last executing test programs:

1m5.021798547s ago: executing program 0 (id=1043):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x5, &(0x7f00000000c0)=@framed={{}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfec, &(0x7f0000002e00)=""/4076, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000004400018006000340000000000c00028005003001000000002c0001801400030020010000000000000000000000000001140004"], 0x58}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x5, &(0x7f00000000c0)=@framed={{}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfec, &(0x7f0000002e00)=""/4076, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000004400018006000340000000000c00028005003001000000002c0001801400030020010000000000000000000000000001140004"], 0x58}}, 0x0) (async)

1m4.795920481s ago: executing program 0 (id=1046):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xc001}, 0x40)

1m4.577436069s ago: executing program 0 (id=1048):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0680, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'hsr0\x00', 0x400})

1m4.41611725s ago: executing program 0 (id=1051):
r0 = socket$netlink(0x10, 0x3, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a0002", 0x43)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
close(0x3)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="16000000127daf4d64f0c38eebdc8c53f300"/27, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000059c8317c000000", @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000009ce6a63c6e368a94e6a976a27d8ed0363dc4fc563d53c2afa6a68dd2cf6cae0a3ad1f0a2bf35a33990bed44701a8a4f8cbb6b01478efd08b7f79b9f183fddae58406c2c4044670e624680d95f65a03f4aa160f17c83a438282a62d5e6629805626a2bf6f0085efa911101e574ccdb4083ab34d1f8c3771432ff6ae23d6d61aaf8272"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRES64=0x0, @ANYRES8], 0xa0}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x80800)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={<r11=>0x0}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r11, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)='skcipher\x00'}, 0x30)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x47fab000)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x350, 0x350, 0x350, 0x0, 0x350, 0x448, 0x448, 0x350, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x70}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x3}, {0x0, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_qfg]}, 0x3b}, 0x1, 0x0, 0x0, 0x8}, 0x3000c01e)

1m3.872910721s ago: executing program 0 (id=1057):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x1f, 0x8a, 0x61}, 0x2c)
socket(0x1d, 0x2, 0x6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
listen(r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="af320000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
r4 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001680)=@newtaction={0x33d8, 0x30, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{0x325c, 0x1, [@m_ct={0x148, 0x1b, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xb140, 0xa, 0x10000000, 0x10000, 0x6}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "645cbb62b82be1ad8537c1d65843b7c8"}, @TCA_CT_ACTION={0x6, 0x3, 0x2a}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0xbd, 0x6, "92df82eaf047249cac59e8c9c567a86d5fb71deb5714b2f5d394b7a5a1384e4c8b2b796475635f5176db772a6721b02b32e114ead5fb2fb6eb95ec78fc3735f7aaa207ddf7c93594297092351776396d0284220b8d892a610715cd26a3d63c22bbbdddbc13df9e0cbfa69557eed679669da5cf0410a0123f8b572f2d815a38f6324547ad1af5c64e65c46d141ff97b3924b22f68be3a1e5ec8fab365d53cc5bf34fecca55ed1ff1def12631b36fd8a4e80b0e7c7cb8118b986"}, {0xc, 0x7, {0xa050a2515c75b907, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x2e68, 0x19, 0x0, 0x0, {{0xb}, {0x2dfc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x6f, 0x10000, 0x10, 0x180000, 0x4, 0x7, 0x1, 0x7, 0x5, 0x401, 0x6, 0x101, 0x4540, 0x2, 0xe, 0x2, 0x9, 0x19, 0x1, 0x4, 0x7fff, 0x0, 0x5, 0x6, 0x9, 0x6, 0x6, 0x40, 0x1ff, 0x7, 0x6, 0x1, 0xfff, 0x8, 0x6, 0x5da, 0x7, 0x1ff, 0xf4, 0x40, 0x2, 0x800, 0x1, 0x10, 0x2, 0x2b, 0x0, 0x9, 0x6, 0x8, 0x0, 0x2, 0x7, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x1, 0x9, 0xf6, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, 0x8001, 0x2, 0x4, 0x1, 0x2, 0x2, 0x8, 0xffff, 0x7fffffff, 0x0, 0x5, 0x0, 0x8001, 0x3, 0x698e, 0xa154, 0x6, 0x0, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x5, 0x10000, 0x7, 0xffffffff, 0x40, 0x1ff, 0xc, 0x7, 0x1, 0x2f88, 0x8, 0xfffffffc, 0xba, 0x800, 0xffffffff, 0x8, 0x5, 0x1, 0x7, 0x2, 0x9, 0x8, 0x3, 0x6, 0x10000, 0x9, 0x2, 0xe, 0x8, 0x10001, 0x9, 0xe69a, 0x4, 0x0, 0x6, 0x4, 0x4, 0x4, 0x57, 0x1, 0x4, 0x400, 0x8, 0x80, 0x7f, 0x6, 0x3, 0x401, 0xf9, 0x59, 0x6b0, 0x9, 0x6, 0x3, 0x401, 0x9, 0x0, 0x5, 0x9, 0x9, 0x3, 0x618, 0x6, 0xc, 0x5, 0x46e, 0xfffffff3, 0xcf1d, 0x0, 0x4, 0x401, 0xffffffff, 0x6, 0x100, 0x101, 0x6, 0x7, 0x0, 0x1, 0x7, 0x7, 0x2, 0xc, 0x9f84, 0x0, 0x7, 0xe000000, 0x5, 0x527, 0x2, 0xed, 0x6, 0x10, 0x0, 0x80000001, 0x9, 0xffffffd0, 0x8001, 0x6b6, 0x1, 0x5, 0x5, 0x6, 0x1, 0x80000001, 0x6, 0x1, 0x1, 0x0, 0x5, 0xd, 0x8, 0x5, 0x5, 0x2, 0x2, 0x9, 0xfffffffe, 0x6, 0x1, 0x3, 0x1, 0xff, 0xfc5, 0xf, 0x4, 0xdc, 0x9, 0x5, 0xa, 0x2815fe11, 0x2, 0x1, 0xfff, 0x0, 0x1, 0x4, 0xa, 0x3, 0x7, 0x2, 0x7, 0xffffffff, 0x3, 0x0, 0x953, 0x2, 0x7, 0x9, 0x31, 0xd3, 0xfffffffa, 0x6, 0xbd, 0x5, 0x6, 0xfffffff7, 0x9, 0x8, 0x101, 0x7, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x3ff, 0x9c, 0x0, 0x1, 0x3, 0xfffffffe, 0x7, 0x9cc7, 0x2, 0x6, 0x212f76ce, 0x10000, 0x80, 0x400, 0x2, 0x0, 0x8, 0x7f, 0x20000, 0x7, 0x1, 0xb85, 0x6, 0x8, 0xeef, 0x3, 0xfffff001, 0xe1aa, 0x5, 0x362af5ff, 0x3ff, 0x3, 0x5, 0x4, 0x7, 0x7, 0x5, 0x7, 0x8000, 0x6, 0x5, 0x2b, 0xe, 0xfffffff7, 0x5, 0x1fd, 0x0, 0xc6c, 0x3, 0xffffff29, 0x6, 0x7fab, 0x9, 0x2, 0x1bab, 0xf4b, 0x63, 0x6, 0x4, 0x64, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, 0x9, 0x401, 0xfffffffc, 0xe, 0x7, 0xfffffffa, 0x5, 0x10000, 0xfffffffc, 0xdfc, 0x9, 0x6, 0xfffffffb, 0x6, 0x7c8b, 0x1, 0x0, 0x1, 0x7, 0x8, 0x1, 0xf, 0x8, 0x7, 0x2, 0xd, 0x10, 0xff, 0x0, 0xd, 0xd, 0xc53, 0x6, 0x0, 0x6, 0x2, 0x3, 0x6, 0xb, 0xff, 0xffff, 0x8, 0x6, 0x7fff, 0x6, 0x8, 0x8000, 0x7ff, 0x2, 0x8f, 0x9, 0x8, 0xffff, 0x80, 0x4, 0x1, 0xfffffff7, 0x2, 0xc, 0xe, 0x4, 0x6, 0x0, 0xffff, 0x2, 0x1, 0x40, 0x400, 0x40f, 0x509, 0x5bd, 0x1, 0x8, 0xb9d, 0x7, 0x5, 0xfffffffc, 0xb06, 0x0, 0x4, 0x3, 0x9, 0xf0a, 0x2, 0x7, 0xf, 0x4, 0x2, 0x5, 0x54, 0x80, 0xf9, 0x87c, 0x5, 0x6, 0x8, 0x9c, 0x6, 0x200, 0x400, 0x7, 0x4, 0x81, 0x4, 0x3, 0x7fffffff, 0x8, 0x5, 0x9, 0x7, 0x7ff, 0x3, 0x2, 0xa, 0x1, 0x8, 0x9, 0x3, 0xf, 0x5, 0x5, 0x2f9e, 0x7, 0x57, 0x3, 0x7, 0x2, 0x5, 0x47ff, 0x10000, 0x0, 0x0, 0x1, 0xdbf, 0x8, 0xee4e, 0x1c00, 0x1, 0x8, 0x6, 0x3, 0xff, 0xf, 0xd3, 0x200, 0x7fffffff, 0x1, 0x61, 0x9, 0x7, 0x9, 0x3, 0x7, 0x6, 0xe7, 0x1, 0x3, 0x4, 0x100, 0x200, 0x3, 0x3, 0x3fc9, 0x7, 0x6, 0x5ce4, 0xc46, 0x0, 0x8, 0x3, 0xb, 0xf54, 0x7, 0x40, 0x2, 0xa, 0x7ff, 0x9, 0xe, 0x8, 0x7fffffff, 0x4, 0xd69, 0x3, 0x1dae, 0x2, 0x5, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7ff, 0x7fffffff, 0x4, 0xfff, 0x53, 0x0, 0x2, 0xf, 0x3ff, 0xabdd, 0x1d8bbcdd, 0x5, 0x80, 0x4000, 0x40, 0xfffffffc, 0x80000001, 0xa, 0x5, 0xec2b, 0x5, 0xa8, 0x2, 0x20, 0x7, 0x9, 0x2, 0x8, 0xa8f2, 0x1, 0x9, 0x0, 0x80, 0x80000000, 0x7, 0x1, 0xed1, 0x4, 0x8, 0x1, 0x8, 0x8a, 0x77a, 0x2, 0x4, 0x3e1f, 0x2, 0x5, 0x0, 0xc79, 0x2, 0x36a7f74a, 0x5, 0x3, 0x2, 0x80000001, 0x5, 0x9, 0x401, 0x0, 0xa5e, 0x400, 0x8, 0x5, 0x1, 0x4, 0x8, 0x2, 0x70, 0x0, 0x9, 0x9, 0xb, 0x2, 0xffffff18, 0x7fffffff, 0xf, 0x8, 0x9, 0x9e, 0x9, 0x0, 0x3ff, 0xb, 0x80000000, 0x1, 0x9416, 0x8, 0x5, 0x2, 0x9, 0x6, 0x4, 0x0, 0x8000, 0xb6, 0x400, 0x0, 0x9, 0xa3, 0x8, 0x1, 0x1, 0x9, 0x1, 0x5, 0x4, 0x95a6, 0x3, 0x401, 0x9, 0x800, 0x12, 0x0, 0x3, 0x0, 0x0, 0x6, 0x6, 0x1000, 0x7, 0xf, 0x9, 0x5, 0x4, 0x9d1, 0x9, 0x3, 0xfcf0, 0x80000000, 0x1, 0x10001, 0xa, 0x7f, 0x10, 0x0, 0x1000, 0x6, 0xf13, 0xffffff00, 0xe00000, 0x45d0, 0x6, 0x6c2eafb8, 0x4, 0x0, 0xf, 0x9, 0x5, 0x5, 0x2, 0xf, 0x100, 0x5, 0x5, 0x4, 0xfffffc01, 0x7, 0x3, 0xb2, 0x8, 0x0, 0x5, 0x3, 0x357, 0x6, 0x3, 0x6, 0x4, 0x1, 0x5, 0xd, 0x0, 0x83, 0x1f64dadf, 0xc0000, 0x9, 0x111a97a6, 0x6, 0x10, 0x7, 0x80000000, 0x3ff, 0x7fff, 0xffff, 0x7, 0xf, 0x2, 0x58b, 0x10001, 0x0, 0x10, 0x0, 0x1, 0x1, 0x8000, 0x8, 0x1, 0x1, 0x800, 0x7fffffff, 0xffff, 0x0, 0x1, 0x9, 0x9, 0x100, 0xff, 0x8, 0x3, 0x4, 0x4, 0x5, 0xe, 0xc, 0x80000001, 0x8001, 0x7fffffff, 0x1, 0x1, 0x29, 0x6, 0xfffffff7, 0x6, 0x4, 0x101, 0x401, 0x6, 0xe, 0x10000, 0x6, 0x5, 0x81, 0xffff, 0x5, 0x6, 0xc, 0x5, 0x3, 0xfe6, 0x4, 0x7fffffff, 0xffff, 0x0, 0x7, 0x5, 0x6, 0x10000, 0xc8e8, 0x1, 0x400, 0x6, 0x30, 0xbe, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x5, 0xa35, 0x6e6c, {0x10, 0x0, 0x9, 0xd8de, 0x6, 0x8}, {0x2b, 0x3, 0x0, 0x5, 0x8, 0x6}, 0x91, 0x7, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xb0, 0x1, 0x7d, 0x4, 0x0, 0x2, 0x4, 0x5, 0x10, 0x9, 0xa431, 0xd, 0x3, 0xfffffe01, 0x6, 0x2, 0x850, 0x5, 0x9, 0x3, 0x1, 0x2, 0x9, 0x2, 0x4, 0x3, 0x3, 0x9, 0x3, 0x7c, 0xfdcb368, 0x7, 0xf, 0x18a, 0xa, 0x64389dda, 0x5, 0x1, 0x3, 0x8, 0x3, 0x9, 0x76, 0x2, 0x0, 0x200, 0x3, 0x9, 0x5, 0x6, 0xab8e, 0x4, 0x9, 0x9, 0x5, 0xffff, 0x2, 0x20, 0xa, 0x7, 0x9, 0x200, 0x5, 0x401, 0x8, 0xfff, 0x8, 0xfffffffc, 0x5, 0x6, 0x4, 0x10000, 0x3ff, 0x800, 0x0, 0x800, 0x2, 0x2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x8, 0x5bea, 0x2, 0x6, 0x2, 0x4, 0x9, 0x9, 0x5, 0xf, 0x3, 0x9, 0x9, 0x0, 0xe2, 0x4, 0xd0, 0x2, 0x31, 0x6, 0x1, 0x9, 0x9, 0x8, 0x4, 0x3, 0xeca, 0x2, 0x101, 0x780d27be, 0x6, 0xab, 0x783, 0x0, 0x3, 0x4, 0x10001, 0x7fffffff, 0xb07d, 0x94, 0x1, 0xffffff01, 0xee8, 0x8, 0xa, 0x1, 0x2, 0x800000, 0x5, 0x4, 0xf, 0xffff, 0x3, 0x1, 0xd796, 0x9, 0x1, 0xfffffffd, 0x5, 0x7, 0x80000001, 0x78, 0x0, 0x0, 0x451a, 0x1, 0x7, 0x9, 0xa, 0xae27, 0x5554, 0x8c, 0xb, 0x8, 0x2, 0x7fff, 0x6, 0x5, 0x1, 0x3, 0x40, 0x81, 0x2, 0x2, 0x3ff, 0xfff, 0xc, 0x10001, 0x1, 0x6b29, 0x3, 0x3ff, 0x3000000, 0x9, 0x2, 0x3, 0xff, 0x3, 0xfffffff8, 0x2, 0x0, 0x81, 0x224, 0xf9e8000, 0x3, 0xfe7a, 0xaa55, 0x9, 0x955, 0x15, 0x65, 0x0, 0x0, 0x8, 0x9, 0x8000, 0x101, 0x0, 0x1ff, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x3, 0xfffffffa, 0x22f, 0x9, 0x5, 0x100, 0x1, 0x8000, 0x7ff, 0xffffffff, 0x7, 0x5, 0xc25, 0xc4a, 0x3ff, 0x7, 0x3, 0x29, 0x1, 0x44e, 0x4, 0xaaa, 0x9, 0x9, 0x4, 0xefb, 0x3bb, 0xfffffffb, 0x2, 0xd4, 0x8d, 0x8, 0x7, 0x6e, 0x6, 0x444, 0x101, 0x40, 0x3, 0x6401, 0x5, 0x1ff, 0x82e, 0xffff, 0x4, 0x5, 0x5, 0x930]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0x100, 0x9, 0x8, 0x9, 0x5, 0x3, 0x9, 0x6, 0x1, 0x4, 0x401, 0x8, 0x101, 0x6, 0xd, 0xf, 0x4, 0xb, 0x1, 0x5, 0x4, 0x0, 0xb, 0xdec, 0x7, 0x4, 0x1, 0x4, 0x5, 0x4, 0x7, 0x1, 0x969f, 0x4, 0x8, 0x1, 0x5, 0x10001, 0x22c0, 0x9, 0x9, 0x8, 0xa571, 0x42e, 0x3, 0x6f, 0x5, 0x7, 0x10001, 0x80, 0x1, 0x2, 0x8, 0x4ffdd23, 0x7fff, 0xff, 0x7fff, 0x401, 0x80000000, 0xcd91, 0x1, 0x2, 0x3, 0x80000000, 0x3, 0xa8, 0x9, 0xd8, 0xaa, 0x6, 0x3, 0x20, 0x7, 0xeee, 0x1000, 0x8, 0x10, 0x7ff, 0x74af, 0xd, 0x5, 0x9, 0x3bf, 0x5, 0x5, 0x1, 0x2, 0x464b8feb, 0x8, 0xfffff23c, 0x7fffffff, 0x2, 0x1, 0x3, 0x3, 0x5, 0x0, 0x4e, 0x7, 0x3, 0x8, 0x7e68, 0x9, 0x4, 0xfffffffe, 0x40, 0x7, 0x1, 0x20000, 0x1, 0xa, 0xb, 0x8, 0x8, 0x5c, 0x10000, 0x9, 0x1, 0xfa85, 0x3, 0x0, 0x8, 0x8, 0x8, 0x9, 0x4, 0x9, 0x5, 0x3, 0x4, 0x3, 0x1, 0x72e39a1b, 0x8, 0x7, 0x271, 0x5, 0x8, 0x6, 0x7f, 0x0, 0x0, 0x72, 0x10000000, 0x607b, 0xf, 0x80000001, 0x5, 0x94ea, 0x10, 0xf, 0x5411, 0x2, 0x7, 0x5, 0x62d, 0x60, 0x7, 0x7be, 0x5, 0x3, 0x2a, 0xb34a, 0x81, 0x6, 0x6, 0xfffffffa, 0x81, 0x2, 0x9, 0x9, 0x9, 0x8, 0x7f, 0xa, 0x101, 0xbab, 0x1000, 0xfffffffe, 0x0, 0x9, 0x8, 0x2, 0x4, 0x2, 0x7, 0x40, 0x0, 0x6, 0x9, 0x2, 0x7, 0x100, 0x7, 0x6, 0x9, 0xfffffffe, 0xff, 0x3, 0x8, 0x1, 0x0, 0x1, 0x5, 0x4, 0x4, 0x7, 0x6, 0x6, 0x75a0, 0x4, 0xfffffff6, 0x9, 0x4, 0x8, 0xf, 0x7c20, 0x6, 0x7, 0x7, 0x7, 0x9, 0x0, 0x7ff, 0xa1, 0x0, 0x2, 0x10, 0x1000, 0x9, 0x0, 0xfff, 0x8, 0x5ed, 0x0, 0x9, 0xa9c, 0x2, 0x6, 0x6, 0xffffffff, 0x8000000, 0x2000, 0x200, 0x6, 0x5, 0x0, 0xb, 0x5, 0xff, 0x7fff, 0x6f0, 0x2, 0x40]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x5, 0x81, 0x9, 0x8001, 0x9, 0x8a, 0x200, 0xbc80, 0xaa4a, 0x80000000, 0x401, 0x6, 0x2, 0x3, 0x5, 0x1ff, 0x9b, 0x8000, 0x9, 0x200, 0x1, 0x5, 0x209e, 0x4, 0xf4, 0x0, 0x4, 0x3, 0x1, 0x1, 0x5b9f, 0xfff, 0x7, 0x8, 0xfffffff0, 0x1, 0x0, 0x9, 0x1, 0x10, 0x3, 0x744b0daa, 0x6, 0x4, 0x3, 0x6, 0x0, 0x1, 0x8, 0x4, 0x401, 0x0, 0x8, 0x3, 0x4, 0x9, 0xd, 0x6, 0x2, 0x1, 0x4, 0x5, 0xffffffff, 0x6, 0xbc3, 0xfffffff8, 0xf514, 0xdb, 0xffffffff, 0xffff, 0xc, 0xfffffff9, 0x0, 0x32, 0x7, 0x0, 0x8, 0xffff0000, 0x7, 0x1c, 0x5, 0xd, 0x5f7b, 0x0, 0x8, 0x7, 0x7ff, 0x2, 0x268, 0xe0000000, 0xc, 0x7, 0x3, 0x9, 0x7b2, 0x2, 0x9, 0x5, 0x800, 0x1, 0x7fff, 0x0, 0x400, 0x10000, 0x3ff, 0x6e21, 0x9, 0x5, 0x2, 0xf3b8, 0x5, 0x863, 0x0, 0x19, 0xc, 0x0, 0x4ee3, 0x7, 0x3ff, 0x1, 0x1000, 0x8000, 0x3, 0x80000001, 0x3, 0x7, 0x261e, 0xf, 0x3, 0x101, 0x6, 0x5, 0x3fc8, 0x2, 0x2, 0x1, 0x3, 0x7, 0x4, 0x5, 0xc, 0x32, 0x0, 0xf703, 0x10000, 0x27, 0x80, 0xdcd0, 0x9, 0x3, 0x0, 0x5, 0x9, 0x2, 0x6, 0x81, 0x3, 0x7fffffff, 0x3, 0x3, 0xfffffffd, 0xd65, 0x0, 0x7, 0x400, 0xb823, 0x7, 0x8000, 0x9, 0x6, 0x7, 0x2, 0x400004, 0x3, 0x1, 0x0, 0x48, 0x1, 0xdf79, 0xfffffffd, 0x1, 0x1000, 0x4, 0x3, 0x4, 0x5, 0x2, 0x2, 0x8, 0x9d, 0x709, 0xffffff7f, 0xfffffff8, 0xe, 0xf88, 0xfffffffc, 0x8, 0x0, 0x6, 0x400, 0x6, 0x8, 0xffff, 0x0, 0x5, 0x8, 0x6, 0x1000, 0x7, 0x81, 0x0, 0x6, 0x0, 0x6, 0x8, 0xe, 0x7, 0x4, 0x1, 0xffffffff, 0x9, 0xa3d0, 0x3, 0x1, 0x9, 0x87, 0x401e, 0x9, 0x9bd, 0x7, 0x4, 0x3, 0x6, 0x3, 0x9, 0xcff, 0x3, 0x4, 0x4, 0x68af, 0x520c, 0x1, 0x8, 0x2, 0x7, 0x40, 0x2, 0xfffffffa, 0x5, 0x9, 0xcac1, 0xb, 0x6261911e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe2e3}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x9, 0x40f5d31c, 0xffff8000, 0x8, 0x0, 0xdb0, 0x6, 0x0, 0x8001, 0xfffffffa, 0x2, 0x397d, 0x2, 0x94, 0x3, 0x0, 0xfffffffc, 0x5, 0x1, 0xe, 0x7, 0x10, 0x800, 0x4, 0x1, 0x2, 0x9, 0x9, 0x588, 0x87, 0x5dec693, 0x3, 0x2, 0x8, 0x6, 0x7, 0x3ff, 0x9, 0xd1a, 0x96, 0x1, 0x8, 0x2, 0x4, 0x2418, 0x9, 0x1, 0x0, 0xfee, 0xfffffff9, 0x2, 0x2, 0xd, 0x6b9, 0x1, 0x6959, 0x9, 0xe7, 0x8000, 0x8000, 0x6, 0x7, 0x2, 0x4, 0x2, 0x7, 0x5, 0x5, 0xe, 0x3, 0x76f3, 0x3, 0x3, 0x2, 0x7, 0x8, 0x7, 0x4, 0xc7, 0x0, 0x300, 0x59d843d, 0xfffffffe, 0xd, 0x7f, 0xaf55, 0x957a, 0x8, 0x100, 0x2, 0xf0, 0x7df, 0x6, 0x6, 0xb, 0x5, 0x9, 0x5, 0x7ff, 0x66, 0x0, 0x5, 0x4, 0x9, 0x6, 0x4, 0x6, 0x3f, 0x5d, 0x8, 0x7fffffff, 0x6, 0x5, 0x6, 0xd0b8, 0xffffffed, 0xa1f6, 0x8, 0x2, 0x7, 0x2, 0x5, 0x2394, 0x8, 0xfffffffb, 0x10001, 0x4, 0xa, 0x4, 0x3, 0x1, 0x9, 0x3, 0x5, 0x0, 0x3, 0x5, 0x0, 0x4, 0x3, 0x7, 0x4, 0x852, 0x3, 0x5, 0x7fff, 0x8, 0x5, 0x10001, 0x8, 0x3, 0x2, 0x401, 0x3, 0x8, 0xfff, 0x1, 0x2, 0x100, 0x3, 0x5, 0x7, 0x81, 0x401, 0x7ff, 0x0, 0xffff0001, 0x800, 0x800, 0x4, 0x6, 0x9, 0x8, 0x1, 0xd, 0xbb, 0x1, 0x8, 0x2d19f5d9, 0xf, 0x0, 0x7, 0x0, 0x7, 0x80000000, 0x2, 0x7fffffff, 0x2, 0x7, 0x4, 0xfffffffe, 0x5, 0x0, 0xfffffff8, 0x5, 0x40aa, 0x88, 0x346d, 0xf028, 0x0, 0x1ff, 0x5, 0x3, 0xd5dd, 0x1, 0x2, 0x9, 0x3, 0x9, 0x80000, 0x7, 0xb, 0x5, 0x4, 0x80000001, 0x9, 0x4, 0x2, 0x800, 0x3, 0x0, 0x7, 0x5, 0xe, 0x80000001, 0x0, 0x9, 0x7, 0xe394, 0x6, 0xfffffff0, 0x1, 0x0, 0x101, 0xd932, 0x5, 0x7, 0x10, 0x1, 0x4, 0x800, 0x4, 0x3f8e, 0x1, 0x5, 0x1, 0x3, 0x6, 0xd2, 0x101, 0x7, 0x29, 0x1000, 0x4, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xb9a4, 0x4, 0x1ff, 0x200, 0xffffff00, 0x5, 0x26b6, 0x2, 0x2, 0x2, 0x6, 0x0, 0x7, 0x7, 0xd, 0x0, 0xa8, 0x8, 0x13, 0x6, 0x6d1, 0x7, 0x5, 0x8, 0xffff, 0x400, 0x9e5a, 0x7, 0x3, 0x5, 0x200, 0x0, 0xf, 0x1, 0x3, 0x2, 0x2, 0x800, 0x9, 0x4, 0x80, 0x1, 0x6, 0x7ff, 0x2, 0x7f, 0xa5, 0x2, 0x3, 0x81, 0x8, 0x4000, 0x2, 0x4, 0x8000, 0xa, 0x8, 0x7, 0x2, 0x9, 0x7, 0x8b, 0x3, 0x712, 0x8, 0xdb79, 0x6, 0x10, 0x3, 0x80, 0x1, 0x2, 0x37a, 0x8, 0xe0000, 0x0, 0x7a6a, 0x2, 0x4, 0x4, 0xe7, 0x1, 0x101, 0x7, 0x7, 0x7, 0x7, 0x5, 0x2, 0x0, 0xee4, 0xcab, 0x9, 0x40, 0x3, 0x4, 0x8, 0x8, 0x4c, 0x0, 0x468e, 0x9, 0x2, 0x4, 0x7464, 0x8, 0x6, 0x1, 0x8, 0x9, 0x101, 0x4, 0x8001, 0x4, 0x709, 0x17, 0x6, 0x0, 0x2, 0x7, 0x6, 0x7f, 0x1, 0x3b2, 0x1, 0x7fff, 0x8, 0x101, 0x7, 0x2, 0x11, 0x0, 0x36e, 0x9, 0x0, 0x7, 0x80, 0xfcc, 0x8, 0x9, 0x4c3, 0x9, 0x5, 0xfffffffa, 0x96, 0xd5, 0x5, 0x5523711b, 0x21, 0x1daa, 0x4d, 0xb, 0xa, 0xfffffff7, 0xcee3, 0x6, 0x3, 0x3, 0xe, 0x5, 0xa, 0x0, 0x7fffffff, 0x4, 0x2, 0xffffffff, 0x1, 0x8, 0x0, 0x1, 0xb, 0x8000, 0x14bce54, 0x9f7, 0xffff, 0x7ff, 0x24000, 0x9, 0x6, 0x2, 0x2, 0x4, 0xff, 0x7fff, 0x8000, 0x10001, 0x7bd, 0x8, 0x9, 0x6, 0x5, 0x200, 0x3, 0x2, 0x5, 0x3, 0x3, 0xe, 0x101, 0x0, 0x5, 0x7, 0xfffeffff, 0x10004, 0x5ad, 0x600000, 0x4, 0xffff, 0x9, 0x7f, 0x4, 0xffff, 0x52, 0x8001, 0x2, 0x9, 0x4, 0x2, 0x1, 0x4, 0xfffffff9, 0x8, 0x80000000, 0x1, 0x7, 0x1a0c19b2, 0x6a, 0x4, 0x1, 0x65c, 0x86, 0xfffffffa, 0x81, 0x8, 0x7, 0xd8af, 0x1000, 0x1, 0x3, 0xbe, 0x100, 0x1, 0x6, 0x5, 0xbf5, 0x6, 0x122, 0x401, 0x10001, 0x10, 0x9, 0x5, 0x8000, 0x7, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x1, 0xddb, 0xffff0000, 0x1ff, 0x8, 0x5, 0x200, 0x3, 0x1000, 0x0, 0x4, 0x3, 0x0, 0x8f74, 0x8, 0x3, 0xd03, 0xff, 0x7, 0x7, 0x1, 0x3, 0x100, 0x4, 0x3, 0xfffffff9, 0x1, 0x3, 0x0, 0x6, 0x32fdc0, 0x7, 0xf531, 0xba3d, 0xfa, 0x6, 0x7, 0x3e8, 0x1, 0x1, 0x600000, 0x3, 0x1, 0x0, 0x5, 0x7fffffff, 0x3, 0x4, 0x5, 0x3, 0x7f, 0x4, 0x83d7, 0x2b, 0x800, 0x3, 0xffffef1f, 0x8, 0x1, 0xfffffffb, 0x9, 0x2, 0xffff909a, 0x3, 0x5, 0x84, 0xdd, 0x3, 0x4, 0xfff, 0x1, 0x8, 0x0, 0xc, 0xffffffff, 0xf, 0x3, 0x9, 0x1c7, 0x6, 0xffffffff, 0xff, 0x6, 0x1, 0x6, 0x81, 0x7, 0x8, 0x4, 0x3ffbeb4e, 0xb51, 0x100, 0x3, 0xa, 0xb9f2, 0x401, 0x5, 0x4, 0xfffffff7, 0x5, 0x5, 0xf, 0x3, 0x200, 0x84, 0x6, 0x10001, 0x7, 0xfffffffd, 0xcb53, 0x3, 0x4, 0x5, 0xcb, 0x9, 0xfeba, 0x40000, 0x6, 0x1, 0x0, 0x7ff, 0x7, 0x7fffffff, 0x9, 0x200, 0x4, 0x6, 0x10, 0xff, 0x3, 0x8, 0x101, 0x4081, 0x1, 0x3ff, 0x1, 0x1ff, 0x7ff, 0x111c, 0x6, 0xfb, 0x6, 0x400, 0x1, 0x80000000, 0x6d2d, 0x9, 0x2, 0x6, 0x5, 0x9, 0xb93a, 0x6, 0x5, 0x3, 0x7, 0x8001, 0x9, 0x3, 0x53, 0x7, 0x8, 0x2, 0x317263ea, 0x6, 0x9, 0x6, 0xfff, 0xfffffffe, 0x3, 0x10000, 0x1, 0x100, 0xfff, 0x0, 0xffffffff, 0x9ed2, 0x9, 0x3, 0x4, 0xfff, 0x800, 0x9, 0x0, 0x48, 0x0, 0x1, 0x9, 0x5, 0x3, 0x7, 0x8, 0x7, 0x6, 0x6, 0x5, 0x1, 0x0, 0xfffffff9, 0x0, 0x2, 0x10, 0x2, 0x3, 0x6, 0x8, 0x800, 0x8, 0x9, 0x8, 0xc9, 0x1, 0x10, 0xac, 0x5, 0x7, 0x7eae, 0x10001, 0xaa5, 0x8ba, 0xc6, 0x4, 0x10000, 0x6, 0x3, 0x10000, 0x3, 0x7, 0x7, 0x4, 0x5e, 0xfffffff8, 0x2, 0x2, 0x100, 0x5, 0x100, 0x5, 0x9, 0x9, 0x6, 0x9, 0x6, 0x3eac, 0x2, 0x5, 0x1, 0x8, 0x5, 0x0, 0x10001, 0x61, 0x6d0a, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x7, 0x0, 0x4, 0x2, {0x7f, 0x0, 0x0, 0x37, 0x0, 0xfffffff9}, {0x50, 0x2, 0x7, 0xe, 0x9, 0x9}, 0x1, 0x7, 0x75}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0xffffffffffffffff, 0x3, 0x9, 0x3, {0x4, 0x0, 0x2, 0x8, 0x0, 0x6}, {0x9, 0x1, 0x6, 0x0, 0x5, 0xffff}, 0xfffffffd, 0x9, 0x2}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x4, 0x1a7, 0x3, 0x9, 0x10000, 0x19bf, 0x8, 0x4, 0x7, 0xfffffff9, 0x8, 0x1, 0xff, 0x1000, 0x1, 0x8, 0xf9, 0x8, 0x200, 0x280, 0x8, 0xdc, 0xb, 0x200, 0x7, 0x9, 0x3b0d, 0x7, 0x3, 0x4, 0x7, 0x121, 0x1, 0x10, 0x2800000, 0x8, 0x2b, 0x6, 0x5, 0x6, 0xb, 0x2, 0x0, 0x0, 0x0, 0xa07, 0x6, 0xc9ec, 0xc269, 0x100, 0x10000, 0x7, 0x7, 0x9, 0x9, 0x8, 0x8, 0xfffffffa, 0xec, 0x10001, 0xd0, 0x80000081, 0x8, 0x1, 0x2, 0xd2, 0x7fffffff, 0x7b5fd401, 0x2fc2d19c, 0x2, 0x2, 0x2, 0x0, 0xfffffffc, 0x5, 0xfffff5c1, 0x9d, 0x9, 0x4, 0x2, 0x8355, 0xca78, 0x2, 0x6, 0x3, 0x9, 0xe99, 0x2ab, 0xfffffffa, 0x6, 0x0, 0xfffffffd, 0x4, 0xd, 0x0, 0x1ff, 0x5, 0x1000, 0x2, 0x6, 0x0, 0xae, 0xffffffff, 0x5bd5, 0x89, 0xcd2, 0xc, 0x6, 0xff, 0x2, 0x7, 0x4, 0x7, 0x4, 0x3, 0x62, 0x3, 0x1, 0x7b0e, 0xfffffff7, 0xfffeffff, 0x4, 0x4, 0x2, 0x4, 0x70000, 0x8, 0x8000, 0x7, 0x4, 0x2, 0x1, 0x7, 0x6, 0x2, 0x7a4dc41d, 0x4, 0x80000001, 0x1bc, 0x7, 0xa, 0x6, 0x10, 0x5, 0x50000000, 0xc, 0x4, 0x1, 0x1d, 0x101, 0x2, 0x6c0, 0x5, 0x0, 0xfffffffd, 0xf, 0x9, 0x8, 0x0, 0x0, 0x9, 0x2cc2c00, 0x2, 0x40000000, 0x69f5374d, 0x7, 0x3f1, 0xffffffff, 0x55c2, 0x7fffffff, 0xfffffff8, 0x21b5, 0x6, 0x7, 0x3, 0x9, 0x56, 0x3, 0x800, 0xb, 0x306, 0x1, 0xffffffff, 0xff, 0x75, 0x4, 0x100, 0x4, 0x10000, 0xffffffff, 0x8, 0x0, 0x0, 0x10001, 0x3ff, 0x7673, 0x4, 0x2, 0xa, 0x3, 0x9, 0x1ac5e41f, 0x2, 0x4, 0xfffff6d6, 0x4, 0x7, 0x4, 0xa4, 0x401, 0xff, 0x2, 0x6b, 0x2, 0x0, 0x3, 0x1, 0x2001, 0x1, 0x3, 0xb86, 0x0, 0xd07, 0x7fffffff, 0x9, 0xffffffff, 0x2, 0x10000, 0x81, 0x8, 0xffff, 0x800, 0xe, 0x6, 0x3, 0x9, 0x3, 0x8, 0x5e4, 0x6, 0x4, 0x1, 0x6, 0x20, 0xffffffff, 0x2, 0x8001, 0xdda4, 0xc07, 0xc, 0x9, 0x80000001, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0xd, 0x4, 0x1, 0x0, 0x5, 0xfffff800, 0x9, 0x2, 0x6, 0xe, 0x0, 0x2800, 0x5, 0x9b6, 0x8, 0x8, 0x7fffffff, 0x5, 0x3, 0x0, 0x8d7d, 0xd640, 0xd7, 0x0, 0x1, 0x5, 0x0, 0x6, 0x1, 0xd5, 0x8f69, 0x3, 0x6, 0x8, 0x0, 0x1, 0x3af8, 0xffff0000, 0x71, 0x2, 0xfffffff9, 0x3, 0xd85e, 0x7, 0x6, 0x8, 0x0, 0x200, 0x10000, 0x6, 0x9, 0x36b, 0x3ff, 0x477, 0x7ff, 0x967e, 0x200, 0x7, 0x8, 0x10001, 0x4, 0x2, 0x3, 0x6, 0xbbe4803, 0xfffff001, 0x5, 0x6, 0x2000, 0x4, 0x7, 0xfffffffc, 0x15b4, 0x7, 0x8, 0x9, 0x2, 0x3, 0x0, 0x4, 0x0, 0x8, 0x3, 0x9, 0xd, 0x1, 0x3, 0x7f, 0x100, 0x1, 0x1, 0xc, 0x81, 0x6, 0x6, 0x3, 0xfffffff6, 0x3, 0x101, 0x6, 0x1ff, 0xff, 0xffffff0d, 0xffffffff, 0x8, 0x101, 0x1, 0xcf0, 0x9, 0x9, 0x5, 0x401, 0x0, 0x0, 0x8, 0x6, 0xfffffff8, 0x50000000, 0x2, 0xfe1, 0x10000, 0x2baf, 0x9, 0x848, 0x2, 0x1, 0x225, 0x6, 0x8, 0x7f, 0x40, 0x2, 0x8, 0x2, 0x7fffffff, 0x1, 0x2, 0x4, 0x80000000, 0x8, 0x5, 0x3, 0x3, 0x40000000, 0x7, 0x0, 0xffffffff, 0x5, 0xe2d7, 0x8, 0x9, 0x1, 0x1, 0x4, 0x5e0, 0x10, 0x2, 0x7, 0x1ff, 0x7fff, 0x2, 0x400, 0x3, 0x575e, 0xf1, 0x0, 0xffffffff, 0x5e58, 0x5, 0x9748, 0x10000, 0x3, 0x300, 0x2, 0x0, 0x7ff, 0x7f, 0x0, 0x401, 0x5, 0x5, 0x3, 0x4, 0x7fff, 0x4, 0xfffffff8, 0x40, 0xff, 0x4, 0x8c8, 0xceb, 0x8, 0x3, 0x5, 0x9, 0x6bd, 0x0, 0x10001, 0xc, 0x7a, 0x5d, 0x4, 0x7, 0x6, 0x5, 0x10000000, 0x1, 0x0, 0x5, 0xd977, 0x5, 0x9, 0x10, 0x3, 0x1000, 0x8, 0x1000, 0x81, 0x21bdddf4, 0x3, 0x0, 0x6, 0x3d4, 0x8, 0x8, 0x6, 0x8, 0x6, 0xffffffff, 0xa8d, 0xa11, 0x10001, 0x6, 0x5a5, 0x5, 0x9, 0xd4, 0x3, 0x72, 0x6, 0x1, 0x1, 0x1ff, 0x10, 0x7e2928cf, 0xffff, 0xc, 0x10001, 0x7, 0x2, 0x3, 0x7, 0x8001, 0x800, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff2, 0x5, 0xb, 0x5, 0xfffffffa, {0x1, 0x0, 0x0, 0x4, 0x101, 0x5}, {0x6, 0x0, 0x1, 0x2, 0x551}, 0x2, 0x838, 0x1}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x8, 0x6154, 0x8, 0x0, {0xc, 0x0, 0x553e, 0x200, 0x87, 0x4}, {0xb, 0x0, 0x9, 0x23, 0x0, 0x6}, 0x2, 0x200000, 0x200}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0x42, 0x6, "dc95e2f7be64f882f03034cf3e9cd56eadd0f536ccfd96b4f9533544a02a1385b60e8714042fe9463d2f5fe297299358d363726f86f98e7e8448ac50c12c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0xc0, 0xb, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, 'syz0\x00S\xa0\xd6\xb7'}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0xb, 0x877, 0x1}}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xfffff9a7, 0x8, 0x10, 0x10}}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @TCA_DEF_DATA={0x9, 0x3, 'syz0\x00'}, @TCA_DEF_DATA={0x13, 0x3, 'broadcast-link\x00'}]}, {0x6, 0x6, "d832"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_nat={0x120, 0x2, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfe9, 0x9, 0x6, 0x80, 0x401}, @rand_addr=0x64010101, @multicast2, 0x0, 0x1}}]}, {0xce, 0x6, "8aa9288869a6726f6cb2d7ec6e5be2b3d39f80f9ac321c1a4e422ed6f7d16e0b122abdf948a07c773c6b69f2ec90d92a5ee4eca09f4fd597d6677c480d8657c15adcc310b8cd3a959848d18cae334d2f04b56d62cc9eb2268bd763369c16fca1cff767792d6e22f440db5975633dd59b6b82669a6cf5f9733124e1415c23315c7587a0eff22a73bd1412773041b75e54b3d506ad06794ac725ff57b615805871ac8592108f80c8bee0ab90453ff8d94e27a6d7984c60ffcf4bb999de9b71a65b25a3755b9dc00f70d092"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xc8, 0x18, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x89, 0x6, "005b6bc3a2f7781682e198c15bb3852996785a49ae24c6ff8b29426f859a43f2d61e00c0e8bc2a1e855fa79e99c151935af25df6e1c5fff3c0997b8a9e5d17255f0f04bb32786f941d9f2f8acdaf5c7919c10e7e5478b4b9a5bfa5d5da466f41fdba65efb0babf2a83481be311781de1764ce0ea13fe3815c9fcb4c530dc135437a43b1070"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x168, 0x1, [@m_csum={0x164, 0x9, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffff5, 0x10000000, 0x1, 0xb7}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x3, 0x9, 0x7ff}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x8, 0x332, 0x7}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x3, 0xfffffffe, 0xe89}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x73b6, 0x7, 0x2, 0x3}, 0x7d}}]}, {0xaa, 0x6, "ffcfb1186db60d2247665c0bbf6d8a5791894194e08ecc3d84e2fde1a1cb3d5292e590fa4e2c64fa38ceb99204c3a1740fc954df5c6e2264152d7010f816aaf210ff85dc54f6cc6ba6103e4af2a8216bcfd79c7661e04105d4c6dd7fd89cb0c6852c40f7dbd8b4b39c43c80f862eb7b5534c9ac4b299f4eaff8ce50d7bf6c542c63eaaff055529babc180a2a140dfdb2b3546a908c49825b42c6d7c4cd8f87059e40f5969c3f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x33d8}}, 0x0)
sendmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0xe000100}], 0x34000, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m3.576200887s ago: executing program 0 (id=1061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYRESHEX=r0], 0x38}}, 0x8044080)

1m3.261314659s ago: executing program 32 (id=1061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYRESHEX=r0], 0x38}}, 0x8044080)

35.426203069s ago: executing program 4 (id=1288):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000040)={0x19, 0x3, 0x2, 0x6942856, 0x4, 0x5, 0x80, 0x3}, &(0x7f0000000080)={0x38, 0x2, 0x5, 0x2d6447c1, 0xff5f0a2, 0x0, 0xadc}, &(0x7f00000000c0)={0x8, 0x4, 0x81, 0x7, 0x2, 0x1, 0x8, 0x80000001}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={<r2=>0x0, 0x13, "eb0f3f436503a37c49b12841a40d73fe9b8361"}, &(0x7f0000000240)=0x1b)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={r2, 0xc2, "bbd0fda471c5bdaab819e0fa8d5aa2c367730dd1ae824f67d37e2c6bbc1ffe9faccc976e000cb44de66980f112f0e95b88b2f8e3c4ff55746aff96442d3509bedbb85d6a268999bd769a325a0385042a219f88d53b041f87d6d959ab971df7a2ea98579ea7805d083f53db632eec7a50cc7498e80e4fe44a77a0acbbd46a9ff11d98d03ee8524605f2ac0b4ae790e3ce232e958bee5de325c921edc8544d07a21e03df08cd64ad9613f9a45be030b5cac4fb81d7f44fdb16d813467b902adb0c7c2f"}, &(0x7f0000000380)=0xca)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000003c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback, 0x8, 0x0, 0x100, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x8b7, 0x18}, 0xc)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r4, 0xffffffffffffffff, 0x22, 0x8, 0x0, @void, @value=r5, @void, @void, r3}, 0x20)
r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e)
recvmmsg$unix(r6, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/207, 0xcf}], 0x1}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000880)=""/218, 0xda}, {&(0x7f0000000980)=""/123, 0x7b}, {&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f0000000b00)=""/238, 0xee}, {&(0x7f0000000c00)=""/133, 0x85}, {&(0x7f0000000cc0)=""/3, 0x3}, {&(0x7f0000000d00)=""/88, 0x58}, {&(0x7f0000000d80)=""/42, 0x2a}, {&(0x7f0000000dc0)=""/243, 0xf3}], 0x9, &(0x7f0000000f80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000003300)=[{&(0x7f00000010c0)=""/49, 0x31}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/120, 0x78}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/72, 0x48}, {&(0x7f0000003200)=""/196, 0xc4}], 0x6, &(0x7f0000003380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003440), 0x6e, &(0x7f00000036c0)=[{&(0x7f00000034c0)=""/79, 0x4f}, {&(0x7f0000003540)=""/92, 0x5c}, {&(0x7f00000035c0)=""/243, 0xf3}], 0x3, &(0x7f0000003700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000003a80)=[{&(0x7f00000037c0)=""/168, 0xa8}, {&(0x7f0000003880)=""/6, 0x6}, {&(0x7f00000038c0)=""/165, 0xa5}, {&(0x7f0000003980)=""/119, 0x77}, {&(0x7f0000003a00)=""/90, 0x5a}], 0x5, &(0x7f0000003b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000003c40)=""/250, 0xfa}, {&(0x7f0000003d40)=""/5, 0x5}, {&(0x7f0000003d80)=""/207, 0xcf}, {&(0x7f0000003e80)}, {&(0x7f0000003ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000004f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x6, 0x3, &(0x7f0000005100)={0x0, 0x3938700})
setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000005140)=0x80000000, 0x4)
r15 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r15, 0x65, 0x2, &(0x7f0000005180)=0x4803ce36, 0x4)
ioctl$SIOCGSTAMPNS(r15, 0x8907, &(0x7f00000051c0))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r14, 0x89f8, &(0x7f00000052c0)={'sit0\x00', &(0x7f0000005200)={'syztnl0\x00', <r16=>0x0, 0x0, 0x1, 0x0, 0x100, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x13, 0xf1, [@loopback, @remote, @private=0xa010102, @local]}, @end, @end, @rr={0x7, 0x1f, 0x37, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x77, 0x1, 0x0, [{@loopback}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@private=0xa010102, 0x80000001}, {@local, 0xb1}]}, @rr={0x7, 0xb, 0xf, [@multicast2, @empty]}, @ra={0x94, 0x4}, @end]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000005300)=@bloom_filter={0x1e, 0x0, 0x80, 0x7, 0x2, 0x1, 0x8, '\x00', r16, r8, 0x1, 0x2, 0x2, 0x3, @void, @value, @void, @value}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000005380))
socket(0x8, 0x1, 0x8000)
r17 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r17, &(0x7f00000054c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005480)={&(0x7f0000005400)={0x78, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x54}, 0x4008000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005500)='./cgroup.cpu/syz0\x00', 0x1ff)
sendmsg$nl_route_sched(r13, &(0x7f0000005600)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000055c0)={&(0x7f0000005580)=@delchain={0x40, 0x65, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x9, 0x3}, {0x5, 0xc}, {0xb, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005640)='./cgroup.net/syz1\x00', 0x1ff)
setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000005680)={0x7, {{0xa, 0x4e21, 0x1000, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x5}}, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}]}, 0x190)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005840)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x0, '\x00', 0x0, r7, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f00000058c0), 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r12, 0x0, 0x48a, &(0x7f0000005900)={0x80000001, 0x7, 0xfffffffe}, 0xc)

35.114492114s ago: executing program 4 (id=1289):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
poll(&(0x7f0000000040), 0x55, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYBLOB="2df6e83f127b0d89a4fb57fae8e0716101fa6276afd006d1fcaf0848370e1099facf1759fdb2dbc04820ba8cb6d92197ce7149635cca790f98c1bb9285f4b0b7d0b5640fba853a40c303c8a5fbe2424792568eca844c037ebaa50c39d77caa37b3c3ba2f7bd70becfb87d58abfb5d25bf90597f57388189b0808b34c3a6268b10a9dc37a1134062746b3f2e04a8a0ba110fdb6912c8b0df7059e9c1032c9d41cc420563b2459db60a3e08959f1f9f0b0f77d2f849d00b17684ae52fe1c2f4ab9c01f28d0c4110068ce8d", @ANYRESHEX=r2], 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="090300000000000000001f"], 0x14}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x2e}})
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6)
sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x60, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0)
unshare(0x26020480)
r8 = socket(0x2b, 0x80801, 0x1)
shutdown(r8, 0xfffffffffffffffd)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r9)
unshare(0x400)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff9078000c"], 0x0)

34.261343533s ago: executing program 4 (id=1291):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket$kcm(0x1e, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x1000000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='kfree\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet(0x2, 0x2, 0x0)
socket(0x2b, 0x3, 0x6)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57)
setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)

34.092666005s ago: executing program 4 (id=1292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000000420851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000200000180000200000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd3, &(0x7f0000000340)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

21.065036618s ago: executing program 4 (id=1292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000000420851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000200000180000200000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd3, &(0x7f0000000340)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.724147958s ago: executing program 4 (id=1292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000000420851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000200000180000200000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd3, &(0x7f0000000340)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

5.17717515s ago: executing program 3 (id=1489):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="487ca71ff4581761459fec2e640f1723f003e2c79e3925cdb3827ecf401b8329a5e8edd6b12e19f21e19a2dc324730d123bc9a50afbb6cd7df843f4fc9d1a0996dd02f8e9ab8446cf147dc5bed947469c998cc01cf3a94f27cac02401bf316987c568ede58bba29f2eed1f8eac8ffe900c22cdefe314d178959efb0d3bd5032250db14c42ec3e42fdc8d7e7902", 0x8d}], 0x1, 0x9, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) (async)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0xa0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x84)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040), 0xc) (async)
writev(r8, &(0x7f0000000680)=[{&(0x7f00000003c0)="962ecc500f", 0x5}], 0x1) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r9, 0x1)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x22ab, 0x4)
sendmmsg$inet(r9, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x2f, 0x0, 0x0, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x3, 0x2}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)

5.037211511s ago: executing program 3 (id=1490):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000eebc0015e3031680a40001800c0007000000000000000000"], 0x40c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000f8ff"], 0x48)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x2}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2)
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4)
getsockopt$XDP_STATISTICS(r11, 0x11b, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x30)
setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x5}}, 0x14}}, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
close(0x3)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0x1, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r2, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.929656737s ago: executing program 3 (id=1492):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd60f900f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000907800001ee835050200220bef00f29492376922ad03030ad5506b40dcf971cb955439e1b9e14f876a4a898a5947eff1c4855c6f209c993c9db16fd0fe9a4bcd7f8ee29dd9a136661855f85adc01f45706a9e9412f2482f5ea6333738ac4aa9792eb960d476c77d48035a465a409b5cc5f6541be77346e107f7654"], 0x0)

3.701936169s ago: executing program 3 (id=1495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x1083}, {r0, 0x1982}], 0x3, &(0x7f0000000040), &(0x7f0000000100)={[0x400]}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03007cd00000000000008009000100626f6e64000000000c0002800800070001000000"], 0x3c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380))
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x5, 0xe}, {0xfff2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004045)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0xfff8, 0x6, 0x5, 0x5}, 0x8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0)

3.701519499s ago: executing program 2 (id=1496):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x28004840)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @enum={0x8}]}, {0x0, [0x5f, 0x5f, 0x61, 0x2e, 0x5f, 0x5f, 0x0, 0x61, 0x5f]}}, 0x0, 0x3b, 0x0, 0x1, 0x4ceff6ba, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
unshare(0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x62, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.479786459s ago: executing program 2 (id=1497):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0x5, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0xfc, 0x30, 0xb, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_ct={0xe4, 0x1, 0x0, 0x0, {{0x7}, {0x56}, {0xbb, 0x6, "d6546ebca225e82247baafa082184b36a5f329393cb6a9b42e585e7c0e98081b783938a0fb467ca88e810f9c9c08c948c7ed23fdc329ddf8d69a78576291dcff4a9347721a9e7ec683eeee0fffddbdc1166cf1cc85a859437339904413c7039a3b9404eb3748db35335a8a1daa0a829aff40f2472b15d794be8756dfb7efeafbb6bb2e9ef8f76d8870c8d9cd63ab8ccbd0a7c2eaef1a893900d090513f396ad7858d9e0aa2ee55c7f3c08db49121695c12beb5b8df0000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20020000}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a0001d590b9598a5c00000000000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0x0, 0x1}, 0xe)

3.19877117s ago: executing program 3 (id=1498):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240)=0x2, 0x4) (async)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
socket$unix(0x1, 0x2, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1800801}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00', @ANYRES16=r5, @ANYBLOB="000427bd7000fddbdf2503000000050006000900000008000200eb000000180004000800000000000000a900000001000000ff010000180004005b0c0000010000000000000002000000050000000500060003000000050006000500000005000500050000000500050005000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x1, 0x1, 0x7, 0x0, 0x100}, 0x20)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x34}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000030000000000000000000000811004000000000095"], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000030000000000000000000000811004000000000095"], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.068149843s ago: executing program 2 (id=1499):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) (async)

2.978178593s ago: executing program 2 (id=1500):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140))
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x0, @empty, @local, {[@rr={0x7, 0x13, 0x8f, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@loopback}, {@multicast1, 0x9}, {@broadcast, 0x6}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}]}}}}}}}, 0x0)
r5 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)

2.926931422s ago: executing program 3 (id=1501):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x4, 0x2, 0x1, 0xc}}, @common=@unspec=@mac={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x3e, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28)
unshare(0x62040200)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000100000000009e139f50fff2ea6c6bc04a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd70f200000000000200000008006100000000000800610000000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84)

2.777672316s ago: executing program 5 (id=1502):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed38761218d063590e4db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000002a000500000000000000000004001d2c04081a80c2f8a3104f1d07ab9fdf8664b877e56cd297603d43281a03f0c75ee64d1f0f4b1688dbb8b29efdbcde0538809a1a4e420d452fd654d66dfc080401d0b7e5cd93af3f0029a9d74ba348eac0b9fa8b7f1827f51fcca89989b7a2a96291bff38e0817da46f4f8803dba21efc604cedec4e07eb612b05ed1a918b94af7320a2c3c7ca69831dcbaa1307e648557f13bb18b362634ec1270c785466bc04a78839d3a27f6848ebb22ddc4a6092e666fb2c4dd9737069356c1cb8cf75d84c8"], 0x18}, 0x1, 0x3000000}, 0xdc5e49a554ccffe8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
r3 = socket(0xf, 0x3, 0x2)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$kcm(r3, &(0x7f0000000500)={&(0x7f0000000100)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)=[{0x10, 0x1, 0x1000}, {0xd8, 0x3a, 0xffffffff, "a25cc7d8ee87440bf7d459c11a940c97549dee2773cd69f7beeae2fbef1c054036c3ed587a0eb966715b232a20b290c5c6d581cb9532e895c233c31c7f34b84207922b174d4a3bbc9493267bb242b6f0ab2cb0916cf68a286b2263d29249cc2a00705047a58f70de84f80c6e73993f27ab30d69b61d9b0f1780185062ab193aab969db9384357032892993c523d6e6e6e5a2e84a20d2e43809fa6d27c24722d31416a79053ebb1f158a4143f65a899c5c75d7465cc8833bf0b08a418e690e40bbe3f0c9cd62dac47"}, {0xa0, 0x117, 0x0, "7657d9d7f54297b99fd328f285b2d0ab6f661586561b7cdc652de98164d1979f8d4a7a0c6d5fa48209bf45c713b885b00aebed901a0e2f4eb82c5e9af983c642477a93f742cbe176da570fef8b1c12310b10178eca1ce6b892be24901f2d4f47e8f02373ee61d335a9f9d042c90602bb351be0642e296f21481f52f0a75d53468c23c756893fb76033de45a77798e6"}], 0x188}, 0x24000081)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000e8c000), 0x4)
syz_emit_ethernet(0xef, &(0x7f0000000640)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0x1, 0x0, 0x1}, {0x2}], @generic="fcc27e4fc2601d6e1d1695c8a80883582be74351e25963a0fcacba23e0bcabd117b031f32eb9b7a5c264c85c53fb228298ec7a20096eee112e7786210f34a389f11ec982498d4f9450fc5217476c82b0fe27ad9d70e78b875d917141982c44571609b33798be4fa2aeabb9f9e537dac29605778b449ed969733a889c65b1ea9de0307a1a7a253924a0764d848df1e449ea24f85cd1c1df4b5042655e31c2e2025f78b34c3cc478a2454237f3c8c6479af904c543f94c1dd992c37f43174edf2baef27ccb46b326470c70dbfd2ae584f6f2cd71aa684cbd1214"}}}}, &(0x7f0000000740)={0x0, 0x3, [0xe8b, 0xb7, 0x1f7, 0xaa8]})
write(r3, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
pipe(&(0x7f0000000080))
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.477659643s ago: executing program 1 (id=1504):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000340)={@multicast1, @remote}, 0x8) (async)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000340)={@multicast1, @remote}, 0x8)
socket$inet6(0xa, 0x801, 0xcf8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff78c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.415868558s ago: executing program 2 (id=1505):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$packet(0x11, 0x3, 0x300)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640ffe001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, 0x0, 0x9}, 0x10)

2.323407393s ago: executing program 5 (id=1506):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r5, 0x1, 0x10, 0x0, &(0x7f0000001500))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08f7b546b6aad6b957256492b481538800450000380000000000019078acf4a5b400000000040490781200183f250000007f0000017f00000100186371ae971c0300000000b300010066dc878a94d9b729197edc9627ef961a6cccc907c33984ecd891cbaf053a50bb62e99da53132d44c0ae715e17affb06b962ce6ee3fc1a181e4c546e6cdb61c67a5eaac84dbe0283c9fd145225ae87074ee7cb73b4398c5402df816c9284bc05dedcc5c2226a6fc286874f2f103f469b12d0bfce774ba36b69af5d0f31fefe5e606fcd2880fadb774"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'ip_vti0\x00'})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.265801487s ago: executing program 1 (id=1507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x2c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x30000001})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

1.264022995s ago: executing program 5 (id=1508):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$packet(0x11, 0x3, 0x300)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000f9"], 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000340)="08000000010000", 0x7)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0xfffffec2)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x8, 0x0, 0x9}, 0x10)

1.256525697s ago: executing program 1 (id=1509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x890)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x205, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)

942.169389ms ago: executing program 1 (id=1510):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x10})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000002000000000000000000000105000020200000000000000000000003000000000200000002"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

763.626898ms ago: executing program 2 (id=1511):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x150, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_csum={0x4c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xc03a, 0x4, 0x7, 0x1}, 0x5c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x84, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x61, 0x9, 0xcc5d}, [@TCA_EM_IPT_MATCH_DATA={0xe, 0x5, "bf5792d07862f54554d5"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x4}, {0x6, 0x5, 0x400, 0x0, 0x0, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x1}, {0x4, 0x3, 0x6}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x400}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r2 = epoll_create1(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1f000000b9f95ecc0c75d010e488195c20ef37cc8997ce0a06010450", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r2, 0x2003}, {r2, 0xf401}, {}], 0x3, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x68000005}) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r0, 0x0, 0x8000f28, 0x0)
sendto$inet6(r6, &(0x7f0000000040)="217f5e5b14b4f628196e5b0425b788836e781606114b21b263e33f95ab7951ed79717573a98555", 0x27, 0x20001005, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x0, 0x24}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000d1402022dbd7000fcdbdf25080001000100000008003e000100000073fcc7713b40b984fa061759e87532c5532f984892c5e800760365c46fcddf22e24a3c7785acc6c753ab81d7b6bc1d074358327122c4d2abd116a23455e3276653d552db29577f15df46b43d9a4d5ec03acb76afaeb4227fd7ac6f4a3ed275348ac9142ac12a1625338f09f35d18331a589e23fff6cc13d108aeeb8fd29db925cf4bbe968b4797f51a8dfc01869d06f3d2897a7f43a08229defd040e9e759d"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x688c0)

763.018372ms ago: executing program 1 (id=1512):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000100013040000000000000008ac1414410000000000000000000000000000000000000000004e2808000000000073000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000000000000000000c0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000100000000000000fffffffffffffbff07000000000000000800000000000000020000000000000000000000000000000800000000000000cc000000000000000000000000000000f600000000000000ffffffff0000000000000000020004010c00000000000000"], 0xf0}}, 0x404c0a0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@local, 0x0, 0x3}}, 0xe8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)

754.729852ms ago: executing program 5 (id=1513):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
clock_gettime(0x5, &(0x7f0000000dc0))
r2 = socket(0x1, 0x2, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x891a, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r2, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x88, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d)

578.919648ms ago: executing program 5 (id=1514):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
accept$inet6(r2, &(0x7f0000000680)={0xa, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x1c)
read(r0, &(0x7f00000004c0)=""/129, 0xfffffe9a)
connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x3fff}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r0, 0x891c, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040080}, 0x2000c010)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18)
r3 = socket$inet6(0xa, 0x6, 0x3)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x8001000}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1e00000002000000020000000600000001000600", @ANYRES32, @ANYBLOB="01010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000009d0a0000020000000d00"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f00000001c0), 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r9)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000740)=ANY=[], 0xffffffffffffffcf}, 0x1, 0x0, 0x0, 0x48044}, 0x40000c4)
r10 = openat$cgroup_ro(r8, 0x0, 0x26e1, 0x0)
close(r10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

119.708309ms ago: executing program 1 (id=1515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000280)="52a9cd6940c5d7f94527fdb05c8096080c7f42ec5a257e8a98dfab1bd5fb6734e93b4fd1b9897f8f2a98f5aa34a0f003d658299f7b30331653dbf0bd6f8113e31e106fd8c4876a52fe5d62f8e0a97cc563a9d0f82b6a98bf6f25e75cd6375ae102d01952171fb91334dbf5e6dd71f7cb062b64233c4bca8acd7d7b1f965b3c857d053e22732d", &(0x7f0000000340)=""/149, &(0x7f00000004c0)="0b65a0e49ea4297fcfc3cfc8ee6d7520aee9823841e32f47da85a45e8557052c82b7520ba4bad5a528e6d7f06ca48c4c33d38a7dceacef033baf27a66946d2d66fabdf5d82241c22a6e942432845d683ad9ce1a3b84f4fe27136912c15161dd3b54c2f1b79fe2b4a0deebaa7bddf337c97499140c2d93b86f22475ad65416e349a2c479d63a2fe1fece6ce86011e6696cffd2f0d77e937d76c7c60138690bf422e6c0d22130e0f096a28f004dcfe2be9d01fd13aa5cd8b859d63cb02e6117762a4e3aae2e5207296eccc86d187e81757d68b189644e69726ff43b89005bcd84052a5bea0", &(0x7f0000000180)="f028156ebb4de5a9fe9cee7440549e6058e591bde544557353ceec46dd87b87a635bbeedb04c0fc5b4786258ccfe05e41be670612f21bda0b1dd911b398d31272fb70903ac5589fd3b4bd55a70c483b4626a30de16540e5c24d58f", 0x3ff, r1}, 0x38) (async)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240"], 0xa8}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 5 (id=1516):
socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32)
r2 = socket(0xa, 0x3, 0x3a) (rerun: 32)
sendmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x10}}, @cred={{0x1c, 0x29}}], 0x30, 0x4004}}], 0x1, 0x80) (async)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) (async, rerun: 32)
r4 = socket(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000b40f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="00000000000000d686782500f602000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x24, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x0, 0x1, 0x2, 0x5, 0x0, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0x11, &(0x7f0000000380)=""/17, 0x40f00, 0xa, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xe, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x5, 0x2, 0x2, 0x4}], 0x10, 0x7, @void, @value}, 0x94) (async)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @empty}}}}, 0x0)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.1.308'.
[  138.633382][ T7089] syz.2.310: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  138.662698][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.2.310 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  138.662735][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.662748][ T7089] Call Trace:
[  138.662757][ T7089]  <TASK>
[  138.662766][ T7089]  dump_stack_lvl+0x241/0x360
[  138.662812][ T7089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.662844][ T7089]  ? __pfx__printk+0x10/0x10
[  138.662873][ T7089]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  138.662909][ T7089]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  138.662940][ T7089]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  138.662976][ T7089]  warn_alloc+0x27c/0x410
[  138.663006][ T7089]  ? __pfx_warn_alloc+0x10/0x10
[  138.663036][ T7089]  ? xskq_create+0xb6/0x170
[  138.663066][ T7089]  ? __get_vm_area_node+0x1c8/0x2d0
[  138.663098][ T7089]  ? __get_vm_area_node+0x25c/0x2d0
[  138.663138][ T7089]  __vmalloc_node_range_noprof+0x634/0x1390
[  138.663196][ T7089]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  138.663223][ T7089]  ? __kasan_kmalloc+0x9d/0xb0
[  138.663254][ T7089]  vmalloc_user_noprof+0x74/0x80
[  138.663276][ T7089]  ? xskq_create+0xb6/0x170
[  138.663306][ T7089]  xskq_create+0xb6/0x170
[  138.663341][ T7089]  xsk_init_queue+0xa1/0x100
[  138.663377][ T7089]  xsk_setsockopt+0x4f9/0x840
[  138.663412][ T7089]  ? __pfx_xsk_setsockopt+0x10/0x10
[  138.663440][ T7089]  ? __lock_acquire+0xad5/0xd80
[  138.663463][ T7089]  ? __pfx_aa_sk_perm+0x10/0x10
[  138.663495][ T7089]  ? aa_sock_opt_perm+0x79/0x120
[  138.663532][ T7089]  ? __pfx_xsk_setsockopt+0x10/0x10
[  138.663569][ T7089]  do_sock_setsockopt+0x3b1/0x710
[  138.663611][ T7089]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  138.663641][ T7089]  ? __fget_files+0x2a/0x420
[  138.663667][ T7089]  ? __fget_files+0x39d/0x420
[  138.663686][ T7089]  ? __fget_files+0x2a/0x420
[  138.663717][ T7089]  __x64_sys_setsockopt+0x1ee/0x280
[  138.663759][ T7089]  do_syscall_64+0xf3/0x230
[  138.663783][ T7089]  ? clear_bhb_loop+0x45/0xa0
[  138.663810][ T7089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.663832][ T7089] RIP: 0033:0x7fd05bd8d169
[  138.663852][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.663869][ T7089] RSP: 002b:00007fd05cbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  138.663894][ T7089] RAX: ffffffffffffffda RBX: 00007fd05bfa5fa0 RCX: 00007fd05bd8d169
[  138.663911][ T7089] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  138.663924][ T7089] RBP: 00007fd05be0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  138.663937][ T7089] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  138.663951][ T7089] R13: 0000000000000000 R14: 00007fd05bfa5fa0 R15: 00007ffe14f969a8
[  138.663985][ T7089]  </TASK>
[  138.966116][ T7089] Mem-Info:
[  138.969498][ T7089] active_anon:3908 inactive_anon:0 isolated_anon:0
[  138.969498][ T7089]  active_file:1422 inactive_file:38318 isolated_file:0
[  138.969498][ T7089]  unevictable:768 dirty:210 writeback:0
[  138.969498][ T7089]  slab_reclaimable:9859 slab_unreclaimable:106129
[  138.969498][ T7089]  mapped:28467 shmem:1432 pagetables:742
[  138.969498][ T7089]  sec_pagetables:0 bounce:0
[  138.969498][ T7089]  kernel_misc_reclaimable:0
[  138.969498][ T7089]  free:1333579 free_pcp:3458 free_cma:0
[  138.982982][ T7095] netlink: 'syz.3.311': attribute type 1 has an invalid length.
[  139.039443][ T7089] Node 0 active_anon:15632kB inactive_anon:0kB active_file:5688kB inactive_file:153200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113868kB dirty:836kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10944kB pagetables:2868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  139.078495][ T7089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  139.118511][ T7089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  139.147631][ T7089] lowmem_reserve[]: 0 2487 2487 2487 2487
[  139.155922][ T7089] Node 0 DMA32 free:1415552kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:15564kB inactive_anon:0kB active_file:5688kB inactive_file:153104kB unevictable:1536kB writepending:836kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:13588kB local_pcp:13168kB free_cma:0kB
[  139.190428][ T7089] lowmem_reserve[]: 0 0 0 0 0
[  139.196831][ T7089] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  139.227576][ T7089] lowmem_reserve[]: 0 0 0 0 0
[  139.233091][ T7089] Node 1 Normal free:3904592kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  139.263211][ T7089] lowmem_reserve[]: 0 0 0 0 0
[  139.268240][ T7089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  139.282995][ T7089] Node 0 DMA32: 128*4kB (UME) 157*8kB (UM) 117*16kB (ME) 833*32kB (UME) 550*64kB (UME) 106*128kB (UME) 33*256kB (UM) 11*512kB (ME) 8*1024kB (UME) 5*2048kB (UME) 318*4096kB (M) = 1414104kB
[  139.303414][ T7089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  139.316220][ T7089] Node 1 Normal: 228*4kB (UME) 44*8kB (UME) 30*16kB (UME) 188*32kB (UME) 90*64kB (UME) 35*128kB (UME) 16*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3904592kB
[  139.387247][ T7104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  139.398865][ T7089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  139.427207][ T7089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  139.461100][ T7089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  139.513094][ T7089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  139.537518][ T7089] 41197 total pagecache pages
[  139.569560][ T7089] 0 pages in swap cache
[  139.580766][ T7089] Free swap  = 124996kB
[  139.591549][ T7089] Total swap = 124996kB
[  139.609242][ T7089] 2097051 pages RAM
[  139.634013][ T7089] 0 pages HighMem/MovableOnly
[  139.657600][ T7119] vlan2: entered promiscuous mode
[  139.663277][ T7119] vlan2: entered allmulticast mode
[  139.668938][ T7119] hsr_slave_1: entered allmulticast mode
[  139.674303][ T7089] 428567 pages reserved
[  139.678794][ T7089] 0 pages cma reserved
[  139.742706][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  139.945234][ T7126] ip6tnl1: entered promiscuous mode
[  139.951474][ T7126] ip6tnl1: entered allmulticast mode
[  139.958751][ T7126] team0: Device ip6tnl1 is of different type
[  140.001293][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'.
[  140.200841][ T7132] bond2: entered promiscuous mode
[  140.250801][ T7132] bond2: entered allmulticast mode
[  140.271441][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.312144][ T7133] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  140.417364][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'.
[  140.651816][ T7160] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  140.674800][ T7160] netlink: 224 bytes leftover after parsing attributes in process `syz.0.332'.
[  140.694883][ T7162] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  140.731638][ T7162] netlink: 224 bytes leftover after parsing attributes in process `syz.0.332'.
[  140.789076][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[  140.831540][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'.
[  141.096411][ T7185] syz_tun: entered allmulticast mode
[  141.127668][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'.
[  141.138445][ T7189] syz_tun: left allmulticast mode
[  141.752442][ T7206] bridge_slave_0: left allmulticast mode
[  141.783423][ T7206] bridge_slave_0: left promiscuous mode
[  141.789638][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.895265][ T7206] bridge_slave_1: left allmulticast mode
[  141.901322][ T7206] bridge_slave_1: left promiscuous mode
[  141.935715][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.051345][ T7206] team0: Port device team_slave_0 removed
[  142.095132][ T7206] team0: Port device team_slave_1 removed
[  142.102235][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.121134][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.141460][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.152416][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.973864][ T7226] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  143.012509][ T7226] bond0 (unregistering): Released all slaves
[  143.715489][ T7284] vlan3: entered promiscuous mode
[  143.739762][ T7284] vlan2: entered promiscuous mode
[  143.755475][ T7284] gretap0: entered promiscuous mode
[  143.779210][ T7290] __nla_validate_parse: 3 callbacks suppressed
[  143.779232][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'.
[  143.802417][ T7283] netlink: 21 bytes leftover after parsing attributes in process `syz.4.365'.
[  144.186774][ T7300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'.
[  144.602118][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'.
[  144.627526][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'.
[  144.998672][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'.
[  145.018704][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'.
[  145.037115][ T7325] sit0: Master is either lo or non-ether device
[  145.105507][ T7329] xt_bpf: check failed: parse error
[  145.400969][ T7343] syz_tun: entered allmulticast mode
[  145.416661][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'.
[  145.434854][ T7339] syz_tun: left allmulticast mode
[  145.469938][ T7345] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  145.934537][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'.
[  146.150529][ T7372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.429946][ T7367] vlan0: entered promiscuous mode
[  146.436323][ T7367] vlan2: entered promiscuous mode
[  147.662417][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'.
[  147.868218][ T7429] xt_hashlimit: size too large, truncated to 1048576
[  147.954872][ T7438] xt_hashlimit: size too large, truncated to 1048576
[  148.013018][ T7440] smc: net device bond0 applied user defined pnetid SYZ
[  148.275535][ T7451] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  148.634185][ T7471] tipc: Enabled bearer <eth:syz_tun>, priority 10
[  148.961568][   T10] IPVS: starting estimator thread 0...
[  149.004124][ T7484] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  149.027634][ T7487] ipt_rpfilter: unknown options
[  149.083200][ T7485] IPVS: using max 28 ests per chain, 67200 per kthread
[  149.150923][ T7489] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.161656][ T7489] bond0: (slave bond1): Enslaving as an active interface with an up link
[  149.498820][ T7508] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  149.791916][ T7526] macvlan2: entered promiscuous mode
[  149.840113][ T7526] vlan1: entered promiscuous mode
[  149.868986][ T7526] vlan1: left promiscuous mode
[  150.047359][ T7534] __nla_validate_parse: 5 callbacks suppressed
[  150.047380][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.446'.
[  150.130380][ T7537] bond0 (unregistering): Released all slaves
[  150.808345][ T7564] Cannot find add_set index 0 as target
[  150.941383][ T7548] team0 (unregistering): Port device team_slave_0 removed
[  150.956815][ T7548] team0 (unregistering): Port device team_slave_1 removed
[  151.020284][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'.
[  151.035972][ T7558] veth0_to_bridge: entered promiscuous mode
[  151.054777][ T7553] veth0_to_bridge: left promiscuous mode
[  151.475959][ T7583] netlink: 'syz.2.462': attribute type 2 has an invalid length.
[  151.507056][ T7583] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  151.555284][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'.
[  152.034195][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'.
[  152.065335][ T7620] x_tables: duplicate underflow at hook 1
[  152.095058][ T7623] netlink: 'syz.1.472': attribute type 4 has an invalid length.
[  152.190497][ T7615] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  152.472066][ T7644] xt_CT: You must specify a L4 protocol and not use inversions on it
[  153.235401][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'.
[  153.254429][ T7676] macvlan3: entered promiscuous mode
[  153.268665][ T7676] macvlan3: entered allmulticast mode
[  153.286400][ T7676] syz_tun: entered allmulticast mode
[  153.322743][ T7676] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  153.451409][ T7691] pimreg: entered allmulticast mode
[  153.698221][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.498'.
[  154.980537][ T7748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.509'.
[  155.283583][ T7759] xt_l2tp: invalid flags combination: c
[  155.429960][ T7763] xt_ecn: cannot match TCP bits for non-tcp packets
[  155.499515][ T7760] can: request_module (can-proto-0) failed.
[  155.786090][ T7778] netlink: 'syz.2.517': attribute type 10 has an invalid length.
[  156.442141][ T7791] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  156.465329][ T7791] batman_adv: batadv0: Adding interface: ip6gretap1
[  156.472175][ T7791] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.563699][ T7791] batman_adv: batadv0: Interface activated: ip6gretap1
[  156.625633][ T7801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.522'.
[  157.190763][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'.
[  157.222499][ T7819] netlink: 'syz.0.529': attribute type 11 has an invalid length.
[  157.424203][ T7826] netlink: 52 bytes leftover after parsing attributes in process `syz.1.530'.
[  157.538497][ T7835] netlink: 'syz.3.531': attribute type 3 has an invalid length.
[  157.551642][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'.
[  157.949307][ T7842] netlink: 'syz.2.533': attribute type 11 has an invalid length.
[  157.957656][ T7842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.533'.
[  158.494757][ T7859] IPVS: Error connecting to the multicast addr
[  158.517989][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'.
[  158.641784][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[  158.881491][ T7846] IPVS: Error connecting to the multicast addr
[  158.902127][ T7877] netlink: 'syz.1.546': attribute type 6 has an invalid length.
[  158.923206][ T7878] netlink: 'syz.1.546': attribute type 6 has an invalid length.
[  159.010914][ T7846] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.047475][ T7846] bond0: (slave bond2): Enslaving as an active interface with an up link
[  159.556610][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'.
[  159.745067][   T30] audit: type=1800 audit(1743736079.226:2): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.547" name="cgroup.controllers" dev="tmpfs" ino=554 res=0 errno=0
[  160.080907][ T7913] xt_l2tp: v2 doesn't support IP mode
[  160.129035][ T7913] netlink: 'syz.1.557': attribute type 11 has an invalid length.
[  160.155745][ T7913] netlink: 224 bytes leftover after parsing attributes in process `syz.1.557'.
[  160.303998][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'.
[  160.342283][ T7917] block nbd0: not configured, cannot reconfigure
[  161.776379][ T7942] __nla_validate_parse: 3 callbacks suppressed
[  161.776399][ T7942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.568'.
[  162.815828][ T7975] netlink: 'syz.3.576': attribute type 10 has an invalid length.
[  162.833328][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.576'.
[  162.915266][ T7979] netlink: 48 bytes leftover after parsing attributes in process `syz.4.577'.
[  163.053173][ T7983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.579'.
[  163.157550][ T7987] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  163.337318][ T8001] x_tables: duplicate underflow at hook 1
[  163.673537][ T8014] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  163.698586][ T8015] FAULT_INJECTION: forcing a failure.
[  163.698586][ T8015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.755437][ T8015] CPU: 0 UID: 0 PID: 8015 Comm: syz.2.588 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  163.755474][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  163.755488][ T8015] Call Trace:
[  163.755498][ T8015]  <TASK>
[  163.755509][ T8015]  dump_stack_lvl+0x241/0x360
[  163.755552][ T8015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.755584][ T8015]  ? __pfx__printk+0x10/0x10
[  163.755632][ T8015]  should_fail_ex+0x424/0x570
[  163.755675][ T8015]  _copy_from_user+0x2d/0xb0
[  163.755706][ T8015]  copy_msghdr_from_user+0xb3/0x580
[  163.755742][ T8015]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  163.755768][ T8015]  ? __fget_files+0x2a/0x420
[  163.755792][ T8015]  ? __fget_files+0x2a/0x420
[  163.755825][ T8015]  __sys_sendmsg+0x20a/0x360
[  163.755854][ T8015]  ? __pfx___sys_sendmsg+0x10/0x10
[  163.755942][ T8015]  ? do_syscall_64+0xb6/0x230
[  163.755969][ T8015]  do_syscall_64+0xf3/0x230
[  163.755992][ T8015]  ? clear_bhb_loop+0x45/0xa0
[  163.756018][ T8015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.756040][ T8015] RIP: 0033:0x7fd05bd8d169
[  163.756061][ T8015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.756078][ T8015] RSP: 002b:00007fd05cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.756104][ T8015] RAX: ffffffffffffffda RBX: 00007fd05bfa5fa0 RCX: 00007fd05bd8d169
[  163.756119][ T8015] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  163.756133][ T8015] RBP: 00007fd05cbff090 R08: 0000000000000000 R09: 0000000000000000
[  163.756145][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.756157][ T8015] R13: 0000000000000000 R14: 00007fd05bfa5fa0 R15: 00007ffe14f969a8
[  163.756192][ T8015]  </TASK>
[  164.036817][ T8020] netlink: 'syz.3.589': attribute type 5 has an invalid length.
[  164.184567][ T8020] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  164.445184][ T8041] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'.
[  164.523530][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[  164.553127][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'.
[  164.999280][ T8066] FAULT_INJECTION: forcing a failure.
[  164.999280][ T8066] name failslab, interval 1, probability 0, space 0, times 1
[  165.031338][ T8070] x_tables: duplicate underflow at hook 2
[  165.038160][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.2.604 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  165.038190][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  165.038203][ T8066] Call Trace:
[  165.038211][ T8066]  <TASK>
[  165.038220][ T8066]  dump_stack_lvl+0x241/0x360
[  165.038257][ T8066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.038302][ T8066]  ? __pfx__printk+0x10/0x10
[  165.038335][ T8066]  ? __pfx___might_resched+0x10/0x10
[  165.038364][ T8066]  should_fail_ex+0x424/0x570
[  165.038403][ T8066]  should_failslab+0xac/0x100
[  165.038434][ T8066]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  165.038463][ T8066]  ? __alloc_skb+0x1c2/0x480
[  165.038497][ T8066]  __alloc_skb+0x1c2/0x480
[  165.038533][ T8066]  ? __pfx___alloc_skb+0x10/0x10
[  165.038561][ T8066]  ? netlink_autobind+0xd6/0x2f0
[  165.038597][ T8066]  ? netlink_autobind+0x2b0/0x2f0
[  165.038629][ T8066]  netlink_sendmsg+0x638/0xcd0
[  165.038668][ T8066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.038699][ T8066]  ? aa_sock_msg_perm+0x91/0x160
[  165.038733][ T8066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.038756][ T8066]  __sock_sendmsg+0x221/0x270
[  165.038785][ T8066]  ____sys_sendmsg+0x523/0x860
[  165.038814][ T8066]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.038830][ T8066]  ? __fget_files+0x2a/0x420
[  165.038850][ T8066]  ? __fget_files+0x2a/0x420
[  165.038877][ T8066]  __sys_sendmsg+0x271/0x360
[  165.038902][ T8066]  ? __pfx___sys_sendmsg+0x10/0x10
[  165.038982][ T8066]  ? do_syscall_64+0xb6/0x230
[  165.039008][ T8066]  do_syscall_64+0xf3/0x230
[  165.039030][ T8066]  ? clear_bhb_loop+0x45/0xa0
[  165.039055][ T8066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.039075][ T8066] RIP: 0033:0x7fd05bd8d169
[  165.039095][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.039112][ T8066] RSP: 002b:00007fd05cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.039152][ T8066] RAX: ffffffffffffffda RBX: 00007fd05bfa5fa0 RCX: 00007fd05bd8d169
[  165.039167][ T8066] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  165.039180][ T8066] RBP: 00007fd05cbff090 R08: 0000000000000000 R09: 0000000000000000
[  165.039192][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.039203][ T8066] R13: 0000000000000000 R14: 00007fd05bfa5fa0 R15: 00007ffe14f969a8
[  165.039235][ T8066]  </TASK>
[  165.600097][ T8081] netlink: 7 bytes leftover after parsing attributes in process `syz.2.610'.
[  165.750290][ T8088] Bluetooth: MGMT ver 1.23
[  165.973737][ T8099] C: renamed from team_slave_0
[  166.038947][ T8099] netlink: 'syz.4.615': attribute type 1 has an invalid length.
[  166.061397][ T8099] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  166.410113][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  166.423040][ T8127] netlink: 428 bytes leftover after parsing attributes in process `syz.0.625'.
[  166.651047][ T8135] xt_hashlimit: size too large, truncated to 1048576
[  166.709166][ T8140] netlink: 'syz.4.629': attribute type 3 has an invalid length.
[  166.886282][ T8148] netlink: 'syz.3.632': attribute type 8 has an invalid length.
[  167.206501][ T8160] netlink: 'syz.3.638': attribute type 29 has an invalid length.
[  167.218617][ T8160] netlink: 'syz.3.638': attribute type 8 has an invalid length.
[  167.251050][ T8160] netlink: 'syz.3.638': attribute type 29 has an invalid length.
[  167.324956][ T8160] 8021q: adding VLAN 0 to HW filter on device bond3
[  167.335405][ T8160] bridge0: port 3(bond3) entered blocking state
[  167.343171][ T8160] bridge0: port 3(bond3) entered disabled state
[  167.348399][ T8172] __nla_validate_parse: 3 callbacks suppressed
[  167.348422][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'.
[  167.349851][ T8160] bond3: entered allmulticast mode
[  167.375813][ T8160] bond3: entered promiscuous mode
[  167.382575][ T8160] bridge0: port 3(bond3) entered blocking state
[  167.389301][ T8160] bridge0: port 3(bond3) entered forwarding state
[  167.397669][ T8166] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  167.433169][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'.
[  167.632281][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[  167.724411][ T8190] netlink: 112 bytes leftover after parsing attributes in process `syz.0.648'.
[  167.795080][ T8193] netlink: 'syz.3.649': attribute type 39 has an invalid length.
[  167.862330][ T6270] bridge0: port 3(bond3) entered disabled state
[  168.282146][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'.
[  168.471157][ T8225] netlink: 'syz.1.659': attribute type 13 has an invalid length.
[  168.563513][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  168.573628][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  168.583669][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  168.598395][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  168.655947][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'.
[  169.244492][ T8256] tipc: Bearer <eth:veth0_to_batadv>: already 2 bearers with priority 10
[  169.270422][ T8256] tipc: Bearer <eth:veth0_to_batadv>: trying with adjusted priority
[  169.281025][ T8256] tipc: Enabled bearer <eth:veth0_to_batadv>, priority 9
[  169.303978][ T8261] batadv_slave_1: entered promiscuous mode
[  169.756672][ T8287] FAULT_INJECTION: forcing a failure.
[  169.756672][ T8287] name failslab, interval 1, probability 0, space 0, times 0
[  169.769683][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.3.677 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  169.769712][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  169.769724][ T8287] Call Trace:
[  169.769732][ T8287]  <TASK>
[  169.769741][ T8287]  dump_stack_lvl+0x241/0x360
[  169.769788][ T8287]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.769818][ T8287]  ? __pfx__printk+0x10/0x10
[  169.769862][ T8287]  should_fail_ex+0x424/0x570
[  169.769909][ T8287]  should_failslab+0xac/0x100
[  169.769938][ T8287]  kmem_cache_alloc_noprof+0x78/0x390
[  169.769965][ T8287]  ? skb_clone+0x20c/0x390
[  169.769992][ T8287]  skb_clone+0x20c/0x390
[  169.770010][ T8287]  ? dev_queue_xmit_nit+0x28c/0xcf0
[  169.770042][ T8287]  dev_queue_xmit_nit+0x361/0xcf0
[  169.770074][ T8287]  ? dev_queue_xmit_nit+0x2b/0xcf0
[  169.770113][ T8287]  dev_hard_start_xmit+0x1b5/0x840
[  169.770150][ T8287]  __dev_queue_xmit+0x1b80/0x3f60
[  169.770171][ T8287]  ? kasan_save_track+0x3f/0x80
[  169.770192][ T8287]  ? __kasan_slab_alloc+0x66/0x80
[  169.770223][ T8287]  ? do_syscall_64+0xf3/0x230
[  169.770251][ T8287]  ? __dev_queue_xmit+0x2f9/0x3f60
[  169.770277][ T8287]  ? __pfx___dev_queue_xmit+0x10/0x10
[  169.770317][ T8287]  ? __copy_skb_header+0xa7/0x5a0
[  169.770339][ T8287]  ? __asan_memcpy+0x40/0x70
[  169.770360][ T8287]  ? __skb_clone+0x5c/0x6d0
[  169.770385][ T8287]  ? __skb_clone+0x457/0x6d0
[  169.770414][ T8287]  ? skb_clone+0x240/0x390
[  169.770439][ T8287]  __netlink_deliver_tap+0x561/0x7f0
[  169.770478][ T8287]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.770503][ T8287]  netlink_deliver_tap+0x19d/0x1b0
[  169.770530][ T8287]  netlink_unicast+0x7c6/0x9a0
[  169.770564][ T8287]  ? __pfx_netlink_unicast+0x10/0x10
[  169.770590][ T8287]  ? skb_put+0x114/0x1f0
[  169.770625][ T8287]  netlink_sendmsg+0x8c3/0xcd0
[  169.770667][ T8287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.770699][ T8287]  ? aa_sock_msg_perm+0x91/0x160
[  169.770734][ T8287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.770758][ T8287]  __sock_sendmsg+0x221/0x270
[  169.770788][ T8287]  ____sys_sendmsg+0x523/0x860
[  169.770818][ T8287]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.770835][ T8287]  ? __fget_files+0x2a/0x420
[  169.770858][ T8287]  ? __fget_files+0x2a/0x420
[  169.770888][ T8287]  __sys_sendmsg+0x271/0x360
[  169.770920][ T8287]  ? __pfx___sys_sendmsg+0x10/0x10
[  169.771001][ T8287]  ? do_syscall_64+0xb6/0x230
[  169.771026][ T8287]  do_syscall_64+0xf3/0x230
[  169.771047][ T8287]  ? clear_bhb_loop+0x45/0xa0
[  169.771072][ T8287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.771092][ T8287] RIP: 0033:0x7f5a2e98d169
[  169.771111][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.771128][ T8287] RSP: 002b:00007f5a2f86b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.771150][ T8287] RAX: ffffffffffffffda RBX: 00007f5a2eba6080 RCX: 00007f5a2e98d169
[  169.771165][ T8287] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  169.771178][ T8287] RBP: 00007f5a2f86b090 R08: 0000000000000000 R09: 0000000000000000
[  169.771190][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.771202][ T8287] R13: 0000000000000000 R14: 00007f5a2eba6080 R15: 00007ffce441d328
[  169.771235][ T8287]  </TASK>
[  170.106477][ T8287] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  170.413207][ T8299] pim6reg: entered allmulticast mode
[  170.454276][ T8305] netlink: 'syz.2.684': attribute type 32 has an invalid length.
[  170.471540][ T8309] pim6reg: left allmulticast mode
[  170.652151][ T8308] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  171.552606][ T8358] xt_policy: too many policy elements
[  172.160713][ T8376] ieee802154 phy0 wpan0: encryption failed: -22
[  172.384574][ T5851] Bluetooth: hci4: command 0x0405 tx timeout
[  172.783746][ T8394] __nla_validate_parse: 9 callbacks suppressed
[  172.783768][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'.
[  173.021781][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.713'.
[  173.229521][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'.
[  173.538610][ T8415] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  173.694916][ T8417] netlink: 'syz.1.718': attribute type 16 has an invalid length.
[  173.713512][ T8418] netlink: 'syz.1.718': attribute type 16 has an invalid length.
[  173.732029][ T8418] netlink: 'syz.1.718': attribute type 17 has an invalid length.
[  173.733214][ T8417] netlink: 'syz.1.718': attribute type 17 has an invalid length.
[  174.505489][ T8417] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.519488][ T8417] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.529136][ T8417] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.538494][ T8417] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.619801][ T8430] tc_dump_action: action bad kind
[  174.836204][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'.
[  174.918137][ T8444] netlink: 68 bytes leftover after parsing attributes in process `syz.4.727'.
[  174.921695][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'.
[  175.074307][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.728'.
[  175.794033][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.736'.
[  175.981599][ T8476] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  176.278224][ T8494] netlink: 80 bytes leftover after parsing attributes in process `syz.1.740'.
[  176.320025][ T8501] sctp: [Deprecated]: syz.4.742 (pid 8501) Use of int in maxseg socket option.
[  176.320025][ T8501] Use struct sctp_assoc_value instead
[  176.369152][ T8505] netlink: 45 bytes leftover after parsing attributes in process `syz.2.744'.
[  176.851021][ T8514] IPVS: Error connecting to the multicast addr
[  177.060665][ T8524] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  177.324549][ T8532] netlink: 'syz.0.755': attribute type 7 has an invalid length.
[  177.830774][ T8555] bond0: entered promiscuous mode
[  177.890757][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.908281][ T8558] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  178.174375][ T8560] __nla_validate_parse: 8 callbacks suppressed
[  178.174398][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'.
[  178.248258][ T8565] netlink: 'syz.3.763': attribute type 10 has an invalid length.
[  178.319056][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'.
[  178.430890][ T8575] hsr0: entered promiscuous mode
[  178.438092][ T8575] hsr0: entered allmulticast mode
[  178.449714][ T8575] hsr_slave_0: entered allmulticast mode
[  178.479149][ T8575] hsr_slave_1: entered allmulticast mode
[  178.580758][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'.
[  178.608658][ T8580] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  178.940144][ T8597] netlink: 68 bytes leftover after parsing attributes in process `syz.2.774'.
[  178.969085][ T8600] lo speed is unknown, defaulting to 1000
[  178.988417][ T8600] lo speed is unknown, defaulting to 1000
[  179.104043][ T8600] lo speed is unknown, defaulting to 1000
[  179.168604][ T8610] team0: Port device virt_wifi0 added
[  179.736517][ T8620] xt_CT: No such helper "snmp"
[  179.868050][ T8624] x_tables: duplicate entry at hook 2
[  179.952685][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'.
[  179.962028][ T8629] tipc: Invalid UDP bearer configuration
[  179.962083][ T8629] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  180.426811][ T8600] infiniband syz0: set active
[  180.431580][ T8600] infiniband syz0: added lo
[  180.451222][ T8600] syz0: rxe_create_cq: returned err = -12
[  180.458148][ T8600] infiniband syz0: Couldn't create ib_mad CQ
[  180.465027][ T8600] infiniband syz0: Couldn't open port 1
[  180.471525][   T24] lo speed is unknown, defaulting to 1000
[  180.531756][ T8600] RDS/IB: syz0: added
[  180.545656][ T8600] smc: adding ib device syz0 with port count 1
[  180.562290][ T8600] smc:    ib device syz0 port 1 has pnetid 
[  180.588590][   T24] lo speed is unknown, defaulting to 1000
[  180.612634][ T8600] lo speed is unknown, defaulting to 1000
[  180.895088][ T8652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.786'.
[  181.146378][ T8600] lo speed is unknown, defaulting to 1000
[  181.219525][ T8658] netlink: 'syz.2.788': attribute type 11 has an invalid length.
[  181.229373][ T8658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.788'.
[  181.477292][ T8600] lo speed is unknown, defaulting to 1000
[  181.652487][ T8600] lo speed is unknown, defaulting to 1000
[  181.831891][ T8600] lo speed is unknown, defaulting to 1000
[  182.012000][ T8600] lo speed is unknown, defaulting to 1000
[  182.269702][ T8600] lo speed is unknown, defaulting to 1000
[  182.308300][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.790'.
[  182.377284][ T8665] netlink: 68 bytes leftover after parsing attributes in process `syz.2.791'.
[  182.587000][ T8600] lo speed is unknown, defaulting to 1000
[  182.893091][ T8600] lo speed is unknown, defaulting to 1000
[  182.942676][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'.
[  182.958235][ T8670] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  183.060126][ T8672] sctp: [Deprecated]: syz.2.793 (pid 8672) Use of int in maxseg socket option.
[  183.060126][ T8672] Use struct sctp_assoc_value instead
[  184.220733][ T8700] 8021q: VLANs not supported on caif0
[  184.400367][ T8706] FAULT_INJECTION: forcing a failure.
[  184.400367][ T8706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.429433][ T8706] CPU: 1 UID: 0 PID: 8706 Comm: syz.2.799 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  184.429467][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  184.429479][ T8706] Call Trace:
[  184.429487][ T8706]  <TASK>
[  184.429496][ T8706]  dump_stack_lvl+0x241/0x360
[  184.429535][ T8706]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.429565][ T8706]  ? __pfx__printk+0x10/0x10
[  184.429609][ T8706]  should_fail_ex+0x424/0x570
[  184.429648][ T8706]  _copy_from_iter+0x211/0x1c70
[  184.429681][ T8706]  ? __build_skb_around+0x247/0x3d0
[  184.429716][ T8706]  ? __alloc_skb+0x298/0x480
[  184.429745][ T8706]  ? __pfx__copy_from_iter+0x10/0x10
[  184.429773][ T8706]  ? __pfx___alloc_skb+0x10/0x10
[  184.429806][ T8706]  ? skb_put+0x114/0x1f0
[  184.429858][ T8706]  netlink_sendmsg+0x73c/0xcd0
[  184.429901][ T8706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.429932][ T8706]  ? aa_sock_msg_perm+0x91/0x160
[  184.429967][ T8706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.429991][ T8706]  __sock_sendmsg+0x221/0x270
[  184.430021][ T8706]  ____sys_sendmsg+0x523/0x860
[  184.430051][ T8706]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.430069][ T8706]  ? __fget_files+0x2a/0x420
[  184.430092][ T8706]  ? __fget_files+0x2a/0x420
[  184.430122][ T8706]  __sys_sendmsg+0x271/0x360
[  184.430147][ T8706]  ? __pfx___sys_sendmsg+0x10/0x10
[  184.430227][ T8706]  ? do_syscall_64+0xb6/0x230
[  184.430252][ T8706]  do_syscall_64+0xf3/0x230
[  184.430274][ T8706]  ? clear_bhb_loop+0x45/0xa0
[  184.430299][ T8706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.430319][ T8706] RIP: 0033:0x7fd05bd8d169
[  184.430337][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.430354][ T8706] RSP: 002b:00007fd05cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.430375][ T8706] RAX: ffffffffffffffda RBX: 00007fd05bfa5fa0 RCX: 00007fd05bd8d169
[  184.430390][ T8706] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  184.430403][ T8706] RBP: 00007fd05cbff090 R08: 0000000000000000 R09: 0000000000000000
[  184.430415][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.430426][ T8706] R13: 0000000000000000 R14: 00007fd05bfa5fa0 R15: 00007ffe14f969a8
[  184.430459][ T8706]  </TASK>
[  184.871656][ T8717] netlink: 68 bytes leftover after parsing attributes in process `syz.2.802'.
[  185.075271][ T8726] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  185.761703][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'.
[  186.241185][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  186.523178][ T8767] netlink: 72 bytes leftover after parsing attributes in process `syz.0.808'.
[  186.629755][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'.
[  186.638952][ T8771] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  186.654311][ T8771] netlink: 'syz.1.810': attribute type 2 has an invalid length.
[  186.804525][ T8764] lo speed is unknown, defaulting to 1000
[  186.832291][ T8776] FAULT_INJECTION: forcing a failure.
[  186.832291][ T8776] name failslab, interval 1, probability 0, space 0, times 0
[  186.854926][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.812 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  186.854957][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  186.854971][ T8776] Call Trace:
[  186.854979][ T8776]  <TASK>
[  186.854988][ T8776]  dump_stack_lvl+0x241/0x360
[  186.855026][ T8776]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.855054][ T8776]  ? __pfx__printk+0x10/0x10
[  186.855088][ T8776]  ? __pfx___might_resched+0x10/0x10
[  186.855119][ T8776]  should_fail_ex+0x424/0x570
[  186.855156][ T8776]  should_failslab+0xac/0x100
[  186.855187][ T8776]  kmem_cache_alloc_noprof+0x78/0x390
[  186.855215][ T8776]  ? skb_clone+0x20c/0x390
[  186.855241][ T8776]  skb_clone+0x20c/0x390
[  186.855266][ T8776]  nfnetlink_rcv+0x52b/0x28f0
[  186.855297][ T8776]  ? __kernel_text_address+0xd/0x40
[  186.855319][ T8776]  ? arch_stack_walk+0xff/0x150
[  186.855361][ T8776]  ? stack_trace_save+0x11a/0x1d0
[  186.855393][ T8776]  ? __pfx_stack_trace_save+0x10/0x10
[  186.855425][ T8776]  ? stack_depot_save_flags+0x44/0x940
[  186.855448][ T8776]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  186.855496][ T8776]  ? __lock_acquire+0xad5/0xd80
[  186.855544][ T8776]  ? __lock_acquire+0xad5/0xd80
[  186.855584][ T8776]  ? netlink_deliver_tap+0x2e/0x1b0
[  186.855613][ T8776]  ? netlink_deliver_tap+0x2e/0x1b0
[  186.855640][ T8776]  netlink_unicast+0x7f8/0x9a0
[  186.855673][ T8776]  ? __pfx_netlink_unicast+0x10/0x10
[  186.855706][ T8776]  ? skb_put+0x114/0x1f0
[  186.855742][ T8776]  netlink_sendmsg+0x8c3/0xcd0
[  186.855783][ T8776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.855814][ T8776]  ? aa_sock_msg_perm+0x91/0x160
[  186.855849][ T8776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.855872][ T8776]  __sock_sendmsg+0x221/0x270
[  186.855900][ T8776]  ____sys_sendmsg+0x523/0x860
[  186.855929][ T8776]  ? __pfx_____sys_sendmsg+0x10/0x10
[  186.855947][ T8776]  ? __fget_files+0x2a/0x420
[  186.855970][ T8776]  ? __fget_files+0x2a/0x420
[  186.855998][ T8776]  __sys_sendmsg+0x271/0x360
[  186.856023][ T8776]  ? __pfx___sys_sendmsg+0x10/0x10
[  186.856101][ T8776]  ? do_syscall_64+0xb6/0x230
[  186.856126][ T8776]  do_syscall_64+0xf3/0x230
[  186.856148][ T8776]  ? clear_bhb_loop+0x45/0xa0
[  186.856173][ T8776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.856192][ T8776] RIP: 0033:0x7fec4e58d169
[  186.856211][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.856228][ T8776] RSP: 002b:00007fec4f447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.856250][ T8776] RAX: ffffffffffffffda RBX: 00007fec4e7a5fa0 RCX: 00007fec4e58d169
[  186.856265][ T8776] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  186.856278][ T8776] RBP: 00007fec4f447090 R08: 0000000000000000 R09: 0000000000000000
[  186.856290][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.856302][ T8776] R13: 0000000000000000 R14: 00007fec4e7a5fa0 R15: 00007ffc1e5bab58
[  186.856335][ T8776]  </TASK>
[  187.538301][ T8795] vlan3: entered promiscuous mode
[  187.547111][ T8795] hsr_slave_1: entered promiscuous mode
[  187.560018][ T8795] vlan3: entered allmulticast mode
[  187.566107][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'.
[  187.580175][ T8795] hsr_slave_1: entered allmulticast mode
[  187.634603][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  187.684476][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  187.719465][ T8791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  187.959531][ T8810] netlink: 800 bytes leftover after parsing attributes in process `syz.3.821'.
[  187.969474][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'.
[  188.001735][ T8810] vxcan2: entered promiscuous mode
[  188.816856][ T8846] netlink: 'syz.3.829': attribute type 4 has an invalid length.
[  189.002269][ T8859] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  189.017662][ T8859] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  191.181693][ T8891] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  191.388419][ T8901] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  191.412412][ T8899] __nla_validate_parse: 7 callbacks suppressed
[  191.412432][ T8899] netlink: 3 bytes leftover after parsing attributes in process `syz.0.843'.
[  191.470392][ T8907] netlink: 3 bytes leftover after parsing attributes in process `syz.0.843'.
[  191.487923][ T8901] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  191.518869][ T8899] batadv2: entered promiscuous mode
[  191.527398][ T8899] batadv2: entered allmulticast mode
[  191.565124][ T8905] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  191.587320][ T8905] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  191.614671][ T8907] batadv2: entered promiscuous mode
[  191.638993][ T8907] batadv2: entered allmulticast mode
[  191.701365][ T8920] netlink: 'syz.1.849': attribute type 21 has an invalid length.
[  191.877853][ T8921] SET target dimension over the limit!
[  192.475427][ T8925] lo speed is unknown, defaulting to 1000
[  192.816583][ T8950] netlink: 'syz.4.858': attribute type 1 has an invalid length.
[  192.989501][ T8950] bond1: entered promiscuous mode
[  193.022211][ T8950] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.091154][ T8954] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.107430][ T8954] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  193.129277][ T8954] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  193.149812][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'.
[  193.168606][ T8954] bond1: (slave ip6gre1): making interface the new active one
[  193.181218][ T8954] ip6gre1: entered promiscuous mode
[  193.214659][ T8954] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  193.544793][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  193.581424][ T8928] lo speed is unknown, defaulting to 1000
[  194.089151][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.870'.
[  194.730671][ T9007] netlink: 'syz.3.874': attribute type 13 has an invalid length.
[  195.102592][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.111259][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.215014][ T9019] netlink: 'syz.4.876': attribute type 1 has an invalid length.
[  195.242149][ T9019] NCSI netlink: No device for ifindex 0
[  195.490520][ T9007] tipc: Resetting bearer <eth:veth0_to_batadv>
[  195.523865][ T9007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.546562][ T8999] netlink: 3 bytes leftover after parsing attributes in process `syz.1.871'.
[  195.572303][ T9007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.680920][ T9007] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.702986][ T9007] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.712322][ T9007] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.734881][ T9007] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.740497][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'.
[  195.797457][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.878'.
[  195.978908][ T9034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  195.981686][ T8997] lo speed is unknown, defaulting to 1000
[  196.243536][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.885'.
[  197.176878][ T9085] ip6erspan0: tun_chr_ioctl cmd 1074025677
[  197.188533][ T9085] ip6erspan0: linktype set to 768
[  197.262347][ T9082] x_tables: duplicate underflow at hook 2
[  197.391020][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'.
[  197.482595][ T9090] netlink: 56 bytes leftover after parsing attributes in process `syz.2.897'.
[  197.647019][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'.
[  197.809296][ T9109] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  197.898795][ T9108] x_tables: duplicate underflow at hook 3
[  198.472120][ T9101] lo speed is unknown, defaulting to 1000
[  199.418995][ T9190] batman_adv: batadv0: Adding interface: ipvlan2
[  199.438906][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'.
[  199.453014][ T9190] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.520198][ T9190] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  199.642083][ T9200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.928'.
[  199.659235][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  199.673212][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  199.957503][ T9213] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  200.028509][ T9214] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  200.118253][ T9218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.935'.
[  200.351555][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'.
[  200.526887][ T9225] vlan1: entered promiscuous mode
[  200.531994][ T9225] syz_tun: entered promiscuous mode
[  201.249157][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'.
[  201.357194][   T24] IPVS: starting estimator thread 0...
[  201.359105][ T9252] xt_CT: No such helper "pptp"
[  201.463237][ T9255] IPVS: using max 24 ests per chain, 57600 per kthread
[  201.537366][ T9260] tipc: New replicast peer: 255.255.255.255
[  201.550493][ T9260] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.558764][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'.
[  201.594612][ T9260] tipc: Disabling bearer <udp:syz2>
[  201.681187][ T9220] lo speed is unknown, defaulting to 1000
[  201.718089][ T9267] netlink: 'syz.0.949': attribute type 1 has an invalid length.
[  201.730126][ T9267] netlink: 3 bytes leftover after parsing attributes in process `syz.0.949'.
[  201.764297][ T9267] batadv2: entered promiscuous mode
[  201.775608][ T9267] batadv2: entered allmulticast mode
[  202.029101][ T9270] netlink: 'syz.0.951': attribute type 2 has an invalid length.
[  202.187209][ T9272] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  202.330938][ T9266] lo speed is unknown, defaulting to 1000
[  202.696232][ T9282] netlink: 68 bytes leftover after parsing attributes in process `syz.0.956'.
[  203.167381][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'.
[  204.271945][ T9338] x_tables: duplicate underflow at hook 2
[  205.081598][ T9385] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  205.387024][ T9397] trusted_key: syz.2.986 sent an empty control message without MSG_MORE.
[  206.107486][ T9418] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  206.480470][ T9440] netlink: 'syz.3.997': attribute type 3 has an invalid length.
[  206.495604][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'.
[  206.840570][ T9449] netlink: 'syz.2.999': attribute type 10 has an invalid length.
[  206.909985][ T9465] netlink: 'syz.3.1003': attribute type 1 has an invalid length.
[  206.926220][ T9465] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1003'.
[  207.327198][ T9477] IPVS: Scheduler module ip_vs_sip not found
[  207.596560][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'.
[  207.619531][ T9469] lo speed is unknown, defaulting to 1000
[  207.934115][ T9501] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  208.573566][ T9490] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1012'.
[  208.709123][ T9529] x_tables: duplicate underflow at hook 2
[  208.856249][ T9531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.880685][ T9531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.919046][ T9531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.938118][ T9531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.110339][ T9532] IPv6: syztnl1: Disabled Multicast RS
[  209.542233][ T9520] lo speed is unknown, defaulting to 1000
[  209.726878][ T9552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.943805][ T9552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.998840][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'.
[  210.029516][ T9566] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  210.071590][ T9552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.377750][ T9552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.552458][ T9525] lo speed is unknown, defaulting to 1000
[  210.908306][ T9552] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.929024][ T9552] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.956157][ T9552] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.975963][ T9552] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.342201][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'.
[  211.354252][ T9583] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  211.431570][ T9583] IPVS: stopping master sync thread 8558 ...
[  211.531078][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  211.547174][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'.
[  211.604347][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'.
[  211.643313][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  211.723351][ T9588] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1039'.
[  211.756196][ T9585] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1039'.
[  211.780008][ T9588] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  211.849635][ T9600] x_tables: duplicate underflow at hook 1
[  211.974758][ T5855] Bluetooth: hci3: command 0x0406 tx timeout
[  211.981042][ T5150] Bluetooth: hci1: command 0x0406 tx timeout
[  211.981094][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  212.227720][ T9607] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  212.326998][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'.
[  212.348748][ T9616] netlink: 'syz.3.1044': attribute type 21 has an invalid length.
[  212.693088][ T9630] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  213.273228][ T5842] tipc: Resetting bearer <eth:syz_tun>
[  213.328663][ T5842] tipc: Disabling bearer <eth:syz_tun>
[  213.362575][ T9651] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  213.585398][ T6283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.696694][ T6283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.839193][ T9661] __nla_validate_parse: 1 callbacks suppressed
[  213.839214][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  213.863789][ T6283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.989152][ T6283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.439894][ T9686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.480984][ T9686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.527019][ T9686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.592656][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.602222][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.610229][ T9686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.611873][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.634422][ T9686] geneve2: entered promiscuous mode
[  214.645833][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.655512][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.686696][ T9687] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  214.833243][ T6283] bridge_slave_1: left allmulticast mode
[  214.839315][ T6283] bridge_slave_1: left promiscuous mode
[  214.855584][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.891723][ T6283] bridge_slave_0: left allmulticast mode
[  214.900768][ T6283] bridge_slave_0: left promiscuous mode
[  214.915481][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.968141][ T9702] netlink: 'syz.4.1075': attribute type 1 has an invalid length.
[  215.563925][ T6283] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  215.983656][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.992614][ T6283] bond_slave_0: left allmulticast mode
[  216.005013][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.017130][ T6283] bond_slave_1: left allmulticast mode
[  216.026348][ T6283] bond0 (unregistering): Released all slaves
[  216.044612][ T6283] bond1 (unregistering): Released all slaves
[  216.060551][ T6283] bond2 (unregistering): Released all slaves
[  216.089380][ T9702] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  216.223079][ T6283] tipc: Disabling bearer <udp:syz1>
[  216.302864][ T6283] tipc: Left network mode
[  216.570989][ T9690] lo speed is unknown, defaulting to 1000
[  216.693803][ T5843] Bluetooth: hci2: command tx timeout
[  218.558373][ T9699] lo speed is unknown, defaulting to 1000
[  218.725159][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'.
[  218.778365][ T5843] Bluetooth: hci2: command tx timeout
[  218.837444][ T9747] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  219.109131][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'.
[  219.482361][ T9734] lo speed is unknown, defaulting to 1000
[  219.649344][ T9690] chnl_net:caif_netlink_parms(): no params data found
[  219.684259][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1090'.
[  219.708637][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1090'.
[  220.006183][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.030404][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.043920][ T9690] bridge_slave_0: entered allmulticast mode
[  220.062138][ T9690] bridge_slave_0: entered promiscuous mode
[  220.091410][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.105633][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.113419][ T9690] bridge_slave_1: entered allmulticast mode
[  220.135089][ T9690] bridge_slave_1: entered promiscuous mode
[  220.698540][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.726299][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.792472][ T6283] hsr_slave_0: left promiscuous mode
[  220.804320][ T6283] hsr_slave_1: left promiscuous mode
[  220.811225][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.820646][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.829222][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.836855][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.853077][ T5843] Bluetooth: hci2: command tx timeout
[  220.866373][ T6283] veth1_macvtap: left promiscuous mode
[  220.872248][ T6283] veth0_macvtap: left promiscuous mode
[  220.878886][ T6283] veth1_vlan: left promiscuous mode
[  220.885480][ T6283] veth0_vlan: left promiscuous mode
[  221.610693][ T6283] team0 (unregistering): Port device team_slave_1 removed
[  221.661560][ T6283] team0 (unregistering): Port device team_slave_0 removed
[  222.128548][ T9792] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  222.252411][ T9690] team0: Port device team_slave_0 added
[  222.294098][ T9690] team0: Port device team_slave_1 added
[  222.602956][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.609960][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.707754][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.735251][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.742256][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.852955][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.933315][ T5843] Bluetooth: hci2: command tx timeout
[  223.057517][ T9690] hsr_slave_0: entered promiscuous mode
[  223.076391][ T9690] hsr_slave_1: entered promiscuous mode
[  223.304553][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'.
[  223.358578][ T9830] delete_channel: no stack
[  223.581606][ T9841] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1106'.
[  224.005779][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'.
[  224.081751][ T9836] lo speed is unknown, defaulting to 1000
[  224.207396][ T9865] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.216202][ T9865] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.224748][ T9865] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.233053][ T9865] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.417190][ T9690] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  224.493563][ T9690] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  224.532157][ T9690] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  224.577861][ T9690] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  224.811441][ T9885] ieee802154 phy0 wpan0: encryption failed: -22
[  224.835345][ T9890] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1124'.
[  224.863479][ T9887] netlink: 'syz.2.1123': attribute type 12 has an invalid length.
[  224.871354][ T9887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1123'.
[  224.998873][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.013268][ T5843] Bluetooth: hci2: command tx timeout
[  225.120279][ T9690] 8021q: adding VLAN 0 to HW filter on device team0
[  225.196687][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.203943][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.296522][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.303870][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.655500][ T9912] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1130'.
[  225.694415][ T9912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1130'.
[  225.907264][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.326257][ T9929] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  226.544078][ T9935] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1136'.
[  226.578193][ T9690] veth0_vlan: entered promiscuous mode
[  226.591324][ T9935] batadv_slave_1: entered promiscuous mode
[  226.602295][ T9904] lo speed is unknown, defaulting to 1000
[  226.626335][ T9690] veth1_vlan: entered promiscuous mode
[  226.740928][ T9690] veth0_macvtap: entered promiscuous mode
[  226.785318][ T9690] veth1_macvtap: entered promiscuous mode
[  226.824410][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.846898][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.876849][ T9690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.898933][ T9690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.907962][ T9690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.917116][ T9690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.939161][ T9949] vlan4: entered allmulticast mode
[  226.945086][ T9949] bridge_slave_0: entered allmulticast mode
[  227.171465][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.190721][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.264597][ T6270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.281906][ T6270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.360154][ T9960] xt_hashlimit: overflow, try lower: 9/0
[  227.967378][ T9985] netlink: 'syz.5.1150': attribute type 1 has an invalid length.
[  227.989996][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'.
[  228.043764][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'.
[  228.059161][ T9989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1151'.
[  228.193802][ T9982] netlink: 'syz.4.1151': attribute type 10 has an invalid length.
[  228.339232][ T9989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  228.359207][ T9989] gretap1: entered promiscuous mode
[  228.393019][ T9982] macvlan0: entered allmulticast mode
[  228.547240][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'.
[  228.648711][T10009] netlink: 'syz.4.1156': attribute type 1 has an invalid length.
[  228.723390][T10009] bond2: entered promiscuous mode
[  228.728923][T10009] 8021q: adding VLAN 0 to HW filter on device bond2
[  229.192231][T10029] dvmrp0: entered allmulticast mode
[  229.211966][T10026] IPv6: NLM_F_CREATE should be specified when creating new route
[  229.227378][T10026] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1161'.
[  229.515198][T10049] Cannot find del_set index 1 as target
[  229.538980][T10048] batadv1: entered promiscuous mode
[  229.569794][T10048] batadv1: entered allmulticast mode
[  229.799843][T10053] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  229.988535][T10066] netlink: 'syz.5.1171': attribute type 33 has an invalid length.
[  230.017465][T10066] __nla_validate_parse: 3 callbacks suppressed
[  230.017488][T10066] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1171'.
[  230.106968][T10040] lo speed is unknown, defaulting to 1000
[  230.127722][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  230.142977][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.443714][T10082] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  230.589662][T10076] siw: device registration error -23
[  230.617698][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.661433][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.702844][T10090] syz.3.1178 uses old SIOCAX25GETINFO
[  230.718447][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.757532][T10092] veth2: entered promiscuous mode
[  230.763060][T10092] veth2: entered allmulticast mode
[  230.790809][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.803180][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.818800][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  231.004547][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'.
[  231.534537][T10130] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  231.626976][T10134] x_tables: duplicate underflow at hook 1
[  231.735740][T10132] syz.5.1190: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  231.755421][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.5.1190 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  231.755452][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  231.755464][T10132] Call Trace:
[  231.755472][T10132]  <TASK>
[  231.755480][T10132]  dump_stack_lvl+0x241/0x360
[  231.755519][T10132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.755548][T10132]  ? __pfx__printk+0x10/0x10
[  231.755574][T10132]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  231.755605][T10132]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  231.755633][T10132]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  231.755665][T10132]  warn_alloc+0x27c/0x410
[  231.755693][T10132]  ? __pfx_warn_alloc+0x10/0x10
[  231.755722][T10132]  ? xskq_create+0xb6/0x170
[  231.755753][T10132]  ? __get_vm_area_node+0x1c8/0x2d0
[  231.755783][T10132]  ? __get_vm_area_node+0x25c/0x2d0
[  231.755822][T10132]  __vmalloc_node_range_noprof+0x634/0x1390
[  231.755874][T10132]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  231.755898][T10132]  ? __kasan_kmalloc+0x9d/0xb0
[  231.755930][T10132]  vmalloc_user_noprof+0x74/0x80
[  231.755950][T10132]  ? xskq_create+0xb6/0x170
[  231.755979][T10132]  xskq_create+0xb6/0x170
[  231.756012][T10132]  xsk_init_queue+0xa1/0x100
[  231.756045][T10132]  xsk_setsockopt+0x4f9/0x840
[  231.756076][T10132]  ? __pfx_xsk_setsockopt+0x10/0x10
[  231.756105][T10132]  ? __pfx_aa_sk_perm+0x10/0x10
[  231.756136][T10132]  ? aa_sock_opt_perm+0x79/0x120
[  231.756170][T10132]  ? __pfx_xsk_setsockopt+0x10/0x10
[  231.756205][T10132]  do_sock_setsockopt+0x3b1/0x710
[  231.756244][T10132]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  231.756272][T10132]  ? __fget_files+0x2a/0x420
[  231.756296][T10132]  ? __fget_files+0x39d/0x420
[  231.756314][T10132]  ? __fget_files+0x2a/0x420
[  231.756342][T10132]  __x64_sys_setsockopt+0x1ee/0x280
[  231.756382][T10132]  do_syscall_64+0xf3/0x230
[  231.756403][T10132]  ? clear_bhb_loop+0x45/0xa0
[  231.756428][T10132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.756449][T10132] RIP: 0033:0x7f0822b8d169
[  231.756467][T10132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.756485][T10132] RSP: 002b:00007f0823a3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  231.756508][T10132] RAX: ffffffffffffffda RBX: 00007f0822da5fa0 RCX: 00007f0822b8d169
[  231.756523][T10132] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  231.756536][T10132] RBP: 00007f0822c0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  231.756548][T10132] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  231.756561][T10132] R13: 0000000000000000 R14: 00007f0822da5fa0 R15: 00007ffe2bd77f18
[  231.756594][T10132]  </TASK>
[  231.756603][T10132] Mem-Info:
[  232.037589][T10132] active_anon:4720 inactive_anon:0 isolated_anon:0
[  232.037589][T10132]  active_file:1541 inactive_file:38362 isolated_file:0
[  232.037589][T10132]  unevictable:768 dirty:44 writeback:0
[  232.037589][T10132]  slab_reclaimable:10820 slab_unreclaimable:116385
[  232.037589][T10132]  mapped:28659 shmem:1434 pagetables:785
[  232.037589][T10132]  sec_pagetables:0 bounce:0
[  232.037589][T10132]  kernel_misc_reclaimable:0
[  232.037589][T10132]  free:1324979 free_pcp:337 free_cma:0
[  232.129575][T10132] Node 0 active_anon:18880kB inactive_anon:0kB active_file:6164kB inactive_file:153376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114636kB dirty:172kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11204kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.222555][T10132] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.263664][T10132] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.308677][T10132] lowmem_reserve[]: 0 2487 2487 2487 2487
[  232.343569][T10132] Node 0 DMA32 free:1377204kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21220kB inactive_anon:0kB active_file:6164kB inactive_file:153280kB unevictable:1536kB writepending:176kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:1636kB local_pcp:1124kB free_cma:0kB
[  232.401423][T10132] lowmem_reserve[]: 0 0 0 0 0
[  232.418464][T10132] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  232.466957][T10132] lowmem_reserve[]: 0 0 0 0 0
[  232.479473][T10132] Node 1 Normal free:3904720kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[  232.582992][T10132] lowmem_reserve[]: 0 0 0 0 0
[  232.587836][T10132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  232.622218][T10132] Node 0 DMA32: 2*4kB (UM) 104*8kB (UE) 39*16kB (UME) 277*32kB (UME) 472*64kB (UME) 145*128kB (UM) 82*256kB (UM) 51*512kB (UME) 28*1024kB (UM) 6*2048kB (UM) 300*4096kB (UM) = 1375960kB
[  232.623466][T10150] vlan1: entered promiscuous mode
[  232.643134][T10132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  232.666345][T10132] Node 1 Normal: 228*4kB (UME) 44*8kB (UME) 30*16kB (UME) 188*32kB (UME) 90*64kB (UME) 34*128kB (UME) 17*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3904720kB
[  232.693518][T10132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  232.703909][T10132] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.714145][T10132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  232.730867][T10132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.769455][T10132] 41336 total pagecache pages
[  232.780988][T10132] 0 pages in swap cache
[  232.785368][T10132] Free swap  = 124996kB
[  232.789572][T10132] Total swap = 124996kB
[  232.800367][T10132] 2097051 pages RAM
[  232.823841][T10132] 0 pages HighMem/MovableOnly
[  232.828708][T10132] 428567 pages reserved
[  232.838554][T10132] 0 pages cma reserved
[  233.039215][T10173] x_tables: duplicate underflow at hook 2
[  233.050445][T10153] netlink: 'syz.3.1197': attribute type 29 has an invalid length.
[  233.059278][T10153] netlink: 'syz.3.1197': attribute type 29 has an invalid length.
[  233.070066][T10153] netlink: 'syz.3.1197': attribute type 10 has an invalid length.
[  233.290579][   T30] audit: type=1107 audit(1743736152.776:3): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"Ã…¢_´†½¤a'1’éÊÛô¡·#ອbø­5à„vÍ„ˆŸ5£ÂJ«zEw­'
[  233.341623][T10187] netlink: 'syz.4.1208': attribute type 39 has an invalid length.
[  233.676904][   T30] audit: type=1804 audit(1743736153.166:4): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1210" name="/newroot/254/cgroup.controllers" dev="tmpfs" ino=1315 res=1 errno=0
[  233.751089][   T30] audit: type=1800 audit(1743736153.196:5): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1210" name="cgroup.controllers" dev="tmpfs" ino=1315 res=0 errno=0
[  233.848716][T10200] x_tables: duplicate underflow at hook 1
[  233.874267][T10200] x_tables: duplicate underflow at hook 1
[  234.060027][T10208] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  234.651461][T10194] lo speed is unknown, defaulting to 1000
[  234.671533][T10257] erspan1: entered promiscuous mode
[  234.682285][T10257] erspan1: entered allmulticast mode
[  234.913563][T10267] netlink: 'syz.3.1227': attribute type 10 has an invalid length.
[  234.926858][T10267] 8021q: adding VLAN 0 to HW filter on device team0
[  234.948393][T10267] bond0: (slave team0): Enslaving as an active interface with an up link
[  235.244257][T10271] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  235.325939][T10278] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  235.501534][T10283] __nla_validate_parse: 7 callbacks suppressed
[  235.501557][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'.
[  235.549133][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'.
[  235.636321][T10289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'.
[  235.739907][T10291] netlink: 78 bytes leftover after parsing attributes in process `syz.1.1233'.
[  235.777812][T10291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  235.806156][T10293] bond0: entered promiscuous mode
[  235.811270][T10293] bond_slave_0: entered promiscuous mode
[  235.820166][T10293] bond_slave_1: entered promiscuous mode
[  235.843229][T10293] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  235.859984][T10293] team0: entered promiscuous mode
[  235.873025][T10293] team_slave_0: entered promiscuous mode
[  235.889620][T10293] team_slave_1: entered promiscuous mode
[  235.903126][T10293] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  235.978924][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'.
[  236.089870][T10302] bond3: left allmulticast mode
[  236.122961][T10302] bond3: left promiscuous mode
[  236.129379][T10302] bridge0: port 3(bond3) entered disabled state
[  236.160649][T10302] bridge_slave_1: left allmulticast mode
[  236.193085][T10302] bridge_slave_1: left promiscuous mode
[  236.198949][T10302] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.258559][T10302] bridge_slave_0: left allmulticast mode
[  236.277330][T10302] bridge_slave_0: left promiscuous mode
[  236.318012][T10302] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.628341][T10316] IPVS: set_ctl: invalid protocol: 43 172.20.20.15:20001
[  236.777601][T10319] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  237.184764][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'.
[  237.685245][T10354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1252'.
[  237.810802][T10367] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  238.020567][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1260'.
[  238.057564][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1260'.
[  238.235373][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  238.593901][   T48] IPVS: starting estimator thread 0...
[  238.618683][T10406] bond0: left promiscuous mode
[  238.628840][T10406] bond_slave_0: left promiscuous mode
[  238.644511][T10406] bond_slave_1: left promiscuous mode
[  238.650856][T10406] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  238.671540][T10406] team0: left promiscuous mode
[  238.707241][T10406] team_slave_0: left promiscuous mode
[  238.734975][T10406] team_slave_1: left promiscuous mode
[  238.755432][T10406] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  238.803548][T10411] IPVS: using max 27 ests per chain, 64800 per kthread
[  238.872435][T10406] bond2: left promiscuous mode
[  238.923413][T10406] bond2: left allmulticast mode
[  238.955230][T10406] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.979521][T10406] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.988449][T10406] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.003155][T10406] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.061270][T10406] veth2: left promiscuous mode
[  239.097152][T10406] veth2: left allmulticast mode
[  240.010302][T10399] lo speed is unknown, defaulting to 1000
[  240.450280][T10457] netlink: 'syz.4.1279': attribute type 10 has an invalid length.
[  240.629522][T10457] veth0_vlan: left promiscuous mode
[  240.635589][T10459] __nla_validate_parse: 2 callbacks suppressed
[  240.635608][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'.
[  240.676870][T10457] veth0_vlan: entered promiscuous mode
[  240.715803][T10457] team0: Device veth0_vlan failed to register rx_handler
[  240.891523][T10403] lo speed is unknown, defaulting to 1000
[  240.999731][T10467] x_tables: duplicate underflow at hook 2
[  241.561049][T10454] lo speed is unknown, defaulting to 1000
[  242.442876][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'.
[  243.770962][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'.
[  243.812047][T10517] sctp: [Deprecated]: syz.1.1298 (pid 10517) Use of int in max_burst socket option.
[  243.812047][T10517] Use struct sctp_assoc_value instead
[  243.845692][T10521] xt_TPROXY: Can be used only with -p tcp or -p udp
[  244.031028][T10527] tipc: Bearer <udp:sre0>: already 2 bearers with priority 10
[  244.072911][T10527] tipc: Bearer <udp:sre0>: trying with adjusted priority
[  244.080280][T10527] tipc: Enabling of bearer <udp:sre0> rejected, max 3 bearers permitted
[  244.378405][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'.
[  244.433753][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.447001][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.455804][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.462732][T10505] lo speed is unknown, defaulting to 1000
[  244.474977][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.487794][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.405948][T10568] netlink: 'syz.2.1311': attribute type 1 has an invalid length.
[  245.442962][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1311'.
[  245.651269][T10549] lo speed is unknown, defaulting to 1000
[  245.706108][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1312'.
[  245.736329][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  245.912447][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'.
[  246.208342][T10586] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  246.221908][T10586] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1316'.
[  246.231406][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1316'.
[  246.533147][ T5840] Bluetooth: hci0: command tx timeout
[  246.851123][T10549] chnl_net:caif_netlink_parms(): no params data found
[  247.404820][T10599] lo speed is unknown, defaulting to 1000
[  247.417051][T10549] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.438184][T10549] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.448727][T10549] bridge_slave_0: entered allmulticast mode
[  247.461235][T10549] bridge_slave_0: entered promiscuous mode
[  247.478469][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'.
[  247.482066][T10549] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.501425][T10549] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.549834][T10549] bridge_slave_1: entered allmulticast mode
[  247.575306][T10549] bridge_slave_1: entered promiscuous mode
[  247.905815][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.949317][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.208668][T10549] team0: Port device team_slave_0 added
[  248.252182][T10549] team0: Port device team_slave_1 added
[  248.447071][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'.
[  248.455390][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.463125][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.493164][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1326'.
[  248.503204][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.616984][ T5840] Bluetooth: hci0: command tx timeout
[  248.637827][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.657219][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.707715][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.789879][T10665] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.994010][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'.
[  249.150647][T10672] vlan1: entered promiscuous mode
[  249.167522][T10672] vlan1: entered allmulticast mode
[  249.178328][T10672] hsr_slave_1: entered allmulticast mode
[  249.186158][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'.
[  249.284509][T10549] hsr_slave_0: entered promiscuous mode
[  249.311558][T10549] hsr_slave_1: entered promiscuous mode
[  249.325821][T10549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.329420][T10684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1335'.
[  249.343022][T10549] Cannot create hsr debugfs directory
[  249.637463][T10693] vlan2: entered promiscuous mode
[  249.867725][T10549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.095022][T10549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.296479][T10549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.368112][T10718] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  250.446971][T10549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.499223][T10720] netlink: 'syz.1.1346': attribute type 29 has an invalid length.
[  250.628481][T10729] netlink: 'syz.3.1348': attribute type 2 has an invalid length.
[  250.694706][ T5840] Bluetooth: hci0: command tx timeout
[  250.766244][T10734] RDS: rds_bind could not find a transport for ::ffff:172.20.20.53, load rds_tcp or rds_rdma?
[  250.789006][T10549] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  250.815803][T10549] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  250.827642][T10734] netlink: 'syz.2.1350': attribute type 1 has an invalid length.
[  250.847356][T10735] __nla_validate_parse: 6 callbacks suppressed
[  250.847378][T10735] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1350'.
[  250.864814][T10549] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  250.889856][T10742] netlink: 'syz.3.1352': attribute type 15 has an invalid length.
[  250.921290][T10738] bridge_slave_0: left allmulticast mode
[  250.942409][T10738] bridge_slave_0: left promiscuous mode
[  250.967281][T10738] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.999303][T10738] bridge_slave_1: left allmulticast mode
[  251.005359][T10738] bridge_slave_1: left promiscuous mode
[  251.011269][T10738] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.049363][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1354'.
[  251.062665][T10738] bond0: (slave bond_slave_0): Releasing backup interface
[  251.114390][T10738] bond0: (slave bond_slave_1): Releasing backup interface
[  251.167127][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'.
[  251.209531][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'.
[  251.223746][T10738] team0: Port device team_slave_0 removed
[  251.248040][T10738] team0: Port device team_slave_1 removed
[  251.255628][T10738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.263990][T10738] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.274543][T10738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.290339][T10738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.352010][T10549] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  251.769553][T10549] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.839064][T10549] 8021q: adding VLAN 0 to HW filter on device team0
[  251.888013][T10242] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.895407][T10242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.946742][T10241] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.954145][T10241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.964818][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'.
[  252.104468][T10549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.485634][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.546179][T10763] lo speed is unknown, defaulting to 1000
[  252.775323][ T5840] Bluetooth: hci0: command tx timeout
[  253.244946][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'.
[  253.264527][T10772] lo speed is unknown, defaulting to 1000
[  253.516377][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'.
[  253.528354][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'.
[  253.552265][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'.
[  253.574583][T10823] bond0: (slave team0): Releasing backup interface
[  253.633366][T10823] bond0: (slave bond_slave_0): Releasing backup interface
[  253.649475][T10823] bond0: (slave bond_slave_1): Releasing backup interface
[  253.669929][T10823] team0: Port device team_slave_0 removed
[  253.679996][T10823] team0: Port device team_slave_1 removed
[  253.687162][T10823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.704080][T10823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.716982][T10823] team0: Port device virt_wifi0 removed
[  253.726233][T10823] bond0: (slave wlan1): Releasing backup interface
[  253.803538][T10549] veth0_vlan: entered promiscuous mode
[  253.951157][T10549] veth1_vlan: entered promiscuous mode
[  254.134258][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'.
[  254.292953][T10549] veth0_macvtap: entered promiscuous mode
[  254.329907][T10549] veth1_macvtap: entered promiscuous mode
[  254.428655][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.469782][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.496817][T10549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.514954][T10549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.559628][T10549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.612810][T10549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.084578][T10242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.092469][T10242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.240267][T10233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.281439][T10233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.920588][T10896] __nla_validate_parse: 5 callbacks suppressed
[  255.920611][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'.
[  256.100096][T10904] FAULT_INJECTION: forcing a failure.
[  256.100096][T10904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.101130][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'.
[  256.133509][T10904] CPU: 1 UID: 0 PID: 10904 Comm: syz.3.1392 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  256.133542][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  256.133566][T10904] Call Trace:
[  256.133574][T10904]  <TASK>
[  256.133583][T10904]  dump_stack_lvl+0x241/0x360
[  256.133622][T10904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.133652][T10904]  ? __pfx__printk+0x10/0x10
[  256.133696][T10904]  should_fail_ex+0x424/0x570
[  256.133734][T10904]  _copy_from_user+0x2d/0xb0
[  256.133763][T10904]  copy_msghdr_from_user+0xb3/0x580
[  256.133796][T10904]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  256.133818][T10904]  ? __fget_files+0x2a/0x420
[  256.133842][T10904]  ? __fget_files+0x2a/0x420
[  256.133870][T10904]  __sys_sendmsg+0x20a/0x360
[  256.133896][T10904]  ? __pfx___sys_sendmsg+0x10/0x10
[  256.133973][T10904]  ? do_syscall_64+0xb6/0x230
[  256.133999][T10904]  do_syscall_64+0xf3/0x230
[  256.134021][T10904]  ? clear_bhb_loop+0x45/0xa0
[  256.134045][T10904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.134066][T10904] RIP: 0033:0x7f5a2e98d169
[  256.134084][T10904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.134103][T10904] RSP: 002b:00007f5a2f88c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.134125][T10904] RAX: ffffffffffffffda RBX: 00007f5a2eba5fa0 RCX: 00007f5a2e98d169
[  256.134140][T10904] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  256.134153][T10904] RBP: 00007f5a2f88c090 R08: 0000000000000000 R09: 0000000000000000
[  256.134165][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.134177][T10904] R13: 0000000000000000 R14: 00007f5a2eba5fa0 R15: 00007ffce441d328
[  256.134210][T10904]  </TASK>
[  256.170957][T10900] vlan2: entered promiscuous mode
[  256.698242][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'.
[  256.764259][T10922] vlan0: entered promiscuous mode
[  256.769890][T10922] bridge0: entered promiscuous mode
[  257.297414][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.307301][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.316712][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.325897][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.342245][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.871706][T10957] netlink: 'syz.2.1401': attribute type 10 has an invalid length.
[  257.959399][T10939] lo speed is unknown, defaulting to 1000
[  257.962362][T10961] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1402'.
[  257.979083][T10961] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1402'.
[  258.107200][T10970] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1404'.
[  258.132145][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'.
[  258.248918][T10973] dccp_invalid_packet: pskb_may_pull failed
[  258.256880][T10974] dccp_invalid_packet: pskb_may_pull failed
[  258.297123][T10973] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1405'.
[  258.358826][T10974] netlink: 'syz.5.1405': attribute type 21 has an invalid length.
[  258.399213][T10974] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1405'.
[  258.439172][T10977] FAULT_INJECTION: forcing a failure.
[  258.439172][T10977] name failslab, interval 1, probability 0, space 0, times 0
[  258.473157][T10977] CPU: 1 UID: 0 PID: 10977 Comm: syz.3.1406 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  258.473191][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  258.473205][T10977] Call Trace:
[  258.473214][T10977]  <TASK>
[  258.473223][T10977]  dump_stack_lvl+0x241/0x360
[  258.473262][T10977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.473293][T10977]  ? __pfx__printk+0x10/0x10
[  258.473327][T10977]  ? __pfx___might_resched+0x10/0x10
[  258.473364][T10977]  should_fail_ex+0x424/0x570
[  258.473403][T10977]  should_failslab+0xac/0x100
[  258.473436][T10977]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  258.473474][T10977]  ? __alloc_skb+0x1c2/0x480
[  258.473514][T10977]  __alloc_skb+0x1c2/0x480
[  258.473548][T10977]  ? __pfx___alloc_skb+0x10/0x10
[  258.473579][T10977]  ? netlink_autobind+0xd6/0x2f0
[  258.473605][T10977]  ? netlink_autobind+0x2b0/0x2f0
[  258.473636][T10977]  netlink_sendmsg+0x638/0xcd0
[  258.473677][T10977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.473709][T10977]  ? aa_sock_msg_perm+0x91/0x160
[  258.473744][T10977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.473768][T10977]  __sock_sendmsg+0x221/0x270
[  258.473797][T10977]  ____sys_sendmsg+0x523/0x860
[  258.473828][T10977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.473845][T10977]  ? __fget_files+0x2a/0x420
[  258.473867][T10977]  ? __fget_files+0x2a/0x420
[  258.473896][T10977]  __sys_sendmsg+0x271/0x360
[  258.473920][T10977]  ? __pfx___sys_sendmsg+0x10/0x10
[  258.473997][T10977]  ? do_syscall_64+0xb6/0x230
[  258.474024][T10977]  do_syscall_64+0xf3/0x230
[  258.474046][T10977]  ? clear_bhb_loop+0x45/0xa0
[  258.474071][T10977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.474091][T10977] RIP: 0033:0x7f5a2e98d169
[  258.474111][T10977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.474129][T10977] RSP: 002b:00007f5a2f88c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.474152][T10977] RAX: ffffffffffffffda RBX: 00007f5a2eba5fa0 RCX: 00007f5a2e98d169
[  258.474167][T10977] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  258.474180][T10977] RBP: 00007f5a2f88c090 R08: 0000000000000000 R09: 0000000000000000
[  258.474193][T10977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.474205][T10977] R13: 0000000000000000 R14: 00007f5a2eba5fa0 R15: 00007ffce441d328
[  258.474238][T10977]  </TASK>
[  258.483999][T10957] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  258.808850][T10974] netlink: 'syz.5.1405': attribute type 5 has an invalid length.
[  258.828775][T10974] netlink: 'syz.5.1405': attribute type 6 has an invalid length.
[  258.839331][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'.
[  259.105999][T10996] openvswitch: netlink: EtherType 0 is less than min 600
[  259.413164][ T5840] Bluetooth: hci0: command tx timeout
[  259.449733][T10939] chnl_net:caif_netlink_parms(): no params data found
[  259.548915][T11009] raw_sendmsg: syz.5.1413 forgot to set AF_INET. Fix it!
[  259.829970][T11015] vlan1: entered promiscuous mode
[  259.868849][T11015] ip6gretap0: entered promiscuous mode
[  260.066608][T10939] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.084029][T10939] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.100153][T10939] bridge_slave_0: entered allmulticast mode
[  260.108922][T10939] bridge_slave_0: entered promiscuous mode
[  260.127399][T10939] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.150719][T10939] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.158221][T10939] bridge_slave_1: entered allmulticast mode
[  260.173867][T10939] bridge_slave_1: entered promiscuous mode
[  260.307059][T10939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.337127][T10939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.466733][T10939] team0: Port device team_slave_0 added
[  260.497959][T10939] team0: Port device team_slave_1 added
[  260.597617][T10939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.613830][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.660050][T10939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.702576][T10939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.712371][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.770950][T10939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.097074][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  261.466456][T11069] __nla_validate_parse: 3 callbacks suppressed
[  261.466480][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1427'.
[  261.493037][ T5840] Bluetooth: hci0: command tx timeout
[  261.508308][T10939] hsr_slave_0: entered promiscuous mode
[  261.515269][T10939] hsr_slave_1: entered promiscuous mode
[  261.521599][T10939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.529739][T10939] Cannot create hsr debugfs directory
[  261.559476][T11069] vlan2: entered promiscuous mode
[  261.572285][T11069] syz_tun: entered promiscuous mode
[  261.584184][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'.
[  261.766927][T11084] Bluetooth: MGMT ver 1.23
[  261.918261][T11096] FAULT_INJECTION: forcing a failure.
[  261.918261][T11096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.935253][T11096] CPU: 1 UID: 0 PID: 11096 Comm: syz.3.1433 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  261.935286][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  261.935299][T11096] Call Trace:
[  261.935307][T11096]  <TASK>
[  261.935317][T11096]  dump_stack_lvl+0x241/0x360
[  261.935355][T11096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.935386][T11096]  ? __pfx__printk+0x10/0x10
[  261.935430][T11096]  should_fail_ex+0x424/0x570
[  261.935469][T11096]  _copy_from_iter+0x211/0x1c70
[  261.935502][T11096]  ? __build_skb_around+0x247/0x3d0
[  261.935538][T11096]  ? __alloc_skb+0x298/0x480
[  261.935566][T11096]  ? __pfx__copy_from_iter+0x10/0x10
[  261.935596][T11096]  ? __pfx___alloc_skb+0x10/0x10
[  261.935629][T11096]  ? skb_put+0x114/0x1f0
[  261.935663][T11096]  netlink_sendmsg+0x73c/0xcd0
[  261.935706][T11096]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.935738][T11096]  ? aa_sock_msg_perm+0x91/0x160
[  261.935773][T11096]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.935797][T11096]  __sock_sendmsg+0x221/0x270
[  261.935827][T11096]  ____sys_sendmsg+0x523/0x860
[  261.935857][T11096]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.935875][T11096]  ? __fget_files+0x2a/0x420
[  261.935899][T11096]  ? __fget_files+0x2a/0x420
[  261.935929][T11096]  __sys_sendmsg+0x271/0x360
[  261.935956][T11096]  ? __pfx___sys_sendmsg+0x10/0x10
[  261.936037][T11096]  ? do_syscall_64+0xb6/0x230
[  261.936063][T11096]  do_syscall_64+0xf3/0x230
[  261.936084][T11096]  ? clear_bhb_loop+0x45/0xa0
[  261.936109][T11096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.936137][T11096] RIP: 0033:0x7f5a2e98d169
[  261.936156][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.936174][T11096] RSP: 002b:00007f5a2f88c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.936197][T11096] RAX: ffffffffffffffda RBX: 00007f5a2eba5fa0 RCX: 00007f5a2e98d169
[  261.936212][T11096] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  261.936225][T11096] RBP: 00007f5a2f88c090 R08: 0000000000000000 R09: 0000000000000000
[  261.936238][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.936254][T11096] R13: 0000000000000000 R14: 00007f5a2eba5fa0 R15: 00007ffce441d328
[  261.936288][T11096]  </TASK>
[  262.264823][T11067] caif0: Master is either lo or non-ether device
[  262.464521][T11101] netlink: 'syz.2.1434': attribute type 4 has an invalid length.
[  262.523652][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'.
[  262.544234][T11101] 8021q: VLANs not supported on vcan0
[  262.711564][T10939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.751913][T11104] netlink: 'syz.1.1435': attribute type 9 has an invalid length.
[  262.776439][T11104] netlink: 'syz.1.1435': attribute type 6 has an invalid length.
[  262.787822][T11104] netlink: 'syz.1.1435': attribute type 7 has an invalid length.
[  262.799516][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  262.812005][T11103] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  262.833724][T11104] netlink: 'syz.1.1435': attribute type 8 has an invalid length.
[  262.852017][T11103] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1435'.
[  262.866031][T10939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.880393][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'.
[  263.017606][T10939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.109282][T11115] netlink: 'syz.1.1439': attribute type 4 has an invalid length.
[  263.175932][T10939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.517388][T10939] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  263.552140][T10939] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  263.572566][T10939] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  263.580058][ T5840] Bluetooth: hci0: command tx timeout
[  263.600665][T10939] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  263.651154][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'.
[  263.844165][T10939] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.913738][T10939] 8021q: adding VLAN 0 to HW filter on device team0
[  263.928969][T10224] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.936512][T10224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.980972][T10233] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.988352][T10233] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.082561][T11114] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1438'.
[  264.150410][T11109] lo speed is unknown, defaulting to 1000
[  264.300466][T11150] FAULT_INJECTION: forcing a failure.
[  264.300466][T11150] name failslab, interval 1, probability 0, space 0, times 0
[  264.328407][T11150] CPU: 1 UID: 0 PID: 11150 Comm: syz.2.1446 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  264.328441][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  264.328454][T11150] Call Trace:
[  264.328462][T11150]  <TASK>
[  264.328471][T11150]  dump_stack_lvl+0x241/0x360
[  264.328509][T11150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.328540][T11150]  ? __pfx__printk+0x10/0x10
[  264.328574][T11150]  ? __pfx___might_resched+0x10/0x10
[  264.328606][T11150]  should_fail_ex+0x424/0x570
[  264.328645][T11150]  should_failslab+0xac/0x100
[  264.328676][T11150]  __kmalloc_cache_noprof+0x73/0x370
[  264.328706][T11150]  ? rtnl_newlink+0x144/0x1fe0
[  264.328737][T11150]  rtnl_newlink+0x144/0x1fe0
[  264.328765][T11150]  ? 0xffffffffa000094c
[  264.328785][T11150]  ? is_bpf_text_address+0x288/0x2a0
[  264.328809][T11150]  ? is_bpf_text_address+0x26/0x2a0
[  264.328834][T11150]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  264.328866][T11150]  ? kernel_text_address+0xa7/0xe0
[  264.328888][T11150]  ? __pfx_rtnl_newlink+0x10/0x10
[  264.328912][T11150]  ? unwind_get_return_address+0x4d/0x90
[  264.328949][T11150]  ? arch_stack_walk+0xff/0x150
[  264.328981][T11150]  ? __lock_acquire+0xad5/0xd80
[  264.329010][T11150]  ? __lock_acquire+0xad5/0xd80
[  264.329035][T11150]  ? __lock_acquire+0xad5/0xd80
[  264.329077][T11150]  ? is_bpf_text_address+0x26/0x2a0
[  264.329103][T11150]  ? 0xffffffffa000094c
[  264.329122][T11150]  ? is_bpf_text_address+0x288/0x2a0
[  264.329145][T11150]  ? is_bpf_text_address+0x26/0x2a0
[  264.329169][T11150]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  264.329200][T11150]  ? kernel_text_address+0xa7/0xe0
[  264.329219][T11150]  ? __kernel_text_address+0xd/0x40
[  264.329244][T11150]  ? aa_get_newest_label+0x101/0x6f0
[  264.329284][T11150]  ? __lock_acquire+0xad5/0xd80
[  264.329329][T11150]  ? __pfx_rtnl_newlink+0x10/0x10
[  264.329358][T11150]  rtnetlink_rcv_msg+0x80f/0xd70
[  264.329383][T11150]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  264.329415][T11150]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  264.329440][T11150]  ? __lock_acquire+0xad5/0xd80
[  264.329479][T11150]  netlink_rcv_skb+0x208/0x480
[  264.329507][T11150]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  264.329537][T11150]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.329582][T11150]  ? netlink_deliver_tap+0x2e/0x1b0
[  264.329611][T11150]  ? netlink_deliver_tap+0x2e/0x1b0
[  264.329640][T11150]  netlink_unicast+0x7f8/0x9a0
[  264.329673][T11150]  ? __pfx_netlink_unicast+0x10/0x10
[  264.329699][T11150]  ? skb_put+0x114/0x1f0
[  264.329735][T11150]  netlink_sendmsg+0x8c3/0xcd0
[  264.329776][T11150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.329816][T11150]  ? aa_sock_msg_perm+0x91/0x160
[  264.329850][T11150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.329875][T11150]  __sock_sendmsg+0x221/0x270
[  264.329904][T11150]  ____sys_sendmsg+0x523/0x860
[  264.329939][T11150]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.329957][T11150]  ? __fget_files+0x2a/0x420
[  264.329980][T11150]  ? __fget_files+0x2a/0x420
[  264.330014][T11150]  __sys_sendmsg+0x271/0x360
[  264.330040][T11150]  ? __pfx___sys_sendmsg+0x10/0x10
[  264.330130][T11150]  ? do_syscall_64+0xb6/0x230
[  264.330163][T11150]  do_syscall_64+0xf3/0x230
[  264.330185][T11150]  ? clear_bhb_loop+0x45/0xa0
[  264.330211][T11150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.330231][T11150] RIP: 0033:0x7fd05bd8d169
[  264.330250][T11150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.330268][T11150] RSP: 002b:00007fd05cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.330291][T11150] RAX: ffffffffffffffda RBX: 00007fd05bfa5fa0 RCX: 00007fd05bd8d169
[  264.330306][T11150] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  264.330319][T11150] RBP: 00007fd05cbff090 R08: 0000000000000000 R09: 0000000000000000
[  264.330332][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.330344][T11150] R13: 0000000000000000 R14: 00007fd05bfa5fa0 R15: 00007ffe14f969a8
[  264.330377][T11150]  </TASK>
[  264.855656][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1447'.
[  264.944903][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'.
[  265.479319][T10939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.653005][ T5840] Bluetooth: hci0: command tx timeout
[  266.019110][T11191] tipc: Cannot configure node identity twice
[  266.028778][T11192] tipc: Trying to set illegal importance in message
[  266.417490][T10939] veth0_vlan: entered promiscuous mode
[  266.489295][T10939] veth1_vlan: entered promiscuous mode
[  266.571495][T11199] __nla_validate_parse: 3 callbacks suppressed
[  266.571517][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'.
[  266.637803][T11199] ipvlan0: entered promiscuous mode
[  266.645646][T11199] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  266.795695][T10939] veth0_macvtap: entered promiscuous mode
[  266.841172][T10939] veth1_macvtap: entered promiscuous mode
[  266.896191][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.927515][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.950902][T10939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.990487][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.004002][T11203] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  267.035357][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.047876][T10939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.104975][T10939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.153172][T10939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.166496][T11206] xt_ecn: cannot match TCP bits for non-tcp packets
[  267.193526][T10939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.202305][T10939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.205532][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'.
[  267.261750][T11208] FAULT_INJECTION: forcing a failure.
[  267.261750][T11208] name failslab, interval 1, probability 0, space 0, times 0
[  267.306086][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.2.1461 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  267.306119][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  267.306133][T11208] Call Trace:
[  267.306141][T11208]  <TASK>
[  267.306150][T11208]  dump_stack_lvl+0x241/0x360
[  267.306190][T11208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.306221][T11208]  ? __pfx__printk+0x10/0x10
[  267.306255][T11208]  ? __pfx___might_resched+0x10/0x10
[  267.306288][T11208]  should_fail_ex+0x424/0x570
[  267.306327][T11208]  should_failslab+0xac/0x100
[  267.306359][T11208]  __kvmalloc_node_noprof+0x170/0x5a0
[  267.306390][T11208]  ? alloc_netdev_mqs+0xa4/0x1210
[  267.306416][T11208]  ? __pfx_vlan_setup+0x10/0x10
[  267.306448][T11208]  alloc_netdev_mqs+0xa4/0x1210
[  267.306478][T11208]  ? __pfx_vlan_setup+0x10/0x10
[  267.306514][T11208]  rtnl_create_link+0x2f9/0xc90
[  267.306546][T11208]  rtnl_newlink_create+0x2f2/0xcb0
[  267.306577][T11208]  ? __mutex_lock+0xbe3/0x10c0
[  267.306606][T11208]  ? __mutex_lock+0x5f3/0x10c0
[  267.306628][T11208]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  267.306662][T11208]  ? __pfx___mutex_lock+0x10/0x10
[  267.306695][T11208]  ? ns_capable+0x8a/0xf0
[  267.306720][T11208]  rtnl_newlink+0x18b0/0x1fe0
[  267.306770][T11208]  ? __pfx_rtnl_newlink+0x10/0x10
[  267.306794][T11208]  ? unwind_get_return_address+0x4d/0x90
[  267.306822][T11208]  ? arch_stack_walk+0xff/0x150
[  267.306854][T11208]  ? __lock_acquire+0xad5/0xd80
[  267.306884][T11208]  ? __lock_acquire+0xad5/0xd80
[  267.306909][T11208]  ? __lock_acquire+0xad5/0xd80
[  267.306952][T11208]  ? is_bpf_text_address+0x26/0x2a0
[  267.306979][T11208]  ? 0xffffffffa000094c
[  267.307000][T11208]  ? is_bpf_text_address+0x288/0x2a0
[  267.307023][T11208]  ? is_bpf_text_address+0x26/0x2a0
[  267.307048][T11208]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  267.307080][T11208]  ? kernel_text_address+0xa7/0xe0
[  267.307101][T11208]  ? __kernel_text_address+0xd/0x40
[  267.307126][T11208]  ? aa_get_newest_label+0x101/0x6f0
[  267.307163][T11208]  ? __lock_acquire+0xad5/0xd80
[  267.307208][T11208]  ? __pfx_rtnl_newlink+0x10/0x10
[  267.307237][T11208]  rtnetlink_rcv_msg+0x80f/0xd70
[  267.307262][T11208]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  267.307294][T11208]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  267.307319][T11208]  ? __lock_acquire+0xad5/0xd80
[  267.307359][T11208]  netlink_rcv_skb+0x208/0x480
[  267.307387][T11208]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  267.307416][T11208]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.307464][T11208]  ? netlink_deliver_tap+0x2e/0x1b0
[  267.307504][T11208]  ? netlink_deliver_tap+0x2e/0x1b0
[  267.307533][T11208]  netlink_unicast+0x7f8/0x9a0
[  267.307567][T11208]  ? __pfx_netlink_unicast+0x10/0x10
[  267.307593][T11208]  ? skb_put+0x114/0x1f0
[  267.307628][T11208]  netlink_sendmsg+0x8c3/0xcd0
[  267.307669][T11208]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.307702][T11208]  ? aa_sock_msg_perm+0x91/0x160
[  267.307736][T11208]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.307760][T11208]  __sock_sendmsg+0x221/0x270
[  267.307790][T11208]  ____sys_sendmsg+0x523/0x860
[  267.307821][T11208]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.307839][T11208]  ? __fget_files+0x2a/0x420
[  267.307863][T11208]  ? __fget_files+0x2a/0x420
[  267.307892][T11208]  __sys_sendmsg+0x271/0x360
[  267.307920][T11208]  ? __pfx___sys_sendmsg+0x10/0x10
[  267.308002][T11208]  ? do_syscall_64+0xb6/0x230
[  267.308028][T11208]  do_syscall_64+0xf3/0x230
[  267.308050][T11208]  ? clear_bhb_loop+0x45/0xa0
[  267.308075][T11208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.308096][T11208] RIP: 0033:0x7fd05bd8d169
[  267.308114][T11208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.308132][T11208] RSP: 002b:00007fd05cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.308155][T11208] RAX: ffffffffffffffda RBX: 00007fd05bfa5fa0 RCX: 00007fd05bd8d169
[  267.308171][T11208] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  267.308184][T11208] RBP: 00007fd05cbff090 R08: 0000000000000000 R09: 0000000000000000
[  267.308196][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.308209][T11208] R13: 0000000000000000 R14: 00007fd05bfa5fa0 R15: 00007ffe14f969a8
[  267.308241][T11208]  </TASK>
[  267.876082][T10243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.884025][T10243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.990583][T11226] netlink: 'syz.1.1465': attribute type 7 has an invalid length.
[  268.003901][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'.
[  268.018788][T10233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.048715][T10233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.114207][T11224] vlan2: entered promiscuous mode
[  268.408731][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1467'.
[  268.408859][T11237] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  268.569491][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'.
[  269.233982][T11248] lo speed is unknown, defaulting to 1000
[  270.211883][T11262] lo speed is unknown, defaulting to 1000
[  270.522149][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.534771][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.546428][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.554894][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  270.564215][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.231195][T11280] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1479'.
[  271.291049][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.314201][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.326118][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.338529][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.360136][T11302] batadv_slave_0: entered promiscuous mode
[  271.395492][T11302] batadv_slave_0: left promiscuous mode
[  271.652208][T11312] netlink: 'syz.2.1486': attribute type 3 has an invalid length.
[  271.690170][T11312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1486'.
[  271.880623][T11283] lo speed is unknown, defaulting to 1000
[  271.882787][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'.
[  271.969524][T11316] vlan2: entered promiscuous mode
[  271.983255][T11316] ip6gretap0: entered promiscuous mode
[  272.029371][T11326] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1490'.
[  272.613116][ T5843] Bluetooth: hci0: command tx timeout
[  273.399627][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1495'.
[  273.466782][T11359] netlink: 'syz.1.1494': attribute type 11 has an invalid length.
[  273.513914][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1493'.
[  273.524090][T11359] netlink: 'syz.1.1494': attribute type 11 has an invalid length.
[  273.524257][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'.
[  273.553159][T11359] netlink: 'syz.1.1494': attribute type 11 has an invalid length.
[  273.561020][T11359] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1494'.
[  273.583059][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1493'.
[  273.674587][T11376] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1497'.
[  273.691345][T11376] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1497'.
[  273.742992][T11283] chnl_net:caif_netlink_parms(): no params data found
[  273.793295][T11381] netlink: 'syz.5.1493': attribute type 4 has an invalid length.
[  274.108739][T11404] xt_l2tp: invalid flags combination: c
[  274.279183][T11407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  274.318310][T11411] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  274.363997][T11283] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.371308][T11283] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.394557][T11283] bridge_slave_0: entered allmulticast mode
[  274.418226][T11283] bridge_slave_0: entered promiscuous mode
[  274.450271][T11283] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.484658][T11283] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.509825][T11283] bridge_slave_1: entered allmulticast mode
[  274.544933][T11283] bridge_slave_1: entered promiscuous mode
[  274.703194][ T5843] Bluetooth: hci0: command tx timeout
[  274.838489][T11431] netlink: 'syz.5.1506': attribute type 7 has an invalid length.
[  274.846362][T11431] netlink: 'syz.5.1506': attribute type 8 has an invalid length.
[  275.555755][T11283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.603821][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.933546][T11455] Bluetooth: MGMT ver 1.23
[  275.986229][T11453] vlan2: entered promiscuous mode
[  276.090590][T11283] team0: Port device team_slave_0 added
[  276.102335][T11404] lo speed is unknown, defaulting to 1000
[  276.121092][T11283] team0: Port device team_slave_1 added
[  276.323714][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.340976][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.437799][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.473489][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.480508][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.519259][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.763026][T11283] hsr_slave_0: entered promiscuous mode
[  276.772894][ T5843] Bluetooth: hci0: command tx timeout
[  276.779835][T11283] hsr_slave_1: entered promiscuous mode
[  276.801592][T11283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.834406][T11283] Cannot create hsr debugfs directory
[  277.088534][T11479] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI
[  277.100489][T11479] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f]
[  277.110069][T11479] CPU: 0 UID: 0 PID: 11479 Comm: syz.5.1516 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  277.121823][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  277.131923][T11479] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3280
[  277.137943][T11479] Code: 80 3c 2f 00 74 08 48 89 df e8 b3 13 55 f6 48 89 5c 24 28 48 8b 1b 48 85 db 0f 84 51 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 88 13 55 f6 48 8b 44 24 18 4c 8d
[  277.157664][T11479] RSP: 0018:ffffc9000404ee80 EFLAGS: 00010206
[  277.163752][T11479] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff888077498000
[  277.171729][T11479] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  277.179713][T11479] RBP: ffffc9000404f310 R08: ffffffff89fba322 R09: 1ffff1100b91700b
[  277.187820][T11479] R10: dffffc0000000000 R11: ffffed100b91700c R12: ffff888070a60000
[  277.195815][T11479] R13: dffffc0000000000 R14: ffff88805c8b8000 R15: 1ffff1100b9170ab
[  277.203798][T11479] FS:  00007f0823a1a6c0(0000) GS:ffff888124f99000(0000) knlGS:0000000000000000
[  277.212821][T11479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.219420][T11479] CR2: 000020000000e000 CR3: 0000000069388000 CR4: 00000000003526f0
[  277.227404][T11479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.235740][T11479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  277.243715][T11479] Call Trace:
[  277.247002][T11479]  <TASK>
[  277.249959][T11479]  ? __pfx_smc_diag_dump_proto+0x10/0x10
[  277.255624][T11479]  ? __phys_addr+0xba/0x170
[  277.260150][T11479]  ? __kasan_kmalloc_large+0x8c/0xa0
[  277.265447][T11479]  ? rcu_is_watching+0x15/0xb0
[  277.270217][T11479]  ? trace_kmalloc+0x1f/0xd0
[  277.274815][T11479]  ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0
[  277.281417][T11479]  ? __build_skb_around+0x247/0x3d0
[  277.286631][T11479]  ? __alloc_skb+0x298/0x480
[  277.291233][T11479]  ? __pfx___alloc_skb+0x10/0x10
[  277.296194][T11479]  smc_diag_dump+0x59/0xa0
[  277.300621][T11479]  netlink_dump+0x678/0xeb0
[  277.305134][T11479]  ? __pfx_netlink_dump+0x10/0x10
[  277.310188][T11479]  ? __netlink_lookup+0x894/0x980
[  277.315409][T11479]  ? netlink_lookup+0x31/0x200
[  277.320188][T11479]  __netlink_dump_start+0x5a2/0x790
[  277.325401][T11479]  smc_diag_handler_dump+0x1ba/0x260
[  277.330700][T11479]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  277.336526][T11479]  ? __pfx_smc_diag_dump+0x10/0x10
[  277.341647][T11479]  ? sock_diag_lock_handler+0x19/0x280
[  277.347114][T11479]  ? sock_diag_lock_handler+0x19/0x280
[  277.352574][T11479]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  277.358488][T11479]  sock_diag_rcv_msg+0x3dc/0x5f0
[  277.363441][T11479]  netlink_rcv_skb+0x208/0x480
[  277.368224][T11479]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  277.373692][T11479]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.379038][T11479]  ? netlink_deliver_tap+0x2e/0x1b0
[  277.384244][T11479]  ? netlink_deliver_tap+0x2e/0x1b0
[  277.389453][T11479]  netlink_unicast+0x7f8/0x9a0
[  277.394249][T11479]  ? __pfx_netlink_unicast+0x10/0x10
[  277.399541][T11479]  ? skb_put+0x114/0x1f0
[  277.403795][T11479]  netlink_sendmsg+0x8c3/0xcd0
[  277.408575][T11479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.413888][T11479]  ? aa_sock_msg_perm+0x91/0x160
[  277.418860][T11479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.424175][T11479]  __sock_sendmsg+0x221/0x270
[  277.429411][T11479]  ____sys_sendmsg+0x523/0x860
[  277.434202][T11479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.439491][T11479]  ? __fget_files+0x2a/0x420
[  277.444101][T11479]  ? __fget_files+0x2a/0x420
[  277.448707][T11479]  __sys_sendmsg+0x271/0x360
[  277.453310][T11479]  ? __pfx___sys_sendmsg+0x10/0x10
[  277.458448][T11479]  ? do_syscall_64+0xb6/0x230
[  277.463133][T11479]  do_syscall_64+0xf3/0x230
[  277.467644][T11479]  ? clear_bhb_loop+0x45/0xa0
[  277.472326][T11479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.478227][T11479] RIP: 0033:0x7f0822b8d169
[  277.482646][T11479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.502262][T11479] RSP: 002b:00007f0823a1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.510695][T11479] RAX: ffffffffffffffda RBX: 00007f0822da6080 RCX: 00007f0822b8d169
[  277.518675][T11479] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000000c
[  277.526654][T11479] RBP: 00007f0822c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  277.534635][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.542610][T11479] R13: 0000000000000000 R14: 00007f0822da6080 R15: 00007ffe2bd77f18
[  277.550602][T11479]  </TASK>
[  277.553650][T11479] Modules linked in:
[  277.559717][T11479] ---[ end trace 0000000000000000 ]---
[  277.566403][T11479] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3280
[  277.572425][T11479] Code: 80 3c 2f 00 74 08 48 89 df e8 b3 13 55 f6 48 89 5c 24 28 48 8b 1b 48 85 db 0f 84 51 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 88 13 55 f6 48 8b 44 24 18 4c 8d
[  277.592136][T11479] RSP: 0018:ffffc9000404ee80 EFLAGS: 00010206
[  277.598254][T11479] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff888077498000
[  277.606262][T11479] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  277.614258][T11479] RBP: ffffc9000404f310 R08: ffffffff89fba322 R09: 1ffff1100b91700b
[  277.622233][T11479] R10: dffffc0000000000 R11: ffffed100b91700c R12: ffff888070a60000
[  277.630625][T11479] R13: dffffc0000000000 R14: ffff88805c8b8000 R15: 1ffff1100b9170ab
[  277.638934][T11479] FS:  00007f0823a1a6c0(0000) GS:ffff888124f99000(0000) knlGS:0000000000000000
[  277.647920][T11479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.654579][T11479] CR2: 000020000000e000 CR3: 0000000069388000 CR4: 00000000003526f0
[  277.662558][T11479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.670589][T11479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  277.678755][T11479] Kernel panic - not syncing: Fatal exception
[  277.685077][T11479] Kernel Offset: disabled
[  277.689492][T11479] Rebooting in 86400 seconds..