last executing test programs:

1m21.859009138s ago: executing program 1 (id=12):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
unshare(0x20000400)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
write(r4, 0x0, 0x0)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x1}, {0x0, 0xff}, 0x1, 0x7f}, {0x1, 0x0, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x2}}], 0x40)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r7}, &(0x7f0000001200), &(0x7f0000001240)=r8}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0xe9a82000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)

1m21.234021415s ago: executing program 1 (id=15):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) (async)

59.477943484s ago: executing program 1 (id=15):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) (async)

42.678465511s ago: executing program 1 (id=15):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) (async)

29.041965576s ago: executing program 1 (id=15):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) (async)

13.634750345s ago: executing program 1 (id=15):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xe}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) (async)

2.794705546s ago: executing program 4 (id=527):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x303}, "7d671e204ef9f51d", "9ecc4b2b96d28df19c86b6842bbf27f7", "3b541451", "d838b3324f8ec67b"}, 0x28)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x48840)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r2, 0xf45f2000)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000b80)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3d, 0x0, "7d99129be519151a1de68bcd5204bc25a6cee09cacf49d65695ff13f35e2b1fe014e66bf299076e61026059ddbe7109ea11d19db0bc7c578539dbe038ae4e9bff32b55fa83ecf7cdb89343d5f35fc547"}, 0xd8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', <r4=>0x0, 0x10, 0x8, 0x5, 0xae7, {{0x8, 0x4, 0x3, 0x1, 0x20, 0x66, 0x0, 0x5, 0x6, 0x0, @remote, @private=0xa010102, {[@generic={0x44, 0xc, "76f21e2b5a3ca26a442b"}]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x4a}}, @fwd={0x5}, @float={0xf, 0x0, 0x0, 0x10, 0x2}, @var={0x7, 0x0, 0x0, 0xe, 0x4, 0x2}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0x8, [{0x5}]}, @const={0xf, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x5f, 0x30]}}, &(0x7f0000000280)=""/1, 0xad, 0x1, 0x1, 0xa}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], <r6=>0x0, 0xab, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
pipe(&(0x7f0000000a00)={<r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x34, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lx}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x118b}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0x9, 0x5, 0x3, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, @cgroup_sysctl, r5, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0xffffff80, 0x1}, 0x10, r6, r7, 0x6, 0x0, &(0x7f0000000a40)=[{0x3, 0x4, 0x7, 0x8}, {0x5, 0x2, 0x0, 0x4}, {0x0, 0x5, 0xc, 0x3}, {0x1, 0x5, 0x5, 0x5}, {0x5, 0x2, 0x7, 0x8}, {0x1, 0x5, 0x2, 0xc}], 0x10, 0xffff8001}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000c80)=@ccm_128={{0x304}, "f7edd2ee9c5c1851", "2e626eed2cbdf226e0742e69015e73a1", "b843ee26", "c6725a032bc9ae7f"}, 0x28)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00'/12, @ANYRES32=0x0, @ANYBLOB="e3"], 0x20)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1047711330ff2bb17b5508000000000000009bc400", '\\]?\x00'}, 0x38)

2.598287669s ago: executing program 0 (id=529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a670300000000000000000100000008000440000000000900010073797a300000000038000380340000000400018004000680140007800c000100636f756e746572000400028014000180060001", @ANYRESHEX=r1], 0xe4}}, 0x0)
recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000200)=@pppoe, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000540)=""/101, 0x65}], 0x2}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r4, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)

2.540123517s ago: executing program 4 (id=530):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) (async)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1000000000000001c00f6ffffff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000043000e0088000000080211000000ffffffffffff080211000001000000000000000000006400000000060202020202020301007206030303030303760600000000000000"], 0x6c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x6a, 0x5, 0x20000002, 0x5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c012d7800000000000000000000000000000000d2a81e993095fb51f3c25009c22e719d5ae8d2be8d4475bd62ea519af992cd61eed49333dd2d19a9b2e8eaf66a201613b3f2eab8d2697ae268add91c70907e9c4fcc371b2ad53fa0e37c1e0341d736af3040895694145252f5df4dd1fb1648e9a6af0d8d746fa8bd09cfa27a16183c3a1afc6d9944bc76f272ebf98ac60ee971e3af590000000000000000000000a9488efa34a454fbb3e9fe0bb6919fa5c1e0bcb7c57ebf9f3580b3811205bdac"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) (async)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x300, r10, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e6301423e37ff4a286545a6aaf8c5ad0eb47c26f52215a4e0c727c3a41c28898b1728c72"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @local, 0xd090}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9810}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x402}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1317}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa712a060}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x454}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x41}, 0x4000800)

2.431141934s ago: executing program 3 (id=531):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1)
setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000000)='S', 0x1)
getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0)
shutdown(r0, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1) (async)
setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) (async)
getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) (async)
shutdown(r0, 0x2) (async)

2.228737881s ago: executing program 0 (id=532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xa}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x32, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

2.084144172s ago: executing program 3 (id=533):
unshare(0x64000600)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
unshare(0x2c020400)
socket$inet(0xa, 0x801, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000900000000000000a67494fcd3a42289070000001e01060000000800"], 0x154}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10)

2.065149497s ago: executing program 4 (id=534):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0xce, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0x7d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x79954ca0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r2}, 0x18)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x5ec37000)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r3, 0x2000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000007f000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000110000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x10001, 0x8}, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x2, 0x10, 0xfffffff8, 0x6, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0dc, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x10, 0x5, 0xfffffff0}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r1, r2, r3, r4, r5, r6, r7, r8], 0x0, 0x10, 0x3ff}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={<r10=>0xffffffffffffffff})
close(r10)
epoll_create1(0x80000)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r11, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050)
setsockopt(r11, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
write$cgroup_subtree(r10, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r9], 0x44}}, 0x4000000)

1.895490004s ago: executing program 4 (id=535):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x880)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "75de8b187f39dd7f3731c0d0"}}}}}}, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x58, 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001600)=""/4102, 0x1006}], 0x1, &(0x7f0000000440)}, 0x7}], 0x1, 0x0, 0x0)

1.838347392s ago: executing program 0 (id=536):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4e402, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

1.738509276s ago: executing program 2 (id=537):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000004300)=[{&(0x7f0000001f00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002240)=[{0x0}, {&(0x7f0000001fc0)="ac0cacedab", 0x5}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x4004040)

1.577125131s ago: executing program 0 (id=538):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000980)="e0274239fa311786a26494137b8b", 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700)

1.518064233s ago: executing program 2 (id=539):
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x400010) (async)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
r1 = socket$netlink(0x10, 0x3, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@multicast1, @initdev, <r3=>0x0}, &(0x7f0000000140)=0xc)
sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@mpls_delroute={0x4c, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x10, 0x5, 0xff, 0x2, 0x0, 0x5, 0x100}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4, 0x3}}, @RTA_VIA={0x14, 0x12, {0x9, "4a2432dd4279f3b38d1b79695d44"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)={0x3, 'batadv_slave_0\x00', {0x6}, 0x6})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1c8, 0xb0, 0x1c8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xbe, 0x32, "a0492f3bd0ca01cc25a643bbd35c02bb4b4118c60046bef5f6596ccf5bbb"}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg0\x00', {}, {0xff}, 0xf0, 0x3, 0x78}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e23], [0x4e20, 0x4e24], 0x1, 0x4, 0x80}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6}, {0x3, 0x4, 0x6}}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6}}, @common=@addrtype={{0x30}, {0x8, 0x100}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x5}, {0xffffffffffffffff, 0x5, 0x6}, 0x5, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
pipe(&(0x7f0000000700)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)=@ipv4_newroute={0xb8, 0x18, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x14, 0x20, 0xe, 0xfd, 0x1, 0x0, 0x7, 0x2a00}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_METRICS={0x8b, 0x8, 0x0, 0x1, "35d6c780c8d5374e35385329770e1b14d2bae5681657bfc9dfa6b849f75c9eca2fe1a606fccff2c1a2f6ae6345627e8d432387344e9ac83b530b3511383d6162bf83a1a58949dcd72d9ec4111172c97743e7cd9d52f9a971ecdfeba16f58aea73231479d1fbd981c8d5b87fac7eaa3f5c6d162f5d91415c0e6d84882e9543859d929931353264a"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$caif_stream(0x25, 0x1, 0x1) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f00000008c0)=[@in6={0xa, 0x4e22, 0x0, @local, 0x3}, @in6={0xa, 0x4e21, 0x8, @empty, 0x2}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}], 0xa0) (async)
unshare(0x6a040380) (async)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4)
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000009c0)=r7)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048d4}, 0x50) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r1)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8a}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40024}, 0x4040800) (async)
socket$unix(0x1, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000cc0)={<r9=>0x0, 0x124, 0x30}, &(0x7f0000000d00)=0xc)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000d40)={r9, 0x5, "a7b4972494"}, &(0x7f0000000d80)=0xd) (async)
socket$key(0xf, 0x3, 0x2) (async)
connect$inet(r5, &(0x7f0000000dc0)={0x2, 0x4e23, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000e00), &(0x7f0000000e80)=0x68) (async)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)

1.320821617s ago: executing program 3 (id=540):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@ptr={0x6, 0x0, 0x0, 0x2, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000100)=""/103, 0x38, 0x67, 0x0, 0x4, 0x10000}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xff, 0x40, 0x8, 0x9647, r2, 0x4, '\x00', 0x0, r3, 0x5, 0x4, 0x5, 0xd}, 0x50)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000240)={r1, 0x63, "10e7044929ce02cf3309c7f55c5d680016aaf6cbb00002acc0f98618f4432533fcc5766bb0e404013284ee76169e9a448b8858b6b1c63b13da51a3b1bfada1e0e019cbbc72cd883f4c6c1b296af874ffa790660140bbc1a99b786a4d29b475561ade1e"}, &(0x7f00000002c0)=0x6b)
r6 = socket$packet(0x11, 0x3, 0x300)
socket$unix(0x1, 0x2, 0x0)
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='tasks\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=<r8=>0x0)
write$cgroup_pid(r7, &(0x7f0000000380)=r8, 0x12)
syz_open_procfs$namespace(r8, &(0x7f00000003c0)='ns/net\x00')
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000400)="367f0252f9bca5fa1e7ada9f6694a5803641d97faba378f3b41b3c0a831371045d24f4b2a0400112995aa2e18a4be3fe907d6e5adbd7c440055a9acdf7caea10443528deba10eb139b2a6034f5916e1cd347dea7ca2618632a3bd12421c1de6acdffdef304dbced3730f5809c0f0")
r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2}}, @enum64={0xf, 0xa, 0x0, 0x13, 0x0, 0x0, [{0xe, 0x6, 0x4}, {0xa, 0x1, 0x6}, {0x5, 0xc000, 0xa}, {0x7, 0x4, 0x47}, {0xa, 0x6, 0x1}, {0x1, 0x7, 0x2}, {0x3, 0x50d0, 0x1}, {0x5, 0x3, 0x9}, {0x2, 0x800}, {0xf, 0x9, 0x7002}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000540)=""/93, 0xbb, 0x5d, 0x1, 0x4, 0x10000, @value=r10}, 0x28)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000640), 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r8, r11, 0x0, 0x6, &(0x7f0000000680)='tasks\x00'}, 0x30)
ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg0\x00', <r12=>0x0})
sendto$packet(r6, &(0x7f0000000700)="11556797f4971f78460a67de536256dc47097aff58f74fb7d65f652835dd6135164b520f5c5cd679bc5570acd9bffb1de3ce68dc063bfd0598930f15d2", 0x3d, 0x4000011, &(0x7f0000000780)={0x11, 0x1, r12, 0x1, 0xc0, 0x6, @multicast}, 0x14)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000007c0)={'icmp\x00'}, &(0x7f0000000800)=0x1e)
r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r13, &(0x7f0000000840)={{0x3, @null, 0x7}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
connect$inet6(r9, &(0x7f00000008c0)={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}, 0x1c)
ioctl$int_out(r4, 0x5460, &(0x7f0000000900))
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000a00)={0x1, &(0x7f0000000940)=[{}]})
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000b40)=0x401, 0x12)

1.245852529s ago: executing program 2 (id=541):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000041)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1.24507192s ago: executing program 4 (id=542):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3}], 0x1, 0x40800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x5}, 0x12140)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000ffffffd000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b8"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_netdev_private(r7, 0x89f2, &(0x7f0000000540)="612fe024868bf3ca0e470f701ce05abc2a74cc884420bca7cece4c00cc6a654dfc8f7492c80d22b33bfb959fed6c1c9135635fc242736b968262f93cb201b568ba3a667adebd51d8fbc1cd1cb7a749dcd3dcb3f1555ebc300f44b26b2d6b757a2423bd361e46b703ba784b502ccd4b8255615330d1fe6ef3de99ac7f280e8ad5a13c2004ab6e21c4adbc2dc68c07f9c3cff86d705bfba0")
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r8 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x5}, 0x8)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @default, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})

1.033736338s ago: executing program 2 (id=543):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r2], 0x10)
close(r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xcd, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x1d, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x0, 0x2, 0x3, 0x2, 0x8, 0xffffffffffffff98, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0xffffffff, 0x8, 0xfffffffa, 0x6bd3}, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0x4, 0x8}, {0x1, 0x5, 0xf, 0x7}, {0x2, 0x3, 0x2, 0x9}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0xca}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
sendmmsg$inet(r7, &(0x7f00000012c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000ec0)="01d2d92c2787824c0445868d48d30b2d5adbae70def991d188a9d51330d1565f5767aae7d1432ac9549eda304606bff639f7bb53fc0566bce48268a32beb016c793259d142ac7982a028128b3ab5e45dfaaa1a4d211a4e8d4dd2", 0x5a}, {&(0x7f0000000f40)="709ef6c1497aa93d433bc482621c871d50550e8fe75ef418e483fb351e815f3a90597ceed50fc81497735b6b768d0567941632a23f59bc317b66e267489c38d4e711d500041d9128e1291fbcba66f03e23a3f27a520c0e69b553943f3696de48bb3a0c477425eb85491b06eb1fa94233fcd364a508d999df37c065e1d4348b066d760809fd3d24177276755291e2e6817b96551bd0935c36cd8a2b", 0x9b}, {&(0x7f0000001000)='J', 0x1}, {&(0x7f0000001040)="11d0ef0c33112694868d7b95aa483abd71797e0cda4ab161a04c38a77f3fd207a89b3788b814faef33fbf5f53efdf1c42dded199e7e18a647e66d43d727ae45cde2efa51bae8c4b6844c2714938d1a543d3707fb3f2af34a4ff80af2d0dc38d6b2e56642deb5d18576ecf0cfd58356d7b7dfb467491683306b643847db7151f65201545915d406af70fec305d5aef714772420e7950d0750b13f5fef9ca6a5dfdc738c45c501a16c942e5d5756b2e4842efdd70cf072", 0xb6}, {&(0x7f0000001100)="feb404b2ba91f54dd11d7e78ae97be50ebe0a81a09d75210e971a6906e5c98a90f02b4e9f3968c73ce1da9e13d3f1785122fb4db80cc516066e4dd0f2a123e672da60615dcc415a813109e25c0e7e086b6cc072d71350d71508dc6d6c3d9422ae699d6c48da7325e9ab6b92048641bcb7cc635bda9588f77a182ae5d5288b3cf3ad4f6c3c863985b84330eda19a8610d6566cc75fee906ccf600b24082efe822a35ebf3ec94974560f113422c7ac404f947f973ba3e865308e93d720d846a30e20c10400a7dab62f1f899b388c404c85093f688de13148304abda7561a3bc394f2666730c1b0638ea97ef22941868af0d9", 0xf1}], 0x5, &(0x7f0000001280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0x18}}], 0x2, 0x4004000)
setsockopt(r7, 0x84, 0x7d, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1b0000000000000000000000ff07000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f2c750db467877804934adb2df541a3b2202109f84343012975c3292f36e6c3fe2aa635341e6f93abb27e2b704209d081b7e0ac92eb228d9da5da3227fceae6888c391a15265837505f05432fb21949745397fb78ffb201f07da147b1fbd4c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000a00)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x9, &(0x7f0000001400)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000067a00200f0ffffff950000000000000018260000", @ANYRES32=r2, @ANYBLOB="4c1fdee02e49900000003b8c000000"], &(0x7f0000000200)='GPL\x00', 0xa6, 0x40, &(0x7f00000004c0)=""/64, 0x41000, 0x0, '\x00', 0x0, @xdp, r3, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x4dfe, 0x5}, 0x10, r5, r6, 0x0, &(0x7f0000000a80)=[r8, r9, r10, r11, 0x1, 0x1, 0x1], 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200fffff1"], 0x50)
r12 = socket$kcm(0x2d, 0x2, 0x0)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r13, 0x0, 0x9}, 0x18)
r15 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r14}, 0x8)
close(r15)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000240)={r12})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)

751.673273ms ago: executing program 3 (id=544):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev, @dev, <r2=>0x0}, &(0x7f0000000300)=0xc)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x200, 0x10}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000e00000000600000080040400", @ANYRES32=r3, @ANYBLOB='@\x00'/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="04015d90245d9bcf7cc300"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x40004)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev, @dev}, &(0x7f0000000300)=0xc) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x200, 0x10}, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000e00000000600000080040400", @ANYRES32=r3, @ANYBLOB='@\x00'/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="04015d90245d9bcf7cc300"/28], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) (async)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async)

614.70029ms ago: executing program 4 (id=545):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, 0x0, 0x4)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
epoll_create1(0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x26000400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000884}, 0x4024044)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x6)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200008010000180090001006d617371e70000000900010073797a30000000000900020073797a3200000000140000001100010030786c3c5acd1d56e4524e16e4c215932b04862596fe3182dc70c401cf47f0a51d48945e60816fbf7326b94b30c1106bfafb8a3df819102edc0e9cb68080ce86e6d67c1af05c3f6c99d69600"/178], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
socket$kcm(0x2, 0x3, 0x84)
r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180))
getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

550.206313ms ago: executing program 0 (id=546):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x28, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000800000000b8b0f349ad00020000001811000000003abe1fc738925df4e40432dda390de6143a3c7617c1b6350a998ae9b8cc40bae89d97d3f6058baa379c8fbe176675d0c0fb6684e43a5b9efac66f0b7d0cc589d574a292a360ca36e60677e095ea1a096cba04d7a979de5ecd3999388156f0af1f89d2772521ea07f8d01b182813492a75b40268efd7f023fbffae5edf05a2e091b4b592522ba6ceb5569a221f019ae749d6c2ed17ac4e21131f821b8ec29c0193e8b62cc115497635b18", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000100000000000000d800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000feffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000186700000f00000000000000010100001864000003000000000000007b000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x4, 0x39a8, 0x5e71}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x4, 0x5, 0x4, 0x5}, {0x5, 0x2, 0x9, 0xb}, {0x2, 0x5, 0x9, 0x9}, {0x1, 0x3, 0x5}, {0x2, 0x4, 0xc}, {0x1, 0x2, 0x3, 0x8}], 0x10, 0xfffffffd}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)

423.628732ms ago: executing program 3 (id=547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r6, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000480)={<r12=>0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x100}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r12, &(0x7f0000000180)=0x4)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

243.065095ms ago: executing program 2 (id=548):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000003000000000000000000000000ffffff8000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b"], 0x23c}}, 0x0)

85.583459ms ago: executing program 0 (id=549):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r1, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', <r6=>0x0, 0x0, 0x0, 0x9, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x80, 0x7, 0x10001, 0x2}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x20, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0xffff, 0xc, &(0x7f0000000600)=""/12, 0x40f00, 0xc, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x6, 0x80}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=[{0x1, 0x2, 0x0, 0x1}, {0x3, 0x1, 0x6, 0x8}, {0x0, 0x4, 0x4, 0x2}, {0x4, 0x1, 0x2, 0x6}], 0x10, 0x5}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x2404c80c)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r10, 0x700, 0x708, 0xffffffff, 0x4, {{0x1b, 0x4, 0x2, 0x21, 0x6c, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x85, 0x1, 0x0, [{@multicast2, 0x2}, {@multicast2, 0x5}, {@multicast1, 0x6}, {@loopback, 0xb5b}, {@private=0xa010100, 0x4}, {@rand_addr=0x64010100, 0x8000}, {@multicast1, 0x8}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x3f, [@multicast2, @remote, @private=0xa010101]}, @noop]}}}}})
accept4$netrom(r1, &(0x7f0000000080)={{}, [@netrom, @remote, @rose, @remote, @netrom, @default, @netrom]}, 0x0, 0x0)

84.978981ms ago: executing program 2 (id=550):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r1, 0x8104}], 0x1, 0x0, 0x0, 0x0) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000019c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xf08)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff7, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff08, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xe, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0xa, 0x8, 0x3}, {0x5, 0x2, 0x1, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1)
socket$inet(0x2, 0x6, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r4, 0x0, 0x0)
close(0x3) (async)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
recvmmsg$unix(r2, 0x0, 0x0, 0x400122a0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)

0s ago: executing program 3 (id=551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
recvmmsg(r8, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0)
r9 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r11, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r15=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r15}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
splice(r11, &(0x7f00000001c0)=0x8, r12, &(0x7f0000000340)=0x6, 0x80000000000, 0x7)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts.
[   96.140813][ T5836] cgroup: Unknown subsys name 'net'
[   96.273647][ T5836] cgroup: Unknown subsys name 'cpuset'
[   96.283896][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   98.334144][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   98.854834][  T979] cfg80211: failed to load regulatory.db
[  101.571541][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.583978][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.593151][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.600716][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  101.608616][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.640794][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.659660][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.671258][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  101.685700][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  101.686273][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  101.701431][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.702427][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  101.711813][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.715670][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  101.727675][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.738141][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.738516][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  101.754107][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  101.754623][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.772710][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  101.784839][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  101.794316][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  101.805950][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  101.817977][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  101.830513][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  102.326787][ T5856] chnl_net:caif_netlink_parms(): no params data found
[  102.548660][ T5853] chnl_net:caif_netlink_parms(): no params data found
[  102.660111][ T5863] chnl_net:caif_netlink_parms(): no params data found
[  102.704704][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.712832][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.722440][ T5856] bridge_slave_0: entered allmulticast mode
[  102.731603][ T5856] bridge_slave_0: entered promiscuous mode
[  102.783404][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.793376][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.800841][ T5856] bridge_slave_1: entered allmulticast mode
[  102.808133][ T5856] bridge_slave_1: entered promiscuous mode
[  102.875820][ T5861] chnl_net:caif_netlink_parms(): no params data found
[  102.946853][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.968112][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.986184][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.994281][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.001581][ T5853] bridge_slave_0: entered allmulticast mode
[  103.008828][ T5853] bridge_slave_0: entered promiscuous mode
[  103.023755][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.031319][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.038559][ T5853] bridge_slave_1: entered allmulticast mode
[  103.046023][ T5853] bridge_slave_1: entered promiscuous mode
[  103.089685][ T5856] team0: Port device team_slave_0 added
[  103.154515][ T5856] team0: Port device team_slave_1 added
[  103.160880][ T5857] chnl_net:caif_netlink_parms(): no params data found
[  103.188699][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.244895][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.291802][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.299337][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.306677][ T5863] bridge_slave_0: entered allmulticast mode
[  103.315295][ T5863] bridge_slave_0: entered promiscuous mode
[  103.354889][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.362044][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.388050][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.422118][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.429578][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.436803][ T5863] bridge_slave_1: entered allmulticast mode
[  103.445341][ T5863] bridge_slave_1: entered promiscuous mode
[  103.482901][ T5853] team0: Port device team_slave_0 added
[  103.489807][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.496784][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.522881][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.553833][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.561343][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.568651][ T5861] bridge_slave_0: entered allmulticast mode
[  103.577765][ T5861] bridge_slave_0: entered promiscuous mode
[  103.588559][ T5853] team0: Port device team_slave_1 added
[  103.626299][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.635761][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.643510][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.651044][ T5861] bridge_slave_1: entered allmulticast mode
[  103.658481][ T5861] bridge_slave_1: entered promiscuous mode
[  103.723932][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.740164][ T5866] Bluetooth: hci1: command tx timeout
[  103.754807][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.765442][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.773388][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.800312][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.809193][   T51] Bluetooth: hci0: command tx timeout
[  103.815072][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.816720][ T5866] Bluetooth: hci2: command tx timeout
[  103.823690][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.855425][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.866818][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.874450][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.881774][ T5857] bridge_slave_0: entered allmulticast mode
[  103.889331][ T5866] Bluetooth: hci3: command tx timeout
[  103.889341][   T51] Bluetooth: hci4: command tx timeout
[  103.889900][ T5857] bridge_slave_0: entered promiscuous mode
[  103.937780][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.968514][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.977082][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.984624][ T5857] bridge_slave_1: entered allmulticast mode
[  103.992349][ T5857] bridge_slave_1: entered promiscuous mode
[  104.057917][ T5863] team0: Port device team_slave_0 added
[  104.072734][ T5856] hsr_slave_0: entered promiscuous mode
[  104.080469][ T5856] hsr_slave_1: entered promiscuous mode
[  104.090072][ T5861] team0: Port device team_slave_0 added
[  104.113475][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.124327][ T5863] team0: Port device team_slave_1 added
[  104.149471][ T5861] team0: Port device team_slave_1 added
[  104.171117][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.241338][ T5853] hsr_slave_0: entered promiscuous mode
[  104.247680][ T5853] hsr_slave_1: entered promiscuous mode
[  104.254482][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.262367][ T5853] Cannot create hsr debugfs directory
[  104.318684][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.325722][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.351716][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.366259][ T5857] team0: Port device team_slave_0 added
[  104.386197][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.393983][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.420023][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.454852][ T5857] team0: Port device team_slave_1 added
[  104.477226][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.484509][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.510468][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.522416][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.529934][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.555896][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.655229][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.662420][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.688589][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.701545][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.708521][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.734594][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.835902][ T5861] hsr_slave_0: entered promiscuous mode
[  104.843056][ T5861] hsr_slave_1: entered promiscuous mode
[  104.849373][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.856953][ T5861] Cannot create hsr debugfs directory
[  104.917072][ T5863] hsr_slave_0: entered promiscuous mode
[  104.924042][ T5863] hsr_slave_1: entered promiscuous mode
[  104.930884][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.938713][ T5863] Cannot create hsr debugfs directory
[  104.997745][ T5857] hsr_slave_0: entered promiscuous mode
[  105.004326][ T5857] hsr_slave_1: entered promiscuous mode
[  105.011667][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.019311][ T5857] Cannot create hsr debugfs directory
[  105.447920][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.495184][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.523987][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.564912][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.604171][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.615436][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.637224][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.663969][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.733946][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.748652][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.771644][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.783590][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.810184][ T5866] Bluetooth: hci1: command tx timeout
[  105.900656][ T5866] Bluetooth: hci2: command tx timeout
[  105.906202][ T5866] Bluetooth: hci0: command tx timeout
[  105.960367][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.970429][ T5866] Bluetooth: hci4: command tx timeout
[  105.978999][ T5866] Bluetooth: hci3: command tx timeout
[  105.990961][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.000623][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.012533][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.024143][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.142512][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[  106.155063][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.183414][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.190789][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.202779][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.217496][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.245022][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.252176][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.264173][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.274999][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.328119][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[  106.403992][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.411612][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.438001][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.445203][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.514158][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.617802][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.676099][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[  106.745882][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.753108][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.802353][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[  106.843941][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.863791][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.871032][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.894429][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.901644][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.923094][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.930375][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.018267][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.052540][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[  107.125263][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.132498][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.152869][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.160086][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.236824][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.308768][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.472390][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.578021][ T5856] veth0_vlan: entered promiscuous mode
[  107.701666][ T5856] veth1_vlan: entered promiscuous mode
[  107.840038][ T5853] veth0_vlan: entered promiscuous mode
[  107.877150][ T5856] veth0_macvtap: entered promiscuous mode
[  107.896722][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.897020][ T5866] Bluetooth: hci1: command tx timeout
[  107.918946][ T5856] veth1_macvtap: entered promiscuous mode
[  107.938606][ T5853] veth1_vlan: entered promiscuous mode
[  107.962774][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.976304][   T51] Bluetooth: hci2: command tx timeout
[  107.982074][ T5866] Bluetooth: hci0: command tx timeout
[  108.017437][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.038592][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.050670][   T51] Bluetooth: hci3: command tx timeout
[  108.056127][   T51] Bluetooth: hci4: command tx timeout
[  108.063138][ T5853] veth0_macvtap: entered promiscuous mode
[  108.076216][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.096490][ T3512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.107212][ T5853] veth1_macvtap: entered promiscuous mode
[  108.131260][ T3512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.140229][ T3512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.149750][ T3512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.224864][ T5857] veth0_vlan: entered promiscuous mode
[  108.238730][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.277733][ T5857] veth1_vlan: entered promiscuous mode
[  108.316598][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.326477][ T5863] veth0_vlan: entered promiscuous mode
[  108.385815][ T3512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.397735][ T3512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.440760][ T3512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.462882][ T5863] veth1_vlan: entered promiscuous mode
[  108.475671][ T5861] veth0_vlan: entered promiscuous mode
[  108.484104][ T3512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.508289][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.527532][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.564268][ T5857] veth0_macvtap: entered promiscuous mode
[  108.585712][ T5861] veth1_vlan: entered promiscuous mode
[  108.611450][ T5857] veth1_macvtap: entered promiscuous mode
[  108.657668][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.666627][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.710222][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.718302][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.743722][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.764186][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.803489][ T5863] veth0_macvtap: entered promiscuous mode
[  108.842448][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  108.874888][ T5863] veth1_macvtap: entered promiscuous mode
[  108.888015][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.897583][   T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.949470][   T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.958277][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.000638][ T5861] veth0_macvtap: entered promiscuous mode
[  109.018228][ T5861] veth1_macvtap: entered promiscuous mode
[  109.032725][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.042798][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.052344][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.111250][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.127633][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.175961][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.238412][ T1333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.248276][ T1333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.260119][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.331231][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.344521][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.356405][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.403674][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.481788][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.499856][   T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.546743][   T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.559147][   T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.572344][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.595715][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.603835][ T5974] warning: `syz.4.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.679069][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.701985][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.865206][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.877144][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.974257][   T51] Bluetooth: hci1: command tx timeout
[  110.000874][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.054774][   T51] Bluetooth: hci2: command tx timeout
[  110.062743][ T5866] Bluetooth: hci0: command tx timeout
[  110.136245][ T5866] Bluetooth: hci4: command tx timeout
[  110.148639][   T51] Bluetooth: hci3: command tx timeout
[  110.157904][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.376359][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.411968][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.016311][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'.
[  111.261971][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.273403][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.365294][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.727044][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.830801][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'.
[  111.865796][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'.
[  112.011599][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.212832][ T6026] smc: net device bond0 applied user defined pnetid SYZ0
[  112.698710][ T6026] Zero length message leads to an empty skb
[  112.744230][ T6038] Bluetooth: MGMT ver 1.23
[  112.841945][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'.
[  112.953449][   T12] bridge_slave_1: left allmulticast mode
[  112.968413][   T12] bridge_slave_1: left promiscuous mode
[  112.987521][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.038052][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.046771][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.056254][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.081233][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.114005][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.118469][   T12] bridge_slave_0: left allmulticast mode
[  113.278986][   T12] bridge_slave_0: left promiscuous mode
[  113.285642][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.316516][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.340587][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.355682][   T12] bond0 (unregistering): Released all slaves
[  114.992832][ T6080] veth3: entered promiscuous mode
[  115.340192][ T6098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34'.
[  115.410734][ T5866] Bluetooth: hci1: command tx timeout
[  115.419283][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[  115.784550][   T12] hsr_slave_0: left promiscuous mode
[  115.807638][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.836265][   T12] hsr_slave_1: left promiscuous mode
[  115.845519][ T6112] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004
[  115.865402][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.919213][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.941503][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.958301][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.025710][ T6121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.42'.
[  116.049533][   T12] veth1_macvtap: left promiscuous mode
[  116.061022][   T12] veth0_macvtap: left promiscuous mode
[  116.077162][   T12] veth1_vlan: left promiscuous mode
[  116.093398][   T12] veth0_vlan: left promiscuous mode
[  116.157984][ T6126] xt_TCPMSS: Only works on TCP SYN packets
[  117.011243][ T6144] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[  117.146076][ T6151] netlink: 'syz.3.48': attribute type 10 has an invalid length.
[  117.158124][ T6151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.48'.
[  117.213006][   T12] team0 (unregistering): Port device team_slave_1 removed
[  117.255026][   T12] team0 (unregistering): Port device team_slave_0 removed
[  117.489094][ T5866] Bluetooth: hci1: command tx timeout
[  117.743113][ T6144] 8021q: VLANs not supported on lo
[  117.766886][ T6151] bridge0: port 3(dummy0) entered blocking state
[  117.795286][ T6151] bridge0: port 3(dummy0) entered disabled state
[  117.841774][ T6151] dummy0: entered allmulticast mode
[  117.869127][ T6151] dummy0: entered promiscuous mode
[  117.893341][ T6151] bridge0: port 3(dummy0) entered blocking state
[  117.900119][ T6151] bridge0: port 3(dummy0) entered forwarding state
[  118.327715][ T6179] netlink: 'syz.2.54': attribute type 3 has an invalid length.
[  118.451944][ T6185] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[  118.472779][ T6174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.493054][ T6185] netlink: 'syz.0.55': attribute type 4 has an invalid length.
[  118.503400][ T6185] netlink: 188 bytes leftover after parsing attributes in process `syz.0.55'.
[  118.579138][ T6188] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.56'.
[  118.593551][ T6189] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  118.835397][ T6174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.931624][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'.
[  119.569109][ T5866] Bluetooth: hci1: command tx timeout
[  119.643004][ T6205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  119.677424][ T6174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.710571][ T6206] netlink: 508 bytes leftover after parsing attributes in process `syz.2.59'.
[  119.855293][ T6045] chnl_net:caif_netlink_parms(): no params data found
[  120.081063][ T6174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.567759][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.597048][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.639248][ T6045] bridge_slave_0: entered allmulticast mode
[  120.661079][ T6045] bridge_slave_0: entered promiscuous mode
[  120.785479][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.814049][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.835522][ T6045] bridge_slave_1: entered allmulticast mode
[  120.862808][ T6045] bridge_slave_1: entered promiscuous mode
[  120.874094][   T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.913176][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'.
[  120.929646][ T6246] syzkaller0: tun_chr_ioctl cmd 1074025677
[  120.945625][ T6246] syzkaller0: linktype set to 774
[  121.105385][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.118752][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.145545][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.217419][ T6266] vlan2: entered promiscuous mode
[  121.223608][ T6266] vlan2: entered allmulticast mode
[  121.228759][ T6266] hsr_slave_1: entered allmulticast mode
[  121.345546][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.476053][ T6277] syzkaller0: entered promiscuous mode
[  121.482571][ T6277] syzkaller0: entered allmulticast mode
[  121.514670][ T6045] team0: Port device team_slave_0 added
[  121.530251][ T1150] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.563829][ T6045] team0: Port device team_slave_1 added
[  121.649403][ T5866] Bluetooth: hci1: command tx timeout
[  121.755736][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.763188][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.793662][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.852802][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.867982][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.908757][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.957292][ T6288] netlink: 'syz.4.79': attribute type 5 has an invalid length.
[  122.125096][ T6045] hsr_slave_0: entered promiscuous mode
[  122.148110][ T6045] hsr_slave_1: entered promiscuous mode
[  122.167944][ T6045] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.194092][ T6045] Cannot create hsr debugfs directory
[  122.388192][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'.
[  122.426539][ T6304] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  122.435890][ T6304] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  123.475630][ T6347] netlink: 'syz.0.90': attribute type 4 has an invalid length.
[  123.536791][ T6344] netlink: 96 bytes leftover after parsing attributes in process `syz.0.90'.
[  123.718512][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[  123.956889][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'.
[  124.356339][ T6045] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  124.385603][ T6045] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  124.412811][ T6372] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[  124.417691][ T6370] bond0: entered promiscuous mode
[  124.432058][ T6370] bond_slave_0: entered promiscuous mode
[  124.438200][ T6370] bond_slave_1: entered promiscuous mode
[  124.448408][ T6370] bond0: left promiscuous mode
[  124.462348][ T6370] bond_slave_0: left promiscuous mode
[  124.469238][ T6370] bond_slave_1: left promiscuous mode
[  124.502481][ T6045] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  124.539811][ T6045] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  125.282160][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[  125.452808][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.537261][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'.
[  125.789661][ T6045] 8021q: adding VLAN 0 to HW filter on device team0
[  125.820699][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.827892][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.192060][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.199409][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.429992][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'.
[  126.443208][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'.
[  126.504477][ T6426] syz.4.108 uses obsolete (PF_INET,SOCK_PACKET)
[  127.735359][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'.
[  127.845650][ T6480] netlink: 'syz.0.120': attribute type 27 has an invalid length.
[  128.226806][ T6492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.122'.
[  128.278634][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.439038][ T6045] veth0_vlan: entered promiscuous mode
[  128.489437][ T6045] veth1_vlan: entered promiscuous mode
[  128.495848][ T6489] xt_CT: No such helper "syz0"
[  128.671114][ T6503] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[  128.978445][ T6508] syzkaller0: entered promiscuous mode
[  128.980970][ T6520] netlink: 'syz.2.127': attribute type 1 has an invalid length.
[  128.994357][ T6508] syzkaller0: entered allmulticast mode
[  129.004586][ T6520] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.127'.
[  129.091234][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'.
[  129.124752][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'.
[  131.246604][ T6045] veth0_macvtap: entered promiscuous mode
[  131.304927][ T6045] veth1_macvtap: entered promiscuous mode
[  131.454378][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.502776][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'.
[  131.520829][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.552269][ T6576] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  131.561400][ T6577] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002
[  131.634195][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.685695][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.734931][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.783541][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.077202][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.110503][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.279127][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.287013][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.853869][ T6045] syz-executor (6045) used greatest stack depth: 19904 bytes left
[  133.048769][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.149'.
[  133.082088][  T143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.096640][ T6631] syz.3.151: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  133.137692][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.3.151 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  133.137725][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  133.137781][ T6631] Call Trace:
[  133.137847][ T6631]  <TASK>
[  133.137904][ T6631]  dump_stack_lvl+0x189/0x250
[  133.138084][ T6631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.138130][ T6631]  ? __pfx__printk+0x10/0x10
[  133.138161][ T6631]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.138198][ T6631]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.138230][ T6631]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  133.138290][ T6631]  warn_alloc+0x214/0x310
[  133.138324][ T6631]  ? stack_depot_save_flags+0x40/0x900
[  133.138371][ T6631]  ? __pfx_warn_alloc+0x10/0x10
[  133.138403][ T6631]  ? kasan_save_track+0x4f/0x80
[  133.138429][ T6631]  ? xskq_create+0x56/0x170
[  133.138456][ T6631]  ? xsk_init_queue+0xb0/0x110
[  133.138483][ T6631]  ? xsk_setsockopt+0x43f/0x710
[  133.138505][ T6631]  ? do_sock_setsockopt+0x25a/0x3e0
[  133.138537][ T6631]  ? __x64_sys_setsockopt+0x18b/0x220
[  133.138566][ T6631]  ? do_syscall_64+0xfa/0x3b0
[  133.138593][ T6631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.138625][ T6631]  __vmalloc_node_range_noprof+0x125/0x12f0
[  133.138689][ T6631]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  133.138726][ T6631]  ? __kasan_kmalloc+0x93/0xb0
[  133.138755][ T6631]  vmalloc_user_noprof+0xad/0xf0
[  133.138784][ T6631]  ? xskq_create+0xbf/0x170
[  133.138812][ T6631]  xskq_create+0xbf/0x170
[  133.138842][ T6631]  xsk_init_queue+0xb0/0x110
[  133.138870][ T6631]  xsk_setsockopt+0x43f/0x710
[  133.138897][ T6631]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.138920][ T6631]  ? __lock_acquire+0xab9/0xd20
[  133.138961][ T6631]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  133.138989][ T6631]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.139015][ T6631]  do_sock_setsockopt+0x25a/0x3e0
[  133.139050][ T6631]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  133.139087][ T6631]  ? __fget_files+0x2a/0x420
[  133.139145][ T6631]  __x64_sys_setsockopt+0x18b/0x220
[  133.139186][ T6631]  do_syscall_64+0xfa/0x3b0
[  133.139214][ T6631]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.139244][ T6631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.139266][ T6631]  ? clear_bhb_loop+0x60/0xb0
[  133.139301][ T6631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.139322][ T6631] RIP: 0033:0x7f0b20d8e929
[  133.139383][ T6631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.139427][ T6631] RSP: 002b:00007f0b21b2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.139488][ T6631] RAX: ffffffffffffffda RBX: 00007f0b20fb5fa0 RCX: 00007f0b20d8e929
[  133.139504][ T6631] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  133.139517][ T6631] RBP: 00007f0b20e10b39 R08: 0000000000000004 R09: 0000000000000000
[  133.139529][ T6631] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.139542][ T6631] R13: 0000000000000000 R14: 00007f0b20fb5fa0 R15: 00007ffe0c59c488
[  133.139577][ T6631]  </TASK>
[  133.460840][ T6631] Mem-Info:
[  133.464057][ T6631] active_anon:4865 inactive_anon:0 isolated_anon:0
[  133.464057][ T6631]  active_file:1316 inactive_file:39833 isolated_file:0
[  133.464057][ T6631]  unevictable:768 dirty:24 writeback:0
[  133.464057][ T6631]  slab_reclaimable:10373 slab_unreclaimable:97724
[  133.464057][ T6631]  mapped:26100 shmem:2040 pagetables:953
[  133.464057][ T6631]  sec_pagetables:0 bounce:0
[  133.464057][ T6631]  kernel_misc_reclaimable:0
[  133.464057][ T6631]  free:1340155 free_pcp:16219 free_cma:0
[  133.510630][ T6631] Node 0 active_anon:19460kB inactive_anon:0kB active_file:5264kB inactive_file:159132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104400kB dirty:92kB writeback:0kB shmem:6624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.544662][ T6631] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.577030][ T6631] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  133.607715][ T6631] lowmem_reserve[]: 0 2498 2499 2499 2499
[  133.613912][ T6631] Node 0 DMA32 free:1456228kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19416kB inactive_anon:0kB active_file:5264kB inactive_file:157552kB unevictable:1536kB writepending:92kB present:3129332kB managed:2558304kB mlocked:0kB bounce:0kB free_pcp:40920kB local_pcp:21392kB free_cma:0kB
[  133.646665][ T6631] lowmem_reserve[]: 0 0 1 1 1
[  133.651870][ T6631] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  133.681393][ T6631] lowmem_reserve[]: 0 0 0 0 0
[  133.683074][ T6626] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  133.686180][ T6631] Node 1 Normal free:3894220kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23520kB local_pcp:12384kB free_cma:0kB
[  133.725912][ T6631] lowmem_reserve[]: 0 0 0 0 0
[  133.731043][ T6631] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  133.744210][ T6631] Node 0 DMA32: 2167*4kB (UME) 820*8kB (UME) 412*16kB (UM) 273*32kB (UME) 126*64kB (UME) 95*128kB (UM) 34*256kB (UME) 15*512kB (UME) 6*1024kB (M) 8*2048kB (UM) 334*4096kB (M) = 1457756kB
[  133.764067][ T6631] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  133.776724][ T6631] Node 1 Normal: 241*4kB (UME) 51*8kB (UME) 47*16kB (UME) 82*32kB (UME) 23*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894220kB
[  133.840511][ T6631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  133.861064][ T6633] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  133.899151][ T6631] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.943969][  T143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.949999][ T6631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  134.029194][ T6631] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.038551][ T6631] 42592 total pagecache pages
[  134.044208][ T6631] 0 pages in swap cache
[  134.048430][ T6631] Free swap  = 124996kB
[  134.060715][ T6631] Total swap = 124996kB
[  134.064926][ T6631] 2097051 pages RAM
[  134.068752][ T6631] 0 pages HighMem/MovableOnly
[  134.096235][ T6631] 425433 pages reserved
[  134.115544][ T6631] 0 pages cma reserved
[  134.175412][  T143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.375625][  T143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.685095][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'.
[  134.771307][ T6665] FAULT_INJECTION: forcing a failure.
[  134.771307][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  134.791190][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.2.159 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  134.791222][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.791247][ T6665] Call Trace:
[  134.791256][ T6665]  <TASK>
[  134.791264][ T6665]  dump_stack_lvl+0x189/0x250
[  134.791318][ T6665]  ? __pfx____ratelimit+0x10/0x10
[  134.791349][ T6665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.791375][ T6665]  ? __pfx__printk+0x10/0x10
[  134.791417][ T6665]  should_fail_ex+0x414/0x560
[  134.791455][ T6665]  _copy_to_user+0x31/0xb0
[  134.791491][ T6665]  btf_new_fd+0x562/0xc90
[  134.791532][ T6665]  ? apparmor_capable+0x137/0x1b0
[  134.791631][ T6665]  ? __pfx_btf_new_fd+0x10/0x10
[  134.791659][ T6665]  ? bpf_token_put+0x143/0x160
[  134.791697][ T6665]  ? bpf_btf_load+0x126/0x190
[  134.791722][ T6665]  __sys_bpf+0x635/0x860
[  134.791744][ T6665]  ? __pfx___sys_bpf+0x10/0x10
[  134.791777][ T6665]  ? ksys_write+0x22a/0x250
[  134.791805][ T6665]  ? __pfx_ksys_write+0x10/0x10
[  134.791827][ T6665]  ? rcu_is_watching+0x15/0xb0
[  134.791872][ T6665]  __x64_sys_bpf+0x7c/0x90
[  134.791904][ T6665]  do_syscall_64+0xfa/0x3b0
[  134.791951][ T6665]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.791979][ T6665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.792001][ T6665]  ? clear_bhb_loop+0x60/0xb0
[  134.792026][ T6665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.792047][ T6665] RIP: 0033:0x7ff3f7b8e929
[  134.792066][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.792117][ T6665] RSP: 002b:00007ff3f8a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  134.792140][ T6665] RAX: ffffffffffffffda RBX: 00007ff3f7db5fa0 RCX: 00007ff3f7b8e929
[  134.792155][ T6665] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  134.792168][ T6665] RBP: 00007ff3f8a9f090 R08: 0000000000000000 R09: 0000000000000000
[  134.792182][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.792194][ T6665] R13: 0000000000000001 R14: 00007ff3f7db5fa0 R15: 00007ffd3deb2088
[  134.792228][ T6665]  </TASK>
[  135.203547][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.214455][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.227092][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.250709][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.259585][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.310139][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[  135.319331][  T143] bridge_slave_1: left allmulticast mode
[  135.333205][  T143] bridge_slave_1: left promiscuous mode
[  135.349157][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[  135.350064][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.385894][  T143] bridge_slave_0: left allmulticast mode
[  135.394885][  T143] bridge_slave_0: left promiscuous mode
[  135.401827][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.664507][ T6683] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  135.735895][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'.
[  135.744964][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'.
[  135.844817][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'.
[  136.130218][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.142582][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.155641][  T143] bond0 (unregistering): Released all slaves
[  136.183811][ T1150] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.193228][ T1150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.477170][ T1150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.514923][ T1150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.680426][ T6705] xt_TPROXY: Can be used only with -p tcp or -p udp
[  136.892160][ T6710] 8021q: VLANs not supported on ip6gre0
[  137.014277][ T6716] FAULT_INJECTION: forcing a failure.
[  137.014277][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.062651][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.2.171 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  137.062685][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  137.062698][ T6716] Call Trace:
[  137.062707][ T6716]  <TASK>
[  137.062717][ T6716]  dump_stack_lvl+0x189/0x250
[  137.062754][ T6716]  ? __pfx____ratelimit+0x10/0x10
[  137.062784][ T6716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.062811][ T6716]  ? __pfx__printk+0x10/0x10
[  137.062866][ T6716]  should_fail_ex+0x414/0x560
[  137.062906][ T6716]  _copy_to_user+0x31/0xb0
[  137.062934][ T6716]  simple_read_from_buffer+0xe1/0x170
[  137.062971][ T6716]  proc_fail_nth_read+0x1df/0x250
[  137.063008][ T6716]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  137.063044][ T6716]  ? rw_verify_area+0x258/0x650
[  137.063068][ T6716]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  137.063101][ T6716]  vfs_read+0x200/0x980
[  137.063132][ T6716]  ? __pfx___mutex_lock+0x10/0x10
[  137.063163][ T6716]  ? __pfx_vfs_read+0x10/0x10
[  137.063189][ T6716]  ? __fget_files+0x2a/0x420
[  137.063223][ T6716]  ? __fget_files+0x3a0/0x420
[  137.063251][ T6716]  ? __fget_files+0x2a/0x420
[  137.063291][ T6716]  ksys_read+0x145/0x250
[  137.063319][ T6716]  ? __pfx_ksys_read+0x10/0x10
[  137.063341][ T6716]  ? rcu_is_watching+0x15/0xb0
[  137.063374][ T6716]  ? do_syscall_64+0xbe/0x3b0
[  137.063409][ T6716]  do_syscall_64+0xfa/0x3b0
[  137.063437][ T6716]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.063464][ T6716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.063487][ T6716]  ? clear_bhb_loop+0x60/0xb0
[  137.063580][ T6716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.063598][ T6716] RIP: 0033:0x7ff3f7b8d33c
[  137.063615][ T6716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  137.063629][ T6716] RSP: 002b:00007ff3f8a9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  137.063648][ T6716] RAX: ffffffffffffffda RBX: 00007ff3f7db5fa0 RCX: 00007ff3f7b8d33c
[  137.063660][ T6716] RDX: 000000000000000f RSI: 00007ff3f8a9f0a0 RDI: 0000000000000003
[  137.063670][ T6716] RBP: 00007ff3f8a9f090 R08: 0000000000000000 R09: 0000000000000000
[  137.063680][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.063689][ T6716] R13: 0000000000000001 R14: 00007ff3f7db5fa0 R15: 00007ffd3deb2088
[  137.063717][ T6716]  </TASK>
[  137.340213][   T51] Bluetooth: hci1: command tx timeout
[  137.476453][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.655718][ T6735] tipc: Can't bind to reserved service type 0
[  137.677744][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'.
[  137.687031][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'.
[  137.699020][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'.
[  137.708443][ T6733] netlink: 'syz.2.174': attribute type 6 has an invalid length.
[  137.724502][  T143] hsr_slave_0: left promiscuous mode
[  137.741731][  T143] hsr_slave_1: left promiscuous mode
[  137.752068][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.769276][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.780810][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.798597][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.837556][  T143] veth1_macvtap: left promiscuous mode
[  137.844209][  T143] veth0_macvtap: left promiscuous mode
[  137.850948][  T143] veth1_vlan: left promiscuous mode
[  137.856446][  T143] veth0_vlan: left promiscuous mode
[  138.213537][ T6747] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[  138.447933][  T143] team0 (unregistering): Port device team_slave_1 removed
[  138.534781][  T143] team0 (unregistering): Port device team_slave_0 removed
[  138.990412][ T6748] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  139.019170][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.021341][ T1150] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  139.053103][ T6750] veth3: entered promiscuous mode
[  139.063834][ T6750] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  139.173611][   T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  139.368092][ T6767] __nla_validate_parse: 1 callbacks suppressed
[  139.368156][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.184'.
[  139.410920][   T51] Bluetooth: hci1: command tx timeout
[  139.432108][ T6766] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.579776][ T6668] chnl_net:caif_netlink_parms(): no params data found
[  139.701734][ T6766] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.832056][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  139.838839][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  140.102694][ T6766] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.385187][ T6766] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.404609][ T6792] netlink: 'syz.0.191': attribute type 10 has an invalid length.
[  140.413295][ T6794] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  140.438071][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.453078][ T6792] team0: Port device bond0 added
[  140.467812][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.471055][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'.
[  140.475554][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.494793][ T6668] bridge_slave_0: entered allmulticast mode
[  140.507114][ T6668] bridge_slave_0: entered promiscuous mode
[  140.537636][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.540595][ T6792] syz.0.191 (6792) used greatest stack depth: 19256 bytes left
[  140.556159][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.571836][ T6668] bridge_slave_1: entered allmulticast mode
[  140.592739][ T6668] bridge_slave_1: entered promiscuous mode
[  140.862943][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.904779][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.045866][   T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.123617][ T6668] team0: Port device team_slave_0 added
[  141.132319][   T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.144427][ T6668] team0: Port device team_slave_1 added
[  141.342650][   T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.489559][   T51] Bluetooth: hci1: command tx timeout
[  141.518357][ T6821] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.200'.
[  141.557836][   T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.574743][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.605164][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.683723][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.889464][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.922530][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.983964][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.095653][ T6835] netlink: 'syz.3.203': attribute type 1 has an invalid length.
[  142.137006][ T6835] netlink: 1 bytes leftover after parsing attributes in process `syz.3.203'.
[  142.166447][ T6841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.174293][ T6841] IPv6: NLM_F_CREATE should be set when creating new route
[  142.181606][ T6841] IPv6: NLM_F_CREATE should be set when creating new route
[  142.408298][ T6668] hsr_slave_0: entered promiscuous mode
[  142.439942][ T6668] hsr_slave_1: entered promiscuous mode
[  142.483766][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.511475][ T6668] Cannot create hsr debugfs directory
[  142.539275][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'.
[  142.626837][ T6855] vxcan1: tx address claim with different name
[  143.053284][ T6866] netlink: 248 bytes leftover after parsing attributes in process `syz.4.211'.
[  143.158137][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'.
[  143.251337][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'.
[  143.264257][ T6870] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  143.326060][ T6875] bridge0: entered promiscuous mode
[  143.343276][ T6875] bridge0: left promiscuous mode
[  143.571520][   T51] Bluetooth: hci1: command tx timeout
[  143.611762][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[  143.698722][ T6889] batadv1: entered allmulticast mode
[  143.753371][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv1
[  143.969938][ T6890] netlink: 'syz.3.219': attribute type 1 has an invalid length.
[  143.997995][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'.
[  144.902495][ T6668] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.999999][ T6668] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  145.001136][ T6933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.014146][ T6933] IPv6: NLM_F_CREATE should be set when creating new route
[  145.021531][ T6933] IPv6: NLM_F_CREATE should be set when creating new route
[  145.028898][ T6933] IPv6: NLM_F_CREATE should be set when creating new route
[  145.084333][ T6937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.092317][ T6668] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  145.243408][ T6668] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  145.693165][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.757184][ T6668] 8021q: adding VLAN 0 to HW filter on device team0
[  145.807326][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.814576][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.864883][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.872198][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.277572][ T6994] __nla_validate_parse: 1 callbacks suppressed
[  146.277593][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'.
[  146.303515][ T6996] netlink: 96 bytes leftover after parsing attributes in process `syz.0.244'.
[  146.954661][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.141697][ T6668] veth0_vlan: entered promiscuous mode
[  147.197271][ T6668] veth1_vlan: entered promiscuous mode
[  147.338457][ T6668] veth0_macvtap: entered promiscuous mode
[  147.376183][ T6668] veth1_macvtap: entered promiscuous mode
[  147.464009][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.534223][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.602668][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.634238][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.682801][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.709389][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.965619][ T7054] netlink: 124 bytes leftover after parsing attributes in process `syz.3.260'.
[  147.996192][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.017953][ T7058] netlink: 124 bytes leftover after parsing attributes in process `syz.3.260'.
[  148.036942][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.150614][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.187097][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.294510][ T7066] netlink: 'syz.2.261': attribute type 9 has an invalid length.
[  148.332048][ T7066] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.261'.
[  148.353440][ T7057] can: request_module (can-proto-4) failed.
[  148.487784][ T7066] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  148.828195][ T7084] lo: entered allmulticast mode
[  148.983426][ T7082] syz.3.267: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  149.019239][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.3.267 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  149.019271][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.019284][ T7082] Call Trace:
[  149.019293][ T7082]  <TASK>
[  149.019349][ T7082]  dump_stack_lvl+0x189/0x250
[  149.019414][ T7082]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.019441][ T7082]  ? __pfx__printk+0x10/0x10
[  149.019475][ T7082]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  149.019510][ T7082]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  149.019544][ T7082]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  149.019578][ T7082]  warn_alloc+0x214/0x310
[  149.019610][ T7082]  ? stack_depot_save_flags+0x40/0x900
[  149.019650][ T7082]  ? __pfx_warn_alloc+0x10/0x10
[  149.019681][ T7082]  ? kasan_save_track+0x4f/0x80
[  149.019705][ T7082]  ? xskq_create+0x56/0x170
[  149.019733][ T7082]  ? xsk_init_queue+0xb0/0x110
[  149.019758][ T7082]  ? xsk_setsockopt+0x43f/0x710
[  149.019778][ T7082]  ? do_sock_setsockopt+0x25a/0x3e0
[  149.019815][ T7082]  ? __x64_sys_setsockopt+0x18b/0x220
[  149.019840][ T7082]  ? do_syscall_64+0xfa/0x3b0
[  149.019893][ T7082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.019919][ T7082]  __vmalloc_node_range_noprof+0x125/0x12f0
[  149.019971][ T7082]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  149.019998][ T7082]  ? xskq_create+0x56/0x170
[  149.020021][ T7082]  ? __kasan_kmalloc+0x93/0xb0
[  149.020045][ T7082]  vmalloc_user_noprof+0xad/0xf0
[  149.020071][ T7082]  ? xskq_create+0xbf/0x170
[  149.020094][ T7082]  xskq_create+0xbf/0x170
[  149.020119][ T7082]  xsk_init_queue+0xb0/0x110
[  149.020142][ T7082]  xsk_setsockopt+0x43f/0x710
[  149.020165][ T7082]  ? __pfx_xsk_setsockopt+0x10/0x10
[  149.020184][ T7082]  ? __lock_acquire+0xab9/0xd20
[  149.020218][ T7082]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  149.020235][ T7082]  ? __pfx_xsk_setsockopt+0x10/0x10
[  149.020257][ T7082]  do_sock_setsockopt+0x25a/0x3e0
[  149.020287][ T7082]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  149.020318][ T7082]  ? __fget_files+0x2a/0x420
[  149.020351][ T7082]  __x64_sys_setsockopt+0x18b/0x220
[  149.020383][ T7082]  do_syscall_64+0xfa/0x3b0
[  149.020406][ T7082]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.020435][ T7082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.020454][ T7082]  ? clear_bhb_loop+0x60/0xb0
[  149.020475][ T7082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.020492][ T7082] RIP: 0033:0x7f0b20d8e929
[  149.020509][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.020523][ T7082] RSP: 002b:00007f0b21b2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  149.020542][ T7082] RAX: ffffffffffffffda RBX: 00007f0b20fb5fa0 RCX: 00007f0b20d8e929
[  149.020555][ T7082] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  149.020566][ T7082] RBP: 00007f0b20e10b39 R08: 0000000000000004 R09: 0000000000000000
[  149.020578][ T7082] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.020589][ T7082] R13: 0000000000000000 R14: 00007f0b20fb5fa0 R15: 00007ffe0c59c488
[  149.020657][ T7082]  </TASK>
[  149.020671][ T7082] Mem-Info:
[  149.046954][ T7085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.268'.
[  149.126549][ T7082] active_anon:4631 inactive_anon:0 isolated_anon:0
[  149.126549][ T7082]  active_file:1365 inactive_file:39842 isolated_file:0
[  149.126549][ T7082]  unevictable:768 dirty:118 writeback:0
[  149.126549][ T7082]  slab_reclaimable:10753 slab_unreclaimable:98266
[  149.126549][ T7082]  mapped:29299 shmem:1383 pagetables:1025
[  149.126549][ T7082]  sec_pagetables:0 bounce:0
[  149.126549][ T7082]  kernel_misc_reclaimable:0
[  149.126549][ T7082]  free:1333222 free_pcp:15273 free_cma:0
[  149.196368][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'.
[  149.208003][ T7082] Node 0 active_anon:18424kB inactive_anon:0kB active_file:5460kB inactive_file:159168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117296kB dirty:468kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11556kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  149.460549][ T7091] netlink: 72 bytes leftover after parsing attributes in process `syz.0.268'.
[  149.480934][ T7082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  149.483434][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'.
[  149.527499][ T7082] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  149.530562][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[  149.559712][ T7082] lowmem_reserve[]: 0 2498 2499 2499 2499
[  149.572702][ T7082] Node 0 DMA32 free:1423296kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18180kB inactive_anon:0kB active_file:5460kB inactive_file:157588kB unevictable:1536kB writepending:464kB present:3129332kB managed:2558304kB mlocked:0kB bounce:0kB free_pcp:37876kB local_pcp:19208kB free_cma:0kB
[  149.573314][ T7077] lo: left allmulticast mode
[  149.608573][ T7082] lowmem_reserve[]: 0 0 1 1 1
[  149.622507][ T7082] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  149.751410][ T7082] lowmem_reserve[]: 0 0 0 0 0
[  149.758815][ T7082] Node 1 Normal free:3894220kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23552kB local_pcp:11136kB free_cma:0kB
[  149.826381][ T7082] lowmem_reserve[]: 0 0 0 0 0
[  149.848400][ T7082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  149.906629][ T7082] Node 0 DMA32: 433*4kB (UME) 392*8kB (UME) 136*16kB (UM) 340*32kB (UME) 90*64kB (UM) 31*128kB (UME) 39*256kB (UME) 15*512kB (UM) 7*1024kB (UM) 6*2048kB (UM) 336*4096kB (UM) = 1441028kB
[  149.930138][ T1333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.957149][ T7082] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  149.979461][ T7082] Node 1 Normal: 241*4kB (UME) 51*8kB (UME) 47*16kB (UME) 82*32kB (UME) 23*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894220kB
[  150.017333][ T7082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  150.034024][ T7082] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  150.056532][ T7082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  150.075350][ T7082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.094621][ T7082] 42572 total pagecache pages
[  150.100362][ T7082] 0 pages in swap cache
[  150.104548][ T7082] Free swap  = 124996kB
[  150.108725][ T7082] Total swap = 124996kB
[  150.113415][ T7082] 2097051 pages RAM
[  150.117261][ T7082] 0 pages HighMem/MovableOnly
[  150.137605][ T7082] 425433 pages reserved
[  150.142385][ T7082] 0 pages cma reserved
[  150.271188][ T1333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.365412][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.594727][ T1333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.685673][ T7119] tipc: Started in network mode
[  150.710670][ T7119] tipc: Node identity 82bfc97f8253, cluster identity 4711
[  150.740098][ T7119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.761531][ T7121] syzkaller0: entered promiscuous mode
[  150.775440][ T7121] syzkaller0: entered allmulticast mode
[  150.868427][ T1333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.893940][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.904289][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.912455][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.924245][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.936139][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.988050][ T7119] tipc: Resetting bearer <eth:syzkaller0>
[  151.006535][ T7106] tipc: Resetting bearer <eth:syzkaller0>
[  151.030549][ T7106] tipc: Disabling bearer <eth:syzkaller0>
[  151.434946][ T7139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.694003][ T7144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.755038][ T7144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.801122][ T7156] __nla_validate_parse: 1 callbacks suppressed
[  151.801143][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'.
[  151.887200][ T1333] bridge_slave_1: left allmulticast mode
[  151.894941][ T1333] bridge_slave_1: left promiscuous mode
[  151.901502][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.936607][ T1333] bridge_slave_0: left allmulticast mode
[  151.950437][ T1333] bridge_slave_0: left promiscuous mode
[  151.971255][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.068223][ T7166] netlink: 'syz.4.286': attribute type 1 has an invalid length.
[  152.139561][ T7166] netlink: 92 bytes leftover after parsing attributes in process `syz.4.286'.
[  152.547452][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'.
[  152.730130][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.764689][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.777286][ T1333] bond0 (unregistering): Released all slaves
[  153.006868][ T7144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.017680][ T5866] Bluetooth: hci1: command tx timeout
[  153.046970][ T7144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.219270][ T7195] netlink: 732 bytes leftover after parsing attributes in process `syz.0.295'.
[  153.230695][ T7195] netlink: 732 bytes leftover after parsing attributes in process `syz.0.295'.
[  153.284203][ T7144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.304081][ T7144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.429285][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.297'.
[  153.486159][ T7144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.523099][ T7144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.705439][ T7210] netlink: 'syz.3.301': attribute type 9 has an invalid length.
[  153.720528][ T7210] netlink: 'syz.3.301': attribute type 1 has an invalid length.
[  153.730548][ T7210] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.301'.
[  153.828774][ T1333] hsr_slave_0: left promiscuous mode
[  153.863950][ T1333] hsr_slave_1: left promiscuous mode
[  153.900483][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.907969][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.932089][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.944433][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.962890][ T7218] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007
[  153.979677][ T7221] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007
[  153.994791][ T1333] veth1_macvtap: left promiscuous mode
[  154.001819][ T1333] veth0_macvtap: left promiscuous mode
[  154.007623][ T1333] veth1_vlan: left promiscuous mode
[  154.013628][ T1333] veth0_vlan: left promiscuous mode
[  154.053980][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.485116][ T1333] team0 (unregistering): Port device team_slave_1 removed
[  154.522066][ T1333] team0 (unregistering): Port device team_slave_0 removed
[  154.940767][ T7125] chnl_net:caif_netlink_parms(): no params data found
[  155.099091][ T5866] Bluetooth: hci1: command tx timeout
[  155.470883][   T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.512450][   T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.728120][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.775681][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.937817][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'.
[  155.951267][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.960291][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.980792][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.988732][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.997310][ T7125] bridge_slave_0: entered allmulticast mode
[  156.007018][ T7125] bridge_slave_0: entered promiscuous mode
[  156.016819][ T7243] veth0: entered promiscuous mode
[  156.048302][ T3512] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.067466][ T3512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.086888][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.123992][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.136279][ T7125] bridge_slave_1: entered allmulticast mode
[  156.168796][ T7248] netlink: 'syz.4.310': attribute type 1 has an invalid length.
[  156.182422][ T7125] bridge_slave_1: entered promiscuous mode
[  156.350724][ T7249] 8021q: adding VLAN 0 to HW filter on device bond1
[  156.554201][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.597918][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.798096][ T7242] veth0: left promiscuous mode
[  156.840743][ T7125] team0: Port device team_slave_0 added
[  156.877247][ T7125] team0: Port device team_slave_1 added
[  156.899797][ T7272] Dead loop on virtual device ip6_vti0, fix it urgently!
[  157.084917][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.119283][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.151197][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.169978][ T5866] Bluetooth: hci1: command tx timeout
[  157.265405][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.278608][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.305949][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.695856][ T7125] hsr_slave_0: entered promiscuous mode
[  157.711080][ T7125] hsr_slave_1: entered promiscuous mode
[  157.727368][ T7125] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.746208][ T7125] Cannot create hsr debugfs directory
[  157.870747][ T7299] pim6reg1: entered promiscuous mode
[  157.876521][ T7299] pim6reg1: entered allmulticast mode
[  158.578768][ T7331] FAULT_INJECTION: forcing a failure.
[  158.578768][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.608192][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.4.330 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  158.608225][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  158.608238][ T7331] Call Trace:
[  158.608253][ T7331]  <TASK>
[  158.608263][ T7331]  dump_stack_lvl+0x189/0x250
[  158.608297][ T7331]  ? __pfx____ratelimit+0x10/0x10
[  158.608328][ T7331]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.608354][ T7331]  ? __pfx__printk+0x10/0x10
[  158.608384][ T7331]  ? __might_fault+0xb0/0x130
[  158.608433][ T7331]  should_fail_ex+0x414/0x560
[  158.608471][ T7331]  _copy_from_user+0x2d/0xb0
[  158.608498][ T7331]  ___sys_recvmsg+0x12e/0x510
[  158.608526][ T7331]  ? __pfx____sys_recvmsg+0x10/0x10
[  158.608575][ T7331]  ? __fget_files+0x3a0/0x420
[  158.608617][ T7331]  do_recvmmsg+0x307/0x770
[  158.608647][ T7331]  ? __pfx_do_recvmmsg+0x10/0x10
[  158.608681][ T7331]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  158.608732][ T7331]  __x64_sys_recvmmsg+0x190/0x240
[  158.608757][ T7331]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  158.608776][ T7331]  ? rcu_is_watching+0x15/0xb0
[  158.608825][ T7331]  ? do_syscall_64+0xbe/0x3b0
[  158.608862][ T7331]  do_syscall_64+0xfa/0x3b0
[  158.608896][ T7331]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.608922][ T7331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.608943][ T7331]  ? clear_bhb_loop+0x60/0xb0
[  158.608968][ T7331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.608987][ T7331] RIP: 0033:0x7fc3fd58e929
[  158.609006][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.609023][ T7331] RSP: 002b:00007fc3fe321038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  158.609045][ T7331] RAX: ffffffffffffffda RBX: 00007fc3fd7b5fa0 RCX: 00007fc3fd58e929
[  158.609060][ T7331] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[  158.609073][ T7331] RBP: 00007fc3fe321090 R08: 0000000000000000 R09: 0000000000000000
[  158.609085][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.609097][ T7331] R13: 0000000000000000 R14: 00007fc3fd7b5fa0 R15: 00007ffd5e5b2588
[  158.609176][ T7331]  </TASK>
[  159.122670][ T7125] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  159.142699][ T7125] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  159.188650][ T7125] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  159.249988][ T5866] Bluetooth: hci1: command tx timeout
[  159.264637][ T7125] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  159.461491][ T7125] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.557992][ T7125] 8021q: adding VLAN 0 to HW filter on device team0
[  159.611186][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.618483][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.676662][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.683996][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.817771][ T7369] FAULT_INJECTION: forcing a failure.
[  159.817771][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.870281][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.0.343 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  159.870314][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  159.870328][ T7369] Call Trace:
[  159.870337][ T7369]  <TASK>
[  159.870347][ T7369]  dump_stack_lvl+0x189/0x250
[  159.870380][ T7369]  ? __pfx____ratelimit+0x10/0x10
[  159.870411][ T7369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.870438][ T7369]  ? __pfx__printk+0x10/0x10
[  159.870469][ T7369]  ? __might_fault+0xb0/0x130
[  159.870508][ T7369]  should_fail_ex+0x414/0x560
[  159.870547][ T7369]  _copy_to_iter+0x3f5/0x16f0
[  159.870584][ T7369]  ? __pfx__copy_to_iter+0x10/0x10
[  159.870613][ T7369]  ? skb_recv_datagram+0x145/0x190
[  159.870646][ T7369]  j1939_sk_recvmsg+0x228/0x920
[  159.870678][ T7369]  ? __pfx_j1939_sk_recvmsg+0x10/0x10
[  159.870697][ T7369]  ? __lock_acquire+0xab9/0xd20
[  159.870724][ T7369]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  159.870743][ T7369]  ? security_socket_recvmsg+0x7e/0x2e0
[  159.870787][ T7369]  ? __pfx_j1939_sk_recvmsg+0x10/0x10
[  159.870809][ T7369]  sock_recvmsg+0x229/0x270
[  159.870841][ T7369]  ____sys_recvmsg+0x1c9/0x460
[  159.870873][ T7369]  ? __pfx_____sys_recvmsg+0x10/0x10
[  159.870913][ T7369]  ? import_iovec+0x74/0xa0
[  159.870944][ T7369]  ___sys_recvmsg+0x1b5/0x510
[  159.870972][ T7369]  ? __pfx____sys_recvmsg+0x10/0x10
[  159.871022][ T7369]  ? __fget_files+0x3a0/0x420
[  159.871065][ T7369]  do_recvmmsg+0x307/0x770
[  159.871097][ T7369]  ? __pfx_do_recvmmsg+0x10/0x10
[  159.871133][ T7369]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  159.871199][ T7369]  __x64_sys_recvmmsg+0x190/0x240
[  159.871225][ T7369]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  159.871245][ T7369]  ? rcu_is_watching+0x15/0xb0
[  159.871277][ T7369]  ? do_syscall_64+0xbe/0x3b0
[  159.871323][ T7369]  do_syscall_64+0xfa/0x3b0
[  159.871352][ T7369]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.871380][ T7369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.871402][ T7369]  ? clear_bhb_loop+0x60/0xb0
[  159.871429][ T7369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.871451][ T7369] RIP: 0033:0x7fdfe3b8e929
[  159.871470][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.871488][ T7369] RSP: 002b:00007fdfe4a24038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  159.871512][ T7369] RAX: ffffffffffffffda RBX: 00007fdfe3db5fa0 RCX: 00007fdfe3b8e929
[  159.871527][ T7369] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[  159.871541][ T7369] RBP: 00007fdfe4a24090 R08: 0000000000000000 R09: 0000000000000000
[  159.871554][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.871623][ T7369] R13: 0000000000000000 R14: 00007fdfe3db5fa0 R15: 00007fffcb6569a8
[  159.871657][ T7369]  </TASK>
[  160.488449][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.651641][ T7387] syzkaller0: entered promiscuous mode
[  160.657179][ T7387] syzkaller0: entered allmulticast mode
[  160.881873][ T7125] veth0_vlan: entered promiscuous mode
[  160.946335][ T7125] veth1_vlan: entered promiscuous mode
[  161.050412][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'.
[  161.164235][ T7403] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[  161.198537][ T7125] veth0_macvtap: entered promiscuous mode
[  161.309486][ T7403] bond1: entered promiscuous mode
[  161.315191][ T7403] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.375699][ T7408] bond1: (slave bridge1): making interface the new active one
[  161.409193][ T7408] bridge1: entered promiscuous mode
[  161.425899][ T7408] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  161.456519][ T7125] veth1_macvtap: entered promiscuous mode
[  161.663970][ T7417] FAULT_INJECTION: forcing a failure.
[  161.663970][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.690744][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.0.355 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  161.690772][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.690783][ T7417] Call Trace:
[  161.690791][ T7417]  <TASK>
[  161.690799][ T7417]  dump_stack_lvl+0x189/0x250
[  161.690829][ T7417]  ? __pfx____ratelimit+0x10/0x10
[  161.690856][ T7417]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.690879][ T7417]  ? __pfx__printk+0x10/0x10
[  161.690915][ T7417]  should_fail_ex+0x414/0x560
[  161.690956][ T7417]  _copy_to_user+0x31/0xb0
[  161.690982][ T7417]  simple_read_from_buffer+0xe1/0x170
[  161.691010][ T7417]  proc_fail_nth_read+0x1df/0x250
[  161.691038][ T7417]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.691069][ T7417]  ? rw_verify_area+0x258/0x650
[  161.691091][ T7417]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.691121][ T7417]  vfs_read+0x200/0x980
[  161.691151][ T7417]  ? __pfx___mutex_lock+0x10/0x10
[  161.691180][ T7417]  ? __pfx_vfs_read+0x10/0x10
[  161.691205][ T7417]  ? __fget_files+0x2a/0x420
[  161.691239][ T7417]  ? __fget_files+0x3a0/0x420
[  161.691267][ T7417]  ? __fget_files+0x2a/0x420
[  161.691307][ T7417]  ksys_read+0x145/0x250
[  161.691335][ T7417]  ? __pfx_ksys_read+0x10/0x10
[  161.691356][ T7417]  ? rcu_is_watching+0x15/0xb0
[  161.691387][ T7417]  ? do_syscall_64+0xbe/0x3b0
[  161.691420][ T7417]  do_syscall_64+0xfa/0x3b0
[  161.691443][ T7417]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.691470][ T7417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.691490][ T7417]  ? clear_bhb_loop+0x60/0xb0
[  161.691554][ T7417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.691575][ T7417] RIP: 0033:0x7fdfe3b8d33c
[  161.691593][ T7417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  161.691609][ T7417] RSP: 002b:00007fdfe4a24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  161.691687][ T7417] RAX: ffffffffffffffda RBX: 00007fdfe3db5fa0 RCX: 00007fdfe3b8d33c
[  161.691703][ T7417] RDX: 000000000000000f RSI: 00007fdfe4a240a0 RDI: 0000000000000004
[  161.691715][ T7417] RBP: 00007fdfe4a24090 R08: 0000000000000000 R09: 0000000000000000
[  161.691728][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.691739][ T7417] R13: 0000000000000000 R14: 00007fdfe3db5fa0 R15: 00007fffcb6569a8
[  161.691774][ T7417]  </TASK>
[  162.150910][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.206682][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.294196][ T7431] trusted_key: syz.0.358 sent an empty control message without MSG_MORE.
[  162.461440][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.542598][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.553920][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.574984][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.594103][ T7436] geneve1: entered allmulticast mode
[  162.707585][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.722507][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.765812][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.776477][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.157368][ T7443] netlink: 'syz.2.361': attribute type 1 has an invalid length.
[  163.275961][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.363'.
[  163.514097][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.657785][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.797307][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.869185][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.984723][   T13] bridge_slave_1: left allmulticast mode
[  163.992967][   T13] bridge_slave_1: left promiscuous mode
[  164.001898][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.012062][   T13] bridge_slave_0: left allmulticast mode
[  164.017730][   T13] bridge_slave_0: left promiscuous mode
[  164.024198][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.171567][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  165.187817][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  165.202621][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  165.216242][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  165.225151][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.534198][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.570056][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.586520][   T13] bond0 (unregistering): Released all slaves
[  165.623224][ T7461] !
: renamed from dummy0 (while UP)
[  165.768138][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'.
[  166.425469][ T7522] lo speed is unknown, defaulting to 1000
[  166.506565][ T7522] lo speed is unknown, defaulting to 1000
[  166.778730][   T13] hsr_slave_0: left promiscuous mode
[  166.785152][   T13] hsr_slave_1: left promiscuous mode
[  166.797837][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.806229][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.827760][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.845463][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.879024][   T13] veth1_macvtap: left promiscuous mode
[  166.884820][   T13] veth0_macvtap: left promiscuous mode
[  166.895169][   T13] veth1_vlan: left promiscuous mode
[  166.900980][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.377'.
[  166.911314][   T13] veth0_vlan: left promiscuous mode
[  167.249327][ T5866] Bluetooth: hci1: command tx timeout
[  167.376526][   T13] team0 (unregistering): Port device team_slave_1 removed
[  167.415825][   T13] team0 (unregistering): Port device team_slave_0 removed
[  167.744593][ T7522] lo speed is unknown, defaulting to 1000
[  167.771500][ T7522] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  167.828246][ T7522] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  168.010372][ T7522] lo speed is unknown, defaulting to 1000
[  168.056172][ T7522] lo speed is unknown, defaulting to 1000
[  168.084923][ T7522] lo speed is unknown, defaulting to 1000
[  168.162040][ T7544] lo speed is unknown, defaulting to 1000
[  168.219688][ T7522] lo speed is unknown, defaulting to 1000
[  168.248837][ T7522] lo speed is unknown, defaulting to 1000
[  168.263769][ T7485] chnl_net:caif_netlink_parms(): no params data found
[  168.813954][ T7556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.379'.
[  168.823589][ T7556] tc_dump_action: action bad kind
[  169.329262][ T5866] Bluetooth: hci1: command tx timeout
[  169.554916][ T7562] bridge_slave_0: left allmulticast mode
[  169.572145][ T7562] bridge_slave_0: left promiscuous mode
[  169.600871][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.646315][ T7562] bridge_slave_1: left allmulticast mode
[  169.672548][ T7562] bridge_slave_1: left promiscuous mode
[  169.680029][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.716067][ T7562] bond0: (slave bond_slave_0): Releasing backup interface
[  169.740416][ T7562] bond0: (slave bond_slave_1): Releasing backup interface
[  169.780030][ T7562] team0: Port device team_slave_0 removed
[  169.793397][ T7562] team0: Port device team_slave_1 removed
[  169.801390][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.809502][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.819596][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.839621][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.903166][ T7567] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  169.930545][ T7567] bridge0: port 3(dummy0) entered disabled state
[  169.937884][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.946772][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.044563][ T5914] lo speed is unknown, defaulting to 1000
[  170.044718][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.074407][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.092076][ T7485] bridge_slave_0: entered allmulticast mode
[  170.108680][ T7485] bridge_slave_0: entered promiscuous mode
[  170.157248][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.191881][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.212568][ T7485] bridge_slave_1: entered allmulticast mode
[  170.222191][ T7485] bridge_slave_1: entered promiscuous mode
[  170.249298][ T7592] netlink: 11 bytes leftover after parsing attributes in process `syz.3.389'.
[  170.308831][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'.
[  170.320255][ T7588] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  170.375667][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.405735][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.480924][ T7596] Cannot find add_set index 2 as target
[  170.570831][ T7485] team0: Port device team_slave_0 added
[  170.590876][ T7485] team0: Port device team_slave_1 added
[  170.716618][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.734693][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.766262][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.787509][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.795128][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.827385][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.840006][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'.
[  170.986266][ T7601] bridge4: port 1(veth0_to_bond) entered blocking state
[  171.009795][ T7601] bridge4: port 1(veth0_to_bond) entered disabled state
[  171.030372][ T7602] Cannot find add_set index 2 as target
[  171.049159][ T7601] veth0_to_bond: entered allmulticast mode
[  171.066170][ T7601] veth0_to_bond: entered promiscuous mode
[  171.128618][ T7608] netlink: 14 bytes leftover after parsing attributes in process `syz.2.396'.
[  171.145491][ T7485] hsr_slave_0: entered promiscuous mode
[  171.167810][ T7485] hsr_slave_1: entered promiscuous mode
[  171.194940][ T7485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.238279][ T7485] Cannot create hsr debugfs directory
[  171.254585][ T7608] hsr_slave_0: left promiscuous mode
[  171.285919][ T7608] hsr_slave_1: left promiscuous mode
[  171.355851][ T7619] netlink: 'syz.4.399': attribute type 10 has an invalid length.
[  171.411851][ T7619] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  171.419544][ T5866] Bluetooth: hci1: command tx timeout
[  171.724146][ T7621] lo speed is unknown, defaulting to 1000
[  171.873138][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[  171.935040][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'.
[  171.956685][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[  172.106209][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.130146][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.317812][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.365085][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.472236][ T7653] netlink: 'syz.4.410': attribute type 2 has an invalid length.
[  172.497646][ T7653] netlink: 244 bytes leftover after parsing attributes in process `syz.4.410'.
[  173.264493][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[  173.374674][ T7673] macsec1: entered allmulticast mode
[  173.416765][ T7673] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  173.489353][ T5866] Bluetooth: hci1: command tx timeout
[  173.755627][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'.
[  173.804595][ T7682] syzkaller1: entered promiscuous mode
[  173.819966][ T7682] syzkaller1: entered allmulticast mode
[  174.044528][ T7485] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  174.073091][ T7485] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  174.146412][ T7485] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  174.203839][ T7485] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  174.448129][ T7711] 8021q: VLANs not supported on ip_vti0
[  174.467913][ T7711] netlink: 120 bytes leftover after parsing attributes in process `syz.0.427'.
[  174.534365][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.608666][ T7485] 8021q: adding VLAN 0 to HW filter on device team0
[  174.647925][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.655200][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.721264][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.728615][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.839275][ T7719] Dead loop on virtual device ip6_vti0, fix it urgently!
[  175.233943][ T7741] raw_sendmsg: syz.0.437 forgot to set AF_INET. Fix it!
[  175.556176][ T7752] lo speed is unknown, defaulting to 1000
[  175.795754][ T7758] netlink: 68 bytes leftover after parsing attributes in process `syz.0.439'.
[  175.812478][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.880501][ T7765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.114001][ T7757] lo speed is unknown, defaulting to 1000
[  176.125601][ T7485] veth0_vlan: entered promiscuous mode
[  176.157427][ T7485] veth1_vlan: entered promiscuous mode
[  176.300196][ T7485] veth0_macvtap: entered promiscuous mode
[  176.341874][ T7485] veth1_macvtap: entered promiscuous mode
[  176.667816][ T7778] lo speed is unknown, defaulting to 1000
[  176.733257][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.785906][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.983685][ T1333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.013716][ T1333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.076522][ T1333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.132937][ T1333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.421274][ T7773] netlink: 156 bytes leftover after parsing attributes in process `syz.4.447'.
[  177.480344][ T7773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.447'.
[  177.522616][ T7804] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.574740][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.606008][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.677724][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'.
[  178.014378][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.033449][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.157281][ T7817] netlink: 'syz.2.456': attribute type 1 has an invalid length.
[  178.765591][ T7837] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  178.779392][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.794316][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  179.035313][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.151760][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.241668][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.364558][   T13] bridge_slave_1: left allmulticast mode
[  179.375057][   T13] bridge_slave_1: left promiscuous mode
[  179.382194][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.393297][   T13] bridge_slave_0: left allmulticast mode
[  179.399995][   T13] bridge_slave_0: left promiscuous mode
[  179.405796][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.887292][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.123564][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.156804][   T13] bond0 (unregistering): Released all slaves
[  180.515718][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.525226][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.534341][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.567428][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.581458][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.867106][ T7854] lo speed is unknown, defaulting to 1000
[  180.934191][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[  181.305526][ T7879] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[  181.415412][ T7868] syz.0.463: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  181.472372][ T7860] lo speed is unknown, defaulting to 1000
[  181.475907][ T7891] netlink: 76 bytes leftover after parsing attributes in process `syz.4.474'.
[  181.521905][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.0.463 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  181.521938][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  181.521952][ T7868] Call Trace:
[  181.521961][ T7868]  <TASK>
[  181.521971][ T7868]  dump_stack_lvl+0x189/0x250
[  181.522040][ T7868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.522076][ T7868]  ? __pfx__printk+0x10/0x10
[  181.522109][ T7868]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  181.522144][ T7868]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  181.522178][ T7868]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  181.522214][ T7868]  warn_alloc+0x214/0x310
[  181.522261][ T7868]  ? __pfx_warn_alloc+0x10/0x10
[  181.522303][ T7868]  ? __get_vm_area_node+0x28f/0x300
[  181.522333][ T7868]  ? __do_replace+0xb4/0xaa0
[  181.522470][ T7868]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  181.522501][ T7868]  ? stack_depot_save_flags+0x40/0x900
[  181.522576][ T7868]  ? translate_table+0x1b4d/0x1f90
[  181.522622][ T7868]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.522662][ T7868]  ? __do_replace+0xb4/0xaa0
[  181.522684][ T7868]  vzalloc_noprof+0xb2/0xf0
[  181.522719][ T7868]  ? __do_replace+0xb4/0xaa0
[  181.522743][ T7868]  __do_replace+0xb4/0xaa0
[  181.522768][ T7868]  ? __pfx_translate_table+0x10/0x10
[  181.522798][ T7868]  ? __pfx___do_replace+0x10/0x10
[  181.522830][ T7868]  ? _copy_from_user+0x94/0xb0
[  181.522868][ T7868]  do_arpt_set_ctl+0xa2a/0xf10
[  181.522895][ T7868]  ? __mutex_trylock_common+0x153/0x260
[  181.522957][ T7868]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  181.522984][ T7868]  ? rcu_is_watching+0x15/0xb0
[  181.523042][ T7868]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  181.523086][ T7868]  ? __pfx___mutex_lock+0x10/0x10
[  181.523119][ T7868]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  181.523149][ T7868]  ? aa_sk_perm+0x81e/0x950
[  181.523206][ T7868]  ? __pfx_aa_sk_perm+0x10/0x10
[  181.523246][ T7868]  nf_setsockopt+0x26c/0x290
[  181.523351][ T7868]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  181.523410][ T7868]  do_sock_setsockopt+0x25a/0x3e0
[  181.523449][ T7868]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  181.523488][ T7868]  ? __fget_files+0x2a/0x420
[  181.523530][ T7868]  __x64_sys_setsockopt+0x18b/0x220
[  181.523573][ T7868]  do_syscall_64+0xfa/0x3b0
[  181.523605][ T7868]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.523634][ T7868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.523656][ T7868]  ? clear_bhb_loop+0x60/0xb0
[  181.523684][ T7868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.523706][ T7868] RIP: 0033:0x7fdfe3b8e929
[  181.523728][ T7868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.523747][ T7868] RSP: 002b:00007fdfe49c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  181.523772][ T7868] RAX: ffffffffffffffda RBX: 00007fdfe3db6240 RCX: 00007fdfe3b8e929
[  181.523789][ T7868] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  181.523802][ T7868] RBP: 00007fdfe3c10b39 R08: 0000000000000068 R09: 0000000000000000
[  181.523823][ T7868] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  181.523863][ T7868] R13: 0000000000000000 R14: 00007fdfe3db6240 R15: 00007fffcb6569a8
[  181.523898][ T7868]  </TASK>
[  181.523907][ T7868] Mem-Info:
[  181.604879][ T7893] netlink: 128 bytes leftover after parsing attributes in process `syz.4.474'.
[  181.622508][ T7868] active_anon:7548 inactive_anon:0 isolated_anon:0
[  181.622508][ T7868]  active_file:1399 inactive_file:39866 isolated_file:0
[  181.622508][ T7868]  unevictable:768 dirty:157 writeback:0
[  181.622508][ T7868]  slab_reclaimable:10797 slab_unreclaimable:98309
[  181.622508][ T7868]  mapped:33238 shmem:4239 pagetables:1056
[  181.622508][ T7868]  sec_pagetables:0 bounce:0
[  181.622508][ T7868]  kernel_misc_reclaimable:0
[  181.622508][ T7868]  free:1311204 free_pcp:25074 free_cma:0
[  181.666479][ T7893] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  181.673541][ T7868] Node 0 active_anon:30192kB inactive_anon:0kB active_file:5596kB inactive_file:159264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132952kB dirty:624kB writeback:0kB shmem:15420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11876kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  181.953611][ T7868] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  181.955837][   T13] hsr_slave_0: left promiscuous mode
[  181.992258][ T7868] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  182.021816][   T13] hsr_slave_1: left promiscuous mode
[  182.022278][ T7868] lowmem_reserve[]: 0 2498 2499 2499 2499
[  182.031684][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.033523][ T7868] Node 0 DMA32 free:1336924kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30020kB inactive_anon:0kB active_file:5664kB inactive_file:157684kB unevictable:1536kB writepending:632kB present:3129332kB managed:2558304kB mlocked:0kB bounce:0kB free_pcp:74656kB local_pcp:25800kB free_cma:0kB
[  182.045795][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.074303][ T7868] lowmem_reserve[]: 0 0 1 1 1
[  182.074359][ T7868] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  182.074433][ T7868] lowmem_reserve[]: 0 0 0 0 0
[  182.074477][ T7868] Node 1 Normal free:3894764kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23012kB local_pcp:10628kB free_cma:0kB
[  182.074536][ T7868] lowmem_reserve[]: 0 0 0 0 0
[  182.074579][ T7868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  182.074717][ T7868] Node 0 DMA32: 788*4kB (UME) 377*8kB (UME) 203*16kB (UME) 135*32kB (UME) 77*64kB (UM) 21*128kB (UME) 3*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 0*2048kB 320*4096kB (M) = 1336936kB
[  182.176546][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.189206][ T7868] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  182.212515][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.215836][ T7868] Node 1 Normal: 241*4kB (UME) 51*8kB (UME) 47*16kB (UME) 91*32kB (UME) 27*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894764kB
[  182.239175][ T7868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  182.249051][ T7868] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  182.258588][ T7868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  182.272316][ T7868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  182.278247][   T13] veth1_macvtap: left promiscuous mode
[  182.282013][ T7868] 45518 total pagecache pages
[  182.292572][ T7868] 0 pages in swap cache
[  182.296816][ T7868] Free swap  = 124996kB
[  182.301273][ T7868] Total swap = 124996kB
[  182.301300][   T13] veth0_macvtap: left promiscuous mode
[  182.305677][ T7868] 2097051 pages RAM
[  182.314915][ T7868] 0 pages HighMem/MovableOnly
[  182.323784][ T7868] 425433 pages reserved
[  182.327065][   T13] veth1_vlan: left promiscuous mode
[  182.328052][ T7868] 0 pages cma reserved
[  182.348531][   T13] veth0_vlan: left promiscuous mode
[  182.614712][   T51] Bluetooth: hci1: command tx timeout
[  182.868275][   T13] team0 (unregistering): Port device team_slave_1 removed
[  182.903431][   T13] team0 (unregistering): Port device team_slave_0 removed
[  183.440154][  T979] IPVS: starting estimator thread 0...
[  183.505911][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'.
[  183.541830][ T7903] IPVS: using max 38 ests per chain, 91200 per kthread
[  183.697681][ T7910] dvmrp8: entered allmulticast mode
[  183.740301][ T7907] dvmrp8: left allmulticast mode
[  183.977931][ T7921] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  184.106635][ T7923] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  184.156792][ T7923] netlink: 'syz.3.484': attribute type 3 has an invalid length.
[  184.186615][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'.
[  184.287553][ T7860] chnl_net:caif_netlink_parms(): no params data found
[  184.382515][ T7934] netlink: 64 bytes leftover after parsing attributes in process `syz.0.487'.
[  184.412380][ T7934] netlink: 64 bytes leftover after parsing attributes in process `syz.0.487'.
[  184.479404][ T7936] IPVS: set_ctl: invalid protocol: 288 172.30.0.4:20003
[  184.536569][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'.
[  184.699195][   T51] Bluetooth: hci1: command tx timeout
[  184.843943][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.852787][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.871483][ T7860] bridge_slave_0: entered allmulticast mode
[  184.883435][ T7860] bridge_slave_0: entered promiscuous mode
[  184.947336][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.974718][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.007596][ T7860] bridge_slave_1: entered allmulticast mode
[  185.032934][ T7860] bridge_slave_1: entered promiscuous mode
[  185.155811][ T7970] gretap1: entered promiscuous mode
[  185.179114][ T7970] gretap1: entered allmulticast mode
[  185.216139][ T7860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.243235][ T7860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.389061][ T7860] team0: Port device team_slave_0 added
[  185.414718][ T7860] team0: Port device team_slave_1 added
[  185.557473][ T7963] Â: renamed from pim6reg1
[  185.577655][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.593369][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.621336][ T7860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.668081][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.679867][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.726554][ T7860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.883732][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.500'.
[  186.076961][ T7860] hsr_slave_0: entered promiscuous mode
[  186.115003][ T7860] hsr_slave_1: entered promiscuous mode
[  186.139922][ T7860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.178019][ T7860] Cannot create hsr debugfs directory
[  186.587845][ T7988] lo speed is unknown, defaulting to 1000
[  186.770583][   T51] Bluetooth: hci1: command tx timeout
[  186.788657][ T8014] netlink: 596 bytes leftover after parsing attributes in process `syz.4.508'.
[  186.835938][ T8014] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.508'.
[  186.954386][ T8019] netlink: 'syz.0.502': attribute type 4 has an invalid length.
[  187.218785][ T8027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'.
[  187.643260][ T8035] bridge6: entered promiscuous mode
[  187.669039][ T8035] bridge6: entered allmulticast mode
[  188.028074][ T7860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  188.086415][ T7860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  188.122462][ T7860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  188.145918][ T7860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  188.445758][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.536217][ T7860] 8021q: adding VLAN 0 to HW filter on device team0
[  188.557290][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.564631][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.609340][ T8074] tipc: Started in network mode
[  188.651262][ T8074] tipc: Node identity ac14140f, cluster identity 4711
[  188.740150][ T8074] tipc: New replicast peer: 255.255.255.255
[  188.792905][ T8074] tipc: Enabled bearer <udp:syz2>, priority 10
[  188.839764][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'.
[  188.849624][   T51] Bluetooth: hci1: command tx timeout
[  188.964756][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.972059][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.768170][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'.
[  189.769313][    T9] tipc: Node number set to 2886997007
[  189.855397][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'.
[  189.986240][ T8112] batadv_slave_1: entered promiscuous mode
[  190.001781][ T8113] tipc: Enabling <ib:lo> not permitted
[  190.008221][ T8113] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  190.047263][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'.
[  190.071698][ T7860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.096605][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'.
[  190.123462][ T8111] batadv_slave_1: left promiscuous mode
[  190.203865][ T7860] veth0_vlan: entered promiscuous mode
[  190.338293][ T7860] veth1_vlan: entered promiscuous mode
[  190.445835][ T7860] veth0_macvtap: entered promiscuous mode
[  190.508322][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'.
[  190.541571][ T7860] veth1_macvtap: entered promiscuous mode
[  190.558601][ T8128] lo speed is unknown, defaulting to 1000
[  190.826695][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.867365][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.918045][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.950489][   T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.985681][   T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.290075][ T8155] openvswitch: netlink: Message has 1 unknown bytes.
[  191.298506][ T8155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.443822][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.860507][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.888529][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.940834][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'.
[  191.956900][ T8170] dummy0: entered promiscuous mode
[  191.991709][ T8170] batadv0: entered promiscuous mode
[  192.007683][ T8170] dummy0: left promiscuous mode
[  192.015525][ T8170] batadv0: left promiscuous mode
[  192.097558][ T8176] bond0: option mode: unable to set because the bond device has slaves
[  192.130065][ T8175] netlink: 'syz.3.547': attribute type 1 has an invalid length.
[  192.157611][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.176254][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.176704][ T8175] gretap2: entered promiscuous mode
[  192.220660][ T8176] sctp: [Deprecated]: syz.3.547 (pid 8176) Use of int in maxseg socket option.
[  192.220660][ T8176] Use struct sctp_assoc_value instead
[  192.418492][ T7860] ------------[ cut here ]------------
[  192.424368][ T7860] refcount_t: underflow; use-after-free.
[  192.431968][ T7860] WARNING: CPU: 1 PID: 7860 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  192.441560][ T7860] Modules linked in:
[  192.445826][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  192.458571][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  192.469841][ T7860] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  192.476739][ T7860] Code: 00 45 e2 8b e8 47 3a c2 fc 90 0f 0b 90 90 eb d7 e8 0b 93 fe fc c6 05 fe 33 ca 0a 01 90 48 c7 c7 60 45 e2 8b e8 27 3a c2 fc 90 <0f> 0b 90 90 eb b7 e8 eb 92 fe fc c6 05 db 33 ca 0a 01 90 48 c7 c7
[  192.496993][ T7860] RSP: 0018:ffffc900035577d8 EFLAGS: 00010246
[  192.503841][ T7860] RAX: a8c5c40c03c94300 RBX: 0000000000000003 RCX: ffff888029bd3c00
[  192.512428][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  192.521139][ T7860] RBP: 0000000000000000 R08: ffffc90003557507 R09: 1ffff920006aaea0
[  192.529724][ T7860] R10: dffffc0000000000 R11: fffff520006aaea1 R12: ffff888051ea8800
[  192.537746][ T7860] R13: ffff888057e7cc60 R14: ffff888057e7cc78 R15: dffffc0000000000
[  192.547201][ T7860] FS:  0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000
[  192.556405][ T7860] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.563173][ T7860] CR2: 00007f79382a9eb8 CR3: 000000000df38000 CR4: 00000000003526f0
[  192.572291][ T7860] Call Trace:
[  192.575617][ T7860]  <TASK>
[  192.578579][ T7860]  klist_dec_and_del+0x3c7/0x3d0
[  192.584209][ T7860]  klist_remove+0x1bd/0x340
[  192.588776][ T7860]  ? __pfx_klist_children_put+0x10/0x10
[  192.595874][ T7860]  ? __pfx_klist_remove+0x10/0x10
[  192.601378][ T7860]  ? __pfx_kobject_move+0x10/0x10
[  192.606464][ T7860]  ? get_device_parent+0x366/0x3a0
[  192.612112][ T7860]  device_move+0x193/0x700
[  192.616596][ T7860]  hci_conn_del_sysfs+0xb8/0x170
[  192.621746][ T7860]  hci_conn_del+0x8ff/0xcb0
[  192.626360][ T7860]  hci_conn_hash_flush+0x191/0x230
[  192.632049][ T7860]  hci_dev_close_sync+0xaef/0x1330
[  192.637292][ T7860]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  192.643048][ T7860]  ? up_write+0x1c4/0x420
[  192.647433][ T7860]  hci_unregister_dev+0x21a/0x510
[  192.652591][ T7860]  vhci_release+0x80/0xd0
[  192.657115][ T7860]  ? __pfx_vhci_release+0x10/0x10
[  192.662612][ T7860]  __fput+0x449/0xa70
[  192.667435][ T7860]  task_work_run+0x1d1/0x260
[  192.672618][ T7860]  ? __pfx_task_work_run+0x10/0x10
[  192.677791][ T7860]  ? kmem_cache_free+0x18f/0x400
[  192.682941][ T7860]  do_exit+0x6b5/0x22e0
[  192.687222][ T7860]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  192.693095][ T7860]  ? __pfx_do_exit+0x10/0x10
[  192.697748][ T7860]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.703093][ T7860]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.708350][ T7860]  do_group_exit+0x21c/0x2d0
[  192.713111][ T7860]  __x64_sys_exit_group+0x3f/0x40
[  192.718190][ T7860]  x64_sys_call+0x21ba/0x21c0
[  192.723424][ T7860]  do_syscall_64+0xfa/0x3b0
[  192.727975][ T7860]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.733387][ T7860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.739551][ T7860]  ? clear_bhb_loop+0x60/0xb0
[  192.744272][ T7860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.750601][ T7860] RIP: 0033:0x7f832318e929
[  192.755050][ T7860] Code: Unable to access opcode bytes at 0x7f832318e8ff.
[  192.762248][ T7860] RSP: 002b:00007ffcb3c8cde8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  192.771491][ T7860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f832318e929
[  192.780321][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  192.788338][ T7860] RBP: 00007f83231ee8f0 R08: 00007ffcb3c8ab87 R09: 0000000000000003
[  192.796400][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.804488][ T7860] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffcb3c8cfa0
[  192.812930][ T7860]  </TASK>
[  192.816048][ T7860] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  192.823353][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) 
[  192.835577][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  192.845663][ T7860] Call Trace:
[  192.848970][ T7860]  <TASK>
[  192.851929][ T7860]  dump_stack_lvl+0x99/0x250
[  192.856562][ T7860]  ? __asan_memcpy+0x40/0x70
[  192.861255][ T7860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.866498][ T7860]  ? __pfx__printk+0x10/0x10
[  192.871149][ T7860]  panic+0x2db/0x790
[  192.875098][ T7860]  ? __pfx_panic+0x10/0x10
[  192.879661][ T7860]  __warn+0x31b/0x4b0
[  192.883669][ T7860]  ? refcount_warn_saturate+0x11a/0x1d0
[  192.889233][ T7860]  ? refcount_warn_saturate+0x11a/0x1d0
[  192.894831][ T7860]  report_bug+0x2be/0x4f0
[  192.899235][ T7860]  ? refcount_warn_saturate+0x11a/0x1d0
[  192.904881][ T7860]  ? refcount_warn_saturate+0x11a/0x1d0
[  192.910443][ T7860]  ? refcount_warn_saturate+0x11c/0x1d0
[  192.916007][ T7860]  handle_bug+0x84/0x160
[  192.920273][ T7860]  exc_invalid_op+0x1a/0x50
[  192.924841][ T7860]  asm_exc_invalid_op+0x1a/0x20
[  192.929698][ T7860] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  192.935857][ T7860] Code: 00 45 e2 8b e8 47 3a c2 fc 90 0f 0b 90 90 eb d7 e8 0b 93 fe fc c6 05 fe 33 ca 0a 01 90 48 c7 c7 60 45 e2 8b e8 27 3a c2 fc 90 <0f> 0b 90 90 eb b7 e8 eb 92 fe fc c6 05 db 33 ca 0a 01 90 48 c7 c7
[  192.955636][ T7860] RSP: 0018:ffffc900035577d8 EFLAGS: 00010246
[  192.962060][ T7860] RAX: a8c5c40c03c94300 RBX: 0000000000000003 RCX: ffff888029bd3c00
[  192.970035][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  192.978182][ T7860] RBP: 0000000000000000 R08: ffffc90003557507 R09: 1ffff920006aaea0
[  192.986170][ T7860] R10: dffffc0000000000 R11: fffff520006aaea1 R12: ffff888051ea8800
[  192.994159][ T7860] R13: ffff888057e7cc60 R14: ffff888057e7cc78 R15: dffffc0000000000
[  193.002165][ T7860]  ? refcount_warn_saturate+0x119/0x1d0
[  193.007739][ T7860]  klist_dec_and_del+0x3c7/0x3d0
[  193.012697][ T7860]  klist_remove+0x1bd/0x340
[  193.017249][ T7860]  ? __pfx_klist_children_put+0x10/0x10
[  193.022806][ T7860]  ? __pfx_klist_remove+0x10/0x10
[  193.027888][ T7860]  ? __pfx_kobject_move+0x10/0x10
[  193.033105][ T7860]  ? get_device_parent+0x366/0x3a0
[  193.038234][ T7860]  device_move+0x193/0x700
[  193.042668][ T7860]  hci_conn_del_sysfs+0xb8/0x170
[  193.047623][ T7860]  hci_conn_del+0x8ff/0xcb0
[  193.052148][ T7860]  hci_conn_hash_flush+0x191/0x230
[  193.057270][ T7860]  hci_dev_close_sync+0xaef/0x1330
[  193.062408][ T7860]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  193.067974][ T7860]  ? up_write+0x1c4/0x420
[  193.072416][ T7860]  hci_unregister_dev+0x21a/0x510
[  193.077461][ T7860]  vhci_release+0x80/0xd0
[  193.081804][ T7860]  ? __pfx_vhci_release+0x10/0x10
[  193.086843][ T7860]  __fput+0x449/0xa70
[  193.090843][ T7860]  task_work_run+0x1d1/0x260
[  193.095452][ T7860]  ? __pfx_task_work_run+0x10/0x10
[  193.100579][ T7860]  ? kmem_cache_free+0x18f/0x400
[  193.105548][ T7860]  do_exit+0x6b5/0x22e0
[  193.109735][ T7860]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  193.115124][ T7860]  ? __pfx_do_exit+0x10/0x10
[  193.119744][ T7860]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.124954][ T7860]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.130173][ T7860]  do_group_exit+0x21c/0x2d0
[  193.134781][ T7860]  __x64_sys_exit_group+0x3f/0x40
[  193.139819][ T7860]  x64_sys_call+0x21ba/0x21c0
[  193.144511][ T7860]  do_syscall_64+0xfa/0x3b0
[  193.149029][ T7860]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.154238][ T7860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.160308][ T7860]  ? clear_bhb_loop+0x60/0xb0
[  193.164997][ T7860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.170897][ T7860] RIP: 0033:0x7f832318e929
[  193.175316][ T7860] Code: Unable to access opcode bytes at 0x7f832318e8ff.
[  193.182333][ T7860] RSP: 002b:00007ffcb3c8cde8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  193.190759][ T7860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f832318e929
[  193.198740][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  193.206804][ T7860] RBP: 00007f83231ee8f0 R08: 00007ffcb3c8ab87 R09: 0000000000000003
[  193.214780][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.222754][ T7860] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffcb3c8cfa0
[  193.230752][ T7860]  </TASK>
[  193.234455][ T7860] Kernel Offset: disabled
[  193.238811][ T7860] Rebooting in 86400 seconds..