last executing test programs:

1m11.206050238s ago: executing program 3 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2022)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000f11643ef16049e085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000000000000000eb06000000d8861f10c4dee13132f6efc1b29e279bb4ae7ce398d66edce668ff76ceacfd121f000ca3aac572821d15cd6f6efc3a8d7c5c95f7ab9bb7d5681c103016404c499300"/96, @ANYRES32=r6, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

57.749823847s ago: executing program 3 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2022)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000f11643ef16049e085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000000000000000eb06000000d8861f10c4dee13132f6efc1b29e279bb4ae7ce398d66edce668ff76ceacfd121f000ca3aac572821d15cd6f6efc3a8d7c5c95f7ab9bb7d5681c103016404c499300"/96, @ANYRES32=r6, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

43.382192165s ago: executing program 3 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2022)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000f11643ef16049e085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000000000000000eb06000000d8861f10c4dee13132f6efc1b29e279bb4ae7ce398d66edce668ff76ceacfd121f000ca3aac572821d15cd6f6efc3a8d7c5c95f7ab9bb7d5681c103016404c499300"/96, @ANYRES32=r6, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

33.252021077s ago: executing program 3 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2022)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000f11643ef16049e085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000000000000000eb06000000d8861f10c4dee13132f6efc1b29e279bb4ae7ce398d66edce668ff76ceacfd121f000ca3aac572821d15cd6f6efc3a8d7c5c95f7ab9bb7d5681c103016404c499300"/96, @ANYRES32=r6, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

22.506785515s ago: executing program 3 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2022)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000f11643ef16049e085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000000000000000eb06000000d8861f10c4dee13132f6efc1b29e279bb4ae7ce398d66edce668ff76ceacfd121f000ca3aac572821d15cd6f6efc3a8d7c5c95f7ab9bb7d5681c103016404c499300"/96, @ANYRES32=r6, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

11.694672565s ago: executing program 3 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2022)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000f11643ef16049e085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000000000000000eb06000000d8861f10c4dee13132f6efc1b29e279bb4ae7ce398d66edce668ff76ceacfd121f000ca3aac572821d15cd6f6efc3a8d7c5c95f7ab9bb7d5681c103016404c499300"/96, @ANYRES32=r6, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

2.28910992s ago: executing program 0 (id=1025):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async)
close(r0) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x7, 0x5}]}]}}, &(0x7f0000000f40)=""/4071, 0x36, 0xfe7, 0x2, 0x6, 0x0, @void, @value}, 0x28) (rerun: 32)

2.012513958s ago: executing program 0 (id=1027):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x80, @rand_addr=0x64010102}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x80004, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r2}, 0x0, 0x0}, 0x20)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x26, 0x806, 0x8)
socket$unix(0x1, 0x1, 0x0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="f8f4738b1735eabaf3a415a0952d03bd9d817643247d70220167b43dea505d80b984", 0x22}, {&(0x7f0000000340)="f14162212f9ddcc73564942d7b1d7dcbc7a0f6d50e734d98de6142bf6d64f9883279f949a5025b1f87f77a26bc9c799d0854040c8836e9117170afde971058be88d138c675ad689a65d170843ed326c97023404f431926add1762cb418f09c4d21ea81fb25913353e8aa2d916f1a18535c51246abb7c04452a7714e1804a1dbd76ad0cbacbeec5a3c7eb2a972d3fdac318", 0x91}, {&(0x7f0000000540)="2aafc66389b4f66a17d3ef8dec463dc1b360134a45a129257d0735a13ce0eb8fda591489712cfdd4773aac3ed9b5ab830f008460cc2ce94767a5c52a234e521d522bb6c6db75a5c8e4bafc9ea525e50b6123d7570648e5697d9530e71515878b0be325fb8d5a1fe7fa072dfb04bc4b7c00cbf83c1e2a6beb9934cd9942a16446f7f2facab5842ed456ab6500888664f12bdd2a84314fc20f2b12b7a7f6fdafc2a82353654cd20b161bfaf51a490bc4f3128aa503c30abfc2c52c541d9ee817", 0xbf}, {&(0x7f0000000200)="d1abe1e57270b1057333e0b974b487ad6903655a54316a9a8a0eda4cff821310c844fb8b641449fe3bb772e8b7b771957363d488a2d1a109949477d5b5329b8cd46de8fdad35beaf9d887c69c0e30114199a3c26ed393b2367", 0x59}], 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1e, 0x6, 0x100)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4)
sendto$inet(r6, 0x0, 0x0, 0x80, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7)
sendto$inet(r4, &(0x7f0000000640), 0x0, 0x4, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@remote, @in=@private=0xa030100, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x0, 0x1d}, {0xb4, 0x8000000000000001, 0x2, 0x4, 0x60, 0x4, 0x4, 0x3}, {0x40, 0x0, 0x5314, 0x9}, 0x9, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in=@multicast1, 0x4d2, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x3500, 0x3, 0x2, 0x6, 0x400, 0x202, 0x3}}, 0xe8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010003904000000000009000000000000884a76b95e0725e1c1e5a74436c12a27815dadb95114fa41e969d4d99c3842d10c943885e3b4039c20dfd8f56ae3b63ff304b641c3932493e23bde973134c85947ccd75c0d29eeebd77754871715f9af1e30cbcbf0af41e2c0a57fbef9032d191bfe04f90755f54b872e2720ce5a6ca7085a903fd47de3b99bb6571dc98acd3a385169", @ANYRES64=r8, @ANYRESDEC=0x0, @ANYRES8], 0x38}}, 0xe000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

1.879359677s ago: executing program 0 (id=1029):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000020000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r1 = socket(0x31, 0x80000, 0x7) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
unshare(0x4c040000) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x1, 0x3, 0x1, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7fff}}}, 0x3a)
close(r3)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000340)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff3b], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff}) (async)
r9 = epoll_create1(0x0) (async)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0xa0000001})
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
socket$kcm(0x11, 0x2, 0x300)
r11 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async, rerun: 32)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.746474284s ago: executing program 0 (id=1030):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x48, 0x8, 0x6, 0x8865}, {0x6, 0x3}]})
write$ppp(r0, &(0x7f00000002c0)="4daf", 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3, 0x43a}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x8000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r1})
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x7cb5}})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000400000000000000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x68}, {&(0x7f00000000c0)="745b126c353c9a5e23dafe8d0d18490a94f4c789510a1279266d4f9646a2bce5c984209b2a1cee122355c62d92488d57846ffd7c07af7e52ec9359044af7605c09c0cfee63374419ae57d2f15dd9d982345fed770dae5c049644e3e5af8329c7da642d19492b8750e975b0df781e5ff1f07c8abf086014bc627f198f3eb6a4685ac8c9f36145a553480cc74fe5d58508f03e406c059fe83344866012202533a72d78dbc65231d18790e524e9a1bddac36300c8351906919c0793b95dcd7a5d9cbcc1c71fcbe612e60244a8c45da7f36dd75eda59a99208308248698f57"}], 0x10000000000003ad)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @dev={0xac, 0x14, 0x14, 0x2f}, 0x0, "4ffde9c39fb57045c681399d27c7561826f035aa2383adab78861db83baabc54", 0x8000, 0x3, 0xe, 0x7}, 0x3c)

1.522148738s ago: executing program 2 (id=1033):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x54}, 0x4000000)
listen(r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14)

1.45836697s ago: executing program 0 (id=1035):
unshare(0x62040200)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x4be}}}}}}}, 0x3e)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000240)=0x6, 0xfe5c)
close(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="880100001b00010027bd7000000000000000ff0200000000000000000000000000014e2400094e220006020080202b0000e300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000000000040000000000000001000000000000000000000000000000ffffff7f0000000006000000000000000900000000000000050000000000000008000000000000000180000000000000ffff000000000000ffffffffffffffff81000000b26b6e000001000200000000400000000000000014000e000000000000000000000000000000000108001d00ffff0000ac0007007f00000100000000000000000000000000000000000000000000ffffac1414bb4e2110004e2280010200800073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000000000000000000000000000090000000000000007000000000000000400000000000000f7ffffffffffffff0800000000000000270400000000000007000000000000002f0700000000000000000000000000000900000000000000c4e65d32bf6b6e000200020000000000"], 0x188}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)="038126a49c604ba34d27d9eead4036d85f581274bb8d7eaa98e5be9bf788883b7a7c6416e1f9024f2c1e52129f936bd97a722d3f35b1108e9e64cad83c977b09c7f1b6e102adb9fdbea3928df3799f24639bbce4b107d3b2a3e41fe366b36bc6d2a8ff77af7720fa5fd1d80bde7b5620501692ed", 0x74)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r3, @ANYBLOB="7b000067656e65bb074e35f8a700781b766500"/32], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008090)

1.392685274s ago: executing program 2 (id=1036):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000753a0eb8f08b43d918850000009b000000850000002a0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x5)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000003000a0a"], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280590300000000000c080003400000030008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000140800024000000012040005800900010073797a3000000000140000001100010000000000000000000700000acbc4354a206fde82f99351ccbe4fa4b6583781219e75ae968395b63aa240f6054246727fc6c3cadb9c103c9580e5a480b654e81ee0204ae8740ed7080106c4397a2ce11469d6cd494084139f805c213507696f9d4fb92e39e07929f9eddf6b636e70954c7507a89b59ddeaf5e0e52ccccb0ed92c54ebc26edd26487336366333df1ee594021b009421650fb5f5ae533d3e2038e2321763"], 0x104}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r6)
sendmsg$inet6(r8, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0xb89}], 0x1}, 0x2000005c)
setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff0200000000000000000000000000012420810000000000d1954da454958f42976b261bde972400000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e0000200000000"], 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"c94eae286ad15ac00275fbfb661c6079", 0x0, <r9=>0x0, {0xfff, 0x400}, {0x8}, 0x80, [0x3, 0x8000, 0x0, 0x0, 0xfffffffffffffff7, 0xe5, 0x9, 0x6, 0x5, 0x5, 0x80, 0x8, 0xf879, 0xfe, 0x80]})
ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000000540)={0x1, 0x1, {0x80000001, @struct={0xf15, 0x5}, <r10=>0x0, 0x5, 0x6, 0x2, 0x415f650e, 0xf, 0x2, @struct={0x4, 0x3}, 0xa600, 0x8, [0x3b030000, 0x5, 0x4, 0x0, 0xfffffffffffffff7, 0xffffffff]}, {0x3000000000, @struct={0x29799ed7, 0xfffffbff}, 0x0, 0x2712395e, 0x5, 0x3ff, 0x90, 0x4, 0x4e8, @struct={0x3, 0x4}, 0xfffffc01, 0x0, [0x8000, 0x0, 0x7, 0x5, 0x7, 0x6]}, {0xc, @usage=0x8, 0x0, 0x9, 0x2, 0xb277, 0x4a, 0x8, 0x41, @struct={0x8, 0xab}, 0x5bdb25a4, 0xd, [0x2, 0x9, 0x8, 0x8, 0x2d5]}, {0x2, 0x40, 0x4}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000c00)={{r6}, r9, 0x0, @unused=[0xffffffff, 0x7f, 0xffffffffffffffff, 0x3ff], @devid=r10})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000003c0)=0x5, 0x4)
unshare(0xa000000)

1.392130557s ago: executing program 4 (id=1037):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r0, 0x8b29, &(0x7f0000000040)) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2, 0x400}}}}]}, 0x44}}, 0x800) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@gettfilter={0x6c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0x9}, {0x1b, 0xffe0}, {0xb, 0xfff3}}, [{0x8}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x4a18}, {0x8, 0xb, 0x752}, {0x8, 0xb, 0xe9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x200008c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df300c663229c6a22d1bf6533"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a)

1.380033689s ago: executing program 1 (id=1038):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x6, [@struct={0xb, 0x6, 0x0, 0x4, 0x0, 0x2, [{0x3, 0x2, 0x7}, {0xe, 0x1, 0x1}, {0x0, 0x3, 0xfff}, {0xc, 0x2, 0x848}, {0xa, 0x5, 0x729a}, {0xb, 0x0, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x7f}}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x42, 0x30, 0x2e, 0x0]}}, &(0x7f0000000680)=""/177, 0xc2, 0xb1, 0x1, 0x3, 0x0, @void, @value}, 0x28)
sendto$inet(r0, &(0x7f00000000c0)="f461", 0x2, 0x40890, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200002f72ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x4c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x39, 0x4d, &(0x7f00000001c0)="c60a1e8e8fa41d7523fbf6928ac50ee7330a7a03102664c3770c180672e5e4520a6fec1eed7eff45124740d03e47dd5f6f793a96be63090e05", &(0x7f0000000200)=""/77, 0x100, 0x0, 0x53, 0xd1, &(0x7f00000002c0)="319fe41d1d2d31756c109446fae130831e7f4312a0edb11a1cd6debfb26a2b02d3f7401d0407f387db15c24919b9393e0340777f67149d915f080bb337532ffdf427b55d6b0f6323719285ea7d7e019bc2b921", &(0x7f0000000340)="38f41748567366cda7ab4a2c0c6f30f115e17e18fc80703cf0e0e0b70d02d09bc4835fae72b1be84aee11f6666e1fe2a645e46266467ab0a0a83096898044892219c1a6b4d742508250a2ded6e818893e9d38261b9951c3469a5086ae1055072662ff110b0b83f74d3984d8e12ac6aa65142880b70fd0eb18f607f8abd0a46f3229d94bcee28cf7e6ba47041e0f2c50c05a5df7f08482e4f0fa283fad3988f6f6f537668ed5a14493940635221f092c5ea4db5d3cd044f3e694faa2fa35e4ee24db823ecccdfe2a19c0e38a0f38176635e", 0x5, 0x0, 0x4}, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f2975c8e4bc2"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="4f001c00", @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000100003800400040008000200fd7f0000180001801400020076656f6e6400"/54], 0x3c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000faf8ed69b27498adfacaf2bddcf61ff940ba6af54ed21ba7e5cfc9010000001ccc8a67b5a3dd4e2e904d5384694987e348990760c4b8bcec395e99e422a5623dac0e"], 0x18}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911095000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.174230326s ago: executing program 1 (id=1039):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x68}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xe1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x24)

1.164525539s ago: executing program 4 (id=1040):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f877501000100683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295cbcd8bee", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280)="01c0f30df5d05704d9340f", 0x8, r2}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280)="01c0f30df5d05704d9340f", 0x8, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffce)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x50, 0x29, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_IFLAGS={0xffffffed, 0x2, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x50, 0x29, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_IFLAGS={0xffffffed, 0x2, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={r8, @in={{0x2, 0x4e23, @empty}}, 0xcc9, 0xb, 0x7, 0x3ff, 0xb9, 0x33, 0x37}, &(0x7f0000000040)=0x9c)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8)

1.022261526s ago: executing program 1 (id=1041):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e006792028008000500784500a27a0988cd07044e587bfe358e9a1ff360e56922fb2c19e9ab2e92", @ANYRES32=r1, @ANYBLOB="0500110001000000"], 0x44}}, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)="59cd2b9a68010077f68207c1d7a0311230153dca22ecba", 0x17}, 0x1, 0x0, 0x0, 0x4000}, 0x24048016)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000040a01040002000000000000020000000900030073797a32000000000900010073797a30"], 0x2c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x1}]}, 0x10)
sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0)

850.353169ms ago: executing program 2 (id=1042):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
socket$isdn(0x22, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x20, 0x40e38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x400003, 0x1, 0xfffffffd, 0x20000, r8, 0x9, '\x00', r6, r7, 0x0, 0x4, 0x4, 0x9, @void, @value, @void, @value}, 0x50) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0)

836.00447ms ago: executing program 4 (id=1043):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
epoll_create1(0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x3)

745.65785ms ago: executing program 1 (id=1044):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000010101030000000000000000020000000c00198008000100ad040000240001800c000280050001002f000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0x30, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @random="974844815560", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x40}]}}}}}}}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x80000000, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xe}, 0x1c)
close(0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r8=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

666.33809ms ago: executing program 2 (id=1045):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x3, 0x202, 0x0, 0x81, 0x8, 0x7ce, 0x5}, &(0x7f0000000040)=0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
listen(r0, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x10, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5afd0", 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

578.197371ms ago: executing program 1 (id=1046):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="270300000000000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x408c0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
close(r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r7)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r7, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r3, 0x4, r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="270300000000000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
close(r5) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
close(r7) (async)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r7, 0x4) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r3, 0x4, r3}, 0x10) (async)

517.937983ms ago: executing program 4 (id=1047):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x40000, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x300)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0d", @ANYRESHEX=r6], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xa0028000}, 0x38)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x8, 0x7fff, 0x0, {0xe, 0x2, 0x9, 0x401}, {0x5, 0x2, 0x5, 0x4, 0x200, 0x7f}, 0x2, 0x4, 0x1}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd47)

488.676823ms ago: executing program 2 (id=1048):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000002000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

382.224901ms ago: executing program 1 (id=1049):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0xa01, 0x0, 0x0, {0x1, 0x0, 0x206}}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x20000000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x24}, &(0x7f0000000200)=0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240012800b00010062726964676500001400028005002c000600010005002b000200000030f0374fc95ca0ba7e1989497f709b4c2e9c827768a00ab66d75a34ba1ade2ebf5bf1610101dc1e512ad029136"], 0x44}}, 0x4000)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r9])
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]})
setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000140), 0x4)
sendto$inet(r8, &(0x7f0000000080)="8f", 0x1, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0)

362.506018ms ago: executing program 2 (id=1050):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14, 0x3eb}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x305, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x3f5}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x3, @private=0xa010100}, 0x3, 0x0, 0x0, 0xfffffffe}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r4=>r0}) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000280)=0x3d78, 0x4) (async)
ppoll(&(0x7f00000001c0)=[{r6, 0x2064}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async)
connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) (async)
shutdown(r5, 0x1) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000200)=@assoc_value={<r11=>0x0}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000280)={r11, 0x3}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={r11, 0x6}, 0x8)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x3c}}, 0x0) (async)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

198.653382ms ago: executing program 4 (id=1051):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x64}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x30, 0x4, 0x0, 0xfffff02c}, {0x6, 0x8}]}, 0x10)

26.006049ms ago: executing program 4 (id=1052):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2040840}, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x0, 0x44, 0x0, "50509d612da8d024b2db572a7e015d0fa45bee776d2db702b221e1ede35a902fc04467382836de80df3dbfc3f7a95915687787f75171bbc26b7abb9b49f26c3ab2a874015460d93cb75ad1809aa847fa"}, 0xd8)
socketpair(0x10, 0x4, 0x5, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_generic(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x144, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, {0x14}, [@nested={0x12e, 0x6c, 0x0, 0x1, [@generic="dfce21852039aead0a9b5fa906a64dccb0990e99d8f228f2f1380cdf339c356880c469efb6cce324e2bf74ff", @typed={0x8, 0x94, 0x0, 0x0, @pid}, @nested={0x4, 0x108}, @nested={0x4, 0x5e}, @generic="4235a9574f299c6108cecb71e50e7120a99190a953cca43a96683d82a8ec4c5454bb79828e5bb2bd2337161b307a2f7444bbc3ed2887bf3fd696e48dca773691cdcbdf1256dd5eb7c4b787122c90a1a2a3e4a5b393be1a069f67266438278f63d39bf07fdca01c34e1fd9ab459bef5e2445dac7b8f872b408dd65ea6fc58dbf6db3ea3d54498c34aa7766740160dd21cb1262bc0a345f6b66b068407882561ef83e51cb6be83d3c033d8c00fd91744b2082e7e8d546d7ba432724800fe54109e16ad383025fad0e6751aca5b37d3066298bb298926c82d9d085d36fe898e494bcf79e0d3c018131344f3", @nested={0x4, 0xaa}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xc, 0x1}, {0xa, 0x5}, {0x6, 0x1}, {0x10, 0x3}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x3}, @ptr={0x7}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @const={0x4}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000640)=""/87, 0xc0, 0x57, 0x1, 0x10001, 0x0, @void, @value}, 0x28)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r6)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1bc, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2fec2f09bf9a932a102c319540f7c7f185431cbd"}}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xad68}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "5d9950350d57b3cb8644634b1121a9a49e839563b21db6fd757290e95a9edf9749447d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1c0bfbdf693937cf5a83e30ec1d6dfc7c99c8f904020db3560166e9aca5b0e50dde7e81f"}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20044050}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x9ddb7bb0eaaa7134}, 0x4004000)
r10 = accept$inet6(r5, &(0x7f0000000b40)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000b80)=0x1c)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000c40)={0xb0ee, 0xa, 0x1})
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
r11 = openat$cgroup_freezer_state(r2, &(0x7f0000000d80), 0x2, 0x0)
close(r11)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r8)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r12, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc004)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000f00), 0x4)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0xf503, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r11, 0x4002f516, &(0x7f0000000f40)={0xff, 0x27})

0s ago: executing program 0 (id=1053):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2053, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x4, [@func={0xd, 0x0, 0x0, 0xc, 0x3}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x4, 0x6}, {0x3, 0x5, 0x9}, {0x3, 0x4, 0x7}, {0x4, 0x8000, 0x8}], 'p'}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x1}, @const={0xf, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000500)=""/228, 0x90, 0xe4, 0x1, 0x5, 0x0, @void, @value}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1a, 0x10001, 0x9, 0x5, 0x2000, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x10a8e86ecb24865c, 0xc, 0xb, 0x0, 0x8, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @generic={0x1, 0x7, 0x4, 0x8, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xd4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0x8, 0x738d7c94}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r4, r5, r6], &(0x7f00000007c0)=[{0x5, 0x5, 0xe, 0x4}, {0x2, 0x5, 0x1, 0x2}, {0x0, 0x5, 0xd, 0x6}, {0x4, 0x5, 0x4, 0x7}, {0x1, 0x100, 0x4, 0x1}], 0x10, 0x7, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

vmalloc_node_range_noprof+0x108/0x1390
[  120.502344][ T7134]  ? __pfx_warn_alloc+0x10/0x10
[  120.502370][ T7134]  ? kasan_save_track+0x3f/0x80
[  120.502396][ T7134]  ? __kasan_kmalloc+0x9d/0xb0
[  120.502425][ T7134]  ? xsk_setsockopt+0x449/0x840
[  120.502450][ T7134]  ? do_sock_setsockopt+0x3b1/0x710
[  120.502470][ T7134]  ? __x64_sys_setsockopt+0x187/0x210
[  120.502490][ T7134]  ? do_syscall_64+0xf3/0x210
[  120.502508][ T7134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.502538][ T7134]  __vmalloc_node_range_noprof+0x128/0x1390
[  120.502594][ T7134]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  120.502624][ T7134]  ? __kasan_kmalloc+0x9d/0xb0
[  120.502659][ T7134]  vmalloc_user_noprof+0x74/0x80
[  120.502682][ T7134]  ? xskq_create+0xb6/0x170
[  120.502708][ T7134]  xskq_create+0xb6/0x170
[  120.502740][ T7134]  xsk_init_queue+0xa1/0x100
[  120.502771][ T7134]  xsk_setsockopt+0x449/0x840
[  120.502801][ T7134]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.502829][ T7134]  ? __pfx_aa_sk_perm+0x10/0x10
[  120.502851][ T7134]  ? __lock_acquire+0xad5/0xd80
[  120.502881][ T7134]  ? aa_sock_opt_perm+0x79/0x120
[  120.502912][ T7134]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.502937][ T7134]  do_sock_setsockopt+0x3b1/0x710
[  120.502974][ T7134]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  120.502994][ T7134]  ? __fget_files+0x2a/0x420
[  120.503016][ T7134]  ? __fget_files+0x39d/0x420
[  120.503032][ T7134]  ? __fget_files+0x2a/0x420
[  120.503060][ T7134]  __x64_sys_setsockopt+0x187/0x210
[  120.503089][ T7134]  do_syscall_64+0xf3/0x210
[  120.503110][ T7134]  ? clear_bhb_loop+0x45/0xa0
[  120.503134][ T7134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.503154][ T7134] RIP: 0033:0x7f5ad0f8e169
[  120.503177][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.503194][ T7134] RSP: 002b:00007f5ad1da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  120.503217][ T7134] RAX: ffffffffffffffda RBX: 00007f5ad11b6080 RCX: 00007f5ad0f8e169
[  120.503233][ T7134] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  120.503245][ T7134] RBP: 00007f5ad1010a68 R08: 0000000000000004 R09: 0000000000000000
[  120.503258][ T7134] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.503272][ T7134] R13: 0000000000000000 R14: 00007f5ad11b6080 R15: 00007ffcf19ab928
[  120.503303][ T7134]  </TASK>
[  120.503312][ T7134] Mem-Info:
[  120.643939][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'.
[  120.895456][ T7134] active_anon:5011 inactive_anon:0 isolated_anon:0
[  120.895456][ T7134]  active_file:1425 inactive_file:38319 isolated_file:0
[  120.895456][ T7134]  unevictable:768 dirty:121 writeback:0
[  120.895456][ T7134]  slab_reclaimable:9787 slab_unreclaimable:100203
[  120.895456][ T7134]  mapped:29764 shmem:1440 pagetables:885
[  120.895456][ T7134]  sec_pagetables:0 bounce:0
[  120.895456][ T7134]  kernel_misc_reclaimable:0
[  120.895456][ T7134]  free:1343430 free_pcp:409 free_cma:0
[  120.942720][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'.
[  120.956540][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'.
[  120.978200][ T7134] Node 0 active_anon:20144kB inactive_anon:0kB active_file:5700kB inactive_file:153204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119056kB dirty:484kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11328kB pagetables:3540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.027658][ T7134] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.061016][ T7134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.163615][ T7134] lowmem_reserve[]: 0 2487 2487 2487 2487
[  121.171596][ T7134] Node 0 DMA32 free:1446052kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20436kB inactive_anon:0kB active_file:5700kB inactive_file:153104kB unevictable:1536kB writepending:484kB present:3129332kB managed:2547440kB mlocked:0kB bounce:0kB free_pcp:1740kB local_pcp:1132kB free_cma:0kB
[  121.289603][ T7134] lowmem_reserve[]: 0 0 0 0 0
[  121.327333][ T7134] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.394902][ T7134] lowmem_reserve[]: 0 0 0 0 0
[  121.405464][ T7134] Node 1 Normal free:3910760kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:32kB free_cma:0kB
[  121.466162][ T7134] lowmem_reserve[]: 0 0 0 0 0
[  121.471038][ T7134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  121.515436][ T7134] Node 0 DMA32: 2*4kB (ME) 5*8kB (ME) 8*16kB (UME) 130*32kB (UME) 104*64kB (UE) 86*128kB (UE) 51*256kB (UM) 31*512kB (UM) 11*1024kB (UM) 5*2048kB (M) 333*4096kB (ME) = 1436400kB
[  121.556952][ T7134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  121.595955][ T7134] Node 1 Normal: 230*4kB (U) 58*8kB (UME) 46*16kB (UME) 221*32kB (UME) 108*64kB (UME) 27*128kB (UME) 14*256kB (UM) 11*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910760kB
[  121.634865][ T7134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  121.654670][ T7134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.674879][ T7134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  121.684548][ T7134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.706545][ T7134] 44034 total pagecache pages
[  121.716737][ T7134] 0 pages in swap cache
[  121.720307][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[  121.721009][ T7134] Free swap  = 124996kB
[  121.754865][ T7134] Total swap = 124996kB
[  121.759054][ T7134] 2097051 pages RAM
[  121.762885][ T7134] 0 pages HighMem/MovableOnly
[  121.774853][ T7134] 428533 pages reserved
[  121.779044][ T7134] 0 pages cma reserved
[  121.892824][ T7156] lo speed is unknown, defaulting to 1000
[  122.051118][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  122.064163][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  122.072883][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  122.080642][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  122.088596][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  122.096696][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  122.104260][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[  122.112037][  T120] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1
[  122.139155][  T120] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  122.201624][ T7172] netlink: 84 bytes leftover after parsing attributes in process `syz.0.294'.
[  122.474203][ T7160] lo speed is unknown, defaulting to 1000
[  122.927404][ T7169] lo speed is unknown, defaulting to 1000
[  124.123812][ T7203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.244488][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.302'.
[  124.247802][ T7203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.371115][ T7203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.441085][ T7203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.595985][ T7203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.626002][ T7203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.646011][ T7203] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.674235][ T7203] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.773428][ T7221] tunl0: entered promiscuous mode
[  124.817745][ T7221] netlink: 'syz.2.305': attribute type 4 has an invalid length.
[  124.842524][ T7221] netlink: 9 bytes leftover after parsing attributes in process `syz.2.305'.
[  125.013109][ T7239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.214329][ T7248] syzkaller1: entered promiscuous mode
[  125.230831][ T7248] syzkaller1: entered allmulticast mode
[  125.362687][ T7257] dvmrp8: entered allmulticast mode
[  125.399418][ T7246] lo speed is unknown, defaulting to 1000
[  125.522679][ T7257] dvmrp8: left allmulticast mode
[  125.569520][ T7268] netlink: 'syz.0.318': attribute type 7 has an invalid length.
[  125.587463][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[  125.896781][ T7282] netlink: 5 bytes leftover after parsing attributes in process `syz.0.320'.
[  126.440776][ T7309] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  126.646068][ T7314] netlink: 'syz.0.327': attribute type 13 has an invalid length.
[  126.938308][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.947207][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.095643][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.116984][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.126813][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'.
[  127.150284][ T7330] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  127.242184][ T7314] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.259307][ T7314] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.269689][ T7314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.282038][ T7314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.380617][    T9] lo speed is unknown, defaulting to 1000
[  127.386256][ T7326] bridge_slave_0: left allmulticast mode
[  127.392911][    T9] s
z1: Port: 1 Link DOWN
[  127.408153][ T7326] bridge_slave_0: left promiscuous mode
[  127.424402][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.436598][ T7332] netlink: 248 bytes leftover after parsing attributes in process `syz.1.332'.
[  127.465189][ T7326] bridge_slave_1: left allmulticast mode
[  127.475108][ T7326] bridge_slave_1: left promiscuous mode
[  127.480977][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.500794][ T7326] bond0: (slave bond_slave_0): Releasing backup interface
[  127.512862][ T7326] bond0: (slave bond_slave_1): Releasing backup interface
[  127.533837][ T7326] team0: Port device team_slave_0 removed
[  127.547885][ T7326] team0: Port device team_slave_1 removed
[  127.584154][    T9] lo speed is unknown, defaulting to 1000
[  127.754185][ T7340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.334'.
[  128.091255][ T7366] netlink: 5 bytes leftover after parsing attributes in process `syz.1.336'.
[  128.154047][ T7367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  128.177721][ T7369] sctp: [Deprecated]: syz.0.337 (pid 7369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.177721][ T7369] Use struct sctp_sack_info instead
[  128.402635][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.338'.
[  128.414007][ T7375] netlink: 21 bytes leftover after parsing attributes in process `syz.0.337'.
[  128.442792][ T7364] xt_CT: No such helper "pptp"
[  128.619423][ T7375] gretap0: entered promiscuous mode
[  128.923160][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'.
[  129.039001][ T7400] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.048277][ T7400] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.057582][ T7400] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.066347][ T7400] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.180947][ T7400] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.190552][ T7400] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.200150][ T7400] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.209075][ T7400] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.889091][ T7397] batman_adv: batadv0: Adding interface: dummy0
[  129.964763][ T7397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.007529][ T7397] batman_adv: batadv0: Interface activated: dummy0
[  130.078111][ T7395] batadv0: mtu less than device minimum
[  130.106966][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.119268][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.131280][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.143260][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.155385][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.167364][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.179365][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.191404][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.203331][ T7395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.246602][ T7434] __nla_validate_parse: 1 callbacks suppressed
[  130.246624][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'.
[  130.332536][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'.
[  130.571745][ T7454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.352'.
[  130.618391][ T7450] xt_CT: No such helper "pptp"
[  130.858623][ T7460] lo speed is unknown, defaulting to 1000
[  131.659921][ T7494] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  131.687757][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'.
[  131.879706][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'.
[  132.048241][ T7512] netlink: 'syz.3.365': attribute type 4 has an invalid length.
[  132.414201][ T7521] lo speed is unknown, defaulting to 1000
[  132.705927][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.712278][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  132.867162][ T7538] netlink: 'syz.1.371': attribute type 12 has an invalid length.
[  133.451216][ T7566] netlink: 'syz.2.376': attribute type 178 has an invalid length.
[  133.460246][ T7567] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  133.505142][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'.
[  133.514232][ T7567] netlink: 52 bytes leftover after parsing attributes in process `syz.3.375'.
[  133.587326][ T7570] netlink: 'syz.4.367': attribute type 2 has an invalid length.
[  133.619131][ T7522] netlink: 'syz.4.367': attribute type 2 has an invalid length.
[  133.904752][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[  133.966913][ T7589] hsr0: entered allmulticast mode
[  133.972432][ T7589] hsr_slave_0: entered allmulticast mode
[  133.981142][ T7589] hsr_slave_1: entered allmulticast mode
[  133.991795][ T7591] netlink: 56 bytes leftover after parsing attributes in process `syz.0.384'.
[  134.089033][ T7596] sctp: [Deprecated]: syz.2.385 (pid 7596) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.089033][ T7596] Use struct sctp_sack_info instead
[  134.375280][ T7596] xt_CT: No such helper "pptp"
[  135.027370][ T7648] smc: net device bond0 applied user defined pnetid SYZ0
[  135.037436][ T7648] smc: net device bond0 erased user defined pnetid SYZ0
[  135.470590][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'.
[  136.059649][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'.
[  136.211448][ T7694] lo speed is unknown, defaulting to 1000
[  136.247634][ T7707] IPVS: Error connecting to the multicast addr
[  136.288695][ T7713] sctp: [Deprecated]: syz.4.404 (pid 7713) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.288695][ T7713] Use struct sctp_sack_info instead
[  136.487392][ T7705] xt_CT: No such helper "pptp"
[  136.634336][ T7726] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.657637][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'.
[  136.694600][ T7729] netlink: 84 bytes leftover after parsing attributes in process `syz.2.408'.
[  136.815554][ T7726] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.960863][ T5840] IPVS: starting estimator thread 0...
[  136.963089][ T7741] net_ratelimit: 12 callbacks suppressed
[  136.963117][ T7741] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  136.983034][ T7726] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.068328][ T7745] IPVS: using max 28 ests per chain, 67200 per kthread
[  137.154134][ T7752] xt_hashlimit: size too large, truncated to 1048576
[  137.190108][ T7752] xt_hashlimit: max too large, truncated to 1048576
[  137.207863][ T7755] GUP no longer grows the stack in syz.0.415 (7755): 200000006000-20000000a000 (200000005000)
[  137.221526][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.0.415 Not tainted 6.15.0-rc2-syzkaller-00578-g12b196568a3a #0 PREEMPT(full) 
[  137.221551][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  137.221562][ T7755] Call Trace:
[  137.221569][ T7755]  <TASK>
[  137.221577][ T7755]  dump_stack_lvl+0x241/0x360
[  137.221617][ T7755]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.221643][ T7755]  ? __pfx__printk+0x10/0x10
[  137.221664][ T7755]  ? find_vma+0xfa/0x170
[  137.221695][ T7755]  __get_user_pages+0x3b46/0x4180
[  137.221750][ T7755]  ? __pfx___get_user_pages+0x10/0x10
[  137.221768][ T7755]  ? __gup_longterm_locked+0xd86/0x1850
[  137.221789][ T7755]  ? __pfx_down_read_killable+0x10/0x10
[  137.221812][ T7755]  ? __lock_acquire+0xad5/0xd80
[  137.221852][ T7755]  __gup_longterm_locked+0xec1/0x1850
[  137.221904][ T7755]  ? try_get_folio+0xfd/0x6a0
[  137.221928][ T7755]  ? try_grab_folio_fast+0x1d6/0x500
[  137.221950][ T7755]  ? __pfx___gup_longterm_locked+0x10/0x10
[  137.221980][ T7755]  ? gup_fast_fallback+0x203f/0x2980
[  137.222003][ T7755]  gup_fast_fallback+0x2227/0x2980
[  137.222057][ T7755]  ? __pfx_gup_fast_fallback+0x10/0x10
[  137.222084][ T7755]  ? rcu_is_watching+0x15/0xb0
[  137.222102][ T7755]  ? trace_sched_exit_tp+0x3c/0x120
[  137.222126][ T7755]  ? __schedule+0x1ba6/0x5240
[  137.222166][ T7755]  ? __lock_acquire+0xad5/0xd80
[  137.222194][ T7755]  ? __mutex_trylock_common+0x184/0x2e0
[  137.222214][ T7755]  ? is_valid_gup_args+0x124/0x200
[  137.222238][ T7755]  get_user_pages_fast+0xd2/0x160
[  137.222262][ T7755]  ? __pfx_get_user_pages_fast+0x10/0x10
[  137.222280][ T7755]  ? rcu_is_watching+0x15/0xb0
[  137.222298][ T7755]  ? trace_contention_end+0x3c/0x120
[  137.222317][ T7755]  ? __mutex_lock+0x380/0x10c0
[  137.222339][ T7755]  __iov_iter_get_pages_alloc+0x374/0xa40
[  137.222378][ T7755]  ? __se_sys_vmsplice+0x4bc/0x1430
[  137.222410][ T7755]  iov_iter_get_pages2+0xd1/0x130
[  137.222442][ T7755]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  137.222482][ T7755]  __se_sys_vmsplice+0x6c6/0x1430
[  137.222532][ T7755]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  137.222561][ T7755]  ? __pfx_futex_wait+0x10/0x10
[  137.222602][ T7755]  ? __lock_acquire+0xad5/0xd80
[  137.222680][ T7755]  ? do_syscall_64+0xb6/0x210
[  137.222702][ T7755]  do_syscall_64+0xf3/0x210
[  137.222720][ T7755]  ? clear_bhb_loop+0x45/0xa0
[  137.222743][ T7755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.222762][ T7755] RIP: 0033:0x7f5676f8e169
[  137.222778][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.222793][ T7755] RSP: 002b:00007f5674df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  137.222814][ T7755] RAX: ffffffffffffffda RBX: 00007f56771b6080 RCX: 00007f5676f8e169
[  137.222827][ T7755] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[  137.222840][ T7755] RBP: 00007f5677010a68 R08: 0000000000000000 R09: 0000000000000000
[  137.222851][ T7755] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  137.222862][ T7755] R13: 0000000000000000 R14: 00007f56771b6080 R15: 00007ffeecba4578
[  137.222892][ T7755]  </TASK>
[  137.236885][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'.
[  137.282319][ T7726] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.711248][ T7763] sctp: [Deprecated]: syz.0.417 (pid 7763) Use of int in maxseg socket option.
[  137.711248][ T7763] Use struct sctp_assoc_value instead
[  137.729788][ T7726] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.794765][ T7726] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.836069][ T7726] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.854274][ T7726] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.021588][ T7776] sctp: [Deprecated]: syz.4.420 (pid 7776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.021588][ T7776] Use struct sctp_sack_info instead
[  138.066372][ T7778] ieee802154 phy0 wpan0: encryption failed: -90
[  138.147636][ T7774] xt_CT: No such helper "pptp"
[  138.248697][ T7782] geneve2: entered promiscuous mode
[  138.255866][ T7782] geneve2: entered allmulticast mode
[  138.365097][ T7788] netlink: 'syz.0.424': attribute type 2 has an invalid length.
[  138.384919][ T7788] netlink: 'syz.0.424': attribute type 8 has an invalid length.
[  138.392598][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.424'.
[  138.517294][ T7797] netlink: zone id is out of range
[  138.523310][ T7797] netlink: zone id is out of range
[  138.529934][ T7797] netlink: zone id is out of range
[  138.535583][ T7797] netlink: zone id is out of range
[  138.540786][ T7797] netlink: zone id is out of range
[  138.546599][ T7797] netlink: zone id is out of range
[  138.552639][ T7797] netlink: zone id is out of range
[  138.561587][ T7797] netlink: zone id is out of range
[  138.575071][ T7797] netlink: zone id is out of range
[  138.633143][ T7803] netlink: 'syz.2.428': attribute type 5 has an invalid length.
[  138.659937][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[  138.784485][ T7813] sctp: [Deprecated]: syz.0.433 (pid 7813) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.784485][ T7813] Use struct sctp_sack_info instead
[  138.863148][ T7819] netlink: 'syz.4.435': attribute type 13 has an invalid length.
[  138.922360][ T7813] xt_CT: No such helper "pptp"
[  139.115959][ T7834] netlink: 558 bytes leftover after parsing attributes in process `syz.3.440'.
[  139.331565][ T7850] netlink: 80 bytes leftover after parsing attributes in process `syz.0.441'.
[  139.869681][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'.
[  139.937664][ T7870] sctp: [Deprecated]: syz.4.448 (pid 7870) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.937664][ T7870] Use struct sctp_sack_info instead
[  140.003691][ T7863] syzkaller0: entered promiscuous mode
[  140.009345][ T7863] syzkaller0: entered allmulticast mode
[  140.077923][ T7865] xt_CT: No such helper "pptp"
[  140.200440][ T7875] netlink: 'syz.2.450': attribute type 4 has an invalid length.
[  140.348877][ T7883] netlink: 'syz.0.454': attribute type 11 has an invalid length.
[  140.374231][ T7883] netlink: 'syz.0.454': attribute type 11 has an invalid length.
[  141.602868][ T7898] __nla_validate_parse: 1 callbacks suppressed
[  141.602890][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  141.611238][ T7900] SET target dimension over the limit!
[  141.639457][ T7900] x_tables: ip_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0
[  141.652292][ T7902] netlink: 'syz.1.460': attribute type 1 has an invalid length.
[  141.871636][ T7905] sctp: [Deprecated]: syz.2.463 (pid 7905) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.871636][ T7905] Use struct sctp_sack_info instead
[  141.950977][ T7902] bond0: entered promiscuous mode
[  141.956965][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.996217][ T7905] xt_CT: No such helper "pptp"
[  142.016251][ T7903] bond0: (slave bridge1): making interface the new active one
[  142.036438][ T7903] bridge1: entered promiscuous mode
[  142.050604][ T7903] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  142.156384][ T7915] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  142.619243][ T7940] lo speed is unknown, defaulting to 1000
[  143.144328][ T7955] netlink: 'syz.2.474': attribute type 10 has an invalid length.
[  143.229068][ T7957] netlink: 'syz.2.474': attribute type 10 has an invalid length.
[  143.412144][ T7961] sctp: [Deprecated]: syz.1.476 (pid 7961) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.412144][ T7961] Use struct sctp_sack_info instead
[  143.538001][ T7961] xt_CT: No such helper "pptp"
[  143.548131][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.559662][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.569528][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.585982][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.597427][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.830425][ T7979] netlink: 44 bytes leftover after parsing attributes in process `syz.1.480'.
[  143.852399][ T7979] syzkaller0: entered promiscuous mode
[  143.876150][ T7979] syzkaller0: entered allmulticast mode
[  144.044354][ T7972] lo speed is unknown, defaulting to 1000
[  144.087687][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.484'.
[  144.995126][ T8003] lo speed is unknown, defaulting to 1000
[  145.379452][ T8025] sctp: [Deprecated]: syz.4.490 (pid 8025) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.379452][ T8025] Use struct sctp_sack_info instead
[  145.607758][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'.
[  145.673774][ T8028] xt_CT: No such helper "pptp"
[  145.738213][   T55] Bluetooth: hci3: command tx timeout
[  145.773589][ T7972] chnl_net:caif_netlink_parms(): no params data found
[  145.965401][ T8036] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20002
[  146.191243][ T8047] netlink: 'syz.4.494': attribute type 10 has an invalid length.
[  146.280351][ T8047] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  146.316457][ T8044] delete_channel: no stack
[  146.453907][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.465847][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.473756][ T7972] bridge_slave_0: entered allmulticast mode
[  146.484366][ T7972] bridge_slave_0: entered promiscuous mode
[  146.547740][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.558402][ T8058] xt_hashlimit: max too large, truncated to 1048576
[  146.582311][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.610376][ T7972] bridge_slave_1: entered allmulticast mode
[  146.636852][ T7972] bridge_slave_1: entered promiscuous mode
[  146.756797][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.815008][ T8062] netlink: 'syz.4.498': attribute type 1 has an invalid length.
[  146.818340][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.822683][ T8062] netlink: 224 bytes leftover after parsing attributes in process `syz.4.498'.
[  146.822740][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'.
[  146.904971][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'.
[  146.920505][ T7972] team0: Port device team_slave_0 added
[  146.946010][ T7972] team0: Port device team_slave_1 added
[  147.042214][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.051428][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.077540][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.120216][ T8072] lo speed is unknown, defaulting to 1000
[  147.130246][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.137913][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.179748][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'.
[  147.198958][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.501'.
[  147.207988][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.220484][ T8078] sctp: [Deprecated]: syz.4.502 (pid 8078) Use of struct sctp_assoc_value in delayed_ack socket option.
[  147.220484][ T8078] Use struct sctp_sack_info instead
[  147.255629][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'.
[  147.268427][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'.
[  147.409386][ T8075] xt_CT: No such helper "pptp"
[  147.710033][ T7972] hsr_slave_0: entered promiscuous mode
[  147.793131][ T7972] hsr_slave_1: entered promiscuous mode
[  147.812106][ T7972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.821092][   T55] Bluetooth: hci3: command tx timeout
[  147.834019][ T7972] Cannot create hsr debugfs directory
[  147.921750][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'.
[  148.251043][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'.
[  148.291121][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'.
[  148.367981][ T8125] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[  148.642938][ T8135] sctp: [Deprecated]: syz.1.518 (pid 8135) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.642938][ T8135] Use struct sctp_sack_info instead
[  148.797368][ T8133] xt_CT: No such helper "pptp"
[  149.133557][ T7972] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.280829][ T7972] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.381793][ T7046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.410192][ T7046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.467737][ T7972] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.627044][ T7972] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.691542][ T8168] batman_adv: batadv0: Adding interface: macvlan2
[  149.724940][ T8168] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.765024][ T8168] batman_adv: batadv0: Interface activated: macvlan2
[  149.913526][   T55] Bluetooth: hci3: command tx timeout
[  149.989886][ T7972] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.033859][ T7972] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  150.062191][ T8181] lo speed is unknown, defaulting to 1000
[  150.062591][ T7972] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  150.118160][ T7972] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  150.307938][ T8193] sctp: [Deprecated]: syz.0.531 (pid 8193) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.307938][ T8193] Use struct sctp_sack_info instead
[  150.445352][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.520168][ T7972] 8021q: adding VLAN 0 to HW filter on device team0
[  150.576352][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.584025][ T7043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.664384][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.671587][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.093310][ T8216] xt_hashlimit: size too large, truncated to 1048576
[  151.142977][ T8215] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  151.190121][ T8215] netlink: 'syz.0.537': attribute type 1 has an invalid length.
[  151.206271][ T8216] syz.4.536: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  151.275863][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: syz.4.536 Not tainted 6.15.0-rc2-syzkaller-00578-g12b196568a3a #0 PREEMPT(full) 
[  151.275893][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  151.275905][ T8216] Call Trace:
[  151.275913][ T8216]  <TASK>
[  151.275921][ T8216]  dump_stack_lvl+0x241/0x360
[  151.275957][ T8216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.275985][ T8216]  ? __pfx__printk+0x10/0x10
[  151.276011][ T8216]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  151.276035][ T8216]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  151.276056][ T8216]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  151.276080][ T8216]  warn_alloc+0x27c/0x410
[  151.276112][ T8216]  ? __pfx_warn_alloc+0x10/0x10
[  151.276144][ T8216]  ? htable_create+0x10c/0x890
[  151.276163][ T8216]  ? __get_vm_area_node+0x1c8/0x2d0
[  151.276183][ T8216]  ? __get_vm_area_node+0x25c/0x2d0
[  151.276212][ T8216]  __vmalloc_node_range_noprof+0x634/0x1390
[  151.276270][ T8216]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  151.276302][ T8216]  ? __kasan_kmalloc_large+0x1a/0xa0
[  151.276338][ T8216]  ? htable_create+0x10c/0x890
[  151.276359][ T8216]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  151.276382][ T8216]  ? htable_create+0x10c/0x890
[  151.276400][ T8216]  ? htable_create+0x10c/0x890
[  151.276419][ T8216]  ? hashlimit_pernet+0x23/0x240
[  151.276444][ T8216]  htable_create+0x10c/0x890
[  151.276471][ T8216]  hashlimit_mt_check_common+0x763/0xa50
[  151.276502][ T8216]  xt_check_match+0x36a/0xa40
[  151.276536][ T8216]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  151.276557][ T8216]  ? __pfx_xt_check_match+0x10/0x10
[  151.276601][ T8216]  ? xt_find_match+0x1e5/0x240
[  151.276640][ T8216]  translate_table+0x1721/0x24b0
[  151.276666][ T8216]  ? __x64_sys_setsockopt+0x187/0x210
[  151.276686][ T8216]  ? do_syscall_64+0xf3/0x210
[  151.276704][ T8216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.276753][ T8216]  ? __pfx_translate_table+0x10/0x10
[  151.276812][ T8216]  ? copy_from_sockptr_offset+0x60/0xb0
[  151.276844][ T8216]  do_ip6t_set_ctl+0xb79/0x1190
[  151.276879][ T8216]  ? __pfx___mutex_trylock_common+0x10/0x10
[  151.276913][ T8216]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  151.276956][ T8216]  ? __mutex_unlock_slowpath+0x229/0x800
[  151.276985][ T8216]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  151.277009][ T8216]  ? futex_wait+0x287/0x370
[  151.277035][ T8216]  ? __pfx_futex_wait+0x10/0x10
[  151.277064][ T8216]  nf_setsockopt+0x295/0x2c0
[  151.277089][ T8216]  rawv6_setsockopt+0x2b3/0x6d0
[  151.277111][ T8216]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  151.277131][ T8216]  ? aa_sock_opt_perm+0x79/0x120
[  151.277154][ T8216]  ? sock_common_setsockopt+0x37/0xc0
[  151.277185][ T8216]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  151.277211][ T8216]  do_sock_setsockopt+0x3b1/0x710
[  151.277238][ T8216]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  151.277255][ T8216]  ? __fget_files+0x2a/0x420
[  151.277274][ T8216]  ? __fget_files+0x39d/0x420
[  151.277297][ T8216]  ? __fget_files+0x2a/0x420
[  151.277323][ T8216]  __x64_sys_setsockopt+0x187/0x210
[  151.277350][ T8216]  do_syscall_64+0xf3/0x210
[  151.277368][ T8216]  ? clear_bhb_loop+0x45/0xa0
[  151.277390][ T8216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.277408][ T8216] RIP: 0033:0x7fa621d8e169
[  151.277424][ T8216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.277439][ T8216] RSP: 002b:00007fa622c8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  151.277459][ T8216] RAX: ffffffffffffffda RBX: 00007fa621fb5fa0 RCX: 00007fa621d8e169
[  151.277472][ T8216] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  151.277483][ T8216] RBP: 00007fa621e10a68 R08: 0000000000000588 R09: 0000000000000000
[  151.277495][ T8216] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  151.277506][ T8216] R13: 0000000000000000 R14: 00007fa621fb5fa0 R15: 00007ffd4bced078
[  151.277536][ T8216]  </TASK>
[  151.277543][ T8216] Mem-Info:
[  151.690654][ T8216] active_anon:5360 inactive_anon:0 isolated_anon:0
[  151.690654][ T8216]  active_file:1491 inactive_file:38338 isolated_file:0
[  151.690654][ T8216]  unevictable:768 dirty:83 writeback:0
[  151.690654][ T8216]  slab_reclaimable:10696 slab_unreclaimable:130957
[  151.690654][ T8216]  mapped:32922 shmem:1693 pagetables:949
[  151.690654][ T8216]  sec_pagetables:0 bounce:0
[  151.690654][ T8216]  kernel_misc_reclaimable:0
[  151.690654][ T8216]  free:1307616 free_pcp:2805 free_cma:0
[  151.824996][ T8216] Node 0 active_anon:20176kB inactive_anon:0kB active_file:5964kB inactive_file:153280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123484kB dirty:344kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11488kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  151.920258][ T8216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  151.976137][   T55] Bluetooth: hci3: command tx timeout
[  152.007544][ T8243] netlink: 'syz.1.540': attribute type 1 has an invalid length.
[  152.026228][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.037360][ T8216] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.081952][ T8216] lowmem_reserve[]: 0 2487 2487 2487 2487
[  152.092242][ T8216] Node 0 DMA32 free:1306036kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19968kB inactive_anon:0kB active_file:5964kB inactive_file:153180kB unevictable:1536kB writepending:340kB present:3129332kB managed:2547440kB mlocked:0kB bounce:0kB free_pcp:12356kB local_pcp:2204kB free_cma:0kB
[  152.153794][ T8216] lowmem_reserve[]: 0 0 0 0 0
[  152.158757][ T8216] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.186113][ T8216] lowmem_reserve[]: 0 0 0 0 0
[  152.190936][ T8216] Node 1 Normal free:3910908kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.220519][ T8216] lowmem_reserve[]: 0 0 0 0 0
[  152.227697][ T8216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  152.241718][ T8216] Node 0 DMA32: 31*4kB (UM) 105*8kB (ME) 148*16kB (UME) 129*32kB (UME) 30*64kB (ME) 7*128kB (UME) 15*256kB (M) 55*512kB (UM) 22*1024kB (UME) 6*2048kB (UM) 300*4096kB (UM) = 1305892kB
[  152.260322][ T8216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  152.272544][ T8216] Node 1 Normal: 227*4kB (U) 58*8kB (UME) 46*16kB (UME) 216*32kB (UME) 107*64kB (UME) 28*128kB (UME) 13*256kB (UM) 10*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910908kB
[  152.291740][ T8216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  152.301402][ T8216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  152.310910][ T8216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  152.322842][ T8244] bond2 (unregistering): Released all slaves
[  152.324870][ T8216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  152.395441][ T8216] 41259 total pagecache pages
[  152.409521][ T8216] 0 pages in swap cache
[  152.503909][ T7972] veth0_vlan: entered promiscuous mode
[  152.509615][ T8216] Free swap  = 124996kB
[  152.513819][ T8216] Total swap = 124996kB
[  152.545082][ T8216] 2097051 pages RAM
[  152.548939][ T8216] 0 pages HighMem/MovableOnly
[  152.565105][ T8216] 428533 pages reserved
[  152.569290][ T8216] 0 pages cma reserved
[  152.620607][ T7972] veth1_vlan: entered promiscuous mode
[  152.731368][ T7972] veth0_macvtap: entered promiscuous mode
[  152.752479][ T7972] veth1_macvtap: entered promiscuous mode
[  152.770057][ T8262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.777675][ T8262] IPv6: NLM_F_CREATE should be set when creating new route
[  152.784996][ T8262] IPv6: NLM_F_CREATE should be set when creating new route
[  152.829973][ T8262] macsec1: entered promiscuous mode
[  152.838253][ T8262] macsec1: entered allmulticast mode
[  152.856086][ T8268] sctp: [Deprecated]: syz.4.547 (pid 8268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.856086][ T8268] Use struct sctp_sack_info instead
[  152.875440][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.890196][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.899078][ T8270] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[  152.900939][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.919775][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.947516][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.097660][ T8271] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  153.127601][ T6382] net_ratelimit: 1 callbacks suppressed
[  153.127619][ T6382] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  153.148613][ T8273] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.276426][ T6382] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  153.386139][ T8281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.399386][ T8270] veth3: entered promiscuous mode
[  153.408712][ T8270] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  153.469953][ T8271] bridge_slave_0: left allmulticast mode
[  153.498020][ T8271] bridge_slave_0: left promiscuous mode
[  153.507051][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.531762][ T8271] bridge_slave_1: left allmulticast mode
[  153.540793][ T8271] bridge_slave_1: left promiscuous mode
[  153.551515][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.587848][ T8271] team0: Port device team_slave_0 removed
[  153.609244][ T8271] team0: Port device team_slave_1 removed
[  153.626042][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.642231][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.652837][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.681222][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.994294][ T8271] bond0: (slave bridge1): Releasing backup interface
[  154.010419][ T8271] bridge1: left promiscuous mode
[  154.107706][ T8271] bond3: (slave ip6gretap1): Removing an active aggregator
[  154.124298][ T8271] bond3: (slave ip6gretap1): Releasing backup interface
[  154.132121][ T8271] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 5e:aa:1d:d7:83:95 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  154.162684][ T8271] bond3: (slave veth3): Releasing backup interface
[  154.192522][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.207814][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.222326][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.245935][ T7972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.256672][ T7972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.268466][ T7972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.277848][ T8303] sctp: [Deprecated]: syz.1.559 (pid 8303) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.277848][ T8303] Use struct sctp_sack_info instead
[  154.295593][ T7972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.391533][ T8308] ������o]U�.�: renamed from lo (while UP)
[  154.514055][ T7052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.518800][ T8312] xt_bpf: check failed: parse error
[  154.540073][ T7052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.553883][ T8312] __nla_validate_parse: 7 callbacks suppressed
[  154.553898][ T8312] netlink: 124 bytes leftover after parsing attributes in process `syz.2.561'.
[  154.582288][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.606191][ T8316] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.614376][ T8316] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.623162][ T8316] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.631583][ T8316] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.647218][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.655639][ T8316] vxlan0: entered promiscuous mode
[  154.661147][ T8316] vxlan0: entered allmulticast mode
[  154.669267][ T8316] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.677979][ T8316] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.687258][ T8316] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.697218][ T8316] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.859890][ T8322] sctp: [Deprecated]: syz.2.564 (pid 8322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.859890][ T8322] Use struct sctp_sack_info instead
[  154.964346][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'.
[  155.248372][ T7054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.289299][ T8332] IPVS: Unknown mcast interface: veth0_virt_wifi
[  155.372609][ T7054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.467036][ T7054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.802703][ T7054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.814157][ T8357] netlink: 'syz.1.574': attribute type 10 has an invalid length.
[  155.932825][ T8357] team0: Device dummy0 is up. Set it down before adding it as a team port
[  156.109664][ T8368] sctp: [Deprecated]: syz.2.576 (pid 8368) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.109664][ T8368] Use struct sctp_sack_info instead
[  156.384594][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.399061][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.407754][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.432486][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.441428][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.492272][ T7054] bridge_slave_1: left allmulticast mode
[  156.523813][ T7054] bridge_slave_1: left promiscuous mode
[  156.556753][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.623086][ T7054] bridge_slave_0: left allmulticast mode
[  156.640145][ T7054] bridge_slave_0: left promiscuous mode
[  156.661383][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.016679][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'.
[  157.577191][ T7054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.588014][ T7054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.599338][ T7054] bond0 (unregistering): Released all slaves
[  157.740871][ T8386] lo speed is unknown, defaulting to 1000
[  158.450902][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  158.535706][ T5847] Bluetooth: hci3: command tx timeout
[  158.672087][ T8455] netlink: 9 bytes leftover after parsing attributes in process `syz.0.589'.
[  158.826047][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  158.914946][ T7054] hsr_slave_0: left promiscuous mode
[  158.940778][ T7054] hsr_slave_1: left promiscuous mode
[  158.962345][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.990617][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.017847][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.041988][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.089101][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.591'.
[  159.131021][ T7054] veth1_macvtap: left promiscuous mode
[  159.144266][ T7054] veth0_macvtap: left promiscuous mode
[  159.157989][ T7054] veth1_vlan: left promiscuous mode
[  159.186045][ T7054] veth0_vlan: left promiscuous mode
[  159.323381][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'.
[  159.474658][ T8494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'.
[  159.489728][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'.
[  159.680219][ T8497] xt_hashlimit: overflow, rate too high: 1125899906842624
[  159.701829][ T8497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.594'.
[  159.713267][ T7054] team0 (unregistering): Port device team_slave_1 removed
[  159.749641][ T7054] team0 (unregistering): Port device team_slave_0 removed
[  160.128197][ T8486] tipc: Started in network mode
[  160.133452][ T8486] tipc: Node identity 128d812b36b7, cluster identity 4711
[  160.149637][ T8486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.189048][ T8500] netlink: 'syz.1.597': attribute type 11 has an invalid length.
[  160.214736][ T8500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.597'.
[  160.255300][ T8496] syzkaller0: entered promiscuous mode
[  160.261361][ T8496] syzkaller0: entered allmulticast mode
[  160.275863][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[  160.557548][ T8520] netlink: 148 bytes leftover after parsing attributes in process `syz.0.602'.
[  160.567734][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'.
[  160.615017][ T5847] Bluetooth: hci3: command tx timeout
[  160.683837][ T8527] syzkaller0: left promiscuous mode
[  160.692543][ T8527] syzkaller0: left allmulticast mode
[  160.823183][ T8386] chnl_net:caif_netlink_parms(): no params data found
[  160.996746][ T8541] sctp: [Deprecated]: syz.2.604 (pid 8541) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.996746][ T8541] Use struct sctp_sack_info instead
[  161.265017][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'.
[  161.266398][   T52] tipc: Node number set to 607813931
[  161.458316][ T8569] netlink: 'syz.4.608': attribute type 1 has an invalid length.
[  161.523884][ T8386] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.569975][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.586282][ T8386] bridge_slave_0: entered allmulticast mode
[  161.601139][ T8386] bridge_slave_0: entered promiscuous mode
[  161.638967][ T8386] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.654960][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.662232][ T8386] bridge_slave_1: entered allmulticast mode
[  161.694252][ T8386] bridge_slave_1: entered promiscuous mode
[  161.712631][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  161.738329][ T8576] netlink: 56 bytes leftover after parsing attributes in process `syz.0.611'.
[  161.775213][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'.
[  161.785432][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'.
[  161.863857][ T8582] sctp: [Deprecated]: syz.4.612 (pid 8582) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.863857][ T8582] Use struct sctp_sack_info instead
[  161.871254][ T8386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.933891][ T8585] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  161.954349][ T8386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.969571][ T8585] netlink: 'syz.1.614': attribute type 4 has an invalid length.
[  162.183629][ T8386] team0: Port device team_slave_0 added
[  162.222914][ T8386] team0: Port device team_slave_1 added
[  162.342248][ T8601] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[  162.386008][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.393341][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.421350][ T8386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.441219][ T8605] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[  162.493558][ T8607] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.527790][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.540330][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.568077][ T8386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.587339][ T8613] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  162.607442][ T8613] bond4: (slave macvlan2): Enslaving as a backup interface with a down link
[  162.695144][ T5847] Bluetooth: hci3: command tx timeout
[  162.840823][ T8622] sctp: [Deprecated]: syz.1.620 (pid 8622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.840823][ T8622] Use struct sctp_sack_info instead
[  162.872684][ T8386] hsr_slave_0: entered promiscuous mode
[  162.893322][ T8386] hsr_slave_1: entered promiscuous mode
[  162.903966][ T8386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.976657][ T8386] Cannot create hsr debugfs directory
[  163.199480][ T8633] netlink: 'syz.0.625': attribute type 1 has an invalid length.
[  163.712607][ T8644] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.836344][   T30] audit: type=1800 audit(1745323386.504:2): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="memory.events" dev="tmpfs" ino=708 res=0 errno=0
[  163.897050][   T30] audit: type=1804 audit(1745323386.564:3): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.632" name="/newroot/134/memory.events" dev="tmpfs" ino=708 res=1 errno=0
[  164.405120][ T8677] lo: entered promiscuous mode
[  164.431105][ T8677] lo: entered allmulticast mode
[  164.441437][ T8677] tunl0: entered promiscuous mode
[  164.451386][ T8677] tunl0: entered allmulticast mode
[  164.461843][ T8677] gre0: entered promiscuous mode
[  164.474312][ T8677] gre0: entered allmulticast mode
[  164.486732][ T8677] gretap0: entered allmulticast mode
[  164.502539][ T8677] erspan0: entered promiscuous mode
[  164.518609][ T8677] erspan0: entered allmulticast mode
[  164.533951][ T8677] ip_vti0: entered promiscuous mode
[  164.543921][ T8677] ip_vti0: entered allmulticast mode
[  164.552240][ T8677] ip6_vti0: entered promiscuous mode
[  164.558943][ T8677] ip6_vti0: entered allmulticast mode
[  164.564738][ T8677] sit0: entered promiscuous mode
[  164.569996][ T8677] sit0: entered allmulticast mode
[  164.586754][ T8677] ip6tnl0: entered promiscuous mode
[  164.595812][ T8677] ip6tnl0: entered allmulticast mode
[  164.601574][ T8677] ip6gre0: entered promiscuous mode
[  164.606980][ T8677] ip6gre0: entered allmulticast mode
[  164.622997][ T8677] syz_tun: entered promiscuous mode
[  164.632968][ T8677] syz_tun: entered allmulticast mode
[  164.645058][ T8677] ip6gretap0: entered promiscuous mode
[  164.663386][ T8677] ip6gretap0: entered allmulticast mode
[  164.669855][ T8677] bridge0: entered promiscuous mode
[  164.685685][ T8677] bridge0: entered allmulticast mode
[  164.694994][ T8677] vcan0: entered promiscuous mode
[  164.707054][ T8677] vcan0: entered allmulticast mode
[  164.714970][ T8677] bond0: entered promiscuous mode
[  164.732721][ T8677] bond_slave_0: entered promiscuous mode
[  164.738888][ T8677] bond_slave_1: entered promiscuous mode
[  164.748915][ T8677] bond0: entered allmulticast mode
[  164.754132][ T8677] bond_slave_0: entered allmulticast mode
[  164.760123][ T8677] bond_slave_1: entered allmulticast mode
[  164.769131][ T8677] team0: entered promiscuous mode
[  164.774384][ T8677] team_slave_0: entered promiscuous mode
[  164.780347][ T5847] Bluetooth: hci3: command tx timeout
[  164.787849][ T8677] team_slave_1: entered promiscuous mode
[  164.794116][ T8677] team0: entered allmulticast mode
[  164.799473][ T8677] team_slave_0: entered allmulticast mode
[  164.805368][ T8677] team_slave_1: entered allmulticast mode
[  164.811532][ T8677] dummy0: entered promiscuous mode
[  164.816803][ T8677] dummy0: entered allmulticast mode
[  164.822391][ T8677] nlmon0: entered promiscuous mode
[  164.825576][ T8708] xt_l2tp: wrong L2TP version: 0
[  164.828661][ T8677] nlmon0: entered allmulticast mode
[  164.838255][ T8677] caif0: entered promiscuous mode
[  164.843369][ T8677] caif0: entered allmulticast mode
[  164.849041][ T8677] batadv0: entered promiscuous mode
[  164.854336][ T8677] batadv0: entered allmulticast mode
[  164.860031][ T8677] veth0: entered promiscuous mode
[  164.865207][ T8677] veth0: entered allmulticast mode
[  164.870718][ T8677] veth1: entered promiscuous mode
[  164.876074][ T8677] veth1: entered allmulticast mode
[  164.881587][ T8677] wg1: entered promiscuous mode
[  164.886612][ T8677] wg1: entered allmulticast mode
[  164.891900][ T8677] wg2: entered promiscuous mode
[  164.896935][ T8677] wg2: entered allmulticast mode
[  164.903479][ T8677] veth0_to_bridge: entered promiscuous mode
[  164.909670][ T8677] veth0_to_bridge: entered allmulticast mode
[  164.916189][ T8677] veth1_to_bridge: entered promiscuous mode
[  164.922179][ T8677] veth1_to_bridge: entered allmulticast mode
[  164.929763][ T8677] veth0_to_bond: entered promiscuous mode
[  164.935943][ T8677] veth0_to_bond: entered allmulticast mode
[  164.942260][ T8677] veth1_to_bond: entered promiscuous mode
[  164.948118][ T8677] veth1_to_bond: entered allmulticast mode
[  164.954493][ T8677] veth0_to_team: entered promiscuous mode
[  164.963860][ T8677] veth0_to_team: entered allmulticast mode
[  164.972271][ T8711] __nla_validate_parse: 9 callbacks suppressed
[  164.972286][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'.
[  164.978567][ T8677] veth1_to_team: entered promiscuous mode
[  164.978594][ T8677] veth1_to_team: entered allmulticast mode
[  164.978919][ T8677] veth0_to_batadv: entered promiscuous mode
[  165.007500][ T8677] veth0_to_batadv: entered allmulticast mode
[  165.013647][ T8677] batadv_slave_0: entered promiscuous mode
[  165.020038][ T8677] batadv_slave_0: entered allmulticast mode
[  165.026309][ T8677] veth1_to_batadv: entered promiscuous mode
[  165.033099][ T8677] veth1_to_batadv: entered allmulticast mode
[  165.039271][ T8677] batadv_slave_1: entered promiscuous mode
[  165.045739][ T8677] batadv_slave_1: entered allmulticast mode
[  165.051777][ T8677] xfrm0: entered promiscuous mode
[  165.056844][ T8677] xfrm0: entered allmulticast mode
[  165.062084][ T8677] veth0_to_hsr: entered promiscuous mode
[  165.067787][ T8677] veth0_to_hsr: entered allmulticast mode
[  165.073835][ T8677] hsr_slave_0: entered allmulticast mode
[  165.079709][ T8677] veth1_to_hsr: entered promiscuous mode
[  165.085526][ T8677] veth1_to_hsr: entered allmulticast mode
[  165.091426][ T8677] hsr_slave_1: entered allmulticast mode
[  165.097266][ T8677] hsr0: entered promiscuous mode
[  165.102223][ T8677] hsr0: entered allmulticast mode
[  165.107387][ T8677] veth1_virt_wifi: entered promiscuous mode
[  165.113283][ T8677] veth1_virt_wifi: entered allmulticast mode
[  165.119564][ T8677] veth0_virt_wifi: entered promiscuous mode
[  165.125574][ T8677] veth0_virt_wifi: entered allmulticast mode
[  165.132781][ T8677] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  165.140017][ T8677] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  165.147535][ T8677] veth1_vlan: entered allmulticast mode
[  165.153195][ T8677] veth0_vlan: entered allmulticast mode
[  165.158897][ T8677] vlan0: entered promiscuous mode
[  165.164059][ T8677] vlan0: entered allmulticast mode
[  165.169369][ T8677] vlan1: entered promiscuous mode
[  165.174528][ T8677] vlan1: entered allmulticast mode
[  165.183889][ T8677] macvlan0: entered promiscuous mode
[  165.189230][ T8677] macvlan0: entered allmulticast mode
[  165.194870][ T8677] macvlan1: entered promiscuous mode
[  165.200187][ T8677] macvlan1: entered allmulticast mode
[  165.205776][ T8677] ipvlan0: entered promiscuous mode
[  165.211000][ T8677] ipvlan0: entered allmulticast mode
[  165.216502][ T8677] ipvlan1: entered promiscuous mode
[  165.221714][ T8677] ipvlan1: entered allmulticast mode
[  165.227287][ T8677] veth1_macvtap: entered allmulticast mode
[  165.233207][ T8677] veth0_macvtap: entered allmulticast mode
[  165.240185][ T8677] macvtap0: entered promiscuous mode
[  165.245508][ T8677] macvtap0: entered allmulticast mode
[  165.250977][ T8677] macsec0: entered promiscuous mode
[  165.258884][ T8677] macsec0: entered allmulticast mode
[  165.264313][ T8677] geneve0: entered promiscuous mode
[  165.269584][ T8677] geneve0: entered allmulticast mode
[  165.275323][ T8677] geneve1: entered promiscuous mode
[  165.280550][ T8677] geneve1: entered allmulticast mode
[  165.286093][ T8677] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  165.293065][ T8677] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  165.300314][ T8677] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  165.307302][ T8677] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  165.314492][ T8677] vxcan2: entered promiscuous mode
[  165.319673][ T8677] vxcan2: entered allmulticast mode
[  165.325103][ T8677] vxcan3: entered promiscuous mode
[  165.330239][ T8677] vxcan3: entered allmulticast mode
[  165.337527][ T8677] syzkaller0: entered promiscuous mode
[  165.343290][ T8677] syzkaller0: entered allmulticast mode
[  165.350996][ T8677] sit1: entered promiscuous mode
[  165.356163][ T8677] sit1: entered allmulticast mode
[  165.361309][ T8677] syztnl0: entered promiscuous mode
[  165.366565][ T8677] syztnl0: entered allmulticast mode
[  165.371951][ T8677] bridge1: entered promiscuous mode
[  165.377195][ T8677] bridge1: entered allmulticast mode
[  165.382599][ T8677] vti60: entered promiscuous mode
[  165.387662][ T8677] vti60: entered allmulticast mode
[  165.392931][ T8677] vlan2: entered promiscuous mode
[  165.398129][ T8677] vlan2: entered allmulticast mode
[  165.403359][ T8677] netdevsim netdevsim0 eth0: entered promiscuous mode
[  165.410163][ T8677] netdevsim netdevsim0 eth0: entered allmulticast mode
[  165.417291][ T8677] netdevsim netdevsim0 eth1: entered promiscuous mode
[  165.424078][ T8677] netdevsim netdevsim0 eth1: entered allmulticast mode
[  165.431121][ T8677] netdevsim netdevsim0 eth2: entered promiscuous mode
[  165.438975][ T8677] netdevsim netdevsim0 eth2: entered allmulticast mode
[  165.446298][ T8677] netdevsim netdevsim0 eth3: entered promiscuous mode
[  165.453087][ T8677] netdevsim netdevsim0 eth3: entered allmulticast mode
[  165.460728][ T8677] gre1: entered promiscuous mode
[  165.465722][ T8677] gre1: entered allmulticast mode
[  165.533564][ T8700] netlink: 64 bytes leftover after parsing attributes in process `syz.4.639'.
[  165.549251][ T8674] lo speed is unknown, defaulting to 1000
[  165.719040][ T8716] erspan0: entered promiscuous mode
[  165.729103][ T8718] xt_cgroup: invalid path, errno=-2
[  165.738058][ T8716] batman_adv: batadv0: Adding interface: macvlan3
[  165.768427][ T8716] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.815976][ T8716] batman_adv: batadv0: Interface activated: macvlan3
[  165.890507][ T8386] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  165.970176][ T8672] lo speed is unknown, defaulting to 1000
[  165.977848][ T8386] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  166.006870][ T8386] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  166.071433][ T8386] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  166.127518][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.647'.
[  166.244001][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.648'.
[  166.410193][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.492393][ T8386] 8021q: adding VLAN 0 to HW filter on device team0
[  166.524344][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.531593][ T7050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.600171][ T2213] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.607357][ T2213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.847696][ T8761] x_tables: duplicate underflow at hook 1
[  167.045498][ T8766] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  167.241028][ T8766] lo speed is unknown, defaulting to 1000
[  167.541284][  T120] IPVS: starting estimator thread 0...
[  167.568560][ T8785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.569396][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.616566][ T8785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.662'.
[  167.635010][ T8786] IPVS: using max 32 ests per chain, 76800 per kthread
[  167.815709][ T8386] veth0_vlan: entered promiscuous mode
[  167.830829][ T8386] veth1_vlan: entered promiscuous mode
[  167.920475][ T8386] veth0_macvtap: entered promiscuous mode
[  167.930382][ T8386] veth1_macvtap: entered promiscuous mode
[  167.974324][ T8386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.014854][ T8386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.036380][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.087126][ T8386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.118185][ T8789] netlink: 'syz.2.663': attribute type 21 has an invalid length.
[  168.145129][ T8386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.156699][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.169338][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.663'.
[  168.178475][ T8789] netlink: 'syz.2.663': attribute type 1 has an invalid length.
[  168.187072][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'.
[  168.218452][ T8386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.252631][ T8386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.262745][ T8386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.288096][ T8386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.359332][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.665'.
[  168.378925][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.665'.
[  168.531031][ T7054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.541713][ T7054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.579537][ T8802] netlink: 'syz.0.669': attribute type 11 has an invalid length.
[  168.597465][ T8802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.669'.
[  168.652397][ T7050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.705237][ T7050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.903051][  T120] IPVS: starting estimator thread 0...
[  169.019604][ T8821] IPVS: using max 26 ests per chain, 62400 per kthread
[  169.077006][ T8825] sit0: entered promiscuous mode
[  169.087896][ T8825] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  169.651862][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.870382][ T8863] netlink: 'syz.1.687': attribute type 2 has an invalid length.
[  170.076774][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.150495][ T8881] netlink: 'syz.1.692': attribute type 10 has an invalid length.
[  170.275909][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.299270][ T8881] __nla_validate_parse: 10 callbacks suppressed
[  170.299291][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[  170.319637][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  170.320879][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.339689][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  170.347699][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  170.348335][ T8881] netlink: 120 bytes leftover after parsing attributes in process `syz.1.692'.
[  170.370294][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  170.395082][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  170.439207][ T8888] lo speed is unknown, defaulting to 1000
[  170.606924][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.666974][ T8886] syzkaller1: entered promiscuous mode
[  170.677343][ T8886] syzkaller1: entered allmulticast mode
[  170.962995][   T36] bridge_slave_1: left allmulticast mode
[  170.972880][   T36] bridge_slave_1: left promiscuous mode
[  170.980548][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.991840][   T36] bridge_slave_0: left allmulticast mode
[  171.001281][   T36] bridge_slave_0: left promiscuous mode
[  171.007123][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.314505][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.329012][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.339244][   T36] bond0 (unregistering): Released all slaves
[  171.393770][ T8907] lo speed is unknown, defaulting to 1000
[  171.866126][ T8933] netlink: 'syz.0.705': attribute type 11 has an invalid length.
[  171.927198][ T8932] geneve2: entered promiscuous mode
[  172.002044][ T8888] chnl_net:caif_netlink_parms(): no params data found
[  172.424650][ T8959] netlink: 52 bytes leftover after parsing attributes in process `syz.1.711'.
[  172.444154][   T36] hsr_slave_0: left promiscuous mode
[  172.453700][   T36] hsr_slave_1: left promiscuous mode
[  172.462637][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.465781][   T55] Bluetooth: hci3: command tx timeout
[  172.470808][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.509918][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.529906][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.589364][   T36] veth1_macvtap: left promiscuous mode
[  172.607884][   T36] veth0_macvtap: left promiscuous mode
[  172.614720][   T36] veth1_vlan: left promiscuous mode
[  172.621789][   T36] veth0_vlan: left promiscuous mode
[  172.987271][   T36] team0 (unregistering): Port device team_slave_1 removed
[  173.022052][   T36] team0 (unregistering): Port device team_slave_0 removed
[  173.521118][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.554809][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.569473][ T8888] bridge_slave_0: entered allmulticast mode
[  173.606881][ T8888] bridge_slave_0: entered promiscuous mode
[  173.635468][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.643152][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.658446][ T8888] bridge_slave_1: entered allmulticast mode
[  173.676146][ T8888] bridge_slave_1: entered promiscuous mode
[  173.968906][ T8980] x_tables: duplicate underflow at hook 2
[  173.975222][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'.
[  173.986592][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.001653][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.716'.
[  174.028060][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.089694][ T8987] netlink: 88 bytes leftover after parsing attributes in process `syz.0.718'.
[  174.159680][ T8888] team0: Port device team_slave_0 added
[  174.176705][ T8989] netlink: 728 bytes leftover after parsing attributes in process `syz.1.720'.
[  174.193226][ T8989] netlink: 728 bytes leftover after parsing attributes in process `syz.1.720'.
[  174.224973][ T8989] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  174.237000][ T8888] team0: Port device team_slave_1 added
[  174.326285][ T8992] bond4: (slave macvlan2): Releasing backup interface
[  174.350030][ T8992] batman_adv: batadv0: Interface deactivated: macvlan3
[  174.367234][ T8992] batman_adv: batadv0: Removing interface: macvlan3
[  174.391293][ T9001] netlink: 'syz.2.724': attribute type 11 has an invalid length.
[  174.399236][ T9001] netlink: 228 bytes leftover after parsing attributes in process `syz.2.724'.
[  174.490126][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.508331][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.542561][   T55] Bluetooth: hci3: command tx timeout
[  174.548427][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.584317][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.591949][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.618410][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.799938][ T8888] hsr_slave_0: entered promiscuous mode
[  174.807765][ T8888] hsr_slave_1: entered promiscuous mode
[  174.814076][ T8888] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.827701][ T8888] Cannot create hsr debugfs directory
[  175.039394][ T9027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.328041][ T9036] __nla_validate_parse: 3 callbacks suppressed
[  175.328065][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[  175.345423][ T9041] lo speed is unknown, defaulting to 1000
[  175.357487][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[  175.424697][ T9041] lo speed is unknown, defaulting to 1000
[  175.434414][ T9041] lo speed is unknown, defaulting to 1000
[  175.473196][ T9041] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  175.531119][ T9041] lo speed is unknown, defaulting to 1000
[  175.598131][ T9041] lo speed is unknown, defaulting to 1000
[  175.611892][ T9041] lo speed is unknown, defaulting to 1000
[  175.633558][ T9041] lo speed is unknown, defaulting to 1000
[  175.653305][ T9041] lo speed is unknown, defaulting to 1000
[  175.668140][ T9041] lo speed is unknown, defaulting to 1000
[  175.910479][ T8888] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.926781][ T9069] wg1 speed is unknown, defaulting to 1000
[  175.935011][ T9069] wg1 speed is unknown, defaulting to 1000
[  175.941739][ T8888] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.975326][ T9069] wg1 speed is unknown, defaulting to 1000
[  175.982260][ T8888] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.000046][ T9074] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  176.020031][ T9069] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  176.022779][ T9074] netlink: 'syz.2.745': attribute type 3 has an invalid length.
[  176.048845][ T9074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.745'.
[  176.073276][ T9074] NCSI netlink: No device for ifindex 246
[  176.078553][ T8888] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.124435][ T9069] wg1 speed is unknown, defaulting to 1000
[  176.153493][ T9069] wg1 speed is unknown, defaulting to 1000
[  176.173589][ T9069] wg1 speed is unknown, defaulting to 1000
[  176.189982][ T9069] wg1 speed is unknown, defaulting to 1000
[  176.224429][ T9069] wg1 speed is unknown, defaulting to 1000
[  176.229627][ T9086] syzkaller1: entered promiscuous mode
[  176.264906][ T9086] syzkaller1: entered allmulticast mode
[  176.273105][ T9069] wg1 speed is unknown, defaulting to 1000
[  176.462644][ T9093] IPv6: syztnl2: Disabled Multicast RS
[  176.482103][ T9088] bpq0: entered promiscuous mode
[  176.490011][ T9088] bpq0: entered allmulticast mode
[  176.553880][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.604533][ T8888] 8021q: adding VLAN 0 to HW filter on device team0
[  176.615124][   T55] Bluetooth: hci3: command tx timeout
[  176.650720][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.657904][ T7046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.691239][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.698442][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.925624][ T9098] lo speed is unknown, defaulting to 1000
[  176.972506][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  177.204857][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'.
[  177.253982][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'.
[  177.296482][ T9116] netlink: 80 bytes leftover after parsing attributes in process `syz.4.756'.
[  177.341072][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.344382][ T9121] netlink: 9 bytes leftover after parsing attributes in process `syz.0.757'.
[  177.433452][ T9121] gretap0: left allmulticast mode
[  177.541071][ T8888] veth0_vlan: entered promiscuous mode
[  177.629978][ T8888] veth1_vlan: entered promiscuous mode
[  177.709061][ T8888] veth0_macvtap: entered promiscuous mode
[  177.744152][ T8888] veth1_macvtap: entered promiscuous mode
[  177.784934][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'.
[  177.787160][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.834808][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.861343][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.891390][ T9143] x_tables: duplicate underflow at hook 3
[  177.943440][ T9134] 8021q: adding VLAN 0 to HW filter on device bond4
[  177.988044][ T9142] pimreg: entered allmulticast mode
[  178.034944][ T9145] 8021q: adding VLAN 0 to HW filter on device bond4
[  178.042038][ T9145] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  178.056750][ T9145] bond4: (slave wireguard1): Error -95 calling set_mac_address
[  178.080885][ T9146] 8021q: VLANs not supported on pimreg
[  178.088292][ T9098] lo speed is unknown, defaulting to 1000
[  178.099441][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.121640][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.143115][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.155572][ T9098] wg1 speed is unknown, defaulting to 1000
[  178.213126][ T8888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.222818][ T8888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.233532][ T8888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.244067][ T8888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.342308][ T9156] lo speed is unknown, defaulting to 1000
[  178.452919][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.470918][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.518022][ T9162] netlink: 'syz.4.766': attribute type 23 has an invalid length.
[  178.531237][ T7046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.557450][ T7046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.708715][   T55] Bluetooth: hci3: command tx timeout
[  178.791853][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'.
[  178.844224][ T9156] lo speed is unknown, defaulting to 1000
[  178.844313][ T9167] vlan0: left allmulticast mode
[  178.886168][ T9156] wg1 speed is unknown, defaulting to 1000
[  179.196681][   T55] Bluetooth: hci4: link tx timeout
[  179.201964][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.797253][   T30] audit: type=1800 audit(1745323402.464:4): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.775" name="cgroup.controllers" dev="tmpfs" ino=868 res=0 errno=0
[  179.822303][ T7054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.854726][ T9190] tipc: Started in network mode
[  179.860012][ T9190] tipc: Node identity 3a00ff7f0000000009, cluster identity 4711
[  180.100446][ T7054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.268200][ T7054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.352438][ T7054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.451128][ T7054] bridge_slave_1: left allmulticast mode
[  180.459433][ T7054] bridge_slave_1: left promiscuous mode
[  180.469841][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.520926][ T7054] bridge_slave_0: left allmulticast mode
[  180.536022][ T7054] bridge_slave_0: left promiscuous mode
[  180.552117][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.581909][   T30] audit: type=1107 audit(1745323403.244:5): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' �̝B�(�^�I���|�~�l�qB�y•mb�t�0���'
[  180.688201][ T9212] __nla_validate_parse: 2 callbacks suppressed
[  180.688225][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'.
[  180.842881][ T9220] netlink: 'syz.2.779': attribute type 10 has an invalid length.
[  181.098127][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.108137][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.116477][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.137319][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.158658][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.218374][ T7054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.229425][ T7054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.240391][ T7054] bond0 (unregistering): Released all slaves
[  181.255201][ T5853] Bluetooth: hci4: command 0x0405 tx timeout
[  181.487872][ T9226] lo speed is unknown, defaulting to 1000
[  181.669204][ T9241] can: request_module (can-proto-0) failed.
[  182.038175][ T9226] lo speed is unknown, defaulting to 1000
[  182.059146][ T9254] lo speed is unknown, defaulting to 1000
[  182.091019][ T9226] wg1 speed is unknown, defaulting to 1000
[  182.095953][ T9263] netlink: 76 bytes leftover after parsing attributes in process `syz.4.788'.
[  182.183832][ T9260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.296327][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.315974][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'.
[  182.674934][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.940322][ T7054] hsr_slave_0: left promiscuous mode
[  182.959051][ T7054] hsr_slave_1: left promiscuous mode
[  182.965070][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.972494][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.997895][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.015124][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.057497][ T7054] veth1_macvtap: left promiscuous mode
[  183.063080][ T7054] veth0_macvtap: left promiscuous mode
[  183.068799][ T7054] veth1_vlan: left promiscuous mode
[  183.074132][ T7054] veth0_vlan: left promiscuous mode
[  183.170633][ T9286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.797'.
[  183.255230][ T5853] Bluetooth: hci3: command tx timeout
[  183.464959][ T7054] team0 (unregistering): Port device team_slave_1 removed
[  183.493559][ T7054] team0 (unregistering): Port device team_slave_0 removed
[  183.836310][ T9254] lo speed is unknown, defaulting to 1000
[  183.877010][ T9254] wg1 speed is unknown, defaulting to 1000
[  184.050031][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'.
[  184.073011][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[  184.116494][ T9300] netlink: 'syz.0.798': attribute type 18 has an invalid length.
[  184.160774][ T9226] chnl_net:caif_netlink_parms(): no params data found
[  184.169464][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'.
[  184.265865][ T9306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.803'.
[  184.293776][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'.
[  184.549769][ T9304] lo speed is unknown, defaulting to 1000
[  184.751945][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.763469][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.772574][ T9226] bridge_slave_0: entered allmulticast mode
[  184.783609][ T9226] bridge_slave_0: entered promiscuous mode
[  184.804317][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.814310][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.824764][ T9226] bridge_slave_1: entered allmulticast mode
[  184.834516][ T9226] bridge_slave_1: entered promiscuous mode
[  184.843537][ T9304] lo speed is unknown, defaulting to 1000
[  184.875430][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  184.893016][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.907488][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.943994][ T9304] wg1 speed is unknown, defaulting to 1000
[  185.042710][ T9226] team0: Port device team_slave_0 added
[  185.113670][ T9226] team0: Port device team_slave_1 added
[  185.207825][ T9323] lo speed is unknown, defaulting to 1000
[  185.233201][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.240495][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.273944][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.290795][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.302111][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.334385][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.355942][ T5853] Bluetooth: hci3: command 0x041b tx timeout
[  185.498008][ T9226] hsr_slave_0: entered promiscuous mode
[  185.504627][ T9226] hsr_slave_1: entered promiscuous mode
[  185.517740][ T9226] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.569038][ T9226] Cannot create hsr debugfs directory
[  185.959723][ T9323] lo speed is unknown, defaulting to 1000
[  186.074292][ T9323] wg1 speed is unknown, defaulting to 1000
[  186.727079][ T9226] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  186.792717][ T9226] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  186.824966][ T9226] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  186.851731][ T9226] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  187.062583][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.089537][ T9226] 8021q: adding VLAN 0 to HW filter on device team0
[  187.102991][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.110192][ T2213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.129864][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.137159][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.278090][ T9379] __nla_validate_parse: 4 callbacks suppressed
[  187.278112][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  187.293505][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  187.418604][   T55] Bluetooth: hci3: command 0x041b tx timeout
[  187.514619][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.590097][ T9226] veth0_vlan: entered promiscuous mode
[  187.616643][ T9226] veth1_vlan: entered promiscuous mode
[  187.641450][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'.
[  187.707736][ T9226] veth0_macvtap: entered promiscuous mode
[  187.738650][ T9226] veth1_macvtap: entered promiscuous mode
[  187.797828][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.810601][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.825667][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.993553][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.004691][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.020735][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.072810][ T9226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.103460][ T9226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.116510][ T9226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.129073][ T9226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.168929][ T9402] netlink: 'syz.2.826': attribute type 21 has an invalid length.
[  188.495955][ T7054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.503807][ T7054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.564612][ T2213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.584888][ T2213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.651232][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'.
[  188.690789][ T9426] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (39785) !
[  188.759163][ T9429] team_slave_0: entered promiscuous mode
[  188.796021][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'.
[  188.997425][ T9434] team_slave_0: left promiscuous mode
[  189.571516][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.845'.
[  189.589663][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'.
[  189.692992][ T9472] sctp: [Deprecated]: syz.1.843 (pid 9472) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.692992][ T9472] Use struct sctp_sack_info instead
[  189.758565][ T9474] netlink: 'syz.2.848': attribute type 8 has an invalid length.
[  190.170971][ T9487] netlink: 312 bytes leftover after parsing attributes in process `syz.0.853'.
[  190.180347][ T9488] netlink: 312 bytes leftover after parsing attributes in process `syz.0.853'.
[  190.192765][ T9487] netlink: 312 bytes leftover after parsing attributes in process `syz.0.853'.
[  190.209713][ T9488] lo: left promiscuous mode
[  190.220857][ T9488] lo: left allmulticast mode
[  190.236607][ T9488] tunl0: left promiscuous mode
[  190.241485][ T9488] tunl0: left allmulticast mode
[  190.251740][ T9488] gre0: left promiscuous mode
[  190.256700][ T9488] gre0: left allmulticast mode
[  190.266014][ T9488] gretap0: left promiscuous mode
[  190.282572][ T9488] erspan0: left promiscuous mode
[  190.287794][ T9488] erspan0: left allmulticast mode
[  190.300935][ T9488] ip_vti0: left promiscuous mode
[  190.306449][ T9488] ip_vti0: left allmulticast mode
[  190.313139][ T9488] ip6_vti0: left promiscuous mode
[  190.324435][ T9488] ip6_vti0: left allmulticast mode
[  190.331807][ T9488] sit0: left promiscuous mode
[  190.340772][ T9488] sit0: left allmulticast mode
[  190.354215][ T9488] ip6tnl0: left promiscuous mode
[  190.363246][ T9488] ip6tnl0: left allmulticast mode
[  190.370417][ T9488] ip6gre0: left promiscuous mode
[  190.384570][ T9488] ip6gre0: left allmulticast mode
[  190.402017][ T9488] syz_tun: left promiscuous mode
[  190.407188][ T9488] syz_tun: left allmulticast mode
[  190.418708][ T9488] ip6gretap0: left promiscuous mode
[  190.426604][ T9488] ip6gretap0: left allmulticast mode
[  190.441563][ T9488] bond0: left promiscuous mode
[  190.447180][ T9488] bond0: left allmulticast mode
[  190.454597][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.469312][ T9488] team0: left promiscuous mode
[  190.474568][ T9488] team0: left allmulticast mode
[  190.481684][ T9488] 8021q: adding VLAN 0 to HW filter on device team0
[  190.492511][ T9488] dummy0: left promiscuous mode
[  190.499898][ T9488] dummy0: left allmulticast mode
[  190.511192][ T9488] nlmon0: left promiscuous mode
[  190.516863][ T9488] nlmon0: left allmulticast mode
[  190.523624][ T9488] caif0: left promiscuous mode
[  190.547431][ T9488] caif0: left allmulticast mode
[  190.552438][ T9488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.582756][    T9] lo speed is unknown, defaulting to 1000
[  190.592726][    T9] s
z1: Port: 1 Link ACTIVE
[  190.680490][ T2213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.730712][ T5911] lo speed is unknown, defaulting to 1000
[  191.319098][ T9494] ip6tnl2: entered promiscuous mode
[  191.324473][ T9494] ip6tnl2: entered allmulticast mode
[  191.333047][ T9493] lo speed is unknown, defaulting to 1000
[  191.338044][ T9500] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  191.376551][ T2213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.415237][ T9493] lo speed is unknown, defaulting to 1000
[  191.473818][ T9505] netlink: 'syz.4.857': attribute type 2 has an invalid length.
[  191.535779][ T9505] netlink: 'syz.4.857': attribute type 1 has an invalid length.
[  191.582091][ T2213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.623237][ T9493] lo speed is unknown, defaulting to 1000
[  191.691771][ T9493] infiniband s�z0: RDMA CMA: cma_listen_on_dev, error -98
[  191.732967][ T2213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.788894][ T9493] lo speed is unknown, defaulting to 1000
[  191.800361][ T9493] lo speed is unknown, defaulting to 1000
[  191.808441][ T9493] lo speed is unknown, defaulting to 1000
[  191.816411][ T9493] lo speed is unknown, defaulting to 1000
[  191.827131][ T9493] lo speed is unknown, defaulting to 1000
[  191.830506][ T9514] netlink: 'syz.2.859': attribute type 30 has an invalid length.
[  191.835234][ T9493] lo speed is unknown, defaulting to 1000
[  191.910141][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.926906][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.943620][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.954319][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.973680][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.143718][ T9518] lo speed is unknown, defaulting to 1000
[  192.151502][ T2213] bridge_slave_1: left allmulticast mode
[  192.178398][ T2213] bridge_slave_1: left promiscuous mode
[  192.203778][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.239950][ T2213] bridge_slave_0: left allmulticast mode
[  192.262017][ T2213] bridge_slave_0: left promiscuous mode
[  192.280185][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.303288][ T9538] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  192.530624][ T9545] netlink: 'syz.0.868': attribute type 13 has an invalid length.
[  192.562058][ T9547] netlink: 'syz.1.869': attribute type 5 has an invalid length.
[  192.693078][ T9553] netlink: 'syz.1.870': attribute type 2 has an invalid length.
[  192.833187][ T2213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.846580][ T2213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.859994][ T2213] bond0 (unregistering): Released all slaves
[  192.874031][ T9518] lo speed is unknown, defaulting to 1000
[  192.874357][ T9545] macvtap0: left allmulticast mode
[  192.903685][ T9545] macvtap0: refused to change device tx_queue_len
[  192.951104][ T9518] wg1 speed is unknown, defaulting to 1000
[  192.975523][ T9518] lo speed is unknown, defaulting to 1000
[  193.289484][ T9560] __nla_validate_parse: 130 callbacks suppressed
[  193.289505][ T9560] netlink: 88 bytes leftover after parsing attributes in process `syz.0.873'.
[  193.322949][ T9575] tun0: tun_chr_ioctl cmd 1074025677
[  193.336325][ T9575] tun0: linktype set to 773
[  193.394728][ T9572] xt_hashlimit: size too large, truncated to 1048576
[  193.566270][ T9578] dummy0: entered promiscuous mode
[  193.582725][ T9581] vlan2: entered promiscuous mode
[  193.596021][ T9581] team0: entered promiscuous mode
[  193.604131][ T9581] team_slave_0: entered promiscuous mode
[  193.613196][ T9581] team_slave_1: entered promiscuous mode
[  193.622143][ T9581] team0: Device vlan2 is already an upper device of the team interface
[  193.856530][ T2213] hsr_slave_0: left promiscuous mode
[  193.862668][ T2213] hsr_slave_1: left promiscuous mode
[  193.869266][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.877713][ T2213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.895779][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.915067][ T2213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.966520][ T2213] veth1_macvtap: left promiscuous mode
[  193.973034][ T2213] veth0_macvtap: left promiscuous mode
[  193.982093][ T2213] veth1_vlan: left promiscuous mode
[  193.988076][ T2213] veth0_vlan: left promiscuous mode
[  194.004346][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'.
[  194.030943][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'.
[  194.056828][   T55] Bluetooth: hci3: command tx timeout
[  194.145046][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.151576][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  194.462371][ T2213] team0 (unregistering): Port device team_slave_1 removed
[  194.495187][ T2213] team0 (unregistering): Port device team_slave_0 removed
[  194.822567][ T9518] chnl_net:caif_netlink_parms(): no params data found
[  195.214921][ T9599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.326269][ T9595] lo speed is unknown, defaulting to 1000
[  195.636596][ T9620] xt_TCPMSS: Only works on TCP SYN packets
[  195.702498][ T9595] lo speed is unknown, defaulting to 1000
[  195.758608][ T9595] wg1 speed is unknown, defaulting to 1000
[  195.760190][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.772109][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.779487][ T9518] bridge_slave_0: entered allmulticast mode
[  195.801752][ T9518] bridge_slave_0: entered promiscuous mode
[  195.817611][ T9595] lo speed is unknown, defaulting to 1000
[  195.834087][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.849413][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.864126][ T9518] bridge_slave_1: entered allmulticast mode
[  195.871908][ T9518] bridge_slave_1: entered promiscuous mode
[  196.006814][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.028833][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.135448][   T55] Bluetooth: hci3: command tx timeout
[  196.189220][ T9518] team0: Port device team_slave_0 added
[  196.200257][ T9518] team0: Port device team_slave_1 added
[  196.222347][ T9633] netlink: 'syz.0.891': attribute type 17 has an invalid length.
[  196.272860][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.293089][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.340229][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.403735][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.411374][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.442451][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.478934][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'.
[  196.513259][ T9635] netlink: 'syz.4.892': attribute type 1 has an invalid length.
[  196.659701][ T9518] hsr_slave_0: entered promiscuous mode
[  196.670596][ T9518] hsr_slave_1: entered promiscuous mode
[  196.685600][ T9518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.693197][ T9518] Cannot create hsr debugfs directory
[  196.959344][ T9657] netlink: 596 bytes leftover after parsing attributes in process `syz.2.898'.
[  197.418377][ T9687] netlink: 'syz.1.907': attribute type 7 has an invalid length.
[  197.442460][ T9687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'.
[  197.514164][ T9687] pim6reg9: entered allmulticast mode
[  197.592175][ T9518] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  197.654592][ T9518] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  197.718159][ T9518] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  197.750510][ T9518] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  197.785829][ T9699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.845638][ T9708] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20003 - 0
[  197.867574][ T9708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20003 - 0
[  197.886711][ T9708] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20003 - 0
[  197.896784][ T9708] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20003 - 0
[  197.907701][ T9708] geneve2: entered promiscuous mode
[  197.912944][ T9708] geneve2: entered allmulticast mode
[  197.928915][ T5892] lo speed is unknown, defaulting to 1000
[  197.935253][ T5892] s�z0: Port: 1 Link DOWN
[  198.004822][ T9706] lo speed is unknown, defaulting to 1000
[  198.124281][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.160390][ T9722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'.
[  198.217227][   T55] Bluetooth: hci3: command tx timeout
[  198.226959][ T9518] 8021q: adding VLAN 0 to HW filter on device team0
[  198.242958][ T9706] lo speed is unknown, defaulting to 1000
[  198.250836][ T9706] wg1 speed is unknown, defaulting to 1000
[  198.261209][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.268435][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.316722][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.324043][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.329236][ T9726] netlink: 'syz.2.922': attribute type 2 has an invalid length.
[  198.344233][ T9706] lo speed is unknown, defaulting to 1000
[  198.353592][ T9726] netlink: 92 bytes leftover after parsing attributes in process `syz.2.922'.
[  198.959951][ T9755] pim6reg1: entered promiscuous mode
[  198.981233][ T9755] pim6reg1: entered allmulticast mode
[  199.076958][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'.
[  199.090009][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'.
[  199.105582][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'.
[  199.123353][ T9518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.146600][ T9766] netlink: 'syz.4.932': attribute type 1 has an invalid length.
[  199.166370][ T9766] NCSI netlink: No device for ifindex 0
[  199.306756][ T9770] netlink: 'syz.1.935': attribute type 7 has an invalid length.
[  199.366424][ T9518] veth0_vlan: entered promiscuous mode
[  199.439610][ T9518] veth1_vlan: entered promiscuous mode
[  199.584296][ T9518] veth0_macvtap: entered promiscuous mode
[  199.603186][ T9518] veth1_macvtap: entered promiscuous mode
[  199.650786][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.682098][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.716577][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.754651][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.784976][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.816379][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.900332][ T9518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.914821][ T9518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.923547][ T9518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.962450][ T9518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.033908][ T9811] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.039138][ T9809] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  200.052047][ T9811] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.060868][ T9811] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.069386][ T9811] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.077740][ T9811] geneve2: entered promiscuous mode
[  200.083065][ T9811] geneve2: entered allmulticast mode
[  200.130521][ T9812] bond5: (slave gretap1): making interface the new active one
[  200.142843][ T9812] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  200.248523][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.279885][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.294981][   T55] Bluetooth: hci3: command tx timeout
[  200.355257][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.945'.
[  200.381797][ T2213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.446767][ T2213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.671614][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'.
[  200.832141][ T9842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.953'.
[  200.922976][ T9847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.953'.
[  201.111756][ T9838] lo speed is unknown, defaulting to 1000
[  201.226108][ T9854] netlink: 88 bytes leftover after parsing attributes in process `syz.4.955'.
[  201.250120][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.955'.
[  201.671900][ T9859] netdevsim0: entered promiscuous mode
[  201.678036][ T9859] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  201.726373][ T9838] lo speed is unknown, defaulting to 1000
[  201.749200][ T9838] wg1 speed is unknown, defaulting to 1000
[  201.784316][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.811040][ T9838] lo speed is unknown, defaulting to 1000
[  201.843883][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.154755][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.231087][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.575143][ T9882] openvswitch: netlink: Missing key (keys=40, expected=80)
[  202.696796][   T36] bridge_slave_1: left allmulticast mode
[  202.703224][   T36] bridge_slave_1: left promiscuous mode
[  202.709356][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.735599][   T36] bridge_slave_0: left allmulticast mode
[  202.746023][   T36] bridge_slave_0: left promiscuous mode
[  202.762182][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.813352][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  202.823623][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  202.836631][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  202.847629][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  202.856014][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  203.144144][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.154945][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.164806][   T36] bond0 (unregistering): Released all slaves
[  203.234298][ T9888] syzkaller0: entered promiscuous mode
[  203.250030][ T9888] syzkaller0: entered allmulticast mode
[  203.422236][ T9910] __nla_validate_parse: 3 callbacks suppressed
[  203.422259][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'.
[  204.503319][ T9910] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  204.522188][   T30] audit: type=1804 audit(1745323427.184:6): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.969" name="/newroot/230/cgroup.controllers" dev="tmpfs" ino=1194 res=1 errno=0
[  204.620471][   T30] audit: type=1800 audit(1745323427.184:7): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="cgroup.controllers" dev="tmpfs" ino=1194 res=0 errno=0
[  204.658327][ T9893] lo speed is unknown, defaulting to 1000
[  204.685086][   T30] audit: type=1800 audit(1745323427.184:8): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="cgroup.controllers" dev="tmpfs" ino=1194 res=0 errno=0
[  204.811541][ T9923] netlink: 'syz.1.973': attribute type 1 has an invalid length.
[  204.915235][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  204.937467][ T5847] Bluetooth: hci3: command tx timeout
[  205.055401][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'.
[  205.064467][ T9933] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  205.085105][ T9933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.101625][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'.
[  205.121317][ T9942] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  205.164759][ T9893] lo speed is unknown, defaulting to 1000
[  205.245742][ T9893] wg1 speed is unknown, defaulting to 1000
[  205.260340][ T9893] lo speed is unknown, defaulting to 1000
[  205.536663][ T9960] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  205.593450][   T36] hsr_slave_0: left promiscuous mode
[  205.599784][   T36] hsr_slave_1: left promiscuous mode
[  205.614964][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.627147][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.685461][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.710224][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.748812][   T36] veth1_macvtap: left promiscuous mode
[  205.756857][   T36] veth0_macvtap: left promiscuous mode
[  205.764339][ T9968] netlink: 'syz.2.985': attribute type 10 has an invalid length.
[  205.772434][   T36] veth1_vlan: left promiscuous mode
[  205.778702][   T36] veth0_vlan: left promiscuous mode
[  206.021256][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'.
[  206.026061][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'.
[  206.069192][ T9978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'.
[  206.422918][   T36] team0 (unregistering): Port device team_slave_1 removed
[  206.461822][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  206.461837][ T5149] Bluetooth: hci1: command 0x0406 tx timeout
[  206.493080][   T36] team0 (unregistering): Port device team_slave_0 removed
[  206.943216][ T9968] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  207.015238][ T5853] Bluetooth: hci3: command tx timeout
[  207.056891][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'.
[  207.117131][ T9982] lo speed is unknown, defaulting to 1000
[  207.254280][ T9893] chnl_net:caif_netlink_parms(): no params data found
[  207.416198][T10011] netlink: 72 bytes leftover after parsing attributes in process `syz.1.992'.
[  207.579345][ T5853] Bluetooth: hci0: command tx timeout
[  207.614152][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.668397][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.707292][ T9893] bridge_slave_0: entered allmulticast mode
[  207.740430][ T9893] bridge_slave_0: entered promiscuous mode
[  207.769382][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.779820][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'.
[  207.789621][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.811457][ T9893] bridge_slave_1: entered allmulticast mode
[  207.836583][ T9893] bridge_slave_1: entered promiscuous mode
[  207.928322][T10028] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  207.929437][ T9982] lo speed is unknown, defaulting to 1000
[  207.942738][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.966736][ T9982] wg1 speed is unknown, defaulting to 1000
[  207.987292][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.047089][ T9982] lo speed is unknown, defaulting to 1000
[  208.163364][ T9893] team0: Port device team_slave_0 added
[  208.187857][ T9893] team0: Port device team_slave_1 added
[  208.289515][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.299110][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.374718][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.511896][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.534309][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.582315][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.967419][ T9893] hsr_slave_0: entered promiscuous mode
[  208.974085][ T9893] hsr_slave_1: entered promiscuous mode
[  208.981614][ T9893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.991611][ T9893] Cannot create hsr debugfs directory
[  209.095217][   T55] Bluetooth: hci3: command tx timeout
[  209.235308][T10071] lo speed is unknown, defaulting to 1000
[  209.683336][T10097] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  209.717301][T10097] netlink: 'syz.0.1016': attribute type 11 has an invalid length.
[  209.746986][T10097] __nla_validate_parse: 2 callbacks suppressed
[  209.747007][T10097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1016'.
[  209.767199][T10098] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.775639][T10098] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.784554][T10098] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.793444][T10098] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.891139][T10102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  209.932650][T10071] lo speed is unknown, defaulting to 1000
[  209.962188][T10102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1017'.
[  209.976133][T10106] netlink: 'syz.4.1019': attribute type 1 has an invalid length.
[  209.988934][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'.
[  209.989713][T10071] wg1 speed is unknown, defaulting to 1000
[  210.068897][T10106] 8021q: adding VLAN 0 to HW filter on device bond1
[  210.118902][T10071] lo speed is unknown, defaulting to 1000
[  210.140726][T10109] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1019'.
[  210.448892][ T9893] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  210.499318][ T9893] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  210.510731][ T9893] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  210.521733][T10123] netlink: 'syz.0.1024': attribute type 3 has an invalid length.
[  210.541109][ T9893] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  210.736978][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.771443][ T9893] 8021q: adding VLAN 0 to HW filter on device team0
[  210.796616][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.803766][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.836752][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.843930][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.952756][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1027'.
[  211.160533][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.175221][   T55] Bluetooth: hci3: command tx timeout
[  211.307039][ T9893] veth0_vlan: entered promiscuous mode
[  211.340402][ T9893] veth1_vlan: entered promiscuous mode
[  211.389257][T10155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1032'.
[  211.469409][ T9893] veth0_macvtap: entered promiscuous mode
[  211.541103][ T9893] veth1_macvtap: entered promiscuous mode
[  211.557836][T10163] lo speed is unknown, defaulting to 1000
[  211.583960][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.596925][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.607170][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'.
[  211.618189][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.640051][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.687259][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.712839][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.738453][T10175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1036'.
[  211.755131][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.797123][T10178] netlink: 'syz.4.1040': attribute type 16 has an invalid length.
[  211.805637][T10178] netlink: 'syz.4.1040': attribute type 3 has an invalid length.
[  211.813385][T10178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1040'.
[  211.884214][T10178] xt_l2tp: v2 doesn't support IP mode
[  211.902467][ T9893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.921510][ T9893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.933945][ T9893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.944149][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  211.954918][ T9893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.010203][T10182] ieee802154 phy0 wpan0: encryption failed: -22
[  212.187842][T10192] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  212.210445][T10192] unknown channel width for channel at 909000KHz?
[  212.225423][T10192] unknown channel width for channel at 909000KHz?
[  212.231864][T10192] unknown channel width for channel at 909000KHz?
[  212.273556][T10163] lo speed is unknown, defaulting to 1000
[  212.290640][ T2213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.308911][T10163] wg1 speed is unknown, defaulting to 1000
[  212.317667][ T2213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.379994][T10163] lo speed is unknown, defaulting to 1000
[  212.475579][T10203] tipc: Resetting bearer <eth:syzkaller0>
[  212.483931][ T2213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.492629][ T2213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.495322][T10203] tipc: Resetting bearer <eth:syzkaller0>
[  212.586546][T10209] sctp: [Deprecated]: syz.1.1049 (pid 10209) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.586546][T10209] Use struct sctp_sack_info instead
[  212.839053][T10221] sctp: [Deprecated]: syz.1.1049 (pid 10221) Use of int in max_burst socket option deprecated.
[  212.839053][T10221] Use struct sctp_assoc_value instead
[  212.941034][T10209] ==================================================================
[  212.949235][T10209] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x18a/0x6e0
[  212.957436][T10209] Read of size 8 at addr ffff88805fbecc50 by task syz.1.1049/10209
[  212.965336][T10209] 
[  212.967667][T10209] CPU: 1 UID: 0 PID: 10209 Comm: syz.1.1049 Not tainted 6.15.0-rc2-syzkaller-00578-g12b196568a3a #0 PREEMPT(full) 
[  212.967694][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  212.967707][T10209] Call Trace:
[  212.967713][T10209]  <TASK>
[  212.967720][T10209]  dump_stack_lvl+0x241/0x360
[  212.967747][T10209]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.967766][T10209]  ? __virt_addr_valid+0x183/0x530
[  212.967785][T10209]  ? rcu_is_watching+0x15/0xb0
[  212.967798][T10209]  ? __virt_addr_valid+0x183/0x530
[  212.967815][T10209]  ? lock_release+0x4e/0x3e0
[  212.967836][T10209]  ? __virt_addr_valid+0x183/0x530
[  212.967852][T10209]  ? __virt_addr_valid+0x183/0x530
[  212.967870][T10209]  print_report+0x16e/0x5b0
[  212.967892][T10209]  ? __virt_addr_valid+0x183/0x530
[  212.967908][T10209]  ? __virt_addr_valid+0x183/0x530
[  212.967924][T10209]  ? __virt_addr_valid+0x45f/0x530
[  212.967941][T10209]  ? __phys_addr+0xba/0x170
[  212.967958][T10209]  ? cfusbl_device_notify+0x18a/0x6e0
[  212.967974][T10209]  kasan_report+0x143/0x180
[  212.967997][T10209]  ? cfusbl_device_notify+0x18a/0x6e0
[  212.968016][T10209]  cfusbl_device_notify+0x18a/0x6e0
[  212.968034][T10209]  ? __pfx_cfusbl_device_notify+0x10/0x10
[  212.968052][T10209]  ? __pfx_caif_device_notify+0x10/0x10
[  212.968069][T10209]  ? smc_pnet_netdev_event+0x38f/0x690
[  212.968089][T10209]  notifier_call_chain+0x1a5/0x3f0
[  212.968115][T10209]  register_netdevice+0x1264/0x1b80
[  212.968139][T10209]  ? __pfx_register_netdevice+0x10/0x10
[  212.968156][T10209]  ? dev_addr_mod+0xf4/0x430
[  212.968172][T10209]  ? __asan_memset+0x23/0x50
[  212.968192][T10209]  register_netdev+0x40/0x50
[  212.968209][T10209]  bnep_add_connection+0x865/0xe80
[  212.968233][T10209]  ? __pfx_bnep_add_connection+0x10/0x10
[  212.968255][T10209]  ? __fget_files+0x39d/0x420
[  212.968272][T10209]  do_bnep_sock_ioctl+0x526/0x920
[  212.968295][T10209]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  212.968320][T10209]  ? tomoyo_path_number_perm+0x684/0x790
[  212.968338][T10209]  ? tomoyo_path_number_perm+0x215/0x790
[  212.968357][T10209]  sock_do_ioctl+0x152/0x400
[  212.968377][T10209]  ? __pfx_sock_do_ioctl+0x10/0x10
[  212.968398][T10209]  ? __lock_acquire+0xad5/0xd80
[  212.968420][T10209]  sock_ioctl+0x644/0x900
[  212.968439][T10209]  ? __pfx_sock_ioctl+0x10/0x10
[  212.968456][T10209]  ? __fget_files+0x2a/0x420
[  212.968468][T10209]  ? __fget_files+0x2a/0x420
[  212.968480][T10209]  ? __fget_files+0x2a/0x420
[  212.968499][T10209]  ? __pfx_sock_ioctl+0x10/0x10
[  212.968517][T10209]  __se_sys_ioctl+0xf1/0x160
[  212.968535][T10209]  do_syscall_64+0xf3/0x210
[  212.968550][T10209]  ? clear_bhb_loop+0x45/0xa0
[  212.968566][T10209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.968580][T10209] RIP: 0033:0x7fd8ebd8e169
[  212.968599][T10209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.968615][T10209] RSP: 002b:00007fd8ecc68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.968636][T10209] RAX: ffffffffffffffda RBX: 00007fd8ebfb5fa0 RCX: 00007fd8ebd8e169
[  212.968647][T10209] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 000000000000000f
[  212.968675][T10209] RBP: 00007fd8ebe10a68 R08: 0000000000000000 R09: 0000000000000000
[  212.968686][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.968697][T10209] R13: 0000000000000000 R14: 00007fd8ebfb5fa0 R15: 00007ffd0f490708
[  212.968717][T10209]  </TASK>
[  212.968724][T10209] 
[  213.303847][T10209] Allocated by task 55:
[  213.308000][T10209]  kasan_save_track+0x3f/0x80
[  213.312774][T10209]  __kasan_kmalloc+0x9d/0xb0
[  213.317375][T10209]  __kmalloc_cache_noprof+0x236/0x370
[  213.322749][T10209]  __hci_conn_add+0x317/0x19c0
[  213.327514][T10209]  hci_conn_request_evt+0x683/0xfa0
[  213.332710][T10209]  hci_event_packet+0xac9/0x1550
[  213.337647][T10209]  hci_rx_work+0x3f3/0xdb0
[  213.342061][T10209]  process_scheduled_works+0xac3/0x18e0
[  213.347616][T10209]  worker_thread+0x870/0xd50
[  213.352206][T10209]  kthread+0x7b7/0x940
[  213.356277][T10209]  ret_from_fork+0x4b/0x80
[  213.360776][T10209]  ret_from_fork_asm+0x1a/0x30
[  213.365625][T10209] 
[  213.367954][T10209] Freed by task 9893:
[  213.371927][T10209]  kasan_save_track+0x3f/0x80
[  213.376612][T10209]  kasan_save_free_info+0x40/0x50
[  213.381639][T10209]  __kasan_slab_free+0x59/0x70
[  213.386424][T10209]  kfree+0x198/0x430
[  213.390321][T10209]  device_release+0x99/0x1c0
[  213.394908][T10209]  kobject_put+0x22f/0x480
[  213.399326][T10209]  hci_conn_del+0x8d5/0xc50
[  213.403833][T10209]  hci_conn_hash_flush+0x18e/0x240
[  213.408946][T10209]  hci_dev_close_sync+0xa8d/0x1260
[  213.414059][T10209]  hci_unregister_dev+0x20b/0x510
[  213.419082][T10209]  vhci_release+0x80/0xd0
[  213.423416][T10209]  __fput+0x3e9/0x9f0
[  213.427407][T10209]  task_work_run+0x251/0x310
[  213.432019][T10209]  do_exit+0xa11/0x27f0
[  213.436187][T10209]  do_group_exit+0x207/0x2c0
[  213.440786][T10209]  __x64_sys_exit_group+0x3f/0x40
[  213.445812][T10209]  x64_sys_call+0x26c3/0x26d0
[  213.450487][T10209]  do_syscall_64+0xf3/0x210
[  213.454986][T10209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.460881][T10209] 
[  213.463207][T10209] Last potentially related work creation:
[  213.468966][T10209]  kasan_save_stack+0x3f/0x60
[  213.473656][T10209]  kasan_record_aux_stack+0xbf/0xd0
[  213.478856][T10209]  insert_work+0x3e/0x330
[  213.483190][T10209]  __queue_work+0xda3/0x10a0
[  213.487772][T10209]  queue_delayed_work_on+0x1cc/0x390
[  213.493048][T10209]  l2cap_chan_del+0x291/0x5d0
[  213.497738][T10209]  l2cap_conn_del+0x391/0x690
[  213.502445][T10209]  hci_conn_hash_flush+0xff/0x240
[  213.507477][T10209]  hci_dev_close_sync+0xa8d/0x1260
[  213.512607][T10209]  hci_unregister_dev+0x20b/0x510
[  213.517632][T10209]  vhci_release+0x80/0xd0
[  213.521970][T10209]  __fput+0x3e9/0x9f0
[  213.525955][T10209]  task_work_run+0x251/0x310
[  213.530558][T10209]  do_exit+0xa11/0x27f0
[  213.534723][T10209]  do_group_exit+0x207/0x2c0
[  213.539316][T10209]  __x64_sys_exit_group+0x3f/0x40
[  213.544436][T10209]  x64_sys_call+0x26c3/0x26d0
[  213.549109][T10209]  do_syscall_64+0xf3/0x210
[  213.553611][T10209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.559541][T10209] 
[  213.561864][T10209] The buggy address belongs to the object at ffff88805fbec000
[  213.561864][T10209]  which belongs to the cache kmalloc-8k of size 8192
[  213.575920][T10209] The buggy address is located 3152 bytes inside of
[  213.575920][T10209]  freed 8192-byte region [ffff88805fbec000, ffff88805fbee000)
[  213.589896][T10209] 
[  213.592221][T10209] The buggy address belongs to the physical page:
[  213.598641][T10209] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fbe8
[  213.607493][T10209] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  213.615989][T10209] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  213.623532][T10209] page_type: f5(slab)
[  213.627516][T10209] raw: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[  213.636108][T10209] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  213.644705][T10209] head: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[  213.653454][T10209] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  213.662137][T10209] head: 00fff00000000003 ffffea00017efa01 00000000ffffffff 00000000ffffffff
[  213.670807][T10209] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  213.679474][T10209] page dumped because: kasan: bad access detected
[  213.685906][T10209] page_owner tracks the page as allocated
[  213.691698][T10209] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9893, tgid 9893 (syz-executor), ts 202804946386, free_ts 202549141852
[  213.713227][T10209]  post_alloc_hook+0x1f4/0x240
[  213.717998][T10209]  get_page_from_freelist+0x361c/0x37c0
[  213.723550][T10209]  __alloc_frozen_pages_noprof+0x211/0x5b0
[  213.729357][T10209]  alloc_pages_mpol+0x339/0x690
[  213.734205][T10209]  allocate_slab+0x8f/0x3b0
[  213.738719][T10209]  ___slab_alloc+0xc3b/0x1500
[  213.743395][T10209]  __slab_alloc+0x58/0xa0
[  213.747739][T10209]  __kmalloc_noprof+0x2ea/0x4d0
[  213.752596][T10209]  hci_alloc_dev_priv+0x27/0x2030
[  213.757628][T10209]  vhci_create_device+0x118/0x6e0
[  213.762665][T10209]  vhci_write+0x3c8/0x4a0
[  213.766999][T10209]  vfs_write+0x70f/0xd10
[  213.771258][T10209]  ksys_write+0x19d/0x2d0
[  213.775600][T10209]  do_syscall_64+0xf3/0x210
[  213.780107][T10209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.786001][T10209] page last free pid 5836 tgid 5836 stack trace:
[  213.792336][T10209]  __free_frozen_pages+0xdee/0x10b0
[  213.797575][T10209]  __put_partials+0x160/0x1c0
[  213.802256][T10209]  put_cpu_partial+0x17e/0x250
[  213.807025][T10209]  __slab_free+0x294/0x390
[  213.811460][T10209]  qlist_free_all+0x9a/0x140
[  213.816069][T10209]  kasan_quarantine_reduce+0x14f/0x170
[  213.821552][T10209]  __kasan_slab_alloc+0x23/0x80
[  213.826407][T10209]  kmem_cache_alloc_noprof+0x1e1/0x390
[  213.831955][T10209]  getname_flags+0xb7/0x530
[  213.836462][T10209]  user_path_at+0x24/0x60
[  213.840796][T10209]  __x64_sys_umount+0xf0/0x170
[  213.845564][T10209]  do_syscall_64+0xf3/0x210
[  213.850066][T10209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.856005][T10209] 
[  213.858343][T10209] Memory state around the buggy address:
[  213.863968][T10209]  ffff88805fbecb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.872019][T10209]  ffff88805fbecb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.880077][T10209] >ffff88805fbecc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.888137][T10209]                                                  ^
[  213.894807][T10209]  ffff88805fbecc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.902870][T10209]  ffff88805fbecd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.910949][T10209] ==================================================================
[  213.935696][T10209] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  213.942936][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.1.1049 Not tainted 6.15.0-rc2-syzkaller-00578-g12b196568a3a #0 PREEMPT(full) 
[  213.955014][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  213.965074][T10209] Call Trace:
[  213.968381][T10209]  <TASK>
[  213.971314][T10209]  dump_stack_lvl+0x241/0x360
[  213.976008][T10209]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.981264][T10209]  ? __pfx__printk+0x10/0x10
[  213.985864][T10209]  ? vscnprintf+0x5d/0x90
[  213.990200][T10209]  panic+0x349/0x880
[  213.994095][T10209]  ? check_panic_on_warn+0x21/0xb0
[  213.999216][T10209]  ? __pfx_panic+0x10/0x10
[  214.003643][T10209]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  214.009635][T10209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  214.015969][T10209]  ? print_report+0x519/0x5b0
[  214.020652][T10209]  check_panic_on_warn+0x86/0xb0
[  214.025604][T10209]  ? cfusbl_device_notify+0x18a/0x6e0
[  214.030972][T10209]  end_report+0x77/0x160
[  214.035216][T10209]  kasan_report+0x154/0x180
[  214.039732][T10209]  ? cfusbl_device_notify+0x18a/0x6e0
[  214.045119][T10209]  cfusbl_device_notify+0x18a/0x6e0
[  214.050324][T10209]  ? __pfx_cfusbl_device_notify+0x10/0x10
[  214.056058][T10209]  ? __pfx_caif_device_notify+0x10/0x10
[  214.061625][T10209]  ? smc_pnet_netdev_event+0x38f/0x690
[  214.067090][T10209]  notifier_call_chain+0x1a5/0x3f0
[  214.072210][T10209]  register_netdevice+0x1264/0x1b80
[  214.077415][T10209]  ? __pfx_register_netdevice+0x10/0x10
[  214.082967][T10209]  ? dev_addr_mod+0xf4/0x430
[  214.087555][T10209]  ? __asan_memset+0x23/0x50
[  214.092149][T10209]  register_netdev+0x40/0x50
[  214.096747][T10209]  bnep_add_connection+0x865/0xe80
[  214.101873][T10209]  ? __pfx_bnep_add_connection+0x10/0x10
[  214.107508][T10209]  ? __fget_files+0x39d/0x420
[  214.112191][T10209]  do_bnep_sock_ioctl+0x526/0x920
[  214.117229][T10209]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  214.122798][T10209]  ? tomoyo_path_number_perm+0x684/0x790
[  214.128516][T10209]  ? tomoyo_path_number_perm+0x215/0x790
[  214.134150][T10209]  sock_do_ioctl+0x152/0x400
[  214.138750][T10209]  ? __pfx_sock_do_ioctl+0x10/0x10
[  214.143872][T10209]  ? __lock_acquire+0xad5/0xd80
[  214.148732][T10209]  sock_ioctl+0x644/0x900
[  214.153076][T10209]  ? __pfx_sock_ioctl+0x10/0x10
[  214.157931][T10209]  ? __fget_files+0x2a/0x420
[  214.162517][T10209]  ? __fget_files+0x2a/0x420
[  214.167101][T10209]  ? __fget_files+0x2a/0x420
[  214.171703][T10209]  ? __pfx_sock_ioctl+0x10/0x10
[  214.176562][T10209]  __se_sys_ioctl+0xf1/0x160
[  214.181160][T10209]  do_syscall_64+0xf3/0x210
[  214.185664][T10209]  ? clear_bhb_loop+0x45/0xa0
[  214.190340][T10209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.196233][T10209] RIP: 0033:0x7fd8ebd8e169
[  214.200650][T10209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.220266][T10209] RSP: 002b:00007fd8ecc68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.228700][T10209] RAX: ffffffffffffffda RBX: 00007fd8ebfb5fa0 RCX: 00007fd8ebd8e169
[  214.236699][T10209] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 000000000000000f
[  214.244687][T10209] RBP: 00007fd8ebe10a68 R08: 0000000000000000 R09: 0000000000000000
[  214.252671][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.260646][T10209] R13: 0000000000000000 R14: 00007fd8ebfb5fa0 R15: 00007ffd0f490708
[  214.268635][T10209]  </TASK>
[  214.271995][T10209] Kernel Offset: disabled
[  214.276325][T10209] Rebooting in 86400 seconds..