last executing test programs:

6.701619353s ago: executing program 3 (id=2929):
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6(0xa, 0x3, 0x7)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xfffc, 0x4e24, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@empty, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES64=r4], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4$phonet_pipe(r7, 0x0, 0x0, 0x80000)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, &(0x7f0000000180))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4}, 0x0, 0x0)
shutdown(r0, 0x0)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r9, &(0x7f00000000c0)={0x2a, 0x0, 0x4001}, 0xc)
writev(r9, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

5.187774469s ago: executing program 3 (id=2931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/61, 0x3d}], 0x1000000000000115)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a000000010002000000fd020000000b000007fff800", @ANYRES32=0x0, @ANYBLOB="0c001680050004000600000006001d004e230000"], 0x38}, 0x1, 0x0, 0x0, 0x8008091}, 0x40010)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) (async)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/61, 0x3d}], 0x1000000000000115) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a000000010002000000fd020000000b000007fff800", @ANYRES32=0x0, @ANYBLOB="0c001680050004000600000006001d004e230000"], 0x38}, 0x1, 0x0, 0x0, 0x8008091}, 0x40010) (async)

4.802249272s ago: executing program 3 (id=2934):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a0034de01020202020200000a00060408030000000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

3.285688277s ago: executing program 3 (id=2948):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x400008, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffc00}, 0x1c)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.100866754s ago: executing program 3 (id=2951):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x363002, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}}, 0x4004)
sendmmsg$inet_sctp(r1, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4005}], 0x1, 0x8008) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={<r4=>r0, 0x7, 0x2, 0x40}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x155555f9, 0x0, 0x5, 0x0, 0x98}]}, {0x0, [0x30, 0x30, 0x61, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8, 0xbf81}, 0x28) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x4048084) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r7, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) (async)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000140)=0x6) (async)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000000c0)={'batadv_slave_0\x00'})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180))

2.845153963s ago: executing program 3 (id=2954):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3], 0x44}}, 0x2000800)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000001c0)=0x4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x1c, 0x5f, 0x1, 0x0, 0x0, {0x17}, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)

2.713102254s ago: executing program 2 (id=2957):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x1d, 0x802, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000daaaaaaaaaabb0800450000b000660000001190780800001cac1414aa000017c1009c907801000000020000004af1c787262f43baa44f6ac48c8b7e82a2db1bcf423afe5d787928e21771ce0d7f859ffcd43656d39e09312599ccd911ad5b94275f847174da851496ea71c3ea26439207bdf5183a9ff4a72eca1ea4c0e943b2773be386948391815a945faa8a2e75e180155a3215d35f005699a38817e8ae9ec8aa3816cb67e7e226e9222dc9c5a324be389d9901ae71595f"], 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180058ebd050bb9467330000000000009500000013930000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x41, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94)
pipe(&(0x7f0000000700)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000d40)={0xbe99, 0x8000, 0xe, 0x401}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbb010000000800450000300000000000019078ac1e0001ac1414aa0309907800400004450600040067000514aa"], 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000003000)=ANY=[@ANYBLOB="18000000000000000000000000000002850000007b00000085000000070000009501000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) (rerun: 32)
r6 = socket(0x2, 0x2, 0x0)
getsockopt$nfc_llcp(r6, 0x88, 0x68, 0x0, 0xfffffffffffffc9a) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32)
write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) (async, rerun: 32)
ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x6)

2.501281441s ago: executing program 2 (id=2960):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$inet6(0xa, 0x805, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) (async)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0xffffffffffffffd0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0xfffffffffffffd5c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x26}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x12)
close(0x4) (async)
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1d}]}, 0x58}}, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000240)="84b51a", 0x3}], 0x1)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0x806000) (async)
sendfile(r6, r8, 0x0, 0xf03a0005) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4)

1.928909336s ago: executing program 2 (id=2963):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa)
sendfile(r0, r1, 0x0, 0xffffffff000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bind$llc(r0, &(0x7f0000000100)={0x1a, 0x102, 0x68, 0x6, 0x2, 0x1}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x1}, 0x8)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "06000079feff00", "9e8ecc7bb535c861b116b4559cb4000008006f1800", "d0100108", "fbdeffff00"}, 0x38)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000140)="41000200010007", 0x7)

1.928489616s ago: executing program 0 (id=2964):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40804)

1.814798382s ago: executing program 4 (id=2965):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8845)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(0x3)

1.652094245s ago: executing program 0 (id=2966):
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x9)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)) (async, rerun: 64)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64)
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="604f3ba2fdb12384e5", 0x9}], 0x1, 0x0, 0x0, 0x4080}, 0x20004801) (async)
recvmmsg$unix(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0) (async)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'xfrm0\x00'}, 0x18)
sendmmsg$inet(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x200000c4) (async, rerun: 32)
setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 32)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32)
socket$rds(0x15, 0x5, 0x0) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
close(0x4)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x2, 0x4)

1.387471492s ago: executing program 0 (id=2968):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

825.280173ms ago: executing program 0 (id=2970):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async, rerun: 32)
r1 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x0) (async)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000480)={0x7e, 0x8001, 0x9, 0x9, 0x29}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async)
r3 = socket$kcm(0x11, 0x2, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8907, 0x0)
recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

824.866154ms ago: executing program 4 (id=2971):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffd}]}}]}, 0x40}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0)

823.354729ms ago: executing program 2 (id=2973):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_gact={0x34, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "42ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

633.308224ms ago: executing program 1 (id=2974):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local, [{0x0, 0x0, "ff9b"}]}}}}}}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

630.372501ms ago: executing program 0 (id=2975):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
bind$rds(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x21, 0x6, 0x4)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async)
unshare(0x4000000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0)

598.570049ms ago: executing program 4 (id=2976):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xab}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000a0}, 0x10)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x20, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}}, 0x4084)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000300)={'bond0\x00', {0x2, 0x0, @initdev}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8908040}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35e}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000004c0))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x74088804}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x94a}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4f6c}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000000680)={0x1078, r4, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x3, 0xec93, 0x400, 0xfffc, 0x7fff, 0x1, 0x101, 0x1]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x9, 0x1}, {0x2}, {0x36}, {0x3}, {0x16}, {0x12, 0x1}, {0x5}, {}, {0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x6c}, {0x1b, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0xc}, {0x4}, {0x1, 0x1}, {0x9, 0x1}, {0x48}, {0x6c}, {0x21, 0x1}, {0x30}, {0x1b}, {0x9, 0x1}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4f4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x150, 0x0, 0x8]}]}, 0x1078}, 0x1, 0x0, 0x0, 0x840}, 0x24008046)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001780), 0x8)
sendto$inet6(r6, &(0x7f00000017c0)="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", 0xfa, 0x0, &(0x7f00000018c0)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8526}, 0x1c)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001900), 0x4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001940)={'netdevsim0\x00', 0x100})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001980)={'veth1_to_hsr\x00', 0x800})
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x8000)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff)
socketpair(0x26, 0xa, 0x10, &(0x7f0000001b00)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), r0)
sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r8, 0x122, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000001c80))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xdc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xfc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '%%^}\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008000}, 0xc000)

508.551853ms ago: executing program 1 (id=2977):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, <r2=>0x0}, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001680)={0x0, 0x10, &(0x7f0000001640)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}]}, &(0x7f00000016c0)=0x10)

389.342023ms ago: executing program 0 (id=2978):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
r1 = socket$isdn(0x22, 0x3, 0x24)
tee(r1, r0, 0x8, 0x6)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802120000000802110000000802110000115500000002000000"], 0x1e)
sendmsg$802154_raw(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000180)="7c711a2439a40cec6a66fc1d228430c42df156897c6542dafabcca4a0556d6f34a16cb5b5f332cdc5b100bfb9b5fd124ac6001aa8e7208e0d30f47dcd0ede5ec096fea809ed85bdde9", 0x49}, 0x1, 0x0, 0x0, 0xc0}, 0x4040041)

389.096255ms ago: executing program 1 (id=2979):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

326.869196ms ago: executing program 4 (id=2980):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)

311.925105ms ago: executing program 2 (id=2981):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x101, {{0x2, 0x4e21, @loopback}}, 0x1, 0x5, [{{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}]}, 0x310)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.swap.events\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0xfffff000, @loopback, 0x200}}, {{0xa, 0x4e22, 0x80000000, @empty, 0x85}}}, 0x108)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000500)={0x16, 0x37, '\x00', [@ra={0x5, 0x2, 0xb928}, @ra={0x5, 0x2, 0xfff1}, @generic={0x4, 0xce, "b2c25f533d5a95aac4cdbe46dff9bc4396d3856f4aede1fb73826458c586afe9a0752d04988be15e0da8f4a234ac838ead9e6b4fe21625352d4028959f3bb31db11b3683e632044dce2bf1179b56009f4d2b9b1625d2cb28c11ebca1167eabf668f4b7edf693ffdc91118b4833580e9e487bc00e83f0ed3fb4f2a52485958164bc325f17173f7e11a2ced2be8467012fa6dc9e295be1e3507b7c184064f3e8d620e7853798cfcc9f1345f7ba50e210c56d7034154ffced65103f312be0eaa68addb9dcf1a7d224a42f26a242382f"}, @generic={0xd9, 0xcc, "5192dee0710008c9af610241e030fadd14f61b020b2204e806ec582dcd9993d1d5f62a1c686f173a7cf9fbaaeaf6925ae51369092c089c2988da0362ab926a38c6696d71ea38507b8d4e434cd86424f844943212084712525d6049f52acb0309fc0b2fdd82017d595e0a28f016c89a0e98534ea4daee71585ac7d67e0ad8da10b03e3d4b96329177ef4dd4fa9466dfc286e00e8918ad31916e21eb6dd01e99043d75ac9b6df89fd9351460d65d4161e675fee07ff5c30d76d52e948f33ee8a63551b4614c482f2573d46862a"}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x1c8)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000700)=r5)
r6 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000740), 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780)={0x0, <r7=>0x0}, &(0x7f00000007c0)=0xc)
r8 = syz_init_net_socket$ax25(0x3, 0x0, 0xc4)
ppoll(&(0x7f0000000800)=[{r8}, {r6, 0x2020}], 0x2, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)={[0x6]}, 0x8)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f00000008c0)={0x3, 'veth1_vlan\x00', {0x1}, 0x5})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x4040)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r9, 0x6, 0x1b, &(0x7f0000000a00)=0x8, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x4e23, 0xc, 0x4e20, 0x3, 0xa, 0x20, 0x20, 0x29, 0x0, r7}, {0x1, 0xffffffff99090b8a, 0x3, 0x276, 0x5, 0x44, 0x3, 0x3}, {0x1, 0x257a, 0x0, 0x7}, 0x9, 0x6e6bb8, 0x0, 0x1, 0xd440d2b6f3c042bd}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0xff}, 0xa, @in6=@local, 0x3502, 0x1, 0x3, 0x2, 0x10001, 0x4, 0x40}}, 0xe8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={<r10=>0xffffffffffffffff})
pread64(r10, &(0x7f0000000b80)=""/40, 0x28, 0x5)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000bc0)=@bpq0, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r11, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x488d0}, 0x20000840)
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000001d40)={0x0, 0x0, "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", "f0be1bca74af2a19b82f260213bf343a3f09f966a080e7be46c35194f60af9b56ee29124f3fc78a977cd9f0c56b15b1dd4987271c0998488f43718af4445546a1f625d3f918e0876e349a150c44b884f4ff6c2d762db5e55224317fef7a89c945c47f3b654d3137347377b7a43e6e98bffc4b480ffaaeef54430521e350b4197bd89ed0487e3fb49cef6695966bf5fe95eca414a076b078785cdad3f86e9930a13886759736102cdd99700c57ff6c216087a0395ee53143b9ffc52dce253cf2b551317f54cff3ffaf2c02c1d9dc709c210b20121b876cf2c21d4f13453167f001a6c5d97c2e1b2288aa9d8b35d83304549de1c21d9860ef92fa69397f4b5144f452191e86323896ac2c8f21a3462433b631d8ee4c1d95b9c6f9e6335f0f094ea953727a34f90988401b714bb40630d668c719f070206a8baaf3ba6cc4d795c323f518d265d95d59ce95949e26e6bdf5f443e66e66922284043f4ad833aabe08b3f4cb3006ce8f9d37df90cc65b561236b80b2db0995d42eab5a3142332f5ec917a9966ae95f631317a3c26c7ccc46b382dae19bc365796879d6ed56e85848653e5efd62b742d972b484462927f3b1cebb6e3663a38b458fbbcce3a5530cab5fa990705e4f5b30b05b52406cd45d77233a41eaff1417f5623f84ca6406d666c4dedcabef9ad27e0fdc1deac9b4a986b435468eaa3e04dcd51a354a97a9c8c7c634381d5ed682e2667df88de29df9752bbace0cd2c9db03c387db497e3d5a0ae9790db625b63fb109f75ad4de11ee0e369f74faa29884a5d5c607a8fd3d6f24c329dde1ebd7ddc79a6bb83c590d2bb6f30181cdd339ec85774c58727651b85e9d01d6009da96943ce16f69f6c0426fe51f9538b3538053a63f97ce8d02d1550c8018493020ad1207bab855b06ad58e12c029ec0a27471a7e256892ec6b0d212f8b9a8aeeab4b3ecd7ad13ebe99ba0ed4d649a7c73907d282ba6f5f425a3a1ccf7933aa9aba0d4b279f3237497d3b1a56b5bf4e88058fe4a84f3507423cd9876f2fbc912237d53dc8251a61a60d00cd50cb182f14c664b4ae65cb6f1d3385dda37fccbcc25d05e31aa7e9a31a29715ea385dd4717c3407c6ac6643165c17caec3a8cfc4d6192cdcab2ff9a9d234aadf62bf4a92fc1ad23328317466e2a1f89de1fed555e76c0b3b73e706382eec5607379511ba00f8448bd5a84d4e1bba46e60ab451a904415727331a3db7a15bc75ec04ceeac44cab3f130ab7fd39fe7b0d7597a57bcdc02e419d7a8f7ac89ce66debb98f1b851322656ccb6f55f22fde331c15211b71368bc1db6677fb2745bd6ed8073ca007057cd747f116e7fc2f8449a9a1423fda7332201a6ffb37c269eb04d538785605b33175036dd43465a7b7227abd04e25fc1efbc015238b5ccf0f0045bf9cddd64e598e6bc56693f0cf2c91862035bbee5b88f4fce0f7aa2e019d6fa2c9596332f7fa115dded67523f94af327583c8de32b0c774c811fea6bffaa98eee267c67eb618998200a37c9fe93f9b172d5089098ba941b231e90f21022c3964e13667c0f9c8bad88d163cafb2ca79d36a7b17e6a869266af3b5312c77fb5299a2b7951fd6a2f29460b0ced49a77fc76f651275007a8c6c491a558ccb5bdc8944151ca01e5654c41763822867f60c0b21159771076ce0fa0fd873abbeff4b85361d96eefeab23014927ceea71890e0c0bd9dd3d3db07ec0955ef7b643f05672aba2f4cd6512887c8413dce407ef8f3bccd6bd1b58008461e0aef33f3b02f0a85e8d4bd594d443879e67eb678c7dd302fd05a27cc819a985ce596a45289893b665c6add8228635b77b64f56ed883cb93f1bfc04fded044639fd100ebea0346449dc178b15e8bbf1209bb7262ca8d931071d9ff9e9b68b5561a81b0422acea0cece2457f9ecff05ef017fc592d54870adce4adf22a1dfeacd47f76ba57d824291c5848c22fa9e9e5903058e797edf4a91541717b6b38027f9dc3595aa10945565e3540e3236bdadbeef6060c3b6eae5aa99317a6b26ef0a0c0297c705073d567f84822137808ba5ae5494ad6557635dbc307b383723042d9632ecf339003dfefa00cab4a179d8ff81cb5d4c31a4cf0dcc1a511ec29d835425f7039e9570fe5d6af55bf2422e7a75f12d5004e56f09461cbd7fa8bd0c10961efe166312ad39ecab0a39a5b97244e0e186d5416674bce23d57a806785b64a64017769cb7d8b38890cc6a05c5f3104557d174057693a135b0f1a2b3d8733e37c07432713f63ca81ef1a4fb75484344f61ac83c0bd44f3e702d229d34db27c4ec3ee7c12a5bcac32ad43647e0ea242f5c8aabf59ab3a1cc4b8158e52bee3c213567af1bc4e74185e28c7d07f03283d1857f413ff944e1a55d83aebf496ecdac8c0cd806270e68a8123bdffad79f7b28c82ed7652b231aeca9d2736008bbe12e254e9a7a764e50c8ce7e7b9dd2591523d63a14fca4ce07ff56e5f234fb51bf645389c10da179d814851e137013d18e2576b89792bf68b8cf98e808cccf9af1f7475c9a10bb3d4ba9e7c3a546e97682f11df36bd00d49bbb35e874e766e369e10586407e8b9566cb3f9de05c756b8ae3d12a53e45aa4a757ff557789855dd677723606c4a340899459944e4d7848acc6b5d6386f99fdbd36cd8ef4bcbc8f6e2dba0dcb16d8f955d8aa5cd9700205c3e823ba28d3daeb297830245d13a44ceee6b68599bbab33ae806162899e3fa13a92d41d01fd6486cc0738d002b76f0a6bdd9332d9a4662a62eed9240c92e5e195f2b9da30931337b967284f6e9d224f59e27fd48a491bc04474308011a358fb2a5c7bf55a781116342fade0ff0f7090b5b94c09a936e9eae145d5d8c26d557672c9b52498fce490f2733bd1836b92281c22fe59f3408e2333e1fc8e00a1b44d7554cdc91a771663173266def7628b91ab95c554cc39e601029aa546b33988e0cc5972c0d39cb03054649759eeff1f02eedf09d83df289db92f4b2e4a169cbb3d84c78af960baa1259cfa10713e70a846942d5a3fc9b72472799d1d7b89a763ec45f1f30d30c8d4da6481601f4dfe85d6a7a283b20c59ba3aeb2190c9e62e9976d244e97f9af223ee4e43163053d66b2ef7253485f732cd8415de6432fca0be33ebb4f3fb6aa61ab2e59f1bb4ddfd0985dd4b698465348cfd3fc047bb3ecabc4924fab2a93d3f455ed193c561e64524cbd4da2f6e716b6853e925875b17e0298cdde01302da8db27f5371e10c4b6f442414b8a82a50b6dcb1b73a6f9d130e599eaa8a5dbc05602bfd1fe8f13c4113d725067a9b770b1ebfb7fa42a5e98d4982ce3d90966948676d68107f90469f2fea4e701921ee1bda44db19cc68880f03c27f5463a834169e905589c7343717e537ad35cc2424091bf8ecce84bdb6b728e72b38b221c60fd700e025d8256cf1f8dd02fd9e55fbf6ea1e418d5d5f65e6a3b63313b948c2f7b6a330b9e17808613c0b01edf6a456cacefabc33e788fa08d861379a5588ba7f970ea0f1edcdb0fdc497a10f8c90a568f93b783d8a6cb2b4fd5a480719eef7c214e62481410618f68298abb58d544d63f1792d65e7bb5e45e159cdf916ab4e45b9d829c67725b2d20887e665100eae483d33e16de6b1aa3aa988a350b15cb15c833272243c31596f3703f8c6a8d3024ec265734128e90c72d1c67cedc5d042f91d8202b1d85295e09655dd62fe2a2ad8e61581c66d0cb61cf79616e9c263b1bc64ea6b0fd7e49e42328485ae3902dd3df9d2cf7551a83f535cbd8df9115dcc96704d6b133c7434de7042a0888dfee56570e8298a7a4358048004a39929ab8ec6f9ef658a02fc4f57d7d2a323b03d27ea9570d37be82c8ea51d7990c977ef04106bf397b64459c66bb01ef665f5945272a409873e0e68575761b0dc92039ac16d3dd39ff99da9bab03ad401ea8bcbfa517d4ed245120bec4690f86bef9e0dee3f86dfc8717b170e35b01051f32d9ba380123ded072ba92153903c739b590c795563ef1880889a8fa7442f66efb935c1e5e98171336bf86f232b8128f278511041932036070689d052969c9b571c3441ad62716b27393369760a2332be760105b78b6669f3a7795726601baacf92edb3689915a2a67e74f8ac9cd02f100cf6083d69f6f1b8678eea532a82c307958969ea552747aeb825017d603e80301ef7474cd2d8f8a91bc0e387efce74bcba18c7690ad50831f38b0b521a562707cce553c67beaf99bb01f4374ddcaae5ded9cf9200958c21b74fa10ee52dc56a887bba42972842f60637a5a503563ad7ae8fe90ab8b7e61fd5903905e676de7ba334dc3b1f5ad08b3bd1a6d285292e66293f4d8bc394313b0f97620e697e8aaa67be81b3a8eb32edad5dca7e5ea324bff2bff757290db2da3ed3a4f8d018c367fddb1f7d5cc0d03b33983eff2bcd636b547c5b501bbc1861dc265ceb2ab6395b1026a79fa858b38e24ceb0572fdf18943cd244942eb6cd34fa452b401af046b5b2b4349379a0c39dfd7d7e32fb09496d7e30f44caa2dc371aa17300bb1aa76f88d7d782876c58d920004d0598d23ea17f5b49d02e62549e66b5d2dcda1d06b8371f6bd52c5476e4e01691cd3dd79f05600aa9234c994b5f4b44ef72a0316ac4c0bbba32696d756bfe90a8d98131f264e4a76c2014129c0fa9a4bb7fda54d8fdd72676c58a9bf10964faa85b68310b9198f85b375821c829f1e04cc08aa2e35b5d52980544b0d0fa5809c0e2d1058d4e9f3ace5abf4316f13d422d340896c7c44f99ed6db24630d5cb4da7eb89610377c24bd70274249e5315bf26ca7feb28c6d5c335043be183330235d19b7fc2fd56c34da5eb8c387292648c6e3e96ae708ce24f4679ac3204ed5bea34faf93015f32590ec2933b80c3fa5d847fb0eb1d8870e28f351d8ebd9e43ea372c59658b5fe8bbc1985e4f9d87f12546ac30fbb05fd178060015b94cc4746e00df83df6c7d54a24d3d46f41f71d62540e3e690e06af125612e68c438b03c6d92e429d22f471594a24a48890b523232392263ac0b22383dcefb9f3ed0a462a6a87436fa9c894b8f0ede0d060a422fcef06fb75bf58135d7e4c22b2421a64d91024c09d55514049fa4bb80e9c72ec6e521aaf34ad5b36d65bdef8cd43737755b79c7d696c4341ac4d2999f931a82e2ecfde0552f749beab0f0e89f7212c5211302c4f1c12d18a59c99bf23d7ff4342c7855b832686da3d2ab68df7a40664d6840335328c8fa6fb8e2c5b90a885fa7da953ac1fc856795d1d788c2f541bbc07929c739b7e5e78eced3ddf50c9971f6a6a3722571f9ee6601f536140b6f31bbccfd59dcc1014448cb3ccaa3ecc8671bec98940fa7426223008e6d0a6e7b7bd7f53a383eeefda5de92219bdd89697ba5a53adae95c45"})

253.413034ms ago: executing program 1 (id=2982):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7080fddbdf252e0000f20a43e7f30001000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x40)

232.531062ms ago: executing program 1 (id=2983):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="60afa2ad8a3ec9a324fb42f2df5e153bebf51a4a2fd1b540ca83c485626cdc93b34830d8e144d266202e2859417ff9403fe15a7d5b2f993a"], 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs}}}}}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.current\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r1)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="310300200000000000000800000008000300", @ANYRES32=r11, @ANYBLOB="050006"], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0)
sendmmsg$inet(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="d6c2e67221ad90161a89e448ae8929fdb297f9cdc7e96f371577eb7afe860affa82577b88920a5809392306c72f0ae2fea5e7bef12494f17ef0039a3e086e2b9321e3a4783268d15ec8bb96b9efe5dfb4714d87c386746", 0x57}, {&(0x7f0000000600)="39373f44573bc1f9bf35e8ca335ab743ac2250acc7d773154bde53256b9d997ec61331672aafb76d6a33cb2a545511adae79cdb4beb2a83a04b2605fc15d78709b253461bc01146b514d5ce4d011dbf3e897c63955e4e25164976f7af249f43da3ae8e01cfe705f0a630a101f17d7bc489fef88fe62158cf20ec65d355cef118ce613c3da84de79977e4f10bb4a46ea664138726cbe338d54fe357bf2707998d555ae16e0d476c66089c1b2e93fd87310f3e8974c53036c8536eb7b22ed82c2f002a9e5c2751c79e384aa6b65eef9127f84b7126932f525df720b1b65713a92825b399a1f369c3cc530dd282f73a0dd1de7b0a7f9dee", 0xf6}, {&(0x7f0000000700)="e6a29c344517a17fe77552c0a201657e548177c48658d2d39ccd05fbccb10d7783c6c491bc5af060f9d9b2b46ec97d8f4179009aa0cfa4271a342b6d4916f30d45513fccc4bf60554c3c6574068a805db782f3cd9aee8c11184622ab0da38b3e106b9289b680e88e5b76ba977d43139f7d2f59eb6a304a893e491e49e7716d6ce2ab5004f9ccaffddb242f2eaa674b84a34ffd91544f2b054cf6d455ae91f6800151df26a8205d836cd81c319063499a922b2b", 0xb3}, {&(0x7f0000000980)="9128c4515c9e5e6d0663c026db9eec41fa2d0ade073e910b938ff2f3a29bf684e8f65ebba573ce0154dba0380dffa515a67a29ca8fe2e2d7e56cfee502115a09c4ea513aadb2d6691ae343dce622f0029c08f54aa52d0014e1c7e10a0c1e746a09da4550c1217cf8149871d0b613559f5f940fe6a7f05352f6830481d2ec982f33058c9943b7d5feb315484330f69895828d9c91fc4d42f4fb026f58a1a284dc", 0xa0}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x1b, 0x3, [{0x6, 0xf, "199d63512442f427db298909d5"}, {0x0, 0x6, "e17b7d42"}]}, @rr={0x7, 0x17, 0x9b, [@loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @empty]}, @rr={0x7, 0x17, 0xae, [@multicast1, @broadcast, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}]}, @lsrr={0x83, 0x7, 0x27, [@empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xd8}}], 0x1, 0x48080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@delchain={0x24, 0x11, 0x10, 0x13, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}}}, 0x24}}, 0x0)

165.184961ms ago: executing program 4 (id=2984):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020d90c1af8ff00000000bfa100000500000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020168f58010000000000000000000001"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020168f58010000000000000000000001"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000100000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a00180003030303030300001c007000040005000400070004000700040007000500020001000000"], 0x44}}, 0xc000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000d71d7f054f6642b9be5511cad9a7726e0efb44a9578a682150d5f1d400d160a7810af88264380db0f84392f6b6f263470cdee11df35d875fc83b256c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="02000000000017ff000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="7d3ccebf3670957144639b25b8b20cc9440ea357d94b8bcea5f418a26ef4d55d2beece64ec96bf5a5b30f6f52a", @ANYRES64=0x0], 0x10)
socket$rds(0x15, 0x5, 0x0) (async)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) (async)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400000000006aee8bb5bdfecb802dd6bb000000000000006b034755288a2a6bc62878020000000000000095803b121af0607aef01fd9bfbbbdc", @ANYRESHEX=r7, @ANYRES16=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x24060400)
r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0xa, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x3, 0x7, 0x3000, 0x53b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x7, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x3, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x1, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x9, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1fb, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x7, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x8, 0x7d96, 0xfe000000, 0x10000175, 0x5, 0x400, 0x3fffffff, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x1000006]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x0, 0x7fffffff, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x2e170fb2, 0x1, 0x81, 0xfffffc85, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0x9, 0x80000000, 0x15ae, 0x1, 0x4, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x3, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x400002, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0xff, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0xfffd, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x201, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x4, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0xa, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x3, 0x7, 0x3000, 0x53b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x7, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x3, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x1, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x9, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1fb, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x7, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x8, 0x7d96, 0xfe000000, 0x10000175, 0x5, 0x400, 0x3fffffff, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x1000006]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x0, 0x7fffffff, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x2e170fb2, 0x1, 0x81, 0xfffffc85, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0x9, 0x80000000, 0x15ae, 0x1, 0x4, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x3, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x400002, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0xff, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0xfffd, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x201, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x4, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="0400cc00140004006272696467655f73046176655f3100000800178004000100"], 0x3c}}, 0x40048a4)
connect(r9, 0x0, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r14 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r14, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)

53.336894ms ago: executing program 2 (id=2985):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x7f, &(0x7f0000000040)="5d08214ba39b03e6e564817cd7a8f129cdb7196ea11da7b98f335c1e71280dd521d034f0c5b6ba0284dbf1ac90bb3f1827966e4855fd9ced237d649fbaf408d35bd4419b3a9b5549be92e7b73cb46a44a1f678d62e828f9a09fa228c9769ebeac4273b221c63237a45ca57ca14ca948fac71f3f67b9a99a71608daf87fa11f"}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="38000000218160e411853eeabf6462f3f0cbb7b5d2ba44355d05565b872cf65eb4f92b137344ae24212f5bd8e7dacf1526a0e7e4adfb8b074d29be0400119638aaa2289694808a69760a0d11311a9c9c46857213d8efef2cec20409c10193fd01aad813c6edaa8d6da95c1f20a8b3e945e23993b8285218eb9ec359c7ff583bed1f8753b78c41fec438c226e48ef4a3d53675cd9f5e1d19574f0cc9cd2785444f00ad71069f221c1c515b9a9681b0aad513b1a7cd42cfa84d16ab8", @ANYRES16=r2, @ANYBLOB="07000000000004000000050000000c0003800800020080000000180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40)

23.891058ms ago: executing program 1 (id=2986):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async)
unshare(0x2c060000) (async)
unshare(0x2c020400) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000c60a000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90)

0s ago: executing program 4 (id=2987):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

kernel console output (not intermixed with test programs):

earer <eth:syzkaller0>
[  255.583760][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  255.671886][T12470] bond7 (unregistering): Released all slaves
[  255.895228][T12491] __nla_validate_parse: 5 callbacks suppressed
[  255.895230][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'.
[  255.895246][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'.
[  256.129796][T12488] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  256.186709][T12488] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  256.321008][T12491] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  256.335701][T12491] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  256.511159][T12504] lo speed is unknown, defaulting to 1000
[  256.637339][T12525] netlink: 'syz.0.1631': attribute type 21 has an invalid length.
[  256.827656][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1624'.
[  256.855203][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'.
[  256.959015][T12501] netlink: 'syz.2.1624': attribute type 2 has an invalid length.
[  257.454186][T12558] netlink: 'syz.1.1640': attribute type 3 has an invalid length.
[  257.946875][T12584] lo speed is unknown, defaulting to 1000
[  258.462040][T12611] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  258.597509][T12617] netlink: 'syz.3.1655': attribute type 1 has an invalid length.
[  258.780857][T12617] 8021q: adding VLAN 0 to HW filter on device bond5
[  258.884030][T12629] veth7: entered promiscuous mode
[  258.902944][T12640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1659'.
[  258.903925][T12629] bond5: (slave veth7): Enslaving as an active interface with a down link
[  258.956100][T12617] erspan0: entered allmulticast mode
[  259.001517][T12617] bond5: (slave erspan0): making interface the new active one
[  259.011350][T12617] erspan0: entered promiscuous mode
[  259.017666][T12617] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  259.039874][T12635] netlink: 'syz.2.1658': attribute type 12 has an invalid length.
[  259.271613][T12658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1664'.
[  259.337070][T12663] bond3: option mode: unable to set because the bond device is up
[  259.440106][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'.
[  259.468341][T12658] veth1_macvtap: left promiscuous mode
[  259.517089][T12665] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1664'.
[  259.532896][T12674] bond5: (slave erspan0): Releasing active interface
[  259.542602][T12674] erspan0: left promiscuous mode
[  259.577797][T12674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  259.602002][T12667] batadv_slave_0: left promiscuous mode
[  259.609757][T12667] geneve2: left promiscuous mode
[  259.620948][T12667] bond1: left promiscuous mode
[  259.638274][T12667] geneve3: left promiscuous mode
[  259.647382][   T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 44415 - 0
[  259.658070][   T36] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 60268 - 0
[  259.677035][   T36] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  259.698120][   T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 44415 - 0
[  259.707172][   T36] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 60268 - 0
[  259.716286][   T36] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  259.727550][   T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 44415 - 0
[  259.769195][   T36] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 60268 - 0
[  259.777774][   T36] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  259.790158][   T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 44415 - 0
[  259.820134][   T36] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 60268 - 0
[  259.860254][T12688] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  259.868144][T12688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1673'.
[  259.890919][   T36] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  259.910590][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'.
[  259.933843][T12697] netlink: 'syz.2.1674': attribute type 1 has an invalid length.
[  260.253812][T12711] warn_alloc: 1 callbacks suppressed
[  260.253830][T12711] syz.1.1677: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  260.335426][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.1.1677 Not tainted syzkaller #0 PREEMPT(full) 
[  260.335476][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  260.335512][T12711] Call Trace:
[  260.335521][T12711]  <TASK>
[  260.335529][T12711]  dump_stack_lvl+0x189/0x250
[  260.335563][T12711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.335588][T12711]  ? __pfx__printk+0x10/0x10
[  260.335618][T12711]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  260.335644][T12711]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  260.335672][T12711]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  260.335701][T12711]  warn_alloc+0x214/0x310
[  260.335736][T12711]  ? __pfx_warn_alloc+0x10/0x10
[  260.335773][T12711]  ? __get_vm_area_node+0x28f/0x300
[  260.335804][T12711]  ? xskq_create+0xbf/0x170
[  260.335837][T12711]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  260.335898][T12711]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  260.335932][T12711]  ? __kasan_kmalloc+0x93/0xb0
[  260.335958][T12711]  vmalloc_user_noprof+0xad/0xf0
[  260.335983][T12711]  ? xskq_create+0xbf/0x170
[  260.336013][T12711]  xskq_create+0xbf/0x170
[  260.336046][T12711]  xsk_init_queue+0xb0/0x110
[  260.336079][T12711]  xsk_setsockopt+0x57b/0x8d0
[  260.336110][T12711]  ? __pfx_xsk_setsockopt+0x10/0x10
[  260.336138][T12711]  ? __pfx_aa_sk_perm+0x10/0x10
[  260.336168][T12711]  ? __se_sys_futex+0x36f/0x400
[  260.336192][T12711]  ? aa_sock_opt_perm+0xff/0x1b0
[  260.336224][T12711]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  260.336252][T12711]  ? __pfx_xsk_setsockopt+0x10/0x10
[  260.336282][T12711]  do_sock_setsockopt+0x179/0x1b0
[  260.336310][T12711]  __x64_sys_setsockopt+0x13f/0x1b0
[  260.336339][T12711]  do_syscall_64+0xfa/0x3b0
[  260.336358][T12711]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.336388][T12711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.336407][T12711]  ? clear_bhb_loop+0x60/0xb0
[  260.336432][T12711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.336451][T12711] RIP: 0033:0x7fc17b78eec9
[  260.336469][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.336486][T12711] RSP: 002b:00007fc17c687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  260.336507][T12711] RAX: ffffffffffffffda RBX: 00007fc17b9e6180 RCX: 00007fc17b78eec9
[  260.336522][T12711] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  260.336534][T12711] RBP: 00007fc17b811f91 R08: 0000000000000004 R09: 0000000000000000
[  260.336546][T12711] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  260.336559][T12711] R13: 00007fc17b9e6218 R14: 00007fc17b9e6180 R15: 00007fffd4456f08
[  260.336593][T12711]  </TASK>
[  260.336600][T12711] Mem-Info:
[  260.626316][T12711] active_anon:5383 inactive_anon:0 isolated_anon:0
[  260.626316][T12711]  active_file:3204 inactive_file:39943 isolated_file:0
[  260.626316][T12711]  unevictable:768 dirty:85 writeback:0
[  260.626316][T12711]  slab_reclaimable:12291 slab_unreclaimable:190705
[  260.626316][T12711]  mapped:30427 shmem:2743 pagetables:1014
[  260.626316][T12711]  sec_pagetables:0 bounce:0
[  260.626316][T12711]  kernel_misc_reclaimable:0
[  260.626316][T12711]  free:1234550 free_pcp:17220 free_cma:0
[  260.671777][T12711] Node 0 active_anon:21532kB inactive_anon:0kB active_file:12816kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121708kB dirty:340kB writeback:0kB shmem:9436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13552kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  260.713803][T12711] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  260.771331][T12711] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  260.837149][T12711] lowmem_reserve[]: 0 2506 2506 2506 2506
[  260.843093][T12711] Node 0 DMA32 free:1034056kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27096kB inactive_anon:0kB active_file:12816kB inactive_file:159252kB unevictable:1536kB writepending:340kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:41484kB local_pcp:22548kB free_cma:0kB
[  260.922669][T12711] lowmem_reserve[]: 0 0 0 0 0
[  260.927508][T12711] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  260.961959][T12711] lowmem_reserve[]: 0 0 0 0 0
[  260.966757][T12711] Node 1 Normal free:3885180kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24396kB local_pcp:11916kB free_cma:0kB
[  260.996564][T12732] netlink: 'syz.4.1681': attribute type 1 has an invalid length.
[  260.998322][T12711] lowmem_reserve[]: 0 0 0 0 0
[  261.010644][T12711] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  261.023934][T12732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.039215][T12711] Node 0 DMA32: 283*4kB (UM) 69*8kB (UM) 137*16kB (UME) 350*32kB (UME) 125*64kB (UME) 53*128kB (UME) 52*256kB (UME) 25*512kB (UM) 14*1024kB (UM) 5*2048kB (UME) 232*4096kB (M) = 1030820kB
[  261.060956][T12711] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  261.073368][T12711] Node 1 Normal: 207*4kB (UE) 56*8kB (UM) 52*16kB (UME) 84*32kB (UME) 27*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885180kB
[  261.091723][T12711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  261.144132][T12711] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  261.161029][T12711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  261.187762][T12711] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  261.197553][T12711] 47162 total pagecache pages
[  261.202342][T12711] 0 pages in swap cache
[  261.246186][T12735] lo speed is unknown, defaulting to 1000
[  261.263421][T12711] Free swap  = 124996kB
[  261.276637][T12711] Total swap = 124996kB
[  261.291338][T12711] 2097051 pages RAM
[  261.300615][T12711] 0 pages HighMem/MovableOnly
[  261.313354][T12711] 423781 pages reserved
[  261.323433][T12711] 0 pages cma reserved
[  261.429276][   T30] audit: type=1800 audit(1759700141.352:6): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1686" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1737 res=0 errno=0
[  261.967879][T12775] netlink: 'syz.2.1694': attribute type 30 has an invalid length.
[  262.824581][T12803] __nla_validate_parse: 1 callbacks suppressed
[  262.824599][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1699'.
[  263.207650][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'.
[  263.230517][T12829] bridge2: entered allmulticast mode
[  263.246940][T12829] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  263.263038][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'.
[  263.282171][T12826] lo speed is unknown, defaulting to 1000
[  263.288357][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1707'.
[  263.318953][T12834] netlink: 'syz.1.1709': attribute type 1 has an invalid length.
[  263.339641][T12834] netlink: 'syz.1.1709': attribute type 2 has an invalid length.
[  263.348347][T12836] netlink: 'syz.1.1709': attribute type 1 has an invalid length.
[  263.356368][T12836] netlink: 'syz.1.1709': attribute type 2 has an invalid length.
[  263.766080][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'.
[  263.803055][T12855] macvtap1: entered promiscuous mode
[  263.824857][T12855] macvtap1: entered allmulticast mode
[  263.833493][T12855] bond0: entered allmulticast mode
[  263.843475][T12855] bond_slave_0: entered allmulticast mode
[  263.853446][T12855] bond_slave_1: entered allmulticast mode
[  263.865050][T12855] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  263.908752][T12852] lo speed is unknown, defaulting to 1000
[  264.357169][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'.
[  264.394687][T12877] netlink: 'syz.3.1721': attribute type 29 has an invalid length.
[  264.445200][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'.
[  264.797617][T12853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'.
[  264.809550][T12864] lo speed is unknown, defaulting to 1000
[  264.876481][T12891] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1726'.
[  265.920693][T12914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'.
[  266.077411][T12917] lo speed is unknown, defaulting to 1000
[  266.087435][T12922] netlink: 'syz.2.1734': attribute type 2 has an invalid length.
[  266.100907][T12922] netlink: 'syz.2.1734': attribute type 2 has an invalid length.
[  266.632283][T12928] lo speed is unknown, defaulting to 1000
[  266.692402][T12957] netlink: 'syz.3.1742': attribute type 1 has an invalid length.
[  267.155247][T12959] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  267.179004][T12970] vlan0: entered allmulticast mode
[  267.193460][T12970] bond0: entered allmulticast mode
[  267.302081][T12968] lo speed is unknown, defaulting to 1000
[  267.349261][T12978] netlink: 'syz.3.1748': attribute type 13 has an invalid length.
[  267.363651][T12978] netlink: 'syz.3.1748': attribute type 17 has an invalid length.
[  267.381488][T12978] erspan0: left allmulticast mode
[  267.401250][T12978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.721898][T12985] C: renamed from team_slave_0
[  267.730794][T12985] netlink: 'syz.1.1750': attribute type 2 has an invalid length.
[  267.741973][T12985] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  268.060659][T12997] netlink: 'syz.4.1753': attribute type 13 has an invalid length.
[  268.069837][T12998] netlink: 'syz.4.1753': attribute type 13 has an invalid length.
[  268.558423][T13014] lo speed is unknown, defaulting to 1000
[  269.029674][T13040] tipc: Failed to remove unknown binding: 66,1,1/0:616049885/616049887
[  269.120597][T13044] syz_tun: entered promiscuous mode
[  269.159042][T13044] macsec0: entered promiscuous mode
[  269.202279][T13044] syz_tun: left promiscuous mode
[  269.732722][T13056] lo speed is unknown, defaulting to 1000
[  270.102661][T13082] __nla_validate_parse: 9 callbacks suppressed
[  270.102680][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'.
[  270.166517][T13076] lo speed is unknown, defaulting to 1000
[  270.385629][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'.
[  270.399665][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'.
[  270.427850][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'.
[  270.504680][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'.
[  270.526211][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'.
[  270.845333][T13085] lo speed is unknown, defaulting to 1000
[  271.147507][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'.
[  271.209044][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'.
[  271.228227][ T6292] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.237679][ T6292] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.355871][ T6292] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.428142][ T6265] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.947195][T13129] tipc: Enabled bearer <eth:veth1_to_bridge>, priority 10
[  272.688939][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'.
[  272.740957][T13165] syzkaller0: Caught tx_queue_len zero misconfig
[  272.943557][T10998] tipc: Node number set to 613673458
[  272.984816][T13169] lo speed is unknown, defaulting to 1000
[  273.012574][T13173] netlink: 'syz.1.1795': attribute type 1 has an invalid length.
[  273.034360][T13173] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1795'.
[  273.276586][T13186] sctp: [Deprecated]: syz.0.1799 (pid 13186) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.276586][T13186] Use struct sctp_sack_info instead
[  273.366753][T13194] netlink: 'syz.4.1801': attribute type 142 has an invalid length.
[  273.738337][T13213] netlink: 'syz.4.1806': attribute type 5 has an invalid length.
[  273.809150][T13216] gtp0: entered promiscuous mode
[  274.905761][T13294] netlink: 'syz.0.1826': attribute type 1 has an invalid length.
[  274.985867][T13294] 8021q: adding VLAN 0 to HW filter on device bond7
[  275.227280][T13323] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  275.312113][T13329] __nla_validate_parse: 3 callbacks suppressed
[  275.312132][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'.
[  275.456740][T13336] lo speed is unknown, defaulting to 1000
[  275.634300][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'.
[  275.768435][T13332] lo speed is unknown, defaulting to 1000
[  276.089297][T13366] netlink: 'syz.3.1846': attribute type 10 has an invalid length.
[  276.098144][T13366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1846'.
[  276.142613][T13361] netlink: 'syz.0.1844': attribute type 12 has an invalid length.
[  276.336451][T13376] netlink: 'syz.1.1848': attribute type 1 has an invalid length.
[  276.345397][T13376] netlink: 17231 bytes leftover after parsing attributes in process `syz.1.1848'.
[  277.706530][T13430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.071571][T13430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.087140][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1866'.
[  279.119339][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1866'.
[  279.133445][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1866'.
[  279.155774][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1866'.
[  279.165736][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1866'.
[  279.199893][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1866'.
[  279.405523][T13454] tipc: Resetting bearer <eth:syzkaller0>
[  279.461076][T13430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.480740][T13462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  279.499127][ T6265] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.570665][ T6265] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.592189][ T6265] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.637286][T13430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.687667][ T6265] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.834447][ T6276] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.882363][ T6744] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.970070][ T6292] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.021809][ T6744] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.040182][T13493] tc_dump_action: action bad kind
[  280.308125][T13503] syzkaller0: entered promiscuous mode
[  280.323630][T13503] syzkaller0: entered allmulticast mode
[  282.068829][T13552] netlink: 'syz.0.1890': attribute type 2 has an invalid length.
[  282.087419][T13552] __nla_validate_parse: 192 callbacks suppressed
[  282.087439][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'.
[  282.094378][T13555] netlink: 'syz.1.1891': attribute type 1 has an invalid length.
[  282.145928][T13555] 8021q: adding VLAN 0 to HW filter on device bond5
[  282.212342][T13555] 8021q: adding VLAN 0 to HW filter on device bond5
[  282.229206][T13555] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  282.240848][T13555] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  282.292791][T13565] veth9: entered promiscuous mode
[  282.302830][T13561] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1894'.
[  282.534959][T13587] netlink: 'syz.4.1900': attribute type 4 has an invalid length.
[  282.564154][T13589] netlink: 'syz.4.1900': attribute type 4 has an invalid length.
[  282.667316][T13589] vlan3: entered allmulticast mode
[  282.972831][T13610] lo speed is unknown, defaulting to 1000
[  283.196456][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1907'.
[  283.423732][T13637] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1910'.
[  283.450856][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'.
[  283.450860][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'.
[  283.543450][T13632] lo speed is unknown, defaulting to 1000
[  283.564937][T13642] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1909'.
[  283.605723][T13647] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.655957][T13651] netlink: 'syz.3.1910': attribute type 4 has an invalid length.
[  283.938740][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'.
[  284.101842][T13677] netlink: 'syz.2.1919': attribute type 2 has an invalid length.
[  284.249531][T13634] lo speed is unknown, defaulting to 1000
[  284.331762][T13691] ªªªªª»: renamed from bond0
[  284.383500][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  284.449675][T13698] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1924'.
[  284.681629][T13713] syz_tun: entered allmulticast mode
[  284.701172][T13716] dvmrp8: entered allmulticast mode
[  284.735764][T13712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1927'.
[  284.795440][T13664] lo speed is unknown, defaulting to 1000
[  285.157942][T13713] lo speed is unknown, defaulting to 1000
[  285.509144][T13707] syz_tun: left allmulticast mode
[  285.514736][T13707] dvmrp8: left allmulticast mode
[  285.851026][T13751] netlink: 'syz.3.1936': attribute type 1 has an invalid length.
[  285.859645][T13751] netlink: 'syz.3.1936': attribute type 1 has an invalid length.
[  285.872796][T13751] netlink: 'syz.3.1936': attribute type 1 has an invalid length.
[  286.999875][T13780] syzkaller1: entered promiscuous mode
[  287.006146][T13780] syzkaller1: entered allmulticast mode
[  287.279898][T13788] lo speed is unknown, defaulting to 1000
[  287.332081][T13795] netlink: 'syz.0.1947': attribute type 1 has an invalid length.
[  287.366678][T13795] __nla_validate_parse: 2 callbacks suppressed
[  287.366699][T13795] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1947'.
[  287.384908][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1947'.
[  287.415342][T13801] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000
[  287.423046][T13800] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1949'.
[  287.665377][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'.
[  287.674766][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'.
[  287.829285][T13791] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  287.894987][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'.
[  287.925780][T13822] sctp: [Deprecated]: syz.0.1953 (pid 13822) Use of int in max_burst socket option.
[  287.925780][T13822] Use struct sctp_assoc_value instead
[  287.948410][T13817] vlan2: entered allmulticast mode
[  287.953638][T13817] bond0: entered allmulticast mode
[  287.984298][T13822] netlink: 'syz.0.1953': attribute type 49 has an invalid length.
[  288.731269][T13857] erspan0: left allmulticast mode
[  288.769079][T13862] netlink: 'syz.1.1961': attribute type 4 has an invalid length.
[  288.797128][T13857] ip6gre0: left promiscuous mode
[  288.802264][T13857] ip6gre0: left allmulticast mode
[  288.817753][T13857] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.828348][T13857] 8021q: adding VLAN 0 to HW filter on device team0
[  288.839985][T13857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.861690][T13855] lo speed is unknown, defaulting to 1000
[  288.996967][T13869] veth1_to_hsr: entered allmulticast mode
[  289.021513][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'.
[  289.099953][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'.
[  289.183622][T13872] bond6: entered promiscuous mode
[  289.189232][T13872] 8021q: adding VLAN 0 to HW filter on device bond6
[  289.320725][T13884] 8021q: VLANs not supported on gre0
[  289.415722][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'.
[  289.471887][T13888] 8021q: adding VLAN 0 to HW filter on device bond7
[  289.480608][T13888] bond7: entered promiscuous mode
[  289.488512][T13888] bond6: (slave bond7): Enslaving as an active interface with an up link
[  289.611454][T13903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.801462][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'.
[  289.829855][T13893] tipc: Disabling bearer <eth:syzkaller0>
[  289.851367][T13913] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  290.052849][T13913] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  290.166114][T13913] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  290.249968][T13913] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  290.329037][T13936] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  290.379416][T13934] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  290.443981][ T6744] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  290.479960][ T6265] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  290.512792][T13940] 8021q: adding VLAN 0 to HW filter on device bond7
[  290.535111][ T6265] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  290.563554][ T6292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  291.001112][T13959] netlink: 'syz.0.1987': attribute type 1 has an invalid length.
[  292.023205][T14009] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.056997][T14009] tipc: Resetting bearer <eth:syzkaller0>
[  292.121516][T14021] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001
[  292.163095][T14023] hsr_slave_0: left promiscuous mode
[  292.170562][T14023] hsr_slave_1: left promiscuous mode
[  292.450745][T14043] __nla_validate_parse: 9 callbacks suppressed
[  292.450762][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'.
[  292.525991][T14046] netlink: 'syz.4.2010': attribute type 1 has an invalid length.
[  292.536088][T14047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2011'.
[  292.892276][T14043] team_slave_0: left promiscuous mode
[  292.900560][T14043] team0 (unregistering): Port device team_slave_0 removed
[  292.909255][T14043] team_slave_1: left promiscuous mode
[  292.919808][T14043] team0 (unregistering): Port device team_slave_1 removed
[  293.019130][T14040] bond8: (slave bridge3): making interface the new active one
[  293.027900][T14040] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  293.122824][T14052] lo speed is unknown, defaulting to 1000
[  293.219415][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'.
[  293.834879][T14080] veth1_to_hsr: left allmulticast mode
[  293.842778][T14080] geneve2: left allmulticast mode
[  293.848446][T14080] bond1: left allmulticast mode
[  293.855000][T14080] geneve3: left allmulticast mode
[  293.913147][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'.
[  294.014174][T14091] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  294.405656][T14109] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2028'.
[  294.808631][T14125] netlink: 'syz.3.2033': attribute type 6 has an invalid length.
[  294.843566][T14125] netlink: 'syz.3.2033': attribute type 7 has an invalid length.
[  294.864275][T14125] netlink: 'syz.3.2033': attribute type 8 has an invalid length.
[  294.872043][T14125] netlink: 'syz.3.2033': attribute type 12 has an invalid length.
[  294.914045][T14129] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  294.929829][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2034'.
[  294.943053][T14128] netlink: 'syz.4.2034': attribute type 1 has an invalid length.
[  294.953849][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2034'.
[  294.985552][T14128] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2034'.
[  294.995490][T14128] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2034'.
[  295.296861][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2040'.
[  295.419490][T14156] netlink: 'syz.4.2041': attribute type 49 has an invalid length.
[  295.446579][T14156] netlink: 'syz.4.2041': attribute type 49 has an invalid length.
[  296.524553][T14186] bond2: left promiscuous mode
[  296.535688][T14186] vlan2: left promiscuous mode
[  296.554646][T14186] ip6erspan0: left promiscuous mode
[  296.561023][T14186] macvtap1: left promiscuous mode
[  296.576377][T14186] bond0: left promiscuous mode
[  296.597869][T14186] bond_slave_0: left promiscuous mode
[  296.604317][T14186] bond_slave_1: left promiscuous mode
[  296.739092][T14199] bond4: peer notification delay (8713) is not a multiple of miimon (100), value rounded to 8700 ms
[  296.863244][T14214] netlink: 'syz.1.2055': attribute type 1 has an invalid length.
[  297.073866][T14209] netlink: 'syz.3.2059': attribute type 10 has an invalid length.
[  297.098165][T14209] !
: entered promiscuous mode
[  297.112524][T14209] !
: entered allmulticast mode
[  297.124904][ T6292] bond0: (slave 
0!
): interface is now down
[  297.126809][T14209] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  297.145296][ T6292] bond0: (slave 
0!
): interface is now down
[  297.174471][ T6265] bond0: (slave 
0!
): interface is now down
[  297.195096][ T6265] bond0: (slave 
0!
): interface is now down
[  297.201538][ T6265] bond0: now running without any active interface!
[  297.258536][T14230] lo speed is unknown, defaulting to 1000
[  297.436434][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.663051][T14248] validate_nla: 1 callbacks suppressed
[  297.663069][T14248] netlink: 'syz.1.2068': attribute type 16 has an invalid length.
[  297.680709][T14248] __nla_validate_parse: 5 callbacks suppressed
[  297.680729][T14248] netlink: 10494 bytes leftover after parsing attributes in process `syz.1.2068'.
[  297.685069][T14250] netlink: 'syz.2.2067': attribute type 32 has an invalid length.
[  298.645430][T14294] openvswitch: netlink: Duplicate or invalid key (type 0).
[  298.652852][T14294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.665242][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'.
[  298.700794][T14294] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  298.718091][T14295] openvswitch: netlink: Duplicate or invalid key (type 0).
[  298.725449][T14295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.843730][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'.
[  299.287220][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2089'.
[  299.461589][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'.
[  299.472697][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2091'.
[  299.515538][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2091'.
[  299.622869][T14358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2096'.
[  299.658156][T14363] netlink: 'syz.2.2095': attribute type 11 has an invalid length.
[  299.750695][T14369] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  299.763112][T14369] bond5 (unregistering): Released all slaves
[  299.788095][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'.
[  299.951475][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'.
[  300.300144][   T30] audit: type=1800 audit(1759700180.232:7): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2101" name="memory.events" dev="tmpfs" ino=2284 res=0 errno=0
[  300.337708][T14403] lo speed is unknown, defaulting to 1000
[  300.892680][T14419] lo speed is unknown, defaulting to 1000
[  301.181069][T14431] 
: renamed from bond_slave_0
[  301.372077][T14420] lo speed is unknown, defaulting to 1000
[  301.630185][T14446] ip6gretap0: entered allmulticast mode
[  301.970532][T14441] lo speed is unknown, defaulting to 1000
[  302.425894][T14471] netlink: 'syz.4.2124': attribute type 13 has an invalid length.
[  302.435825][T14471] netlink: 'syz.4.2124': attribute type 17 has an invalid length.
[  302.520814][T14471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.769943][T14472] lo speed is unknown, defaulting to 1000
[  302.911584][T14476] __nla_validate_parse: 13 callbacks suppressed
[  302.911605][T14476] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.2125'.
[  302.929161][T14478] bond0: (slave 
0!
): Releasing backup interface
[  302.967478][T14478] !
: left promiscuous mode
[  302.972310][T14478] !
: left allmulticast mode
[  303.061467][T14483] netlink: 'syz.3.2126': attribute type 10 has an invalid length.
[  303.116612][T14478] `: Port device geneve0 removed
[  303.130098][T14478] batman_adv: batadv0: Removing interface: ip6gretap1
[  303.168238][T14478] batman_adv: batadv0: Removing interface: veth3
[  303.195070][T14478] bond2: (slave gretap1): Releasing active interface
[  303.202254][T14478] gretap1: left allmulticast mode
[  303.251946][T14478] bond5: (slave veth7): Releasing active interface
[  303.394539][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'.
[  303.527476][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'.
[  303.553112][T14488] lo speed is unknown, defaulting to 1000
[  304.664816][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'.
[  304.783129][T14528] lo speed is unknown, defaulting to 1000
[  304.891629][T14537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2141'.
[  305.082635][T14536] 8021q: adding VLAN 0 to HW filter on device team0
[  305.104560][T14536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.155530][T14543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.194409][T14543] syzkaller0: entered promiscuous mode
[  305.199910][T14543] syzkaller0: entered allmulticast mode
[  305.369960][T14543] tipc: Resetting bearer <eth:syzkaller0>
[  305.531088][T14551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  305.961908][T14580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2150'.
[  306.395485][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2158'.
[  306.453188][T14605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2156'.
[  307.037902][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'.
[  307.047277][T14631] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2167'.
[  307.261282][T14640] bond5: entered promiscuous mode
[  307.268301][T14640] 8021q: adding VLAN 0 to HW filter on device bond5
[  307.354806][T14643] bond9: entered promiscuous mode
[  307.360347][T14643] 8021q: adding VLAN 0 to HW filter on device bond9
[  307.495748][T14657] pim6reg: entered allmulticast mode
[  307.512191][T14655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.531206][T14657] pim6reg: left allmulticast mode
[  308.067155][T14688] lo speed is unknown, defaulting to 1000
[  308.211979][T14710] __nla_validate_parse: 133 callbacks suppressed
[  308.212000][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'.
[  308.253690][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'.
[  308.272839][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'.
[  308.336638][T14712] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2187'.
[  308.400397][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'.
[  308.644842][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'.
[  308.658377][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'.
[  308.712541][T14719] lo speed is unknown, defaulting to 1000
[  308.793085][T14728] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2192'.
[  308.834257][T14728] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  308.859378][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2192'.
[  308.954873][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'.
[  309.180182][T14726] lo speed is unknown, defaulting to 1000
[  309.218988][T14747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.227292][T14747] syzkaller0: entered promiscuous mode
[  309.232784][T14747] syzkaller0: entered allmulticast mode
[  309.271201][T14741] tipc: Resetting bearer <eth:syzkaller0>
[  309.341397][T14740] tipc: Resetting bearer <eth:syzkaller0>
[  309.426387][T14740] tipc: Disabling bearer <eth:syzkaller0>
[  309.568038][T14757] netlink: 'syz.3.2199': attribute type 66 has an invalid length.
[  310.208693][T14774] lo speed is unknown, defaulting to 1000
[  312.510550][T14833] lo speed is unknown, defaulting to 1000
[  313.105131][T14842] lo speed is unknown, defaulting to 1000
[  313.392700][T14868] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  313.505500][T14873] tap0: tun_chr_ioctl cmd 1074025677
[  313.519656][T14873] tap0: linktype set to 769
[  313.557416][T14877] __nla_validate_parse: 9 callbacks suppressed
[  313.557436][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2227'.
[  313.635280][T14882] netlink: 'syz.3.2228': attribute type 4 has an invalid length.
[  313.686706][T14888] netlink: 'syz.3.2228': attribute type 4 has an invalid length.
[  313.790685][T14886] bridge4: the hash_elasticity option has been deprecated and is always 16
[  313.799744][T14886] bridge4: entered allmulticast mode
[  313.837535][T14887] bridge5: the hash_elasticity option has been deprecated and is always 16
[  313.876347][T14887] bridge5: entered allmulticast mode
[  313.903973][ T6591] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec
[  314.136699][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'.
[  314.321965][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'.
[  314.409667][T14913] ipvlan2: entered promiscuous mode
[  314.417995][T14913] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  314.486340][T14918] dvmrp0: entered allmulticast mode
[  314.938609][T14952] netlink: 'syz.1.2247': attribute type 4 has an invalid length.
[  315.061476][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'.
[  315.110092][T14963] 8021q: adding VLAN 0 to HW filter on device bond9
[  315.555138][T14973] lo speed is unknown, defaulting to 1000
[  315.716205][T14983] netlink: 'syz.2.2254': attribute type 13 has an invalid length.
[  315.774169][T14983] netlink: 'syz.2.2254': attribute type 17 has an invalid length.
[  315.886129][T14983] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.898525][T14983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  315.976302][T14992] bridge_slave_0: invalid flags given to default FDB implementation
[  316.036652][T14964] lo speed is unknown, defaulting to 1000
[  316.441651][T14970] lo speed is unknown, defaulting to 1000
[  316.627776][T14986] lo speed is unknown, defaulting to 1000
[  316.743825][T14990] lo speed is unknown, defaulting to 1000
[  316.859393][T15000] lo speed is unknown, defaulting to 1000
[  318.310916][T15004] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2260'.
[  318.428033][T15004] tipc: Failed to remove unknown binding: 66,1,1/2105701516:3222432024/3222432026
[  318.473382][T15004] tipc: Failed to remove unknown binding: 66,1,1/2105701516:3222432024/3222432026
[  318.764115][T15035] lo speed is unknown, defaulting to 1000
[  318.827131][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2265'.
[  318.883484][T15048] netlink: 'syz.2.2265': attribute type 10 has an invalid length.
[  318.959762][T15048] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  319.310624][T15059] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2272'.
[  319.316187][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'.
[  319.334797][T15059] netlink: zone id is out of range
[  319.340046][T15059] netlink: zone id is out of range
[  319.353935][T15059] netlink: get zone limit has 8 unknown bytes
[  319.387919][T15041] lo speed is unknown, defaulting to 1000
[  319.557092][T15070] netlink: 'syz.0.2277': attribute type 1 has an invalid length.
[  319.684903][T15070] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  319.986540][T15092] FAULT_INJECTION: forcing a failure.
[  319.986540][T15092] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  320.008921][T15092] CPU: 0 UID: 0 PID: 15092 Comm: syz.4.2281 Not tainted syzkaller #0 PREEMPT(full) 
[  320.008949][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  320.008962][T15092] Call Trace:
[  320.008973][T15092]  <TASK>
[  320.008983][T15092]  dump_stack_lvl+0x189/0x250
[  320.009011][T15092]  ? __pfx____ratelimit+0x10/0x10
[  320.009043][T15092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.009067][T15092]  ? __pfx__printk+0x10/0x10
[  320.009112][T15092]  should_fail_ex+0x414/0x560
[  320.009145][T15092]  _copy_from_user+0x2d/0xb0
[  320.009169][T15092]  sctp_setsockopt+0x19f/0x1200
[  320.009196][T15092]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  320.009228][T15092]  do_sock_setsockopt+0x179/0x1b0
[  320.009256][T15092]  __x64_sys_setsockopt+0x13f/0x1b0
[  320.009286][T15092]  do_syscall_64+0xfa/0x3b0
[  320.009305][T15092]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.009334][T15092]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.009354][T15092]  ? clear_bhb_loop+0x60/0xb0
[  320.009379][T15092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.009399][T15092] RIP: 0033:0x7f29acb8eec9
[  320.009417][T15092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.009441][T15092] RSP: 002b:00007f29ada68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  320.009462][T15092] RAX: ffffffffffffffda RBX: 00007f29acde5fa0 RCX: 00007f29acb8eec9
[  320.009477][T15092] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  320.009489][T15092] RBP: 00007f29ada68090 R08: 000000000000002c R09: 0000000000000000
[  320.009502][T15092] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  320.009515][T15092] R13: 00007f29acde6038 R14: 00007f29acde5fa0 R15: 00007ffe493661f8
[  320.009545][T15092]  </TASK>
[  320.190549][T15081] veth9: entered promiscuous mode
[  320.278088][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'.
[  320.767723][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'.
[  320.805945][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2285'.
[  321.335410][T15132] FAULT_INJECTION: forcing a failure.
[  321.335410][T15132] name failslab, interval 1, probability 0, space 0, times 0
[  321.348607][T15132] CPU: 0 UID: 0 PID: 15132 Comm: syz.4.2292 Not tainted syzkaller #0 PREEMPT(full) 
[  321.348634][T15132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  321.348646][T15132] Call Trace:
[  321.348655][T15132]  <TASK>
[  321.348664][T15132]  dump_stack_lvl+0x189/0x250
[  321.348693][T15132]  ? __pfx____ratelimit+0x10/0x10
[  321.348724][T15132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.348748][T15132]  ? __pfx__printk+0x10/0x10
[  321.348780][T15132]  ? __lock_acquire+0xab9/0xd20
[  321.348810][T15132]  should_fail_ex+0x414/0x560
[  321.348842][T15132]  should_failslab+0xa8/0x100
[  321.348870][T15132]  kmem_cache_alloc_noprof+0x73/0x3c0
[  321.348893][T15132]  ? sctp_get_port_local+0x6d3/0x1680
[  321.348925][T15132]  sctp_get_port_local+0x6d3/0x1680
[  321.348968][T15132]  ? __pfx_sctp_get_port_local+0x10/0x10
[  321.348999][T15132]  ? sctp_bind_addr_match+0x28b/0x2b0
[  321.349027][T15132]  sctp_do_bind+0x4ea/0x940
[  321.349069][T15132]  sctp_connect_new_asoc+0x25c/0x690
[  321.349100][T15132]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  321.349133][T15132]  ? sctp_get_af_specific+0x29/0x80
[  321.349154][T15132]  ? sctp_inet6_send_verify+0x80/0x300
[  321.349174][T15132]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  321.349205][T15132]  __sctp_connect+0x5ba/0xd50
[  321.349254][T15132]  ? __pfx___sctp_connect+0x10/0x10
[  321.349277][T15132]  ? __local_bh_enable_ip+0x12d/0x1c0
[  321.349299][T15132]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.349330][T15132]  ? __local_bh_enable_ip+0x12d/0x1c0
[  321.349349][T15132]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  321.349367][T15132]  ? security_sctp_bind_connect+0x7e/0x2e0
[  321.349394][T15132]  sctp_setsockopt_connectx+0x100/0x1b0
[  321.349428][T15132]  sctp_setsockopt+0x6d9/0x1200
[  321.349453][T15132]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  321.349485][T15132]  do_sock_setsockopt+0x179/0x1b0
[  321.349514][T15132]  __x64_sys_setsockopt+0x13f/0x1b0
[  321.349543][T15132]  do_syscall_64+0xfa/0x3b0
[  321.349562][T15132]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.349590][T15132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.349610][T15132]  ? clear_bhb_loop+0x60/0xb0
[  321.349634][T15132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.349653][T15132] RIP: 0033:0x7f29acb8eec9
[  321.349672][T15132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.349690][T15132] RSP: 002b:00007f29ada68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  321.349710][T15132] RAX: ffffffffffffffda RBX: 00007f29acde5fa0 RCX: 00007f29acb8eec9
[  321.349725][T15132] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  321.349737][T15132] RBP: 00007f29ada68090 R08: 000000000000002c R09: 0000000000000000
[  321.349749][T15132] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  321.349761][T15132] R13: 00007f29acde6038 R14: 00007f29acde5fa0 R15: 00007ffe493661f8
[  321.349796][T15132]  </TASK>
[  321.713560][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'.
[  321.868268][T15147] lo speed is unknown, defaulting to 1000
[  321.956581][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2297'.
[  322.172431][T15152] tc_dump_action: action bad kind
[  322.210213][T15157] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2299'.
[  322.390014][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'.
[  322.891005][T15197] batadv_slave_0: entered promiscuous mode
[  322.919511][T15197] netlink: 'syz.0.2308': attribute type 1 has an invalid length.
[  322.979090][T15201] IPVS: length: 24 != 32212254744
[  323.002879][T15200] bond8: (slave gretap3): making interface the new active one
[  323.012376][T15200] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  323.057054][T15197] vlan0: entered allmulticast mode
[  323.062366][T15197] bond8: entered allmulticast mode
[  323.073923][T15197] gretap3: entered allmulticast mode
[  323.080721][T15197] bond8: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  323.347549][T15210] team0: No ports can be present during mode change
[  323.823190][T15232] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  324.038477][T15240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.075950][T15240] lo: entered promiscuous mode
[  324.081157][T15240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.264549][T15250] __nla_validate_parse: 4 callbacks suppressed
[  324.264568][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'.
[  324.320279][T15248] sctp: [Deprecated]: syz.3.2325 (pid 15248) Use of int in max_burst socket option.
[  324.320279][T15248] Use struct sctp_assoc_value instead
[  324.659031][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'.
[  324.725238][T15264] netlink: 'syz.0.2328': attribute type 1 has an invalid length.
[  324.752182][T15264] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2328'.
[  324.808263][T15265] lo speed is unknown, defaulting to 1000
[  325.069810][T15280] batadv1: entered promiscuous mode
[  325.078791][T15280] batadv1: entered allmulticast mode
[  325.102420][T15276] batadv1: entered promiscuous mode
[  325.108190][T15276] batadv1: entered allmulticast mode
[  325.205970][T15275] lo speed is unknown, defaulting to 1000
[  325.562549][T15301] netlink: 'syz.2.2338': attribute type 2 has an invalid length.
[  325.570992][T15301] netlink: 'syz.2.2338': attribute type 8 has an invalid length.
[  325.578909][T15301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2338'.
[  325.814583][T15303] tipc: Enabled bearer <eth:gre0>, priority 10
[  325.984705][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'.
[  326.007227][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'.
[  326.069192][T15316] netlink: 'syz.2.2344': attribute type 1 has an invalid length.
[  326.096503][ T6748] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.190518][ T6748] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.208635][T15319] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  326.224920][ T6748] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.253596][ T6748] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.312859][T15320] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  326.322858][T15330] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  326.325161][T15320] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  326.455091][T15338] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2350'.
[  326.486491][T15327] vlan2: entered allmulticast mode
[  326.497950][T15327] bridge0: entered allmulticast mode
[  326.504406][T15327] bond6: (slave vlan2): Opening slave failed
[  326.524592][T15330] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  326.541291][T15330] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  326.557476][T15330] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  326.566442][T15330] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  326.785938][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'.
[  326.910807][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'.
[  326.984341][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'.
[  327.015679][T15371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.044877][T15371] syzkaller0: entered promiscuous mode
[  327.057840][T15371] syzkaller0: entered allmulticast mode
[  327.366762][T15381] lo speed is unknown, defaulting to 1000
[  327.452056][T15389] FAULT_INJECTION: forcing a failure.
[  327.452056][T15389] name failslab, interval 1, probability 0, space 0, times 0
[  327.481428][T15389] CPU: 0 UID: 0 PID: 15389 Comm: syz.1.2366 Not tainted syzkaller #0 PREEMPT(full) 
[  327.481458][T15389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  327.481470][T15389] Call Trace:
[  327.481479][T15389]  <TASK>
[  327.481487][T15389]  dump_stack_lvl+0x189/0x250
[  327.481517][T15389]  ? __pfx____ratelimit+0x10/0x10
[  327.481548][T15389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.481572][T15389]  ? __pfx__printk+0x10/0x10
[  327.481612][T15389]  ? crng_make_state+0x3fc/0x700
[  327.481640][T15389]  ? crng_make_state+0x13a/0x700
[  327.481671][T15389]  should_fail_ex+0x414/0x560
[  327.481705][T15389]  should_failslab+0xa8/0x100
[  327.481734][T15389]  __kmalloc_cache_noprof+0x70/0x3d0
[  327.481758][T15389]  ? sctp_add_bind_addr+0x8c/0x370
[  327.481785][T15389]  sctp_add_bind_addr+0x8c/0x370
[  327.481812][T15389]  sctp_copy_local_addr_list+0x30b/0x4e0
[  327.481838][T15389]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  327.481860][T15389]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  327.481885][T15389]  ? sctp_v6_is_any+0x64/0x80
[  327.481911][T15389]  ? sctp_copy_one_addr+0x93/0x360
[  327.481938][T15389]  sctp_bind_addr_copy+0xb3/0x3c0
[  327.481961][T15389]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  327.481996][T15389]  sctp_connect_new_asoc+0x2e0/0x690
[  327.482026][T15389]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  327.482061][T15389]  ? sctp_get_af_specific+0x29/0x80
[  327.482081][T15389]  ? sctp_inet6_send_verify+0x80/0x300
[  327.482102][T15389]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  327.482133][T15389]  __sctp_connect+0x5ba/0xd50
[  327.482175][T15389]  ? __pfx___sctp_connect+0x10/0x10
[  327.482199][T15389]  ? __local_bh_enable_ip+0x12d/0x1c0
[  327.482220][T15389]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.482251][T15389]  ? __local_bh_enable_ip+0x12d/0x1c0
[  327.482270][T15389]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  327.482289][T15389]  ? security_sctp_bind_connect+0x7e/0x2e0
[  327.482316][T15389]  sctp_setsockopt_connectx+0x100/0x1b0
[  327.482352][T15389]  sctp_setsockopt+0x6d9/0x1200
[  327.482377][T15389]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  327.482411][T15389]  do_sock_setsockopt+0x179/0x1b0
[  327.482439][T15389]  __x64_sys_setsockopt+0x13f/0x1b0
[  327.482465][T15389]  do_syscall_64+0xfa/0x3b0
[  327.482482][T15389]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.482510][T15389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.482529][T15389]  ? clear_bhb_loop+0x60/0xb0
[  327.482553][T15389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.482572][T15389] RIP: 0033:0x7fc17b78eec9
[  327.482589][T15389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.482612][T15389] RSP: 002b:00007fc17c6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.482632][T15389] RAX: ffffffffffffffda RBX: 00007fc17b9e5fa0 RCX: 00007fc17b78eec9
[  327.482645][T15389] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  327.482657][T15389] RBP: 00007fc17c6c9090 R08: 000000000000002c R09: 0000000000000000
[  327.482668][T15389] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  327.482679][T15389] R13: 00007fc17b9e6038 R14: 00007fc17b9e5fa0 R15: 00007fffd4456f08
[  327.482707][T15389]  </TASK>
[  328.133651][ T6603] tipc: Node number set to 3233372238
[  328.246923][T15415] netem: change failed
[  328.247057][T15418] validate_nla: 28 callbacks suppressed
[  328.247071][T15418] netlink: 'syz.2.2372': attribute type 1 has an invalid length.
[  328.657478][T15439] FAULT_INJECTION: forcing a failure.
[  328.657478][T15439] name failslab, interval 1, probability 0, space 0, times 0
[  328.703490][T15439] CPU: 1 UID: 0 PID: 15439 Comm: syz.2.2379 Not tainted syzkaller #0 PREEMPT(full) 
[  328.703520][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  328.703532][T15439] Call Trace:
[  328.703540][T15439]  <TASK>
[  328.703549][T15439]  dump_stack_lvl+0x189/0x250
[  328.703577][T15439]  ? __pfx____ratelimit+0x10/0x10
[  328.703607][T15439]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.703631][T15439]  ? __pfx__printk+0x10/0x10
[  328.703677][T15439]  should_fail_ex+0x414/0x560
[  328.703711][T15439]  should_failslab+0xa8/0x100
[  328.703738][T15439]  __kmalloc_cache_noprof+0x70/0x3d0
[  328.703762][T15439]  ? sctp_add_bind_addr+0x8c/0x370
[  328.703789][T15439]  sctp_add_bind_addr+0x8c/0x370
[  328.703823][T15439]  sctp_copy_local_addr_list+0x30b/0x4e0
[  328.703850][T15439]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  328.703871][T15439]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  328.703894][T15439]  ? sctp_v6_is_any+0x64/0x80
[  328.703923][T15439]  ? sctp_copy_one_addr+0x93/0x360
[  328.703947][T15439]  sctp_bind_addr_copy+0xb3/0x3c0
[  328.703969][T15439]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  328.704003][T15439]  sctp_connect_new_asoc+0x2e0/0x690
[  328.704032][T15439]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  328.704064][T15439]  ? sctp_get_af_specific+0x29/0x80
[  328.704084][T15439]  ? sctp_inet6_send_verify+0x80/0x300
[  328.704103][T15439]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  328.704130][T15439]  __sctp_connect+0x5ba/0xd50
[  328.704169][T15439]  ? __pfx___sctp_connect+0x10/0x10
[  328.704191][T15439]  ? __local_bh_enable_ip+0x12d/0x1c0
[  328.704213][T15439]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.704244][T15439]  ? __local_bh_enable_ip+0x12d/0x1c0
[  328.704261][T15439]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  328.704278][T15439]  ? security_sctp_bind_connect+0x7e/0x2e0
[  328.704303][T15439]  sctp_setsockopt_connectx+0x100/0x1b0
[  328.704335][T15439]  sctp_setsockopt+0x6d9/0x1200
[  328.704360][T15439]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  328.704393][T15439]  do_sock_setsockopt+0x179/0x1b0
[  328.704420][T15439]  __x64_sys_setsockopt+0x13f/0x1b0
[  328.704450][T15439]  do_syscall_64+0xfa/0x3b0
[  328.704468][T15439]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.704495][T15439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.704514][T15439]  ? clear_bhb_loop+0x60/0xb0
[  328.704538][T15439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.704557][T15439] RIP: 0033:0x7f42e1b8eec9
[  328.704574][T15439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.704590][T15439] RSP: 002b:00007f42e29e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  328.704611][T15439] RAX: ffffffffffffffda RBX: 00007f42e1de5fa0 RCX: 00007f42e1b8eec9
[  328.704626][T15439] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  328.704637][T15439] RBP: 00007f42e29e0090 R08: 000000000000002c R09: 0000000000000000
[  328.704648][T15439] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  328.704660][T15439] R13: 00007f42e1de6038 R14: 00007f42e1de5fa0 R15: 00007ffda3245b28
[  328.704694][T15439]  </TASK>
[  329.320018][T15451] __nla_validate_parse: 8 callbacks suppressed
[  329.320038][T15451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2383'.
[  329.340074][T15451] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2383'.
[  329.349815][T15451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2383'.
[  329.508748][T15463] netlink: 'syz.1.2387': attribute type 3 has an invalid length.
[  329.535406][T15463] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2387'.
[  329.677311][T15455] lo speed is unknown, defaulting to 1000
[  329.889966][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'.
[  329.889966][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'.
[  330.663130][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'.
[  330.932513][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'.
[  330.967247][T15526] netlink: 'syz.3.2400': attribute type 1 has an invalid length.
[  330.998196][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'.
[  331.029800][T15532] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2403'.
[  331.050064][T15524] netlink: 'syz.3.2400': attribute type 1 has an invalid length.
[  331.612015][T15561] !
: renamed from dummy0 (while UP)
[  331.804154][T15570] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  331.818482][T15560] lo speed is unknown, defaulting to 1000
[  332.045852][T15580] Bluetooth: MGMT ver 1.23
[  332.111753][T15582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.151560][T15583] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.974479][T15655] netlink: 'syz.2.2425': attribute type 1 has an invalid length.
[  334.669786][T15685] tun0: tun_chr_ioctl cmd 1074025673
[  335.158854][T15711] netlink: 'syz.0.2434': attribute type 4 has an invalid length.
[  335.158896][T15709] netlink: 'syz.0.2434': attribute type 4 has an invalid length.
[  335.246675][ T6611] lo speed is unknown, defaulting to 1000
[  335.263652][ T6611] syz0: Port: 1 Link DOWN
[  335.344151][ T6611] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82
[  335.375172][T15717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.394010][T15717] syzkaller0: entered promiscuous mode
[  335.402498][T15717] syzkaller0: entered allmulticast mode
[  335.580912][T15722] __nla_validate_parse: 5 callbacks suppressed
[  335.580931][T15722] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2437'.
[  335.626447][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2437'.
[  335.645633][T15722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2437'.
[  335.668074][T15715] tipc: Resetting bearer <eth:syzkaller0>
[  335.734723][T15715] tipc: Disabling bearer <eth:syzkaller0>
[  335.745155][T15734] netlink: 'syz.2.2438': attribute type 1 has an invalid length.
[  335.753023][T15734] netlink: 'syz.2.2438': attribute type 1 has an invalid length.
[  335.779542][T15729] ip_vti0: entered promiscuous mode
[  335.797872][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'.
[  336.188163][T15748] netlink: 'syz.0.2444': attribute type 2 has an invalid length.
[  336.206216][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'.
[  336.311816][T15752] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  336.319901][T15752] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  336.351907][T15752] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  336.464637][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'.
[  336.767134][T15776] xt_bpf: check failed: parse error
[  336.806370][T15779] netlink: 'syz.0.2455': attribute type 1 has an invalid length.
[  336.905508][T15779] 8021q: adding VLAN 0 to HW filter on device bond11
[  336.928309][T15779] openvswitch: netlink: Message has 4396 unknown bytes.
[  336.971552][T15779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.038116][T15786] bond11: (slave geneve3): making interface the new active one
[  337.048007][T15786] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  337.058385][ T3569] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  337.067915][ T3569] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  337.086121][ T3569] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  337.094958][ T3569] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  337.151450][T15800] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2458'.
[  337.161552][T15800] netlink: zone id is out of range
[  337.163012][T15797] lo speed is unknown, defaulting to 1000
[  337.171458][T15800] netlink: zone id is out of range
[  337.179709][T15800] netlink: get zone limit has 8 unknown bytes
[  337.569954][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2463'.
[  337.600319][T15814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2463'.
[  337.623911][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2463'.
[  337.752703][T15822] syzkaller0: entered promiscuous mode
[  337.801965][T15822] syzkaller0: entered allmulticast mode
[  339.859491][T15880] veth0_to_bridge: entered promiscuous mode
[  339.866365][T15880] veth0_to_bridge: left promiscuous mode
[  339.888818][T15880] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  340.065694][T15893] netlink: 'syz.0.2479': attribute type 10 has an invalid length.
[  340.080379][T15890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  340.302699][T15900] lo speed is unknown, defaulting to 1000
[  340.312079][T15905] netlink: 'syz.1.2482': attribute type 3 has an invalid length.
[  340.343392][T15905] netlink: 'syz.1.2482': attribute type 2 has an invalid length.
[  340.353389][T15903] macvtap1: entered allmulticast mode
[  340.363038][T15903] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  340.372570][T15905] netlink: 'syz.1.2482': attribute type 2 has an invalid length.
[  340.388740][T15903] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  340.474896][T15912] netlink: 'syz.3.2485': attribute type 21 has an invalid length.
[  340.499828][T15912] netlink: 'syz.3.2485': attribute type 4 has an invalid length.
[  340.520642][T15912] netlink: 'syz.3.2485': attribute type 5 has an invalid length.
[  340.718073][T15922] __nla_validate_parse: 15 callbacks suppressed
[  340.718095][T15922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2488'.
[  340.846247][T15933] netlink: 'syz.2.2492': attribute type 1 has an invalid length.
[  341.005955][T15942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2493'.
[  341.037020][T15937] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  341.060101][T15937] bond8: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  341.072882][T15937] bond8: (slave vcan1): making interface the new active one
[  341.081104][T15937] bond8: (slave vcan1): Enslaving as an active interface with an up link
[  341.098674][T15941] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[  341.112911][T15941] bond8: (slave vcan2): Enslaving as a backup interface with an up link
[  341.130930][T15933] 8021q: adding VLAN 0 to HW filter on device bond8
[  341.648663][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2503'.
[  341.775457][T15973] lo speed is unknown, defaulting to 1000
[  342.345456][T15978] lo speed is unknown, defaulting to 1000
[  343.263538][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  343.602764][T16008] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2512'.
[  343.919765][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'.
[  343.935351][T16010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'.
[  343.995575][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'.
[  344.005002][T16010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'.
[  344.510411][T16040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2521'.
[  344.584360][T16047] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2523'.
[  344.809870][T16063] FAULT_INJECTION: forcing a failure.
[  344.809870][T16063] name failslab, interval 1, probability 0, space 0, times 0
[  344.843111][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.0.2528 Not tainted syzkaller #0 PREEMPT(full) 
[  344.843140][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  344.843152][T16063] Call Trace:
[  344.843160][T16063]  <TASK>
[  344.843169][T16063]  dump_stack_lvl+0x189/0x250
[  344.843198][T16063]  ? __pfx____ratelimit+0x10/0x10
[  344.843230][T16063]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.843257][T16063]  ? __pfx__printk+0x10/0x10
[  344.843300][T16063]  should_fail_ex+0x414/0x560
[  344.843333][T16063]  should_failslab+0xa8/0x100
[  344.843361][T16063]  __kmalloc_cache_noprof+0x70/0x3d0
[  344.843385][T16063]  ? sctp_add_bind_addr+0x8c/0x370
[  344.843412][T16063]  sctp_add_bind_addr+0x8c/0x370
[  344.843440][T16063]  sctp_copy_local_addr_list+0x30b/0x4e0
[  344.843466][T16063]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  344.843489][T16063]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  344.843513][T16063]  ? sctp_v6_is_any+0x64/0x80
[  344.843539][T16063]  ? sctp_copy_one_addr+0x93/0x360
[  344.843566][T16063]  sctp_bind_addr_copy+0xb3/0x3c0
[  344.843589][T16063]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  344.843622][T16063]  sctp_connect_new_asoc+0x2e0/0x690
[  344.843652][T16063]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  344.843687][T16063]  ? sctp_get_af_specific+0x29/0x80
[  344.843708][T16063]  ? sctp_inet6_send_verify+0x80/0x300
[  344.843729][T16063]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  344.843759][T16063]  __sctp_connect+0x5ba/0xd50
[  344.843801][T16063]  ? __pfx___sctp_connect+0x10/0x10
[  344.843824][T16063]  ? __local_bh_enable_ip+0x12d/0x1c0
[  344.843845][T16063]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.843877][T16063]  ? __local_bh_enable_ip+0x12d/0x1c0
[  344.843896][T16063]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  344.843915][T16063]  ? security_sctp_bind_connect+0x7e/0x2e0
[  344.843942][T16063]  sctp_setsockopt_connectx+0x100/0x1b0
[  344.843977][T16063]  sctp_setsockopt+0x6d9/0x1200
[  344.844003][T16063]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  344.844036][T16063]  do_sock_setsockopt+0x179/0x1b0
[  344.844065][T16063]  __x64_sys_setsockopt+0x13f/0x1b0
[  344.844099][T16063]  do_syscall_64+0xfa/0x3b0
[  344.844117][T16063]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.844145][T16063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.844164][T16063]  ? clear_bhb_loop+0x60/0xb0
[  344.844189][T16063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.844208][T16063] RIP: 0033:0x7f0ddbd8eec9
[  344.844225][T16063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.844243][T16063] RSP: 002b:00007f0ddccf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  344.844265][T16063] RAX: ffffffffffffffda RBX: 00007f0ddbfe5fa0 RCX: 00007f0ddbd8eec9
[  344.844280][T16063] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  344.844292][T16063] RBP: 00007f0ddccf2090 R08: 000000000000002c R09: 0000000000000000
[  344.844305][T16063] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002
[  344.844317][T16063] R13: 00007f0ddbfe6038 R14: 00007f0ddbfe5fa0 R15: 00007fffa8df4088
[  344.844352][T16063]  </TASK>
[  345.269415][T16070] tipc: Enabled bearer <ib:caif0>, priority 14
[  346.123615][ T6744] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.132095][ T6744] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  346.150750][ T6744] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.216196][ T6744] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  346.228552][ T6744] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.240714][ T6744] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  346.277866][T16128] FAULT_INJECTION: forcing a failure.
[  346.277866][T16128] name failslab, interval 1, probability 0, space 0, times 0
[  346.299052][ T6744] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.310690][ T6744] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  346.319687][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.0.2542 Not tainted syzkaller #0 PREEMPT(full) 
[  346.319713][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  346.319724][T16128] Call Trace:
[  346.319731][T16128]  <TASK>
[  346.319739][T16128]  dump_stack_lvl+0x189/0x250
[  346.319766][T16128]  ? __pfx____ratelimit+0x10/0x10
[  346.319794][T16128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.319816][T16128]  ? __pfx__printk+0x10/0x10
[  346.319862][T16128]  should_fail_ex+0x414/0x560
[  346.319895][T16128]  should_failslab+0xa8/0x100
[  346.319920][T16128]  __kmalloc_cache_noprof+0x70/0x3d0
[  346.319944][T16128]  ? sctp_add_bind_addr+0x8c/0x370
[  346.319971][T16128]  sctp_add_bind_addr+0x8c/0x370
[  346.320000][T16128]  sctp_copy_local_addr_list+0x30b/0x4e0
[  346.320026][T16128]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  346.320048][T16128]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  346.320070][T16128]  ? sctp_v6_is_any+0x64/0x80
[  346.320094][T16128]  ? sctp_copy_one_addr+0x93/0x360
[  346.320117][T16128]  sctp_bind_addr_copy+0xb3/0x3c0
[  346.320139][T16128]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  346.320175][T16128]  sctp_connect_new_asoc+0x2e0/0x690
[  346.320206][T16128]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  346.320241][T16128]  ? sctp_get_af_specific+0x29/0x80
[  346.320268][T16128]  ? sctp_inet6_send_verify+0x80/0x300
[  346.320288][T16128]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  346.320316][T16128]  __sctp_connect+0x5ba/0xd50
[  346.320352][T16128]  ? __pfx___sctp_connect+0x10/0x10
[  346.320374][T16128]  ? __local_bh_enable_ip+0x12d/0x1c0
[  346.320395][T16128]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.320425][T16128]  ? __local_bh_enable_ip+0x12d/0x1c0
[  346.320443][T16128]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  346.320461][T16128]  ? security_sctp_bind_connect+0x7e/0x2e0
[  346.320486][T16128]  sctp_setsockopt_connectx+0x100/0x1b0
[  346.320517][T16128]  sctp_setsockopt+0x6d9/0x1200
[  346.320541][T16128]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  346.320572][T16128]  do_sock_setsockopt+0x179/0x1b0
[  346.320599][T16128]  __x64_sys_setsockopt+0x13f/0x1b0
[  346.320637][T16128]  do_syscall_64+0xfa/0x3b0
[  346.320655][T16128]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.320692][T16128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.320712][T16128]  ? clear_bhb_loop+0x60/0xb0
[  346.320737][T16128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.320755][T16128] RIP: 0033:0x7f0ddbd8eec9
[  346.320773][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.320791][T16128] RSP: 002b:00007f0ddccf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  346.320812][T16128] RAX: ffffffffffffffda RBX: 00007f0ddbfe5fa0 RCX: 00007f0ddbd8eec9
[  346.320827][T16128] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  346.320839][T16128] RBP: 00007f0ddccf2090 R08: 000000000000002c R09: 0000000000000000
[  346.320851][T16128] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002
[  346.320864][T16128] R13: 00007f0ddbfe6038 R14: 00007f0ddbfe5fa0 R15: 00007fffa8df4088
[  346.320898][T16128]  </TASK>
[  347.343793][T16182] __nla_validate_parse: 4 callbacks suppressed
[  347.343812][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'.
[  347.348187][T16176] macsec0: entered promiscuous mode
[  347.359133][T16181] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2558'.
[  347.359158][T16181] nbd: must specify at least one socket
[  347.381285][T16176] ip6gretap0: entered promiscuous mode
[  347.388340][T16176] macsec0: entered allmulticast mode
[  347.474135][T16187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.494021][T16186] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.519244][T16190] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2560'.
[  347.528604][T16182] syzkaller0: entered promiscuous mode
[  347.534457][T16182] syzkaller0: entered allmulticast mode
[  347.542986][T16186] syzkaller0: mtu less than device minimum
[  347.549453][T16182] syzkaller0: mtu less than device minimum
[  347.588331][T16180] tipc: Resetting bearer <eth:syzkaller0>
[  347.606959][T16180] tipc: Disabling bearer <eth:syzkaller0>
[  347.698945][T16194] lo speed is unknown, defaulting to 1000
[  347.910951][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2565'.
[  347.950908][T16212] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2565'.
[  348.252345][T16221] lo speed is unknown, defaulting to 1000
[  349.321506][T16240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2572'.
[  349.372847][T16244] GUP no longer grows the stack in syz.0.2573 (16244): 200000003000-20000000a000 (200000001000)
[  349.414342][T16244] CPU: 0 UID: 0 PID: 16244 Comm: syz.0.2573 Not tainted syzkaller #0 PREEMPT(full) 
[  349.414380][T16244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  349.414392][T16244] Call Trace:
[  349.414400][T16244]  <TASK>
[  349.414408][T16244]  dump_stack_lvl+0x189/0x250
[  349.414440][T16244]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.414464][T16244]  ? __pfx__printk+0x10/0x10
[  349.414491][T16244]  ? find_vma+0xe7/0x160
[  349.414530][T16244]  __get_user_pages+0x24d0/0x2ce0
[  349.414553][T16244]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  349.414606][T16244]  ? rcu_is_watching+0x15/0xb0
[  349.414633][T16244]  __gup_longterm_locked+0xde4/0x1660
[  349.414671][T16244]  ? sanity_check_pinned_pages+0x123a/0x1300
[  349.414704][T16244]  gup_fast_fallback+0x1e6a/0x2010
[  349.414762][T16244]  ? __pfx_gup_fast_fallback+0x10/0x10
[  349.414780][T16244]  ? stack_trace_save+0x9c/0xe0
[  349.414805][T16244]  ? __pfx_stack_trace_save+0x10/0x10
[  349.414841][T16244]  ? pin_user_pages_fast+0x4d/0xb0
[  349.414865][T16244]  iov_iter_extract_pages+0x35a/0x5e0
[  349.414898][T16244]  extract_iter_to_sg+0xe46/0x24e0
[  349.414947][T16244]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  349.414996][T16244]  ? __asan_memset+0x22/0x50
[  349.415018][T16244]  af_alg_get_rsgl+0x436/0x810
[  349.415065][T16244]  aead_recvmsg+0x4d5/0x13b0
[  349.415098][T16244]  ? aa_sk_perm+0x81e/0x950
[  349.415132][T16244]  ? __pfx_aead_recvmsg+0x10/0x10
[  349.415159][T16244]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  349.415188][T16244]  ? __pfx_aead_recvmsg+0x10/0x10
[  349.415213][T16244]  sock_recvmsg_nosec+0x183/0x1c0
[  349.415247][T16244]  ____sys_recvmsg+0x3aa/0x460
[  349.415282][T16244]  ? __pfx_____sys_recvmsg+0x10/0x10
[  349.415325][T16244]  ? import_iovec+0x74/0xa0
[  349.415368][T16244]  ___sys_recvmsg+0x1b5/0x510
[  349.415401][T16244]  ? __pfx____sys_recvmsg+0x10/0x10
[  349.415467][T16244]  ? __might_fault+0xb0/0x130
[  349.415498][T16244]  do_recvmmsg+0x307/0x770
[  349.415535][T16244]  ? __pfx_do_recvmmsg+0x10/0x10
[  349.415575][T16244]  ? __pfx_do_futex+0x10/0x10
[  349.415622][T16244]  __x64_sys_recvmmsg+0x190/0x240
[  349.415652][T16244]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  349.415675][T16244]  ? rcu_is_watching+0x15/0xb0
[  349.415705][T16244]  ? do_syscall_64+0xbe/0x3b0
[  349.415731][T16244]  do_syscall_64+0xfa/0x3b0
[  349.415750][T16244]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.415780][T16244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.415801][T16244]  ? clear_bhb_loop+0x60/0xb0
[  349.415827][T16244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.415846][T16244] RIP: 0033:0x7f0ddbd8eec9
[  349.415865][T16244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.415883][T16244] RSP: 002b:00007f0ddccf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  349.415903][T16244] RAX: ffffffffffffffda RBX: 00007f0ddbfe5fa0 RCX: 00007f0ddbd8eec9
[  349.415919][T16244] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a
[  349.415931][T16244] RBP: 00007f0ddbe11f91 R08: 0000000000000000 R09: 0000000000000000
[  349.415945][T16244] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  349.415956][T16244] R13: 00007f0ddbfe6038 R14: 00007f0ddbfe5fa0 R15: 00007fffa8df4088
[  349.415993][T16244]  </TASK>
[  351.028511][T16277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.047245][T16277] syzkaller0: entered promiscuous mode
[  351.052751][T16277] syzkaller0: entered allmulticast mode
[  351.125816][T16277] tipc: Resetting bearer <eth:syzkaller0>
[  351.224790][T16295] lo speed is unknown, defaulting to 1000
[  351.400786][T16302] dvmrp0: entered allmulticast mode
[  351.444733][T16276] tipc: Resetting bearer <eth:syzkaller0>
[  351.496351][T16276] tipc: Disabling bearer <eth:syzkaller0>
[  351.508363][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'.
[  351.524923][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'.
[  351.581393][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'.
[  351.732977][T16319] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2588'.
[  351.742706][T16321] block nbd1: Unsupported socket: should be TCP or UNIX.
[  351.750522][T16322] sit0: left promiscuous mode
[  351.754513][T16322] batadv_slave_0: left promiscuous mode
[  351.795130][T16322] veth7: left promiscuous mode
[  351.871188][T16322] veth9: left promiscuous mode
[  351.919341][T16322] bond4: left promiscuous mode
[  351.941375][T16322] bond5: left promiscuous mode
[  351.954584][T16322] bond4: left allmulticast mode
[  351.966208][T16322] bond5: left allmulticast mode
[  352.023996][T16322] gretap1: left promiscuous mode
[  352.028987][T16322] gretap1: left allmulticast mode
[  352.079740][T16322] geneve2: left promiscuous mode
[  352.095525][T16322] geneve2: left allmulticast mode
[  352.240371][T16322] ip6gretap0: left allmulticast mode
[  352.252815][T16322] ip6gretap0: left promiscuous mode
[  352.259011][T16322] macsec0: left promiscuous mode
[  352.264929][T16322] macsec0: left allmulticast mode
[  352.301270][T16306] lo speed is unknown, defaulting to 1000
[  352.313113][ T6292] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  352.348347][ T6292] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.438867][T16342] netlink: 'syz.4.2594': attribute type 1 has an invalid length.
[  352.457632][ T6292] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  352.477303][ T6292] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.477939][T16344] netlink: 'syz.4.2594': attribute type 1 has an invalid length.
[  352.493536][ T6292] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  352.493600][ T6292] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.493636][ T6292] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  352.493660][ T6292] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  353.137700][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'.
[  353.462913][T16382] syzkaller1: entered promiscuous mode
[  353.468766][T16382] syzkaller1: entered allmulticast mode
[  353.499825][T16377] lo speed is unknown, defaulting to 1000
[  353.504926][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'.
[  353.971209][T16398] sctp: [Deprecated]: syz.3.2608 (pid 16398) Use of int in maxseg socket option.
[  353.971209][T16398] Use struct sctp_assoc_value instead
[  354.416493][T16403] syzkaller1: tun_chr_ioctl cmd 1074025677
[  354.424259][T16403] syzkaller1: linktype set to 6
[  354.480648][T16407] lo speed is unknown, defaulting to 1000
[  354.580949][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'.
[  355.508412][T16457] netlink: 'syz.3.2621': attribute type 21 has an invalid length.
[  355.516412][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'.
[  355.631727][T16459] : entered promiscuous mode
[  355.878339][T16466] lo speed is unknown, defaulting to 1000
[  356.207364][T16469] bond7: option packets_per_slave: invalid value (1802723700)
[  356.274353][T16469] bond7: option packets_per_slave: allowed values 0 - 65535
[  356.330614][T16469] bond7 (unregistering): Released all slaves
[  356.652323][T16491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.991504][T16481] lo speed is unknown, defaulting to 1000
[  357.003630][T16503] netlink: 'syz.2.2635': attribute type 1 has an invalid length.
[  357.122778][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2635'.
[  357.164934][T16503] bond9: entered promiscuous mode
[  357.170456][T16503] 8021q: adding VLAN 0 to HW filter on device bond9
[  357.953203][T16531] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  358.051596][T16531] bond0: (slave 
0!
): Releasing backup interface
[  358.118904][T16531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  358.130416][T16539] netlink: 'syz.2.2642': attribute type 1 has an invalid length.
[  358.143960][T16539] netlink: 'syz.2.2642': attribute type 4 has an invalid length.
[  358.170360][T16539] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2642'.
[  358.211446][T16531] netlink: 'syz.2.2642': attribute type 1 has an invalid length.
[  358.257945][T16531] netlink: 'syz.2.2642': attribute type 4 has an invalid length.
[  358.289261][T16531] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2642'.
[  358.334014][T16539] netlink: 'syz.2.2642': attribute type 10 has an invalid length.
[  358.353170][T16539] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  358.683126][T16556] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  358.738192][T16561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2653'.
[  358.743979][T16556] bridge7: entered promiscuous mode
[  358.812392][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'.
[  358.971749][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'.
[  359.121775][T16592] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2660'.
[  359.167462][T16596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2663'.
[  359.198584][T16597] netlink: 'syz.4.2662': attribute type 21 has an invalid length.
[  359.247676][T16597] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2662'.
[  359.259224][T16603] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2662'.
[  359.277342][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'.
[  359.391117][T16603] batadv1: entered promiscuous mode
[  359.407775][T16603] batadv1: entered allmulticast mode
[  359.768382][T16627] tc_dump_action: action bad kind
[  359.799732][T16628] tc_dump_action: action bad kind
[  359.997760][T16646] 8021q: VLANs not supported on caif0
[  360.523881][T16679] netlink: 'syz.4.2683': attribute type 3 has an invalid length.
[  360.559581][T16680] lo speed is unknown, defaulting to 1000
[  361.159017][T16682] geneve2: entered promiscuous mode
[  361.190038][ T6748] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.208746][ T6748] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.225392][T16683] lo speed is unknown, defaulting to 1000
[  361.256987][ T6748] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.286837][ T6748] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.578980][T16701] lo speed is unknown, defaulting to 1000
[  361.907051][T16728] netlink: 'syz.1.2700': attribute type 19 has an invalid length.
[  362.767264][T16762] lo speed is unknown, defaulting to 1000
[  363.178089][T16780] netlink: 'syz.4.2712': attribute type 30 has an invalid length.
[  363.475246][T16798] __nla_validate_parse: 12 callbacks suppressed
[  363.475265][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2716'.
[  363.550428][T16798] 8021q: adding VLAN 0 to HW filter on device bond10
[  363.869974][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2719'.
[  363.890111][T16807] geneve3: entered promiscuous mode
[  364.459377][T16821] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  364.470697][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'.
[  364.480630][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'.
[  364.490029][T16819] netlink: 'syz.2.2724': attribute type 12 has an invalid length.
[  364.500194][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'.
[  364.511918][T16819] netlink: 'syz.2.2724': attribute type 14 has an invalid length.
[  364.722435][T16824] sch_fq: defrate 0 ignored.
[  364.777057][T16826] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.079987][T16846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2728'.
[  365.094829][T16847] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001
[  365.520285][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'.
[  365.614108][T16868] bond12: Removing last arp target with arp_interval on
[  365.634717][T16874] lo speed is unknown, defaulting to 1000
[  365.674579][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'.
[  365.821540][T16898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2741'.
[  365.855637][T16895] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  365.986651][T16914] Unsupported ieee802154 address type: 0
[  366.023645][T16916] wg1: entered promiscuous mode
[  366.028657][T16916] wg1: entered allmulticast mode
[  366.326963][T16931] netlink: 'syz.4.2749': attribute type 1 has an invalid length.
[  366.358694][T16931] tipc: Failed to remove unknown binding: 66,1,1/3233372238:3911278452/3911278454
[  366.379906][T16931] tipc: Failed to remove unknown binding: 66,1,1/3233372238:3911278452/3911278454
[  366.400775][T16931] tipc: Failed to remove unknown binding: 66,1,1/3233372238:3911278452/3911278454
[  366.424907][T16931] netlink: 'syz.4.2749': attribute type 30 has an invalid length.
[  366.503442][T16931] bond13: option arp_missed_max: invalid value (0)
[  366.510272][T16931] bond13: option arp_missed_max: allowed values 1 - 255
[  366.531178][T16931] bond13 (unregistering): Released all slaves
[  366.722972][T16940] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[  366.804000][T16945] Unsupported ieee802154 address type: 0
[  366.859340][T16946] bond11: (slave bridge5): making interface the new active one
[  366.895709][T16946] bond11: (slave bridge5): Enslaving as an active interface with an up link
[  366.979993][T16954] FAULT_INJECTION: forcing a failure.
[  366.979993][T16954] name failslab, interval 1, probability 0, space 0, times 0
[  367.008200][T16954] CPU: 1 UID: 0 PID: 16954 Comm: syz.0.2753 Not tainted syzkaller #0 PREEMPT(full) 
[  367.008229][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  367.008245][T16954] Call Trace:
[  367.008252][T16954]  <TASK>
[  367.008261][T16954]  dump_stack_lvl+0x189/0x250
[  367.008288][T16954]  ? __pfx____ratelimit+0x10/0x10
[  367.008314][T16954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.008337][T16954]  ? __pfx__printk+0x10/0x10
[  367.008381][T16954]  should_fail_ex+0x414/0x560
[  367.008414][T16954]  should_failslab+0xa8/0x100
[  367.008441][T16954]  __kmalloc_cache_noprof+0x70/0x3d0
[  367.008464][T16954]  ? sctp_add_bind_addr+0x8c/0x370
[  367.008490][T16954]  sctp_add_bind_addr+0x8c/0x370
[  367.008514][T16954]  sctp_copy_local_addr_list+0x30b/0x4e0
[  367.008538][T16954]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  367.008557][T16954]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  367.008579][T16954]  ? sctp_v6_is_any+0x64/0x80
[  367.008602][T16954]  ? sctp_copy_one_addr+0x93/0x360
[  367.008625][T16954]  sctp_bind_addr_copy+0xb3/0x3c0
[  367.008654][T16954]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  367.008686][T16954]  sctp_connect_new_asoc+0x2e0/0x690
[  367.008715][T16954]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  367.008746][T16954]  ? sctp_get_af_specific+0x29/0x80
[  367.008766][T16954]  ? sctp_inet6_send_verify+0x80/0x300
[  367.008784][T16954]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  367.008813][T16954]  __sctp_connect+0x5ba/0xd50
[  367.008854][T16954]  ? __pfx___sctp_connect+0x10/0x10
[  367.008875][T16954]  ? __local_bh_enable_ip+0x12d/0x1c0
[  367.008895][T16954]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.008923][T16954]  ? __local_bh_enable_ip+0x12d/0x1c0
[  367.008938][T16954]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  367.008956][T16954]  ? security_sctp_bind_connect+0x7e/0x2e0
[  367.008982][T16954]  sctp_setsockopt_connectx+0x100/0x1b0
[  367.009016][T16954]  sctp_setsockopt+0x6d9/0x1200
[  367.009041][T16954]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  367.009073][T16954]  do_sock_setsockopt+0x179/0x1b0
[  367.009100][T16954]  __x64_sys_setsockopt+0x13f/0x1b0
[  367.009127][T16954]  do_syscall_64+0xfa/0x3b0
[  367.009145][T16954]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.009171][T16954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.009191][T16954]  ? clear_bhb_loop+0x60/0xb0
[  367.009212][T16954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.009229][T16954] RIP: 0033:0x7f0ddbd8eec9
[  367.009246][T16954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.009263][T16954] RSP: 002b:00007f0ddccf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  367.009282][T16954] RAX: ffffffffffffffda RBX: 00007f0ddbfe5fa0 RCX: 00007f0ddbd8eec9
[  367.009296][T16954] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  367.009307][T16954] RBP: 00007f0ddccf2090 R08: 000000000000002c R09: 0000000000000000
[  367.009319][T16954] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002
[  367.009332][T16954] R13: 00007f0ddbfe6038 R14: 00007f0ddbfe5fa0 R15: 00007fffa8df4088
[  367.009366][T16954]  </TASK>
[  367.345613][T16957] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  367.435688][T16968] 8021q: adding VLAN 0 to HW filter on device bond13
[  367.608675][T16978] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  367.652150][T16978] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2759'.
[  367.903760][ T5841] Bluetooth: hci4: command tx timeout
[  367.923398][T17006] lo speed is unknown, defaulting to 1000
[  367.950828][T17010] netlink: 'syz.2.2767': attribute type 1 has an invalid length.
[  368.012370][T17014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.046133][T17014] syzkaller0: entered promiscuous mode
[  368.051907][T17014] syzkaller0: entered allmulticast mode
[  368.110870][T17014] tipc: Resetting bearer <eth:syzkaller0>
[  368.127170][T17011] tipc: Resetting bearer <eth:syzkaller0>
[  368.150975][T17011] tipc: Disabling bearer <eth:syzkaller0>
[  368.536619][T17043] netlink: 'syz.0.2773': attribute type 13 has an invalid length.
[  368.555978][T17043] netlink: 'syz.0.2773': attribute type 17 has an invalid length.
[  368.597422][T17043] xfrm0: entered promiscuous mode
[  368.602504][T17043] xfrm0: entered allmulticast mode
[  369.430056][ T5841] Bluetooth: hci2: command tx timeout
[  370.101615][T17087] syzkaller1: entered promiscuous mode
[  370.107226][T17087] syzkaller1: entered allmulticast mode
[  370.124397][T17091] __nla_validate_parse: 2 callbacks suppressed
[  370.124416][T17091] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2787'.
[  370.140051][T17091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2787'.
[  370.152660][T17091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'.
[  370.182910][T17085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2784'.
[  370.240798][T17091] lo speed is unknown, defaulting to 1000
[  370.516811][T17103] bond10: invalid ARP target 0.0.0.0 specified for addition
[  370.544765][T17109] netlink: 'syz.3.2790': attribute type 10 has an invalid length.
[  370.558817][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'.
[  370.587066][T17103] bond10: option arp_ip_target: invalid value (0)
[  370.620100][T17103] bond10 (unregistering): Released all slaves
[  370.686975][T17109] 8021q: adding VLAN 0 to HW filter on device `
[  370.697458][T17109] `: entered promiscuous mode
[  370.702664][T17109] `: entered allmulticast mode
[  370.709202][T17109] bond0: (slave `): Enslaving as an active interface with a down link
[  370.841032][T17112] netlink: 'syz.1.2791': attribute type 1 has an invalid length.
[  370.868820][T17112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2791'.
[  370.895700][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'.
[  371.223123][T17133] netlink: 'syz.0.2796': attribute type 13 has an invalid length.
[  371.271132][T17133] netlink: 'syz.0.2796': attribute type 17 has an invalid length.
[  371.429099][T17137] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2798'.
[  371.452819][T17133] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.467750][T17133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.494153][ T5897] lo speed is unknown, defaulting to 1000
[  371.501280][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.510466][ T5897] syz0: Port: 1 Link ACTIVE
[  371.744084][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'.
[  371.791802][T17151] bridge6: the hash_elasticity option has been deprecated and is always 16
[  371.801883][T17151] bridge6: entered allmulticast mode
[  371.952884][T17161] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  371.975943][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2805'.
[  372.037130][T17167] batman_adv: batadv0: Adding interface: ipvlan0
[  372.051865][T17167] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.069904][T17168] netlink: 'syz.1.2806': attribute type 4 has an invalid length.
[  372.098485][T17167] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  372.137573][T17168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.435548][T17179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.464805][T17179] syzkaller0: entered promiscuous mode
[  372.487888][T17179] syzkaller0: entered allmulticast mode
[  372.582375][T17179] tipc: Resetting bearer <eth:syzkaller0>
[  372.731388][T17185] lo speed is unknown, defaulting to 1000
[  373.202957][T17175] tipc: Resetting bearer <eth:syzkaller0>
[  373.284237][T17175] tipc: Disabling bearer <eth:syzkaller0>
[  373.566461][T17186] netlink: 'syz.3.2812': attribute type 17 has an invalid length.
[  373.617514][T17186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  373.692622][T17186] netlink: 'syz.3.2812': attribute type 1 has an invalid length.
[  373.981933][T17231] netlink: 'syz.0.2825': attribute type 11 has an invalid length.
[  374.429984][T17246] block nbd1: Unsupported socket: should be TCP or UNIX.
[  374.732331][T17266] netlink: 'syz.4.2837': attribute type 1 has an invalid length.
[  374.852800][T17275] FAULT_INJECTION: forcing a failure.
[  374.852800][T17275] name failslab, interval 1, probability 0, space 0, times 0
[  374.912776][T17275] CPU: 0 UID: 0 PID: 17275 Comm: syz.0.2838 Not tainted syzkaller #0 PREEMPT(full) 
[  374.912806][T17275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  374.912816][T17275] Call Trace:
[  374.912824][T17275]  <TASK>
[  374.912833][T17275]  dump_stack_lvl+0x189/0x250
[  374.912860][T17275]  ? __pfx____ratelimit+0x10/0x10
[  374.912891][T17275]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.912916][T17275]  ? __pfx__printk+0x10/0x10
[  374.912962][T17275]  should_fail_ex+0x414/0x560
[  374.912997][T17275]  should_failslab+0xa8/0x100
[  374.913025][T17275]  __kmalloc_cache_noprof+0x70/0x3d0
[  374.913049][T17275]  ? sctp_add_bind_addr+0x8c/0x370
[  374.913083][T17275]  sctp_add_bind_addr+0x8c/0x370
[  374.913111][T17275]  sctp_copy_local_addr_list+0x30b/0x4e0
[  374.913136][T17275]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  374.913158][T17275]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  374.913182][T17275]  ? sctp_v6_is_any+0x64/0x80
[  374.913209][T17275]  ? sctp_copy_one_addr+0x93/0x360
[  374.913238][T17275]  sctp_bind_addr_copy+0xb3/0x3c0
[  374.913258][T17275]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  374.913289][T17275]  sctp_connect_new_asoc+0x2e0/0x690
[  374.913317][T17275]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  374.913347][T17275]  ? sctp_get_af_specific+0x29/0x80
[  374.913365][T17275]  ? sctp_inet6_send_verify+0x80/0x300
[  374.913384][T17275]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  374.913415][T17275]  __sctp_connect+0x5ba/0xd50
[  374.913457][T17275]  ? __pfx___sctp_connect+0x10/0x10
[  374.913480][T17275]  ? __local_bh_enable_ip+0x12d/0x1c0
[  374.913499][T17275]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.913531][T17275]  ? __local_bh_enable_ip+0x12d/0x1c0
[  374.913548][T17275]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  374.913566][T17275]  ? security_sctp_bind_connect+0x7e/0x2e0
[  374.913592][T17275]  sctp_setsockopt_connectx+0x100/0x1b0
[  374.913627][T17275]  sctp_setsockopt+0x6d9/0x1200
[  374.913652][T17275]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  374.913685][T17275]  do_sock_setsockopt+0x179/0x1b0
[  374.913713][T17275]  __x64_sys_setsockopt+0x13f/0x1b0
[  374.913764][T17275]  do_syscall_64+0xfa/0x3b0
[  374.913782][T17275]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.913811][T17275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.913826][T17275]  ? clear_bhb_loop+0x60/0xb0
[  374.913845][T17275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.913861][T17275] RIP: 0033:0x7f0ddbd8eec9
[  374.913880][T17275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.913897][T17275] RSP: 002b:00007f0ddccf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  374.913918][T17275] RAX: ffffffffffffffda RBX: 00007f0ddbfe5fa0 RCX: 00007f0ddbd8eec9
[  374.913932][T17275] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  374.913944][T17275] RBP: 00007f0ddccf2090 R08: 000000000000002c R09: 0000000000000000
[  374.913957][T17275] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002
[  374.913969][T17275] R13: 00007f0ddbfe6038 R14: 00007f0ddbfe5fa0 R15: 00007fffa8df4088
[  374.914004][T17275]  </TASK>
[  375.476563][T17293] nbd: must specify a device to reconfigure
[  375.503477][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  375.551264][T17297] __nla_validate_parse: 9 callbacks suppressed
[  375.551283][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'.
[  375.802998][T17308] netlink: 'syz.4.2847': attribute type 1 has an invalid length.
[  375.828799][T17308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2847'.
[  376.269488][T17311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2849'.
[  376.378896][T17313] batadv1: entered promiscuous mode
[  376.384503][T17313] batadv1: entered allmulticast mode
[  376.423069][T17315] IPVS: length: 108 != 24
[  376.429243][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2848'.
[  376.534205][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'.
[  376.612941][T17323] lo speed is unknown, defaulting to 1000
[  376.700759][T17332] netlink: 'syz.1.2857': attribute type 9 has an invalid length.
[  376.944231][T17340] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2860'.
[  377.167204][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2865'.
[  377.457712][T17359] lo speed is unknown, defaulting to 1000
[  377.511764][T17372] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  377.574574][T17374] netlink: 'syz.3.2870': attribute type 1 has an invalid length.
[  377.582604][T17375] netlink: 'syz.3.2870': attribute type 1 has an invalid length.
[  377.688348][T17374] bond7: entered promiscuous mode
[  377.701798][T17374] 8021q: adding VLAN 0 to HW filter on device bond7
[  378.202574][T17408] netlink: 'syz.2.2879': attribute type 3 has an invalid length.
[  378.213749][T17408] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2879'.
[  378.322095][T17412] netlink: 'syz.2.2880': attribute type 11 has an invalid length.
[  378.676086][T17427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'.
[  378.812118][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'.
[  378.826414][T17427] netlink: 'syz.2.2884': attribute type 10 has an invalid length.
[  378.900529][T17427] veth8: entered allmulticast mode
[  379.246656][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.263994][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.275004][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.286322][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.294470][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.317675][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.334336][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.362096][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.371971][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.382230][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.424663][T17454] lo speed is unknown, defaulting to 1000
[  379.981040][T17446] lo speed is unknown, defaulting to 1000
[  380.270002][ T6748] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.304246][ T6748] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.405994][T17490] netlink: 'syz.3.2899': attribute type 83 has an invalid length.
[  380.510644][ T6748] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.522727][ T6748] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.690286][ T6748] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.723867][ T6748] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.841323][ T6748] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.860487][ T6748] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.093093][T17511] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  381.184965][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.229076][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.318924][T17521] lo speed is unknown, defaulting to 1000
[  381.328414][ T3569] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.349490][T17446] chnl_net:caif_netlink_parms(): no params data found
[  381.376514][T17525] tipc: Resetting bearer <eth:gre0>
[  381.430735][ T5841] Bluetooth: hci3: command tx timeout
[  381.443150][T17530] __nla_validate_parse: 7 callbacks suppressed
[  381.443169][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'.
[  381.460542][T17525] tipc: Resetting bearer <eth:syzkaller0>
[  381.563685][ T3569] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  381.680912][ T6748] tipc: Resetting bearer <eth:syzkaller0>
[  382.086231][ T6748] team0: Port device geneve0 removed
[  382.283026][ T6748] tipc: Disabling bearer <eth:syzkaller0>
[  382.486654][ T6748] ªªªªª» (unregistering): left promiscuous mode
[  382.493895][ T6748] ªªªªª» (unregistering): Released all slaves
[  382.506741][ T6748] bond1 (unregistering): Released all slaves
[  382.605501][ T6748] bond2 (unregistering): Released all slaves
[  382.705943][ T6748] bond3 (unregistering): Released all slaves
[  382.799612][ T6748] bond4 (unregistering): Released all slaves
[  382.893722][ T6748] bond5 (unregistering): Released all slaves
[  382.906490][ T6748] bond0 (unregistering): Released all slaves
[  383.001786][ T6748] bond6 (unregistering): (slave bond7): Releasing backup interface
[  383.010486][ T6748] bond7 (unregistering): left promiscuous mode
[  383.017222][ T6748] bond6 (unregistering): Released all slaves
[  383.105257][ T6748] bond7 (unregistering): Released all slaves
[  383.117759][ T6748] bond8 (unregistering): Released all slaves
[  383.206784][ T6748] bond9 (unregistering): Released all slaves
[  383.503637][ T5841] Bluetooth: hci3: command tx timeout
[  383.538766][T17446] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.560566][T17446] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.568280][T17446] bridge_slave_0: entered allmulticast mode
[  383.576408][T17446] bridge_slave_0: entered promiscuous mode
[  383.583914][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.585453][T17446] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.599057][T17446] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.606767][T17446] bridge_slave_1: entered allmulticast mode
[  383.620625][T17446] bridge_slave_1: entered promiscuous mode
[  383.699739][T17562] netlink: 'syz.4.2913': attribute type 10 has an invalid length.
[  383.711130][T17562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2913'.
[  383.720733][T17446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.744853][T17562] !
: entered promiscuous mode
[  383.761959][T17562] bridge0: port 3(
0!
) entered blocking state
[  383.780161][T17562] bridge0: port 3(
0!
) entered disabled state
[  383.794407][T17562] !
: entered allmulticast mode
[  383.834080][T17562] bridge0: port 3(
0!
) entered blocking state
[  383.840484][T17562] bridge0: port 3(
0!
) entered forwarding state
[  383.889415][T17446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.952969][T17566] lo speed is unknown, defaulting to 1000
[  384.087903][T17446] team0: Port device team_slave_0 added
[  384.113230][T17446] team0: Port device team_slave_1 added
[  384.253850][T17446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.260832][T17446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.288934][T17446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.326120][T17446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.333194][T17446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.372043][T17446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.602192][T17446] hsr_slave_0: entered promiscuous mode
[  384.625654][T17446] hsr_slave_1: entered promiscuous mode
[  384.641973][T17446] debugfs: 'hsr0' already exists in 'hsr'
[  384.658828][T17446] Cannot create hsr debugfs directory
[  384.700267][T17586] Bluetooth: hci0: Opcode 0x080f failed: -22
[  384.807718][T17582] lo speed is unknown, defaulting to 1000
[  384.975359][ T6748] tipc: Left network mode
[  385.172561][ T6748] IPVS: stopping backup sync thread 10802 ...
[  385.315091][T17446] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.392714][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'.
[  385.442134][T17446] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.551766][T17446] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.585026][ T5841] Bluetooth: hci3: command tx timeout
[  385.765881][T17446] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.871046][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'.
[  385.908656][T17600] lo speed is unknown, defaulting to 1000
[  386.376770][T17614] ip_vti0: left promiscuous mode
[  386.419029][T17614] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.435927][T17614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.661789][T17446] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  386.703702][ T5841] Bluetooth: hci0: command tx timeout
[  386.730791][T17619] netlink: 'syz.2.2928': attribute type 3 has an invalid length.
[  386.742595][T17619] netlink: 'syz.2.2928': attribute type 1 has an invalid length.
[  386.758083][T17619] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2928'.
[  386.761388][T17446] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  386.775762][T17619] NCSI netlink: No device for ifindex 0
[  386.801514][T17619] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2928'.
[  386.852130][T17446] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  386.912829][T17446] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  387.052830][ T6748] veth1_to_team: left promiscuous mode
[  387.667725][ T5841] Bluetooth: hci3: command tx timeout
[  388.525239][T17446] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.604963][T17446] 8021q: adding VLAN 0 to HW filter on device team0
[  388.647942][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.655227][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.727220][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.734562][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.864196][ T6748] IPVS: stop unused estimator thread 0...
[  388.921661][T17446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  388.947348][T17446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.139484][T17666] FAULT_INJECTION: forcing a failure.
[  389.139484][T17666] name failslab, interval 1, probability 0, space 0, times 0
[  389.155095][T17666] CPU: 1 UID: 0 PID: 17666 Comm: syz.0.2939 Not tainted syzkaller #0 PREEMPT(full) 
[  389.155123][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  389.155135][T17666] Call Trace:
[  389.155142][T17666]  <TASK>
[  389.155150][T17666]  dump_stack_lvl+0x189/0x250
[  389.155178][T17666]  ? __pfx____ratelimit+0x10/0x10
[  389.155209][T17666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.155234][T17666]  ? __pfx__printk+0x10/0x10
[  389.155278][T17666]  should_fail_ex+0x414/0x560
[  389.155311][T17666]  should_failslab+0xa8/0x100
[  389.155346][T17666]  __kmalloc_cache_noprof+0x70/0x3d0
[  389.155369][T17666]  ? sctp_add_bind_addr+0x8c/0x370
[  389.155398][T17666]  sctp_add_bind_addr+0x8c/0x370
[  389.155426][T17666]  sctp_copy_local_addr_list+0x30b/0x4e0
[  389.155452][T17666]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  389.155475][T17666]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  389.155499][T17666]  ? sctp_v6_is_any+0x64/0x80
[  389.155524][T17666]  ? sctp_copy_one_addr+0x93/0x360
[  389.155549][T17666]  sctp_bind_addr_copy+0xb3/0x3c0
[  389.155573][T17666]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  389.155608][T17666]  sctp_connect_new_asoc+0x2e0/0x690
[  389.155638][T17666]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  389.155672][T17666]  ? sctp_get_af_specific+0x29/0x80
[  389.155692][T17666]  ? sctp_inet6_send_verify+0x80/0x300
[  389.155711][T17666]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  389.155739][T17666]  __sctp_connect+0x5ba/0xd50
[  389.155779][T17666]  ? __pfx___sctp_connect+0x10/0x10
[  389.155803][T17666]  ? __local_bh_enable_ip+0x12d/0x1c0
[  389.155823][T17666]  ? lockdep_hardirqs_on+0x9c/0x150
[  389.155856][T17666]  ? __local_bh_enable_ip+0x12d/0x1c0
[  389.155875][T17666]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  389.155893][T17666]  ? security_sctp_bind_connect+0x7e/0x2e0
[  389.155919][T17666]  sctp_setsockopt_connectx+0x100/0x1b0
[  389.155953][T17666]  sctp_setsockopt+0x6d9/0x1200
[  389.155979][T17666]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  389.156012][T17666]  do_sock_setsockopt+0x179/0x1b0
[  389.156041][T17666]  __x64_sys_setsockopt+0x13f/0x1b0
[  389.156071][T17666]  do_syscall_64+0xfa/0x3b0
[  389.156088][T17666]  ? lockdep_hardirqs_on+0x9c/0x150
[  389.156116][T17666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.156136][T17666]  ? clear_bhb_loop+0x60/0xb0
[  389.156157][T17666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.156175][T17666] RIP: 0033:0x7f0ddbd8eec9
[  389.156193][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.156211][T17666] RSP: 002b:00007f0ddccf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  389.156231][T17666] RAX: ffffffffffffffda RBX: 00007f0ddbfe5fa0 RCX: 00007f0ddbd8eec9
[  389.156246][T17666] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  389.156258][T17666] RBP: 00007f0ddccf2090 R08: 000000000000002c R09: 0000000000000000
[  389.156271][T17666] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002
[  389.156284][T17666] R13: 00007f0ddbfe6038 R14: 00007f0ddbfe5fa0 R15: 00007fffa8df4088
[  389.156320][T17666]  </TASK>
[  389.522923][T17669] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.636667][T17675] netlink: 'syz.2.2937': attribute type 1 has an invalid length.
[  389.647858][T17675] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2937'.
[  389.657313][T17675] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2937'.
[  389.684393][T17677] bond12: option lp_interval: invalid value (0)
[  389.690797][T17677] bond12: option lp_interval: allowed values 1 - 2147483647
[  389.701872][T17677] bond12 (unregistering): Released all slaves
[  389.805486][T17446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.888426][T17688] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  389.899530][T17689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  389.940794][T17446] veth0_vlan: entered promiscuous mode
[  389.956034][T17446] veth1_vlan: entered promiscuous mode
[  390.016737][T17446] veth0_macvtap: entered promiscuous mode
[  390.031330][T17446] veth1_macvtap: entered promiscuous mode
[  390.063096][T17446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.106064][T17446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.139644][ T6292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.174085][ T6292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.182833][ T6292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.221253][ T6292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.412857][ T6292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.429025][ T6292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.477288][ T6745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.490958][ T6745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.035041][T17742] lo speed is unknown, defaulting to 1000
[  391.255382][T17748] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  391.396801][T17754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2961'.
[  391.455303][T17754] netlink: 'syz.1.2961': attribute type 10 has an invalid length.
[  391.569719][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  391.580230][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  391.590658][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  391.598715][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  391.606469][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  391.696798][T17754] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  391.926954][T17761] lo speed is unknown, defaulting to 1000
[  392.205692][T17792] vlan0: entered allmulticast mode
[  392.225621][T17792] bridge_slave_0: entered allmulticast mode
[  392.845506][T17821] netlink: 'syz.2.2973': attribute type 7 has an invalid length.
[  392.856162][T17761] chnl_net:caif_netlink_parms(): no params data found
[  392.869232][T17821] netlink: 'syz.2.2973': attribute type 8 has an invalid length.
[  392.879867][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'.
[  392.927337][T17821] macsec0: entered allmulticast mode
[  392.933592][T17821] bridge0: port 1(macsec0) entered blocking state
[  392.940411][T17821] bridge0: port 1(macsec0) entered disabled state
[  393.128728][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'.
[  393.141395][T17761] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.154281][T17761] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.178453][T17761] bridge_slave_0: entered allmulticast mode
[  393.190095][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'.
[  393.192431][T17761] bridge_slave_0: entered promiscuous mode
[  393.208451][T17761] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.216090][T17761] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.224005][T17761] bridge_slave_1: entered allmulticast mode
[  393.232103][T17761] bridge_slave_1: entered promiscuous mode
[  393.240269][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'.
[  393.332451][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'.
[  393.389104][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.415831][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.427978][T17863] ------------[ cut here ]------------
[  393.433591][T17863] ida_free called for id=2424 which is not allocated.
[  393.448998][T17863] WARNING: CPU: 1 PID: 17863 at lib/idr.c:592 ida_free+0x280/0x310
[  393.457525][T17863] Modules linked in:
[  393.461711][T17863] CPU: 1 UID: 0 PID: 17863 Comm: syz.1.2986 Not tainted syzkaller #0 PREEMPT(full) 
[  393.471240][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  393.481411][T17863] RIP: 0010:ida_free+0x280/0x310
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  393.486461][T17863] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb
[  393.506393][T17863] RSP: 0018:ffffc90003ddfb60 EFLAGS: 00010246
[  393.512487][T17863] RAX: 2b494f30d1039e00 RBX: 0000000000000a02 RCX: ffff8880781c9e40
[  393.520601][T17863] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  393.528654][T17863] RBP: ffffc90003ddfc60 R08: 0000000000000003 R09: 0000000000000004
[  393.536715][T17863] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff920007bbf70
[  393.544760][T17863] R13: dffffc0000000000 R14: ffff88807ce0fc00 R15: 0000000000000978
[  393.552835][T17863] FS:  00007f4ce55bd6c0(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000
[  393.561866][T17863] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.568535][T17863] CR2: 0000200000001080 CR3: 000000006ad0c000 CR4: 00000000003526f0
[  393.576576][T17863] Call Trace:
[  393.579871][T17863]  <TASK>
[  393.582830][T17863]  ? __pfx_ida_free+0x10/0x10
[  393.588053][T17863]  ? down_write+0x162/0x1f0
[  393.592587][T17863]  ? __pfx_down_write+0x10/0x10
[  393.597584][T17863]  ? alloc_mnt_ns+0x24e/0x310
[  393.602298][T17863]  copy_mnt_ns+0x197/0x820
[  393.606764][T17863]  ? rcu_is_watching+0x15/0xb0
[  393.611546][T17863]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  393.617067][T17863]  create_new_namespaces+0xd1/0x720
[  393.622298][T17863]  ? bpf_lsm_capable+0x9/0x20
[  393.627024][T17863]  ? security_capable+0x7e/0x2e0
[  393.632018][T17863]  unshare_nsproxy_namespaces+0x11c/0x170
[  393.637853][T17863]  ksys_unshare+0x4c8/0x8c0
[  393.642414][T17863]  ? __pfx_ksys_unshare+0x10/0x10
[  393.647597][T17863]  __x64_sys_unshare+0x38/0x50
[  393.652381][T17863]  do_syscall_64+0xfa/0x3b0
[  393.656986][T17863]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.662215][T17863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.668195][ T5841] Bluetooth: hci5: command tx timeout
[  393.669076][T17863]  ? clear_bhb_loop+0x60/0xb0
[  393.678642][T17863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.684663][T17863] RIP: 0033:0x7f4ce478eec9
[  393.689093][T17863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.708762][T17863] RSP: 002b:00007f4ce55bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  393.717364][T17863] RAX: ffffffffffffffda RBX: 00007f4ce49e6180 RCX: 00007f4ce478eec9
[  393.725414][T17863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  393.733455][T17863] RBP: 00007f4ce4811f91 R08: 0000000000000000 R09: 0000000000000000
[  393.741442][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.749851][T17863] R13: 00007f4ce49e6218 R14: 00007f4ce49e6180 R15: 00007ffe93160738
[  393.758110][T17863]  </TASK>
[  393.761222][T17863] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  393.768497][T17863] CPU: 1 UID: 0 PID: 17863 Comm: syz.1.2986 Not tainted syzkaller #0 PREEMPT(full) 
[  393.777853][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  393.787905][T17863] Call Trace:
[  393.791173][T17863]  <TASK>
[  393.794096][T17863]  dump_stack_lvl+0x99/0x250
[  393.798685][T17863]  ? __asan_memcpy+0x40/0x70
[  393.803265][T17863]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.808458][T17863]  ? __pfx__printk+0x10/0x10
[  393.813053][T17863]  vpanic+0x281/0x750
[  393.817029][T17863]  ? __pfx__printk+0x10/0x10
[  393.821618][T17863]  ? __pfx_vpanic+0x10/0x10
[  393.826118][T17863]  ? is_bpf_text_address+0x26/0x2b0
[  393.831323][T17863]  panic+0xb9/0xc0
[  393.835040][T17863]  ? __pfx_panic+0x10/0x10
[  393.839464][T17863]  __warn+0x31b/0x4b0
[  393.843440][T17863]  ? ida_free+0x280/0x310
[  393.847762][T17863]  ? ida_free+0x280/0x310
[  393.852077][T17863]  report_bug+0x2be/0x4f0
[  393.856407][T17863]  ? ida_free+0x280/0x310
[  393.860727][T17863]  ? ida_free+0x280/0x310
[  393.865043][T17863]  ? ida_free+0x282/0x310
[  393.869445][T17863]  handle_bug+0x84/0x160
[  393.873682][T17863]  exc_invalid_op+0x1a/0x50
[  393.878178][T17863]  asm_exc_invalid_op+0x1a/0x20
[  393.883016][T17863] RIP: 0010:ida_free+0x280/0x310
[  393.887947][T17863] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb
[  393.907544][T17863] RSP: 0018:ffffc90003ddfb60 EFLAGS: 00010246
[  393.913611][T17863] RAX: 2b494f30d1039e00 RBX: 0000000000000a02 RCX: ffff8880781c9e40
[  393.921572][T17863] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  393.929534][T17863] RBP: ffffc90003ddfc60 R08: 0000000000000003 R09: 0000000000000004
[  393.937504][T17863] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff920007bbf70
[  393.945463][T17863] R13: dffffc0000000000 R14: ffff88807ce0fc00 R15: 0000000000000978
[  393.953448][T17863]  ? __pfx_ida_free+0x10/0x10
[  393.958124][T17863]  ? down_write+0x162/0x1f0
[  393.962618][T17863]  ? __pfx_down_write+0x10/0x10
[  393.967463][T17863]  ? alloc_mnt_ns+0x24e/0x310
[  393.972139][T17863]  copy_mnt_ns+0x197/0x820
[  393.976549][T17863]  ? rcu_is_watching+0x15/0xb0
[  393.981307][T17863]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  393.986678][T17863]  create_new_namespaces+0xd1/0x720
[  393.991886][T17863]  ? bpf_lsm_capable+0x9/0x20
[  393.996572][T17863]  ? security_capable+0x7e/0x2e0
[  394.001522][T17863]  unshare_nsproxy_namespaces+0x11c/0x170
[  394.007262][T17863]  ksys_unshare+0x4c8/0x8c0
[  394.011808][T17863]  ? __pfx_ksys_unshare+0x10/0x10
[  394.016854][T17863]  __x64_sys_unshare+0x38/0x50
[  394.021614][T17863]  do_syscall_64+0xfa/0x3b0
[  394.026119][T17863]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.031334][T17863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.037409][T17863]  ? clear_bhb_loop+0x60/0xb0
[  394.042093][T17863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.047984][T17863] RIP: 0033:0x7f4ce478eec9
[  394.052389][T17863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.071986][T17863] RSP: 002b:00007f4ce55bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  394.080480][T17863] RAX: ffffffffffffffda RBX: 00007f4ce49e6180 RCX: 00007f4ce478eec9
[  394.088450][T17863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  394.096671][T17863] RBP: 00007f4ce4811f91 R08: 0000000000000000 R09: 0000000000000000
[  394.104629][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.112583][T17863] R13: 00007f4ce49e6218 R14: 00007f4ce49e6180 R15: 00007ffe93160738
[  394.120560][T17863]  </TASK>
[  394.123868][T17863] Kernel Offset: disabled
[  394.128182][T17863] Rebooting in 86400 seconds..