last executing test programs:

19.75579761s ago: executing program 2 (id=1023):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80800)
bind$x25(r0, &(0x7f0000000080), 0x12)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000980)={0x1}, 0x8)

19.583833384s ago: executing program 2 (id=1025):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x1, 0x1}, 0x20)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x1, 0x1}, 0x20) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) (async)

19.49539441s ago: executing program 2 (id=1028):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="080003"], 0x94}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000690004002abd700100dbdf2500000000000000000800010002000000080001000000000008000100020000000800010000000000080001000000000008000100010000000800010002000000080001000100000008000100000000000800010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="190000000200000000000000", @ANYRES32, @ANYBLOB="7f5b32f50666492c2aa567365e8d088a0e8e3a3c0a82456dd12de9abc88d4eccd8fa7581f71c94c3f45c830107e522a39cbb69f00df03462583aabec3c5c4fa0ea13366facabe40d9b81998760c8a67eaf3596fb4960eb67abd7b736f1bb26fb5da0a16e", @ANYRES64=0x0], 0x20)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x1, 0x400000, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000580))
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000000000000e3e300"/28], 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r5, @ANYBLOB='`', @ANYRES64=0x0], 0x10)
unshare(0x22020400)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
r12 = socket(0x21, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r10, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r12}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r10, &(0x7f0000000100), &(0x7f0000000140)=@tcp=r12}, 0x20)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0)

19.351792846s ago: executing program 2 (id=1029):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801fe00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)

19.188185082s ago: executing program 2 (id=1030):
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

8.903387625s ago: executing program 2 (id=1030):
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

3.530903619s ago: executing program 3 (id=1158):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x48400)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)="f4689b8946d7762bcf4103767260995a09aca9abcca0397c42b13a2e4313e2d5f87b40f07a8ead0add271f61837ffe33fac9", 0x32}, {&(0x7f0000000540)="9c353410050000000000000047b0c8f44c8d57023b73780a72db2319a5eeedcc5f77bf1477d2965989f739cf37f6c3787b034cbdfe138d6ae72c7709719fe8bfc2fd94e593c0220504dd55a6d58ac0", 0x4f}, {&(0x7f0000000600)="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", 0x109}, {&(0x7f00000007c0)="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", 0x16f}], 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4bbdc714}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x5, 0x0, 0x2, 0xc, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x38}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @ldst={0x2, 0x2, 0x0, 0xb, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000001200)=""/4096, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x8, 0xffffab06}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r2, r2], &(0x7f0000000780)=[{0x0, 0x1, 0xa, 0xb}, {0x4, 0x2, 0xc}, {0x3, 0x3, 0xe}, {0x3, 0x2, 0xd, 0xb}], 0x10, 0x7f, @void, @value}, 0x94)
sendfile(r3, r2, 0x0, 0x6)
openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x713, 0x70bd2b, 0x0, {{@in=@loopback, @in6=@local, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)

2.68362041s ago: executing program 3 (id=1161):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000120000f00"}}}]}, 0x48}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)=0x103, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c005f006a000000040009004d00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x24040800)
getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a3200000000090001007379"], 0xa0}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x250, '\x00', r6, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="0100"/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="61af3035f842a12e0500"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060012"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00'})
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffff3db, 0x5c271eee}]}}}}}}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}, 0xffffff00}], 0x1, 0x45833af92e4b39ff, 0x0)

2.48384237s ago: executing program 3 (id=1164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x108, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4)

2.292944357s ago: executing program 0 (id=1165):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001)
recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) (async)
recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) (async)

2.195664011s ago: executing program 1 (id=1166):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0x60) (async, rerun: 32)
syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900042f00fe8800000000000000000000e3ff0001fe8000000000000000000000000000aa21"], 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYBLOB="000000000000000014001680100001800c000900000000800000000008"], 0x3c}}, 0x4048080) (rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x75}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r2}, 0xc) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0xe, 0x1}) (async, rerun: 32)
sendmsg(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@phonet={0x23, 0xfc, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000002c0)="e919e39ae8e74c18d3f993ae9f3579ba72e6fbfb8377d827267e9207e04f5f066528e2ceffcaeaed699f61f24857e08bb47238b6d82dc3ff415dd581370150aad1b66a8ea3e3508f3af5454ffca68c409a680f764e1b5332cb34280e71db9230a483864f16f7105dfa327e5b0cec8466101a24", 0x73}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000000009f010000ff030000d1fd5c1f900a5b6c20379725981bc334c944b58d372a22c249bb6db41316f7254ba807270069676498dcd743b537cd61caf2021db2912ff953135592b23d3a2276fb000000000000a0000000000000000c0100000600000067a0e2cde1439c709a0b4da803d861d885b2b552eb34dbf3cbdbbd887753121228d15d6ff293df95fa55751efad8337255671405dbd7e1e80bbcce3ff1f4be817167b42a09ddd497c3dce31a8271546216e304b22d971e7b09ef24ec07329a8d3e854592c9e222c328664a8f476c57f12cfa1c4111f819aa90fa54869820a0c30c570e58315a18000000000000000c010000211ee90c3bd6ef73c800"/272], 0x110}, 0x0) (rerun: 32)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x1) (async, rerun: 64)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)="8fe59e747e8951e6bcd07b521729486c9c4d5dbae5f8305ec77ae9146c8fee735f8000f4f0afeb52f7f06cd131732fbff549182ab1dccb64d32bd6166d7f98672d7a65862e0e1e19500f33f37922b77e6ac500679775d01b1c838c2f1dccdb8e8794368c22b6930fc40eb3ee45f9b3c37d0b113fce2bd5ed78647881fe839828964afd7fb65c285a45b3ce642c7b5168f35dc7288f7e691a9463de452600a0869df37722baebac3a27e4e6f14e12953af832af967f5d800b63a952718338b7d30b31e5b101106992d6c1d4cab0cbb228d4e1ed11f21e43340593a651a8d6cf00eabc194b6320a3e21e68509dd63ae594b0eb4b98d41255ed93d12fc58b03856ae251d1d10019cd1086526207a922070ec517f700aa05240c2a5852204ef0d57c8518bbe0b79fc452a28a66bbd44e0016c5150ed8a80147f513e1b4b3403a52e3d313aad12a4f5c5fc5b262fb0c2151bf4620618d3310d0085a0850f0bc2ecd71fb9a1c0804d4f7ffbc9aa76f64110556af46136c432722edb607569bdada7bcf60d98631aae96f49e96b88ffed6665d650b949b02a0e2fc0438713d7d9077244b1ff90ae5cdb4c1d1db26de49f431e28feb7661732b1ace07d2900075760ba13d83a51cb69a86446ee9c905ad0b0d896d6e9ff393426c95593b4c4dab5ab5c33e84f5b0204b506fa22cff92c2827f0e29a8d18ffaa1f8f5abd0a43b908956967470d38d7de03775beecbfb7ba9e71b6171af82d3ece137b35177d906dc820825f09152f316fe40db9aa8ce21bfb9491037a3b767f408e9bd7312ed0c631db9ace095cabfea8277c032f02362a13b8b64c29d4f5e5870413912109570f0df4ae1a4e495df1685f68cd8d55b671a059a6abf595501013532bf7aa5af14ff538564d6b03b041c2e791add22d8880e0a9970197903380e754d4274bf81f67e86cd9250b63f77bf482880cf767a8cfa9086dd0ab16727242cf769a1a9e18bb07ad2a6bc354388cec6c170ee304143000b23381eea7a20f63e95dcaa671e8edd69d96fe0d469b5965d810f086219f05507134f91af77cd816ed09b5d0014202cc8ae8ed612b0d3ea5659b63ea4fb92cc9dd06199f7a3b8355e0fdb05403c7eb360bb2793576083e455730d74264189d28eaadd07dda245115933466f41fa77f78fb934cd50ef1a8797ea0725c3afc34649b269972c2d9ed1406f0a9261b6ae6627a66eb6936e4f782681c78b75173f92f7ee0ff89be540e53a9120e42bf5a958f0811f837b3a0da1c588d449e0618362ff694a7ae588e30663248dfb91d619c260ee6d83c34a2e876ad512f4d6bb8e17d04513b3b24373888f518288206737bac802817826ba6cfb1b2bb3044819459cb6d182edd0a186b0f1b3777845cbf3207bda8411a51b240966877e4833660cf4423f29292a8593c3c61ec4961c39f2f8c74cc54f215dd3a8cd8bee4dcbe5b4644bf1ac453c29e3859736d6e03fab53f286b1a99beac30d6099a5fe78959a0d2f8cf79210929195aaaeaa07c13800f7342ec2922c63dfa6fb18535515696d229ee87154c2e5508c3916f1a811697cb859b0b0f977d0030ca2499b5dd58edd5f968188171d38675b31afd9d23e647bf4c19b1ddea04b8efb3e25162cc9b34cb562a200b8c33ae22e158a83fbe737edc4a01cab4adf44a473657d24567d1ff477544ec5b00ad222a29ec8a3e8228a47ab6e61b2e9f8489159f87e1c2957e388813c5532c2dbcd28bba22edaa659b35c1898221ba83228d5bdb52a0b909a51ced9febaebf4fd15dd299a56a8fc3eca29e592c2d590df69a144dceb46ed3a11a934837ea45676b74882009f372c972f56962f36f2ade288c5f8a946082506f985ab5f16becf93150ab94bf57650659624787608fcd8667a4727f32bbdb369da2855fe487d5341a4306014ccb3b1562a89d9344d76476673b83bef93cd304c0dfb485529124af11b89386bb125a09e120c91c051a91c6f7ebc4bb0a4bc4ef980ee4d836b7824bb4290a054726b856dc32a44441cd6ce09b25469c50092a9be96fa340e", 0x5ad}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}}], 0x2, 0x0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

2.069942954s ago: executing program 0 (id=1168):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r2, 0x8008b705, 0x0)
sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf45dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x10, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0)

1.950778408s ago: executing program 4 (id=1169):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="d89c958ebe59124078d6cc55565ab88af97d406e7f15077e45320c905548c1d337152d501cbcdb7abb117b545accdaf3138097925eabdd41f2788b79703fcdf54fe5ae6d9afb1ded49136809ec06e1e4cfba92509b4c04a19bca707a8785c489988d94b713543aac14faa5450c92", 0x6e}, {&(0x7f00000000c0)="5af58081ada4fb5536cb6b51cf44e1b129ada7b9155b9d7b7712e00c26a9a01e66bec8bec7ffd2bdb50a830e31bd353e0dd734d422cc2dd50ff07aeaf0b6bf8ca31e3b359ac3bdf51838e0083aec53441e94578672357488b697569dffaff4692d464fdf66e0938f6ab594c277fd04a27e", 0x71}, {&(0x7f0000000140)="51b30c07e50c764d372524aceaafd1b537b6d2c85ccde88ca6e810d67a6fe6bcba680d7af875ec9c123de51b19b6fcc62becf3eccb0bd5acef60bae866cbb37cf4cd904d6ad261d4a4210a88bfadacb45700cdcbefc3f4c6b965b8315d1b48be23685f0deea45ab9c14d281245afbd6d8073a796b3f36f6b0a38980ac54b9f9fc7279912a229023b91d6cf7ff173be7c4bc292da40971453e6c78f736022c3f010b03ae1f9beda22219451bb082a92146c3f125db67d23feb7535bb095ffec77a197f24a", 0xc4}, {&(0x7f0000000240)="ed6dbfb72b1d38d4ba46713a72b489dc740e54c279f4ef2581b16974feb72bc8146e297838d3f4db7d7cb659007cf2a10a06efc84ff4a742a0df7091718b9c8b74b2fd65502f03b7d8", 0x49}], 0x4, &(0x7f0000000300)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x38, 0x4800}], 0x1, 0x4ddd044ba1d7be36)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, <r2=>0x0, 0x0]}, &(0x7f00000003c0)=0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x2c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000440)={r2, 0x81, 0x9}, 0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = accept4(r0, &(0x7f0000000500)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000580)=0x80, 0x800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x7, 0x0, 0x1, 0x10, 0x1, 0x1, '\x00', 0x0, r3, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
pipe(&(0x7f0000000640)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x3, 0x3ff, 0x8, 0x6, 0x20, r4, 0x2, '\x00', 0x0, r5, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, &(0x7f0000000740)=0x8)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000780)={'ipvs\x00'}, &(0x7f00000007c0)=0x1e)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000800)={0x0, 0x6}, 0x4)
getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000)
sendfile(r3, r4, 0x0, 0x7ff)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = accept4$inet(r6, 0x0, &(0x7f0000001880), 0x80000)
close(r7)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0xc176957b955b2c9}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x50, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f00000029c0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1100008}, 0xc, &(0x7f0000002980)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x890, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x87c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "a82030264b983e714b3475edfb56836ec132937a442adc6882cef57adcc61ec8c678ba4e0eb2a6208eddd2fd533e6305ec58534462ff4f08958ef21b2c982ba9cfe2730864094e"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x4}, {0x5b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xdd}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x39ab}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY_END={0x35c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x33, 0x1, "bf31f2896745f98b2cf63e5184bb72cc77bd7f09eb9085fc9bc9af05554087f5fdba02009b8f18a8a63fd625032888"}, @NFTA_DATA_VALUE={0x6e, 0x1, "d66200b31643c32fd69a6b1410cec39b0ae3bc640d7e14c7f26efa3824c67949a19867ad3801a9d7db066bce587697eb41d6b3a3e18af99b2a2e852d70f0cceb1b623da780f2108776569b80f97c823176ceefd6956db86b5462604a52bbcc657a6231b56bc45789254e"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x34, 0x1, "783a2f851ee653818e119cdf99e184723d7b2c5c23a5fc3cf475226973e0de9110f4002359c62ba5a2dee5fb5372c7c2"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xac, 0x1, "5432b4e8ea1032c5876f9893ada42b53296b370c156bfc25279a0cc98e2523420236ad4d0146419b6851aaa316639afa09575e77eb05b61d38115b98aea7f7d4a9ed7f4bafbf6d079401d5f0649f16048983fdd7d731477899b191fc62e864d69bdf318fdee85c9b0e0164a28b03cd0e551c3e78228495ee12edad51520415828429cf041b758f97d64333289d50b986b3dc0d9e309d130c2804c020f4d6c36e8f252c61c4f9dc51"}, @NFTA_DATA_VALUE={0x55, 0x1, "f4d8a67f0acd19d3f850a22bf602c216a740a734ed2f39037c8d20accd56ecb2b0dc2e7585f13027fe38d909bddd8b457c7602ef3d801828161d3bee4722f325a323bdc5a329b973fb916a8190a2e29258"}]}, @NFTA_SET_ELEM_KEY={0x1f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "352f34984f05fa8a5497d714efe6baa9fa809b7e454c5a6ef52d5c556f0e50a563e278bf31a4f3f744"}, @NFTA_DATA_VALUE={0xf7, 0x1, "0000354976c97ccaba46c37f4a1f9fc14aeb20dedce5f42081daf4900f19b660d4dd84f93201fcfa5fa1390942e0bc824a9dd601f6fb5aade4551ba3f4ac76425978c00e8c0b2df834c7ac20ef8a45f69b1de28ac0c795cf10e872883c0579dc2420333d676d93f21813dc8036b680796761256414f054a9612fe31d5869e874f0a02c5289949c752adfa6822d12eb0ace3d6657442a35e6816b6093ed766fb707733f106f9443b2e6812fd1779acb58eb1b389715f4cf9c53f44f7d1ff95836987e27a990c72dd89b285f5360390233e3df2f5ffec0cd7bd9e269b2586a15bb0d956d3b49044b2a21246161653a1328bde0a7"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "091778caf9a281f7747ca3b52ca65dc82c10a50b7faf767ca5524e65949c5d0b56ddf392f733cea428c38864189504f7781403301caf87aa557f66e29d4bcd5fd97a028047bb09b7c2510981e0d8b227877c4f8e5a2476cc8d37bd5c4aa396532fb9df9c81c76d898d162ed1bf1fecc2f9fccdbf8fa6cd560c91f745f55d018eb7ca550766af7f5c7ceca5b9ad33739cc5f0437f95fe5ca8868a9203c9230af4f6f7e763eed795cefb67301a9156b16aa1dc331b67b98545f242f79c86b4d65ee61bcf84201d3a3a5633136443"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "48e364a8ba004e4cc970f4d06d5fedd2f68a7e868459240c6acd8717e99e1bc9e8d6a87302f0e92b608cbf32bf4cb207dbf446b54b8493e52bdc23b26fbbf4016f072e4bec54e10c398c2d09301655acf04ff11343"}]}]}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x18, 0x6, "9fc30b16931c398fe8dd98b12bc06f50d4041a9a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x570, 0xb, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x6f, 0xd, 0x1, 0x0, "443c42f513b88ee615f9a3c5fa42f0af529ef6e63020b034ddae2a223494123660602543a0abace49f8899a278429e95a17c46a9fcb3237f11f26c10aeee058b5aa77fd9df1618bc2e80ac3aca9cca5db28bdb929dcc736003cd43840a762f0db15d1b911ece4b01969eb4"}, @NFTA_SET_EXPRESSIONS={0x37c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xcc}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x2d0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "9dad88fe1acda45866ea6b25530a09370b09cc110e9242fe59cf3336500e7717a07442403d90d4427947f31c13b9545b7f19f6275ad8aa11157988ebdc7f9fc7b368cdad792ced0a355f00c05b19536feb446d04fef59b2ad715609f9229673a19e893cea65b49f18b9f69ea8154c8dd2f8399da39750530399733d83e12b69a84a1ddfe3ede3858942dd77f207ca9a49dac4a26023d0924b273d45b76378cb73f4b4a4c50a6f7ff0577d01a10ae7ed0305ce59bdb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "481cbcc535be7a32b05de0d8ffe05d1b64e665cd7ad541"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x69, 0x1, "e3faff7c15b0dc1d37bc71e08bf83819425a45e7daeb7b143ec9ec312a98aa2907f2a6dc1d1f3c6ea15508b10128819dfdd527e344c473667a9d5d94b9f4003d0e43b76d91d5619ff8297c6b8ef71b6badc4e4be0bb45fc3edf212f719fe4ee03526818cb9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "ffccb95421060c2cd1724ded7658cdd24cf87d3f2e5c588d3532129a0b845c32d731c86f8b1f84fda9f7259fa048355d8f64ffce5c4c9276a29a05269cbf9f5a6a5690e761b2ca7a18dfba9c75dc4499973c88f26224ecf57b68ba70c31e6c0879c299cf05b196dc8fd169ff0875e68c3dd2a98e2a2a6509133b11a83e6106c6bc8632f20f4a7bd499e340a016dc182d05e74107f5349d0e"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_USERDATA={0x45, 0xd, 0x1, 0x0, "169fe136430e6ebc9cb7ab980738648ab16b72a44f427d23340d4ac8163f7ee99c824730d8fdbebca66caf2e4013887e2aeade70947fe00144ed2bb4c00d9f91ec"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x103, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xed0}, 0x1, 0x0, 0x0, 0x10040}, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000002a00)={0x60000014})
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002a80), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c40)={&(0x7f0000002ac0)={0x168, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31bafcc2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe57c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90e2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x184b9b64}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e7b40b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b9b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf48cfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5324bd78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x512a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f082772}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c2cf14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4445c91d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda80}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab0d647}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x609c7cfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc512}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f57e75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b60}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fab}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0xa}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004811}, 0x4008d)
bind$alg(0xffffffffffffffff, &(0x7f0000002cc0)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002d40)={'team0\x00', <r10=>0x0})
bind$packet(r3, &(0x7f0000002d80)={0x11, 0x3, r10, 0x1, 0x2}, 0x14)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000002dc0)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003080)={r5, 0x0, 0x8f, 0x79, &(0x7f0000002e00)="4e54f2735585931f7e9fb73e8ad519e344d181197869711c132052137d8c60aa70fcbfd6af8b1e3c9c1af0bb76c01cffe4e7a2fc72a10385545f271b8086026562aac9ac65d44162daaab58472e3250d57863e697adfae73c38c4090bc3d961e5d7d783059c07624c881c7106452a872d91b55539b67b8bc1684e284f682dbc39bda3c72a5ef8b0e3d9170c3c8b39e", &(0x7f0000002ec0)=""/121, 0x77179824, 0x0, 0x48, 0xa8, &(0x7f0000002f40)="8b87004719454aedbe5ba6a29d1dcf0d91b456df68fbe50312d1cffa7604e6a2392b45dc114b5ac430b3bcb89b9ae9b5345ad8f913c2c33d0f50eb65cdbdf77fe27052c99a332806", &(0x7f0000002fc0)="fa2a5d92cdcf86fdc5daebdc967fee18a7e6fa518f640c3e5574677383b3e6c152d993694fe5a19fe2cb3bd5260f9ceaa8cd2e6424e367ef4d3c9296618956bd4c989f06da7c660593b541417890b94636189e67fd637357c70167433b4648e6e13176187ddf94bb96e5a317438755f3c65f87e0c3f51df928397bbb148d28cd034afc61809edef35a3ce427b52e9a3f1ceb199575d63ccf0e494904bf46d95256dff7e0cc7874a6", 0xf, 0x0, 0x1}, 0x50)

1.94549975s ago: executing program 1 (id=1170):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) (async)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

1.889817187s ago: executing program 0 (id=1171):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='vnet_tx_trigger\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x321, 0x7, 0x0, 0x9, 0xa, @remote}, 0x10)
r2 = socket$kcm(0xa, 0x3, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x4, 0x4)
socket$packet(0x11, 0x3, 0x300)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x3c}, {0x6}]}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001240)={0x9831, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt(r0, 0x84, 0x20000083, &(0x7f0000000900)="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", 0x1a1)

1.744054053s ago: executing program 4 (id=1172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1602000400000000040000e900000000000000cf", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffdfffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x54}}, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010826bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000030020f0c0041"], 0x34}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="63eced8e46dc0600a3a988425e43", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x4c0040, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.512389281s ago: executing program 0 (id=1173):
socketpair(0x2e, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000012000100000000000200916164921480000000000000000000000000000000000a0000000000000000000000000000004f7b8b755e118f80bc73f9f64a727aa64e849d6dbaf3c605f44593bd6545060cb4f6956f26be620c94e9a2e16cd82abd771443e11ab273aeff34e086fc6e399ebd304bd8c9d64b3b41c0af11eabebcd637119f23b433e8dadb7fc96cfc8654786bc774b5f3b19f1f51df230ce6cf2119b3cd9e8c131906f219c4dbd180b9e77b1d0d6e6da017bcee9c48f865c48d85aae81c5736c81efde3be1f2ae5fb58dc2604f3"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80d0) (async)
r1 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@mcast1}, 0x14)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async)
syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd60003a0400033a00f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) (async)
accept4(r0, &(0x7f0000000200)=@rc, &(0x7f0000000040)=0x80, 0x80000)

1.463801688s ago: executing program 4 (id=1174):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x2}, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@local, r1}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$packet(0x11, 0x0, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x48001, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.462189773s ago: executing program 3 (id=1175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x890)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a300000000018000780050003003b00000006000180080001400000000005000500020000000500010006"], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd27, 0x25dfdc01, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x7, 0x81}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.328576665s ago: executing program 0 (id=1176):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x281c2d61}]}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500200600fe8000000000000000000000000000aafe8000000600000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0aa500ac1414aa00000402"], 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000004d00)=[{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000440)="6f7e6eedfbe2234e36cf758ac1df1902c6", 0x11}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x8015)
recvmmsg$unix(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/226, 0xe2}], 0x1}}], 0x1, 0x5fcf2bd0b4a14a6, 0x0)

1.306592038s ago: executing program 1 (id=1177):
socket$kcm(0x10, 0x2, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e1ffffff000000000000000000"], 0x50)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000002c0)={0x0, 0x2710}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0500"/16], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
mmap(&(0x7f000002a000/0x4000)=nil, 0x4000, 0xf, 0x40010, 0xffffffffffffffff, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x40, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x180000000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000040)=0xc, 0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0)

483.528692ms ago: executing program 4 (id=1178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x40000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000000)=0x6eb7860, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
socket$alg(0x26, 0x5, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4)
r10 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f0000000100)=0x59, 0x4)
listen(r9, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
close(r9)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0xa01, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24008000)

477.261708ms ago: executing program 1 (id=1179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4de62339}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) (rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r4)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x810)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x147}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf43}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c402}, 0x4004040)

368.323961ms ago: executing program 0 (id=1180):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000012c0)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe)
listen(r0, 0xa1)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0xf, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r4 = accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c, 0x800)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4000040a}, 0x7d)
sendto$inet6(r2, &(0x7f0000000180)="a6e2976b5c", 0x5, 0x4048011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f00000000c0)=0x40)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
sendmmsg$inet6(r8, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="d4", 0x1}], 0x1}}], 0x1, 0x800)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000680)={r10, 0xd, 0x1, '5'}, 0x9)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000340)={r10, 0x9, 0xc22fb08e769c39f5}, &(0x7f0000000380)=0x18)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r7, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20ef00000d14010028bd7000fbdbdf2508000300020000000800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8890)

259.969296ms ago: executing program 4 (id=1181):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a00000c001600fad0000000000000060001000400000008000b"], 0x48}}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

211.728026ms ago: executing program 1 (id=1182):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x284, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x270, 0x1, [@m_skbmod={0x184, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xe1, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace9aaf8a1a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x3c, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0xe, 0x6, "be33fb00003d2fb2b459"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xac, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0xffff, 0x0, 0x5, 0xc3cd}}]}, {0x65, 0x6, "2d3226d2e3c57ead557080202f648bcdfedc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x284}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

175.804419ms ago: executing program 3 (id=1183):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='vnet_tx_trigger\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x321, 0x7, 0x0, 0x9, 0xa, @remote}, 0x10)
r2 = socket$kcm(0xa, 0x3, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x4, 0x4)
socket$packet(0x11, 0x3, 0x300)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x3c}, {0x6}]}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001240)={0x9831, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt(r0, 0x84, 0x20000083, &(0x7f0000000900)="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", 0x1a1)

55.855841ms ago: executing program 4 (id=1184):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20)
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=""/147, 0x93}, 0x10100)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x130, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0)

1.8907ms ago: executing program 1 (id=1185):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)

0s ago: executing program 3 (id=1186):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) (async)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000380)=""/73, 0x49}], 0x5}}], 0x2, 0x10002, 0x0) (async)
r2 = socket$inet6(0xa, 0x80001, 0x100)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000000)={0x22, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}, 0x1}, 0x53) (async)
syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x8902, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

40] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.240508][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.247796][ T5840] bridge_slave_1: entered allmulticast mode
[   60.255259][ T5840] bridge_slave_1: entered promiscuous mode
[   60.290661][ T5828] team0: Port device team_slave_0 added
[   60.309634][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.335525][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.342497][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.371650][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.384604][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.391568][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.417728][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.430858][ T5828] team0: Port device team_slave_1 added
[   60.445500][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.466317][ T5835] team0: Port device team_slave_0 added
[   60.507360][ T5835] team0: Port device team_slave_1 added
[   60.513305][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.520641][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.528082][ T5841] bridge_slave_0: entered allmulticast mode
[   60.535962][ T5841] bridge_slave_0: entered promiscuous mode
[   60.546354][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.553328][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.579536][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.592777][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.603784][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.630317][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.644520][ T5840] team0: Port device team_slave_0 added
[   60.656794][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.663919][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.671418][ T5841] bridge_slave_1: entered allmulticast mode
[   60.678182][ T5841] bridge_slave_1: entered promiscuous mode
[   60.706612][ T5840] team0: Port device team_slave_1 added
[   60.741802][ T5829] hsr_slave_0: entered promiscuous mode
[   60.748545][ T5829] hsr_slave_1: entered promiscuous mode
[   60.771833][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.779103][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.805260][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.818515][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.830510][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.850294][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.857416][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.883915][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.895636][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.902603][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.929511][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.969465][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.976591][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.002675][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.030232][ T5828] hsr_slave_0: entered promiscuous mode
[   61.036586][ T5828] hsr_slave_1: entered promiscuous mode
[   61.043003][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.051137][ T5828] Cannot create hsr debugfs directory
[   61.073704][ T5841] team0: Port device team_slave_0 added
[   61.080827][   T54] Bluetooth: hci1: command tx timeout
[   61.126974][ T5841] team0: Port device team_slave_1 added
[   61.154178][   T54] Bluetooth: hci4: command tx timeout
[   61.154349][ T5844] Bluetooth: hci3: command tx timeout
[   61.160019][   T54] Bluetooth: hci2: command tx timeout
[   61.165776][ T5844] Bluetooth: hci0: command tx timeout
[   61.210417][ T5840] hsr_slave_0: entered promiscuous mode
[   61.218987][ T5840] hsr_slave_1: entered promiscuous mode
[   61.225345][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.232914][ T5840] Cannot create hsr debugfs directory
[   61.255162][ T5835] hsr_slave_0: entered promiscuous mode
[   61.261497][ T5835] hsr_slave_1: entered promiscuous mode
[   61.268622][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.276371][ T5835] Cannot create hsr debugfs directory
[   61.293110][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.300176][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.326417][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.372493][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.379559][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.405921][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.530549][ T5841] hsr_slave_0: entered promiscuous mode
[   61.540992][ T5841] hsr_slave_1: entered promiscuous mode
[   61.547711][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.555624][ T5841] Cannot create hsr debugfs directory
[   61.680980][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.702308][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.723259][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.747950][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.791044][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.802035][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.820666][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.831309][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.897225][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.911019][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.921099][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.952883][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.972930][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.003499][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.019174][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.048839][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.092802][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.103324][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.154871][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.163690][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.182426][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.221379][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.242990][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   62.270202][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.277541][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.303172][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   62.311945][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.319108][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.383345][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.396782][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.403867][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.430088][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.437284][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.476036][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.501272][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   62.525712][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.551336][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.588741][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.595950][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.622906][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.630090][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.650379][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.693399][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   62.719244][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   62.740862][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.748459][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.773321][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.780478][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.815765][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.822920][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.836735][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.843842][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.902279][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.062352][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.076498][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.109359][ T5828] veth0_vlan: entered promiscuous mode
[   63.122345][ T5828] veth1_vlan: entered promiscuous mode
[   63.155420][ T5844] Bluetooth: hci1: command tx timeout
[   63.212846][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.235978][ T5844] Bluetooth: hci4: command tx timeout
[   63.236865][ T5838] Bluetooth: hci2: command tx timeout
[   63.241423][ T5844] Bluetooth: hci3: command tx timeout
[   63.247647][   T54] Bluetooth: hci0: command tx timeout
[   63.272015][ T5828] veth0_macvtap: entered promiscuous mode
[   63.293696][ T5829] veth0_vlan: entered promiscuous mode
[   63.311359][ T5828] veth1_macvtap: entered promiscuous mode
[   63.337536][ T5829] veth1_vlan: entered promiscuous mode
[   63.371179][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.412193][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.430248][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.449095][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.462482][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.482352][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.491964][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.510809][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.547824][ T5835] veth0_vlan: entered promiscuous mode
[   63.601681][ T5835] veth1_vlan: entered promiscuous mode
[   63.640216][ T5829] veth0_macvtap: entered promiscuous mode
[   63.684993][ T5829] veth1_macvtap: entered promiscuous mode
[   63.695830][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.709385][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.779708][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.788769][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.803005][ T5835] veth0_macvtap: entered promiscuous mode
[   63.812601][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.823694][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.835631][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.849963][ T5841] veth0_vlan: entered promiscuous mode
[   63.859021][ T5835] veth1_macvtap: entered promiscuous mode
[   63.870962][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.883345][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.898580][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.936774][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.952532][ T5840] veth0_vlan: entered promiscuous mode
[   63.963176][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.972367][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.982112][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.991288][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.004295][ T5841] veth1_vlan: entered promiscuous mode
[   64.035445][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.057961][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.073779][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.090860][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.128457][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.144677][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.163587][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.175028][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.196616][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.214093][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.225798][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.235120][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.243832][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.253064][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.273332][ T5840] veth1_vlan: entered promiscuous mode
[   64.318518][ T5921] netlink: 'syz.2.7': attribute type 3 has an invalid length.
[   64.338714][ T5921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7'.
[   64.365998][ T5841] veth0_macvtap: entered promiscuous mode
[   64.413067][ T5840] veth0_macvtap: entered promiscuous mode
[   64.419581][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.430797][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.436211][ T5841] veth1_macvtap: entered promiscuous mode
[   64.458334][ T5840] veth1_macvtap: entered promiscuous mode
[   64.566729][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.584647][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.596732][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.607785][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.617769][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.628335][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.639380][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.648333][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.651165][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.667723][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.683872][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.694749][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.706293][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.723790][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.734410][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.748174][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.760259][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.782359][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.801436][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.819589][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.829882][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.848201][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.858646][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.869590][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.879811][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.890309][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.902020][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.931645][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.940660][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.949888][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.959037][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.975479][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.002938][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.015919][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.026900][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.037028][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.047515][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.057381][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.068176][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.079909][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.096369][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.106729][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.144262][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.153023][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.170756][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.192645][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.244533][   T54] Bluetooth: hci1: command tx timeout
[   65.315015][   T54] Bluetooth: hci3: command tx timeout
[   65.321162][ T5838] Bluetooth: hci0: command tx timeout
[   65.327227][ T5144] Bluetooth: hci2: command tx timeout
[   65.329751][ T5844] Bluetooth: hci4: command tx timeout
[   65.367404][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.393706][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.451757][ T5938] netlink: 'syz.3.11': attribute type 1 has an invalid length.
[   65.570451][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.583615][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.633538][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.669152][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.808826][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'.
[   65.925650][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.955243][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.114575][ T5958] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16'.
[   66.231496][ T5962] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[   66.745273][ T5987] bridge_slave_0: left allmulticast mode
[   66.751145][ T5987] bridge_slave_0: left promiscuous mode
[   66.762686][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.809805][ T5987] bridge_slave_1: left allmulticast mode
[   66.818805][ T5987] bridge_slave_1: left promiscuous mode
[   66.827276][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.877708][ T5987] bond0: (slave bond_slave_0): Releasing backup interface
[   66.901933][ T5987] bond0: (slave bond_slave_1): Releasing backup interface
[   66.990787][ T5987] team0: Port device team_slave_0 removed
[   67.027860][ T5987] team0: Port device team_slave_1 removed
[   67.038325][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.046489][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.058390][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.069199][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.099090][ T5991] team0: Mode changed to "loadbalance"
[   67.114502][ T5998] netlink: 'syz.3.25': attribute type 11 has an invalid length.
[   67.316878][ T5844] Bluetooth: hci1: command tx timeout
[   67.408971][ T5844] Bluetooth: hci3: command tx timeout
[   67.408996][   T54] Bluetooth: hci4: command tx timeout
[   67.414447][ T5844] Bluetooth: hci0: command tx timeout
[   67.414480][ T5844] Bluetooth: hci2: command tx timeout
[   67.542424][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.614055][ T6015] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   67.635884][ T6015] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   67.647449][ T6016] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   67.863283][ T6029] Zero length message leads to an empty skb
[   67.884576][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'.
[   68.045829][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.053691][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.182415][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.197253][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.210500][ T6042] netlink: 'syz.3.38': attribute type 4 has an invalid length.
[   68.273106][ T6013] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.284149][ T6013] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.294651][ T6013] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.303548][ T6013] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.567845][ T6047] netlink: 56 bytes leftover after parsing attributes in process `syz.4.41'.
[   68.822012][ T6054] bond0: entered allmulticast mode
[   68.893480][ T6070] netlink: 'syz.1.45': attribute type 1 has an invalid length.
[   69.024990][ T6070] netlink: 'syz.1.45': attribute type 2 has an invalid length.
[   69.134572][ T6077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.363693][ T6086] sctp: [Deprecated]: syz.0.47 (pid 6086) Use of int in max_burst socket option deprecated.
[   69.363693][ T6086] Use struct sctp_assoc_value instead
[   69.472019][ T6094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.616511][ T6106] netlink: 'syz.3.54': attribute type 10 has an invalid length.
[   69.645752][ T6094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.669185][ T6109] netlink: 64 bytes leftover after parsing attributes in process `syz.2.55'.
[   69.697973][ T6106] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   69.813356][ T6094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.815592][ T6114] xt_TCPMSS: Only works on TCP SYN packets
[   69.954772][ T6094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.043585][ T6117] warning: `syz.3.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.155298][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'.
[   70.164341][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'.
[   70.173164][ T6132] netlink: 72 bytes leftover after parsing attributes in process `syz.3.61'.
[   70.281117][ T6094] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.351960][ T6094] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.442027][ T6094] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.571496][ T6094] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.600662][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'.
[   70.695080][ T6161] syz.4.65 uses obsolete (PF_INET,SOCK_PACKET)
[   70.931048][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'.
[   70.976821][ T6169] netlink: 'syz.3.68': attribute type 5 has an invalid length.
[   71.098281][ T6169] ip6erspan0: entered promiscuous mode
[   71.179666][ T6173] ip6gre1: entered promiscuous mode
[   71.209771][ T6173] ip6gre1: entered allmulticast mode
[   71.298287][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   71.653476][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[   71.662943][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[   71.825291][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'.
[   71.869287][ T6190] ipvlan2: entered promiscuous mode
[   71.917211][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'.
[   71.918371][ T6190] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   74.126383][ T6218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.240558][ T6220] sch_tbf: burst 3631 is lower than device lo mtu (65550) !
[   74.279621][ T6222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.927089][ T6248] dvmrp8: entered allmulticast mode
[   75.166863][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'.
[   75.252613][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'.
[   75.480022][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   75.705133][ T6290] netlink: 'syz.3.91': attribute type 16 has an invalid length.
[   75.735837][ T6290] netlink: 'syz.3.91': attribute type 17 has an invalid length.
[   75.746013][ T6236] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.82'.
[   75.784874][ T6236] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.811759][ T6296] netlink: 14 bytes leftover after parsing attributes in process `syz.0.94'.
[   75.830896][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95'.
[   75.911860][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   75.927074][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.934757][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.943583][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   76.023529][ T6236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.82'.
[   76.288051][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.314926][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.337888][ T6316] netlink: ct family unspecified
[   76.347045][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.481903][ T6290] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.501143][ T6290] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.519455][ T6290] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.530688][ T6290] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.623263][ T6290] ip6erspan0: left promiscuous mode
[   76.641331][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.650257][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.658748][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.666911][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.775211][  T973] cfg80211: failed to load regulatory.db
[   77.067657][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.97'.
[   77.411599][ T6361] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   77.451631][ T6368] netlink: 'syz.2.103': attribute type 12 has an invalid length.
[   78.504963][ T6414] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[   78.640263][ T6419] nbd: socks must be embedded in a SOCK_ITEM attr
[   79.287632][ T6446] netlink: 'syz.3.122': attribute type 3 has an invalid length.
[   79.327817][ T6444] Cannot find del_set index 4 as target
[   79.360369][ T6449] macvlan2: entered promiscuous mode
[   79.390725][ T6449] bridge0: entered promiscuous mode
[   79.417581][ T6449] bridge0: port 3(macvlan2) entered blocking state
[   79.435164][ T6449] bridge0: port 3(macvlan2) entered disabled state
[   79.470685][ T6449] macvlan2: entered allmulticast mode
[   79.495662][ T6449] bridge0: entered allmulticast mode
[   79.557485][ T6449] macvlan2: left allmulticast mode
[   79.563008][ T6449] bridge0: left allmulticast mode
[   79.617906][ T6449] bridge0: left promiscuous mode
[   79.942116][ T6474] syzkaller0: entered promiscuous mode
[   79.950467][ T6474] syzkaller0: entered allmulticast mode
[   80.067017][ T6478] dvmrp0: entered allmulticast mode
[   80.113630][ T6474] netlink: 'syz.0.128': attribute type 5 has an invalid length.
[   80.443437][ T6501] __nla_validate_parse: 5 callbacks suppressed
[   80.443458][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'.
[   80.886734][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'.
[   81.130820][ T6537] netlink: 248 bytes leftover after parsing attributes in process `syz.4.142'.
[   81.209023][ T6541] netlink: 136 bytes leftover after parsing attributes in process `syz.3.144'.
[   81.251561][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'.
[   81.511817][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'.
[   81.526855][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'.
[   81.740286][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'.
[   81.745362][ T6580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.759592][ T6574] veth2: entered allmulticast mode
[   82.006290][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'.
[   82.052293][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.159544][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   82.185862][ T6592] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   82.209252][ T6607] x_tables: duplicate underflow at hook 1
[   82.349656][ T6614] netlink: 'syz.0.162': attribute type 16 has an invalid length.
[   82.357662][ T6614] netlink: 'syz.0.162': attribute type 17 has an invalid length.
[   82.365549][ T6614] netlink: 'syz.0.162': attribute type 27 has an invalid length.
[   82.440352][ T6620] x_tables: duplicate underflow at hook 2
[   82.987118][ T6637] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.001957][ T6637] team0: Port device bond1 added
[   83.482094][ T6671] bpq0: entered allmulticast mode
[   84.679813][ T6734] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   84.943363][ T6746] bridge_slave_0: left allmulticast mode
[   84.971901][ T6746] bridge_slave_0: left promiscuous mode
[   85.007037][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.040169][ T6746] bridge_slave_1: left allmulticast mode
[   85.046230][ T6746] bridge_slave_1: left promiscuous mode
[   85.052184][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.062808][ T6751] netlink: 'syz.3.195': attribute type 2 has an invalid length.
[   85.079203][ T6746] bond0: (slave bond_slave_0): Releasing backup interface
[   85.090706][ T6746] bond0: (slave bond_slave_1): Releasing backup interface
[   85.126535][ T6746] team0: Port device team_slave_0 removed
[   85.146590][ T6746] team0: Port device team_slave_1 removed
[   85.154657][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.164014][ T6746] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.173169][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.183149][ T6746] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.208696][ T6746] team0: Port device bond1 removed
[   85.468834][ T6765] netlink: 'syz.1.198': attribute type 3 has an invalid length.
[   85.905698][ T6788] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   85.952808][ T6788] x_tables: ip_tables: osf match: only valid for protocol 6
[   86.516602][ T6819] netlink: 'syz.3.210': attribute type 16 has an invalid length.
[   86.525456][ T6819] netlink: 'syz.3.210': attribute type 2 has an invalid length.
[   86.533322][ T6819] __nla_validate_parse: 10 callbacks suppressed
[   86.533338][ T6819] netlink: 62854 bytes leftover after parsing attributes in process `syz.3.210'.
[   86.607757][ T6804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.825872][ T6804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.087683][ T6804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.222991][ T6848] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   87.253450][ T6848] netlink: 224 bytes leftover after parsing attributes in process `syz.1.215'.
[   87.272952][ T6804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.545540][ T6865] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[   87.556982][ T6804] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.621017][ T6869] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[   87.623323][ T6804] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.641060][ T6865] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   87.775218][ T6804] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.845083][ T6804] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.919471][ T6884] netlink: 'syz.3.225': attribute type 1 has an invalid length.
[   87.952537][ T6884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.225'.
[   88.059594][ T6888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   88.237699][ T6897] netlink: 44 bytes leftover after parsing attributes in process `syz.4.230'.
[   88.259669][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'.
[   88.280005][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.314823][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.607738][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'.
[   88.620067][ T6912] netlink: 'syz.4.232': attribute type 4 has an invalid length.
[   88.873660][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'.
[   88.925384][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'.
[   88.971554][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'.
[   88.986816][ T6924] netlink: 76 bytes leftover after parsing attributes in process `syz.4.234'.
[   89.076119][ T6924] netlink: 'syz.4.234': attribute type 3 has an invalid length.
[   89.795593][ T6958] bridge_slave_1: left allmulticast mode
[   89.811816][ T6958] bridge_slave_1: left promiscuous mode
[   89.844392][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.881122][ T6958] bridge_slave_0: left allmulticast mode
[   89.898342][ T6958] bridge_slave_0: left promiscuous mode
[   89.908229][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.644351][ T7007] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   90.652058][ T7007] netlink: 'syz.2.250': attribute type 2 has an invalid length.
[   90.661903][ T7006] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   90.669914][ T7006] netlink: 'syz.2.250': attribute type 2 has an invalid length.
[   90.738345][ T7006] pim6reg1: entered allmulticast mode
[   91.215015][ T7024] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.262994][ T7024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.907308][ T7041] __nla_validate_parse: 8 callbacks suppressed
[   91.907326][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.257'.
[   92.060379][ T7049] netlink: 'syz.0.259': attribute type 10 has an invalid length.
[   92.096905][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'.
[   92.111264][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.260'.
[   92.485787][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'.
[   92.582121][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'.
[   92.628728][ T7071] FAULT_INJECTION: forcing a failure.
[   92.628728][ T7071] name failslab, interval 1, probability 0, space 0, times 1
[   92.650104][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.4.265 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[   92.660758][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   92.670832][ T7071] Call Trace:
[   92.674117][ T7071]  <TASK>
[   92.677050][ T7071]  dump_stack_lvl+0x241/0x360
[   92.681749][ T7071]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.686949][ T7071]  ? __pfx__printk+0x10/0x10
[   92.691543][ T7071]  ? __kmalloc_cache_noprof+0x48/0x390
[   92.697008][ T7071]  ? __pfx___might_resched+0x10/0x10
[   92.702290][ T7071]  ? arch_stack_walk+0xfd/0x150
[   92.707142][ T7071]  should_fail_ex+0x3b0/0x4e0
[   92.711826][ T7071]  should_failslab+0xac/0x100
[   92.716507][ T7071]  __kmalloc_cache_noprof+0x70/0x390
[   92.721794][ T7071]  ? rtnl_newlink+0x131/0x2150
[   92.726559][ T7071]  rtnl_newlink+0x131/0x2150
[   92.731159][ T7071]  ? kasan_save_track+0x51/0x80
[   92.736009][ T7071]  ? kasan_save_free_info+0x40/0x50
[   92.741206][ T7071]  ? __kasan_slab_free+0x59/0x70
[   92.746161][ T7071]  ? __pfx_rtnl_newlink+0x10/0x10
[   92.751181][ T7071]  ? __netlink_deliver_tap+0x56b/0x7f0
[   92.756645][ T7071]  ? __pfx_validate_chain+0x10/0x10
[   92.761846][ T7071]  ? __sock_sendmsg+0x221/0x270
[   92.766717][ T7071]  ? ____sys_sendmsg+0x52a/0x7e0
[   92.771756][ T7071]  ? __sys_sendmsg+0x269/0x350
[   92.776524][ T7071]  ? do_syscall_64+0xf3/0x230
[   92.781201][ T7071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.787369][ T7071]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   92.793348][ T7071]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   92.799680][ T7071]  ? mark_lock+0x9a/0x360
[   92.804012][ T7071]  ? __lock_acquire+0x1397/0x2100
[   92.809051][ T7071]  ? rcu_read_unlock+0x87/0xa0
[   92.813811][ T7071]  ? __dev_queue_xmit+0x1775/0x3f50
[   92.819005][ T7071]  ? __pfx_lock_release+0x10/0x10
[   92.824034][ T7071]  ? __pfx_rtnl_newlink+0x10/0x10
[   92.829143][ T7071]  rtnetlink_rcv_msg+0x791/0xcf0
[   92.834078][ T7071]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[   92.839190][ T7071]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   92.844682][ T7071]  ? ref_tracker_free+0x643/0x7e0
[   92.849794][ T7071]  netlink_rcv_skb+0x1e3/0x430
[   92.854557][ T7071]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   92.860015][ T7071]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   92.865308][ T7071]  ? netlink_deliver_tap+0x2e/0x1b0
[   92.870507][ T7071]  netlink_unicast+0x7f6/0x990
[   92.875280][ T7071]  ? __pfx_netlink_unicast+0x10/0x10
[   92.880567][ T7071]  ? __virt_addr_valid+0x45f/0x530
[   92.885679][ T7071]  ? __phys_addr_symbol+0x2f/0x70
[   92.890700][ T7071]  ? __check_object_size+0x47a/0x730
[   92.895988][ T7071]  netlink_sendmsg+0x8e4/0xcb0
[   92.900755][ T7071]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.906039][ T7071]  ? aa_sock_msg_perm+0x91/0x160
[   92.910984][ T7071]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.916293][ T7071]  __sock_sendmsg+0x221/0x270
[   92.920977][ T7071]  ____sys_sendmsg+0x52a/0x7e0
[   92.925769][ T7071]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.931049][ T7071]  ? __fget_files+0x2a/0x410
[   92.935643][ T7071]  ? __fget_files+0x2a/0x410
[   92.940236][ T7071]  __sys_sendmsg+0x269/0x350
[   92.944824][ T7071]  ? __pfx_lock_release+0x10/0x10
[   92.949846][ T7071]  ? __pfx___sys_sendmsg+0x10/0x10
[   92.954982][ T7071]  ? __pfx_vfs_write+0x10/0x10
[   92.959790][ T7071]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   92.966128][ T7071]  ? do_syscall_64+0x100/0x230
[   92.970904][ T7071]  ? do_syscall_64+0xb6/0x230
[   92.975585][ T7071]  do_syscall_64+0xf3/0x230
[   92.980087][ T7071]  ? clear_bhb_loop+0x35/0x90
[   92.984763][ T7071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.990652][ T7071] RIP: 0033:0x7f62aaf85d29
[   92.995073][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.014679][ T7071] RSP: 002b:00007f62abdd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.023093][ T7071] RAX: ffffffffffffffda RBX: 00007f62ab175fa0 RCX: 00007f62aaf85d29
[   93.031059][ T7071] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[   93.039023][ T7071] RBP: 00007f62abdd6090 R08: 0000000000000000 R09: 0000000000000000
[   93.046989][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.054962][ T7071] R13: 0000000000000000 R14: 00007f62ab175fa0 R15: 00007ffcfa0abb98
[   93.062943][ T7071]  </TASK>
[   93.299437][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.313055][ T7081] Cannot find add_set index 0 as target
[   93.325999][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.340594][ T7066] bond0 (unregistering): Released all slaves
[   93.358858][ T7077] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[   93.603757][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'.
[   93.674348][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'.
[   93.969841][ T7117] netlink: 'syz.0.278': attribute type 3 has an invalid length.
[   93.979053][ T7120] FAULT_INJECTION: forcing a failure.
[   93.979053][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   94.027913][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.3.279 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[   94.038569][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   94.048652][ T7120] Call Trace:
[   94.051961][ T7120]  <TASK>
[   94.054923][ T7120]  dump_stack_lvl+0x241/0x360
[   94.059633][ T7120]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.064865][ T7120]  ? __pfx__printk+0x10/0x10
[   94.069494][ T7120]  ? __pfx_lock_release+0x10/0x10
[   94.074548][ T7120]  ? __lock_acquire+0x1397/0x2100
[   94.076953][ T7125] xt_addrtype: ipv6 does not support BROADCAST matching
[   94.079744][ T7120]  should_fail_ex+0x3b0/0x4e0
[   94.091407][ T7120]  _copy_from_user+0x2f/0xc0
[   94.096033][ T7120]  kstrtouint_from_user+0xc6/0x190
[   94.101181][ T7120]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   94.106945][ T7120]  ? __pfx_lock_acquire+0x10/0x10
[   94.112013][ T7120]  proc_fail_nth_write+0xaa/0x2d0
[   94.117068][ T7120]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[   94.122998][ T7120]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   94.128672][ T7120]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   94.134338][ T7120]  vfs_write+0x2a3/0xd30
[   94.138621][ T7120]  ? __pfx_vfs_write+0x10/0x10
[   94.143410][ T7120]  ? __fget_files+0x2a/0x410
[   94.148035][ T7120]  ? __fget_files+0x395/0x410
[   94.152743][ T7120]  ? __fget_files+0x2a/0x410
[   94.157379][ T7120]  ksys_write+0x18f/0x2b0
[   94.161742][ T7120]  ? __pfx_ksys_write+0x10/0x10
[   94.166621][ T7120]  ? do_syscall_64+0x100/0x230
[   94.171419][ T7120]  ? do_syscall_64+0xb6/0x230
[   94.176126][ T7120]  do_syscall_64+0xf3/0x230
[   94.180662][ T7120]  ? clear_bhb_loop+0x35/0x90
[   94.185376][ T7120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.191296][ T7120] RIP: 0033:0x7f8e4cb847df
[   94.195743][ T7120] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   94.201448][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'.
[   94.215357][ T7120] RSP: 002b:00007f8e4d970030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   94.215389][ T7120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e4cb847df
[   94.215402][ T7120] RDX: 0000000000000001 RSI: 00007f8e4d9700a0 RDI: 0000000000000006
[   94.215413][ T7120] RBP: 00007f8e4d970090 R08: 0000000000000000 R09: 0000000000000000
[   94.215425][ T7120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   94.215436][ T7120] R13: 0000000000000000 R14: 00007f8e4cd75fa0 R15: 00007ffd8e27d098
[   94.215464][ T7120]  </TASK>
[   94.389866][ T7133] xt_l2tp: v2 sid > 0xffff: 262144
[   94.686907][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'.
[   94.732264][ T7143] erspan0: entered promiscuous mode
[   94.738148][ T7143] macvtap1: entered promiscuous mode
[   94.743736][ T7143] macvtap1: entered allmulticast mode
[   94.749750][ T7143] erspan0: entered allmulticast mode
[   94.757169][ T7146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.767839][ T7146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.778606][ T7146] hsr0: entered promiscuous mode
[   94.785227][ T7146] hsr0: entered allmulticast mode
[   94.810100][ T7146] hsr_slave_0: entered allmulticast mode
[   94.844275][ T7146] hsr_slave_1: entered allmulticast mode
[   94.922881][ T7148] erspan0: left allmulticast mode
[   94.931990][ T7148] erspan0: left promiscuous mode
[   95.039617][ T7158] netlink: 'syz.4.292': attribute type 3 has an invalid length.
[   95.077834][ T7163] Bluetooth: MGMT ver 1.23
[   95.240936][ T7147] netlink: 112 bytes leftover after parsing attributes in process `syz.1.290'.
[   96.045411][ T5838] Bluetooth: hci4: command 0x0405 tx timeout
[   96.122157][ T7215] netlink: 'syz.4.305': attribute type 3 has an invalid length.
[   96.336090][ T7226] netlink: 'syz.4.310': attribute type 10 has an invalid length.
[   96.389834][ T7226] macvlan0: entered allmulticast mode
[   96.410065][ T7226] veth1_vlan: entered allmulticast mode
[   96.419830][ T7226] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   96.877057][ T7250] netlink: 'syz.4.314': attribute type 10 has an invalid length.
[   96.926439][ T7261] __nla_validate_parse: 8 callbacks suppressed
[   96.926461][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'.
[   96.928670][ T7250] batman_adv: batadv0: Adding interface: team0
[   96.941689][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'.
[   97.037689][ T7250] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.098045][ T7250] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   97.129347][ T7261] bridge0: entered promiscuous mode
[   97.159036][ T7261] bridge0: left promiscuous mode
[   97.669413][ T7298] netlink: 104 bytes leftover after parsing attributes in process `syz.3.320'.
[   97.836645][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'.
[   97.991332][ T7312] xt_HMARK: spi-set and port-set can't be combined
[   98.010106][ T7307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   98.060032][ T7307] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   98.459649][ T7326] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.325'.
[   98.757785][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'.
[   98.796873][ T7332] netlink: 228 bytes leftover after parsing attributes in process `syz.0.326'.
[   98.831737][ T7332] netlink: 72 bytes leftover after parsing attributes in process `syz.0.326'.
[   98.874762][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.327'.
[   98.910980][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'.
[  100.492121][ T7416] netlink: 'syz.0.341': attribute type 30 has an invalid length.
[  100.971954][ T7437] vlan2: entered promiscuous mode
[  101.002531][ T7437] syz_tun: entered promiscuous mode
[  101.052669][ T7437] syz_tun: left promiscuous mode
[  101.590299][ T7460] tipc: Started in network mode
[  101.646459][ T7460] tipc: Node identity ., cluster identity 4711
[  101.652719][ T7460] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  101.995584][ T7484] sctp: [Deprecated]: syz.0.359 (pid 7484) Use of int in max_burst socket option deprecated.
[  101.995584][ T7484] Use struct sctp_assoc_value instead
[  102.150955][ T7490] ax25_connect(): syz.1.366 uses autobind, please contact jreuter@yaina.de
[  102.419106][ T7509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  102.765449][ T7522] __nla_validate_parse: 12 callbacks suppressed
[  102.765469][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'.
[  102.830845][ T7522] bond2: entered promiscuous mode
[  102.840067][ T7522] gretap1: entered promiscuous mode
[  102.850792][ T7522] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  103.263641][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[  103.470333][ T7551] netlink: 76 bytes leftover after parsing attributes in process `syz.1.381'.
[  103.518816][ T7554] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  103.843123][ T7569] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  103.937313][ T7572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.387'.
[  104.315452][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  104.325841][ T7594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'.
[  104.341674][ T7594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'.
[  104.493897][ T7578] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.506422][ T7578] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.522231][ T7578] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.550921][ T7578] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.721500][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.783047][ T7582] 8021q: adding VLAN 0 to HW filter on device team0
[  104.849891][ T7582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.924187][ T7604] netlink: 'syz.2.395': attribute type 6 has an invalid length.
[  104.940980][ T7604] netlink: 'syz.2.395': attribute type 7 has an invalid length.
[  104.974383][ T7604] netlink: 'syz.2.395': attribute type 8 has an invalid length.
[  105.000553][ T7606] netlink: 'syz.2.395': attribute type 6 has an invalid length.
[  105.044194][ T7606] netlink: 'syz.2.395': attribute type 7 has an invalid length.
[  105.061158][ T7606] netlink: 'syz.2.395': attribute type 8 has an invalid length.
[  105.101056][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[  105.155015][ T7616] bpq0: left allmulticast mode
[  105.261953][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  105.274224][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  105.914855][ T7646] netlink: 'syz.4.410': attribute type 1 has an invalid length.
[  106.958854][ T7683] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[  107.594906][ T7720] xt_HMARK: spi-set and port-set can't be combined
[  107.857444][ T7730] __nla_validate_parse: 7 callbacks suppressed
[  107.857465][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'.
[  107.875828][ T7734] netlink: 'syz.0.436': attribute type 3 has an invalid length.
[  107.883515][ T7734] netlink: 'syz.0.436': attribute type 1 has an invalid length.
[  108.023047][ T7743] bridge_slave_0: left allmulticast mode
[  108.031078][ T7743] bridge_slave_0: left promiscuous mode
[  108.038238][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.072830][ T7743] bridge_slave_1: left allmulticast mode
[  108.083826][ T7743] bridge_slave_1: left promiscuous mode
[  108.096438][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.167730][ T7743] team0: Port device team_slave_0 removed
[  108.182320][ T7743] team0: Port device team_slave_1 removed
[  108.210621][ T7743] macvtap1: left promiscuous mode
[  108.856745][ T7775] openvswitch: netlink: IP tunnel dst address not specified
[  108.923580][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[  108.944100][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.443'.
[  108.986037][ T7773] vlan2: entered allmulticast mode
[  109.065684][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'.
[  109.086798][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'.
[  109.128798][ T7785] ax25_connect(): syz.4.446 uses autobind, please contact jreuter@yaina.de
[  109.162626][ T7789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.447'.
[  109.461841][ T7798] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.497169][ T7798] netlink: 'syz.0.449': attribute type 10 has an invalid length.
[  109.594529][ T7798] veth0_macvtap: left promiscuous mode
[  109.657910][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.450'.
[  110.628830][ T7824] IPv6: addrconf: prefix option has invalid lifetime
[  110.675756][ T7827] netlink: 'syz.3.458': attribute type 21 has an invalid length.
[  110.813589][ T7830] netlink: 56 bytes leftover after parsing attributes in process `syz.3.460'.
[  110.886067][ T5206] udevd[5206]: worker [5831] terminated by signal 33 (Unknown signal 33)
[  110.895685][ T5206] udevd[5206]: worker [5831] failed while handling '/devices/virtual/block/loop3'
[  111.023422][ T7738] Set syz1 is full, maxelem 65536 reached
[  111.206551][ T7849] SET target dimension over the limit!
[  111.747832][ T7869] FAULT_INJECTION: forcing a failure.
[  111.747832][ T7869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.761595][ T7869] CPU: 1 UID: 0 PID: 7869 Comm: syz.3.473 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  111.772239][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  111.782317][ T7869] Call Trace:
[  111.785623][ T7869]  <TASK>
[  111.788598][ T7869]  dump_stack_lvl+0x241/0x360
[  111.793315][ T7869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.798548][ T7869]  ? __pfx__printk+0x10/0x10
[  111.803185][ T7869]  ? __pfx_lock_release+0x10/0x10
[  111.808243][ T7869]  ? __lock_acquire+0x1397/0x2100
[  111.813284][ T7869]  should_fail_ex+0x3b0/0x4e0
[  111.817976][ T7869]  _copy_from_user+0x2f/0xc0
[  111.822575][ T7869]  dccp_setsockopt+0x32c/0x12c0
[  111.827439][ T7869]  ? __pfx_dccp_setsockopt+0x10/0x10
[  111.832731][ T7869]  ? __pfx_lock_acquire+0x10/0x10
[  111.837756][ T7869]  ? aa_sock_opt_perm+0x79/0x120
[  111.842697][ T7869]  ? sock_common_setsockopt+0x37/0xc0
[  111.848076][ T7869]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  111.853989][ T7869]  do_sock_setsockopt+0x3af/0x720
[  111.859023][ T7869]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  111.864573][ T7869]  ? __fget_files+0x395/0x410
[  111.869252][ T7869]  ? __fget_files+0x2a/0x410
[  111.873849][ T7869]  __x64_sys_setsockopt+0x1ee/0x280
[  111.879050][ T7869]  do_syscall_64+0xf3/0x230
[  111.883564][ T7869]  ? clear_bhb_loop+0x35/0x90
[  111.888243][ T7869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.894138][ T7869] RIP: 0033:0x7f8e4cb85d29
[  111.898550][ T7869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.918155][ T7869] RSP: 002b:00007f8e4d970038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  111.926576][ T7869] RAX: ffffffffffffffda RBX: 00007f8e4cd75fa0 RCX: 00007f8e4cb85d29
[  111.934549][ T7869] RDX: 000000000000000b RSI: 000000000000010d RDI: 0000000000000004
[  111.942518][ T7869] RBP: 00007f8e4d970090 R08: 0000000000000004 R09: 0000000000000000
[  111.950487][ T7869] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[  111.958455][ T7869] R13: 0000000000000000 R14: 00007f8e4cd75fa0 R15: 00007ffd8e27d098
[  111.966457][ T7869]  </TASK>
[  112.222304][ T7888] ax25_connect(): syz.2.478 uses autobind, please contact jreuter@yaina.de
[  112.456430][ T7882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.473747][ T7882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.502606][ T7882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.514125][ T7882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.594473][ T7882] macvtap1: left allmulticast mode
[  112.753564][ T7903] netlink: 'syz.0.482': attribute type 5 has an invalid length.
[  112.932157][ T7912] FAULT_INJECTION: forcing a failure.
[  112.932157][ T7912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.998995][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.4.485 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  113.009650][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  113.019723][ T7912] Call Trace:
[  113.023029][ T7912]  <TASK>
[  113.025961][ T7912]  dump_stack_lvl+0x241/0x360
[  113.030655][ T7912]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.035858][ T7912]  ? __pfx__printk+0x10/0x10
[  113.040451][ T7912]  ? snprintf+0xda/0x120
[  113.044700][ T7912]  should_fail_ex+0x3b0/0x4e0
[  113.049409][ T7912]  _copy_to_user+0x31/0xb0
[  113.053855][ T7912]  simple_read_from_buffer+0xca/0x150
[  113.059247][ T7912]  proc_fail_nth_read+0x1e9/0x250
[  113.064286][ T7912]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.069836][ T7912]  ? rw_verify_area+0x55e/0x6f0
[  113.074690][ T7912]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.080234][ T7912]  vfs_read+0x1fc/0xb70
[  113.084390][ T7912]  ? __pfx___mutex_lock+0x10/0x10
[  113.089415][ T7912]  ? __pfx_vfs_read+0x10/0x10
[  113.094096][ T7912]  ? __fget_files+0x2a/0x410
[  113.098690][ T7912]  ? __fget_files+0x395/0x410
[  113.103365][ T7912]  ? __fget_files+0x2a/0x410
[  113.107962][ T7912]  ksys_read+0x18f/0x2b0
[  113.112207][ T7912]  ? __pfx_ksys_read+0x10/0x10
[  113.116969][ T7912]  ? do_syscall_64+0x100/0x230
[  113.121735][ T7912]  ? do_syscall_64+0xb6/0x230
[  113.126423][ T7912]  do_syscall_64+0xf3/0x230
[  113.130925][ T7912]  ? clear_bhb_loop+0x35/0x90
[  113.135603][ T7912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.141498][ T7912] RIP: 0033:0x7f62aaf8473c
[  113.145918][ T7912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  113.165543][ T7912] RSP: 002b:00007f62abdd6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  113.173967][ T7912] RAX: ffffffffffffffda RBX: 00007f62ab175fa0 RCX: 00007f62aaf8473c
[  113.181940][ T7912] RDX: 000000000000000f RSI: 00007f62abdd60a0 RDI: 0000000000000005
[  113.189914][ T7912] RBP: 00007f62abdd6090 R08: 0000000000000000 R09: 0000000000000000
[  113.197885][ T7912] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[  113.205852][ T7912] R13: 0000000000000000 R14: 00007f62ab175fa0 R15: 00007ffcfa0abb98
[  113.213837][ T7912]  </TASK>
[  113.354807][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'.
[  113.354903][ T7920] Bluetooth: MGMT ver 1.23
[  113.428903][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'.
[  113.438432][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'.
[  113.450978][ T7923] x_tables: ip_tables: udp match: only valid for protocol 17
[  113.503125][ T7931] IPVS: length: 253 != 24
[  113.612238][ T7934] bridge_slave_0: default FDB implementation only supports local addresses
[  113.650448][ T7935] bridge_slave_0: default FDB implementation only supports local addresses
[  113.876801][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.497'.
[  114.089707][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'.
[  114.250434][ T7970] veth0_to_bridge: entered promiscuous mode
[  114.488423][ T7981] veth0_to_bridge: left promiscuous mode
[  114.503045][ T7986] veth1_to_bridge: entered promiscuous mode
[  114.514631][ T7986] veth1_to_bridge: left promiscuous mode
[  114.528629][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'.
[  114.561055][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'.
[  115.019851][ T8016] sctp: [Deprecated]: syz.4.516 (pid 8016) Use of int in max_burst socket option deprecated.
[  115.019851][ T8016] Use struct sctp_assoc_value instead
[  115.353525][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'.
[  115.387756][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[  115.607104][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.528'.
[  115.613866][ T8041] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.648978][ T8045] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  115.875477][ T8052] Bluetooth: hci0: Opcode 0x0c20 failed: -112
[  115.999262][ T8068] netlink: 'syz.0.533': attribute type 13 has an invalid length.
[  116.024237][ T8069] netlink: 'syz.0.533': attribute type 13 has an invalid length.
[  116.131247][ T8080] netlink: 'syz.2.534': attribute type 11 has an invalid length.
[  116.420482][ T8100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.463708][ T8100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.481362][ T8100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.491645][ T8100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.520830][ T8100] geneve2: entered promiscuous mode
[  116.542455][ T8100] geneve2: entered allmulticast mode
[  116.995633][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  117.265131][ T8131] veth0: entered promiscuous mode
[  117.275703][ T8131] veth0: entered allmulticast mode
[  117.371712][ T8144] wg2: entered promiscuous mode
[  117.409303][ T8144] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  117.577384][ T8151] sit1: entered promiscuous mode
[  117.582413][ T8151] sit1: entered allmulticast mode
[  117.613151][ T8161] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  117.673216][ T8151] netlink: 'syz.2.551': attribute type 5 has an invalid length.
[  117.758002][ T8166] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  117.875082][   T54] Bluetooth: hci0: command 0x0c20 tx timeout
[  117.882642][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  117.944635][ T8170] syz_tun: entered allmulticast mode
[  118.523196][ T8217] __nla_validate_parse: 10 callbacks suppressed
[  118.523215][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'.
[  118.543446][ T8217] bridge_slave_1: left allmulticast mode
[  118.549256][ T8217] bridge_slave_1: left promiscuous mode
[  118.555985][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.572178][ T8217] bridge_slave_0: left allmulticast mode
[  118.580240][ T8217] bridge_slave_0: left promiscuous mode
[  118.588074][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.727534][ T8225] netlink: 'syz.1.571': attribute type 1 has an invalid length.
[  118.884684][ T8228] netlink: 68 bytes leftover after parsing attributes in process `syz.1.573'.
[  118.959511][ T8234] raw_sendmsg: syz.0.575 forgot to set AF_INET. Fix it!
[  119.233470][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'.
[  119.256051][ T8256] bridge0: entered allmulticast mode
[  119.302583][ T8256] syz_tun: left allmulticast mode
[  119.323526][ T8256] netlink: 5424 bytes leftover after parsing attributes in process `syz.4.577'.
[  119.336376][ T8256] netlink: 5424 bytes leftover after parsing attributes in process `syz.4.577'.
[  119.413729][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'.
[  119.424317][ T8265] netlink: 'syz.2.580': attribute type 2 has an invalid length.
[  119.440169][ T8266] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  119.618873][ T8272] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.729476][ T8277] xt_cgroup: invalid path, errno=-2
[  119.759248][ T8276] xt_cgroup: invalid path, errno=-2
[  119.955325][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout
[  120.280883][ T8295] netlink: 'syz.0.589': attribute type 3 has an invalid length.
[  120.394735][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'.
[  120.600732][ T8320] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003
[  120.681988][ T8328] netlink: 'syz.2.599': attribute type 3 has an invalid length.
[  120.692834][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'.
[  121.007182][ T8343] Cannot find set identified by id 0 to match
[  121.094584][ T8348] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  121.220571][ T6253] IPVS: starting estimator thread 0...
[  121.220914][ T8351] netlink: 120 bytes leftover after parsing attributes in process `syz.2.607'.
[  121.236565][ T8359] netlink: 'syz.3.608': attribute type 39 has an invalid length.
[  121.324461][ T8362] IPVS: using max 23 ests per chain, 55200 per kthread
[  121.480090][ T8375] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[  121.505120][ T8375] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[  121.648208][ T8381] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  121.659495][ T8381] netlink: 228 bytes leftover after parsing attributes in process `syz.2.616'.
[  121.677536][ T8382] wg2: entered promiscuous mode
[  121.682971][ T8382] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  121.792569][ T8389] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  121.842454][ T8389] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.872363][ T8395] wg2: left promiscuous mode
[  122.283657][ T8414] netlink: 'syz.2.623': attribute type 1 has an invalid length.
[  122.432463][ T8426] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.554247][ T8426] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.640998][ T8426] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.712032][ T8426] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.812143][ T8443] batadv_slave_1: entered promiscuous mode
[  122.843754][ T8443] batadv_slave_1 (unregistering): left promiscuous mode
[  122.920480][ T8445] openvswitch: netlink: Multiple metadata blocks provided
[  122.938934][ T8426] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.993009][ T8426] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.056617][ T8426] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.076703][ T8448] IPv6: sit1: Disabled Multicast RS
[  123.099546][ T8426] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.600322][ T8489] __nla_validate_parse: 9 callbacks suppressed
[  123.600345][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.647'.
[  123.836096][ T8500] netlink: 112 bytes leftover after parsing attributes in process `syz.0.648'.
[  123.866763][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'.
[  124.034550][   T54] Bluetooth: hci0: command 0x0c20 tx timeout
[  124.040849][ T5838] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  124.086591][ T8516] x_tables: duplicate underflow at hook 2
[  124.193503][ T8520] sctp: [Deprecated]: syz.0.655 (pid 8520) Use of int in max_burst socket option.
[  124.193503][ T8520] Use struct sctp_assoc_value instead
[  124.605237][ T8541] netlink: 112 bytes leftover after parsing attributes in process `syz.1.661'.
[  125.169557][ T8576] vlan1: entered allmulticast mode
[  125.175287][ T8576] veth0_vlan: entered allmulticast mode
[  125.331385][ T8583] validate_nla: 1 callbacks suppressed
[  125.331403][ T8583] netlink: 'syz.4.675': attribute type 1 has an invalid length.
[  125.517971][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'.
[  125.545360][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'.
[  125.836468][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  125.846462][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.680'.
[  125.876663][ T8567] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  125.895274][ T8610] netlink: 'syz.4.683': attribute type 1 has an invalid length.
[  125.914288][ T8612] netlink: 'syz.2.684': attribute type 3 has an invalid length.
[  126.040860][ T8617] netlink: 156 bytes leftover after parsing attributes in process `syz.2.686'.
[  126.096756][ T8621] netlink: 2 bytes leftover after parsing attributes in process `syz.0.687'.
[  126.120402][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.409608][ T8636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.712173][ T8646] pim6reg1: entered promiscuous mode
[  126.730473][ T8646] pim6reg1: entered allmulticast mode
[  127.155380][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout
[  128.090360][ T8711] FAULT_INJECTION: forcing a failure.
[  128.090360][ T8711] name failslab, interval 1, probability 0, space 0, times 0
[  128.113514][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.1.714 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  128.124170][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  128.134257][ T8711] Call Trace:
[  128.137549][ T8711]  <TASK>
[  128.140483][ T8711]  dump_stack_lvl+0x241/0x360
[  128.145173][ T8711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.150373][ T8711]  ? __pfx__printk+0x10/0x10
[  128.154966][ T8711]  ? fs_reclaim_acquire+0x93/0x130
[  128.160078][ T8711]  ? __pfx___might_resched+0x10/0x10
[  128.165363][ T8711]  should_fail_ex+0x3b0/0x4e0
[  128.170048][ T8711]  should_failslab+0xac/0x100
[  128.174727][ T8711]  __kmalloc_noprof+0xdd/0x4c0
[  128.179491][ T8711]  ? kstrtouint_from_user+0x128/0x190
[  128.184859][ T8711]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  128.190581][ T8711]  tomoyo_realpath_from_path+0xcf/0x5e0
[  128.196142][ T8711]  tomoyo_path_number_perm+0x236/0x860
[  128.201605][ T8711]  ? __lock_acquire+0x1397/0x2100
[  128.206631][ T8711]  ? tomoyo_path_number_perm+0x206/0x860
[  128.212269][ T8711]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  128.218277][ T8711]  ? __fget_files+0x2a/0x410
[  128.222877][ T8711]  ? __fget_files+0x2a/0x410
[  128.227470][ T8711]  security_file_ioctl+0xc6/0x2a0
[  128.232497][ T8711]  __se_sys_ioctl+0x46/0x170
[  128.237086][ T8711]  do_syscall_64+0xf3/0x230
[  128.241590][ T8711]  ? clear_bhb_loop+0x35/0x90
[  128.246268][ T8711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.252158][ T8711] RIP: 0033:0x7fc0d8d85d29
[  128.256568][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.276172][ T8711] RSP: 002b:00007fc0d9bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.284590][ T8711] RAX: ffffffffffffffda RBX: 00007fc0d8f75fa0 RCX: 00007fc0d8d85d29
[  128.292558][ T8711] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004
[  128.300532][ T8711] RBP: 00007fc0d9bc2090 R08: 0000000000000000 R09: 0000000000000000
[  128.308502][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.316472][ T8711] R13: 0000000000000000 R14: 00007fc0d8f75fa0 R15: 00007ffe266e66b8
[  128.324456][ T8711]  </TASK>
[  128.388429][ T8711] ERROR: Out of memory at tomoyo_realpath_from_path.
[  128.747147][ T8741] xt_hashlimit: overflow, rate too high: 0
[  128.756573][ T8741] netlink: 'syz.4.720': attribute type 10 has an invalid length.
[  128.786386][ T8741] __nla_validate_parse: 7 callbacks suppressed
[  128.786407][ T8741] netlink: 148 bytes leftover after parsing attributes in process `syz.4.720'.
[  128.881145][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'.
[  129.029694][ T8753] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.162407][ T8764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.208429][ T8764] syzkaller0: entered promiscuous mode
[  129.220427][ T8764] syzkaller0: entered allmulticast mode
[  129.245662][ T8764] tipc: Resetting bearer <eth:syzkaller0>
[  129.309142][ T8763] tipc: Resetting bearer <eth:syzkaller0>
[  129.335475][ T8774] FAULT_INJECTION: forcing a failure.
[  129.335475][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.359047][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.1.732 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  129.369709][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  129.379806][ T8774] Call Trace:
[  129.383114][ T8774]  <TASK>
[  129.386071][ T8774]  dump_stack_lvl+0x241/0x360
[  129.390791][ T8774]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.396029][ T8774]  ? __pfx__printk+0x10/0x10
[  129.400658][ T8774]  ? __pfx_lock_release+0x10/0x10
[  129.405711][ T8774]  ? do_vfs_ioctl+0xf07/0x2e40
[  129.410501][ T8774]  should_fail_ex+0x3b0/0x4e0
[  129.415218][ T8774]  _copy_from_user+0x2f/0xc0
[  129.419846][ T8774]  nr_rt_ioctl+0x784/0xfb0
[  129.424300][ T8774]  ? aa_get_newest_label+0xff/0x6f0
[  129.429526][ T8774]  ? tomoyo_path_number_perm+0x206/0x860
[  129.435179][ T8774]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  129.440164][ T8774]  ? encrypted_read+0x40/0x10f0
[  129.445058][ T8774]  sock_do_ioctl+0x158/0x460
[  129.449689][ T8774]  ? __pfx_sock_do_ioctl+0x10/0x10
[  129.454854][ T8774]  sock_ioctl+0x626/0x8e0
[  129.459218][ T8774]  ? __pfx_sock_ioctl+0x10/0x10
[  129.464112][ T8774]  ? __fget_files+0x2a/0x410
[  129.468742][ T8774]  ? __fget_files+0x2a/0x410
[  129.473376][ T8774]  ? __pfx_sock_ioctl+0x10/0x10
[  129.478275][ T8774]  __se_sys_ioctl+0xf5/0x170
[  129.482896][ T8774]  do_syscall_64+0xf3/0x230
[  129.487436][ T8774]  ? clear_bhb_loop+0x35/0x90
[  129.492151][ T8774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.498077][ T8774] RIP: 0033:0x7fc0d8d85d29
[  129.502512][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.522146][ T8774] RSP: 002b:00007fc0d9bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.530603][ T8774] RAX: ffffffffffffffda RBX: 00007fc0d8f75fa0 RCX: 00007fc0d8d85d29
[  129.538607][ T8774] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004
[  129.546607][ T8774] RBP: 00007fc0d9bc2090 R08: 0000000000000000 R09: 0000000000000000
[  129.554611][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.562619][ T8774] R13: 0000000000000000 R14: 00007fc0d8f75fa0 R15: 00007ffe266e66b8
[  129.570637][ T8774]  </TASK>
[  130.169054][ T5201] tipc: Node number set to 771752037
[  131.098921][ T8763] tipc: Disabling bearer <eth:syzkaller0>
[  131.111216][ T8785] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  131.144727][ T5201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.196054][ T8792] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  131.267659][ T8792] sit1: left promiscuous mode
[  131.279262][ T8792] sit1: left allmulticast mode
[  131.335653][ T8805] netlink: 'syz.4.739': attribute type 21 has an invalid length.
[  131.343561][ T8805] netlink: 128 bytes leftover after parsing attributes in process `syz.4.739'.
[  131.404281][ T5201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.453056][ T8811] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[  131.804224][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.834457][ T8828] batadv0: entered promiscuous mode
[  131.857981][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.928581][ T8833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.754'.
[  131.982743][ T8831] tun0: tun_chr_ioctl cmd 1074025677
[  131.993117][ T8831] tun0: linktype set to 823
[  132.009674][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'.
[  132.047197][ T8831] netlink: 'syz.3.753': attribute type 33 has an invalid length.
[  132.498301][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[  132.981284][ T8890] bridge0: port 1(gretap0) entered blocking state
[  132.989194][ T8890] bridge0: port 1(gretap0) entered disabled state
[  133.004155][ T8893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.770'.
[  133.023226][ T8890] gretap0: entered allmulticast mode
[  133.029763][ T8893] unsupported nlmsg_type 40
[  133.084425][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  133.090858][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.092098][ T8890] gretap0: entered promiscuous mode
[  133.147509][ T8878] gretap0: left allmulticast mode
[  133.152600][ T8878] gretap0: left promiscuous mode
[  133.207144][ T8878] bridge0: port 1(gretap0) entered disabled state
[  133.752189][ T8921] xt_CT: No such helper "snmp"
[  133.823068][ T8931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  133.945687][ T8936] netlink: 'syz.3.783': attribute type 1 has an invalid length.
[  134.011664][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'.
[  134.055505][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'.
[  134.171034][ T8936] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  134.214061][ T8936] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  134.241024][ T8936] bond3: (slave vti0): making interface the new active one
[  134.259964][ T8936] bond3: (slave vti0): Enslaving as an active interface with an up link
[  134.464635][ T8963] FAULT_INJECTION: forcing a failure.
[  134.464635][ T8963] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.514076][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: syz.0.793 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  134.524740][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  134.534821][ T8963] Call Trace:
[  134.538473][ T8963]  <TASK>
[  134.541429][ T8963]  dump_stack_lvl+0x241/0x360
[  134.546156][ T8963]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.551399][ T8963]  ? __pfx__printk+0x10/0x10
[  134.556036][ T8963]  ? snprintf+0xda/0x120
[  134.560405][ T8963]  should_fail_ex+0x3b0/0x4e0
[  134.565241][ T8963]  _copy_to_user+0x31/0xb0
[  134.569702][ T8963]  simple_read_from_buffer+0xca/0x150
[  134.575117][ T8963]  proc_fail_nth_read+0x1e9/0x250
[  134.580183][ T8963]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.585764][ T8963]  ? rw_verify_area+0x55e/0x6f0
[  134.590652][ T8963]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.596226][ T8963]  vfs_read+0x1fc/0xb70
[  134.600414][ T8963]  ? __pfx___mutex_lock+0x10/0x10
[  134.605467][ T8963]  ? __pfx_vfs_read+0x10/0x10
[  134.610174][ T8963]  ? __fget_files+0x2a/0x410
[  134.614796][ T8963]  ? __fget_files+0x395/0x410
[  134.619498][ T8963]  ? __fget_files+0x2a/0x410
[  134.624122][ T8963]  ksys_read+0x18f/0x2b0
[  134.628395][ T8963]  ? __pfx_ksys_read+0x10/0x10
[  134.633195][ T8963]  ? do_syscall_64+0x100/0x230
[  134.637995][ T8963]  ? do_syscall_64+0xb6/0x230
[  134.642709][ T8963]  do_syscall_64+0xf3/0x230
[  134.647245][ T8963]  ? clear_bhb_loop+0x35/0x90
[  134.651967][ T8963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.654486][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'.
[  134.657866][ T8963] RIP: 0033:0x7f4411d8473c
[  134.657911][ T8963] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  134.690774][ T8963] RSP: 002b:00007f4412c00030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  134.699229][ T8963] RAX: ffffffffffffffda RBX: 00007f4411f75fa0 RCX: 00007f4411d8473c
[  134.707232][ T8963] RDX: 000000000000000f RSI: 00007f4412c000a0 RDI: 0000000000000003
[  134.715234][ T8963] RBP: 00007f4412c00090 R08: 0000000000000000 R09: 0000000000000000
[  134.723240][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.731246][ T8963] R13: 0000000000000000 R14: 00007f4411f75fa0 R15: 00007ffd6d10e578
[  134.739268][ T8963]  </TASK>
[  135.027262][ T8952] lo speed is unknown, defaulting to 1000
[  135.033346][ T8952] lo speed is unknown, defaulting to 1000
[  135.039937][ T8952] lo speed is unknown, defaulting to 1000
[  135.051859][ T8952] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  135.071879][ T8952] lo speed is unknown, defaulting to 1000
[  135.079065][ T8952] lo speed is unknown, defaulting to 1000
[  135.089035][ T8952] lo speed is unknown, defaulting to 1000
[  135.096174][ T8952] lo speed is unknown, defaulting to 1000
[  135.098162][ T8951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.788'.
[  135.102942][ T8952] lo speed is unknown, defaulting to 1000
[  135.118104][ T8952] lo speed is unknown, defaulting to 1000
[  158.480543][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'.
[  159.097167][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.229607][ T9030] xt_policy: neither incoming nor outgoing policy selected
[  159.319044][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.813'.
[  159.488983][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'.
[  159.595464][ T9047] pimreg3: entered allmulticast mode
[  159.608275][ T9047] netlink: 'syz.1.814': attribute type 1 has an invalid length.
[  159.689306][ T9043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'.
[  159.733820][ T9047] pimreg3: left allmulticast mode
[  159.780375][ T9058] FAULT_INJECTION: forcing a failure.
[  159.780375][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.793890][ T9058] CPU: 1 UID: 0 PID: 9058 Comm: syz.2.819 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  159.804521][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  159.814623][ T9058] Call Trace:
[  159.817935][ T9058]  <TASK>
[  159.820885][ T9058]  dump_stack_lvl+0x241/0x360
[  159.825590][ T9058]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.831005][ T9058]  ? __pfx__printk+0x10/0x10
[  159.835626][ T9058]  should_fail_ex+0x3b0/0x4e0
[  159.840335][ T9058]  _copy_from_user+0x2f/0xc0
[  159.844927][ T9058]  move_addr_to_kernel+0x82/0x150
[  159.849957][ T9058]  __sys_sendto+0x268/0x4c0
[  159.854478][ T9058]  ? __pfx___sys_sendto+0x10/0x10
[  159.859528][ T9058]  ? __mutex_unlock_slowpath+0x21e/0x790
[  159.865197][ T9058]  ? __fget_files+0x2a/0x410
[  159.869800][ T9058]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  159.875785][ T9058]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  159.882113][ T9058]  __x64_sys_sendto+0xde/0x100
[  159.886878][ T9058]  do_syscall_64+0xf3/0x230
[  159.891379][ T9058]  ? clear_bhb_loop+0x35/0x90
[  159.896059][ T9058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.901952][ T9058] RIP: 0033:0x7fed47387bbc
[  159.906364][ T9058] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  159.925970][ T9058] RSP: 002b:00007fed481d7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  159.934387][ T9058] RAX: ffffffffffffffda RBX: 00007fed481d7fc0 RCX: 00007fed47387bbc
[  159.942356][ T9058] RDX: 0000000000000020 RSI: 00007fed481d8010 RDI: 0000000000000003
[  159.950329][ T9058] RBP: 0000000000000000 R08: 00007fed481d7f14 R09: 000000000000000c
[  159.958330][ T9058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  159.966320][ T9058] R13: 00007fed481d7f68 R14: 00007fed481d8010 R15: 0000000000000000
[  159.974320][ T9058]  </TASK>
[  160.105438][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  160.117583][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'.
[  160.340593][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'.
[  160.376535][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'.
[  160.623489][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'.
[  160.637992][ T9090] netlink: 'syz.0.828': attribute type 7 has an invalid length.
[  160.648528][ T9090] netlink: 244 bytes leftover after parsing attributes in process `syz.0.828'.
[  160.829594][ T9102] netlink: 'syz.1.834': attribute type 3 has an invalid length.
[  160.981354][    T8] IPVS: starting estimator thread 0...
[  160.995132][ T9106] IPVS: ip_vs_add_dest(): server weight less than zero
[  161.131999][ T9107] IPVS: using max 25 ests per chain, 60000 per kthread
[  161.168406][ T9117] netlink: 'syz.2.839': attribute type 10 has an invalid length.
[  161.177389][ T9117] syz_tun: entered promiscuous mode
[  161.185334][ T9117] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  161.549912][ T9137] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  163.314987][ T9162] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  163.334845][ T9162] macvlan2: entered allmulticast mode
[  163.358786][ T9162] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  163.414322][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.495152][ T9174] __nla_validate_parse: 4 callbacks suppressed
[  163.495173][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'.
[  163.524183][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'.
[  163.560939][ T9174] gtp0: entered promiscuous mode
[  163.578127][ T9174] gtp0: entered allmulticast mode
[  163.700721][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'.
[  163.722545][ T9181] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  164.240662][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  164.313097][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'.
[  164.403017][ T9213] macvlan2: entered promiscuous mode
[  164.408617][ T9213] macvlan2: entered allmulticast mode
[  164.539516][ T9225] ip6t_srh: unknown srh invflags 4000
[  164.918408][ T9236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'.
[  165.089550][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'.
[  165.098587][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'.
[  165.250658][ T9251] xt_CT: You must specify a L4 protocol and not use inversions on it
[  165.369384][ T9259] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���~�Ͷ��Q�آ
�D��UD�w�}�z
[  165.542259][ T9270] trusted_key: syz.4.882 sent an empty control message without MSG_MORE.
[  165.613809][ T9267] erspan1: entered promiscuous mode
[  165.619445][ T9267] erspan1: entered allmulticast mode
[  165.915496][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  165.936925][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  166.032257][ T9296] vlan2: entered allmulticast mode
[  166.127710][ T9305] veth0_to_team: entered promiscuous mode
[  166.165807][ T9305] veth0_to_team: entered allmulticast mode
[  166.885341][ T9352] geneve3: entered promiscuous mode
[  166.899229][ T9352] geneve3: entered allmulticast mode
[  166.918827][ T9356] tipc: Started in network mode
[  166.924222][ T9356] tipc: Node identity 6, cluster identity 4711
[  166.930583][ T9356] tipc: Node number set to 6
[  167.195765][ T9373] netlink: 'syz.1.915': attribute type 16 has an invalid length.
[  167.208626][ T9375] netlink: 'syz.1.915': attribute type 16 has an invalid length.
[  167.217650][ T9373] netlink: 'syz.1.915': attribute type 17 has an invalid length.
[  167.229868][ T9375] netlink: 'syz.1.915': attribute type 17 has an invalid length.
[  167.237844][ T9373] netlink: 'syz.1.915': attribute type 27 has an invalid length.
[  167.249921][ T9375] netlink: 'syz.1.915': attribute type 27 has an invalid length.
[  167.752757][ T9397] xt_TCPMSS: Only works on TCP SYN packets
[  167.827859][ T9399] netlink: 'syz.1.924': attribute type 1 has an invalid length.
[  167.835809][ T9399] netlink: 'syz.1.924': attribute type 3 has an invalid length.
[  168.228630][ T9407] sctp: [Deprecated]: syz.2.926 (pid 9407) Use of int in max_burst socket option deprecated.
[  168.228630][ T9407] Use struct sctp_assoc_value instead
[  168.777386][ T9429] __nla_validate_parse: 10 callbacks suppressed
[  168.777401][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'.
[  168.796238][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  168.816067][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  169.360694][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.940'.
[  169.378520][ T9457] netlink: 7 bytes leftover after parsing attributes in process `syz.0.940'.
[  169.389496][ T9453] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  169.864536][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'.
[  170.012274][ T9481] xt_CT: No such helper "snmp"
[  170.174910][ T9497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.948'.
[  170.358676][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'.
[  170.630811][ T9516] xt_socket: unknown flags 0x8
[  170.665998][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'.
[  170.686736][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'.
[  170.954248][ T9525] netlink: 'syz.0.959': attribute type 1 has an invalid length.
[  171.022651][ T9525] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.077618][ T9525] bond1: (slave bridge2): making interface the new active one
[  171.088480][ T9525] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  171.172629][ T9525] xt_bpf: check failed: parse error
[  171.206508][ T9539] xt_ipcomp: unknown flags 12
[  171.218290][ T9544] netlink: 'syz.3.964': attribute type 21 has an invalid length.
[  171.714202][ T9564] tipc: Started in network mode
[  171.719414][ T9564] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  171.748802][ T9564] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  172.211904][ T9583] team0 (unregistering): Port device team_slave_0 removed
[  172.221898][ T9583] team0 (unregistering): Port device team_slave_1 removed
[  172.253685][ T9598] netlink: 'syz.0.980': attribute type 29 has an invalid length.
[  172.265613][ T9602] netlink: 'syz.0.980': attribute type 29 has an invalid length.
[  172.440034][ T9608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  172.494780][ T9608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  172.503643][ T9608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  172.519879][ T9607] netlink: 'syz.3.983': attribute type 1 has an invalid length.
[  172.530565][ T9608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  172.544126][ T9608] geneve3: entered promiscuous mode
[  172.723445][ T9625] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  172.989199][ T9635] vlan4: entered allmulticast mode
[  173.461533][ T9667] openvswitch: netlink: Tunnel attr 5 has unexpected len 6 expected 0
[  173.701105][ T9684] ieee802154 phy0 wpan0: encryption failed: -22
[  174.053876][ T9706] __nla_validate_parse: 24 callbacks suppressed
[  174.053897][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'.
[  174.364641][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1016'.
[  174.630678][ T9736] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  175.030312][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1027'.
[  175.064752][ T5828] bond0: (slave syz_tun): Releasing backup interface
[  175.133350][ T9717] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  175.178639][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'.
[  175.582015][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'.
[  175.654577][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.664696][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.672929][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.683518][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.691537][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  175.699590][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.734257][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'.
[  176.172004][ T9780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.354856][ T5838] Bluetooth: hci2: command 0x0401 tx timeout
[  176.470672][ T9787] netlink: 'syz.1.1037': attribute type 1 has an invalid length.
[  177.029107][   T52] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  177.047717][ T9809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'.
[  177.259140][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.269322][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.278619][   T52] bond0 (unregistering): Released all slaves
[  177.290827][   T52] bond1 (unregistering): Released all slaves
[  177.301853][   T52] bond2 (unregistering): Released all slaves
[  177.402382][   T52] bond3 (unregistering): Released all slaves
[  177.502337][   T52] bond4 (unregistering): Released all slaves
[  177.630115][   T52] tipc: Left network mode
[  177.727169][ T9825] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.787426][ T9767] chnl_net:caif_netlink_parms(): no params data found
[  177.794861][ T5838] Bluetooth: hci0: command tx timeout
[  177.855524][ T9825] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.879682][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[  177.951802][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[  178.019479][ T9825] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.115469][ T9825] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.223307][   T52] hsr_slave_0: left promiscuous mode
[  178.258622][   T52] hsr_slave_1: left promiscuous mode
[  178.307486][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.317606][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.338988][ T9843] netlink: 'syz.0.1049': attribute type 1 has an invalid length.
[  178.549642][ T9845] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1051'.
[  178.830988][ T9859] xt_TCPMSS: Only works on TCP SYN packets
[  179.351479][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.378550][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.402278][ T9767] bridge_slave_0: entered allmulticast mode
[  179.409579][ T9767] bridge_slave_0: entered promiscuous mode
[  179.442310][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.451901][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.461937][ T9767] bridge_slave_1: entered allmulticast mode
[  179.469135][ T9767] bridge_slave_1: entered promiscuous mode
[  179.515053][ T9825] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.556441][ T9871] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[  179.593173][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1056'.
[  179.631305][ T9825] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.660110][ T9825] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.700313][ T9767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.728213][ T9767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.739000][ T9877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1057'.
[  179.780442][ T9825] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.826949][ T9879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1057'.
[  179.844106][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'.
[  179.864153][ T9879] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1057'.
[  179.874206][ T5838] Bluetooth: hci0: command tx timeout
[  179.918010][ T9879] netlink: 'syz.3.1057': attribute type 2 has an invalid length.
[  179.963304][ T9879] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1057'.
[  180.167255][ T9767] team0: Port device team_slave_0 added
[  180.199961][ T9767] team0: Port device team_slave_1 added
[  180.348438][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.362775][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.393730][ T9767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.459896][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.494181][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.527754][ T9767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.811030][ T9919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1067'.
[  180.823397][ T9767] hsr_slave_0: entered promiscuous mode
[  180.842919][ T9767] hsr_slave_1: entered promiscuous mode
[  180.875182][ T9767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.904258][ T9767] Cannot create hsr debugfs directory
[  181.228061][ T9925] veth0_to_hsr: entered promiscuous mode
[  181.237134][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  181.243582][ T5848] Bluetooth: hci2: command 0x0401 tx timeout
[  181.249791][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  181.296934][ T9928] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  181.323920][ T9925] veth0_to_hsr (unregistering): left promiscuous mode
[  181.358124][ T9925] hsr_slave_0 (unregistering): left promiscuous mode
[  181.367544][ T9932] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1071'.
[  181.489815][ T9928] bond2: entered promiscuous mode
[  181.538760][ T9928] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.582043][ T9932] batadv0: entered promiscuous mode
[  181.584613][ T9943] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1075'.
[  181.596480][ T9932] batadv0: entered allmulticast mode
[  181.597955][ T9932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.621504][ T9932] bond2: (slave batadv0): making interface the new active one
[  181.631677][ T9932] bond2: (slave batadv0): Enslaving as an active interface with an up link
[  181.723748][ T9938] lo speed is unknown, defaulting to 1000
[  181.730292][ T9943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1075'.
[  181.749846][ T9938] lo speed is unknown, defaulting to 1000
[  181.756953][ T9938] lo speed is unknown, defaulting to 1000
[  181.964631][ T5144] Bluetooth: hci0: command tx timeout
[  181.996250][ T7588] lo speed is unknown, defaulting to 1000
[  182.002842][ T9938] infiniband syz0: set active
[  182.012615][ T9938] infiniband syz0: added lo
[  182.020596][ T9938] syz0: rxe_create_cq: returned err = -12
[  182.031070][ T9938] infiniband syz0: Couldn't create ib_mad CQ
[  182.043501][ T9938] infiniband syz0: Couldn't open port 1
[  182.077712][ T9938] RDS/IB: syz0: added
[  182.096026][ T9938] smc: adding ib device syz0 with port count 1
[  182.102524][ T9938] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  182.131219][ T7588] lo speed is unknown, defaulting to 1000
[  182.160165][ T9767] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  182.184204][ T9767] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  182.191843][ T9938] lo speed is unknown, defaulting to 1000
[  182.207609][ T9767] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  182.220500][ T9767] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  182.477846][ T9938] lo speed is unknown, defaulting to 1000
[  182.501726][ T9970] netlink: 'syz.4.1082': attribute type 10 has an invalid length.
[  182.515163][ T9767] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.528032][ T9970] openvswitch: netlink: Message has 7 unknown bytes.
[  182.568744][ T9767] 8021q: adding VLAN 0 to HW filter on device team0
[  182.627306][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.634487][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.669506][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.676683][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.791347][ T9938] lo speed is unknown, defaulting to 1000
[  182.927674][ T9984] tap0: tun_chr_ioctl cmd 1074025678
[  182.954431][ T9984] tap0: group set to 0
[  183.073744][ T9767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.176927][ T9767] veth0_vlan: entered promiscuous mode
[  183.211669][T10000] xt_hashlimit: size too large, truncated to 1048576
[  183.228082][ T9767] veth1_vlan: entered promiscuous mode
[  183.328711][ T9767] veth0_macvtap: entered promiscuous mode
[  183.348819][ T9767] veth1_macvtap: entered promiscuous mode
[  183.366581][ T9938] lo speed is unknown, defaulting to 1000
[  183.373206][ T9767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.403225][ T9767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.418662][T10010] x_tables: duplicate entry at hook 2
[  183.428331][ T9767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.437735][ T9767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.454053][ T9767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.462829][ T9767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.534683][T10012] netlink: 'syz.3.1096': attribute type 22 has an invalid length.
[  183.598579][ T8427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.635701][ T8427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.739200][ T8571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.748739][T10019] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  183.753924][ T9938] lo speed is unknown, defaulting to 1000
[  183.759825][ T8571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.245499][T10037] FAULT_INJECTION: forcing a failure.
[  184.245499][T10037] name failslab, interval 1, probability 0, space 0, times 0
[  184.260474][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.0.1104 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  184.271287][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  184.281370][T10037] Call Trace:
[  184.284675][T10037]  <TASK>
[  184.287624][T10037]  dump_stack_lvl+0x241/0x360
[  184.292330][T10037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.297561][T10037]  ? __pfx__printk+0x10/0x10
[  184.302185][T10037]  ? __kmalloc_noprof+0xb5/0x4c0
[  184.307161][T10037]  ? __pfx___might_resched+0x10/0x10
[  184.312483][T10037]  should_fail_ex+0x3b0/0x4e0
[  184.317202][T10037]  should_failslab+0xac/0x100
[  184.321910][T10037]  __kmalloc_noprof+0xdd/0x4c0
[  184.326707][T10037]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  184.332978][T10037]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  184.339072][T10037]  genl_rcv_msg+0x802/0xec0
[  184.343581][T10037]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.348651][T10037]  ? __pfx_lock_acquire+0x10/0x10
[  184.353705][T10037]  ? __pfx_ctrl_getfamily+0x10/0x10
[  184.358925][T10037]  ? __pfx___might_resched+0x10/0x10
[  184.364243][T10037]  netlink_rcv_skb+0x1e3/0x430
[  184.369026][T10037]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.374060][T10037]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.379361][T10037]  genl_rcv+0x28/0x40
[  184.383342][T10037]  netlink_unicast+0x7f6/0x990
[  184.388117][T10037]  ? __pfx_netlink_unicast+0x10/0x10
[  184.393402][T10037]  ? __virt_addr_valid+0x45f/0x530
[  184.398515][T10037]  ? __phys_addr_symbol+0x2f/0x70
[  184.403535][T10037]  ? __check_object_size+0x47a/0x730
[  184.408822][T10037]  netlink_sendmsg+0x8e4/0xcb0
[  184.413597][T10037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.418891][T10037]  ? aa_sock_msg_perm+0x91/0x160
[  184.423848][T10037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.429130][T10037]  __sock_sendmsg+0x221/0x270
[  184.433813][T10037]  __sys_sendto+0x363/0x4c0
[  184.438317][T10037]  ? __pfx___sys_sendto+0x10/0x10
[  184.443337][T10037]  ? __mutex_unlock_slowpath+0x21e/0x790
[  184.448982][T10037]  ? __fget_files+0x2a/0x410
[  184.453577][T10037]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  184.459558][T10037]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  184.466061][T10037]  __x64_sys_sendto+0xde/0x100
[  184.470827][T10037]  do_syscall_64+0xf3/0x230
[  184.475328][T10037]  ? clear_bhb_loop+0x35/0x90
[  184.480007][T10037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.485900][T10037] RIP: 0033:0x7f4411d87bbc
[  184.490325][T10037] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  184.509930][T10037] RSP: 002b:00007f4412bfeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  184.518381][T10037] RAX: ffffffffffffffda RBX: 00007f4412bfefc0 RCX: 00007f4411d87bbc
[  184.526354][T10037] RDX: 0000000000000020 RSI: 00007f4412bff010 RDI: 0000000000000003
[  184.534325][T10037] RBP: 0000000000000000 R08: 00007f4412bfef14 R09: 000000000000000c
[  184.542297][T10037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  184.550269][T10037] R13: 00007f4412bfef68 R14: 00007f4412bff010 R15: 0000000000000000
[  184.558252][T10037]  </TASK>
[  184.646365][T10042] __nla_validate_parse: 5 callbacks suppressed
[  184.646386][T10042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1106'.
[  184.768742][T10046] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  184.797910][T10046] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  184.820011][T10046] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  184.829657][T10046] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  184.840738][T10046] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  184.889490][T10049] gretap0: entered allmulticast mode
[  184.913024][T10049] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.920021][T10049] bond0: entered allmulticast mode
[  184.926405][T10049] bond_slave_0: entered allmulticast mode
[  184.932161][T10049] bond_slave_1: entered allmulticast mode
[  184.939869][T10049] 8021q: adding VLAN 0 to HW filter on device team0
[  184.949561][T10049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.371266][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'.
[  185.535970][ T1170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.652660][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'.
[  185.837322][T10099] lo speed is unknown, defaulting to 1000
[  186.062933][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.073534][T10107] tipc: Failed to remove unknown binding: 66,1,1/6:762665764/762665766
[  186.085892][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.104507][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.114478][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.122354][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  186.141502][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.391831][T10122] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1126'.
[  186.490255][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'.
[  186.510355][T10109] lo speed is unknown, defaulting to 1000
[  186.518766][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'.
[  186.640512][T10129] FAULT_INJECTION: forcing a failure.
[  186.640512][T10129] name failslab, interval 1, probability 0, space 0, times 0
[  186.668373][T10129] CPU: 0 UID: 0 PID: 10129 Comm: syz.4.1129 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  186.679204][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  186.684844][T10131] sctp: [Deprecated]: syz.1.1130 (pid 10131) Use of int in max_burst socket option.
[  186.684844][T10131] Use struct sctp_assoc_value instead
[  186.689263][T10129] Call Trace:
[  186.707169][T10129]  <TASK>
[  186.710123][T10129]  dump_stack_lvl+0x241/0x360
[  186.714840][T10129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.720162][T10129]  ? __pfx__printk+0x10/0x10
[  186.724800][T10129]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  186.730822][T10129]  ? __pfx___might_resched+0x10/0x10
[  186.736143][T10129]  should_fail_ex+0x3b0/0x4e0
[  186.740865][T10129]  should_failslab+0xac/0x100
[  186.745576][T10129]  kmem_cache_alloc_node_noprof+0x77/0x380
[  186.751410][T10129]  ? __alloc_skb+0x1c3/0x440
[  186.756025][T10129]  ? idr_get_next+0x3c6/0x4a0
[  186.760733][T10129]  __alloc_skb+0x1c3/0x440
[  186.765185][T10129]  ? __pfx___alloc_skb+0x10/0x10
[  186.770162][T10129]  ctrl_getfamily+0x48c/0x6b0
[  186.774877][T10129]  ? __pfx_ctrl_getfamily+0x10/0x10
[  186.780108][T10129]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  186.786473][T10129]  genl_rcv_msg+0xb14/0xec0
[  186.791016][T10129]  ? __pfx_genl_rcv_msg+0x10/0x10
[  186.796093][T10129]  ? __pfx_lock_acquire+0x10/0x10
[  186.801144][T10129]  ? __pfx_ctrl_getfamily+0x10/0x10
[  186.806370][T10129]  ? __pfx___might_resched+0x10/0x10
[  186.811689][T10129]  netlink_rcv_skb+0x1e3/0x430
[  186.816485][T10129]  ? __pfx_genl_rcv_msg+0x10/0x10
[  186.821540][T10129]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  186.826865][T10129]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  186.832367][T10129]  genl_rcv+0x28/0x40
[  186.836380][T10129]  netlink_unicast+0x7f6/0x990
[  186.837250][T10132] x_tables: ip_tables: icmp match: only valid for protocol 1
[  186.841166][T10129]  ? __pfx_netlink_unicast+0x10/0x10
[  186.853841][T10129]  ? __virt_addr_valid+0x45f/0x530
[  186.858993][T10129]  ? __phys_addr_symbol+0x2f/0x70
[  186.864051][T10129]  ? __check_object_size+0x47a/0x730
[  186.869372][T10129]  netlink_sendmsg+0x8e4/0xcb0
[  186.874177][T10129]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.879490][T10129]  ? aa_sock_msg_perm+0x91/0x160
[  186.884456][T10129]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.889770][T10129]  __sock_sendmsg+0x221/0x270
[  186.894487][T10129]  __sys_sendto+0x363/0x4c0
[  186.899029][T10129]  ? __pfx___sys_sendto+0x10/0x10
[  186.904078][T10129]  ? __mutex_unlock_slowpath+0x21e/0x790
[  186.909753][T10129]  ? __fget_files+0x2a/0x410
[  186.914382][T10129]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  186.920399][T10129]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  186.926765][T10129]  __x64_sys_sendto+0xde/0x100
[  186.931564][T10129]  do_syscall_64+0xf3/0x230
[  186.936095][T10129]  ? clear_bhb_loop+0x35/0x90
[  186.940801][T10129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.946726][T10129] RIP: 0033:0x7f62aaf87bbc
[  186.951168][T10129] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  186.970896][T10129] RSP: 002b:00007f62abdd4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  186.979339][T10129] RAX: ffffffffffffffda RBX: 00007f62abdd4fc0 RCX: 00007f62aaf87bbc
[  186.987323][T10129] RDX: 0000000000000020 RSI: 00007f62abdd5010 RDI: 0000000000000003
[  186.995308][T10129] RBP: 0000000000000000 R08: 00007f62abdd4f14 R09: 000000000000000c
[  187.003278][T10129] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  187.011280][T10129] R13: 00007f62abdd4f68 R14: 00007f62abdd5010 R15: 0000000000000000
[  187.019296][T10129]  </TASK>
[  187.234700][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'.
[  187.257601][T10109] chnl_net:caif_netlink_parms(): no params data found
[  187.473300][ T1170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.495831][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1133'.
[  187.641228][ T1170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.682941][T10109] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.708039][T10109] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.748592][T10109] bridge_slave_0: entered allmulticast mode
[  187.763712][T10109] bridge_slave_0: entered promiscuous mode
[  187.780626][T10109] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.790694][T10109] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.803740][T10109] bridge_slave_1: entered allmulticast mode
[  187.813588][T10109] bridge_slave_1: entered promiscuous mode
[  187.864788][ T1170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.006675][T10109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.040527][T10109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.097251][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'.
[  188.130787][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'.
[  188.203476][T10109] team0: Port device team_slave_0 added
[  188.231261][T10109] team0: Port device team_slave_1 added
[  188.274347][ T5844] Bluetooth: hci0: command tx timeout
[  188.357752][T10109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.375138][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.428608][T10192] netlink: 'syz.0.1142': attribute type 27 has an invalid length.
[  188.452810][T10109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.491457][T10109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.508939][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.574951][T10109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.735200][ T1170] bridge_slave_1: left allmulticast mode
[  188.744177][ T1170] bridge_slave_1: left promiscuous mode
[  188.751320][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.805277][ T1170] bridge_slave_0: left allmulticast mode
[  188.810986][ T1170] bridge_slave_0: left promiscuous mode
[  188.842356][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.503442][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.521999][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.532569][ T1170] bond0 (unregistering): Released all slaves
[  189.545486][T10109] hsr_slave_0: entered promiscuous mode
[  189.551829][T10109] hsr_slave_1: entered promiscuous mode
[  189.558048][T10109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.566160][T10109] Cannot create hsr debugfs directory
[  189.611831][T10207] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  189.622117][T10207] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  189.633738][T10207] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  189.757847][T10232] __nla_validate_parse: 6 callbacks suppressed
[  189.757866][T10232] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1150'.
[  189.789268][T10232] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.931826][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'.
[  189.947236][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'.
[  190.197645][ T1170] hsr_slave_0: left promiscuous mode
[  190.243539][ T1170] hsr_slave_1: left promiscuous mode
[  190.257473][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.270183][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.281444][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.289440][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.311925][ T1170] veth1_macvtap: left promiscuous mode
[  190.324356][ T1170] veth0_macvtap: left promiscuous mode
[  190.331045][ T1170] veth1_vlan: left promiscuous mode
[  190.336706][ T1170] veth0_vlan: left promiscuous mode
[  190.354242][ T5844] Bluetooth: hci0: command tx timeout
[  190.628859][T10251] netlink: 'syz.4.1155': attribute type 142 has an invalid length.
[  190.836082][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1158'.
[  191.099274][ T1170] team0 (unregistering): Port device team_slave_1 removed
[  191.141483][ T1170] team0 (unregistering): Port device team_slave_0 removed
[  191.551514][T10249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1156'.
[  191.584756][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1158'.
[  191.734868][T10264] bpq0: entered allmulticast mode
[  192.142154][T10109] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  192.282487][T10109] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  192.336684][T10109] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  192.401434][T10109] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  192.434228][ T5844] Bluetooth: hci0: command tx timeout
[  192.710410][T10109] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.780135][T10109] 8021q: adding VLAN 0 to HW filter on device team0
[  192.930999][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.938202][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.993099][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.000343][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.171677][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'.
[  193.368216][T10109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.436724][T10109] veth0_vlan: entered promiscuous mode
[  193.469797][T10109] veth1_vlan: entered promiscuous mode
[  193.543624][T10109] veth0_macvtap: entered promiscuous mode
[  193.561928][T10109] veth1_macvtap: entered promiscuous mode
[  193.582660][T10109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.618212][T10109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.641829][T10109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.658718][T10109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.675164][T10109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.694292][T10109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.838423][ T8571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.878723][ T8571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.974868][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.993235][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.131563][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'.
[  194.388954][T10360] 
[  194.391322][T10360] ======================================================
[  194.398354][T10360] WARNING: possible circular locking dependency detected
[  194.405382][T10360] 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 Not tainted
[  194.412500][T10360] ------------------------------------------------------
[  194.419528][T10360] syz.3.1186/10360 is trying to acquire lock:
[  194.425605][T10360] ffffffff8fcb2008 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x9e8/0x3640
[  194.434778][T10360] 
[  194.434778][T10360] but task is already holding lock:
[  194.442152][T10360] ffff88807d008aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50
[  194.452288][T10360] 
[  194.452288][T10360] which lock already depends on the new lock.
[  194.452288][T10360] 
[  194.462705][T10360] 
[  194.462705][T10360] the existing dependency chain (in reverse order) is:
[  194.471734][T10360] 
[  194.471734][T10360] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  194.480367][T10360]        lock_acquire+0x1ed/0x550
[  194.485417][T10360]        __mutex_lock+0x1ac/0xee0
[  194.490459][T10360]        smc_switch_to_fallback+0x35/0xd90
[  194.496294][T10360]        smc_sendmsg+0x11f/0x530
[  194.501238][T10360]        __sock_sendmsg+0x221/0x270
[  194.506441][T10360]        __sys_sendto+0x363/0x4c0
[  194.511460][T10360]        __x64_sys_sendto+0xde/0x100
[  194.516740][T10360]        do_syscall_64+0xf3/0x230
[  194.521763][T10360]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.528172][T10360] 
[  194.528172][T10360] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  194.535810][T10360]        lock_acquire+0x1ed/0x550
[  194.540825][T10360]        lock_sock_nested+0x48/0x100
[  194.546110][T10360]        do_ip_setsockopt+0x1a2d/0x3cd0
[  194.551842][T10360]        ip_setsockopt+0x63/0x100
[  194.556871][T10360]        do_sock_setsockopt+0x3af/0x720
[  194.562411][T10360]        __x64_sys_setsockopt+0x1ee/0x280
[  194.568121][T10360]        do_syscall_64+0xf3/0x230
[  194.573138][T10360]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.579549][T10360] 
[  194.579549][T10360] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  194.586754][T10360]        validate_chain+0x18ef/0x5920
[  194.592117][T10360]        __lock_acquire+0x1397/0x2100
[  194.597479][T10360]        lock_acquire+0x1ed/0x550
[  194.602495][T10360]        __mutex_lock+0x1ac/0xee0
[  194.607511][T10360]        do_ipv6_setsockopt+0x9e8/0x3640
[  194.613131][T10360]        ipv6_setsockopt+0x5d/0x170
[  194.618320][T10360]        smc_setsockopt+0x275/0xe50
[  194.623507][T10360]        do_sock_setsockopt+0x3af/0x720
[  194.629042][T10360]        __x64_sys_setsockopt+0x1ee/0x280
[  194.634750][T10360]        do_syscall_64+0xf3/0x230
[  194.639766][T10360]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.646180][T10360] 
[  194.646180][T10360] other info that might help us debug this:
[  194.646180][T10360] 
[  194.656487][T10360] Chain exists of:
[  194.656487][T10360]   rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock
[  194.656487][T10360] 
[  194.670064][T10360]  Possible unsafe locking scenario:
[  194.670064][T10360] 
[  194.677512][T10360]        CPU0                    CPU1
[  194.682874][T10360]        ----                    ----
[  194.688226][T10360]   lock(&smc->clcsock_release_lock);
[  194.693596][T10360]                                lock(sk_lock-AF_INET);
[  194.700523][T10360]                                lock(&smc->clcsock_release_lock);
[  194.708424][T10360]   lock(rtnl_mutex);
[  194.712396][T10360] 
[  194.712396][T10360]  *** DEADLOCK ***
[  194.712396][T10360] 
[  194.720614][T10360] 1 lock held by syz.3.1186/10360:
[  194.725709][T10360]  #0: ffff88807d008aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50
[  194.736243][T10360] 
[  194.736243][T10360] stack backtrace:
[  194.742116][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.3.1186 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0
[  194.752860][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  194.762904][T10360] Call Trace:
[  194.766263][T10360]  <TASK>
[  194.769190][T10360]  dump_stack_lvl+0x241/0x360
[  194.773890][T10360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.779254][T10360]  ? __pfx__printk+0x10/0x10
[  194.783840][T10360]  print_circular_bug+0x13a/0x1b0
[  194.788861][T10360]  check_noncircular+0x36a/0x4a0
[  194.793796][T10360]  ? __pfx_check_noncircular+0x10/0x10
[  194.799250][T10360]  ? lockdep_lock+0x123/0x2b0
[  194.803923][T10360]  validate_chain+0x18ef/0x5920
[  194.808772][T10360]  ? __pfx_validate_chain+0x10/0x10
[  194.813971][T10360]  ? validate_chain+0x11e/0x5920
[  194.818910][T10360]  ? __pfx_validate_chain+0x10/0x10
[  194.824101][T10360]  ? validate_chain+0x11e/0x5920
[  194.829030][T10360]  ? cgroup_rstat_updated+0x13b/0xc30
[  194.834399][T10360]  ? __pfx_cgroup_rstat_updated+0x10/0x10
[  194.840112][T10360]  ? __lock_acquire+0x1397/0x2100
[  194.845131][T10360]  ? __pfx_validate_chain+0x10/0x10
[  194.850333][T10360]  ? mark_lock+0x9a/0x360
[  194.854656][T10360]  __lock_acquire+0x1397/0x2100
[  194.859512][T10360]  lock_acquire+0x1ed/0x550
[  194.864010][T10360]  ? do_ipv6_setsockopt+0x9e8/0x3640
[  194.869296][T10360]  ? __pfx_lock_acquire+0x10/0x10
[  194.874314][T10360]  ? __pfx___might_resched+0x10/0x10
[  194.879593][T10360]  __mutex_lock+0x1ac/0xee0
[  194.884090][T10360]  ? do_ipv6_setsockopt+0x9e8/0x3640
[  194.889370][T10360]  ? __pfx___might_resched+0x10/0x10
[  194.894644][T10360]  ? do_ipv6_setsockopt+0x9e8/0x3640
[  194.899962][T10360]  ? __pfx___mutex_lock+0x10/0x10
[  194.904992][T10360]  ? __might_fault+0xc6/0x120
[  194.909657][T10360]  do_ipv6_setsockopt+0x9e8/0x3640
[  194.914766][T10360]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  194.920303][T10360]  ? __mutex_trylock_common+0x183/0x2e0
[  194.925843][T10360]  ? __pfx___might_resched+0x10/0x10
[  194.931117][T10360]  ? __pfx___mutex_trylock_common+0x10/0x10
[  194.937010][T10360]  ? rcu_is_watching+0x15/0xb0
[  194.941769][T10360]  ? trace_contention_end+0x3c/0x120
[  194.947049][T10360]  ? __mutex_lock+0x37f/0xee0
[  194.951718][T10360]  ? smc_setsockopt+0x1c3/0xe50
[  194.956560][T10360]  ? __pfx___mutex_lock+0x10/0x10
[  194.961598][T10360]  ipv6_setsockopt+0x5d/0x170
[  194.966286][T10360]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  194.972193][T10360]  smc_setsockopt+0x275/0xe50
[  194.976870][T10360]  ? __pfx_smc_setsockopt+0x10/0x10
[  194.982068][T10360]  ? aa_sock_opt_perm+0x79/0x120
[  194.987001][T10360]  ? __pfx_smc_setsockopt+0x10/0x10
[  194.992192][T10360]  do_sock_setsockopt+0x3af/0x720
[  194.997216][T10360]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  195.002762][T10360]  ? __fget_files+0x395/0x410
[  195.007444][T10360]  ? __fget_files+0x2a/0x410
[  195.012037][T10360]  __x64_sys_setsockopt+0x1ee/0x280
[  195.017228][T10360]  do_syscall_64+0xf3/0x230
[  195.021729][T10360]  ? clear_bhb_loop+0x35/0x90
[  195.026400][T10360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.032305][T10360] RIP: 0033:0x7f8e4cb85d29
[  195.036733][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.056343][T10360] RSP: 002b:00007f8e4d970038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  195.064761][T10360] RAX: ffffffffffffffda RBX: 00007f8e4cd75fa0 RCX: 00007f8e4cb85d29
[  195.072733][T10360] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000005
[  195.080695][T10360] RBP: 00007f8e4cc01aa8 R08: 0000000000000088 R09: 0000000000000000
[  195.088657][T10360] R10: 0000000020fca000 R11: 0000000000000246 R12: 0000000000000000
[  195.096618][T10360] R13: 0000000000000000 R14: 00007f8e4cd75fa0 R15: 00007ffd8e27d098
[  195.104586][T10360]  </TASK>
[  195.126398][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  195.710350][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.079541][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.138593][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.199064][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.290001][ T1110] bridge_slave_1: left allmulticast mode
[  197.297373][ T1110] bridge_slave_1: left promiscuous mode
[  197.303069][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.312795][ T1110] bridge_slave_0: left allmulticast mode
[  197.319788][ T1110] bridge_slave_0: left promiscuous mode
[  197.327107][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.442315][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.453770][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.463598][ T1110] bond0 (unregistering): Released all slaves
[  197.735486][ T1110] hsr_slave_0: left promiscuous mode
[  197.741260][ T1110] hsr_slave_1: left promiscuous mode
[  197.748441][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.756202][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.763881][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.776344][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.785959][ T1110] veth1_macvtap: left promiscuous mode
[  197.791489][ T1110] veth0_macvtap: left promiscuous mode
[  197.799001][ T1110] veth1_vlan: left promiscuous mode
[  197.804340][ T1110] veth0_vlan: left promiscuous mode
[  197.956956][ T1110] team0 (unregistering): Port device team_slave_1 removed
[  197.988067][ T1110] team0 (unregistering): Port device team_slave_0 removed