last executing test programs:

5.211927497s ago: executing program 4 (id=670):
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x20018001)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000002000000e00000020000000000000000000000000000000000000010000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000fcffffffffffffff00"/105], 0xb8}}, 0x0)

5.081611192s ago: executing program 4 (id=672):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="6000958eebdf574bf67c9700000206050000000000000000000000000005000400000000000900020073797a320000000014000780050015001300000008001240000e8b1b3500050002000000050001000600000011000300686173683a69701748dcd6cad90f7c4a7c33912d19857d642aca70c8081f92"], 0x60}}, 0x40000010)
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003401186dd61bca1e100102100fe800000000000aafe8000000000000000000000000000bb4e224e22048f90784e718314020000000000000000000000a73ec615ce34c745d1166dd08e487293ec72590abf8c0b9d47cdf4893ef85ea9c5fd7ea154691358fc17945ea7db0059c062b2cd25fe4a1c580d9586fa470305c43b3746824d2022659f173eff810b27eab0453ba58d09655f467f979054a84bcdb13188050c2e508be10cd016a43f8155e8d3be5013715cddb1ff27017be4da480fc9833fce982ac1e5dd3d7ec5b85e"], 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x0, 0x216f, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000005c0)="214ded48365bdaea9518b4b8d4656684d7258760671c5c2991cbfb7f21c94ceac620c5be0cc6fde7ddcd2f18c72c68280df7b99d3bb9d9d324ead82bd93e345406f0175e0e45918f905a5d49179965fdfa8f475473ae128435b8d01e1f8706eb599a8ca0e0cca083a2ed12cbd1902abfa6e9946faa80487c941371e35dabe438aea0052ad1965933e984f515b4b0a3c7c98d1efec6db8e5229f25b5513d01273be2bc000d6ca38dc1f6d6c80ec7ae56a24badb6cd6b957a971c979c8dfe7488e3216f28733", 0xc5}, {&(0x7f00000007c0)="fbf0cfa84347f3eb308cb853868a4304d7608dfa8484bc1f38752836747329aa437058c7008bb34ddba3316bc1fe6893a8e7a0280a9e63c8a49ca4e8c251e544ef3bcf67d4c5bb9447433bbf33ff7bcb82411c281c9ed5db229f951903957ac4d1e2ed7601f1fffcbc898b087b0142104638031fc7409113c03eddff1193fd72aba95b1d3ed41282f4c7c98177ffe86f2a985e3330d4c8197d8d11f6221aecd89904ed9764f19e74bce7e3fe", 0xac}, {&(0x7f0000000240)="fa8d61791e69195d1e49e4e2f2196f7ec71ee97c843c59c27997557b058491f80c010f8240310cbe384dc3d422038a16c599ab3f7c7779702ab2bdaccb28", 0x3e}], 0x3)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x29, 0x40085, 0x7d}, 0x2c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012)
getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000003c0)=""/84, &(0x7f0000000180)=0x54)
shutdown(r4, 0x1)
r5 = epoll_create1(0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0xc})
ppoll(&(0x7f0000004140)=[{r5}], 0x1, &(0x7f0000004180)={0x0, 0x989680}, 0x0, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000880)=""/4096, &(0x7f0000000080)=0x1000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001880)="43da2bc9c750e37fc2573f657aaca5fbae11637fc80bf1ea676bdb2c0000c5c5975a075fae12959cf9c4b624a5a09934d0e20fffdd51e97e88df5133999758a03f04ed79127e447ea495840e61b0db649481a6efc530b31cc7bd7a404bd2416b1602", &(0x7f0000001900)="883277d6a7186bc9545e48ba3109894b7d6b4c04410520f9f3127b079d2ecf990c88172e26254669995db63ae0953c878f445fd5d9ecd3055896ef1946309597182bfcc08d39354ddd81873133", 0x1000}, 0x38)

4.523521403s ago: executing program 2 (id=678):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf1000000}, 0x80)

4.24832899s ago: executing program 2 (id=680):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x64000000}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006}, 0x94)

4.105050083s ago: executing program 2 (id=683):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000004135090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008b500004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.958743153s ago: executing program 4 (id=685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27)
socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)

3.856136774s ago: executing program 2 (id=687):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680))
r1 = socket(0xb, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ff", 0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0)

2.315393565s ago: executing program 4 (id=695):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4040154}, 0x8840)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r1, 0x0, 0x20000004)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}}, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0)
close(0x4)
unshare(0x6a040000) (async)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400078008000640000000000900010073797a30"], 0x10c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400078008000640000000000900010073797a30"], 0x10c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4, 0x0, 0x5}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8) (async)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x1000006, 0x692}, 0x10)
sendto$inet6(r7, &(0x7f0000000040)="78d6e3", 0x3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

2.167897476s ago: executing program 2 (id=698):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0xffffff, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000980100000000ffffff7f00", 0x7d, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

2.012645377s ago: executing program 2 (id=699):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="0c76d22d48e57f42d2f12a09585ba95962d9e7210822031d184c04123c4e78ed628eb7", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="a5ae", 0x2}], 0x1}}], 0x2, 0xc8040)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10820, 0x400}}, 0x20}}, 0x4084)

1.714451525s ago: executing program 1 (id=704):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8c4)

1.392398519s ago: executing program 1 (id=706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000202100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}}, 0x0)

1.236683632s ago: executing program 1 (id=707):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000080040085000000d100000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.068204142s ago: executing program 1 (id=709):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="00020000000000003ef455251a95a95edd0000000000000008000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200000009000000000000000000000000cee1d87a6b79ebc900000000"], 0x50)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@local, <r4=>0x0}, &(0x7f0000000380)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="bd038000fcffffff1853000005e3ffffffffffffff000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0xfffffffe)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003e80)=ANY=[], 0x10b8}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
close(0xffffffffffffffff)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4108, 0x100c}, 0x0)
close(r10)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)

981.015291ms ago: executing program 4 (id=711):
r0 = socket$igmp(0x2, 0x3, 0x2)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x32600)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)

792.207485ms ago: executing program 3 (id=713):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

791.898677ms ago: executing program 1 (id=714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002bbd7000fedbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300fdffffff0005b40f1f7a02087ad625142dbfeee8dab47cc107c3543cb6f45c753258e1a215675b631d3a3e8f3f63be147abf93a29d6ddc60cdc52aa169f5f43be82d0063f03727719900dd71a7ab75c059afacdc95afff0a773c202554096187047577810d66743e4751e221bbe18f9a99b1000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0xc010)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x26c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0xb, 0x0, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "d8e470ef753df31bce10507c501a8d76e061240eeaa2611da19604ff72019935eb7698818e6ac71cdd8fa1470b956d15a18377a2f600de3750b7e8cb225c7fd3cb2fec4663277e94d0b6455b3facf60202fdc0a08cbe3f258c8e8ddc8b706b836c1d8e6e2aec2e120259744d41d51336540ca53d21b41e423618ba6ee16b3e445441e5d5db761ef1ade2aca76c407303000000c5f4e14c43e2944f06d30ec82d0753aea9e0cde9b609ebaed609df432832f4b5c6b434a2d5bb08348a06e43a73f94d28f38f4665268e6052be95dfc67a1f67219deef917dd5ab37c557dac4ddd000000000000006922f5c86ff683f6af46de987632768700"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x3}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002bbd7000fedbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300fdffffff0005b40f1f7a02087ad625142dbfeee8dab47cc107c3543cb6f45c753258e1a215675b631d3a3e8f3f63be147abf93a29d6ddc60cdc52aa169f5f43be82d0063f03727719900dd71a7ab75c059afacdc95afff0a773c202554096187047577810d66743e4751e221bbe18f9a99b1000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0xc010) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x26c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0xb, 0x0, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "d8e470ef753df31bce10507c501a8d76e061240eeaa2611da19604ff72019935eb7698818e6ac71cdd8fa1470b956d15a18377a2f600de3750b7e8cb225c7fd3cb2fec4663277e94d0b6455b3facf60202fdc0a08cbe3f258c8e8ddc8b706b836c1d8e6e2aec2e120259744d41d51336540ca53d21b41e423618ba6ee16b3e445441e5d5db761ef1ade2aca76c407303000000c5f4e14c43e2944f06d30ec82d0753aea9e0cde9b609ebaed609df432832f4b5c6b434a2d5bb08348a06e43a73f94d28f38f4665268e6052be95dfc67a1f67219deef917dd5ab37c557dac4ddd000000000000006922f5c86ff683f6af46de987632768700"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x3}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) (async)

778.477399ms ago: executing program 4 (id=715):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x4a301, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
recvmmsg(r5, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r6, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x26, 0x6, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
unshare(0x4000800)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000f40)=""/170, 0xaa}, {0x0}, {&(0x7f0000000e40)=""/217, 0xd9}, {&(0x7f0000000b00)=""/213, 0xd5}, {0x0}, {&(0x7f00000006c0)=""/203, 0xcb}, {0x0}, {&(0x7f0000000480)=""/102, 0x66}], 0x9}, 0x40012000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x14)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x80)
write$tun(r2, 0x0, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x2}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x20, 0x0)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/196, 0xc4}, 0xfffffffc}], 0x1, 0x103, 0x0)

766.017141ms ago: executing program 0 (id=716):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="a0010000100001000000000000190000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000e0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000002000000cd000000000000204800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x0)

652.707363ms ago: executing program 3 (id=717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x84, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @val={0x25, 0x3, {0x7b, 0x30, 0x5}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0xfd, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x200000000000000, 0xc0}, 0x0)

552.253955ms ago: executing program 1 (id=718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000e33f00000a20000000000a01010000000000000000050000000900010073797a300000000048000000030a01030000000000000000050000030900010073797a30000000000900030073797a320000000008000a4000000003140004800800024000000012080002402b780af2140000001126c70000000000000000000000000a244e1a45d3b156ccdf3cddfd3316e74831589c9c9d5de9da3af0040be784e5d9a178f8fb687b145f26c5d5cec73166d3c30c2ea61544a366f897e57529a5e92c6a9ae2f635f33981be9e634dc79e79d242e05db52dc27cd5afab496f691eee6f1b705005c36ae5"], 0x90}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xb0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x170}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2})

535.025586ms ago: executing program 0 (id=719):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0xffffff, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000680200000000ffffff7f00", 0x7d, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

464.808434ms ago: executing program 3 (id=720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000000000f5000000000a20000000000a03000000000000000000070000000900010073797a300000000034000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000002c0000001e0a05010000000000000000070000000900120073797a31000000000900010073797a30"], 0xa8}}, 0x0)

380.341517ms ago: executing program 0 (id=721):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r0, 0x6dfc5000)

361.157295ms ago: executing program 3 (id=722):
r0 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x94)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0x8, 0x4)

340.260319ms ago: executing program 0 (id=723):
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x20018001)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000002000000e000000200000000000000000000000080ffffffffffffff000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000fcffffffffffffff00"/105], 0xb8}}, 0x0)

204.307433ms ago: executing program 0 (id=724):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x0, 0x3}]}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, 0x94)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000001000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

146.54611ms ago: executing program 3 (id=725):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0xf, [0x69d1, 0x4, 0x1, 0x0, 0x5e7, 0x1000, 0xfffffffc, 0x5, 0x8, 0x1, 0x7, 0xb145, 0x6, 0x5d9b, 0x1, 0x6, 0x1, 0x4, 0x2, 0x0, 0xb, 0x7fffffff, 0xffffffff, 0x95b, 0x3, 0x8001, 0x7, 0xe, 0xffffffff, 0x4, 0x7f, 0x1, 0x80, 0x0, 0x7, 0x12, 0x1, 0x8, 0x0, 0xab, 0x7, 0x8, 0x43, 0x5, 0x3, 0x0, 0x0, 0x5, 0x6, 0x5, 0x5, 0x9, 0x4, 0x6, 0x4, 0x80000000, 0x9, 0xf0000000, 0x9, 0x8000, 0x100, 0x0, 0x5, 0xc, 0x4e, 0x6, 0x8, 0x5, 0x1, 0x5, 0x9, 0x6, 0x9, 0x7, 0x3, 0x2e9, 0x7, 0x1, 0x6, 0x4, 0x8000, 0x2, 0x6, 0x27d1, 0x80, 0x7f, 0x8001, 0x0, 0x0, 0x8, 0xffffffff, 0x8, 0x100, 0x400, 0x7, 0x101, 0x9, 0x3, 0x10000, 0x9, 0xff, 0x5, 0xe19d, 0x8ae, 0x4, 0xfffff000, 0x0, 0x7, 0xe, 0x5dc8, 0x7, 0xff, 0x5, 0x1, 0x67de, 0x8001, 0x80, 0x100, 0x8000003, 0xfffffffd, 0x7, 0x6, 0x6, 0x81, 0x0, 0x8d, 0x1, 0xffffff84]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000200000080000014040002800800030000000000050011000200"/44], 0x44}}, 0x8000)

127.446481ms ago: executing program 0 (id=726):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaa91aaaaaabb08004500002c00000000002f9078ac1414aae0000001000022eb00189078040000000101000086ddffff00000000"], 0x3e)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0x8, 0xb}, {0x8, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYRES8=r3, @ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = accept(r0, &(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000380)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000208", @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf251a000000060021006100000004002280"], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0xc800)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000040000000000000000073010600f0ffffff9500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, 0x0)
shutdown(r8, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=727):
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000002140))
socket$key(0xf, 0x3, 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r3, 0x1ad72f7)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
r5 = accept4$netrom(r3, 0x0, 0x0, 0x80000)
writev(r5, &(0x7f0000000480)=[{0x0}], 0x1)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)
getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000840)={@dev, @local, <r8=>0x0}, &(0x7f0000000880)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', <r9=>0x0, 0x2f, 0x8, 0x2, 0x8080, 0x12, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x20, 0x6f, 0xfffffffb}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6gre0\x00', <r10=>0x0, 0x2f, 0x8, 0x8, 0x401, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x10, 0x9, 0x20000000}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x90, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x90}}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="8c66c7147a01a54cbb36aa2ba4be204a026d85bf4a7e006a53952385efc643f288469f8bba383a8ff8285dad1d5e1b5eb3d373342e2e14c7be4b5aba1e7f2a8e6a07db7cd2ba2f174cbf1c06356bca055e3e0fe2bd3bd605a94b63e6057f3fb5e977759543a17d194b318eca31f060f61a121bc6c19de9d71c6e34ae3c1abf05da53a5e250031e0ecfa0febf8e94dbe20203f5f813d41982d2acb5363396a39ce2874624016974ead8d188fc02e1279625be545550d478924d8d9da93a114eb316406f", 0xc3}, {&(0x7f0000000040)="fd16b53074dce78f8d80be8a9ebf3ba886a0fce9d5a7f124afe9ff44f437521d4c6387b54a470020ff56415e1a5005625f8a3598f20a6e93ed826eb06e41ad", 0x3f}, {&(0x7f0000000400)="67ce0429657e477fb6a1df3e5eac020da8ba5b719a081ef2e54e76142678dded190e7c4108d4a88e2afb8951cc11", 0x2e}, {&(0x7f00000006c0)="eeabd6dca16f1c5845987f2757eee87c83f1063cc4d87b720ac7880ed0ead17b735ebdfd4139a54177302a9c30f60e24ade2b4874fc08d94d8486caad08ba5deb1da2fcbd25b787b54c3fd55794ea0a2baf4779abfbb5da808065a5af839d96f30aae717f3e390627b04a162cab8e7a647f291a588fab2f0048ca0c51a2a54e24051f76f9e4feb50f31bdfa6cb043f1bbe22b5da5ccefdc48a24d0f688be435ecdab2e42f05d584c2f60c4dc76a633a9538779966c737b64b02651161af13478fa60ecd81731e4433fd794f282c44b7c4f", 0xd1}], 0x4)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   62.291296][ T5494] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.333618][ T5494] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts.
syzkaller login: [   85.739310][ T5816] cgroup: Unknown subsys name 'net'
[   85.895649][ T5816] cgroup: Unknown subsys name 'cpuset'
[   85.904881][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.661913][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.405988][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.435147][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.442974][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.454409][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.454843][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.463408][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.471674][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.478768][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.485145][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.494039][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.498240][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.512678][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.513375][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.520344][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.535363][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.537555][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.552012][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.560852][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.568393][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.569364][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.584273][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.618901][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.626995][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.638473][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.668120][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.324373][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   91.481898][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   91.537396][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   91.574613][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   91.605804][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   91.732132][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.740438][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.748790][ T5831] bridge_slave_0: entered allmulticast mode
[   91.756772][ T5831] bridge_slave_0: entered promiscuous mode
[   91.809280][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.816685][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.824166][ T5829] bridge_slave_0: entered allmulticast mode
[   91.832347][ T5829] bridge_slave_0: entered promiscuous mode
[   91.854001][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.861160][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.868725][ T5831] bridge_slave_1: entered allmulticast mode
[   91.876070][ T5831] bridge_slave_1: entered promiscuous mode
[   91.919519][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.926809][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.934721][ T5829] bridge_slave_1: entered allmulticast mode
[   91.942255][ T5829] bridge_slave_1: entered promiscuous mode
[   92.042701][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.068993][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.102805][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.112454][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.119651][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.127803][ T5827] bridge_slave_0: entered allmulticast mode
[   92.135667][ T5827] bridge_slave_0: entered promiscuous mode
[   92.146270][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.170950][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.178356][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.185907][ T5843] bridge_slave_0: entered allmulticast mode
[   92.194339][ T5843] bridge_slave_0: entered promiscuous mode
[   92.234393][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.241941][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.249354][ T5827] bridge_slave_1: entered allmulticast mode
[   92.258206][ T5827] bridge_slave_1: entered promiscuous mode
[   92.310240][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.317634][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.325243][ T5843] bridge_slave_1: entered allmulticast mode
[   92.333387][ T5843] bridge_slave_1: entered promiscuous mode
[   92.342005][ T5829] team0: Port device team_slave_0 added
[   92.364906][ T5831] team0: Port device team_slave_0 added
[   92.371125][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.378530][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.386068][ T5828] bridge_slave_0: entered allmulticast mode
[   92.393454][ T5828] bridge_slave_0: entered promiscuous mode
[   92.418988][ T5829] team0: Port device team_slave_1 added
[   92.442859][ T5831] team0: Port device team_slave_1 added
[   92.452460][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.477285][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.484918][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.495052][ T5828] bridge_slave_1: entered allmulticast mode
[   92.502689][ T5828] bridge_slave_1: entered promiscuous mode
[   92.539337][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.594983][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.608167][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.646713][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.653758][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.673336][ T5848] Bluetooth: hci3: command tx timeout
[   92.680804][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.685492][ T5839] Bluetooth: hci1: command tx timeout
[   92.701781][ T5846] Bluetooth: hci0: command tx timeout
[   92.701789][ T5845] Bluetooth: hci2: command tx timeout
[   92.732446][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.739465][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.751813][ T5846] Bluetooth: hci4: command tx timeout
[   92.770584][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.785192][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.792304][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.819015][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.833321][ T5827] team0: Port device team_slave_0 added
[   92.840165][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.847359][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.873868][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.887757][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.901074][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.934673][ T5827] team0: Port device team_slave_1 added
[   92.965269][ T5843] team0: Port device team_slave_0 added
[   92.990035][ T5828] team0: Port device team_slave_0 added
[   93.040055][ T5843] team0: Port device team_slave_1 added
[   93.064029][ T5828] team0: Port device team_slave_1 added
[   93.088019][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.095623][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.122038][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.180909][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.188538][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.215351][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.227749][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.235375][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.262343][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.295296][ T5829] hsr_slave_0: entered promiscuous mode
[   93.302605][ T5829] hsr_slave_1: entered promiscuous mode
[   93.324830][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.332130][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.358435][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.383735][ T5831] hsr_slave_0: entered promiscuous mode
[   93.390323][ T5831] hsr_slave_1: entered promiscuous mode
[   93.397556][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.405424][ T5831] Cannot create hsr debugfs directory
[   93.439059][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.446762][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.473307][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.486848][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.494024][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.520244][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.656986][ T5827] hsr_slave_0: entered promiscuous mode
[   93.663788][ T5827] hsr_slave_1: entered promiscuous mode
[   93.669973][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.677704][ T5827] Cannot create hsr debugfs directory
[   93.751371][ T5843] hsr_slave_0: entered promiscuous mode
[   93.758196][ T5843] hsr_slave_1: entered promiscuous mode
[   93.765054][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.773042][ T5843] Cannot create hsr debugfs directory
[   93.904642][ T5828] hsr_slave_0: entered promiscuous mode
[   93.911445][ T5828] hsr_slave_1: entered promiscuous mode
[   93.917917][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.925583][ T5828] Cannot create hsr debugfs directory
[   94.418682][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.433272][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.473154][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.492382][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.570777][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.594470][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.605647][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.623681][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.706735][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.735649][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.752341][ T5846] Bluetooth: hci0: command tx timeout
[   94.757820][ T5839] Bluetooth: hci3: command tx timeout
[   94.757851][ T5845] Bluetooth: hci2: command tx timeout
[   94.769106][ T5848] Bluetooth: hci1: command tx timeout
[   94.789747][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.817327][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.832348][ T5848] Bluetooth: hci4: command tx timeout
[   94.894175][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.908246][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.949943][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.964979][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.016922][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.078620][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.098297][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.123719][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.153074][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.178933][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   95.233718][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.271458][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.278990][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.299993][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   95.337116][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.344327][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.384808][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.392134][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.404509][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.411858][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.485579][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.564403][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   95.586700][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.616666][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.623969][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.650524][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.673748][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.680930][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.713608][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   95.757227][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   95.821499][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.828785][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.853810][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.861045][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.917905][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.925173][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.946018][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.953814][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.155490][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.191450][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.287049][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.563727][ T5843] veth0_vlan: entered promiscuous mode
[   96.644787][ T5843] veth1_vlan: entered promiscuous mode
[   96.710325][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.835289][ T5845] Bluetooth: hci2: command tx timeout
[   96.840773][ T5845] Bluetooth: hci0: command tx timeout
[   96.841866][ T5846] Bluetooth: hci3: command tx timeout
[   96.848092][ T5848] Bluetooth: hci1: command tx timeout
[   96.858550][ T5843] veth0_macvtap: entered promiscuous mode
[   96.877321][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.913044][ T5848] Bluetooth: hci4: command tx timeout
[   96.931352][ T5843] veth1_macvtap: entered promiscuous mode
[   96.984359][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.994863][ T5827] veth0_vlan: entered promiscuous mode
[   97.039600][ T5827] veth1_vlan: entered promiscuous mode
[   97.074319][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.126920][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.138297][ T5828] veth0_vlan: entered promiscuous mode
[   97.168194][   T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.194317][   T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.205764][   T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.228783][ T5831] veth0_vlan: entered promiscuous mode
[   97.248797][   T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.267289][ T5827] veth0_macvtap: entered promiscuous mode
[   97.277712][ T5828] veth1_vlan: entered promiscuous mode
[   97.289659][ T5831] veth1_vlan: entered promiscuous mode
[   97.315876][   T24] cfg80211: failed to load regulatory.db
[   97.334370][ T5827] veth1_macvtap: entered promiscuous mode
[   97.343430][ T5829] veth0_vlan: entered promiscuous mode
[   97.416817][ T5829] veth1_vlan: entered promiscuous mode
[   97.428223][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.485709][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.502003][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.516887][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.526262][ T5831] veth0_macvtap: entered promiscuous mode
[   97.586024][ T5831] veth1_macvtap: entered promiscuous mode
[   97.601249][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.611041][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.625504][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.626455][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.635720][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.653057][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.657763][ T5828] veth0_macvtap: entered promiscuous mode
[   97.681611][ T5829] veth0_macvtap: entered promiscuous mode
[   97.694403][ T5828] veth1_macvtap: entered promiscuous mode
[   97.711024][ T5829] veth1_macvtap: entered promiscuous mode
[   97.776355][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.791169][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.807800][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.818280][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.859005][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.880231][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.925599][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.947627][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.971293][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.987844][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.999875][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.028454][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.034185][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.049652][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.050471][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   98.091407][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.113071][ T5951] vlan2: entered promiscuous mode
[   98.118413][ T5951] dummy0: entered promiscuous mode
[   98.141514][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.154302][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.184881][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.198128][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.270366][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.338812][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.357081][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.367260][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.375897][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.406086][   T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.475587][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.486478][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.503290][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.511014][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.645802][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.653991][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.757798][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.776454][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.912241][ T5848] Bluetooth: hci3: command tx timeout
[   98.917771][ T5845] Bluetooth: hci2: command tx timeout
[   98.917791][ T5846] Bluetooth: hci1: command tx timeout
[   98.923837][ T5848] Bluetooth: hci0: command tx timeout
[   98.947219][ T5957] bridge_slave_0: left allmulticast mode
[   98.953423][ T5957] bridge_slave_0: left promiscuous mode
[   98.959271][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.980991][ T5957] bridge_slave_1: left allmulticast mode
[   98.988542][ T5957] bridge_slave_1: left promiscuous mode
[   98.994852][ T5848] Bluetooth: hci4: command tx timeout
[   99.000666][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.015919][ T5957] bond0: (slave bond_slave_0): Releasing backup interface
[   99.027582][ T5957] bond0: (slave bond_slave_1): Releasing backup interface
[   99.042815][ T5957] team0: Port device team_slave_0 removed
[   99.055163][ T5957] team0: Port device team_slave_1 removed
[   99.063356][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.070822][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.083576][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.091129][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.107747][   T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.117549][   T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.168299][ T5955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.199091][   T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.222644][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.235424][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.253506][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.266660][ T5953] syz.1.6 (5953) used greatest stack depth: 20056 bytes left
[   99.269473][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.376146][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.404193][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.486237][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.522851][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.642429][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   99.679387][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'.
[   99.708601][ T5965] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   99.719111][ T5967] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.822650][ T5968] veth0: entered promiscuous mode
[   99.859229][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[  100.006961][ T5972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'.
[  100.121072][ T5972] nbd: socks must be embedded in a SOCK_ITEM attr
[  100.167659][ T5883] block nbd64: NBD_DISCONNECT
[  100.189750][ T5976] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  100.525905][ T5988] Zero length message leads to an empty skb
[  100.581718][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'.
[  100.619511][ T5882] udevd[5882]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  100.658752][ T5986] vlan2: entered promiscuous mode
[  100.679526][ T5986] dummy0: entered promiscuous mode
[  100.768568][ T5995] veth0: entered promiscuous mode
[  100.799710][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'.
[  101.059262][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'.
[  101.634874][ T6016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16'.
[  101.651840][ T6016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16'.
[  101.702459][ T6016] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[  101.738307][ T6016] IPv6: syztnl1: Disabled Multicast RS
[  101.782415][ T6021] vlan2: entered promiscuous mode
[  101.801745][ T6021] ip6gretap0: entered promiscuous mode
[  102.206080][ T6034] Cannot find add_set index 0 as target
[  102.652879][ T6058] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET)
[  102.984889][ T6070] netlink: 'syz.3.28': attribute type 178 has an invalid length.
[  103.147471][ T6076] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.160228][ T6076] bond0: (slave bond1): Enslaving as an active interface with an up link
[  104.374787][ T6117] __nla_validate_parse: 3 callbacks suppressed
[  104.374809][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'.
[  104.410902][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'.
[  104.456889][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'.
[  104.487058][ T6119] netlink: 104 bytes leftover after parsing attributes in process `syz.0.41'.
[  104.888303][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[  104.948825][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'.
[  105.099055][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'.
[  105.192127][ T6139] dummy0: entered promiscuous mode
[  105.275637][ T6139] dummy0: left promiscuous mode
[  105.312229][ T6143] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[  105.320112][ T6143] netlink: 224 bytes leftover after parsing attributes in process `syz.0.50'.
[  105.330083][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'.
[  105.377444][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'.
[  105.387784][ T6141] vlan2: entered promiscuous mode
[  105.794540][ T6157] team0: Device vlan2 is already an upper device of the team interface
[  106.094706][ T6160] Bluetooth: MGMT ver 1.23
[  106.254007][ T6175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.696313][ T6130] sctp: failed to load transform for md5: -4
[  109.320881][ T6265] netlink: 'syz.3.84': attribute type 10 has an invalid length.
[  109.336097][ T6271] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.535009][ T6282] __nla_validate_parse: 10 callbacks suppressed
[  109.535034][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'.
[  109.567001][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.622649][ T6265] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  109.709122][ T6282] nbd: socks must be embedded in a SOCK_ITEM attr
[  109.820161][ T5987] block nbd64: NBD_DISCONNECT
[  110.141985][ T6298] netlink: 'syz.1.93': attribute type 11 has an invalid length.
[  110.149858][ T6298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.93'.
[  110.275467][ T5882] udevd[5882]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  110.383848][ T6303] x_tables: duplicate underflow at hook 1
[  110.434359][ T6306] Cannot find add_set index 0 as target
[  110.504315][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'.
[  110.644794][ T6316] netlink: 64 bytes leftover after parsing attributes in process `syz.3.98'.
[  110.885087][ T6322] netlink: 104 bytes leftover after parsing attributes in process `syz.2.97'.
[  110.932311][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.99'.
[  111.584671][ T6338] geneve2: entered promiscuous mode
[  112.514051][ T6351] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  112.793489][ T6386] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.116862][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.119'.
[  113.385219][ T6413] netlink: 596 bytes leftover after parsing attributes in process `syz.2.123'.
[  113.546989][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.554872][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.820816][ T6431] xt_hashlimit: size too large, truncated to 1048576
[  114.025761][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.091428][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.569811][ T6438] team0: Device vlan2 is already an upper device of the team interface
[  114.587780][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[  114.661013][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'.
[  114.675711][ T1023] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.689863][ T1023] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.699856][ T1023] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.709997][ T1023] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.894975][ T6452] netlink: 'syz.0.137': attribute type 5 has an invalid length.
[  115.462525][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[  115.607156][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[  115.727526][ T6490] ip6gre1: entered allmulticast mode
[  115.766995][ T6490] netlink: 104 bytes leftover after parsing attributes in process `syz.1.148'.
[  115.795126][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'.
[  115.869658][ T6494] vlan2: entered promiscuous mode
[  115.922643][ T6494] dummy0: entered promiscuous mode
[  116.002651][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'.
[  116.453126][ T6521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  116.937098][ T6542] xt_hashlimit: size too large, truncated to 1048576
[  117.057346][ T6548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.165'.
[  117.107926][ T6548] Bluetooth: MGMT ver 1.23
[  117.283187][ T6555] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  117.329128][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.1.166 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  117.329160][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.329180][ T6555] Call Trace:
[  117.329190][ T6555]  <TASK>
[  117.329200][ T6555]  dump_stack_lvl+0x189/0x250
[  117.329254][ T6555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.329288][ T6555]  ? __pfx__printk+0x10/0x10
[  117.329312][ T6555]  ? kernfs_path_from_node+0x2c/0x260
[  117.329336][ T6555]  ? kernfs_path_from_node+0x2c/0x260
[  117.329358][ T6555]  ? kernfs_path_from_node+0x2c/0x260
[  117.329384][ T6555]  ? kernfs_path_from_node+0x22c/0x260
[  117.329407][ T6555]  ? kernfs_path_from_node+0x2c/0x260
[  117.329435][ T6555]  sysfs_warn_dup+0x8e/0xa0
[  117.329457][ T6555]  sysfs_do_create_link_sd+0xc0/0x110
[  117.329484][ T6555]  device_add_class_symlinks+0x1cf/0x240
[  117.329511][ T6555]  device_add+0x475/0xb50
[  117.329538][ T6555]  wiphy_register+0x1ba6/0x28d0
[  117.329584][ T6555]  ? __pfx_wiphy_register+0x10/0x10
[  117.329608][ T6555]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  117.329648][ T6555]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  117.329684][ T6555]  ieee80211_register_hw+0x33e1/0x4120
[  117.329744][ T6555]  ? ieee80211_register_hw+0x1481/0x4120
[  117.329786][ T6555]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  117.329824][ T6555]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  117.329855][ T6555]  ? __hrtimer_setup+0x187/0x210
[  117.329885][ T6555]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  117.329917][ T6555]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  117.329978][ T6555]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  117.330002][ T6555]  ? trace_kmalloc+0x1f/0xd0
[  117.330032][ T6555]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  117.330052][ T6555]  ? kstrndup+0xbf/0x160
[  117.330089][ T6555]  hwsim_new_radio_nl+0xea4/0x1b10
[  117.330118][ T6555]  ? __pfx___nla_validate_parse+0x10/0x10
[  117.330165][ T6555]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  117.330205][ T6555]  ? __nla_parse+0x40/0x60
[  117.330239][ T6555]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  117.330283][ T6555]  genl_family_rcv_msg_doit+0x212/0x300
[  117.330323][ T6555]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  117.330372][ T6555]  ? bpf_lsm_capable+0x9/0x20
[  117.330389][ T6555]  ? security_capable+0x7e/0x2e0
[  117.330423][ T6555]  genl_rcv_msg+0x60e/0x790
[  117.330463][ T6555]  ? __pfx_genl_rcv_msg+0x10/0x10
[  117.330494][ T6555]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  117.330535][ T6555]  netlink_rcv_skb+0x208/0x470
[  117.330562][ T6555]  ? __pfx_genl_rcv_msg+0x10/0x10
[  117.330597][ T6555]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  117.330644][ T6555]  ? down_read+0x1ad/0x2e0
[  117.330674][ T6555]  genl_rcv+0x28/0x40
[  117.330709][ T6555]  netlink_unicast+0x75b/0x8d0
[  117.330746][ T6555]  netlink_sendmsg+0x805/0xb30
[  117.330784][ T6555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.330815][ T6555]  ? aa_sock_msg_perm+0x94/0x160
[  117.330843][ T6555]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  117.330869][ T6555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.330897][ T6555]  __sock_sendmsg+0x219/0x270
[  117.330924][ T6555]  ____sys_sendmsg+0x505/0x830
[  117.330963][ T6555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.331006][ T6555]  ? import_iovec+0x74/0xa0
[  117.331031][ T6555]  ___sys_sendmsg+0x21f/0x2a0
[  117.331064][ T6555]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.331138][ T6555]  ? __fget_files+0x2a/0x420
[  117.331161][ T6555]  ? __fget_files+0x3a0/0x420
[  117.331196][ T6555]  __x64_sys_sendmsg+0x19b/0x260
[  117.331231][ T6555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  117.331276][ T6555]  ? rcu_is_watching+0x15/0xb0
[  117.331314][ T6555]  ? do_syscall_64+0xbe/0x3b0
[  117.331343][ T6555]  do_syscall_64+0xfa/0x3b0
[  117.331367][ T6555]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.331389][ T6555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.331410][ T6555]  ? clear_bhb_loop+0x60/0xb0
[  117.331436][ T6555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.331457][ T6555] RIP: 0033:0x7f3793b8e929
[  117.331483][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.331500][ T6555] RSP: 002b:00007f3794a11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.331524][ T6555] RAX: ffffffffffffffda RBX: 00007f3793db5fa0 RCX: 00007f3793b8e929
[  117.331538][ T6555] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000004
[  117.331551][ T6555] RBP: 00007f3793c10b39 R08: 0000000000000000 R09: 0000000000000000
[  117.331563][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.331575][ T6555] R13: 0000000000000000 R14: 00007f3793db5fa0 R15: 00007fffaad91f28
[  117.331608][ T6555]  </TASK>
[  117.954141][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'.
[  118.090854][ T6567] netlink: 'syz.0.169': attribute type 10 has an invalid length.
[  118.225577][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.263462][ T6570] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.372547][ T6567] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  118.686578][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'.
[  118.727682][ T6581] xt_CT: No such helper "pptp"
[  119.202469][ T6601] netlink: 'syz.4.184': attribute type 12 has an invalid length.
[  119.638363][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv1
[  119.674397][ T6618] team0: Port device batadv1 added
[  119.908528][ T6631] pim6reg: entered allmulticast mode
[  119.917891][ T6631] geneve1: entered allmulticast mode
[  119.972524][ T6635] __nla_validate_parse: 3 callbacks suppressed
[  119.972547][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.195'.
[  120.125477][ T6638] xt_hashlimit: size too large, truncated to 1048576
[  120.335175][ T6644] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  120.351088][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.4.199 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  120.351121][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  120.351134][ T6644] Call Trace:
[  120.351143][ T6644]  <TASK>
[  120.351152][ T6644]  dump_stack_lvl+0x189/0x250
[  120.351197][ T6644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.351232][ T6644]  ? __pfx__printk+0x10/0x10
[  120.351255][ T6644]  ? kernfs_path_from_node+0x2c/0x260
[  120.351282][ T6644]  ? kernfs_path_from_node+0x2c/0x260
[  120.351306][ T6644]  ? kernfs_path_from_node+0x2c/0x260
[  120.351333][ T6644]  ? kernfs_path_from_node+0x22c/0x260
[  120.351357][ T6644]  ? kernfs_path_from_node+0x2c/0x260
[  120.351387][ T6644]  sysfs_warn_dup+0x8e/0xa0
[  120.351424][ T6644]  sysfs_do_create_link_sd+0xc0/0x110
[  120.351453][ T6644]  device_add_class_symlinks+0x1cf/0x240
[  120.351482][ T6644]  device_add+0x475/0xb50
[  120.351510][ T6644]  wiphy_register+0x1ba6/0x28d0
[  120.351559][ T6644]  ? __pfx_wiphy_register+0x10/0x10
[  120.351584][ T6644]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  120.351624][ T6644]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  120.351660][ T6644]  ieee80211_register_hw+0x33e1/0x4120
[  120.351713][ T6644]  ? ieee80211_register_hw+0x1481/0x4120
[  120.351757][ T6644]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  120.351795][ T6644]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.351828][ T6644]  ? __hrtimer_setup+0x187/0x210
[  120.351859][ T6644]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  120.351892][ T6644]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  120.351953][ T6644]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  120.351976][ T6644]  ? trace_kmalloc+0x1f/0xd0
[  120.352007][ T6644]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  120.352029][ T6644]  ? kstrndup+0xbf/0x160
[  120.352066][ T6644]  hwsim_new_radio_nl+0xea4/0x1b10
[  120.352094][ T6644]  ? __pfx___nla_validate_parse+0x10/0x10
[  120.352144][ T6644]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  120.352186][ T6644]  ? __nla_parse+0x40/0x60
[  120.352221][ T6644]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  120.352266][ T6644]  genl_family_rcv_msg_doit+0x212/0x300
[  120.352306][ T6644]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  120.352355][ T6644]  ? bpf_lsm_capable+0x9/0x20
[  120.352372][ T6644]  ? security_capable+0x7e/0x2e0
[  120.352415][ T6644]  genl_rcv_msg+0x60e/0x790
[  120.352457][ T6644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.352488][ T6644]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  120.352532][ T6644]  netlink_rcv_skb+0x208/0x470
[  120.352559][ T6644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.352594][ T6644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  120.352641][ T6644]  ? down_read+0x1ad/0x2e0
[  120.352673][ T6644]  genl_rcv+0x28/0x40
[  120.352703][ T6644]  netlink_unicast+0x75b/0x8d0
[  120.352740][ T6644]  netlink_sendmsg+0x805/0xb30
[  120.352779][ T6644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.352811][ T6644]  ? aa_sock_msg_perm+0x94/0x160
[  120.352839][ T6644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  120.352866][ T6644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.352894][ T6644]  __sock_sendmsg+0x219/0x270
[  120.352921][ T6644]  ____sys_sendmsg+0x505/0x830
[  120.352959][ T6644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.353003][ T6644]  ? import_iovec+0x74/0xa0
[  120.353028][ T6644]  ___sys_sendmsg+0x21f/0x2a0
[  120.353061][ T6644]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.353135][ T6644]  ? __fget_files+0x2a/0x420
[  120.353158][ T6644]  ? __fget_files+0x3a0/0x420
[  120.353193][ T6644]  __x64_sys_sendmsg+0x19b/0x260
[  120.353230][ T6644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  120.353276][ T6644]  ? rcu_is_watching+0x15/0xb0
[  120.353316][ T6644]  ? do_syscall_64+0xbe/0x3b0
[  120.353348][ T6644]  do_syscall_64+0xfa/0x3b0
[  120.353372][ T6644]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.353403][ T6644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.353425][ T6644]  ? clear_bhb_loop+0x60/0xb0
[  120.353453][ T6644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.353474][ T6644] RIP: 0033:0x7f837f18e929
[  120.353494][ T6644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.353522][ T6644] RSP: 002b:00007f8380057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.353546][ T6644] RAX: ffffffffffffffda RBX: 00007f837f3b5fa0 RCX: 00007f837f18e929
[  120.353561][ T6644] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000004
[  120.353576][ T6644] RBP: 00007f837f210b39 R08: 0000000000000000 R09: 0000000000000000
[  120.353589][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.353601][ T6644] R13: 0000000000000000 R14: 00007f837f3b5fa0 R15: 00007ffcb3e08ca8
[  120.353637][ T6644]  </TASK>
[  120.901629][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'.
[  120.925863][ T6649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.958610][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'.
[  120.987446][ T6650] netlink: 48 bytes leftover after parsing attributes in process `syz.3.202'.
[  121.281723][ T6666] netlink: 104 bytes leftover after parsing attributes in process `syz.3.209'.
[  121.504732][ T6673] Cannot find add_set index 0 as target
[  122.127439][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'.
[  122.152880][ T6699] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[  122.200353][ T6702] netlink: 248 bytes leftover after parsing attributes in process `syz.4.223'.
[  122.241633][ T6699] netlink: 244 bytes leftover after parsing attributes in process `syz.0.221'.
[  122.256877][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'.
[  122.357037][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'.
[  123.350401][ T6739] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  123.381868][ T6741] netlink: 'syz.3.237': attribute type 12 has an invalid length.
[  123.640495][ T6748] nbd: socks must be embedded in a SOCK_ITEM attr
[  124.231396][ T6773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.454880][ T6812] netlink: 'syz.0.254': attribute type 10 has an invalid length.
[  125.492159][ T6809] __nla_validate_parse: 5 callbacks suppressed
[  125.492181][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'.
[  126.007576][ T6828] netlink: 'syz.2.261': attribute type 10 has an invalid length.
[  126.033423][ T6828] openvswitch: netlink: Flow key attr not present in new flow.
[  126.243026][ T6833] netlink: 72 bytes leftover after parsing attributes in process `syz.1.262'.
[  126.273275][ T6833] tipc: Started in network mode
[  126.278261][ T6833] tipc: Node identity , cluster identity 4711
[  126.325724][ T6833] tipc: Failed to obtain node identity
[  126.331312][ T6833] tipc: Enabling of bearer <eth:wg1> rejected, failed to enable media
[  126.512358][ T6835] veth0: entered promiscuous mode
[  126.571367][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'.
[  127.310208][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'.
[  127.355140][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'.
[  127.492026][ T6871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.274'.
[  127.758373][ T6882] Cannot find add_set index 0 as target
[  128.082576][ T6896] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  128.127574][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'.
[  128.260256][ T6907] xt_hashlimit: size too large, truncated to 1048576
[  129.149577][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[  129.443617][ T6951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.809503][ T6962] sctp: [Deprecated]: syz.2.301 (pid 6962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.809503][ T6962] Use struct sctp_sack_info instead
[  130.085955][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'.
[  130.115110][ T6970] vlan2: entered promiscuous mode
[  130.345458][ T6978] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96
[  130.640340][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'.
[  130.642802][ T6990] netlink: 'syz.3.313': attribute type 11 has an invalid length.
[  130.682985][ T6991] vlan2: entered promiscuous mode
[  130.688656][ T6991] ip6gretap0: entered promiscuous mode
[  130.924033][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'.
[  130.977483][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.318'.
[  131.059618][ T7004] netlink: 'syz.2.319': attribute type 2 has an invalid length.
[  131.077932][ T7006] netlink: 104 bytes leftover after parsing attributes in process `syz.3.320'.
[  131.508841][ T7020] team0: Device vlan2 is already an upper device of the team interface
[  132.007862][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'.
[  132.038287][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'.
[  132.057813][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  132.098056][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.333'.
[  132.461348][ T7052] FAULT_INJECTION: forcing a failure.
[  132.461348][ T7052] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  132.512893][ T7052] CPU: 1 UID: 0 PID: 7052 Comm: syz.3.337 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  132.512925][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  132.512938][ T7052] Call Trace:
[  132.512946][ T7052]  <TASK>
[  132.512956][ T7052]  dump_stack_lvl+0x189/0x250
[  132.513007][ T7052]  ? __pfx____ratelimit+0x10/0x10
[  132.513032][ T7052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.513065][ T7052]  ? __pfx__printk+0x10/0x10
[  132.513088][ T7052]  ? __might_fault+0xb0/0x130
[  132.513131][ T7052]  should_fail_ex+0x414/0x560
[  132.513161][ T7052]  _copy_from_iter+0x1db/0x16f0
[  132.513203][ T7052]  ? policy_nodemask+0x27c/0x720
[  132.513223][ T7052]  ? __pfx__copy_from_iter+0x10/0x10
[  132.513261][ T7052]  ? set_page_refcounted+0xa0/0x1e0
[  132.513283][ T7052]  ? page_copy_sane+0x4e/0x280
[  132.513315][ T7052]  copy_page_from_iter+0xdd/0x170
[  132.513350][ T7052]  tun_get_user+0x1c4d/0x3ce0
[  132.513373][ T7052]  ? tun_get_user+0x693/0x3ce0
[  132.513405][ T7052]  ? aa_file_perm+0x11f/0xed0
[  132.513434][ T7052]  ? __pfx_tun_get_user+0x10/0x10
[  132.513451][ T7052]  ? aa_file_perm+0x11f/0xed0
[  132.513478][ T7052]  ? aa_file_perm+0x3e7/0xed0
[  132.513519][ T7052]  ? ref_tracker_alloc+0x318/0x460
[  132.513544][ T7052]  ? __lock_acquire+0xab9/0xd20
[  132.513576][ T7052]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  132.513609][ T7052]  ? tun_get+0x1c/0x2f0
[  132.513634][ T7052]  ? tun_get+0x1c/0x2f0
[  132.513652][ T7052]  ? tun_get+0x1c/0x2f0
[  132.513676][ T7052]  tun_chr_write_iter+0x113/0x200
[  132.513712][ T7052]  vfs_write+0x548/0xa90
[  132.513749][ T7052]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  132.513783][ T7052]  ? __pfx_vfs_write+0x10/0x10
[  132.513825][ T7052]  ? __fget_files+0x2a/0x420
[  132.513858][ T7052]  ksys_write+0x145/0x250
[  132.513892][ T7052]  ? __pfx_ksys_write+0x10/0x10
[  132.513922][ T7052]  ? rcu_is_watching+0x15/0xb0
[  132.513960][ T7052]  ? do_syscall_64+0xbe/0x3b0
[  132.513989][ T7052]  do_syscall_64+0xfa/0x3b0
[  132.514020][ T7052]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.514042][ T7052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.514063][ T7052]  ? clear_bhb_loop+0x60/0xb0
[  132.514089][ T7052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.514109][ T7052] RIP: 0033:0x7f7035f8d3df
[  132.514134][ T7052] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  132.514151][ T7052] RSP: 002b:00007f7036d39000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  132.514173][ T7052] RAX: ffffffffffffffda RBX: 00007f70361b5fa0 RCX: 00007f7035f8d3df
[  132.514188][ T7052] RDX: 0000000000000046 RSI: 0000200000000200 RDI: 00000000000000c8
[  132.514201][ T7052] RBP: 00007f7036d39090 R08: 0000000000000000 R09: 0000000000000000
[  132.514214][ T7052] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001
[  132.514230][ T7052] R13: 0000000000000000 R14: 00007f70361b5fa0 R15: 00007ffc7afcf438
[  132.514262][ T7052]  </TASK>
[  132.823503][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'.
[  132.840011][ T7055] vlan3: entered promiscuous mode
[  132.845350][ T7055] dummy0: entered promiscuous mode
[  133.203251][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[  133.682442][ T7086] netlink: 'syz.3.351': attribute type 10 has an invalid length.
[  134.577703][ T7107] xt_CT: You must specify a L4 protocol and not use inversions on it
[  134.940541][ T7083] syz.0.350: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  134.968729][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.0.350 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  134.968760][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.968774][ T7083] Call Trace:
[  134.968783][ T7083]  <TASK>
[  134.968792][ T7083]  dump_stack_lvl+0x189/0x250
[  134.968835][ T7083]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.968870][ T7083]  ? __pfx__printk+0x10/0x10
[  134.968894][ T7083]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  134.968918][ T7083]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  134.968944][ T7083]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  134.968971][ T7083]  warn_alloc+0x214/0x310
[  134.969003][ T7083]  ? __pfx_warn_alloc+0x10/0x10
[  134.969038][ T7083]  ? __get_vm_area_node+0x28f/0x300
[  134.969061][ T7083]  ? __do_replace+0xb4/0xaa0
[  134.969098][ T7083]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  134.969120][ T7083]  ? stack_depot_save_flags+0x40/0x900
[  134.969172][ T7083]  ? translate_table+0x1b4d/0x1f90
[  134.969206][ T7083]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  134.969238][ T7083]  ? __do_replace+0xb4/0xaa0
[  134.969270][ T7083]  vzalloc_noprof+0xb2/0xf0
[  134.969292][ T7083]  ? __do_replace+0xb4/0xaa0
[  134.969326][ T7083]  __do_replace+0xb4/0xaa0
[  134.969361][ T7083]  ? __pfx_translate_table+0x10/0x10
[  134.969399][ T7083]  ? __pfx___do_replace+0x10/0x10
[  134.969442][ T7083]  ? _copy_from_user+0x94/0xb0
[  134.969468][ T7083]  do_arpt_set_ctl+0xa2a/0xf10
[  134.969505][ T7083]  ? __mutex_trylock_common+0x153/0x260
[  134.969531][ T7083]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  134.969569][ T7083]  ? rcu_is_watching+0x15/0xb0
[  134.969620][ T7083]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  134.969649][ T7083]  ? __pfx___mutex_lock+0x10/0x10
[  134.969675][ T7083]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  134.969700][ T7083]  ? aa_sk_perm+0x81e/0x950
[  134.969742][ T7083]  ? __pfx_aa_sk_perm+0x10/0x10
[  134.969775][ T7083]  nf_setsockopt+0x26f/0x290
[  134.969807][ T7083]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  134.969836][ T7083]  do_sock_setsockopt+0x25a/0x3e0
[  134.969868][ T7083]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  134.969903][ T7083]  ? __fget_files+0x2a/0x420
[  134.969937][ T7083]  __x64_sys_setsockopt+0x18b/0x220
[  134.969974][ T7083]  do_syscall_64+0xfa/0x3b0
[  134.969998][ T7083]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.970021][ T7083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.970041][ T7083]  ? clear_bhb_loop+0x60/0xb0
[  134.970066][ T7083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.970086][ T7083] RIP: 0033:0x7f63e898e929
[  134.970107][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.970125][ T7083] RSP: 002b:00007f63e97b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  134.970148][ T7083] RAX: ffffffffffffffda RBX: 00007f63e8bb6160 RCX: 00007f63e898e929
[  134.970164][ T7083] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  134.970177][ T7083] RBP: 00007f63e8a10b39 R08: 0000000000000068 R09: 0000000000000000
[  134.970190][ T7083] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  134.970204][ T7083] R13: 0000000000000000 R14: 00007f63e8bb6160 R15: 00007ffdf639d698
[  134.970238][ T7083]  </TASK>
[  134.970345][ T7083] Mem-Info:
[  135.295871][ T7083] active_anon:9039 inactive_anon:0 isolated_anon:0
[  135.295871][ T7083]  active_file:1430 inactive_file:39837 isolated_file:0
[  135.295871][ T7083]  unevictable:768 dirty:236 writeback:0
[  135.295871][ T7083]  slab_reclaimable:10391 slab_unreclaimable:98105
[  135.295871][ T7083]  mapped:33271 shmem:4240 pagetables:1074
[  135.295871][ T7083]  sec_pagetables:0 bounce:0
[  135.295871][ T7083]  kernel_misc_reclaimable:0
[  135.295871][ T7083]  free:1324082 free_pcp:11810 free_cma:0
[  135.345043][ T7083] Node 0 active_anon:36156kB inactive_anon:0kB active_file:5720kB inactive_file:159144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133084kB dirty:940kB writeback:0kB shmem:15424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11700kB pagetables:4172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  135.410779][ T7083] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  135.449119][ T7083] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  135.484317][ T7083] lowmem_reserve[]: 0 2500 2502 2502 2502
[  135.490273][ T7083] Node 0 DMA32 free:1384140kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36012kB inactive_anon:0kB active_file:5720kB inactive_file:157300kB unevictable:1536kB writepending:940kB present:3129332kB managed:2560928kB mlocked:0kB bounce:0kB free_pcp:25916kB local_pcp:15316kB free_cma:0kB
[  135.553900][ T7083] lowmem_reserve[]: 0 0 1 1 1
[  135.564141][ T7083] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  135.600528][ T7083] lowmem_reserve[]: 0 0 0 0 0
[  135.605749][ T7083] Node 1 Normal free:3896824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22880kB local_pcp:13472kB free_cma:0kB
[  135.639398][ T7083] lowmem_reserve[]: 0 0 0 0 0
[  135.644541][ T7083] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  135.678154][ T7083] Node 0 DMA32: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 51*32kB (ME) 51*64kB (UM) 36*128kB (UME) 14*256kB (ME) 10*512kB (ME) 10*1024kB (UM) 4*2048kB (UM) 329*4096kB (UM) = 1384268kB
[  135.699946][ T7083] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  135.713057][ T7083] Node 1 Normal: 182*4kB (UME) 40*8kB (UME) 50*16kB (UME) 68*32kB (UME) 29*64kB (UME) 8*128kB (UME) 5*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896824kB
[  135.732987][ T7083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  135.752922][ T7083] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  135.762773][ T7083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  135.809680][ T7083] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  135.829798][ T7083] 45504 total pagecache pages
[  135.839930][ T7083] 0 pages in swap cache
[  135.856092][ T7083] Free swap  = 124996kB
[  135.866037][ T7083] Total swap = 124996kB
[  135.874410][ T7083] 2097051 pages RAM
[  135.878276][ T7083] 0 pages HighMem/MovableOnly
[  135.894361][ T7083] 424713 pages reserved
[  135.898599][ T7083] 0 pages cma reserved
[  136.599439][ T7139] __nla_validate_parse: 1 callbacks suppressed
[  136.599460][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.370'.
[  136.729967][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[  136.779306][ T7150] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[  136.820184][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'.
[  136.841745][ T7150] netlink: 216 bytes leftover after parsing attributes in process `syz.2.374'.
[  136.908810][ T7155] netlink: 51 bytes leftover after parsing attributes in process `syz.4.375'.
[  137.147987][ T7159] bridge0: entered promiscuous mode
[  137.164845][ T7167] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[  137.199427][ T7167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.381'.
[  137.210496][ T7170] syzkaller1: tun_chr_ioctl cmd 1074025677
[  137.218574][ T7170] syzkaller1: linktype set to 6
[  137.429596][ T7177] xt_hashlimit: size too large, truncated to 1048576
[  137.536992][ T7183] netlink: 'syz.2.385': attribute type 9 has an invalid length.
[  137.560216][ T7183] netlink: 'syz.2.385': attribute type 7 has an invalid length.
[  137.587246][ T7183] netlink: 'syz.2.385': attribute type 8 has an invalid length.
[  137.903392][ T7189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.387'.
[  137.920183][ T7189] nbd: illegal input index 65508
[  138.015256][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'.
[  138.283119][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.292150][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.309596][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'.
[  138.638237][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'.
[  139.139870][ T7227] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  139.184407][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.206310][ T7227] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  140.077366][ T7255] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.124191][ T7290] netlink: 'syz.3.420': attribute type 10 has an invalid length.
[  141.491071][ T7300] netlink: 'syz.2.426': attribute type 21 has an invalid length.
[  142.123191][ T7317] __nla_validate_parse: 4 callbacks suppressed
[  142.123210][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[  142.677495][ T7330] Cannot find add_set index 0 as target
[  143.044050][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'.
[  143.096681][ T7338] vlan2: entered promiscuous mode
[  143.113519][ T7338] ip6gretap0: entered promiscuous mode
[  143.496288][ T7353] netlink: 'syz.1.446': attribute type 10 has an invalid length.
[  143.771688][ T7360] netlink: 224 bytes leftover after parsing attributes in process `syz.0.450'.
[  144.189107][ T7366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.364841][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'.
[  144.477561][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'.
[  144.634191][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[  144.689693][ T7376] netlink: 104 bytes leftover after parsing attributes in process `syz.3.458'.
[  144.704953][ T7370] vlan2: entered promiscuous mode
[  144.716016][ T7370] ip6gretap0: entered promiscuous mode
[  144.845745][ T7374] vlan2: entered promiscuous mode
[  144.946140][ T7383] Cannot find del_set index 286 as target
[  144.969103][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'.
[  145.306967][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.467'.
[  145.372645][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[  145.475489][ T7400] netlink: 'syz.3.465': attribute type 13 has an invalid length.
[  145.512820][ T7400] netlink: 'syz.3.465': attribute type 17 has an invalid length.
[  145.708256][ T7413] netlink: 'syz.0.471': attribute type 9 has an invalid length.
[  145.823663][ T7400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.561376][ T7433] tipc: Started in network mode
[  146.575047][ T7433] tipc: Node identity , cluster identity 4711
[  146.601722][ T7433] tipc: Failed to obtain node identity
[  146.607394][ T7433] tipc: Enabling of bearer <eth:wg1> rejected, failed to enable media
[  147.203487][ T7450] __nla_validate_parse: 4 callbacks suppressed
[  147.203507][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'.
[  147.320612][ T7457] Cannot find add_set index 0 as target
[  147.342779][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.482'.
[  147.717085][ T5900] IPVS: starting estimator thread 0...
[  147.834394][ T7475] IPVS: using max 24 ests per chain, 57600 per kthread
[  148.176259][ T7490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.496'.
[  148.470135][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[  148.547778][ T7507] Cannot find add_set index 0 as target
[  148.603336][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'.
[  148.928937][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.506'.
[  149.323127][ T7529] xt_bpf: check failed: parse error
[  149.768731][ T7543] netlink: 104 bytes leftover after parsing attributes in process `syz.2.515'.
[  150.004495][ T7558] Cannot find add_set index 0 as target
[  150.159328][ T7563] team0: Device vlan2 is already an upper device of the team interface
[  150.179320][ T7564] netlink: 'syz.2.523': attribute type 10 has an invalid length.
[  150.265738][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.292043][ T5960] bond0: (slave batadv0): interface is now down
[  150.304957][ T7564] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  150.334139][ T5960] bond0: (slave batadv0): interface is now down
[  150.372981][ T5960] bond0: (slave batadv0): interface is now down
[  150.390429][ T5960] bond0: now running without any active interface!
[  150.636706][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'.
[  150.655995][ T7577] vlan3: entered promiscuous mode
[  150.720659][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[  151.099978][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'.
[  151.732826][ T7609] Cannot find add_set index 0 as target
[  152.065034][ T7623] syz.1.546 uses old SIOCAX25GETINFO
[  152.432067][ T7639] __nla_validate_parse: 2 callbacks suppressed
[  152.432091][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'.
[  152.481352][ T7640] netlink: 'syz.2.548': attribute type 10 has an invalid length.
[  152.595267][ T7639] vlan2: entered promiscuous mode
[  152.676460][ T7643] x_tables: duplicate underflow at hook 4
[  152.732171][ T7643] bridge0: port 3(syz_tun) entered blocking state
[  152.761737][ T7643] bridge0: port 3(syz_tun) entered disabled state
[  152.782515][ T7643] syz_tun: entered allmulticast mode
[  152.799360][ T7643] syz_tun: entered promiscuous mode
[  153.230970][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'.
[  153.346434][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'.
[  153.719645][ T7669] netlink: 104 bytes leftover after parsing attributes in process `syz.1.561'.
[  153.983206][ T7674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.012180][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'.
[  154.225920][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  154.338190][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.568'.
[  154.361483][ T7674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.375123][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[  154.416874][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'.
[  154.427096][ T7687] veth0: entered promiscuous mode
[  154.433915][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.568'.
[  154.538731][ T7690] veth0 (unregistering): left promiscuous mode
[  154.654196][ T7696] vlan3: entered promiscuous mode
[  154.669013][ T7696] ip6gretap0: entered promiscuous mode
[  154.810170][ T7674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.040037][ T7674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.535879][   T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.600655][   T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.756629][ T7737] netlink: 'syz.1.580': attribute type 39 has an invalid length.
[  155.771305][ T1138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.780113][ T1138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.205260][ T7749] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.640847][ T7763] batadv1: entered promiscuous mode
[  156.694139][ T7763] batadv1: entered allmulticast mode
[  156.820438][ T7777] Cannot find del_set index 286 as target
[  157.358120][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.370420][ T7800] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.392493][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.744564][ T7818] IPv6: sit1: Disabled Multicast RS
[  157.809229][ T7818] xt_hashlimit: size too large, truncated to 1048576
[  158.169769][ T7833] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[  158.267790][ T7837] __nla_validate_parse: 7 callbacks suppressed
[  158.267811][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'.
[  158.483603][ T7833] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.512287][ T7838] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.519614][ T7838] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  158.532838][ T7838] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  158.594567][ T7841] gretap1: entered promiscuous mode
[  158.616908][ T7841] bond1: (slave gretap1): making interface the new active one
[  158.630982][ T7841] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  158.686732][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.617'.
[  158.713505][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.617'.
[  158.727035][ T7857] netlink: 11 bytes leftover after parsing attributes in process `syz.2.617'.
[  158.759820][ T7857] netlink: 128 bytes leftover after parsing attributes in process `syz.2.617'.
[  158.817793][ T7849] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  159.157635][ T7873] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  159.729635][ T7888] tls_set_device_offload_rx: netdev not found
[  159.796819][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'.
[  159.897886][ T7895] netlink: 136 bytes leftover after parsing attributes in process `syz.3.631'.
[  160.857832][ T7929] netlink: 'syz.4.643': attribute type 25 has an invalid length.
[  160.907999][ T7929] netlink: 'syz.4.643': attribute type 7 has an invalid length.
[  160.967876][ T7934] bond0: (slave bond1): Error -95 calling ndo_bpf
[  160.979003][ T7934] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  161.025965][ T7889] lo speed is unknown, defaulting to 1000
[  161.061833][ T7889] lo speed is unknown, defaulting to 1000
[  161.099164][ T7889] lo speed is unknown, defaulting to 1000
[  161.222523][ T7889] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  161.278663][ T7889] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  161.411086][ T7889] lo speed is unknown, defaulting to 1000
[  161.433489][ T7889] lo speed is unknown, defaulting to 1000
[  161.468241][ T7889] lo speed is unknown, defaulting to 1000
[  161.483770][ T7889] lo speed is unknown, defaulting to 1000
[  161.505444][ T7889] lo speed is unknown, defaulting to 1000
[  161.526624][ T7956] Cannot find add_set index 0 as target
[  161.536687][ T7889] lo speed is unknown, defaulting to 1000
[  161.626257][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'.
[  161.886675][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'.
[  161.919059][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'.
[  162.656993][ T8003] tipc: Started in network mode
[  162.684530][ T8003] tipc: Node identity , cluster identity 4711
[  162.690674][ T8003] tipc: Failed to obtain node identity
[  162.731708][ T8003] tipc: Enabling of bearer <eth:wg1> rejected, failed to enable media
[  162.873988][ T8010] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  162.912185][   T43] IPVS: starting estimator thread 0...
[  163.053625][ T8016] IPVS: using max 26 ests per chain, 62400 per kthread
[  163.331031][ T8032] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  163.411300][ T8031] IPVS: stopping master sync thread 8032 ...
[  163.832539][ T8051] dvmrp8: entered allmulticast mode
[  163.935488][ T8050] dvmrp8: left allmulticast mode
[  164.459347][ T8074] netlink: 'syz.0.690': attribute type 10 has an invalid length.
[  164.589310][ T8078] __nla_validate_parse: 9 callbacks suppressed
[  164.589333][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'.
[  164.730736][ T8078] vlan2: entered promiscuous mode
[  165.012713][ T8084] syzkaller1: entered promiscuous mode
[  165.022025][ T8084] syzkaller1: entered allmulticast mode
[  165.684206][ T8111] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.058300][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.703'.
[  166.077373][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'.
[  166.192495][ T6101] wlan1: Trigger new scan to find an IBSS to join
[  166.322668][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'.
[  166.764882][ T8144] netlink: 44 bytes leftover after parsing attributes in process `syz.1.709'.
[  167.108362][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.297631][ T8173] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.574641][ T8185] netlink: 84 bytes leftover after parsing attributes in process `syz.0.724'.
[  167.593206][ T8185] nbd: must specify at least one socket
[  167.667559][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.725'.
[  199.712723][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  199.742196][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.748569][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  217.151834][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  217.151978][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  217.157985][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  231.713378][ T3457] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  261.156182][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  261.162819][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  263.731960][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  273.471942][ T5846] Bluetooth: hci4: command 0x0406 tx timeout
[  295.712500][ T3457] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  311.081716][   T31] INFO: task syz.2.699:8113 blocked for more than 143 seconds.
[  311.089331][   T31]       Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0
[  311.231606][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  311.240425][   T31] task:syz.2.699       state:D stack:25096 pid:8113  tgid:8113  ppid:5827   task_flags:0x400040 flags:0x00004000
[  311.421539][   T31] Call Trace:
[  311.424895][   T31]  <TASK>
[  311.427866][   T31]  __schedule+0x16f5/0x4d00
[  311.521619][   T31]  ? __lock_acquire+0xab9/0xd20
[  311.526562][   T31]  ? schedule+0x165/0x360
[  311.530932][   T31]  ? __pfx___schedule+0x10/0x10
[  311.671557][   T31]  ? schedule+0x91/0x360
[  311.675894][   T31]  schedule+0x165/0x360
[  311.680089][   T31]  schedule_preempt_disabled+0x13/0x30
[  311.801642][   T31]  __mutex_lock+0x724/0xe80
[  311.806240][   T31]  ? __mutex_lock+0x51b/0xe80
[  311.810967][   T31]  ? pipe_release+0x48/0x330
[  311.921560][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  311.926691][   T31]  pipe_release+0x48/0x330
[  311.931144][   T31]  ? __pfx_pipe_release+0x10/0x10
[  312.061538][   T31]  __fput+0x44c/0xa70
[  312.065637][   T31]  task_work_run+0x1d1/0x260
[  312.070287][   T31]  ? __pfx_task_work_run+0x10/0x10
[  312.211651][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  312.217208][   T31]  exit_to_user_mode_loop+0xec/0x110
[  312.331543][   T31]  do_syscall_64+0x2bd/0x3b0
[  312.336217][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.431589][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.437837][   T31]  ? clear_bhb_loop+0x60/0xb0
[  312.531801][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.537797][   T31] RIP: 0033:0x7f7dde58e929
[  312.641541][   T31] RSP: 002b:00007ffc213e0668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  312.650039][   T31] RAX: 0000000000000000 RBX: 00007f7dde7b7ba0 RCX: 00007f7dde58e929
[  312.811763][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  312.819813][   T31] RBP: 00007f7dde7b7ba0 R08: 00000000000000c0 R09: 0000000c213e095f
[  312.981869][   T31] R10: 00007f7dde7b7ac0 R11: 0000000000000246 R12: 0000000000028abe
[  312.989921][   T31] R13: 00007ffc213e0760 R14: ffffffffffffffff R15: 00007ffc213e0780
[  313.126643][   T31]  </TASK>
[  313.129784][   T31] 
[  313.129784][   T31] Showing all locks held in the system:
[  313.251874][   T31] 1 lock held by khungtaskd/31:
[  313.256801][   T31]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  313.395220][   T31] 3 locks held by udevd/5199:
[  313.399962][   T31] 2 locks held by getty/5591:
[  313.491941][   T31]  #0: ffff888034f520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  313.591582][   T31]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  313.671918][   T31] 1 lock held by syz-executor/5828:
[  313.677197][   T31] 1 lock held by syz-executor/5829:
[  313.767617][   T31] 1 lock held by syz-executor/5831:
[  313.821957][   T31] 1 lock held by syz.2.699/8113:
[  313.826983][   T31]  #0: ffff8880586c9468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330
[  313.971856][   T31] 1 lock held by syz.2.699/8119:
[  313.976873][   T31]  #0: ffff8880586c9468 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440
[  314.101516][   T31] 1 lock held by syz.3.727/8191:
[  314.106532][   T31] 1 lock held by syz.3.727/8194:
[  314.171526][   T31] 1 lock held by udevd/8195:
[  314.176274][   T31] 1 lock held by udevd/8196:
[  314.180928][   T31] 
[  314.298512][   T31] =============================================
[  314.298512][   T31] 
[  314.391957][   T31] NMI backtrace for cpu 1
[  314.391989][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  314.392023][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  314.392036][   T31] Call Trace:
[  314.392045][   T31]  <TASK>
[  314.392054][   T31]  dump_stack_lvl+0x189/0x250
[  314.392101][   T31]  ? __wake_up_klogd+0xd9/0x110
[  314.392130][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.392164][   T31]  ? __pfx__printk+0x10/0x10
[  314.392202][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  314.392240][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  314.392270][   T31]  ? _printk+0xcf/0x120
[  314.392344][   T31]  ? __pfx__printk+0x10/0x10
[  314.392371][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  314.392404][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  314.392441][   T31]  watchdog+0xfee/0x1030
[  314.392473][   T31]  ? watchdog+0x1de/0x1030
[  314.392511][   T31]  kthread+0x70e/0x8a0
[  314.392540][   T31]  ? __pfx_watchdog+0x10/0x10
[  314.392568][   T31]  ? __pfx_kthread+0x10/0x10
[  314.392594][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.392616][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.392637][   T31]  ? __pfx_kthread+0x10/0x10
[  314.392662][   T31]  ret_from_fork+0x3fc/0x770
[  314.392697][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  314.392735][   T31]  ? __switch_to_asm+0x39/0x70
[  314.392756][   T31]  ? __switch_to_asm+0x33/0x70
[  314.392776][   T31]  ? __pfx_kthread+0x10/0x10
[  314.392802][   T31]  ret_from_fork_asm+0x1a/0x30
[  314.392856][   T31]  </TASK>
[  314.392864][   T31] Sending NMI from CPU 1 to CPUs 0:
[  314.555336][    C0] NMI backtrace for cpu 0
[  314.555356][    C0] CPU: 0 UID: 0 PID: 6101 Comm: kworker/u8:10 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  314.555376][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  314.555388][    C0] Workqueue: events_unbound toggle_allocation_gate
[  314.555413][    C0] RIP: 0010:rcu_is_watching+0x67/0xb0
[  314.555443][    C0] Code: 89 f7 e8 6c bc 7c 00 48 c7 c3 58 af 9e 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d a9 6c f6 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 07 af c3 09 cc e8 11 83
[  314.555458][    C0] RSP: 0018:ffffc9000489f6a0 EFLAGS: 00000082
[  314.555472][    C0] RAX: 000000000001d5d4 RBX: ffff8880b8632f58 RCX: c40f2b0626e93700
[  314.555485][    C0] RDX: 0000000000000000 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0
[  314.555497][    C0] RBP: ffffc9000489f830 R08: ffffffff8fa134f7 R09: 1ffffffff1f4269e
[  314.555509][    C0] R10: dffffc0000000000 R11: fffffbfff1f4269f R12: dffffc0000000000
[  314.555522][    C0] R13: ffff88801a47c558 R14: ffffffff8dbabc60 R15: dffffc0000000000
[  314.555535][    C0] FS:  0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000
[  314.555549][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.555560][    C0] CR2: 00007f7036d39040 CR3: 000000000df38000 CR4: 00000000003526f0
[  314.555576][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  314.555586][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  314.555596][    C0] Call Trace:
[  314.555604][    C0]  <TASK>
[  314.555613][    C0]  ? __kmalloc_cache_noprof+0x83/0x3d0
[  314.555630][    C0]  trace_irq_enable+0x37/0x110
[  314.555652][    C0]  trace_hardirqs_on+0x18/0x40
[  314.555672][    C0]  __text_poke+0x748/0xa10
[  314.555695][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  314.555722][    C0]  ? __kmalloc_cache_noprof+0x83/0x3d0
[  314.555738][    C0]  ? __pfx___text_poke+0x10/0x10
[  314.555754][    C0]  ? rcu_is_watching+0x15/0xb0
[  314.555781][    C0]  ? trace_contention_end+0x39/0x120
[  314.555806][    C0]  smp_text_poke_batch_finish+0xd0a/0x1100
[  314.555830][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  314.555853][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  314.555883][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  314.555906][    C0]  static_key_disable_cpuslocked+0xc5/0x1b0
[  314.555926][    C0]  static_key_disable+0x1a/0x20
[  314.555941][    C0]  toggle_allocation_gate+0x1a1/0x240
[  314.555959][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  314.555978][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  314.556004][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  314.556030][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  314.556056][    C0]  process_scheduled_works+0xae1/0x17b0
[  314.556099][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  314.556135][    C0]  worker_thread+0x8a0/0xda0
[  314.556163][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  314.556186][    C0]  ? __kthread_parkme+0x7b/0x200
[  314.556208][    C0]  kthread+0x70e/0x8a0
[  314.556229][    C0]  ? __pfx_worker_thread+0x10/0x10
[  314.556255][    C0]  ? __pfx_kthread+0x10/0x10
[  314.556276][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.556292][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.556310][    C0]  ? __pfx_kthread+0x10/0x10
[  314.556329][    C0]  ret_from_fork+0x3fc/0x770
[  314.556355][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  314.556382][    C0]  ? __switch_to_asm+0x39/0x70
[  314.556400][    C0]  ? __switch_to_asm+0x33/0x70
[  314.556417][    C0]  ? __pfx_kthread+0x10/0x10
[  314.556436][    C0]  ret_from_fork_asm+0x1a/0x30
[  314.556464][    C0]  </TASK>
[  315.081545][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  315.088569][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) 
[  315.100429][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  315.110524][   T31] Call Trace:
[  315.113851][   T31]  <TASK>
[  315.116819][   T31]  dump_stack_lvl+0x99/0x250
[  315.121462][   T31]  ? __asan_memcpy+0x40/0x70
[  315.126090][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  315.131338][   T31]  ? __pfx__printk+0x10/0x10
[  315.136071][   T31]  panic+0x2db/0x790
[  315.140025][   T31]  ? __pfx_panic+0x10/0x10
[  315.144491][   T31]  ? __pfx_delay_tsc+0x10/0x10
[  315.149304][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  315.155173][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  315.160679][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  315.166894][   T31]  watchdog+0x102d/0x1030
[  315.171280][   T31]  ? watchdog+0x1de/0x1030
[  315.175756][   T31]  kthread+0x70e/0x8a0
[  315.179874][   T31]  ? __pfx_watchdog+0x10/0x10
[  315.184596][   T31]  ? __pfx_kthread+0x10/0x10
[  315.189259][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  315.194500][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.199736][   T31]  ? __pfx_kthread+0x10/0x10
[  315.204371][   T31]  ret_from_fork+0x3fc/0x770
[  315.209014][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  315.214182][   T31]  ? __switch_to_asm+0x39/0x70
[  315.218998][   T31]  ? __switch_to_asm+0x33/0x70
[  315.223800][   T31]  ? __pfx_kthread+0x10/0x10
[  315.228433][   T31]  ret_from_fork_asm+0x1a/0x30
[  315.233259][   T31]  </TASK>
[  315.236610][   T31] Kernel Offset: disabled
[  315.240954][   T31] Rebooting in 86400 seconds..