162.282924][T10661] page dumped because: kasan: bad access detected
[  162.285673][T10661] page_owner tracks the page as allocated
[  162.288235][T10661] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8403, tgid 8402 (syz.2.769), ts 106180997147, free_ts 90885789693
[  162.297656][T10661]  post_alloc_hook+0x240/0x2a0
[  162.299722][T10661]  get_page_from_freelist+0x21e4/0x22c0
[  162.302028][T10661]  __alloc_frozen_pages_noprof+0x181/0x370
[  162.305054][T10661]  alloc_pages_mpol+0x232/0x4a0
[  162.307862][T10661]  allocate_slab+0x8a/0x3b0
[  162.310057][T10661]  ___slab_alloc+0xbfc/0x1480
[  162.312170][T10661]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  162.314636][T10661]  kmalloc_reserve+0x136/0x290
[  162.316244][T10661]  __alloc_skb+0x142/0x2d0
[  162.317838][T10661]  netlink_dump+0x1c7/0xe20
[  162.319703][T10661]  netlink_recvmsg+0x676/0xa30
[  162.321774][T10661]  sock_recvmsg+0x22c/0x270
[  162.323725][T10661]  ____sys_recvmsg+0x1c9/0x460
[  162.325959][T10661]  ___sys_recvmsg+0x1b5/0x510
[  162.328164][T10661]  do_recvmmsg+0x307/0x770
[  162.330153][T10661]  __x64_sys_recvmmsg+0x190/0x240
[  162.332190][T10661] page last free pid 7890 tgid 7890 stack trace:
[  162.334336][T10661]  __free_pages_ok+0xa44/0xc20
[  162.335978][T10661]  __folio_put+0x21b/0x2c0
[  162.337722][T10661]  free_large_kmalloc+0x145/0x200
[  162.339493][T10661]  skb_release_data+0x62d/0x7c0
[  162.341325][T10661]  sk_skb_reason_drop+0x127/0x170
[  162.343191][T10661]  virtio_transport_release+0x633/0x7e0
[  162.345153][T10661]  __vsock_release+0x9f/0x520
[  162.346718][T10661]  __vsock_release+0x376/0x520
[  162.348321][T10661]  vsock_release+0x99/0x100
[  162.349792][T10661]  sock_close+0xc3/0x240
[  162.351157][T10661]  __fput+0x44c/0xa70
[  162.352503][T10661]  task_work_run+0x1d4/0x260
[  162.354143][T10661]  exit_to_user_mode_loop+0xec/0x110
[  162.356122][T10661]  do_syscall_64+0x2bd/0x3b0
[  162.357813][T10661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.359883][T10661] 
[  162.360814][T10661] Memory state around the buggy address:
[  162.362765][T10661]  ffff88803589ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  162.365577][T10661]  ffff8880358a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.368626][T10661] >ffff8880358a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.371931][T10661]                                ^
[  162.374163][T10661]  ffff8880358a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.377602][T10661]  ffff8880358a0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.380983][T10661] ==================================================================
[  162.384734][T10661] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  162.388048][T10661] CPU: 0 UID: 0 PID: 10661 Comm: khidpd_16bf5505 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  162.393349][T10661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.397382][T10661] Call Trace:
[  162.398825][T10661]  <TASK>
[  162.400214][T10661]  dump_stack_lvl+0x99/0x250
[  162.402180][T10661]  ? __asan_memcpy+0x40/0x70
[  162.404070][T10661]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.405920][T10661]  ? __pfx__printk+0x10/0x10
[  162.407414][T10661]  panic+0x2db/0x790
[  162.408670][T10661]  ? __pfx_panic+0x10/0x10
[  162.410288][T10661]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  162.412409][T10661]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.414300][T10661]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.416541][T10661]  ? print_memory_metadata+0x314/0x400
[  162.418610][T10661]  ? __mutex_lock+0x738/0xe80
[  162.420327][T10661]  check_panic_on_warn+0x89/0xb0
[  162.422092][T10661]  ? __mutex_lock+0x738/0xe80
[  162.423662][T10661]  end_report+0x78/0x160
[  162.425076][T10661]  kasan_report+0x129/0x150
[  162.426595][T10661]  ? __mutex_lock+0x738/0xe80
[  162.428159][T10661]  __mutex_lock+0x738/0xe80
[  162.429769][T10661]  ? __mutex_lock+0x51b/0xe80
[  162.431693][T10661]  ? l2cap_unregister_user+0x6a/0x1b0
[  162.433938][T10661]  ? __pfx___mutex_lock+0x10/0x10
[  162.435675][T10661]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.437713][T10661]  l2cap_unregister_user+0x6a/0x1b0
[  162.439365][T10661]  hidp_session_thread+0x3c9/0x410
[  162.441063][T10661]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.442891][T10661]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.445055][T10661]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.447306][T10661]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.449424][T10661]  ? __kthread_parkme+0x7b/0x200
[  162.451088][T10661]  ? __kthread_parkme+0x1a1/0x200
[  162.452777][T10661]  kthread+0x711/0x8a0
[  162.454164][T10661]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.456138][T10661]  ? __pfx_kthread+0x10/0x10
[  162.457839][T10661]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.459752][T10661]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.461501][T10661]  ? __pfx_kthread+0x10/0x10
[  162.463018][T10661]  ret_from_fork+0x3fc/0x770
[  162.464617][T10661]  ? __pfx_ret_from_fork+0x10/0x10
[  162.466335][T10661]  ? __switch_to_asm+0x39/0x70
[  162.467997][T10661]  ? __switch_to_asm+0x33/0x70
[  162.469833][T10661]  ? __pfx_kthread+0x10/0x10
[  162.471734][T10661]  ret_from_fork_asm+0x1a/0x30
[  162.473410][T10661]  </TASK>
[  162.475141][T10661] Kernel Offset: disabled
[  162.476607][T10661] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:29:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900037df370
R8 =ffff888108420237 R9 =1ffff11021084046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4900 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f37337f5fc8 CR3=0000000028e6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000135 0000000034313a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff000000ff XMM09=313030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=e5ab230c2a28df00 RDX=ffffc9000255fa01
RSI=ffffffff8be28d20 RDI=ffffffff8be28ce0 RBP=dffffc0000000000 RSP=ffffc9000255f870
R8 =ffffc9000255fdb0 R9 =0000000000000000 R10=ffffc9000255fa18 R11=fffff520004abf45
R12=ffffc9000255fdc0 R13=ffffffff81728af5 R14=ffffffff8e13ee60 R15=ffffffff81728af5
RIP=ffffffff81a71337 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f846a2b3c80 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3735974980 CR3=0000000028e6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000135 0000000034313a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff000000ff XMM09=313030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
