last executing test programs:

7.058703704s ago: executing program 3 (id=717):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001140)={0x0, 0x2, 0x2, 0x8f, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}]}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYBLOB="9ac561794346587a98ceff447eaa50fb2cf6488661fc49e2883fc9dc2295df5813"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)

7.036119051s ago: executing program 3 (id=722):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x20, 0xff, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xffffffffffffffc3, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x1, 0x2, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xb}, {0x7, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
socket$inet(0x2, 0x2, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xd}]}}}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x6, 0x0)
socket(0x11, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FICLONE(r6, 0x40049409, r6)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a0001"], 0x40}}, 0x0)

5.860737744s ago: executing program 3 (id=733):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$packet(r3, &(0x7f0000000240)={0x11, 0x1a, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988cafbe882cac5050093517d176c709a6db96cb03276db1bb7", 0x25}], 0x1)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
r7 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@rand_addr, @rand_addr]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x30}, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r6, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)

5.667631197s ago: executing program 2 (id=736):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'rose0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)="a13d1b66ccf6f8db60b51a3fbf0b59e0b05c86fff3ee98d21041c668bf227f50c99339d90db612c451d662f01b710488092e9c6c56708ae0588f1d4faf", 0x3d}, {&(0x7f00000002c0)="00d08006af8ccf346abea5380344fd3ba993cd94c5c0805533ce108e45f70a452a563f47f8eef9c5a7ae15490c7f5675033a1a64320422355c85494f2a97fef84645a4f94587d4f32e5b1b10a62f0569025b8756341a6a82ae7910fe705178495cbd5d5f2f943ae4f3877a8f03a015b33368e42945d394b1c6c63579f5", 0x7d}, {&(0x7f00000003c0)="d85ec001539bd2fa8fa7e3b4c9987dfea8670652edd4ae75a81d815a3f7bfc9b4748165734f4994b544485aa61c96ce36b897f230a15cb2728629ee148aa22b0b701d01bc05102925ac3ea5bff137fa9e8e2d615ff1f5e3893ff43daa498b1cd348396e90993265dbf6634aa5a6731c925543dafdc", 0x75}, {&(0x7f0000000440)="aae63af95ab530927bf8598b7895b508cded47542dae347ff0d0957464c57ed8fc9f250f1cbeec3f96f050e40b32947ce612c0c5696fac30e1d0d9b58a1ff98b386d9fbe044834420eace9e773b88e097e30f9153ec371a04d68cebcfdce1f662fb4d78d8e49090c8787", 0x6a}], 0x4}}], 0x1, 0x40)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fe003000f9c59117eefdd04218805cdbbb938b96a047da", @ANYRES32=r9, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000600)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x0}}, 0x10)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r11}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r12, @ANYBLOB='3\x00\x00\x00 \x00\x00\x00', @ANYRES8=r1, @ANYBLOB="557f67570b8bc9a9774d4b43b737b897e7ea66b5e50a91b014fae77cd28a67410606c63b430d1199b0e2e077b3ecb99ad1ceab162147845f845bfdd0845a7058e7b84035439c5e718e9ff08a73392aad7031f046a846807ce1bc293522a0bd5c27363c97a2467dabf1f53704d26e17492c500bc9dbd0d999b54cc69f70e57a7eb9782fb93cab53e3380bf1d284714597ce322518f43d9d2d34c82600"/165, @ANYRES64=r7, @ANYRES64=0x0], 0x20)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYBLOB="000000000000000014001680100001800c000900000000800000000008"], 0x3c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="da0081004e81f782db44e8c4ff680e1209002d9b076d265593cda433be2c57", 0x1f}], 0x1}, 0x8981)
r14 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000912bd3e32300", @ANYRES16=r15, @ANYBLOB="070004000000fbdbdf2505000000180001801400020073797a5f74756e0000000000000000000c0003800400050004000380"], 0x38}}, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

5.227278736s ago: executing program 2 (id=741):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4e}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000820007027008aa3060800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10)
r6 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)=@migrate={0x140, 0x21, 0x400, 0x70bd28, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@empty, 0x4e20, 0xa, 0x4e20, 0x1, 0x2, 0x20, 0xa0, 0x11}, 0x6e6bb1, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x5}}, @sa={0xe4, 0x6, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e21, 0x0, 0x4e21, 0xffff, 0x8, 0x20, 0x20}, {@in=@multicast1, 0x4d4, 0x3c}, @in=@local, {0x0, 0x7, 0x40, 0x33, 0x81, 0x7ff, 0x5, 0xfffffffffffffffc}, {0xb, 0x0, 0x5, 0xff}, {0x0, 0x1000, 0x8}, 0x70bd28, 0x3502, 0x2, 0x0, 0xa}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4010)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r0, &(0x7f0000000300), 0x0}, 0x20)

5.077176738s ago: executing program 4 (id=743):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x8a, &(0x7f0000000580)=@req3, 0x1c)
recvmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1}, 0x12100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88ad8ee1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

4.951699242s ago: executing program 4 (id=744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000000080)=ANY=[@ANYBLOB="eb010018000000000000000c0000000c00800002000000070000000000000700000371a09fd59a9c9bd302e64ace000000"], &(0x7f0000003040)=""/242, 0x26, 0xf2, 0xa, 0x0, 0x0, @void, @value}, 0xfffffffffffffc65) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x18, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x1, 0x81})

4.91407842s ago: executing program 2 (id=746):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000ffffffffffffaaaaaaaaaa0088a83e008100480008004500001400000000002f9078000000000a010101a00088f7"], 0x3a)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_MSS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r4, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x84, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x84}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="6079b13d0b9ed1645b9c3a2e4e128151ae98a2b54bd149057b82c23298c6a92d9e6c6a4c11af85dc52f3525948a56a90ea64489b24e9b534c9937923eb6b5d7f5cac4effa6ea6e8a3d062cad72352596a2dc4730b09010c58056b48fa032b63257bb6f4e67338d59bcc1672015e28f167681014ba118f5c543588de50b6e938d7d5731e46cee459e017da3225b600209a5e91e1db285867f3d106f6ee6269cdc86dd4e3f49644fb59a54cb19b4a4b0b2d46431772e287c98429319b9baf326f62d779dc47bd0c59d87ffbc4f", &(0x7f0000000040)=""/49, &(0x7f00000001c0)="95fc92ad1c3c6150b0d128665173fcf66b080aa5f744a6057a8dd8ceba97d3bd961b0622c4e409f4aa915a59baa64d5e54e990fda9d673bfb4b7a9cf06b8a500367735f5713048f7ed1150c8739fcd9ad895f98eff61c3105709e7c6710c4f6e129028da2664b6126127bad67bd75fee0911b0a5bf4ca0a8445be83bf0ea71fbbdd6b3ecb1c174999545f43d503e12572274a2361eab1fbc63d0421365d3386b4cbff22bd561be86f2544302850e5d1bf0547fe3ac66e29677242e5fb3a5cdc7e9812f6c428411a82ee9d0cedb9267ffff3a1923", &(0x7f00000002c0)="3e10d49c79ae493a41c697272d4e689a801ff85dcf880b04925fe2959659e2a26eedb6ff703963ec953f1b972aa182c2d5621c3af4ff4c3e6e4991520d9448b66ab985125db3cd78be5029af6f4f593abec7cdf8f918cb49017b94b99cb43df03318b98d9decc142eb605a020ee301b5cda30b16adf4209812cb785ee583cd60a608fa7c6e47da3870", 0x3, r5, 0x4}, 0x38)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x20, 0x6, "eb025247793123a5a1113307ee2ace2e62d56e5564ecb01c673add20"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "3eed6d63217a14bab3845a6efd03781a760ddb9ccfb23911ee9a83770cc4114e433c282e2301101106f3bd0f47f2c655a6c74ba0952088caf77129bd0d120a2f4cf4d9638db05375ebfd9e310ee2c1fafdebcdfe3882ea09feac2f4e87eb248109119dc5d886ac49a547f2ff28f6f5aa03f8d2e485d7578c651c6799795a8b68007b57759c55881a00154223dbcb2cdff528843e87d43318f0a9d3cc85fa8c2cd3e1ee18e4477587174fe38b56ff5634a6062b8cc39bd9b566fc43fe8668cb2cf7cdb3b0da4fe4baf376c946e02219e1128a7ee0b6b513e1047bcd900f44"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd12}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffa822}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2b4}, 0x1, 0x0, 0x0, 0x1}, 0x24000100)
sendto$inet6(r4, &(0x7f0000000500)="5bf63e", 0x3, 0x40c0, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r10, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20040000)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002c000100dfffffffffffffff040000800e0011802fe5afbf24fbcccc552f0000"], 0x24}], 0x1}, 0x0)

2.445112219s ago: executing program 4 (id=748):
r0 = socket(0x1d, 0x2, 0x6) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000000, 0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0xf1878000)
r8 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r8, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c)
sendto$inet6(r8, &(0x7f0000000000)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @mcast1, 0x7fff}, 0x1c)
getsockname(r4, 0x0, &(0x7f00000001c0)) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)

2.439666266s ago: executing program 3 (id=749):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000180)={0x1006, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x108)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r2 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
unshare(0x20000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000fdffffff080000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000002006dfb00010400000000000000596b9b91bce4be90b99062957b9300b7cd00c196f36d49d6075d21723e33af3e43bdaec3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
r7 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_int(r7, 0x10d, 0xcb, 0x0, 0x84)
sendfile(r5, r6, 0x0, 0xffffffff000)
mmap(&(0x7f000062d000/0x1000)=nil, 0x7fffdf9d2000, 0x0, 0x28011, r4, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x19e7, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

2.316686384s ago: executing program 1 (id=751):
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000200)=0x8d, 0x14) (async)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) (async)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a0101000000797a30000000000900030073797a3100000000080007006e6174692213e307d715af4000000000080002400000000014000000020a0108000000000000000000000000140000001100010000000000000000000000000a4b5d2806d45288b28b9e068d5c84bde7e10ecffdcd044b55e07a1f8a0a0a05f960be82b7f8b51b58e3b3cd6d1acd89fe25f5bbe5a938602b64b767e6bd35195a702dabd6afc540f9"], 0xa4}}, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r5 = socket(0x200000100000011, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000000005e8e703d59d65eadb399d70d053610ed9a00"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bind$packet(r5, &(0x7f0000000040)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @random="b60d20440cdd"}, 0x14) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async)
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r8, 0x101, 0x19, &(0x7f0000000080), &(0x7f0000000180)=0x4)
sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1}, 0x0)

1.791601598s ago: executing program 2 (id=752):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000580001804400040020000100000000000000005d2f00000000aa00400000200002000a00000000000000ff"], 0x6c}}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000c00)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0)

1.620839591s ago: executing program 1 (id=753):
r0 = socket$inet(0x2b, 0x801, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000003}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000003})
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e1f, @remote}, 0x10)

1.620277709s ago: executing program 4 (id=754):
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303, 0x39}, "2f9ba2ce41a730cb", "37a0906df45a6f4f40b151634357ea00", '\x00', "de3f106b925ded4d"}, 0x28)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}]}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}]}, 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}, @IFLA_BROADCAST={0xa, 0x2, @random="7717ac68c7f6"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000480000000000019078ac1e0001ac1414aa0c009078030000004b000000000000000032000000000000ac141400440400f0ad00000000000008017f000000ba000200020000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1.405075507s ago: executing program 1 (id=755):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x5, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="62accc3cd67ba11b00000000006b113e00000000001c8265cbebe691b0f6afa11e61237ecbc4c9ec86a0b65b30fd3af3fee08be7026b35f1cc79bb4e2ba721cc1edd78e9e96563ea5c1028ff8df735a7f3408d64d6de9efb1428f700fc7bb60529b91fc8a11616ffaf42e9fc8f5c7a2de235b4b2ef7678c45cbb2ece6b3391bb9da8a006dd48f64a066b98457dfd64658e74c769cbb582f15e8af93a153ae9217c36abb5ce5f7afc06ed6b877aac8cc5a089c06aeb9c3c6fd37b7f2d222ea9531f3193c656b61aa2d67d9135bbb7231d321ec78d533a80df6db2738b556c14a0088f8588d0ff328deb6b9835dde5adad2dc1cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20)

1.292886779s ago: executing program 0 (id=756):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4e}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000820007027008aa3060800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10)
r6 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)=@migrate={0x140, 0x21, 0x400, 0x70bd28, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@empty, 0x4e20, 0xa, 0x4e20, 0x1, 0x2, 0x20, 0xa0, 0x11}, 0x6e6bb1, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x5}}, @sa={0xe4, 0x6, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e21, 0x0, 0x4e21, 0xffff, 0x8, 0x20, 0x20}, {@in=@multicast1, 0x4d4, 0x3c}, @in=@local, {0x0, 0x7, 0x40, 0x33, 0x81, 0x7ff, 0x5, 0xfffffffffffffffc}, {0xb, 0x0, 0x5, 0xff}, {0x0, 0x1000, 0x8}, 0x70bd28, 0x3502, 0x2, 0x0, 0xa}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4010)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r0, &(0x7f0000000300), 0x0}, 0x20)

1.232995058s ago: executing program 2 (id=757):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket(0x1e, 0x2, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0xc00, 0x90, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c810}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000340)=""/246, 0xf6}], 0x1, &(0x7f0000002840)=""/4096, 0x1000}, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x4448, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3}}, 0x10, &(0x7f0000000100), 0x1, 0x0, 0xffffffffffffff2c, 0x20000851}, 0x48000)
recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000640)=""/211, 0xd3}}], 0x1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01400100fffeffffffdf"])
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x40}}, 0x0)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r6, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r8 = socket$inet6(0xa, 0x2, 0x3a)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)

1.171603782s ago: executing program 1 (id=758):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb86"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f00003e5000/0x2000)=nil, 0x2000, 0x200000c, 0x100010, r2, 0x180000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000068000100030000fc0000008000000005b00000000c000200010000000600000004000b0017968a91d1b4df6bbfd84b7cc72a1c5202d77440032e879b34c7db4927b87b97e943bc83f995497b0135a0e9ef3d6f3e4ad858e257b96ba261edcbedfd9e479e3bd558f8d4f4e2c01ff51030ce2f079200b099148ad9b4ad407e09d6443b739eeec7731549caeaeffa83fe24d211b4bacb13380747deeeda1e279fff26134ca2dfb6a845d6f3c0d9069ef78504973fa01d8f2fc386d02acfa6720c7f41cf542cb54bca37254c"], 0x28}}, 0x4000)
setsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000040)=0x9, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000000102010100000000004901000000000000000180f99facde05e92efd395fcc7782d4df2f9cc72978ea7825f4a2a18923d1f375163133d8e516313638063ea6e246f4e9485d0647a85d269acd93c3f6a7f0edaec2072555d333f8c0fad30ead6ece0400000000000000c4683c86df93d0390e2c1141003774e6bc3c4ee0485200"/142], 0x18}, 0x1, 0x0, 0x0, 0x881}, 0x28805)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x1, 0x3}, 0x10)
close(r7)
connect$inet6(r6, 0x0, 0x0)
sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000f4ff00000000000000000000000000000200000000000000ffffffffffffffff4c4b85ea86eccc8eed580000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c00"], 0xc4}}, 0x4004)

1.171207843s ago: executing program 3 (id=759):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)

1.080605799s ago: executing program 1 (id=760):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast1, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xec}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc)
bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfe, 0x11}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000b45f05147578d61c39a9a3a84b4f5047e4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000100020075"], 0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="45000400", @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r10, 0x201, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x40040)

921.123314ms ago: executing program 4 (id=761):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xcf, 0xffffffffffffffff, &(0x7f0000000040))
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000c90008004300ff030000a90000002b0e13090000004f12fc6da2f1acfac0ee2dd2b184b27d08000000337c000400bf852c8986626691b01b5f44e4ce28715f2828"], 0xe0}], 0x1}, 0x24008800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7226, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, r3, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000190001002cbd7000ffdbdf251d0106001500030001000060020200007fffffff542834703aff0c3b"], 0x2c}}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac00000000660003002f0006ac141400"/62], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r11, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r12 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)

772.670757ms ago: executing program 0 (id=762):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081094e81f782db4cb904021d0800fd007c05e8fe41a10a000600014002020c600e41b07c0900ac000a0501000000160012000a00ff150048035c3b61c1d67f6594007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775960d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bbd809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8bf755f4d2a6823a4518", 0xd8}], 0x1}, 0x40880)

763.242693ms ago: executing program 2 (id=763):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3183829}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@del={0xe8, 0x11, 0x300, 0x70bd2d, 0x25dfdbfd, {{'ctr-aes-neonbs-sync\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x81}, &(0x7f00000000c0)=0x8)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000009000000084000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8}, {r3, 0x2721}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0xfffffffffffffffc, 0x200003f0, 0x20000420], 0x197b98, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1f0)

669.040103ms ago: executing program 1 (id=764):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0)
unshare(0x62040200)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r3, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000180)="050000000e", 0x5}, {&(0x7f0000000280)="4cdabfd01f55", 0x6}], 0x3)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
close(0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socket$netlink(0x10, 0x3, 0x2)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a782182"], &(0x7f0000000300)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

668.633348ms ago: executing program 4 (id=765):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x2, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
accept4(r0, 0x0, 0x0, 0x0)

559.365592ms ago: executing program 0 (id=766):
unshare(0x22000400)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) (async)
bind$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)

400.130877ms ago: executing program 0 (id=767):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000093ce8fb4d2e5ca00000000000000000000008a559671e2690b0f2c54e5f6b000f2e29d16b1d6c57e62c1461cc2338c8b001f6c90441f6060ed1d06b5ea1aa261a05bc194e709f806ad6a32e03b7dbeb0716a3c84f3452c234d706d391e4ba3afe1b25d208acaeb973c999ad4e6a24cdee01f98244641b562ab24d4e983661a1aa3bb7238678c684a46f5585165f36c4deabbf01b72ea1d706cdb04e5c97417bb6b02a463d02586ee45a64f307f492f45"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000b700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcb, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
getsockopt$inet_mreqn(r3, 0x0, 0x4, 0x0, &(0x7f0000000280)=0x11)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010020104000000000000000000000000cdb796cfe0b934710c4e99b6233ccf03d735f9d89f9db1a746dea82c06038d044daff2d646", @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100677265000c00028006000e0012000000"], 0x38}}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x421, 0x70bd28, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8818}, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r8, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r9, 0x7016af253506d81, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2040}, 0x4000000)
clock_gettime(0x5, &(0x7f0000000600))

181.084442ms ago: executing program 0 (id=768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x3, 0x800, 0x7}}]}, 0x34}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

168.904653ms ago: executing program 3 (id=769):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x46a2f000)
unshare(0x26020480)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108006000a000a010100080002"], 0x30}}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040))
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

0s ago: executing program 0 (id=770):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="04002cbd7000fddbdf25370000000800a100070000000800a100290f00000800a100030000000800570008000000050018010400000005001801340000000800a100080000000800a100fbffffff08002201cd030000080026009e090000080026006c090000080026006c09000008005700ffff0000"], 0x7c}, 0x1, 0x0, 0x0, 0x20}, 0x20040810)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\b', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts.
[   67.611161][ T5819] cgroup: Unknown subsys name 'net'
[   67.721725][ T5819] cgroup: Unknown subsys name 'cpuset'
[   67.730505][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.385026][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.538809][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[   71.545393][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[   71.818760][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.827018][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.841008][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.854562][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.864699][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.873210][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.881965][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.890858][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.900748][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.909324][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.917847][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.939077][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.949968][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.958028][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.960994][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.973304][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.978725][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.984017][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.989507][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.995513][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   72.011187][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.013884][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.018971][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.033964][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.035172][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.050038][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   72.050644][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.057889][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.071571][ T5143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.082989][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.510267][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   72.623575][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   72.633766][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   72.689514][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   72.787856][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.795695][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.803328][ T5831] bridge_slave_0: entered allmulticast mode
[   72.810681][ T5831] bridge_slave_0: entered promiscuous mode
[   72.854623][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.862028][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.869378][ T5831] bridge_slave_1: entered allmulticast mode
[   72.876355][ T5831] bridge_slave_1: entered promiscuous mode
[   72.884149][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   72.964572][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.971970][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.983132][ T5830] bridge_slave_0: entered allmulticast mode
[   72.990100][ T5830] bridge_slave_0: entered promiscuous mode
[   72.998915][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.006559][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.013887][ T5830] bridge_slave_1: entered allmulticast mode
[   73.021103][ T5830] bridge_slave_1: entered promiscuous mode
[   73.037920][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.045028][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.053003][ T5835] bridge_slave_0: entered allmulticast mode
[   73.060837][ T5835] bridge_slave_0: entered promiscuous mode
[   73.105826][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.113237][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.120933][ T5835] bridge_slave_1: entered allmulticast mode
[   73.128601][ T5835] bridge_slave_1: entered promiscuous mode
[   73.156208][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.191256][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.199192][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.206429][ T5844] bridge_slave_0: entered allmulticast mode
[   73.213978][ T5844] bridge_slave_0: entered promiscuous mode
[   73.221685][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.229187][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.236398][ T5844] bridge_slave_1: entered allmulticast mode
[   73.243947][ T5844] bridge_slave_1: entered promiscuous mode
[   73.252382][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.276865][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.288890][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.311374][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.367700][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.379457][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.396399][ T5831] team0: Port device team_slave_0 added
[   73.443671][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.458995][ T5831] team0: Port device team_slave_1 added
[   73.465110][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.472682][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.480438][ T5838] bridge_slave_0: entered allmulticast mode
[   73.492203][ T5838] bridge_slave_0: entered promiscuous mode
[   73.502109][ T5830] team0: Port device team_slave_0 added
[   73.510805][ T5830] team0: Port device team_slave_1 added
[   73.530006][ T5835] team0: Port device team_slave_0 added
[   73.562236][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.573214][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.580854][ T5838] bridge_slave_1: entered allmulticast mode
[   73.588038][ T5838] bridge_slave_1: entered promiscuous mode
[   73.604677][ T5835] team0: Port device team_slave_1 added
[   73.624995][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.632262][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.658867][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.722855][ T5844] team0: Port device team_slave_0 added
[   73.733603][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.740693][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.767750][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.781387][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.793940][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.803857][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.811158][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.837921][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.849888][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.856876][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.883224][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.896659][ T5844] team0: Port device team_slave_1 added
[   73.926220][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.933363][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.959780][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.976585][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.983968][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.010478][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.031794][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.038896][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.065082][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.078162][ T5845] Bluetooth: hci1: command tx timeout
[   74.078158][ T5836] Bluetooth: hci0: command tx timeout
[   74.079306][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.096621][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.123685][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.157379][ T5845] Bluetooth: hci3: command tx timeout
[   74.157444][ T5846] Bluetooth: hci2: command tx timeout
[   74.170197][ T5836] Bluetooth: hci4: command tx timeout
[   74.203284][ T5838] team0: Port device team_slave_0 added
[   74.212117][ T5838] team0: Port device team_slave_1 added
[   74.232900][ T5830] hsr_slave_0: entered promiscuous mode
[   74.243446][ T5830] hsr_slave_1: entered promiscuous mode
[   74.317514][ T5831] hsr_slave_0: entered promiscuous mode
[   74.323850][ T5831] hsr_slave_1: entered promiscuous mode
[   74.330389][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.338531][ T5831] Cannot create hsr debugfs directory
[   74.344700][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.352290][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.379034][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.393842][ T5835] hsr_slave_0: entered promiscuous mode
[   74.400577][ T5835] hsr_slave_1: entered promiscuous mode
[   74.406713][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.414387][ T5835] Cannot create hsr debugfs directory
[   74.428298][ T5844] hsr_slave_0: entered promiscuous mode
[   74.434581][ T5844] hsr_slave_1: entered promiscuous mode
[   74.440807][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.448548][ T5844] Cannot create hsr debugfs directory
[   74.467904][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.474912][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.501369][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.651987][ T5838] hsr_slave_0: entered promiscuous mode
[   74.659030][ T5838] hsr_slave_1: entered promiscuous mode
[   74.665156][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.672948][ T5838] Cannot create hsr debugfs directory
[   74.981555][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.993789][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.006042][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.022034][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.077035][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.088910][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.123662][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.134873][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.181381][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.209777][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.233886][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.259306][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.302839][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.338077][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.352812][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.363576][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.444758][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.455785][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.479174][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.489937][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.519686][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.533071][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.604583][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   75.644218][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.651678][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.666049][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   75.692282][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.699912][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.749708][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.756879][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.782965][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.790320][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.819846][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.838698][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.885542][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   75.914781][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   75.927842][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.935044][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.966225][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.973552][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.017910][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.025130][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.035456][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.042704][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.094052][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.155188][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.158894][ T5836] Bluetooth: hci0: command tx timeout
[   76.171948][ T5846] Bluetooth: hci1: command tx timeout
[   76.189872][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   76.226759][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.233959][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.239070][ T5846] Bluetooth: hci4: command tx timeout
[   76.247032][ T5836] Bluetooth: hci2: command tx timeout
[   76.253698][ T5836] Bluetooth: hci3: command tx timeout
[   76.261594][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.268796][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.421346][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.529785][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.623151][ T5831] veth0_vlan: entered promiscuous mode
[   76.684053][ T5835] veth0_vlan: entered promiscuous mode
[   76.715786][ T5831] veth1_vlan: entered promiscuous mode
[   76.735577][ T5835] veth1_vlan: entered promiscuous mode
[   76.761771][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.804865][ T5831] veth0_macvtap: entered promiscuous mode
[   76.846223][ T5831] veth1_macvtap: entered promiscuous mode
[   76.859399][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.873867][ T5835] veth0_macvtap: entered promiscuous mode
[   76.905302][ T5835] veth1_macvtap: entered promiscuous mode
[   76.914314][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.926879][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.972474][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.011580][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.022637][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.031704][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.041389][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.070096][ T5838] veth0_vlan: entered promiscuous mode
[   77.088916][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.101221][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.113229][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.126875][ T5838] veth1_vlan: entered promiscuous mode
[   77.146324][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.163357][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.175807][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.226445][ T5830] veth0_vlan: entered promiscuous mode
[   77.256058][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.273579][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.286196][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.296852][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.341973][ T5830] veth1_vlan: entered promiscuous mode
[   77.350909][ T5838] veth0_macvtap: entered promiscuous mode
[   77.400789][ T5838] veth1_macvtap: entered promiscuous mode
[   77.425083][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.442287][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.486470][ T5830] veth0_macvtap: entered promiscuous mode
[   77.498433][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.509759][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.521055][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.531865][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.545961][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.572515][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.572753][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.592702][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.604608][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.619499][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.630345][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.641626][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.654074][ T5830] veth1_macvtap: entered promiscuous mode
[   77.674640][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.684450][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.693534][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.702854][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.721522][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.731611][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.733579][ T5844] veth0_vlan: entered promiscuous mode
[   77.773857][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.790219][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.802233][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.813523][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.818774][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.825167][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.850702][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.862574][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.874242][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.895640][ T5844] veth1_vlan: entered promiscuous mode
[   77.910244][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.931249][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.939347][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.941666][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.968011][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.978186][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.988762][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.003406][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.045519][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.054887][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.064083][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.073252][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.211549][ T5844] veth0_macvtap: entered promiscuous mode
[   78.234139][ T5844] veth1_macvtap: entered promiscuous mode
[   78.251745][ T5846] Bluetooth: hci0: command tx timeout
[   78.257379][ T5836] Bluetooth: hci1: command tx timeout
[   78.273956][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.282193][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.318494][ T5846] Bluetooth: hci4: command tx timeout
[   78.324009][ T5846] Bluetooth: hci2: command tx timeout
[   78.330190][ T5836] Bluetooth: hci3: command tx timeout
[   78.359078][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.375036][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.385536][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.396954][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.407580][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.418292][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.428205][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.438771][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.449760][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.495101][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.508609][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.519370][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.538307][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.557938][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.572209][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.583366][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.594820][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.611185][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.642876][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.657199][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   78.666720][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.693658][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.702634][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.725536][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.741852][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.764276][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.774392][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.834007][ T5930] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   78.865350][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.874506][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.025006][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.048539][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.152687][ T5938] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   79.197953][ T5938] unsupported nlmsg_type 40
[   79.210306][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.232727][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.394736][ T5944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9'.
[   79.450212][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'.
[   79.780942][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   80.048543][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13'.
[   80.053742][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'.
[   80.227998][ T5937] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   80.317639][ T5836] Bluetooth: hci1: command tx timeout
[   80.323339][ T5836] Bluetooth: hci0: command tx timeout
[   80.379067][ T5980] tipc: Started in network mode
[   80.384288][ T5980] tipc: Node identity fa0d79f7aca4, cluster identity 4711
[   80.391855][ T5980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.405980][ T5846] Bluetooth: hci3: command tx timeout
[   80.411713][ T5836] Bluetooth: hci2: command tx timeout
[   80.417857][ T5846] Bluetooth: hci4: command tx timeout
[   80.446746][ T5980] syzkaller0: entered promiscuous mode
[   80.479034][ T5980] syzkaller0: entered allmulticast mode
[   80.510387][ T5980] tipc: Resetting bearer <eth:syzkaller0>
[   80.625123][ T5979] tipc: Resetting bearer <eth:syzkaller0>
[   80.661265][ T5987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   81.475735][    T8] tipc: Node number set to 1453947383
[   81.649632][ T6006] xt_bpf: check failed: parse error
[   81.662951][ T6006] netlink: 'syz.1.22': attribute type 10 has an invalid length.
[   82.730297][ T5979] tipc: Disabling bearer <eth:syzkaller0>
[   82.955524][ T6017] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   82.998991][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'.
[   83.001932][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.017738][ T6006] syz_tun: entered promiscuous mode
[   83.031755][ T6006] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   83.092269][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'.
[   83.106239][ T6016] netlink: 'syz.3.25': attribute type 4 has an invalid length.
[   83.155496][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'.
[   83.434964][ T6034] block nbd1: not configured, cannot reconfigure
[   83.457493][ T6031] block nbd1: not configured, cannot reconfigure
[   83.479899][ T6036] Cannot find set identified by id 0 to match
[   83.880721][ T6056] Zero length message leads to an empty skb
[   84.246462][ T6062] veth0_to_bridge: entered promiscuous mode
[   84.373749][ T6060] veth0_to_bridge: left promiscuous mode
[   84.670103][ T6089] team0: entered promiscuous mode
[   84.709567][ T6089] team_slave_0: entered promiscuous mode
[   84.715823][ T6089] team_slave_1: entered promiscuous mode
[   84.781865][ T6089] batadv_slave_1: entered promiscuous mode
[   85.153093][ T6106] vlan2: entered promiscuous mode
[   85.173103][ T6106] vlan2: entered allmulticast mode
[   85.202888][ T6106] team0: Device vlan2 is already an upper device of the team interface
[   85.322848][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.443272][ T6113] dvmrp0: entered allmulticast mode
[   85.541794][ T6113] pimreg: entered allmulticast mode
[   85.587404][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.781288][ T6125] __nla_validate_parse: 3 callbacks suppressed
[   85.781309][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'.
[   85.893713][ T6130] raw_sendmsg: syz.2.58 forgot to set AF_INET. Fix it!
[   85.998340][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'.
[   86.212404][ T6148] netlink: 'syz.4.63': attribute type 1 has an invalid length.
[   86.218330][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'.
[   86.245490][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'.
[   86.268574][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.63'.
[   86.281561][ T6150] netlink: 'syz.2.64': attribute type 11 has an invalid length.
[   86.297869][ T6150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.64'.
[   86.544691][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'.
[   86.762026][ T6158] x_tables: duplicate underflow at hook 3
[   86.887975][  T974] cfg80211: failed to load regulatory.db
[   86.947954][ T6161] can: request_module (can-proto-0) failed.
[   87.020139][ T6168] Cannot find set identified by id 0 to match
[   88.171755][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.71'.
[   89.840014][ T6217] warning: `syz.3.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.212674][ T6236] netlink: 39 bytes leftover after parsing attributes in process `syz.1.90'.
[   90.242401][ T6236] netlink: 39 bytes leftover after parsing attributes in process `syz.1.90'.
[   91.237912][ T6265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.91'.
[   91.456056][ T6265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.533707][ T6271] xt_hashlimit: max too large, truncated to 1048576
[   91.838693][ T6282] IPVS: set_ctl: invalid protocol: 12 100.1.1.2:20001
[   92.040157][ T6287] netlink: 5 bytes leftover after parsing attributes in process `syz.4.101'.
[   92.101630][ T6289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.100'.
[   93.024428][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'.
[   93.983807][ T6321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.270177][ T6340] FAULT_INJECTION: forcing a failure.
[   94.270177][ T6340] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   94.301823][ T6321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.334717][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.3.110 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[   94.346902][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   94.360445][ T6340] Call Trace:
[   94.364722][ T6340]  <TASK>
[   94.367785][ T6340]  dump_stack_lvl+0x241/0x360
[   94.373340][ T6340]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.379450][ T6340]  ? __pfx__printk+0x10/0x10
[   94.385171][ T6340]  ? __pfx_lock_release+0x10/0x10
[   94.390896][ T6340]  should_fail_ex+0x3b0/0x4e0
[   94.397265][ T6340]  _copy_from_user+0x2f/0xc0
[   94.404136][ T6340]  do_sock_getsockopt+0x1d1/0x7e0
[   94.412052][ T6340]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   94.419296][ T6340]  ? __fget_files+0x2a/0x410
[   94.425518][ T6340]  ? __fget_files+0x395/0x410
[   94.431635][ T6340]  ? __fget_files+0x2a/0x410
[   94.438283][ T6340]  __x64_sys_getsockopt+0x2a1/0x370
[   94.443727][ T6340]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[   94.449962][ T6340]  ? do_syscall_64+0x100/0x230
[   94.455552][ T6340]  ? do_syscall_64+0xb6/0x230
[   94.460558][ T6340]  do_syscall_64+0xf3/0x230
[   94.465130][ T6340]  ? clear_bhb_loop+0x35/0x90
[   94.471189][ T6340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.477324][ T6340] RIP: 0033:0x7f8ca5b85d29
[   94.482001][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.503447][ T6340] RSP: 002b:00007f8ca6a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   94.512188][ T6340] RAX: ffffffffffffffda RBX: 00007f8ca5d75fa0 RCX: 00007f8ca5b85d29
[   94.521101][ T6340] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003
[   94.530464][ T6340] RBP: 00007f8ca6a3e090 R08: 0000000020000140 R09: 0000000000000000
[   94.539612][ T6340] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001
[   94.548186][ T6340] R13: 0000000000000000 R14: 00007f8ca5d75fa0 R15: 00007ffeb4bb1ed8
[   94.558643][ T6340]  </TASK>
[   94.850531][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'.
[   94.855282][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'.
[   94.896281][ T6321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.029629][ T6321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.139335][ T6359] tipc: Started in network mode
[   95.159674][ T6359] tipc: Node identity 6, cluster identity 4711
[   95.180595][ T6359] tipc: Node number set to 6
[   95.734121][ T6321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.755015][ T6321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.775204][ T6321] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.798225][ T6321] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.017661][ T6397] FAULT_INJECTION: forcing a failure.
[   96.017661][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.036805][ T6397] CPU: 1 UID: 0 PID: 6397 Comm: syz.4.123 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[   96.048411][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   96.061369][ T6397] Call Trace:
[   96.065389][ T6397]  <TASK>
[   96.068888][ T6397]  dump_stack_lvl+0x241/0x360
[   96.074249][ T6397]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.081237][ T6397]  ? __pfx__printk+0x10/0x10
[   96.086274][ T6397]  ? __pfx_lock_release+0x10/0x10
[   96.091474][ T6397]  should_fail_ex+0x3b0/0x4e0
[   96.096744][ T6397]  _copy_from_user+0x2f/0xc0
[   96.102850][ T6397]  sctp_getsockopt_active_key+0x10c/0x6d0
[   96.110588][ T6397]  ? __pfx_sctp_getsockopt_active_key+0x10/0x10
[   96.116972][ T6397]  sctp_getsockopt+0xa49/0xbb0
[   96.122171][ T6397]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   96.128613][ T6397]  do_sock_getsockopt+0x3c4/0x7e0
[   96.135684][ T6397]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   96.142246][ T6397]  ? __fget_files+0x2a/0x410
[   96.147972][ T6397]  ? __fget_files+0x395/0x410
[   96.154076][ T6397]  ? __fget_files+0x2a/0x410
[   96.158864][ T6397]  __x64_sys_getsockopt+0x2a1/0x370
[   96.164558][ T6397]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[   96.172029][ T6397]  ? do_syscall_64+0x100/0x230
[   96.176979][ T6397]  ? do_syscall_64+0xb6/0x230
[   96.182281][ T6397]  do_syscall_64+0xf3/0x230
[   96.188225][ T6397]  ? clear_bhb_loop+0x35/0x90
[   96.194498][ T6397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.203168][ T6397] RIP: 0033:0x7f4d5fb85d29
[   96.209854][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.237207][ T6397] RSP: 002b:00007f4d6095b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   96.247081][ T6397] RAX: ffffffffffffffda RBX: 00007f4d5fd75fa0 RCX: 00007f4d5fb85d29
[   96.255826][ T6397] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003
[   96.266576][ T6397] RBP: 00007f4d6095b090 R08: 0000000020000140 R09: 0000000000000000
[   96.278616][ T6397] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001
[   96.288539][ T6397] R13: 0000000000000000 R14: 00007f4d5fd75fa0 R15: 00007ffca9749a28
[   96.299345][ T6397]  </TASK>
[   96.354138][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'.
[   96.531155][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'.
[   96.694548][ T6408] netlink: 'syz.4.126': attribute type 1 has an invalid length.
[   96.767202][ T6408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.126'.
[   96.853053][ T6417] netlink: 'syz.4.126': attribute type 10 has an invalid length.
[   96.953740][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'.
[   97.006787][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[   97.123886][ T6417] bond0: (slave team0): Enslaving as an active interface with an up link
[   97.796019][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.135'.
[   98.150195][ T6408] infiniband syz1: set active
[   98.156411][ T6408] infiniband syz1: added team_slave_0
[   98.216604][ T6408] syz1: rxe_create_cq: returned err = -12
[   98.226499][ T6408] infiniband syz1: Couldn't create ib_mad CQ
[   98.247606][ T6408] infiniband syz1: Couldn't open port 1
[   98.420278][ T6408] RDS/IB: syz1: added
[   98.425650][ T6408] smc: adding ib device syz1 with port count 1
[   98.445987][ T6408] smc:    ib device syz1 port 1 has pnetid 
[   99.055227][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'.
[   99.103235][ T6498] syz.3.143 uses obsolete (PF_INET,SOCK_PACKET)
[   99.702263][ T6524] xt_TPROXY: Can be used only with -p tcp or -p udp
[  101.379196][ T6571] netlink: 88 bytes leftover after parsing attributes in process `syz.4.158'.
[  101.389497][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.158'.
[  101.401984][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'.
[  101.413111][ T6571] netlink: 80 bytes leftover after parsing attributes in process `syz.4.158'.
[  101.655659][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'.
[  101.874761][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.160'.
[  102.033371][ T6598] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  102.079898][ T6598] macvlan2: entered promiscuous mode
[  102.124413][ T6594] macvlan3: entered promiscuous mode
[  102.740679][ T6622] netlink: 48 bytes leftover after parsing attributes in process `syz.4.167'.
[  102.834524][ T6622] sctp: [Deprecated]: syz.4.167 (pid 6622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.834524][ T6622] Use struct sctp_sack_info instead
[  103.019502][ T6641] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  103.044305][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.135136][ T6641] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0
[  103.364675][ T6649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.173'.
[  103.530997][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'.
[  103.725078][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.734820][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.954871][ T6675] netlink: 'syz.0.180': attribute type 1 has an invalid length.
[  104.043764][ T6682] netlink: 3 bytes leftover after parsing attributes in process `syz.0.180'.
[  104.065213][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.311085][ T6660] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.337300][ T6660] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.367358][ T6660] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.397351][ T6660] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.525338][ T6675] bond1: entered promiscuous mode
[  104.531638][ T6675] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.588864][ T6679] vlan2: entered promiscuous mode
[  104.605197][ T6679] vlan2: entered allmulticast mode
[  104.614445][ T6679] vlan0: entered allmulticast mode
[  104.624373][ T6679] veth0_vlan: entered allmulticast mode
[  104.634204][ T6679] vlan0: entered promiscuous mode
[  104.648755][ T6679] team0: Port device vlan2 added
[  104.666378][ T6682] batadv1: entered promiscuous mode
[  104.673906][ T6682] batadv1: entered allmulticast mode
[  104.711540][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv1
[  104.753687][ T6694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.782016][ T6682] bond1: (slave batadv1): making interface the new active one
[  104.803611][ T6682] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  104.840015][ T6690] netlink: 'syz.1.181': attribute type 4 has an invalid length.
[  104.930855][ T6692] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[  106.415367][ T6742] trusted_key: syz.4.197 sent an empty control message without MSG_MORE.
[  106.758081][ T6746] __nla_validate_parse: 2 callbacks suppressed
[  106.758104][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'.
[  106.849850][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'.
[  106.954654][ T6758] netlink: 48 bytes leftover after parsing attributes in process `syz.1.200'.
[  107.072299][ T6750] IPv6: sit1: Disabled Multicast RS
[  107.126781][ T6761] openvswitch: netlink: IPv4 tunnel dst address is zero
[  107.173806][ T6750] syz.1.200 (6750) used greatest stack depth: 18648 bytes left
[  107.460292][ T6773] bridge: RTM_NEWNEIGH with invalid state 0x1
[  107.690250][ T6786] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[  107.948079][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[  108.025310][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[  108.212365][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'.
[  108.240790][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'.
[  108.276248][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'.
[  109.314217][ T6812] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  110.008716][ T6833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.218'.
[  110.067676][ T6835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.993996][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'.
[  112.257506][ T6872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'.
[  112.395767][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[  112.758726][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'.
[  112.791410][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'.
[  112.936638][ T6894] Bluetooth: MGMT ver 1.23
[  113.115172][ T6897] batadv1: entered promiscuous mode
[  113.137697][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv1
[  114.623792][ T6961] syz_tun: refused to change device tx_queue_len
[  114.631049][ T6961] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  114.712159][ T6964] xt_l2tp: v2 doesn't support IP mode
[  114.966406][ T5836] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  115.338071][ T6986] GUP no longer grows the stack in syz.1.259 (6986): 20006000-2000a000 (20005000)
[  115.355736][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.1.259 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  115.369067][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  115.382354][ T6986] Call Trace:
[  115.386227][ T6986]  <TASK>
[  115.389570][ T6986]  dump_stack_lvl+0x241/0x360
[  115.398478][ T6986]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.404640][ T6986]  ? __pfx__printk+0x10/0x10
[  115.410159][ T6986]  ? find_vma+0xf9/0x170
[  115.415628][ T6986]  ? vma_is_secretmem+0xd/0x50
[  115.421306][ T6986]  ? check_vma_flags+0x52b/0x5a0
[  115.427528][ T6986]  __get_user_pages+0x4385/0x49e0
[  115.432859][ T6986]  ? mark_lock+0x9a/0x360
[  115.437459][ T6986]  ? __pfx___get_user_pages+0x10/0x10
[  115.443816][ T6986]  __gup_longterm_locked+0x49a/0x17f0
[  115.449934][ T6986]  ? __pfx___might_resched+0x10/0x10
[  115.455744][ T6986]  ? __pfx___gup_longterm_locked+0x10/0x10
[  115.462475][ T6986]  ? down_read+0x82b/0xa40
[  115.468153][ T6986]  ? is_valid_gup_args+0x124/0x200
[  115.473767][ T6986]  pin_user_pages+0x137/0x1f0
[  115.479355][ T6986]  ? __pfx_pin_user_pages+0x10/0x10
[  115.485318][ T6986]  ? trace_kmalloc+0x1f/0xd0
[  115.492178][ T6986]  xdp_umem_create+0x978/0xf30
[  115.497973][ T6986]  xsk_setsockopt+0x732/0x950
[  115.503123][ T6986]  ? __pfx_xsk_setsockopt+0x10/0x10
[  115.508842][ T6986]  ? __pfx_lock_acquire+0x10/0x10
[  115.516361][ T6986]  ? aa_sock_opt_perm+0x79/0x120
[  115.522514][ T6986]  ? __pfx_xsk_setsockopt+0x10/0x10
[  115.528218][ T6986]  do_sock_setsockopt+0x3af/0x720
[  115.534358][ T6986]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  115.540903][ T6986]  ? __fget_files+0x395/0x410
[  115.546464][ T6986]  ? __fget_files+0x2a/0x410
[  115.552629][ T6986]  __x64_sys_setsockopt+0x1ee/0x280
[  115.559616][ T6986]  do_syscall_64+0xf3/0x230
[  115.564711][ T6986]  ? clear_bhb_loop+0x35/0x90
[  115.571243][ T6986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.578798][ T6986] RIP: 0033:0x7fc554585d29
[  115.584215][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.610283][ T6986] RSP: 002b:00007fc5523f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  115.621115][ T6986] RAX: ffffffffffffffda RBX: 00007fc554775fa0 RCX: 00007fc554585d29
[  115.629743][ T6986] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006
[  115.638675][ T6986] RBP: 00007fc554601b08 R08: 0000000000000020 R09: 0000000000000000
[  115.648798][ T6986] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000
[  115.658480][ T6986] R13: 0000000000000000 R14: 00007fc554775fa0 R15: 00007ffd8c851658
[  115.668591][ T6986]  </TASK>
[  116.105046][ T7006] netlink: 228 bytes leftover after parsing attributes in process `syz.1.264'.
[  116.205033][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'.
[  116.656372][ T7030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.273'.
[  116.834346][ T7022] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.959485][ T7022] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.051838][ T7022] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.131354][ T7022] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.189132][ T7043] netlink: 48 bytes leftover after parsing attributes in process `syz.4.276'.
[  117.235107][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'.
[  117.247798][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'.
[  117.261079][ T7043] tipc: Started in network mode
[  117.266017][ T7043] tipc: Node identity , cluster identity 4711
[  117.327611][ T7052] Driver unsupported XDP return value 0 on prog  (id 165) dev N/A, expect packet loss!
[  117.452444][ T7022] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.492038][ T7058] __nla_validate_parse: 2 callbacks suppressed
[  117.492063][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[  117.526168][ T7060] openvswitch: netlink: Tunnel attr 223 out of range max 16
[  117.540016][ T7022] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.582707][ T7022] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.636998][ T7022] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.222562][ T7079] sch_tbf: burst 3631 is lower than device lo mtu (65550) !
[  118.522261][ T7098] netlink: 'syz.1.291': attribute type 15 has an invalid length.
[  118.560917][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'.
[  119.286812][ T7131] netlink: 'syz.4.300': attribute type 8 has an invalid length.
[  119.488353][ T7139] tun0: tun_chr_ioctl cmd 1074292226
[  119.519789][ T7139] tun0: tun_chr_ioctl cmd 1074025677
[  119.525877][ T7139] tun0: linktype set to 1
[  120.332563][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[  120.397797][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[  120.410064][ T7193] nbd: socks must be embedded in a SOCK_ITEM attr
[  120.451830][ T7197] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.320'.
[  120.571626][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'.
[  120.813002][ T7220] x_tables: duplicate underflow at hook 1
[  121.070343][ T7233] netlink: 56 bytes leftover after parsing attributes in process `syz.4.330'.
[  121.094856][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.330'.
[  121.198282][ T7234] IPVS: Scheduler module ip_vs_sip not found
[  121.231198][ T7234] netlink: 52 bytes leftover after parsing attributes in process `syz.0.329'.
[  121.254758][ T7245] netlink: 'syz.2.332': attribute type 1 has an invalid length.
[  121.266516][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'.
[  121.467907][ T7255] wg0 speed is unknown, defaulting to 1000
[  121.520487][ T7255] wg0 speed is unknown, defaulting to 1000
[  121.527349][ T7255] wg0 speed is unknown, defaulting to 1000
[  121.571402][ T7260] FAULT_INJECTION: forcing a failure.
[  121.571402][ T7260] name failslab, interval 1, probability 0, space 0, times 1
[  121.643271][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: syz.1.338 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  121.656068][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  121.667177][ T7260] Call Trace:
[  121.670746][ T7260]  <TASK>
[  121.673821][ T7260]  dump_stack_lvl+0x241/0x360
[  121.679451][ T7260]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.685513][ T7260]  ? __pfx__printk+0x10/0x10
[  121.690476][ T7260]  ? __kmalloc_cache_noprof+0x48/0x390
[  121.697395][ T7260]  ? __pfx___might_resched+0x10/0x10
[  121.703666][ T7260]  should_fail_ex+0x3b0/0x4e0
[  121.709201][ T7260]  should_failslab+0xac/0x100
[  121.715174][ T7260]  __kmalloc_cache_noprof+0x70/0x390
[  121.720856][ T7260]  ? ip_set_create+0x330/0x18b0
[  121.727601][ T7260]  ip_set_create+0x330/0x18b0
[  121.732787][ T7260]  ? rcu_is_watching+0x15/0xb0
[  121.737708][ T7260]  ? __pfx_ip_set_create+0x10/0x10
[  121.743321][ T7260]  ? nfnetlink_rcv_msg+0x225/0x1180
[  121.749456][ T7260]  nfnetlink_rcv_msg+0xbec/0x1180
[  121.755336][ T7260]  ? nfnetlink_rcv_msg+0x225/0x1180
[  121.760959][ T7260]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  121.766928][ T7260]  ? stack_trace_save+0x118/0x1d0
[  121.772534][ T7260]  ? dev_hard_start_xmit+0x27a/0x7d0
[  121.779216][ T7260]  ? __dev_queue_xmit+0x1b73/0x3f50
[  121.786586][ T7260]  ? __netlink_deliver_tap+0x56b/0x7f0
[  121.794316][ T7260]  ? netlink_deliver_tap+0x19d/0x1b0
[  121.800959][ T7260]  ? netlink_unicast+0x7c4/0x990
[  121.807096][ T7260]  ? netlink_sendmsg+0x8e4/0xcb0
[  121.813930][ T7260]  ? __sock_sendmsg+0x221/0x270
[  121.819669][ T7260]  ? ____sys_sendmsg+0x52a/0x7e0
[  121.826302][ T7260]  ? __sys_sendmsg+0x269/0x350
[  121.831306][ T7260]  netlink_rcv_skb+0x1e3/0x430
[  121.836828][ T7260]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  121.842637][ T7260]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  121.848524][ T7260]  ? apparmor_capable+0x13b/0x1b0
[  121.853878][ T7260]  ? bpf_lsm_capable+0x9/0x10
[  121.858803][ T7260]  ? security_capable+0x7e/0x2d0
[  121.864596][ T7260]  nfnetlink_rcv+0x297/0x2ab0
[  121.869525][ T7260]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  121.876726][ T7260]  ? __dev_queue_xmit+0x2f4/0x3f50
[  121.882295][ T7260]  ? __dev_queue_xmit+0x1775/0x3f50
[  121.888127][ T7260]  ? kasan_save_track+0x51/0x80
[  121.893552][ T7260]  ? ____sys_sendmsg+0x52a/0x7e0
[  121.898964][ T7260]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  121.904903][ T7260]  ? __dev_queue_xmit+0x2f4/0x3f50
[  121.910579][ T7260]  ? __pfx___dev_queue_xmit+0x10/0x10
[  121.916293][ T7260]  ? ref_tracker_free+0x643/0x7e0
[  121.921706][ T7260]  ? __asan_memcpy+0x40/0x70
[  121.926424][ T7260]  ? __pfx_ref_tracker_free+0x10/0x10
[  121.932249][ T7260]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.937606][ T7260]  ? skb_clone+0x240/0x390
[  121.942091][ T7260]  ? __pfx_lock_release+0x10/0x10
[  121.947411][ T7260]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  121.953511][ T7260]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.959014][ T7260]  netlink_unicast+0x7f6/0x990
[  121.964094][ T7260]  ? __pfx_netlink_unicast+0x10/0x10
[  121.969420][ T7260]  ? __virt_addr_valid+0x45f/0x530
[  121.974764][ T7260]  ? __phys_addr_symbol+0x2f/0x70
[  121.980017][ T7260]  ? __check_object_size+0x47a/0x730
[  121.985536][ T7260]  netlink_sendmsg+0x8e4/0xcb0
[  121.991416][ T7260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.996941][ T7260]  ? aa_sock_msg_perm+0x91/0x160
[  122.002851][ T7260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.008975][ T7260]  __sock_sendmsg+0x221/0x270
[  122.014320][ T7260]  ____sys_sendmsg+0x52a/0x7e0
[  122.020110][ T7260]  ? __pfx_____sys_sendmsg+0x10/0x10
[  122.026162][ T7260]  ? __fget_files+0x2a/0x410
[  122.031106][ T7260]  ? __fget_files+0x2a/0x410
[  122.036363][ T7260]  __sys_sendmsg+0x269/0x350
[  122.041219][ T7260]  ? __pfx_lock_release+0x10/0x10
[  122.046386][ T7260]  ? __pfx___sys_sendmsg+0x10/0x10
[  122.051876][ T7260]  ? __pfx_vfs_write+0x10/0x10
[  122.056782][ T7260]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  122.063391][ T7260]  ? do_syscall_64+0x100/0x230
[  122.068914][ T7260]  ? do_syscall_64+0xb6/0x230
[  122.073746][ T7260]  do_syscall_64+0xf3/0x230
[  122.078731][ T7260]  ? clear_bhb_loop+0x35/0x90
[  122.084333][ T7260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.091557][ T7260] RIP: 0033:0x7fc554585d29
[  122.099344][ T7260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.124851][ T7260] RSP: 002b:00007fc5523f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.137503][ T7260] RAX: ffffffffffffffda RBX: 00007fc554775fa0 RCX: 00007fc554585d29
[  122.147635][ T7260] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  122.156791][ T7260] RBP: 00007fc5523f6090 R08: 0000000000000000 R09: 0000000000000000
[  122.167693][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.177493][ T7260] R13: 0000000000000000 R14: 00007fc554775fa0 R15: 00007ffd8c851658
[  122.188833][ T7260]  </TASK>
[  122.248296][ T7267] veth0_to_bridge: entered promiscuous mode
[  122.257783][ T7266] veth0_to_bridge: left promiscuous mode
[  122.431257][ T7271] delete_channel: no stack
[  122.442932][ T7255] infiniband syz0: set down
[  122.448113][  T974] wg0 speed is unknown, defaulting to 1000
[  122.477538][ T7255] infiniband syz0: added wg0
[  122.482885][ T7255] syz0: rxe_create_cq: returned err = -12
[  122.511659][ T7255] infiniband syz0: Couldn't create ib_mad CQ
[  122.534379][ T7255] infiniband syz0: Couldn't open port 1
[  122.633422][ T7255] RDS/IB: syz0: added
[  122.668242][ T7255] smc: adding ib device syz0 with port count 1
[  122.676544][ T7255] smc:    ib device syz0 port 1 has pnetid 
[  122.705242][ T5888] wg0 speed is unknown, defaulting to 1000
[  122.726476][ T7255] wg0 speed is unknown, defaulting to 1000
[  122.857577][ T7255] wg0 speed is unknown, defaulting to 1000
[  122.956442][ T7290] __nla_validate_parse: 2 callbacks suppressed
[  122.956482][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.347'.
[  122.982504][ T7255] wg0 speed is unknown, defaulting to 1000
[  122.982971][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'.
[  123.403169][ T7255] wg0 speed is unknown, defaulting to 1000
[  123.505779][ T7301] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  123.748161][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[  123.761186][ T7255] wg0 speed is unknown, defaulting to 1000
[  123.968286][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[  124.147983][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.359'.
[  124.228308][ T7330] syzkaller0: entered promiscuous mode
[  124.250888][ T7330] syzkaller0: entered allmulticast mode
[  124.531140][ T7339] rdma_rxe: rxe_newlink: failed to add vxcan1
[  124.569675][ T7339] netlink: 'syz.3.363': attribute type 39 has an invalid length.
[  124.741827][ T7343] netlink: 'syz.1.365': attribute type 4 has an invalid length.
[  124.862218][ T7345] batadv_slave_1: entered promiscuous mode
[  124.872702][ T7344] batadv_slave_1: left promiscuous mode
[  125.413688][ T7372] FAULT_INJECTION: forcing a failure.
[  125.413688][ T7372] name failslab, interval 1, probability 0, space 0, times 0
[  125.460753][ T7372] CPU: 1 UID: 0 PID: 7372 Comm: syz.4.376 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  125.473719][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  125.488358][ T7372] Call Trace:
[  125.492758][ T7372]  <TASK>
[  125.497574][ T7372]  dump_stack_lvl+0x241/0x360
[  125.504417][ T7372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.510480][ T7372]  ? __pfx__printk+0x10/0x10
[  125.517927][ T7372]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  125.525184][ T7372]  ? __pfx___might_resched+0x10/0x10
[  125.532176][ T7372]  should_fail_ex+0x3b0/0x4e0
[  125.538573][ T7372]  should_failslab+0xac/0x100
[  125.544240][ T7372]  kmem_cache_alloc_node_noprof+0x77/0x380
[  125.550949][ T7372]  ? __alloc_skb+0x1c3/0x440
[  125.556719][ T7372]  __alloc_skb+0x1c3/0x440
[  125.561551][ T7372]  ? __pfx___alloc_skb+0x10/0x10
[  125.568479][ T7372]  ? netlink_ack_tlv_len+0x6e/0x200
[  125.575447][ T7372]  netlink_ack+0x145/0xa50
[  125.580422][ T7372]  ? __sock_sendmsg+0x221/0x270
[  125.586517][ T7372]  ? ____sys_sendmsg+0x52a/0x7e0
[  125.591880][ T7372]  netlink_rcv_skb+0x262/0x430
[  125.598471][ T7372]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  125.604780][ T7372]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.611700][ T7372]  ? apparmor_capable+0x13b/0x1b0
[  125.620771][ T7372]  ? bpf_lsm_capable+0x9/0x10
[  125.627430][ T7372]  ? security_capable+0x7e/0x2d0
[  125.633309][ T7372]  nfnetlink_rcv+0x297/0x2ab0
[  125.639875][ T7372]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  125.646951][ T7372]  ? __dev_queue_xmit+0x2f4/0x3f50
[  125.653864][ T7372]  ? __dev_queue_xmit+0x1775/0x3f50
[  125.660325][ T7372]  ? kasan_save_track+0x51/0x80
[  125.666034][ T7372]  ? ____sys_sendmsg+0x52a/0x7e0
[  125.672550][ T7372]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  125.679292][ T7372]  ? __dev_queue_xmit+0x2f4/0x3f50
[  125.685163][ T7372]  ? __pfx___dev_queue_xmit+0x10/0x10
[  125.690774][ T7372]  ? ref_tracker_free+0x643/0x7e0
[  125.696826][ T7372]  ? __asan_memcpy+0x40/0x70
[  125.702601][ T7372]  ? __pfx_ref_tracker_free+0x10/0x10
[  125.709445][ T7372]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.720658][ T7372]  ? skb_clone+0x240/0x390
[  125.730350][ T7372]  ? __pfx_lock_release+0x10/0x10
[  125.738182][ T7372]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  125.745126][ T7372]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.753548][ T7372]  netlink_unicast+0x7f6/0x990
[  125.761844][ T7372]  ? __pfx_netlink_unicast+0x10/0x10
[  125.769454][ T7372]  ? __virt_addr_valid+0x45f/0x530
[  125.776031][ T7372]  ? __phys_addr_symbol+0x2f/0x70
[  125.785898][ T7372]  ? __check_object_size+0x47a/0x730
[  125.793887][ T7372]  netlink_sendmsg+0x8e4/0xcb0
[  125.800762][ T7372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.807324][ T7372]  ? aa_sock_msg_perm+0x91/0x160
[  125.813733][ T7372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.819952][ T7372]  __sock_sendmsg+0x221/0x270
[  125.825142][ T7372]  ____sys_sendmsg+0x52a/0x7e0
[  125.831308][ T7372]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.838111][ T7372]  ? __fget_files+0x2a/0x410
[  125.844234][ T7372]  ? __fget_files+0x2a/0x410
[  125.850220][ T7372]  __sys_sendmsg+0x269/0x350
[  125.856069][ T7372]  ? __pfx_lock_release+0x10/0x10
[  125.864201][ T7372]  ? __pfx___sys_sendmsg+0x10/0x10
[  125.871096][ T7372]  ? __pfx_vfs_write+0x10/0x10
[  125.877509][ T7372]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  125.885718][ T7372]  ? do_syscall_64+0x100/0x230
[  125.891586][ T7372]  ? do_syscall_64+0xb6/0x230
[  125.896960][ T7372]  do_syscall_64+0xf3/0x230
[  125.903617][ T7372]  ? clear_bhb_loop+0x35/0x90
[  125.910392][ T7372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.922439][ T7372] RIP: 0033:0x7f4d5fb85d29
[  125.929492][ T7372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.955621][ T7372] RSP: 002b:00007f4d6095b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.969032][ T7372] RAX: ffffffffffffffda RBX: 00007f4d5fd75fa0 RCX: 00007f4d5fb85d29
[  125.978187][ T7372] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  125.987437][ T7372] RBP: 00007f4d6095b090 R08: 0000000000000000 R09: 0000000000000000
[  125.996348][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.006053][ T7372] R13: 0000000000000000 R14: 00007f4d5fd75fa0 R15: 00007ffca9749a28
[  126.017814][ T7372]  </TASK>
[  126.158746][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  126.227338][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  126.337352][ T7357] wg0 speed is unknown, defaulting to 1000
[  126.564098][ T7392] netlink: 'syz.0.381': attribute type 10 has an invalid length.
[  126.576918][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.590011][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.623989][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.631850][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.645441][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.655661][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.696384][ T7392] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  126.784571][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'.
[  127.047749][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[  127.091381][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[  127.342470][ T7427] FAULT_INJECTION: forcing a failure.
[  127.342470][ T7427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.386765][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.2.390 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  127.403212][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  127.417625][ T7427] Call Trace:
[  127.422132][ T7427]  <TASK>
[  127.427371][ T7427]  dump_stack_lvl+0x241/0x360
[  127.433114][ T7427]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.440665][ T7427]  ? __pfx__printk+0x10/0x10
[  127.445524][ T7427]  ? __pfx_lock_release+0x10/0x10
[  127.452211][ T7427]  ? __lock_acquire+0x1397/0x2100
[  127.459918][ T7427]  should_fail_ex+0x3b0/0x4e0
[  127.466034][ T7427]  _copy_from_user+0x2f/0xc0
[  127.473851][ T7427]  kstrtouint_from_user+0xc6/0x190
[  127.481272][ T7427]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  127.488590][ T7427]  ? __pfx_lock_acquire+0x10/0x10
[  127.495308][ T7427]  proc_fail_nth_write+0xaa/0x2d0
[  127.501026][ T7427]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  127.509084][ T7427]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  127.517905][ T7427]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  127.525961][ T7427]  vfs_write+0x2a3/0xd30
[  127.530823][ T7427]  ? __pfx_vfs_write+0x10/0x10
[  127.539413][ T7427]  ? __fget_files+0x2a/0x410
[  127.546198][ T7427]  ? __fget_files+0x395/0x410
[  127.552020][ T7427]  ? __fget_files+0x2a/0x410
[  127.557505][ T7427]  ksys_write+0x18f/0x2b0
[  127.562684][ T7427]  ? __pfx_ksys_write+0x10/0x10
[  127.569299][ T7427]  ? do_syscall_64+0x100/0x230
[  127.575624][ T7427]  ? do_syscall_64+0xb6/0x230
[  127.581854][ T7427]  do_syscall_64+0xf3/0x230
[  127.587471][ T7427]  ? clear_bhb_loop+0x35/0x90
[  127.593788][ T7427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.601855][ T7427] RIP: 0033:0x7ff4be7847df
[  127.607038][ T7427] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  127.634073][ T7427] RSP: 002b:00007ff4bc5f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  127.644930][ T7427] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff4be7847df
[  127.655398][ T7427] RDX: 0000000000000001 RSI: 00007ff4bc5f60a0 RDI: 0000000000000004
[  127.664570][ T7427] RBP: 00007ff4bc5f6090 R08: 0000000000000000 R09: 0000000000000000
[  127.674149][ T7427] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  127.685272][ T7427] R13: 0000000000000000 R14: 00007ff4be975fa0 R15: 00007fff0128a188
[  127.694521][ T7427]  </TASK>
[  128.048379][ T7444] netlink: 'syz.4.396': attribute type 58 has an invalid length.
[  128.099354][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'.
[  128.212464][ T7452] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[  128.657613][ T7476] netlink: 'syz.0.405': attribute type 10 has an invalid length.
[  128.679418][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.408'.
[  128.732848][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[  128.989798][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'.
[  129.653547][ T7516] netlink: 'syz.2.419': attribute type 11 has an invalid length.
[  129.755191][ T7518] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  129.998919][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'.
[  130.500715][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'.
[  130.551193][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'.
[  130.576401][ T7552] netlink: 'syz.3.432': attribute type 1 has an invalid length.
[  130.619867][ T7552] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.658597][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'.
[  130.677194][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'.
[  130.766648][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.432'.
[  131.396371][ T7572] netlink: 'syz.2.437': attribute type 2 has an invalid length.
[  131.416889][ T7572] netlink: 'syz.2.437': attribute type 9 has an invalid length.
[  131.496936][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.632410][ T7574] bridge_slave_0 (unregistering): left allmulticast mode
[  131.642769][ T7574] bridge_slave_0 (unregistering): left promiscuous mode
[  131.657584][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.771635][ T7580] tipc: Started in network mode
[  131.792950][ T7580] tipc: Node identity 7, cluster identity 9
[  131.827534][ T7580] tipc: Node number set to 7
[  132.288043][ T7604] 8021q: VLANs not supported on lo
[  132.367144][ T7576] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.574828][ T7610] bridge_slave_0: left allmulticast mode
[  132.657394][ T7610] bridge_slave_0: left promiscuous mode
[  132.673808][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.713209][ T7610] bridge_slave_1: left allmulticast mode
[  132.735795][ T7610] bridge_slave_1: left promiscuous mode
[  132.775343][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.934296][ T7610] bond0: (slave bond_slave_0): Releasing backup interface
[  132.980925][ T7610] bond0: (slave bond_slave_1): Releasing backup interface
[  133.010191][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.025495][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.261251][ T7610] team0: Port device team_slave_0 removed
[  133.328608][ T7610] team0: Port device team_slave_1 removed
[  133.373245][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.403472][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.433171][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.477857][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.646149][ T7620] wg0 speed is unknown, defaulting to 1000
[  134.919277][ T7646] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004
[  134.938453][ T7647] __nla_validate_parse: 1 callbacks suppressed
[  134.938473][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'.
[  135.217315][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.466'.
[  135.377763][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'.
[  135.636712][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[  135.654961][ T7621] wg0 speed is unknown, defaulting to 1000
[  135.890989][ T7676] ip6tnl0: Master is either lo or non-ether device
[  136.046614][ T7649] wg0 speed is unknown, defaulting to 1000
[  136.493817][ T7650] wg0 speed is unknown, defaulting to 1000
[  136.831785][ T7683] netlink: 256 bytes leftover after parsing attributes in process `syz.4.471'.
[  136.869369][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.471'.
[  137.162349][ T7654] wg0 speed is unknown, defaulting to 1000
[  137.442867][ T7681] wg0 speed is unknown, defaulting to 1000
[  138.281036][ T7695] bond0: entered promiscuous mode
[  138.297716][ T7695] bond_slave_0: entered promiscuous mode
[  138.307543][ T7695] bond_slave_1: entered promiscuous mode
[  138.314079][ T7695] bridge0: entered promiscuous mode
[  138.383153][ T7697] netlink: 'syz.1.474': attribute type 10 has an invalid length.
[  138.392010][ T7695] bond0: left promiscuous mode
[  138.396839][ T7695] bond_slave_0: left promiscuous mode
[  138.445956][ T7695] bond_slave_1: left promiscuous mode
[  138.472994][ T7695] bridge0: left promiscuous mode
[  138.592069][ T7699] rdma_rxe: rxe_newlink: failed to add lo
[  138.676127][ T7701] netlink: 'syz.1.475': attribute type 33 has an invalid length.
[  138.973734][ T7705] IPVS: persistence engine module ip_vs_pe_ not found
[  139.136837][ T7705] netlink: 48 bytes leftover after parsing attributes in process `syz.0.476'.
[  139.157661][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.273218][ T7703] wg0 speed is unknown, defaulting to 1000
[  139.334023][ T7717] netlink: 112 bytes leftover after parsing attributes in process `syz.1.478'.
[  139.952783][ T5910] IPVS: starting estimator thread 0...
[  140.047782][ T7734] IPVS: using max 18 ests per chain, 43200 per kthread
[  140.116985][ T7719] wg0 speed is unknown, defaulting to 1000
[  140.670501][ T7750] xt_CT: You must specify a L4 protocol and not use inversions on it
[  140.798332][ T7761] veth0_vlan: left allmulticast mode
[  140.842784][ T7762] lo: entered allmulticast mode
[  140.858753][ T7762] lo: left allmulticast mode
[  141.693916][ T7772] wg0 speed is unknown, defaulting to 1000
[  142.574327][ T7814] netlink: 2 bytes leftover after parsing attributes in process `syz.3.510'.
[  142.681383][ T7814] batadv_slave_1: entered promiscuous mode
[  142.686928][ T7817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.511'.
[  142.690503][ T7792] wg0 speed is unknown, defaulting to 1000
[  143.171266][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.515'.
[  143.210909][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'.
[  143.243181][ T7831] netlink: 'syz.4.516': attribute type 16 has an invalid length.
[  143.264781][ T7774] wg0 speed is unknown, defaulting to 1000
[  143.273867][ T7831] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.516'.
[  143.324349][ T7793] netlink: 'syz.0.505': attribute type 3 has an invalid length.
[  143.397179][ T7793] netlink: 666 bytes leftover after parsing attributes in process `syz.0.505'.
[  143.469225][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.505'.
[  143.515260][ T7792] smc: net device bond0 applied user defined pnetid S
[  144.100133][ T7842] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.556450][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'.
[  144.622593][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.245924][ T7879] netlink: 76 bytes leftover after parsing attributes in process `syz.3.531'.
[  145.286424][ T7879] bridge_slave_1: entered allmulticast mode
[  145.434072][ T7888] delete_channel: no stack
[  145.530925][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.535'.
[  145.720067][ T7894] tipc: Started in network mode
[  145.744699][ T7894] tipc: Node identity 82fc9036cbc8, cluster identity 4711
[  145.768267][ T7894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.892472][ T7901] netlink: 'syz.3.539': attribute type 1 has an invalid length.
[  146.067385][ T7901] openvswitch: netlink: Message has 2 unknown bytes.
[  146.098332][ T7901] openvswitch: netlink: Actions may not be safe on all matching packets
[  146.130600][ T7918] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  146.160463][ T7918] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  146.187486][ T7918] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  146.208097][ T7918] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  146.226341][ T7918] geneve2: entered promiscuous mode
[  146.232652][ T7918] geneve2: entered allmulticast mode
[  146.246109][ T7893] tipc: Disabling bearer <eth:syzkaller0>
[  147.215486][ T7956] dummy0: entered promiscuous mode
[  147.234715][ T7956] macvtap2: entered promiscuous mode
[  147.242794][ T7956] macvtap2: entered allmulticast mode
[  147.258748][ T7956] dummy0: entered allmulticast mode
[  147.459238][ T7969] x_tables: duplicate underflow at hook 3
[  147.494001][ T7966] wg0 speed is unknown, defaulting to 1000
[  147.781555][ T7976] netlink: 'syz.4.559': attribute type 1 has an invalid length.
[  147.885172][ T7978] __nla_validate_parse: 9 callbacks suppressed
[  147.885195][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'.
[  147.988024][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'.
[  148.248703][ T7984] bridge0: port 3(hsr0) entered blocking state
[  148.299856][ T7984] bridge0: port 3(hsr0) entered disabled state
[  148.351976][ T7984] hsr0: entered allmulticast mode
[  148.407736][ T7984] hsr_slave_0: entered allmulticast mode
[  148.439227][ T7984] hsr_slave_1: entered allmulticast mode
[  148.520055][ T7984] hsr0: entered promiscuous mode
[  148.541829][ T7984] bridge0: port 3(hsr0) entered blocking state
[  148.551309][ T7984] bridge0: port 3(hsr0) entered forwarding state
[  149.010052][ T7971] wg0 speed is unknown, defaulting to 1000
[  149.314266][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  149.363194][ T7996] openvswitch: netlink: Flow actions attr not present in new flow.
[  149.922938][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'.
[  150.004395][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'.
[  150.019461][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'.
[  150.328705][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.402742][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'.
[  150.477414][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.771534][ T8046] netlink: 'syz.4.578': attribute type 10 has an invalid length.
[  150.875375][ T8047] netlink: 'syz.4.578': attribute type 4 has an invalid length.
[  150.888760][ T8032] wg0 speed is unknown, defaulting to 1000
[  150.939706][ T8047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.578'.
[  150.994436][   T35] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0000:00ff:fe00:0000 error=-28
[  151.095893][ T8061] IPVS: set_ctl: invalid protocol: 149 0.0.0.0:20003
[  151.322063][ T5847] IPVS: starting estimator thread 0...
[  151.357801][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.410795][ T8072] netlink: 'syz.2.584': attribute type 15 has an invalid length.
[  151.445670][ T8080] netlink: 48 bytes leftover after parsing attributes in process `syz.4.585'.
[  151.469609][ T8073] IPVS: using max 21 ests per chain, 50400 per kthread
[  151.834692][ T8095] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.977388][ T8095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.589'.
[  152.426253][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.528737][ T8139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  152.550634][ T8139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  152.658654][ T8142] ip6gre0: entered promiscuous mode
[  152.681173][ T8142] ip6gre0: entered allmulticast mode
[  152.887623][ T8155] __nla_validate_parse: 1 callbacks suppressed
[  152.887646][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'.
[  153.103719][ T8167] Bluetooth: MGMT ver 1.23
[  153.437978][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.449444][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.467435][ T8174] netlink: 'syz.0.613': attribute type 303 has an invalid length.
[  153.517529][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.727724][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'.
[  153.898930][ T8198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.023042][ T8198] syzkaller0: entered promiscuous mode
[  154.040829][ T8198] syzkaller0: entered allmulticast mode
[  154.058079][ T8198] tipc: Resetting bearer <eth:syzkaller0>
[  154.078731][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.158980][ T8195] tipc: Resetting bearer <eth:syzkaller0>
[  154.480755][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.492126][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.531937][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.543529][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.553426][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.572069][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.584764][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.605103][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.679447][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.397770][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[  156.558141][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.639922][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.653227][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.541744][ T8195] tipc: Disabling bearer <eth:syzkaller0>
[  157.551015][ T8203] syzkaller1: entered promiscuous mode
[  157.559206][ T8203] syzkaller1: entered allmulticast mode
[  157.568911][ T8210] netlink: 'syz.2.623': attribute type 4 has an invalid length.
[  157.710731][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  157.748475][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'.
[  157.797183][ T8219] netlink: 'syz.2.626': attribute type 12 has an invalid length.
[  157.988532][ T8230] netlink: 'syz.1.629': attribute type 21 has an invalid length.
[  158.008007][ T8230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.629'.
[  158.469970][ T8259] netlink: 'syz.0.638': attribute type 10 has an invalid length.
[  158.525918][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.559941][ T8259] team0: Port device batadv0 added
[  158.584366][ T8262] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  158.640825][ T8266] Cannot find add_set index 32768 as target
[  158.667692][ T8262] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  158.693101][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'.
[  158.707483][ T8262] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  158.855905][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'.
[  158.947362][ T8272] netlink: 'syz.0.643': attribute type 11 has an invalid length.
[  159.144517][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[  159.154715][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[  159.167706][ T8279] netlink: 'syz.0.646': attribute type 18 has an invalid length.
[  159.458237][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.647'.
[  159.529640][ T8296] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  159.559696][ T8295] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  159.568739][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'.
[  159.707570][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'.
[  159.906554][ T8288] wg0 speed is unknown, defaulting to 1000
[  160.007655][ T8311] netlink: 'syz.0.655': attribute type 5 has an invalid length.
[  160.057244][ T8311] : entered promiscuous mode
[  160.081830][ T8311] netlink: 96 bytes leftover after parsing attributes in process `syz.0.655'.
[  160.143049][ T8311] netlink: 96 bytes leftover after parsing attributes in process `syz.0.655'.
[  160.469302][ T8332] netlink: 'syz.0.659': attribute type 14 has an invalid length.
[  160.533133][ T8337] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.646716][ T8337] 0ªX¹¦D: renamed from gretap0 (while UP)
[  160.656924][ T8337] 0ªX¹¦D: entered allmulticast mode
[  160.686006][ T8337] net_ratelimit: 28 callbacks suppressed
[  160.686031][ T8337] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  160.798016][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.810718][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.446603][ T8377] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  161.468231][ T8372] team_slave_0: entered promiscuous mode
[  161.474787][ T8372] team_slave_1: entered promiscuous mode
[  161.481963][ T8372] batadv0: entered promiscuous mode
[  161.501171][ T8372] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.541225][ T8372] team0: Device macvlan2 is already an upper device of the team interface
[  161.577769][ T8372] team_slave_0: left promiscuous mode
[  161.581247][ T8387] openvswitch: netlink: Flow key attr not present in new flow.
[  161.584705][ T8372] team_slave_1: left promiscuous mode
[  161.604846][ T8372] batadv0: left promiscuous mode
[  161.711351][ T8377] 8021q: adding VLAN 0 to HW filter on device team0
[  161.736693][ T8377] bond0: (slave team0): Enslaving as an active interface with an up link
[  161.761177][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.845410][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.857028][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.077582][ T8386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.134530][ T8386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.263067][ T8386] bond0 (unregistering): (slave team0): Releasing backup interface
[  162.313907][ T8386] bond0 (unregistering): Released all slaves
[  162.338845][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.348656][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.474587][ T8386] syz.4.676 (8386) used greatest stack depth: 18640 bytes left
[  162.686141][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.712515][ T8430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  162.815098][ T8430] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  163.090258][ T8448] validate_nla: 1 callbacks suppressed
[  163.090285][ T8448] netlink: 'syz.0.693': attribute type 5 has an invalid length.
[  163.157620][ T8450] __nla_validate_parse: 13 callbacks suppressed
[  163.157644][ T8450] netlink: 2 bytes leftover after parsing attributes in process `syz.1.694'.
[  163.184002][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'.
[  163.225001][ T8448] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.251663][ T8457] netlink: 'syz.2.692': attribute type 10 has an invalid length.
[  163.287926][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.693'.
[  163.300845][ T8457] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  163.758937][ T8461] wg0 speed is unknown, defaulting to 1000
[  163.873034][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'.
[  164.215381][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.700'.
[  164.370978][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'.
[  164.395416][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'.
[  164.443501][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.546135][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.569248][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.645010][ T8479] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.657806][ T8479] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.671166][ T8479] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.683984][ T8479] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.824232][ T8479] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  164.838613][ T8479] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  164.850134][ T8479] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  164.870188][ T8479] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  165.304498][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  165.344210][ T8502] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  165.425620][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'.
[  165.740047][ T8517] Bluetooth: MGMT ver 1.23
[  165.765796][    T8] net_ratelimit: 49 callbacks suppressed
[  165.765821][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.834350][ T8519] netlink: 'syz.3.713': attribute type 12 has an invalid length.
[  166.007692][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.139102][ T8533] IPv6: sit2: Disabled Multicast RS
[  166.203972][ T8536] netlink: 'syz.0.716': attribute type 4 has an invalid length.
[  166.232305][ T8536] netlink: 'syz.0.716': attribute type 4 has an invalid length.
[  167.037614][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.519087][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.087685][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.798276][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.127615][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.168607][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.197702][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.837623][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.237958][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.278360][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.327762][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.877656][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.357789][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.397729][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.117634][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.443232][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.922095][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.478665][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.527650][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.557867][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.958074][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.607694][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.498519][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.635185][ T8567] netlink: 'syz.1.720': attribute type 10 has an invalid length.
[  182.653446][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.812965][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.822696][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.832064][ T8586] netlink: 'syz.4.724': attribute type 10 has an invalid length.
[  182.832419][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.850521][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.857315][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.867292][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.889573][ T8586] team0: Port device batadv0 added
[  182.940817][ T8582] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌU!'
[  182.968913][ T8582] CPU: 1 UID: 0 PID: 8582 Comm: syz.4.724 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  182.979706][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  182.990098][ T8582] Call Trace:
[  182.993425][ T8582]  <TASK>
[  182.996397][ T8582]  dump_stack_lvl+0x241/0x360
[  183.001478][ T8582]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.006760][ T8582]  ? __pfx__printk+0x10/0x10
[  183.011423][ T8582]  ? __kmalloc_cache_noprof+0x243/0x390
[  183.017129][ T8582]  ? sysfs_warn_dup+0x51/0xa0
[  183.022044][ T8582]  sysfs_warn_dup+0x8e/0xa0
[  183.026972][ T8582]  sysfs_do_create_link_sd+0xbe/0x110
[  183.032420][ T8582]  device_add_class_symlinks+0x1c5/0x250
[  183.038218][ T8582]  device_add+0x553/0xbf0
[  183.042635][ T8582]  wiphy_register+0x1a58/0x27b0
[  183.047939][ T8582]  ? __pfx_wiphy_register+0x10/0x10
[  183.053207][ T8582]  ? minstrel_ht_alloc+0x72b/0x860
[  183.059184][ T8582]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  183.065431][ T8582]  ieee80211_register_hw+0x30fb/0x3e10
[  183.070969][ T8582]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.077376][ T8582]  ? ieee80211_register_hw+0x1551/0x3e10
[  183.083101][ T8582]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  183.089429][ T8582]  ? __asan_memset+0x23/0x50
[  183.094358][ T8582]  ? __hrtimer_init+0x170/0x250
[  183.099808][ T8582]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  183.105957][ T8582]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  183.112193][ T8582]  ? kstrndup+0x5c/0xb0
[  183.116434][ T8582]  ? __asan_memcpy+0x40/0x70
[  183.121662][ T8582]  hwsim_new_radio_nl+0xece/0x2290
[  183.127257][ T8582]  ? __pfx___nla_validate_parse+0x10/0x10
[  183.133379][ T8582]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  183.139165][ T8582]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  183.146101][ T8582]  genl_rcv_msg+0xb14/0xec0
[  183.151233][ T8582]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.157070][ T8582]  ? __pfx_lock_acquire+0x10/0x10
[  183.162335][ T8582]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  183.168019][ T8582]  ? __pfx___might_resched+0x10/0x10
[  183.173680][ T8582]  netlink_rcv_skb+0x1e3/0x430
[  183.178518][ T8582]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.184048][ T8582]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.190022][ T8582]  genl_rcv+0x28/0x40
[  183.194214][ T8582]  netlink_unicast+0x7f6/0x990
[  183.199329][ T8582]  ? __pfx_netlink_unicast+0x10/0x10
[  183.205124][ T8582]  ? __virt_addr_valid+0x45f/0x530
[  183.211388][ T8582]  ? __phys_addr_symbol+0x2f/0x70
[  183.217051][ T8582]  ? __check_object_size+0x47a/0x730
[  183.222803][ T8582]  netlink_sendmsg+0x8e4/0xcb0
[  183.227764][ T8582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.234897][ T8582]  ? aa_sock_msg_perm+0x91/0x160
[  183.240411][ T8582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.245798][ T8582]  __sock_sendmsg+0x221/0x270
[  183.250634][ T8582]  ____sys_sendmsg+0x52a/0x7e0
[  183.255568][ T8582]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.261267][ T8582]  ? __fget_files+0x2a/0x410
[  183.267053][ T8582]  ? __fget_files+0x2a/0x410
[  183.272429][ T8582]  __sys_sendmsg+0x269/0x350
[  183.277082][ T8582]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.282478][ T8582]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  183.289254][ T8582]  ? do_syscall_64+0x100/0x230
[  183.294176][ T8582]  ? do_syscall_64+0xb6/0x230
[  183.299009][ T8582]  do_syscall_64+0xf3/0x230
[  183.303923][ T8582]  ? clear_bhb_loop+0x35/0x90
[  183.308655][ T8582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.315125][ T8582] RIP: 0033:0x7f4d5fb85d29
[  183.319798][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.340172][ T8582] RSP: 002b:00007f4d6095b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.348805][ T8582] RAX: ffffffffffffffda RBX: 00007f4d5fd75fa0 RCX: 00007f4d5fb85d29
[  183.356814][ T8582] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[  183.365430][ T8582] RBP: 00007f4d5fc01b08 R08: 0000000000000000 R09: 0000000000000000
[  183.374958][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.383632][ T8582] R13: 0000000000000000 R14: 00007f4d5fd75fa0 R15: 00007ffca9749a28
[  183.391702][ T8582]  </TASK>
[  183.596142][ T8614] netlink: 256 bytes leftover after parsing attributes in process `syz.2.732'.
[  183.680898][ T8617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.697948][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.809251][ T8617] syzkaller0: entered promiscuous mode
[  183.815178][ T8617] syzkaller0: entered allmulticast mode
[  183.830474][ T8617] tipc: Resetting bearer <eth:syzkaller0>
[  183.930861][ T8634] netlink: 4730 bytes leftover after parsing attributes in process `syz.2.736'.
[  183.999781][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.083040][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.738'.
[  184.150022][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'.
[  184.370255][ T8657] netlink: 'syz.0.742': attribute type 10 has an invalid length.
[  184.391371][ T8657] syz_tun: entered promiscuous mode
[  184.405965][ T8657] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  184.549731][ T8615] tipc: Resetting bearer <eth:syzkaller0>
[  184.692049][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.745'.
[  184.705510][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'.
[  184.956643][ T8677] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[  186.717820][  T974] net_ratelimit: 2 callbacks suppressed
[  186.717842][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.798364][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.866175][ T8615] tipc: Disabling bearer <eth:syzkaller0>
[  186.888146][ T8668] netlink: 'syz.0.747': attribute type 21 has an invalid length.
[  186.896231][ T8668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.747'.
[  187.021747][ T8677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.047376][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.059317][ T8677] batadv0: entered promiscuous mode
[  187.065865][ T8677] team0: Port device batadv0 added
[  187.095033][ T8678] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌU!'
[  187.107368][ T8678] CPU: 1 UID: 0 PID: 8678 Comm: syz.2.746 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  187.118414][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  187.129582][ T8678] Call Trace:
[  187.134127][ T8678]  <TASK>
[  187.137174][ T8678]  dump_stack_lvl+0x241/0x360
[  187.142906][ T8678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.148439][ T8678]  ? __pfx__printk+0x10/0x10
[  187.154346][ T8678]  ? __kmalloc_cache_noprof+0x243/0x390
[  187.161214][ T8678]  ? sysfs_warn_dup+0x51/0xa0
[  187.166124][ T8678]  sysfs_warn_dup+0x8e/0xa0
[  187.168811][ T8691] netlink: 52 bytes leftover after parsing attributes in process `syz.1.751'.
[  187.170769][ T8678]  sysfs_do_create_link_sd+0xbe/0x110
[  187.180675][ T5845] Bluetooth: hci4: link tx timeout
[  187.185858][ T8678]  device_add_class_symlinks+0x1c5/0x250
[  187.185898][ T8678]  device_add+0x553/0xbf0
[  187.191634][ T5845] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  187.197539][ T8678]  wiphy_register+0x1a58/0x27b0
[  187.197599][ T8678]  ? __pfx_wiphy_register+0x10/0x10
[  187.197631][ T8678]  ? minstrel_ht_alloc+0x72b/0x860
[  187.197667][ T8678]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  187.197706][ T8678]  ieee80211_register_hw+0x30fb/0x3e10
[  187.205167][ T5845] Bluetooth: hci4: link tx timeout
[  187.210718][ T8678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.210768][ T8678]  ? ieee80211_register_hw+0x1551/0x3e10
[  187.210811][ T8678]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  187.210856][ T8678]  ? __asan_memset+0x23/0x50
[  187.210879][ T8678]  ? __hrtimer_init+0x170/0x250
[  187.210923][ T8678]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  187.210987][ T8678]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  187.215983][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  187.221110][ T8678]  ? kstrndup+0x5c/0xb0
[  187.221142][ T8678]  ? __asan_memcpy+0x40/0x70
[  187.221171][ T8678]  hwsim_new_radio_nl+0xece/0x2290
[  187.221220][ T8678]  ? __pfx___nla_validate_parse+0x10/0x10
[  187.221253][ T8678]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.221321][ T8678]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  187.221356][ T8678]  genl_rcv_msg+0xb14/0xec0
[  187.329081][ T8678]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.334483][ T8678]  ? __pfx_lock_acquire+0x10/0x10
[  187.339579][ T8678]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.345343][ T8678]  ? __pfx___might_resched+0x10/0x10
[  187.350667][ T8678]  netlink_rcv_skb+0x1e3/0x430
[  187.356520][ T8678]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.361886][ T8678]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.368036][ T8678]  genl_rcv+0x28/0x40
[  187.372520][ T8678]  netlink_unicast+0x7f6/0x990
[  187.377605][ T8678]  ? __pfx_netlink_unicast+0x10/0x10
[  187.383949][ T8678]  ? __virt_addr_valid+0x45f/0x530
[  187.389807][ T8678]  ? __phys_addr_symbol+0x2f/0x70
[  187.395794][ T8678]  ? __check_object_size+0x47a/0x730
[  187.401125][ T8678]  netlink_sendmsg+0x8e4/0xcb0
[  187.406026][ T8678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.411550][ T8678]  ? aa_sock_msg_perm+0x91/0x160
[  187.416691][ T8678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.422180][ T8678]  __sock_sendmsg+0x221/0x270
[  187.427352][ T8678]  ____sys_sendmsg+0x52a/0x7e0
[  187.432171][ T8678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.437499][ T8678]  ? __fget_files+0x2a/0x410
[  187.442146][ T8678]  ? __fget_files+0x2a/0x410
[  187.446788][ T8678]  __sys_sendmsg+0x269/0x350
[  187.451590][ T8678]  ? __pfx___sys_sendmsg+0x10/0x10
[  187.456857][ T8678]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  187.463432][ T8678]  ? do_syscall_64+0x100/0x230
[  187.468286][ T8678]  ? do_syscall_64+0xb6/0x230
[  187.473321][ T8678]  do_syscall_64+0xf3/0x230
[  187.477881][ T8678]  ? clear_bhb_loop+0x35/0x90
[  187.482683][ T8678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.489333][ T8678] RIP: 0033:0x7ff4be785d29
[  187.493785][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.514133][ T8678] RSP: 002b:00007ff4bb94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.522844][ T8678] RAX: ffffffffffffffda RBX: 00007ff4be976400 RCX: 00007ff4be785d29
[  187.531028][ T8678] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[  187.539068][ T8678] RBP: 00007ff4be801b08 R08: 0000000000000000 R09: 0000000000000000
[  187.547123][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.555237][ T8678] R13: 0000000000000000 R14: 00007ff4be976400 R15: 00007fff0128a188
[  187.563253][ T8678]  </TASK>
[  187.617561][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'.
[  187.620938][ T8689] netlink: 'syz.0.750': attribute type 1 has an invalid length.
[  187.639791][ T8689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.750'.
[  187.824706][ T8703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.833799][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.844900][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.382067][ T8732] smc: net device bond0 erased user defined pnetid S
[  188.810860][ T8751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.849537][ T8751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.877826][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.888362][ T8751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.955205][ T8751] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[  189.379989][ T8744] wg0 speed is unknown, defaulting to 1000
[  189.399847][ T6230] ------------[ cut here ]------------
[  189.405867][ T6230] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  189.406114][ T6230] WARNING: CPU: 1 PID: 6230 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0
[  189.422810][ T6230] Modules linked in:
[  189.426824][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  189.438921][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  189.449595][ T6230] RIP: 0010:__mutex_lock+0xdac/0xee0
[  189.454997][ T6230] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b
[  189.475267][ T6230] RSP: 0018:ffffc9000365f920 EFLAGS: 00010246
[  189.481469][ T6230] RAX: ff8390f7d1bd9700 RBX: ffff8880227e8cb0 RCX: ffff8880259b1e00
[  189.489536][ T6230] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  189.498022][ T6230] RBP: ffffc9000365fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210
[  189.506304][ T6230] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000
[  189.514520][ T6230] R13: 0000000000000000 R14: 1ffff920006cbf38 R15: dffffc0000000000
[  189.523869][ T6230] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  189.533010][ T6230] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.539890][ T6230] CR2: 0000000020004030 CR3: 0000000060074000 CR4: 00000000003526f0
[  189.547944][ T6230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  189.557148][ T6230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  189.565551][ T6230] Call Trace:
[  189.569029][ T6230]  <TASK>
[  189.572213][ T6230]  ? __warn+0x165/0x4d0
[  189.577219][ T6230]  ? __mutex_lock+0xdac/0xee0
[  189.582083][ T6230]  ? report_bug+0x2b3/0x500
[  189.587477][ T6230]  ? __mutex_lock+0xdac/0xee0
[  189.593535][ T6230]  ? handle_bug+0x60/0x90
[  189.598075][ T6230]  ? exc_invalid_op+0x1a/0x50
[  189.603275][ T6230]  ? asm_exc_invalid_op+0x1a/0x20
[  189.610213][ T6230]  ? __warn_printk+0x292/0x360
[  189.616661][ T6230]  ? __mutex_lock+0xdac/0xee0
[  189.622534][ T6230]  ? free_netdev+0x2d9/0x610
[  189.628339][ T6230]  ? __pfx___mutex_lock+0x10/0x10
[  189.635176][ T6230]  ? __pfx_kvfree_call_rcu+0x10/0x10
[  189.641189][ T6230]  ? dev_addr_check+0x6f/0x240
[  189.646378][ T6230]  ? dev_addr_flush+0x192/0x210
[  189.652456][ T6230]  free_netdev+0x2d9/0x610
[  189.658288][ T6230]  netdev_run_todo+0xf21/0x10d0
[  189.663225][ T6230]  ? __pfx_netdev_run_todo+0x10/0x10
[  189.668994][ T6230]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  189.675827][ T6230]  ? down_write+0x18c/0x220
[  189.677612][ T5846] Bluetooth: hci4: command 0x0405 tx timeout
[  189.681582][ T6230]  ? __pfx_down_write+0x10/0x10
[  189.693320][ T6230]  bnep_session+0x2e3c/0x3030
[  189.698884][ T6230]  ? __pfx_bnep_session+0x10/0x10
[  189.706054][ T6230]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.715555][ T6230]  ? __pfx_woken_wake_function+0x10/0x10
[  189.724453][ T6230]  ? __kthread_parkme+0x169/0x1d0
[  189.730998][ T6230]  ? __pfx_bnep_session+0x10/0x10
[  189.736654][ T6230]  kthread+0x2f0/0x390
[  189.741172][ T6230]  ? __pfx_bnep_session+0x10/0x10
[  189.748252][ T6230]  ? __pfx_kthread+0x10/0x10
[  189.754397][ T6230]  ret_from_fork+0x4b/0x80
[  189.761395][ T6230]  ? __pfx_kthread+0x10/0x10
[  189.767455][ T6230]  ret_from_fork_asm+0x1a/0x30
[  189.772541][ T6230]  </TASK>
[  189.776541][ T6230] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  189.785946][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0
[  189.799354][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  189.811442][ T6230] Call Trace:
[  189.814936][ T6230]  <TASK>
[  189.818752][ T6230]  dump_stack_lvl+0x241/0x360
[  189.824535][ T6230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.830810][ T6230]  ? __pfx__printk+0x10/0x10
[  189.836057][ T6230]  ? _printk+0xd5/0x120
[  189.840541][ T6230]  ? __init_begin+0x41000/0x41000
[  189.847278][ T6230]  ? vscnprintf+0x5d/0x90
[  189.852064][ T6230]  panic+0x349/0x880
[  189.856906][ T6230]  ? __warn+0x174/0x4d0
[  189.861187][ T6230]  ? __pfx_panic+0x10/0x10
[  189.865723][ T6230]  ? ret_from_fork_asm+0x1a/0x30
[  189.871998][ T6230]  __warn+0x344/0x4d0
[  189.876509][ T6230]  ? __mutex_lock+0xdac/0xee0
[  189.881286][ T6230]  report_bug+0x2b3/0x500
[  189.885657][ T6230]  ? __mutex_lock+0xdac/0xee0
[  189.890651][ T6230]  handle_bug+0x60/0x90
[  189.894846][ T6230]  exc_invalid_op+0x1a/0x50
[  189.899524][ T6230]  asm_exc_invalid_op+0x1a/0x20
[  189.905049][ T6230] RIP: 0010:__mutex_lock+0xdac/0xee0
[  189.910907][ T6230] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b
[  189.930633][ T6230] RSP: 0018:ffffc9000365f920 EFLAGS: 00010246
[  189.936749][ T6230] RAX: ff8390f7d1bd9700 RBX: ffff8880227e8cb0 RCX: ffff8880259b1e00
[  189.944737][ T6230] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  189.953022][ T6230] RBP: ffffc9000365fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210
[  189.961707][ T6230] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000
[  189.970927][ T6230] R13: 0000000000000000 R14: 1ffff920006cbf38 R15: dffffc0000000000
[  189.979665][ T6230]  ? __warn_printk+0x292/0x360
[  189.984554][ T6230]  ? free_netdev+0x2d9/0x610
[  189.989629][ T6230]  ? __pfx___mutex_lock+0x10/0x10
[  189.995573][ T6230]  ? __pfx_kvfree_call_rcu+0x10/0x10
[  190.001684][ T6230]  ? dev_addr_check+0x6f/0x240
[  190.006580][ T6230]  ? dev_addr_flush+0x192/0x210
[  190.012509][ T6230]  free_netdev+0x2d9/0x610
[  190.017228][ T6230]  netdev_run_todo+0xf21/0x10d0
[  190.022450][ T6230]  ? __pfx_netdev_run_todo+0x10/0x10
[  190.027970][ T6230]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  190.034516][ T6230]  ? down_write+0x18c/0x220
[  190.039400][ T6230]  ? __pfx_down_write+0x10/0x10
[  190.045926][ T6230]  bnep_session+0x2e3c/0x3030
[  190.051280][ T6230]  ? __pfx_bnep_session+0x10/0x10
[  190.056770][ T6230]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.063463][ T6230]  ? __pfx_woken_wake_function+0x10/0x10
[  190.070040][ T6230]  ? __kthread_parkme+0x169/0x1d0
[  190.075362][ T6230]  ? __pfx_bnep_session+0x10/0x10
[  190.081668][ T6230]  kthread+0x2f0/0x390
[  190.086544][ T6230]  ? __pfx_bnep_session+0x10/0x10
[  190.091872][ T6230]  ? __pfx_kthread+0x10/0x10
[  190.098144][ T6230]  ret_from_fork+0x4b/0x80
[  190.103104][ T6230]  ? __pfx_kthread+0x10/0x10
[  190.109988][ T6230]  ret_from_fork_asm+0x1a/0x30
[  190.115449][ T6230]  </TASK>
[  190.119679][ T6230] Kernel Offset: disabled
[  190.126863][ T6230] Rebooting in 86400 seconds..