last executing test programs:

3m19.138685684s ago: executing program 2 (id=506):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x5}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048080}, 0x20000000) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) (async, rerun: 32)
unshare(0x26000400) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0) (async)
epoll_wait(0xffffffffffffffff, &(0x7f0000000a00)=[{}, {}, {}, {}], 0x4, 0x1) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], <r4=>0x0, 0xc5, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r5}, 0x38) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x687c, '\x00', 0x0, r2, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0xd, &(0x7f00000002c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x401, 0x1000, &(0x7f0000001740)=""/4096, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, r2, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xe, 0x10, 0x9fb00000}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[r5, r6, r2, r2, r2], &(0x7f00000008c0)=[{0x3, 0x4, 0xf, 0x7}, {0x1, 0x4, 0x9}], 0x10, 0xffffffff, @void, @value}, 0x94) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r7)
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r8, 0x4}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r7)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791085000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x14, r10, 0xf03}, 0x14}}, 0x0) (async, rerun: 32)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

3m19.000935111s ago: executing program 2 (id=508):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080020010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3m18.948583851s ago: executing program 2 (id=509):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83450500000000001c0012800b000100697036746e6c00000c00028008000100", @ANYBLOB='Fh'], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="440000001800290200000000000000000200000008000000000000c72800098014000000fc020000000000000000000000000000080000000000000008007300", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x4, 0x7, 0x0, 0x8, 'syz1\x00'})
shutdown(r1, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000a62972cb538f000000005b2d591ad00000001700000000d5f8f949235f6ad159b2f176ac960cb1fabd5e55081c360eed6ab0ba9c871d9c6e1052a1cc96358cf2d8e69aeaabca11ff2b81892f322780850e6da29a444f5146800af75d2d6096304783a1c17cd5d733ca2c616bc62fe9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040bf080000000000027b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800200018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xff6, &(0x7f0000001e00)=""/4086, 0x41000, 0xa, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/29, 0x626000, 0x800, 0x9, 0x3}, 0x20)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x1, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})

3m18.672006653s ago: executing program 2 (id=511):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fe8000000000000000000002fff500aafe8000000000000000000000000000aa11000000000000004e220000000890"], 0x0)

3m18.416134442s ago: executing program 2 (id=513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x1000)
shutdown(r1, 0x1)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
socket$inet_udplite(0x2, 0x2, 0x88)

3m17.533818344s ago: executing program 2 (id=515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000edff"], 0x48)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000000000000000000010803c3268d361effa0752e923031f01d07c4b3f9cb6"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r9, 0x83cff000)
r11 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r11, 0x1, 0x25, &(0x7f00000002c0)=r9, 0x4)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x40)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r13, 0x58, &(0x7f0000000100)}, 0xfffffeff)

3m2.010616287s ago: executing program 32 (id=515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000edff"], 0x48)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000000000000000000010803c3268d361effa0752e923031f01d07c4b3f9cb6"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r9, 0x83cff000)
r11 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r11, 0x1, 0x25, &(0x7f00000002c0)=r9, 0x4)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x40)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r13, 0x58, &(0x7f0000000100)}, 0xfffffeff)

2m32.092030603s ago: executing program 4 (id=760):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m31.917635364s ago: executing program 4 (id=765):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000800)

2m31.704602553s ago: executing program 4 (id=769):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0xc)

2m31.518236729s ago: executing program 4 (id=772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x24, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x168}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m31.304305978s ago: executing program 4 (id=775):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0xfff, 0x36, 0x7ff, 0xf84, 0x3}, 0x1c)

2m31.178817333s ago: executing program 4 (id=778):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2501"], 0x14}}, 0x0)

2m16.136779849s ago: executing program 33 (id=778):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2501"], 0x14}}, 0x0)

1m43.74667708s ago: executing program 3 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0xe4ffffff}, 0x0)

1m27.611718588s ago: executing program 1 (id=258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000900000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

1m24.287512056s ago: executing program 3 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0xe4ffffff}, 0x0)

1m23.295664053s ago: executing program 5 (id=1097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xb33c)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20000ac, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5}, 0x40012022)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414aaff020000c80000000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0)
recvfrom(r5, &(0x7f0000000000)=""/239, 0xef, 0x20, &(0x7f0000000100)=@x25, 0x80)

1m9.28453172s ago: executing program 1 (id=258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000900000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

1m7.640378081s ago: executing program 3 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0xe4ffffff}, 0x0)

1m6.917919519s ago: executing program 5 (id=1097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xb33c)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20000ac, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5}, 0x40012022)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414aaff020000c80000000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0)
recvfrom(r5, &(0x7f0000000000)=""/239, 0xef, 0x20, &(0x7f0000000100)=@x25, 0x80)

51.055283344s ago: executing program 5 (id=1097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xb33c)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20000ac, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5}, 0x40012022)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414aaff020000c80000000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0)
recvfrom(r5, &(0x7f0000000000)=""/239, 0xef, 0x20, &(0x7f0000000100)=@x25, 0x80)

50.160930451s ago: executing program 1 (id=258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000900000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

48.615126312s ago: executing program 3 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0xe4ffffff}, 0x0)

35.478668591s ago: executing program 1 (id=258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000900000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

35.436207982s ago: executing program 5 (id=1097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xb33c)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20000ac, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5}, 0x40012022)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414aaff020000c80000000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0)
recvfrom(r5, &(0x7f0000000000)=""/239, 0xef, 0x20, &(0x7f0000000100)=@x25, 0x80)

34.476460558s ago: executing program 3 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0xe4ffffff}, 0x0)

20.682081999s ago: executing program 1 (id=258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000900000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

19.483649559s ago: executing program 5 (id=1097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xb33c)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20000ac, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5}, 0x40012022)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414aaff020000c80000000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0)
recvfrom(r5, &(0x7f0000000000)=""/239, 0xef, 0x20, &(0x7f0000000100)=@x25, 0x80)

18.654054827s ago: executing program 3 (id=83):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0xe4ffffff}, 0x0)

11.159254176s ago: executing program 6 (id=1492):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x2, 0x7}}, 0x26)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r6, &(0x7f00000001c0)=""/64, 0x40)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206030000000000000000000500000005000100060000000d000300686173683a81657400001b60914ce1f2c0797a310000000005000500020000000500040000000000"], 0x48}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000400000000000000007df300009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r10=>0x0}, 0x0)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r11, r7, 0x4, r9}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r12 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0)
unshare(0x2c060000)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
unshare(0x24020400)

10.674032943s ago: executing program 6 (id=1494):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0xf2ffffffffffffff)
write(r1, 0x0, 0x0)

10.4680554s ago: executing program 6 (id=1495):
unshare(0x20000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="66a7dcd5ccbdaca0196427a0586cfcbe1ae3e9e9c56c9aac1756fdeab56b57f584d83d870c0f15532853ba4db9a035", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

10.36818188s ago: executing program 6 (id=1496):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)={r1, 0x1c, "79d595fa773e78e7df8bfb38b5f646cc3a957d04227fa96a0080b2a2"}, &(0x7f00000004c0)=0xfc99)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff020000000000000000000000000001000000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

9.43157588s ago: executing program 6 (id=1498):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0)

9.397260857s ago: executing program 6 (id=1499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="b5b61e000400000018290000", @ANYRES32=0x1, @ANYBLOB="000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000007600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000186300000c0000000000000000020000183800000500"/40], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000040)="a4ca", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r5 = socket(0x27, 0x2, 0x3)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x33, 0x0, 0x0, @void, @value}, 0x20)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

6.010818588s ago: executing program 0 (id=1507):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}], 0x1, 0x0)
sendmmsg$alg(r4, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe98433", 0x3c}], 0x1, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001d00)=""/10, 0xa}, {&(0x7f0000001e40)=""/66, 0x42}], 0x2}, 0xc}], 0x1, 0x10000, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000005004000000000000000000000ffff7f00000100000400000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

5.66494835s ago: executing program 1 (id=258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000900000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

3.786648699s ago: executing program 0 (id=1508):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x891b, &(0x7f0000000140))

3.786088466s ago: executing program 5 (id=1097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xb33c)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20000ac, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5}, 0x40012022)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414aaff020000c80000000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0)
recvfrom(r5, &(0x7f0000000000)=""/239, 0xef, 0x20, &(0x7f0000000100)=@x25, 0x80)

1.186026929s ago: executing program 0 (id=1509):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0)

260.061828ms ago: executing program 0 (id=1510):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x300}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

165.004025ms ago: executing program 0 (id=1511):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000080ffffffffffffff000001000000003c000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0002000000000000000000480002"], 0x1ac}}, 0x0)

0s ago: executing program 0 (id=1512):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb76b626"], &(0x7f0000001f80)=""/215, 0x26, 0xd7, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3180020060120010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000890780000050a000000c3000000050000"], 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x40002, @local, 0x7}, 0x1c)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[], 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
read(r2, &(0x7f0000001240)=""/4096, 0x1000)
sendmmsg$inet6(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="fb0377", 0x3}], 0x1}}], 0x1, 0x4400c800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111bd0000000000850000006300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

[   T13] hsr_slave_0: left promiscuous mode
[  285.999398][   T13] hsr_slave_1: left promiscuous mode
[  286.005811][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.013307][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.022800][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.030956][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.063131][   T13] veth1_macvtap: left promiscuous mode
[  286.071777][   T13] veth0_macvtap: left promiscuous mode
[  286.080154][   T13] veth1_vlan: left promiscuous mode
[  286.085849][   T13] veth0_vlan: left promiscuous mode
[  286.632027][T10472] netlink: 'syz.0.1249': attribute type 13 has an invalid length.
[  286.799231][   T13] team0 (unregistering): Port device team_slave_1 removed
[  286.851781][   T13] team0 (unregistering): Port device team_slave_0 removed
[  288.000459][T10494] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1255'.
[  288.298258][ T5844] Bluetooth: hci3: command 0x0406 tx timeout
[  288.368450][T10472] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.377471][T10472] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.400336][T10472] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.409285][T10472] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.519230][T10472] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.528522][T10472] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.537408][T10472] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.546362][T10472] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  288.733490][T10498] FAULT_INJECTION: forcing a failure.
[  288.733490][T10498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.762980][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.6.1256 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  288.763008][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  288.763020][T10498] Call Trace:
[  288.763027][T10498]  <TASK>
[  288.763036][T10498]  dump_stack_lvl+0x189/0x250
[  288.763070][T10498]  ? __pfx____ratelimit+0x10/0x10
[  288.763099][T10498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.763129][T10498]  ? __pfx__printk+0x10/0x10
[  288.763150][T10498]  ? __might_fault+0xb0/0x130
[  288.763180][T10498]  should_fail_ex+0x414/0x560
[  288.763210][T10498]  _copy_from_iter+0x1db/0x16f0
[  288.763249][T10498]  ? policy_nodemask+0x27c/0x720
[  288.763268][T10498]  ? __pfx__copy_from_iter+0x10/0x10
[  288.763303][T10498]  ? set_page_refcounted+0xa0/0x1e0
[  288.763333][T10498]  ? page_copy_sane+0x4e/0x280
[  288.763361][T10498]  copy_page_from_iter+0xdd/0x170
[  288.763392][T10498]  tun_get_user+0x1c4d/0x3ce0
[  288.763417][T10498]  ? tun_get_user+0x693/0x3ce0
[  288.763445][T10498]  ? aa_file_perm+0x11f/0xed0
[  288.763470][T10498]  ? __pfx_tun_get_user+0x10/0x10
[  288.763484][T10498]  ? aa_file_perm+0x11f/0xed0
[  288.763508][T10498]  ? aa_file_perm+0x3e7/0xed0
[  288.763543][T10498]  ? ref_tracker_alloc+0x318/0x460
[  288.763566][T10498]  ? __lock_acquire+0xab9/0xd20
[  288.763593][T10498]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  288.763623][T10498]  ? tun_get+0x1c/0x2f0
[  288.763643][T10498]  ? tun_get+0x1c/0x2f0
[  288.763657][T10498]  ? tun_get+0x1c/0x2f0
[  288.763675][T10498]  tun_chr_write_iter+0x113/0x200
[  288.763704][T10498]  vfs_write+0x548/0xa90
[  288.763735][T10498]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  288.763764][T10498]  ? __pfx_vfs_write+0x10/0x10
[  288.763801][T10498]  ? __fget_files+0x2a/0x420
[  288.763831][T10498]  ksys_write+0x145/0x250
[  288.763850][T10498]  ? __pfx_ksys_write+0x10/0x10
[  288.763863][T10498]  ? rcu_is_watching+0x15/0xb0
[  288.763895][T10498]  ? do_syscall_64+0xbe/0x3b0
[  288.763914][T10498]  do_syscall_64+0xfa/0x3b0
[  288.763929][T10498]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.763956][T10498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.763973][T10498]  ? clear_bhb_loop+0x60/0xb0
[  288.763995][T10498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.764012][T10498] RIP: 0033:0x7f135018d3df
[  288.764028][T10498] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  288.764043][T10498] RSP: 002b:00007f1350f5f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  288.764062][T10498] RAX: ffffffffffffffda RBX: 00007f13503b5fa0 RCX: 00007f135018d3df
[  288.764076][T10498] RDX: 0000000000000083 RSI: 0000200000000040 RDI: 00000000000000c8
[  288.764087][T10498] RBP: 00007f1350f5f090 R08: 0000000000000000 R09: 0000000000000000
[  288.764098][T10498] R10: 0000000000000083 R11: 0000000000000293 R12: 0000000000000001
[  288.764109][T10498] R13: 0000000000000000 R14: 00007f13503b5fa0 R15: 00007ffda7bf3818
[  288.764137][T10498]  </TASK>
[  288.770925][T10344] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  288.943044][T10503] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1258'.
[  289.090283][T10344] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  289.116559][T10344] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  289.185471][T10344] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  289.334431][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.347388][T10345] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  289.366309][T10345] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  289.382160][T10345] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  289.395721][T10345] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  289.476810][T10309] veth0_vlan: entered promiscuous mode
[  289.503800][T10309] veth1_vlan: entered promiscuous mode
[  289.552335][T10344] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.605269][T10344] 8021q: adding VLAN 0 to HW filter on device team0
[  289.623656][T10345] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.634332][T10309] veth0_macvtap: entered promiscuous mode
[  289.650450][T10309] veth1_macvtap: entered promiscuous mode
[  289.667160][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.674368][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.706294][T10345] 8021q: adding VLAN 0 to HW filter on device team0
[  289.717702][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.724868][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.748364][T10309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.759570][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.766713][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.784889][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.792044][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.831579][T10309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.856043][T10309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.865106][T10309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.874238][T10309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.883170][T10309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.070172][ T6958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.093151][ T6958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.191924][ T6958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.235872][ T6958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.365242][T10344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.561601][T10344] veth0_vlan: entered promiscuous mode
[  290.571687][T10345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.584946][T10344] veth1_vlan: entered promiscuous mode
[  290.710375][T10344] veth0_macvtap: entered promiscuous mode
[  290.726726][T10344] veth1_macvtap: entered promiscuous mode
[  290.770583][T10344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.806543][T10344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.841906][T10344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.856475][T10344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.866200][T10344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.875726][T10344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.052940][ T6964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.133897][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[  291.167257][ T6964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.291328][ T6964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.337219][  T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.354592][  T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.391761][ T6964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.419195][  T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.427046][  T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.456606][T10345] veth0_vlan: entered promiscuous mode
[  291.475650][T10345] veth1_vlan: entered promiscuous mode
[  291.565408][T10345] veth0_macvtap: entered promiscuous mode
[  291.579027][T10345] veth1_macvtap: entered promiscuous mode
[  291.604264][T10345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.622492][T10345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.636811][T10345] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.646143][T10345] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.655412][T10345] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.672286][T10345] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.739844][  T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.747703][  T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.775227][  T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.784519][  T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.922040][ T6964] bridge_slave_1: left allmulticast mode
[  291.927729][ T6964] bridge_slave_1: left promiscuous mode
[  291.934103][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.944790][ T6964] bridge_slave_0: left allmulticast mode
[  291.950830][ T6964] bridge_slave_0: left promiscuous mode
[  291.956542][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.260883][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.277127][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.288220][ T6964] bond0 (unregistering): Released all slaves
[  292.636304][T10560] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1272'.
[  293.025432][ T6964] hsr_slave_0: left promiscuous mode
[  293.049610][ T6964] hsr_slave_1: left promiscuous mode
[  293.056378][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.075871][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.119021][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.126490][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.210102][ T6964] veth1_macvtap: left promiscuous mode
[  293.222542][ T6964] veth0_macvtap: left promiscuous mode
[  293.239739][ T6964] veth1_vlan: left promiscuous mode
[  293.247360][ T6964] veth0_vlan: left promiscuous mode
[  293.308384][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.317299][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.326246][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.334958][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.344039][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  294.079350][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  294.087772][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  294.108500][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  294.117710][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  294.126078][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  294.250980][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  294.261019][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  294.267349][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'.
[  294.277077][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  294.291880][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  294.309880][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  294.559119][ T6964] team0 (unregistering): Port device team_slave_1 removed
[  294.622792][ T6964] team0 (unregistering): Port device team_slave_0 removed
[  295.276001][T10620] syzkaller0: entered promiscuous mode
[  295.285689][T10620] syzkaller0: entered allmulticast mode
[  295.422661][ T5844] Bluetooth: hci2: command tx timeout
[  296.218448][ T5844] Bluetooth: hci4: command tx timeout
[  296.378471][ T5844] Bluetooth: hci5: command tx timeout
[  297.138684][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1287'.
[  297.255903][T10605] chnl_net:caif_netlink_parms(): no params data found
[  297.488460][T10663] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1290'.
[  297.499720][ T5844] Bluetooth: hci2: command tx timeout
[  297.626580][ T6964] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.652277][T10670] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1293'.
[  297.665281][T10601] chnl_net:caif_netlink_parms(): no params data found
[  297.817235][T10605] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.825087][T10605] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.833464][T10605] bridge_slave_0: entered allmulticast mode
[  297.841413][T10605] bridge_slave_0: entered promiscuous mode
[  297.887589][ T6964] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.922791][T10605] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.930680][T10605] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.937876][T10605] bridge_slave_1: entered allmulticast mode
[  297.945746][T10605] bridge_slave_1: entered promiscuous mode
[  298.041996][ T6964] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.079876][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.126497][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.167797][ T6964] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.252549][T10601] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.270003][T10601] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.285015][T10601] bridge_slave_0: entered allmulticast mode
[  298.296365][T10601] bridge_slave_0: entered promiscuous mode
[  298.299748][ T5844] Bluetooth: hci4: command tx timeout
[  298.345632][T10601] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.370954][T10601] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.385521][T10601] bridge_slave_1: entered allmulticast mode
[  298.394144][T10601] bridge_slave_1: entered promiscuous mode
[  298.408281][T10605] team0: Port device team_slave_0 added
[  298.414428][T10576] chnl_net:caif_netlink_parms(): no params data found
[  298.448402][T10605] team0: Port device team_slave_1 added
[  298.458442][ T5844] Bluetooth: hci5: command tx timeout
[  298.544601][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.551900][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.578179][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.599038][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.606180][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.668524][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.710652][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.737494][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.797281][T10697] bridge0: port 1(gretap0) entered blocking state
[  298.804863][T10697] bridge0: port 1(gretap0) entered disabled state
[  298.811893][T10697] gretap0: entered allmulticast mode
[  298.818967][T10697] gretap0: entered promiscuous mode
[  298.887396][   T30] audit: type=1800 audit(1750214811.492:4): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1302" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2653 res=0 errno=0
[  298.928140][   T30] audit: type=1804 audit(1750214811.492:5): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1302" name="/newroot/521/x000000000000000600000000000000000000006" dev="tmpfs" ino=2653 res=1 errno=0
[  299.160399][T10601] team0: Port device team_slave_0 added
[  299.179838][T10601] team0: Port device team_slave_1 added
[  299.185884][T10576] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.196757][T10576] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.207813][T10576] bridge_slave_0: entered allmulticast mode
[  299.216597][T10576] bridge_slave_0: entered promiscuous mode
[  299.231787][T10605] hsr_slave_0: entered promiscuous mode
[  299.245736][T10605] hsr_slave_1: entered promiscuous mode
[  299.252308][T10605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.277479][T10605] Cannot create hsr debugfs directory
[  299.315130][T10576] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.326722][T10576] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.334228][T10576] bridge_slave_1: entered allmulticast mode
[  299.349450][T10576] bridge_slave_1: entered promiscuous mode
[  299.468741][ T6964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.485671][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.493081][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.519473][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.564165][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.578301][ T5844] Bluetooth: hci2: command tx timeout
[  299.653040][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.675157][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.702409][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.744472][ T6964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.786872][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.914647][ T6964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.041818][ T6964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.064628][T10576] team0: Port device team_slave_0 added
[  300.073295][T10576] team0: Port device team_slave_1 added
[  300.230843][T10601] hsr_slave_0: entered promiscuous mode
[  300.237521][T10601] hsr_slave_1: entered promiscuous mode
[  300.263085][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.271057][T10601] Cannot create hsr debugfs directory
[  300.378496][ T5844] Bluetooth: hci4: command tx timeout
[  300.424520][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.442041][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.496966][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.525144][T10746] pim6reg: entered allmulticast mode
[  300.538260][ T5844] Bluetooth: hci5: command tx timeout
[  300.719954][T10749] vlan0: entered promiscuous mode
[  300.727338][T10749] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  300.735043][T10749] vlan0: entered allmulticast mode
[  300.744192][T10749] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  300.752609][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.764150][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.793508][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.961772][T10576] hsr_slave_0: entered promiscuous mode
[  300.971602][T10576] hsr_slave_1: entered promiscuous mode
[  300.982313][T10576] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.990212][T10576] Cannot create hsr debugfs directory
[  301.075332][ T6964] bridge_slave_1: left allmulticast mode
[  301.083769][ T6964] bridge_slave_1: left promiscuous mode
[  301.089851][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.102898][ T6964] bridge_slave_0: left allmulticast mode
[  301.108695][ T6964] bridge_slave_0: left promiscuous mode
[  301.114499][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.144830][ T6964] bridge_slave_1: left allmulticast mode
[  301.175078][ T6964] bridge_slave_1: left promiscuous mode
[  301.184537][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.215248][ T6964] bridge_slave_0: left allmulticast mode
[  301.221041][ T6964] bridge_slave_0: left promiscuous mode
[  301.226776][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.300588][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'.
[  301.661393][ T5844] Bluetooth: hci2: command tx timeout
[  301.690730][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.703228][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.714192][ T6964] bond0 (unregistering): Released all slaves
[  301.974916][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.986868][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.996941][ T6964] bond0 (unregistering): Released all slaves
[  302.083909][T10768] bridge5: the hash_elasticity option has been deprecated and is always 16
[  302.458285][ T5844] Bluetooth: hci4: command tx timeout
[  302.618648][ T5844] Bluetooth: hci5: command tx timeout
[  302.734313][T10605] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  302.780042][T10605] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  302.878103][T10605] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  302.893209][T10605] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  302.994027][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'.
[  303.354135][ T6964] hsr_slave_0: left promiscuous mode
[  303.362580][ T6964] hsr_slave_1: left promiscuous mode
[  303.373497][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.381162][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.393940][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.401564][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.414799][ T6964] hsr_slave_0: left promiscuous mode
[  303.422303][ T6964] hsr_slave_1: left promiscuous mode
[  303.430276][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.438006][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.445855][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.453896][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.492808][ T6964] veth1_macvtap: left promiscuous mode
[  303.504521][ T6964] veth0_macvtap: left promiscuous mode
[  303.510286][ T6964] veth1_vlan: left promiscuous mode
[  303.515586][ T6964] veth0_vlan: left promiscuous mode
[  303.523349][ T6964] veth1_macvtap: left promiscuous mode
[  303.529056][ T6964] veth0_macvtap: left promiscuous mode
[  303.534646][ T6964] veth1_vlan: left promiscuous mode
[  303.540921][ T6964] veth0_vlan: left promiscuous mode
[  304.044708][ T6964] team0 (unregistering): Port device team_slave_1 removed
[  304.083538][ T6964] team0 (unregistering): Port device team_slave_0 removed
[  304.803805][ T6964] team0 (unregistering): Port device team_slave_1 removed
[  304.840938][ T6964] team0 (unregistering): Port device team_slave_0 removed
[  305.309721][T10605] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.362850][T10605] 8021q: adding VLAN 0 to HW filter on device team0
[  305.465052][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.472284][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.490553][T10823] netlink: 'syz.0.1332': attribute type 32 has an invalid length.
[  305.499599][T10823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1332'.
[  305.513387][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.520601][ T6978] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.855684][T10576] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  305.890856][T10576] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  305.924787][T10576] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  305.953266][T10576] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  306.152616][T10601] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  306.171719][T10601] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  306.200500][T10601] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  306.260262][T10601] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  306.425319][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.526544][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1337'.
[  306.527140][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'.
[  306.562119][T10576] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.655278][T10576] 8021q: adding VLAN 0 to HW filter on device team0
[  306.842202][T10860] wireguard0: entered promiscuous mode
[  306.847811][T10860] wireguard0: entered allmulticast mode
[  306.964189][T10861] wireguard1: entered promiscuous mode
[  306.974122][T10861] wireguard1: entered allmulticast mode
[  307.036600][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.043809][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.064062][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.071266][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.297649][T10601] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.388866][T10601] 8021q: adding VLAN 0 to HW filter on device team0
[  307.424688][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.431880][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.502391][T10876] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  307.587727][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.594928][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.767524][T10605] veth0_vlan: entered promiscuous mode
[  307.832866][T10895] netlink: 'syz.0.1342': attribute type 1 has an invalid length.
[  307.844315][T10605] veth1_vlan: entered promiscuous mode
[  307.858671][T10895] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1342'.
[  307.914627][T10896] netlink: 'syz.6.1341': attribute type 29 has an invalid length.
[  307.922938][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.980463][T10605] veth0_macvtap: entered promiscuous mode
[  308.021466][T10605] veth1_macvtap: entered promiscuous mode
[  308.119013][T10900] nbd6: detected capacity change from 0 to 63
[  308.130165][T10576] veth0_vlan: entered promiscuous mode
[  308.154755][T10576] veth1_vlan: entered promiscuous mode
[  308.205572][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.244590][T10605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.271253][ T5844] block nbd6: Receive control failed (result -32)
[  308.311697][T10605] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.329887][T10605] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.342214][T10605] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.353423][T10605] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.492421][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.526081][T10576] veth0_macvtap: entered promiscuous mode
[  308.557684][T10576] veth1_macvtap: entered promiscuous mode
[  308.558953][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.598265][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.659508][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.685742][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.734951][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.777368][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.839035][T10576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.870611][T10576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.892817][T10576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.904638][T10576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.924234][T10601] veth0_vlan: entered promiscuous mode
[  309.054739][T10601] veth1_vlan: entered promiscuous mode
[  309.272526][  T200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.311845][T10601] veth0_macvtap: entered promiscuous mode
[  309.355207][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.371937][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.422382][  T200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.465708][T10601] veth1_macvtap: entered promiscuous mode
[  309.513978][  T200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.554126][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.570326][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.588917][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.611192][  T200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.643222][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.662338][T10601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.679932][T10601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.691320][T10601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.700211][T10601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.862856][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.876572][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.884973][  T200] bridge_slave_1: left allmulticast mode
[  309.891887][  T200] bridge_slave_1: left promiscuous mode
[  309.897730][  T200] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.920797][  T200] bridge_slave_0: left allmulticast mode
[  309.936602][  T200] bridge_slave_0: left promiscuous mode
[  309.947612][  T200] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.392485][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.404091][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.412018][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.422098][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.436136][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.580426][  T200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.593593][  T200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.605082][  T200] bond0 (unregistering): Released all slaves
[  310.667365][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.708226][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.207883][  T200] hsr_slave_0: left promiscuous mode
[  311.223371][  T200] hsr_slave_1: left promiscuous mode
[  311.233541][  T200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.242022][  T200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.250810][  T200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.259137][  T200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.280349][  T200] veth1_macvtap: left promiscuous mode
[  311.285874][  T200] veth0_macvtap: left promiscuous mode
[  311.291757][  T200] veth1_vlan: left promiscuous mode
[  311.297139][  T200] veth0_vlan: left promiscuous mode
[  311.695073][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1352'.
[  311.978512][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.989047][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.003290][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.022337][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.042744][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.093662][  T200] team0 (unregistering): Port device team_slave_1 removed
[  312.132179][  T200] team0 (unregistering): Port device team_slave_0 removed
[  312.459523][ T5155] Bluetooth: hci2: command tx timeout
[  312.504458][T10936] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  312.755542][T10930] chnl_net:caif_netlink_parms(): no params data found
[  312.948875][T10930] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.955997][T10930] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.965716][T10930] bridge_slave_0: entered allmulticast mode
[  312.973201][T10930] bridge_slave_0: entered promiscuous mode
[  312.985334][T10930] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.992988][T10930] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.000273][T10930] bridge_slave_1: entered allmulticast mode
[  313.007685][T10930] bridge_slave_1: entered promiscuous mode
[  313.045005][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.075957][  T200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.097655][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.174340][  T200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.260226][T10952] netlink: 'syz.6.1353': attribute type 1 has an invalid length.
[  313.281291][T10952] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1353'.
[  313.296912][T10930] team0: Port device team_slave_0 added
[  313.341637][T10930] team0: Port device team_slave_1 added
[  313.427108][  T200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.523676][T10940] chnl_net:caif_netlink_parms(): no params data found
[  313.629803][  T200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.691833][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.706493][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.768407][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.791337][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.805222][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.832201][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.833602][ T5841] IPVS: starting estimator thread 0...
[  313.877230][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.887325][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.896442][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  313.919943][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.932656][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  313.968470][T10969] IPVS: using max 28 ests per chain, 67200 per kthread
[  314.073378][T10930] hsr_slave_0: entered promiscuous mode
[  314.080242][T10930] hsr_slave_1: entered promiscuous mode
[  314.089991][T10930] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.097586][T10930] Cannot create hsr debugfs directory
[  314.138599][ T5844] Bluetooth: hci4: command tx timeout
[  314.175863][T10940] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.185186][T10940] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.194068][T10940] bridge_slave_0: entered allmulticast mode
[  314.202421][T10940] bridge_slave_0: entered promiscuous mode
[  314.229037][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1359'.
[  314.325561][T10940] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.353885][T10940] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.374631][T10940] bridge_slave_1: entered allmulticast mode
[  314.395981][T10940] bridge_slave_1: entered promiscuous mode
[  314.484056][T10981] wireguard1: entered promiscuous mode
[  314.490241][T10981] wireguard1: entered allmulticast mode
[  314.538077][ T5844] Bluetooth: hci2: command tx timeout
[  314.602465][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.632063][T10989] macsec1: entered promiscuous mode
[  314.637378][T10989] macsec1: entered allmulticast mode
[  314.673434][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.810466][  T200] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.971728][T10940] team0: Port device team_slave_0 added
[  315.054286][  T200] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.159502][T10940] team0: Port device team_slave_1 added
[  315.202575][  T200] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.292878][  T200] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.362093][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.373422][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.428295][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.446715][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.467709][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.497670][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.647116][T10940] hsr_slave_0: entered promiscuous mode
[  315.654190][T10940] hsr_slave_1: entered promiscuous mode
[  315.662628][T10940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.670414][T10940] Cannot create hsr debugfs directory
[  315.705559][T11012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'.
[  315.978326][ T5844] Bluetooth: hci5: command tx timeout
[  316.035793][  T200] bridge_slave_1: left allmulticast mode
[  316.046986][  T200] bridge_slave_1: left promiscuous mode
[  316.063237][  T200] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.073998][  T200] bridge_slave_0: left allmulticast mode
[  316.085177][  T200] bridge_slave_0: left promiscuous mode
[  316.092184][  T200] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.103997][  T200] bridge_slave_1: left allmulticast mode
[  316.111012][  T200] bridge_slave_1: left promiscuous mode
[  316.116698][  T200] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.127828][  T200] bridge_slave_0: left allmulticast mode
[  316.139857][  T200] bridge_slave_0: left promiscuous mode
[  316.145554][  T200] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.218253][ T5844] Bluetooth: hci4: command tx timeout
[  316.516464][  T200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.527556][  T200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.538560][  T200] bond0 (unregistering): Released all slaves
[  316.621002][ T5844] Bluetooth: hci2: command tx timeout
[  316.840852][  T200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.854274][  T200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.865139][  T200] bond0 (unregistering): Released all slaves
[  316.880655][T10970] chnl_net:caif_netlink_parms(): no params data found
[  316.955592][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  316.962224][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.354378][T11041] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1374'.
[  317.391164][T11043] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1375'.
[  317.416616][T11043] netlink: zone id is out of range
[  317.422403][T11043] netlink: zone id is out of range
[  317.427819][T11043] netlink: get zone limit has 8 unknown bytes
[  317.610269][T10970] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.617593][T10970] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.633773][T10970] bridge_slave_0: entered allmulticast mode
[  317.633803][T11052] FAULT_INJECTION: forcing a failure.
[  317.633803][T11052] name failslab, interval 1, probability 0, space 0, times 0
[  317.644456][T10970] bridge_slave_0: entered promiscuous mode
[  317.662875][T10970] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.670856][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.0.1378 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  317.670886][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  317.670923][T11052] Call Trace:
[  317.670930][T11052]  <TASK>
[  317.670938][T11052]  dump_stack_lvl+0x189/0x250
[  317.670974][T11052]  ? __pfx____ratelimit+0x10/0x10
[  317.671003][T11052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.671031][T11052]  ? __pfx__printk+0x10/0x10
[  317.671056][T11052]  ? __pfx___might_resched+0x10/0x10
[  317.671097][T11052]  should_fail_ex+0x414/0x560
[  317.671125][T11052]  should_failslab+0xa8/0x100
[  317.671147][T11052]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  317.671164][T11052]  ? __alloc_skb+0x112/0x2d0
[  317.671192][T11052]  __alloc_skb+0x112/0x2d0
[  317.671218][T11052]  netlink_sendmsg+0x5c6/0xb30
[  317.671232][T10970] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.671251][T11052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.671274][T11052]  ? aa_sock_msg_perm+0x94/0x160
[  317.671303][T11052]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.671329][T11052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.671356][T11052]  __sock_sendmsg+0x219/0x270
[  317.671382][T11052]  sock_write_iter+0x258/0x330
[  317.671402][T11052]  ? __pfx_sock_write_iter+0x10/0x10
[  317.671447][T11052]  ? bpf_lsm_file_permission+0x9/0x20
[  317.671476][T11052]  ? security_file_permission+0x75/0x290
[  317.671507][T11052]  vfs_write+0x548/0xa90
[  317.671545][T11052]  ? __pfx_sock_write_iter+0x10/0x10
[  317.671577][T11052]  ? __pfx_vfs_write+0x10/0x10
[  317.671620][T11052]  ? __fget_files+0x2a/0x420
[  317.671654][T11052]  ksys_write+0x145/0x250
[  317.671674][T11052]  ? __pfx_ksys_write+0x10/0x10
[  317.671690][T11052]  ? rcu_is_watching+0x15/0xb0
[  317.671728][T11052]  ? do_syscall_64+0xbe/0x3b0
[  317.671753][T11052]  do_syscall_64+0xfa/0x3b0
[  317.671771][T11052]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.671802][T11052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.671822][T11052]  ? clear_bhb_loop+0x60/0xb0
[  317.671847][T11052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.671867][T11052] RIP: 0033:0x7f563e18e929
[  317.671886][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.671905][T11052] RSP: 002b:00007f563efa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  317.671926][T11052] RAX: ffffffffffffffda RBX: 00007f563e3b5fa0 RCX: 00007f563e18e929
[  317.671942][T11052] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000005
[  317.671955][T11052] RBP: 00007f563efa8090 R08: 0000000000000000 R09: 0000000000000000
[  317.671969][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.671981][T11052] R13: 0000000000000000 R14: 00007f563e3b5fa0 R15: 00007fff46c68288
[  317.672012][T11052]  </TASK>
[  317.949980][T10970] bridge_slave_1: entered allmulticast mode
[  317.957697][T10970] bridge_slave_1: entered promiscuous mode
[  317.964859][T10930] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  318.027001][T11055] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  318.051172][T11055] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  318.068269][T10930] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  318.072199][ T5844] Bluetooth: hci5: command tx timeout
[  318.086220][T10930] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  318.133679][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.222389][T10930] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  318.241475][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.299325][ T5844] Bluetooth: hci4: command tx timeout
[  318.326374][T10970] team0: Port device team_slave_0 added
[  318.360049][T10970] team0: Port device team_slave_1 added
[  318.502446][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.511720][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.551641][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.564865][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.572321][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.611407][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.749913][ T5844] Bluetooth: hci2: command tx timeout
[  319.009892][  T200] hsr_slave_0: left promiscuous mode
[  319.016139][  T200] hsr_slave_1: left promiscuous mode
[  319.022907][  T200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.043393][  T200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.053356][  T200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.061007][  T200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.073984][  T200] hsr_slave_0: left promiscuous mode
[  319.081979][  T200] hsr_slave_1: left promiscuous mode
[  319.087810][  T200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.095789][  T200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.106630][  T200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.115277][  T200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.152629][  T200] veth1_macvtap: left promiscuous mode
[  319.158832][  T200] veth0_macvtap: left promiscuous mode
[  319.164480][  T200] veth1_vlan: left promiscuous mode
[  319.170642][  T200] veth0_vlan: left promiscuous mode
[  319.177754][  T200] veth1_macvtap: left promiscuous mode
[  319.183863][  T200] veth0_macvtap: left promiscuous mode
[  319.190993][  T200] veth1_vlan: left promiscuous mode
[  319.196276][  T200] veth0_vlan: left promiscuous mode
[  319.221741][T11074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.291736][T11074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.371222][T11074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.761110][  T200] team0 (unregistering): Port device team_slave_1 removed
[  319.805117][  T200] team0 (unregistering): Port device team_slave_0 removed
[  320.148770][ T5844] Bluetooth: hci5: command tx timeout
[  320.379931][ T5844] Bluetooth: hci4: command tx timeout
[  320.481740][  T200] team0 (unregistering): Port device team_slave_1 removed
[  320.520199][  T200] team0 (unregistering): Port device team_slave_0 removed
[  320.871128][T10970] hsr_slave_0: entered promiscuous mode
[  320.877499][T10970] hsr_slave_1: entered promiscuous mode
[  320.884806][T10970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.894101][T10970] Cannot create hsr debugfs directory
[  321.039843][T10940] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  321.103376][T10940] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  321.189877][T10940] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  321.234007][T10940] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  321.397668][T10930] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.550070][T10930] 8021q: adding VLAN 0 to HW filter on device team0
[  321.578505][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.585682][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.644124][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.651343][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.799902][T10930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  321.849314][T10930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  321.879670][T10940] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.924485][T10940] 8021q: adding VLAN 0 to HW filter on device team0
[  321.939200][  T200] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.946339][  T200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.009179][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.016360][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.224043][ T5844] Bluetooth: hci5: command tx timeout
[  322.265071][T10970] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  322.307665][T10970] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  322.342645][T10970] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  322.364553][T10970] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  322.365965][T11094] netlink: 'syz.6.1386': attribute type 1 has an invalid length.
[  322.405187][T11094] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1386'.
[  322.436003][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.640539][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.695524][T11110] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1388'.
[  322.722546][T10970] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.807007][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'.
[  322.821189][T10970] 8021q: adding VLAN 0 to HW filter on device team0
[  322.834679][T10940] veth0_vlan: entered promiscuous mode
[  322.869239][T10940] veth1_vlan: entered promiscuous mode
[  322.880998][  T200] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.888223][  T200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.931998][  T200] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.939219][  T200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.033181][T10940] veth0_macvtap: entered promiscuous mode
[  323.080706][T10940] veth1_macvtap: entered promiscuous mode
[  323.144172][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.170880][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.192352][T10940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.229759][T10940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.238596][T10940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.247317][T10940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.455105][T10930] veth0_vlan: entered promiscuous mode
[  323.482880][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.509427][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.549585][T10930] veth1_vlan: entered promiscuous mode
[  323.576231][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.600479][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.612970][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.756585][T10930] veth0_macvtap: entered promiscuous mode
[  323.803754][T10930] veth1_macvtap: entered promiscuous mode
[  323.826052][T10970] veth0_vlan: entered promiscuous mode
[  323.921281][T10930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.939145][T10970] veth1_vlan: entered promiscuous mode
[  323.982958][T10930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.005429][T10930] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.045255][T10930] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.054359][T10930] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.067987][T10930] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.172434][T10970] veth0_macvtap: entered promiscuous mode
[  324.198520][T10970] veth1_macvtap: entered promiscuous mode
[  324.236484][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.259192][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.273898][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.338050][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.346108][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.387769][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.465064][T10970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.484723][T10970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.509644][T10970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.523948][T10970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.707769][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.718736][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.884884][ T6956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.985807][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.996892][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.193820][ T6956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.460225][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  325.470241][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  325.478221][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  325.486577][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  325.499030][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  325.640148][ T6956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.794090][T11155] netlink: 'syz.6.1398': attribute type 1 has an invalid length.
[  325.821472][T11155] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1398'.
[  325.833423][ T6956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.066909][ T6956] bridge_slave_1: left allmulticast mode
[  326.072788][ T6956] bridge_slave_1: left promiscuous mode
[  326.078555][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.088679][ T6956] bridge_slave_0: left allmulticast mode
[  326.094340][ T6956] bridge_slave_0: left promiscuous mode
[  326.108168][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.223583][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  326.236287][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  326.244096][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  326.252448][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  326.262353][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  326.470776][ T6956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.485431][ T6956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.495605][ T6956] bond0 (unregistering): Released all slaves
[  326.913611][T11150] chnl_net:caif_netlink_parms(): no params data found
[  327.066201][ T6956] hsr_slave_0: left promiscuous mode
[  327.072919][ T6956] hsr_slave_1: left promiscuous mode
[  327.079176][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.086585][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.095413][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.103258][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.123662][ T6956] veth1_macvtap: left promiscuous mode
[  327.129451][ T6956] veth0_macvtap: left promiscuous mode
[  327.135093][ T6956] veth1_vlan: left promiscuous mode
[  327.140538][ T6956] veth0_vlan: left promiscuous mode
[  327.578628][ T5844] Bluetooth: hci2: command tx timeout
[  327.620287][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1401'.
[  327.660944][ T6956] team0 (unregistering): Port device team_slave_1 removed
[  327.812926][ T6956] team0 (unregistering): Port device team_slave_0 removed
[  328.089593][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  328.098698][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  328.114216][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  328.130843][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  328.163781][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  328.298305][ T5844] Bluetooth: hci4: command tx timeout
[  328.517630][T11188] FAULT_INJECTION: forcing a failure.
[  328.517630][T11188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.548927][T11188] CPU: 0 UID: 0 PID: 11188 Comm: syz.0.1404 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  328.548954][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  328.548966][T11188] Call Trace:
[  328.548973][T11188]  <TASK>
[  328.548981][T11188]  dump_stack_lvl+0x189/0x250
[  328.549014][T11188]  ? __pfx____ratelimit+0x10/0x10
[  328.549042][T11188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.549070][T11188]  ? __pfx__printk+0x10/0x10
[  328.549090][T11188]  ? __might_fault+0xb0/0x130
[  328.549118][T11188]  should_fail_ex+0x414/0x560
[  328.549145][T11188]  _copy_from_iter+0x1db/0x16f0
[  328.549177][T11188]  ? rcu_is_watching+0x15/0xb0
[  328.549213][T11188]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  328.549233][T11188]  ? __pfx__copy_from_iter+0x10/0x10
[  328.549259][T11188]  ? __build_skb_around+0x257/0x3e0
[  328.549284][T11188]  ? netlink_sendmsg+0x642/0xb30
[  328.549302][T11188]  ? skb_put+0x11b/0x210
[  328.549328][T11188]  netlink_sendmsg+0x6b2/0xb30
[  328.549358][T11188]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.549382][T11188]  ? aa_sock_msg_perm+0x94/0x160
[  328.549406][T11188]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.549429][T11188]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.549450][T11188]  __sock_sendmsg+0x219/0x270
[  328.549470][T11188]  ____sys_sendmsg+0x52d/0x830
[  328.549501][T11188]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.549536][T11188]  ? import_iovec+0x74/0xa0
[  328.549557][T11188]  ___sys_sendmsg+0x21f/0x2a0
[  328.549583][T11188]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.549643][T11188]  ? __fget_files+0x2a/0x420
[  328.549660][T11188]  ? __fget_files+0x3a0/0x420
[  328.549708][T11188]  __sys_sendmmsg+0x227/0x430
[  328.549744][T11188]  ? __pfx___sys_sendmmsg+0x10/0x10
[  328.549770][T11188]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  328.549821][T11188]  ? ksys_write+0x22a/0x250
[  328.549843][T11188]  ? __pfx_ksys_write+0x10/0x10
[  328.549859][T11188]  ? rcu_is_watching+0x15/0xb0
[  328.549900][T11188]  __x64_sys_sendmmsg+0xa0/0xc0
[  328.549931][T11188]  do_syscall_64+0xfa/0x3b0
[  328.549950][T11188]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.549983][T11188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.550004][T11188]  ? clear_bhb_loop+0x60/0xb0
[  328.550029][T11188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.550050][T11188] RIP: 0033:0x7f563e18e929
[  328.550069][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.550088][T11188] RSP: 002b:00007f563efa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  328.550110][T11188] RAX: ffffffffffffffda RBX: 00007f563e3b5fa0 RCX: 00007f563e18e929
[  328.550125][T11188] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  328.550139][T11188] RBP: 00007f563efa8090 R08: 0000000000000000 R09: 0000000000000000
[  328.550152][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.550164][T11188] R13: 0000000000000000 R14: 00007f563e3b5fa0 R15: 00007fff46c68288
[  328.550194][T11188]  </TASK>
[  328.899802][T11150] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.907144][T11150] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.920049][T11191] netlink: zone id is out of range
[  328.925189][T11150] bridge_slave_0: entered allmulticast mode
[  328.927256][T11150] bridge_slave_0: entered promiscuous mode
[  328.933706][T11191] netlink: zone id is out of range
[  328.944798][T11191] netlink: zone id is out of range
[  328.949696][T11150] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.957028][T11150] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.969653][T11150] bridge_slave_1: entered allmulticast mode
[  328.978544][T11150] bridge_slave_1: entered promiscuous mode
[  329.013704][T11191] netlink: zone id is out of range
[  329.019285][T11191] netlink: zone id is out of range
[  329.024406][T11191] netlink: zone id is out of range
[  329.042869][T11191] netlink: zone id is out of range
[  329.048138][T11191] netlink: zone id is out of range
[  329.053285][T11191] netlink: zone id is out of range
[  329.115546][T11191] netlink: zone id is out of range
[  329.129290][T11150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.218310][T11150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.315155][T11150] team0: Port device team_slave_0 added
[  329.453391][T11150] team0: Port device team_slave_1 added
[  329.564201][T11150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.572999][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.600033][T11150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.626532][T11150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.634606][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.660843][ T5844] Bluetooth: hci2: command tx timeout
[  329.673182][T11150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.693010][T11157] chnl_net:caif_netlink_parms(): no params data found
[  329.910179][ T6956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.962533][T11150] hsr_slave_0: entered promiscuous mode
[  329.969347][T11150] hsr_slave_1: entered promiscuous mode
[  329.975514][T11150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.983738][T11150] Cannot create hsr debugfs directory
[  329.999648][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'.
[  330.214045][ T6956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.224488][ T5844] Bluetooth: hci5: command tx timeout
[  330.246542][T11157] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.253974][T11157] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.261376][T11157] bridge_slave_0: entered allmulticast mode
[  330.269878][T11157] bridge_slave_0: entered promiscuous mode
[  330.309497][T11157] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.316729][T11157] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.324010][T11157] bridge_slave_1: entered allmulticast mode
[  330.332149][T11157] bridge_slave_1: entered promiscuous mode
[  330.353865][ T6956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.379948][ T5844] Bluetooth: hci4: command tx timeout
[  330.513156][ T6956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.574152][T11157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.637115][T11157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.707690][T11179] chnl_net:caif_netlink_parms(): no params data found
[  330.764392][T11157] team0: Port device team_slave_0 added
[  330.869060][T11157] team0: Port device team_slave_1 added
[  331.034931][T11157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.042764][T11157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.056953][T11227] netlink: 'syz.6.1413': attribute type 4 has an invalid length.
[  331.069375][T11157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.093589][T11157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.107111][T11157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.143052][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1413'.
[  331.154259][T11157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.236693][T11228] batadv0: entered promiscuous mode
[  331.258657][T11228] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  331.270662][T11228] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  331.282248][T11228] 8021q: adding VLAN 0 to HW filter on device hsr1
[  331.411481][T11157] hsr_slave_0: entered promiscuous mode
[  331.417864][T11157] hsr_slave_1: entered promiscuous mode
[  331.424420][T11157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.432141][T11157] Cannot create hsr debugfs directory
[  331.467211][ T6956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.546201][T11179] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.554069][T11179] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.578265][T11179] bridge_slave_0: entered allmulticast mode
[  331.586000][T11179] bridge_slave_0: entered promiscuous mode
[  331.627818][ T6956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.663888][T11179] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.672260][T11179] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.682406][T11179] bridge_slave_1: entered allmulticast mode
[  331.693489][T11179] bridge_slave_1: entered promiscuous mode
[  331.739183][ T5844] Bluetooth: hci2: command tx timeout
[  331.761690][ T6956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.821131][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.834118][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.864534][ T6956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.941897][T11179] team0: Port device team_slave_0 added
[  331.957361][T11179] team0: Port device team_slave_1 added
[  332.075608][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.082999][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.111301][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.142582][T11150] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  332.154110][T11150] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  332.164188][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.171576][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.197794][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.218912][T11150] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  332.250871][T11150] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  332.264342][ T6956] bridge_slave_1: left allmulticast mode
[  332.271909][ T6956] bridge_slave_1: left promiscuous mode
[  332.277736][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.287653][ T6956] bridge_slave_0: left allmulticast mode
[  332.293633][ T6956] bridge_slave_0: left promiscuous mode
[  332.310505][ T5844] Bluetooth: hci5: command tx timeout
[  332.328220][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.341617][ T6956] bridge_slave_1: left allmulticast mode
[  332.347372][ T6956] bridge_slave_1: left promiscuous mode
[  332.368248][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.390167][ T6956] bridge_slave_0: left allmulticast mode
[  332.395831][ T6956] bridge_slave_0: left promiscuous mode
[  332.418137][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.468390][ T5844] Bluetooth: hci4: command tx timeout
[  332.958323][ T6956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.979225][ T6956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.993379][ T6956] bond0 (unregistering): Released all slaves
[  333.324598][ T6956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.338574][ T6956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.350173][ T6956] bond0 (unregistering): Released all slaves
[  333.519602][T11179] hsr_slave_0: entered promiscuous mode
[  333.536031][T11179] hsr_slave_1: entered promiscuous mode
[  333.548412][T11179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.556086][T11179] Cannot create hsr debugfs directory
[  333.755005][T11265] netlink: 'syz.0.1422': attribute type 1 has an invalid length.
[  333.770796][T11265] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1422'.
[  333.822438][ T5844] Bluetooth: hci2: command tx timeout
[  334.378420][ T5844] Bluetooth: hci5: command tx timeout
[  334.525086][T11150] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.536751][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1423'.
[  334.546272][ T5844] Bluetooth: hci4: command tx timeout
[  334.552972][T11157] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  334.646715][T11157] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  334.730506][T11157] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  334.754479][T11157] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  334.835602][T11150] 8021q: adding VLAN 0 to HW filter on device team0
[  334.902721][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.909971][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.920048][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.927197][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.007644][ T6956] hsr_slave_0: left promiscuous mode
[  335.028141][ T6956] hsr_slave_1: left promiscuous mode
[  335.034283][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.051236][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.064320][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.073566][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.097948][ T6956] hsr_slave_0: left promiscuous mode
[  335.104685][ T6956] hsr_slave_1: left promiscuous mode
[  335.111423][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.118949][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.126899][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.134535][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.171170][ T6956] veth1_macvtap: left promiscuous mode
[  335.176752][ T6956] veth0_macvtap: left promiscuous mode
[  335.184218][ T6956] veth1_vlan: left promiscuous mode
[  335.191069][ T6956] veth0_vlan: left promiscuous mode
[  335.197689][ T6956] veth1_macvtap: left promiscuous mode
[  335.204077][ T6956] veth0_macvtap: left promiscuous mode
[  335.210112][ T6956] veth1_vlan: left promiscuous mode
[  335.215438][ T6956] veth0_vlan: left promiscuous mode
[  335.839955][ T6956] team0 (unregistering): Port device team_slave_1 removed
[  335.879077][ T6956] team0 (unregistering): Port device team_slave_0 removed
[  336.468024][ T5844] Bluetooth: hci5: command tx timeout
[  336.565660][ T6956] team0 (unregistering): Port device team_slave_1 removed
[  336.612725][ T6956] team0 (unregistering): Port device team_slave_0 removed
[  337.020562][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1435'.
[  337.087481][T11150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  337.313405][T11157] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.360313][T11179] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  337.387486][T11179] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  337.406025][T11179] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  337.449910][T11179] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  337.543705][T11157] 8021q: adding VLAN 0 to HW filter on device team0
[  337.629158][  T200] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.636357][  T200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.667844][  T200] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.675075][  T200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.781028][T11150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.941749][T11150] veth0_vlan: entered promiscuous mode
[  337.957725][T11179] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.067933][T11150] veth1_vlan: entered promiscuous mode
[  338.132942][T11179] 8021q: adding VLAN 0 to HW filter on device team0
[  338.205774][T11150] veth0_macvtap: entered promiscuous mode
[  338.234396][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.241576][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.267748][T11150] veth1_macvtap: entered promiscuous mode
[  338.431708][  T200] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.438916][  T200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.513533][T11150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.542476][T11157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.677562][T11150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.714543][T11150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.738948][T11150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.747970][T11150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.756674][T11150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.014893][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.041329][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.110801][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.139151][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.197477][T11157] veth0_vlan: entered promiscuous mode
[  339.255487][T11157] veth1_vlan: entered promiscuous mode
[  339.335771][T11179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.357383][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1454'.
[  339.397807][T11157] veth0_macvtap: entered promiscuous mode
[  339.426443][T11157] veth1_macvtap: entered promiscuous mode
[  339.484200][T11179] veth0_vlan: entered promiscuous mode
[  339.494782][T11157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.534107][T11179] veth1_vlan: entered promiscuous mode
[  339.561228][T11157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.582304][T11157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.606570][T11157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.628550][T11157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.640987][T11157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.707357][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.805783][T11179] veth0_macvtap: entered promiscuous mode
[  339.850651][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.883639][T11179] veth1_macvtap: entered promiscuous mode
[  339.948327][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.973338][T11179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.992268][T11179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.004071][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.013641][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.049580][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.069644][T11179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.079633][T11179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.088996][T11179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.098717][T11179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.129074][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.137843][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.305024][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.313021][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.349332][ T6956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.357555][ T6956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.367694][   T49] bridge_slave_1: left allmulticast mode
[  340.374065][   T49] bridge_slave_1: left promiscuous mode
[  340.381203][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.391362][   T49] bridge_slave_0: left allmulticast mode
[  340.397039][   T49] bridge_slave_0: left promiscuous mode
[  340.405997][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.893798][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.911986][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.927083][   T49] bond0 (unregistering): Released all slaves
[  340.951246][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'.
[  341.100917][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  341.110131][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  341.120556][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  341.134279][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  341.149130][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  341.732623][T11405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1463'.
[  342.001590][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.015496][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.027021][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.035635][   T49] hsr_slave_0: left promiscuous mode
[  342.043303][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.052008][   T49] hsr_slave_1: left promiscuous mode
[  342.052050][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.065590][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  342.088135][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.109189][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  342.116602][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.139642][   T49] veth1_macvtap: left promiscuous mode
[  342.146638][   T49] veth0_macvtap: left promiscuous mode
[  342.152809][   T49] veth1_vlan: left promiscuous mode
[  342.158181][   T49] veth0_vlan: left promiscuous mode
[  342.546130][   T49] team0 (unregistering): Port device team_slave_1 removed
[  342.583966][   T49] team0 (unregistering): Port device team_slave_0 removed
[  343.057160][T11391] chnl_net:caif_netlink_parms(): no params data found
[  343.188392][ T5155] Bluetooth: hci2: command tx timeout
[  343.259565][T11391] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.266737][T11391] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.278527][T11391] bridge_slave_0: entered allmulticast mode
[  343.285714][T11391] bridge_slave_0: entered promiscuous mode
[  343.305142][T11391] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.313635][T11391] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.321921][T11391] bridge_slave_1: entered allmulticast mode
[  343.329607][T11391] bridge_slave_1: entered promiscuous mode
[  343.388911][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.402297][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.447556][T11391] team0: Port device team_slave_0 added
[  343.457614][T11391] team0: Port device team_slave_1 added
[  343.491619][T11391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.499946][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.526266][T11391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.547237][T11391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.554916][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.582865][T11391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.640209][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.719982][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.757077][T11391] hsr_slave_0: entered promiscuous mode
[  343.769457][T11391] hsr_slave_1: entered promiscuous mode
[  343.775740][T11391] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.787831][T11391] Cannot create hsr debugfs directory
[  343.813116][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.837868][T11407] chnl_net:caif_netlink_parms(): no params data found
[  343.893094][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.138147][ T5155] Bluetooth: hci4: command tx timeout
[  344.146969][T11426] Bluetooth: MGMT ver 1.23
[  344.184778][T11407] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.193189][T11407] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.205732][T11407] bridge_slave_0: entered allmulticast mode
[  344.214120][T11407] bridge_slave_0: entered promiscuous mode
[  344.214332][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1466'.
[  344.272868][T11426] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.290317][T11426] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.306686][T11426] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.328855][T11426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.340568][T11430] netlink: 'syz.0.1467': attribute type 1 has an invalid length.
[  344.357997][T11430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1467'.
[  344.363749][T11426] geneve2: entered promiscuous mode
[  344.412597][T11432] macvtap1: entered promiscuous mode
[  344.428157][T11432] macvtap1: entered allmulticast mode
[  344.483445][T11407] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.498046][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  344.506204][T11407] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.518508][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  344.528238][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  344.536696][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  344.547803][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  344.555727][T11407] bridge_slave_1: entered allmulticast mode
[  344.563564][T11407] bridge_slave_1: entered promiscuous mode
[  344.787736][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.855282][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.081352][T11407] team0: Port device team_slave_0 added
[  345.148496][T11407] team0: Port device team_slave_1 added
[  345.259448][ T5844] Bluetooth: hci2: command tx timeout
[  345.312305][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.363461][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.370843][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.403278][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.500747][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.533742][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.544583][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.577046][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.657721][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.708671][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1474'.
[  345.854650][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.900408][T11463] wireguard0: entered promiscuous mode
[  345.905925][T11463] wireguard0: entered allmulticast mode
[  345.975106][T11466] netlink: 'syz.6.1477': attribute type 4 has an invalid length.
[  346.024092][T11407] hsr_slave_0: entered promiscuous mode
[  346.038641][T11407] hsr_slave_1: entered promiscuous mode
[  346.040145][T11467] netlink: 'syz.6.1477': attribute type 4 has an invalid length.
[  346.045376][T11407] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.060422][T11407] Cannot create hsr debugfs directory
[  346.218636][ T5844] Bluetooth: hci4: command tx timeout
[  346.551481][T11468] syz.0.1474: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  346.570557][T11468] CPU: 0 UID: 0 PID: 11468 Comm: syz.0.1474 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  346.570589][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  346.570602][T11468] Call Trace:
[  346.570611][T11468]  <TASK>
[  346.570620][T11468]  dump_stack_lvl+0x189/0x250
[  346.570667][T11468]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.570702][T11468]  ? __pfx__printk+0x10/0x10
[  346.570726][T11468]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  346.570751][T11468]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  346.570779][T11468]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  346.570806][T11468]  warn_alloc+0x214/0x310
[  346.570839][T11468]  ? __pfx_warn_alloc+0x10/0x10
[  346.570887][T11468]  ? __get_vm_area_node+0x28f/0x300
[  346.570922][T11468]  ? hash_ipmark_create+0x3e6/0x1080
[  346.570945][T11468]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  346.570965][T11468]  ? do_syscall_64+0xfa/0x3b0
[  346.571012][T11468]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  346.571039][T11468]  ? rcu_is_watching+0x15/0xb0
[  346.571070][T11468]  ? hash_ipmark_create+0x3e6/0x1080
[  346.571087][T11468]  ? hash_ipmark_create+0x3e6/0x1080
[  346.571103][T11468]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  346.571123][T11468]  ? hash_ipmark_create+0x3e6/0x1080
[  346.571142][T11468]  ? hash_ipmark_create+0x387/0x1080
[  346.571165][T11468]  hash_ipmark_create+0x3e6/0x1080
[  346.571192][T11468]  ? __nla_parse+0x40/0x60
[  346.571219][T11468]  ? __pfx_hash_ipmark_create+0x10/0x10
[  346.571239][T11468]  ip_set_create+0xa97/0x1940
[  346.571275][T11468]  ? ip_set_create+0x4a2/0x1940
[  346.571316][T11468]  ? __pfx_ip_set_create+0x10/0x10
[  346.571383][T11468]  nfnetlink_rcv_msg+0xb4a/0x1130
[  346.571414][T11468]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  346.571462][T11468]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  346.571523][T11468]  ? __lock_acquire+0xab9/0xd20
[  346.571565][T11468]  netlink_rcv_skb+0x205/0x470
[  346.571588][T11468]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  346.571619][T11468]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  346.571653][T11468]  ? bpf_lsm_capable+0x9/0x20
[  346.571669][T11468]  ? security_capable+0x7e/0x2e0
[  346.571700][T11468]  nfnetlink_rcv+0x26a/0x2520
[  346.571730][T11468]  ? unwind_get_return_address+0x4d/0x90
[  346.571758][T11468]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  346.571778][T11468]  ? arch_stack_walk+0xfc/0x150
[  346.571809][T11468]  ? stack_trace_save+0x9c/0xe0
[  346.571832][T11468]  ? stack_depot_save_flags+0x40/0x900
[  346.571860][T11468]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  346.571891][T11468]  ? kasan_save_track+0x4f/0x80
[  346.571916][T11468]  ? kasan_save_track+0x3e/0x80
[  346.571950][T11468]  ? __lock_acquire+0xab9/0xd20
[  346.572000][T11468]  ? __lock_acquire+0xab9/0xd20
[  346.572038][T11468]  ? netlink_deliver_tap+0x2e/0x1b0
[  346.572066][T11468]  ? netlink_deliver_tap+0x2e/0x1b0
[  346.572087][T11468]  ? netlink_deliver_tap+0x2e/0x1b0
[  346.572115][T11468]  netlink_unicast+0x758/0x8d0
[  346.572145][T11468]  netlink_sendmsg+0x805/0xb30
[  346.572178][T11468]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.572203][T11468]  ? aa_sock_msg_perm+0x94/0x160
[  346.572229][T11468]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  346.572252][T11468]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.572281][T11468]  __sock_sendmsg+0x219/0x270
[  346.572305][T11468]  ____sys_sendmsg+0x505/0x830
[  346.572355][T11468]  ? __pfx_____sys_sendmsg+0x10/0x10
[  346.572394][T11468]  ? import_iovec+0x74/0xa0
[  346.572419][T11468]  ___sys_sendmsg+0x21f/0x2a0
[  346.572449][T11468]  ? __pfx____sys_sendmsg+0x10/0x10
[  346.572515][T11468]  ? __fget_files+0x2a/0x420
[  346.572536][T11468]  ? __fget_files+0x3a0/0x420
[  346.572569][T11468]  __x64_sys_sendmsg+0x19b/0x260
[  346.572600][T11468]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  346.572639][T11468]  ? rcu_is_watching+0x15/0xb0
[  346.572675][T11468]  ? do_syscall_64+0xbe/0x3b0
[  346.572698][T11468]  do_syscall_64+0xfa/0x3b0
[  346.572714][T11468]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.572743][T11468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.572763][T11468]  ? clear_bhb_loop+0x60/0xb0
[  346.572787][T11468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.572807][T11468] RIP: 0033:0x7f563e18e929
[  346.572825][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.572842][T11468] RSP: 002b:00007f563ef66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.572863][T11468] RAX: ffffffffffffffda RBX: 00007f563e3b6160 RCX: 00007f563e18e929
[  346.572878][T11468] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  346.572890][T11468] RBP: 00007f563e210b39 R08: 0000000000000000 R09: 0000000000000000
[  346.572902][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.572913][T11468] R13: 0000000000000000 R14: 00007f563e3b6160 R15: 00007fff46c68288
[  346.572946][T11468]  </TASK>
[  346.572953][T11468] Mem-Info:
[  346.638671][ T5844] Bluetooth: hci5: command tx timeout
[  346.639490][T11468] active_anon:4789 inactive_anon:0 isolated_anon:0
[  346.639490][T11468]  active_file:1465 inactive_file:40018 isolated_file:0
[  346.639490][T11468]  unevictable:768 dirty:183 writeback:0
[  346.639490][T11468]  slab_reclaimable:11386 slab_unreclaimable:121084
[  346.639490][T11468]  mapped:42261 shmem:1365 pagetables:993
[  346.639490][T11468]  sec_pagetables:0 bounce:0
[  346.639490][T11468]  kernel_misc_reclaimable:0
[  346.639490][T11468]  free:1285773 free_pcp:16055 free_cma:0
[  347.111408][T11468] Node 0 active_anon:19148kB inactive_anon:0kB active_file:5860kB inactive_file:159868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169044kB dirty:728kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12692kB pagetables:3760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  347.144918][T11468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  347.183183][T11391] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  347.198091][T11468] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  347.241683][T11391] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  347.250303][T11468] lowmem_reserve[]: 0 2501 2502 2502 2502
[  347.263781][T11468] Node 0 DMA32 free:1223860kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18996kB inactive_anon:0kB active_file:5860kB inactive_file:158044kB unevictable:1536kB writepending:724kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:45168kB local_pcp:28628kB free_cma:0kB
[  347.274102][   T49] bridge_slave_1: left allmulticast mode
[  347.304098][T11468] lowmem_reserve[]: 0 0 1 1 1
[  347.309093][   T49] bridge_slave_1: left promiscuous mode
[  347.309289][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.317511][T11468] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  347.351577][T11468] lowmem_reserve[]: 0 0 0 0 0
[  347.357347][T11468] Node 1 Normal free:3904056kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17952kB local_pcp:7072kB free_cma:0kB
[  347.391493][ T5844] Bluetooth: hci2: command tx timeout
[  347.398436][   T49] bridge_slave_0: left allmulticast mode
[  347.399600][T11468] lowmem_reserve[]: 0 0 0 0 0
[  347.408006][   T49] bridge_slave_0: left promiscuous mode
[  347.414577][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.423318][T11468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  347.437824][T11468] Node 0 DMA32: 3*4kB (UME) 1*8kB (U) 2*16kB (ME) 1*32kB (U) 346*64kB (UM) 92*128kB (UM) 59*256kB (UME) 36*512kB (UME) 19*1024kB (UM) 5*2048kB (UME) 275*4096kB (M) = 1223636kB
[  347.441418][   T49] bridge_slave_1: left allmulticast mode
[  347.463388][   T49] bridge_slave_1: left promiscuous mode
[  347.470422][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.474651][T11468] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  347.490474][T11468] Node 1 Normal: 3*4kB (ME) 4*8kB (ME) 6*16kB (ME) 165*32kB (UME) 51*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 949*4096kB (M) = 3904108kB
[  347.509392][T11468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  347.510567][   T49] bridge_slave_0: left allmulticast mode
[  347.525868][   T49] bridge_slave_0: left promiscuous mode
[  347.532166][T11468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  347.532720][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.541889][T11468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  347.558333][T11468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  347.567701][T11468] 42845 total pagecache pages
[  347.575235][T11468] 0 pages in swap cache
[  347.584824][T11468] Free swap  = 124996kB
[  347.589674][T11468] Total swap = 124996kB
[  347.593876][T11468] 2097051 pages RAM
[  347.597774][T11468] 0 pages HighMem/MovableOnly
[  347.608346][T11468] 424684 pages reserved
[  347.612796][T11468] 0 pages cma reserved
[  348.067859][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.082515][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.095771][   T49] bond0 (unregistering): Released all slaves
[  348.298192][ T5155] Bluetooth: hci4: command tx timeout
[  348.376187][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.394372][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.404973][   T49] bond0 (unregistering): Released all slaves
[  348.431770][T11391] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  348.446877][T11490] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1481'.
[  348.469459][T11391] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  348.495653][T11435] chnl_net:caif_netlink_parms(): no params data found
[  348.699492][ T5155] Bluetooth: hci5: command tx timeout
[  348.844056][T11435] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.855301][T11435] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.872179][T11435] bridge_slave_0: entered allmulticast mode
[  348.886773][T11435] bridge_slave_0: entered promiscuous mode
[  348.899438][T11435] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.928937][T11435] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.936254][T11435] bridge_slave_1: entered allmulticast mode
[  348.963403][T11435] bridge_slave_1: entered promiscuous mode
[  349.130479][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1492'.
[  349.216727][T11528] wireguard1: entered promiscuous mode
[  349.225237][T11528] wireguard1: entered allmulticast mode
[  349.328749][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.355596][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.419591][ T5155] Bluetooth: hci2: command tx timeout
[  349.468285][T11435] team0: Port device team_slave_0 added
[  349.561779][T11435] team0: Port device team_slave_1 added
[  349.735984][T11391] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.743172][ T5155] Bluetooth: hci6: command 0x0406 tx timeout
[  349.915951][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.924752][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.951823][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.988144][   T49] hsr_slave_0: left promiscuous mode
[  350.001908][   T49] hsr_slave_1: left promiscuous mode
[  350.007843][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.017685][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.029294][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.036754][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.047845][   T49] hsr_slave_0: left promiscuous mode
[  350.053875][   T49] hsr_slave_1: left promiscuous mode
[  350.060101][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.067551][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.075546][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.083139][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.137031][   T49] veth1_macvtap: left promiscuous mode
[  350.144322][   T49] veth0_macvtap: left promiscuous mode
[  350.151146][   T49] veth1_vlan: left promiscuous mode
[  350.156493][   T49] veth0_vlan: left promiscuous mode
[  350.176356][   T49] veth1_macvtap: left promiscuous mode
[  350.182468][   T49] veth0_macvtap: left promiscuous mode
[  350.188180][   T49] veth1_vlan: left promiscuous mode
[  350.193468][   T49] veth0_vlan: left promiscuous mode
[  350.378342][ T5844] Bluetooth: hci4: command tx timeout
[  350.724844][   T49] team0 (unregistering): Port device team_slave_1 removed
[  350.778490][ T5844] Bluetooth: hci5: command tx timeout
[  350.778713][   T49] team0 (unregistering): Port device team_slave_0 removed
[  350.919581][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1499'.
[  351.474226][   T49] team0 (unregistering): Port device team_slave_1 removed
[  351.512929][   T49] team0 (unregistering): Port device team_slave_0 removed
[  351.885637][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.896739][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.923022][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.071650][T11435] hsr_slave_0: entered promiscuous mode
[  352.081728][T11435] hsr_slave_1: entered promiscuous mode
[  352.093052][T11435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.101018][T11435] Cannot create hsr debugfs directory
[  352.111191][T11407] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  352.135081][T11391] 8021q: adding VLAN 0 to HW filter on device team0
[  352.181585][T11407] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  352.201583][T11407] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  352.230285][T11560] FAULT_INJECTION: forcing a failure.
[  352.230285][T11560] name failslab, interval 1, probability 0, space 0, times 0
[  352.249391][T11560] CPU: 0 UID: 0 PID: 11560 Comm: syz.0.1501 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  352.249429][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  352.249441][T11560] Call Trace:
[  352.249450][T11560]  <TASK>
[  352.249458][T11560]  dump_stack_lvl+0x189/0x250
[  352.249494][T11560]  ? __pfx____ratelimit+0x10/0x10
[  352.249523][T11560]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.249552][T11560]  ? __pfx__printk+0x10/0x10
[  352.249575][T11560]  ? __pfx___might_resched+0x10/0x10
[  352.249604][T11560]  ? fs_reclaim_acquire+0x7d/0x100
[  352.249631][T11560]  should_fail_ex+0x414/0x560
[  352.249661][T11560]  should_failslab+0xa8/0x100
[  352.249683][T11560]  __kmalloc_cache_noprof+0x70/0x3d0
[  352.249720][T11560]  ? tcf_chain_create+0xb0/0x310
[  352.249753][T11560]  tcf_chain_create+0xb0/0x310
[  352.249786][T11560]  __tcf_chain_get+0x111/0x3c0
[  352.249813][T11560]  tc_new_tfilter+0x753/0x15b0
[  352.249872][T11560]  ? __pfx_tc_new_tfilter+0x10/0x10
[  352.249941][T11560]  ? __pfx_tc_new_tfilter+0x10/0x10
[  352.249968][T11560]  rtnetlink_rcv_msg+0x7cf/0xb70
[  352.249996][T11560]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  352.250019][T11560]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  352.250063][T11560]  netlink_rcv_skb+0x205/0x470
[  352.250088][T11560]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  352.250114][T11560]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  352.250155][T11560]  ? netlink_deliver_tap+0x2e/0x1b0
[  352.250178][T11560]  ? netlink_deliver_tap+0x2e/0x1b0
[  352.250208][T11560]  netlink_unicast+0x758/0x8d0
[  352.250243][T11560]  netlink_sendmsg+0x805/0xb30
[  352.250287][T11560]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.250317][T11560]  ? aa_sock_msg_perm+0x94/0x160
[  352.250347][T11560]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.250372][T11560]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.250398][T11560]  __sock_sendmsg+0x219/0x270
[  352.250434][T11560]  ____sys_sendmsg+0x52d/0x830
[  352.250469][T11560]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.250505][T11560]  ? import_iovec+0x74/0xa0
[  352.250529][T11560]  ___sys_sendmsg+0x21f/0x2a0
[  352.250561][T11560]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.250643][T11560]  ? __might_fault+0xb0/0x130
[  352.250669][T11560]  __sys_sendmmsg+0x227/0x430
[  352.250708][T11560]  ? __pfx___sys_sendmmsg+0x10/0x10
[  352.250734][T11560]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  352.250787][T11560]  ? ksys_write+0x22a/0x250
[  352.250810][T11560]  ? __pfx_ksys_write+0x10/0x10
[  352.250827][T11560]  ? rcu_is_watching+0x15/0xb0
[  352.250869][T11560]  __x64_sys_sendmmsg+0xa0/0xc0
[  352.250902][T11560]  do_syscall_64+0xfa/0x3b0
[  352.250923][T11560]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.250955][T11560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.250977][T11560]  ? clear_bhb_loop+0x60/0xb0
[  352.251003][T11560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.251023][T11560] RIP: 0033:0x7f563e18e929
[  352.251043][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.251061][T11560] RSP: 002b:00007f563efa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  352.251084][T11560] RAX: ffffffffffffffda RBX: 00007f563e3b5fa0 RCX: 00007f563e18e929
[  352.251099][T11560] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  352.251113][T11560] RBP: 00007f563efa8090 R08: 0000000000000000 R09: 0000000000000000
[  352.251126][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  352.251138][T11560] R13: 0000000000000000 R14: 00007f563e3b5fa0 R15: 00007fff46c68288
[  352.251173][T11560]  </TASK>
[  352.252052][T11407] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  352.657274][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.664502][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.713545][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.720764][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.800545][T11391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.869327][ T5844] Bluetooth: hci5: command tx timeout
[  353.083973][T11407] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.159822][T11407] 8021q: adding VLAN 0 to HW filter on device team0
[  353.193920][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.201199][ T6956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.234122][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.241315][ T6956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.315196][T11391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.480954][T11391] veth0_vlan: entered promiscuous mode
[  353.493041][T11435] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  353.520953][T11391] veth1_vlan: entered promiscuous mode
[  353.541138][T11435] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  353.573496][T11435] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  353.590152][T11435] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  353.656713][T11391] veth0_macvtap: entered promiscuous mode
[  353.676868][T11391] veth1_macvtap: entered promiscuous mode
[  353.687778][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.754813][T11391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.785065][T11391] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.807706][T11391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.818362][T11391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.827162][T11391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.837499][T11391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.869644][T11435] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.967570][T11435] 8021q: adding VLAN 0 to HW filter on device team0
[  353.997431][ T6956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.010075][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.017238][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.028331][ T6956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.038443][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.045694][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.142536][  T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.151556][  T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.207298][T11435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  354.476701][T11407] veth0_vlan: entered promiscuous mode
[  354.520496][T11407] veth1_vlan: entered promiscuous mode
[  354.622998][   T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.760239][   T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.778921][T11407] veth0_macvtap: entered promiscuous mode
[  354.796395][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.821729][T11407] veth1_macvtap: entered promiscuous mode
[  354.866396][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.901657][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.916059][T11407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.934301][T11407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.953997][T11407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.965352][T11407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.997176][   T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.025316][T11435] veth0_vlan: entered promiscuous mode
[  355.042798][T11435] veth1_vlan: entered promiscuous mode
[  355.074360][   T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.161620][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.188540][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.203020][T11435] veth0_macvtap: entered promiscuous mode
[  355.237517][T11435] veth1_macvtap: entered promiscuous mode
[  355.279221][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.287077][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.289522][   T60] bridge_slave_1: left allmulticast mode
[  355.302152][   T60] bridge_slave_1: left promiscuous mode
[  355.307931][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.317439][   T60] bridge_slave_0: left allmulticast mode
[  355.323502][   T60] bridge_slave_0: left promiscuous mode
[  355.329789][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.634840][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.648482][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.664122][   T60] bond0 (unregistering): Released all slaves
[  355.687427][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.700978][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.721821][T11435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.733599][T11435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.753781][T11435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.763860][T11435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.959607][ T6956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.971917][ T6956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.023420][  T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.032445][  T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.289029][   T60] hsr_slave_0: left promiscuous mode
[  356.295050][   T60] hsr_slave_1: left promiscuous mode
[  356.305823][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.327209][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.343723][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.351376][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.379570][   T60] veth1_macvtap: left promiscuous mode
[  356.385135][   T60] veth0_macvtap: left promiscuous mode
[  356.395707][   T60] veth1_vlan: left promiscuous mode
[  356.402122][   T60] veth0_vlan: left promiscuous mode
[  356.777069][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  356.787936][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  356.811366][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  356.835293][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  356.850015][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.205050][   T60] team0 (unregistering): Port device team_slave_1 removed
[  357.254467][   T60] team0 (unregistering): Port device team_slave_0 removed
[  357.425493][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  357.451266][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  357.469490][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  357.479608][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  357.488051][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  358.136126][T11619] chnl_net:caif_netlink_parms(): no params data found
[  358.210987][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.313614][T11619] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.326182][T11619] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.333500][T11619] bridge_slave_0: entered allmulticast mode
[  358.341883][T11619] bridge_slave_0: entered promiscuous mode
[  358.364615][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.388893][T11619] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.396054][T11619] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.403680][T11619] bridge_slave_1: entered allmulticast mode
[  358.412027][T11619] bridge_slave_1: entered promiscuous mode
[  358.445612][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.475735][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.490815][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.530485][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.574435][T11619] team0: Port device team_slave_0 added
[  358.614187][T11619] team0: Port device team_slave_1 added
[  358.676055][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.683162][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.711502][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.724306][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.732987][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.759246][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.832179][T11622] chnl_net:caif_netlink_parms(): no params data found
[  358.878712][T11619] hsr_slave_0: entered promiscuous mode
[  358.885007][T11619] hsr_slave_1: entered promiscuous mode
[  358.891629][T11619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  358.899240][T11619] Cannot create hsr debugfs directory
[  358.938584][ T5844] Bluetooth: hci2: command tx timeout
[  358.947437][   T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.117106][   T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.156957][T11622] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.165972][T11622] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.182568][T11622] bridge_slave_0: entered allmulticast mode
[  359.202576][T11622] bridge_slave_0: entered promiscuous mode
[  359.274009][   T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.286254][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  359.296110][T11622] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.296112][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  359.304421][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  359.319278][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  359.319328][T11622] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.326947][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  359.342735][T11622] bridge_slave_1: entered allmulticast mode
[  359.356692][T11622] bridge_slave_1: entered promiscuous mode
[  359.416828][   T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.456221][T11622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.469492][T11622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.536605][T11622] team0: Port device team_slave_0 added
[  359.545643][T11622] team0: Port device team_slave_1 added
[  359.578282][ T5844] Bluetooth: hci4: command tx timeout
[  359.607537][T11622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.615133][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.642077][T11622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.655799][T11622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.663030][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.689156][T11622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.838759][T11622] hsr_slave_0: entered promiscuous mode
[  359.845417][T11622] hsr_slave_1: entered promiscuous mode
[  359.852052][T11622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.867348][T11622] Cannot create hsr debugfs directory
[  360.008219][   T60] bridge_slave_1: left allmulticast mode
[  360.013918][   T60] bridge_slave_1: left promiscuous mode
[  360.020505][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.034024][   T60] bridge_slave_0: left allmulticast mode
[  360.040325][   T60] bridge_slave_0: left promiscuous mode
[  360.046142][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.062387][   T60] bridge_slave_1: left allmulticast mode
[  360.069185][   T60] bridge_slave_1: left promiscuous mode
[  360.074981][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.085778][   T60] bridge_slave_0: left allmulticast mode
[  360.091989][   T60] bridge_slave_0: left promiscuous mode
[  360.097703][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.114182][T11644] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1511'.
[  360.461562][   T31] INFO: task syz.4.778:8944 blocked for more than 143 seconds.
[  360.469627][   T31]       Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0
[  360.478397][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  360.487133][   T31] task:syz.4.778       state:D stack:25352 pid:8944  tgid:8943  ppid:5836   task_flags:0x400140 flags:0x00004004
[  360.499451][   T31] Call Trace:
[  360.502772][   T31]  <TASK>
[  360.505722][   T31]  __schedule+0x16f5/0x4d00
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  360.510366][   T31]  ? __lock_acquire+0xab9/0xd20
[  360.517052][   T31]  ? schedule+0x165/0x360
[  360.523925][   T31]  ? __pfx___schedule+0x10/0x10
[  360.529005][   T31]  ? schedule+0x91/0x360
[  360.533297][   T31]  schedule+0x165/0x360
[  360.537491][   T31]  schedule_preempt_disabled+0x13/0x30
[  360.543210][   T31]  __mutex_lock+0x724/0xe80
[  360.547759][   T31]  ? __mutex_lock+0x51b/0xe80
[  360.552518][   T31]  ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  360.558944][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  360.564038][   T31]  ? stack_trace_save+0x9c/0xe0
[  360.613963][   T31]  nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  360.628604][   T31]  ? kasan_save_track+0x4f/0x80
[  360.633594][   T31]  ? kasan_save_track+0x3e/0x80
[  360.673270][   T31]  ? __kasan_kmalloc+0x93/0xb0
[  360.681585][   T31]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  360.698334][   T31]  ? kmalloc_reserve+0x136/0x290
[  360.703333][   T31]  ? __alloc_skb+0x142/0x2d0
[  360.710214][   T31]  ? netlink_dump+0x22b/0xe20
[  360.714941][   T31]  ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  360.731115][   T31]  ? genl_rcv_msg+0x5da/0x790
[  360.735852][   T31]  ? netlink_rcv_skb+0x205/0x470
[  360.741231][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  360.747799][   T31]  ? __sock_sendmsg+0x219/0x270
[  360.752772][   T31]  ? ____sys_sendmsg+0x505/0x830
[  360.757738][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  360.762805][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  360.768021][   T31]  ? do_syscall_64+0xfa/0x3b0
[  360.772720][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.780199][   T31]  ? rcu_is_watching+0x15/0xb0
[  360.785020][   T31]  ? trace_kmalloc+0x1f/0xd0
[  360.789698][   T31]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  360.796304][   T31]  ? __build_skb_around+0x257/0x3e0
[  360.801612][   T31]  genl_dumpit+0x108/0x1b0
[  360.806060][   T31]  netlink_dump+0x62d/0xe20
[  360.810758][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  360.815817][   T31]  ? genl_start+0x499/0x6c0
[  360.820399][   T31]  __netlink_dump_start+0x5cb/0x7e0
[  360.825640][   T31]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  360.831595][   T31]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  360.837955][   T31]  ? genl_get_cmd+0x496/0x910
[  360.842679][   T31]  ? __pfx_genl_start+0x10/0x10
[  360.847562][   T31]  ? __pfx_genl_dumpit+0x10/0x10
[  360.852552][   T31]  ? __pfx_genl_done+0x10/0x10
[  360.857338][   T31]  genl_rcv_msg+0x5da/0x790
[  360.862204][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.867261][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  360.872345][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  360.878926][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  360.885215][   T31]  netlink_rcv_skb+0x205/0x470
[  360.890084][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.895147][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  360.900541][   T31]  ? down_read+0x1ad/0x2e0
[  360.904986][   T31]  genl_rcv+0x28/0x40
[  360.909047][   T31]  netlink_unicast+0x758/0x8d0
[  360.913864][   T31]  netlink_sendmsg+0x805/0xb30
[  360.918868][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.924183][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  360.929187][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  360.934521][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.939913][   T31]  __sock_sendmsg+0x219/0x270
[  360.944609][   T31]  ____sys_sendmsg+0x505/0x830
[  360.949458][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  360.954787][   T31]  ? import_iovec+0x74/0xa0
[  360.959376][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  360.964082][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.969399][   T31]  ? __fget_files+0x2a/0x420
[  360.974038][   T31]  ? __fget_files+0x3a0/0x420
[  360.978805][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  360.984894][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  360.990447][   T31]  ? rcu_is_watching+0x15/0xb0
[  360.995246][   T31]  ? do_syscall_64+0xbe/0x3b0
[  360.999963][   T31]  do_syscall_64+0xfa/0x3b0
[  361.004466][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.009754][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.015848][   T31]  ? clear_bhb_loop+0x60/0xb0
[  361.020659][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.026576][   T31] RIP: 0033:0x7fd62ad8e929
[  361.028359][ T5844] Bluetooth: hci2: command tx timeout
[  361.031266][   T31] RSP: 002b:00007fd62bb76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.044856][   T31] RAX: ffffffffffffffda RBX: 00007fd62afb5fa0 RCX: 00007fd62ad8e929
[  361.052933][   T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[  361.060951][   T31] RBP: 00007fd62ae10b39 R08: 0000000000000000 R09: 0000000000000000
[  361.068967][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.076954][   T31] R13: 0000000000000000 R14: 00007fd62afb5fa0 R15: 00007ffca6e201c8
[  361.085036][   T31]  </TASK>
[  361.089580][   T31] 
[  361.089580][   T31] Showing all locks held in the system:
[  361.097392][   T31] 1 lock held by khungtaskd/31:
[  361.102690][   T31]  #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  361.112629][   T31] 5 locks held by kworker/u8:4/60:
[  361.117750][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  361.128715][   T31]  #1: ffffc9000211fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  361.139443][   T31]  #2: ffffffff8f505090 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  361.148860][   T31]  #3: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  361.158054][   T31]  #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  361.169042][   T31] 2 locks held by getty/5593:
[  361.173713][   T31]  #0: ffff888030aa50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  361.184198][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  361.195569][   T31] 3 locks held by kworker/1:5/5900:
[  361.200820][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  361.211931][   T31]  #1: ffffc90005407bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  361.223012][   T31]  #2: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  361.233506][   T31] 3 locks held by kworker/u8:9/6956:
[  361.238839][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  361.250701][   T31]  #1: ffffc90003827bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  361.261803][   T31]  #2: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  361.270940][   T31] 2 locks held by kworker/u8:11/6960:
[  361.276324][   T31]  #0: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  361.286307][   T31]  #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x314/0x6d0
[  361.298875][   T31] 4 locks held by kworker/u8:20/6978:
[  361.304281][   T31]  #0: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  361.314293][   T31]  #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  361.325720][   T31]  #2: ffff88807ac00768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
[  361.335781][   T31]  #3: ffffffff99cef168 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0xb4/0x380
[  361.346792][   T31] 2 locks held by syz.2.515/7968:
[  361.351923][   T31]  #0: ffffffff8f5768f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  361.360339][   T31]  #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  361.370639][   T31] 3 locks held by syz.4.778/8944:
[  361.375679][   T31]  #0: ffffffff8f5768f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  361.384038][   T31]  #1: ffff88807db216d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  361.395480][   T31]  #2: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280
[  361.406032][   T31] 2 locks held by syz.6.1499/11552:
[  361.411309][   T31]  #0: ffffffff8f5768f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  361.419552][   T31]  #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  361.428336][ T5844] Bluetooth: hci5: command tx timeout
[  361.430078][   T31] 7 locks held by syz-executor/11619:
[  361.440668][   T31]  #0: ffff88807da00428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  361.449634][   T31]  #1: ffff888031d9d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  361.459499][   T31]  #2: ffff888143f20d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  361.469735][   T31]  #3: ffffffff8edac788 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  361.480051][   T31]  #4: ffff88807b8af0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  361.490771][   T31]  #5: ffff88807b8ac250 (&devlink->lock_key#45){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  361.502273][   T31]  #6: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  361.512016][   T31] 2 locks held by syz-executor/11622:
[  361.517402][   T31]  #0: ffffffff8fa30e70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  361.527316][   T31]  #1: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  361.536634][   T31] 2 locks held by syz-executor/11639:
[  361.542253][   T31]  #0: ffffffff8f505090 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  361.551756][   T31]  #1: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  361.561391][   T31] 1 lock held by syz.0.1512/11647:
[  361.566514][   T31]  #0: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  361.577653][   T31] 
[  361.590009][   T31] =============================================
[  361.590009][   T31] 
[  361.600952][   T31] NMI backtrace for cpu 1
[  361.600971][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  361.600994][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.601006][   T31] Call Trace:
[  361.601013][   T31]  <TASK>
[  361.601022][   T31]  dump_stack_lvl+0x189/0x250
[  361.601073][   T31]  ? __wake_up_klogd+0xd9/0x110
[  361.601111][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.601142][   T31]  ? __pfx__printk+0x10/0x10
[  361.601197][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  361.601241][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  361.601280][   T31]  ? _printk+0xcf/0x120
[  361.601307][   T31]  ? __pfx__printk+0x10/0x10
[  361.601332][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  361.601375][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  361.601404][   T31]  watchdog+0xfee/0x1030
[  361.601431][   T31]  ? watchdog+0x1de/0x1030
[  361.601465][   T31]  kthread+0x70e/0x8a0
[  361.601490][   T31]  ? __pfx_watchdog+0x10/0x10
[  361.601515][   T31]  ? __pfx_kthread+0x10/0x10
[  361.601539][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.601566][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.601593][   T31]  ? __pfx_kthread+0x10/0x10
[  361.601616][   T31]  ret_from_fork+0x3fc/0x770
[  361.601646][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  361.601686][   T31]  ? __switch_to_asm+0x39/0x70
[  361.601706][   T31]  ? __switch_to_asm+0x33/0x70
[  361.601725][   T31]  ? __pfx_kthread+0x10/0x10
[  361.601747][   T31]  ret_from_fork_asm+0x1a/0x30
[  361.601784][   T31]  </TASK>
[  361.601791][   T31] Sending NMI from CPU 1 to CPUs 0:
[  361.688245][ T5844] Bluetooth: hci4: command tx timeout
[  361.689727][    C0] NMI backtrace for cpu 0
[  361.689742][    C0] CPU: 0 UID: 0 PID: 5844 Comm: kworker/u9:4 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  361.689770][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.689783][    C0] Workqueue: hci4 hci_cmd_timeout
[  361.689805][    C0] RIP: 0010:io_serial_out+0x7c/0xc0
[  361.689827][    C0] Code: 51 79 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 fc c8 dc fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  361.689842][    C0] RSP: 0018:ffffc900050e7310 EFLAGS: 00000002
[  361.689857][    C0] RAX: 0000000000000033 RBX: 0000000000000033 RCX: 0000000000000000
[  361.689869][    C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  361.689879][    C0] RBP: 00000000000003f8 R08: ffff888024918237 R09: 1ffff11004923046
[  361.689892][    C0] R10: dffffc0000000000 R11: ffffffff85470cf0 R12: dffffc0000000000
[  361.689906][    C0] R13: ffffffff99ac38c4 R14: ffffffff99dc8780 R15: 0000000000000000
[  361.689918][    C0] FS:  0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000
[  361.689933][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.689945][    C0] CR2: 00007f357d4e7d60 CR3: 0000000034478000 CR4: 00000000003526f0
[  361.689960][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  361.689971][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  361.689982][    C0] Call Trace:
[  361.689989][    C0]  <TASK>
[  361.689999][    C0]  serial8250_console_write+0x140d/0x1ba0
[  361.690027][    C0]  ? __lock_acquire+0xab9/0xd20
[  361.690053][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  361.690074][    C0]  ? console_flush_all+0x13a/0xc40
[  361.690094][    C0]  ? console_flush_all+0x13a/0xc40
[  361.690117][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  361.690136][    C0]  ? console_flush_all+0x13a/0xc40
[  361.690154][    C0]  ? console_flush_all+0x13a/0xc40
[  361.690175][    C0]  console_flush_all+0x728/0xc40
[  361.690195][    C0]  ? console_flush_all+0x13a/0xc40
[  361.690218][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  361.690244][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  361.690269][    C0]  console_unlock+0xc4/0x270
[  361.690287][    C0]  ? __pfx_console_unlock+0x10/0x10
[  361.690307][    C0]  ? vprintk_emit+0x444/0x7a0
[  361.690323][    C0]  ? vprintk_emit+0x444/0x7a0
[  361.690340][    C0]  vprintk_emit+0x5b7/0x7a0
[  361.690355][    C0]  ? vprintk_emit+0x444/0x7a0
[  361.690372][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  361.690393][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  361.690424][    C0]  ? sched_clock_cpu+0x74/0x430
[  361.690455][    C0]  _printk+0xcf/0x120
[  361.690477][    C0]  ? __pfx__printk+0x10/0x10
[  361.690495][    C0]  ? do_raw_spin_lock+0x121/0x290
[  361.690519][    C0]  ? look_up_lock_class+0x74/0x170
[  361.690551][    C0]  bt_err+0x10b/0x160
[  361.690575][    C0]  ? __lock_acquire+0xab9/0xd20
[  361.690601][    C0]  ? __pfx_bt_err+0x10/0x10
[  361.690634][    C0]  hci_cmd_timeout+0xff/0x1e0
[  361.690649][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  361.690677][    C0]  process_scheduled_works+0xae1/0x17b0
[  361.690720][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  361.690757][    C0]  worker_thread+0x8a0/0xda0
[  361.690787][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  361.690818][    C0]  ? __kthread_parkme+0x7b/0x200
[  361.690840][    C0]  kthread+0x70e/0x8a0
[  361.690861][    C0]  ? __pfx_worker_thread+0x10/0x10
[  361.690888][    C0]  ? __pfx_kthread+0x10/0x10
[  361.690908][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.690945][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.690969][    C0]  ? __pfx_kthread+0x10/0x10
[  361.690987][    C0]  ret_from_fork+0x3fc/0x770
[  361.691013][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  361.691040][    C0]  ? __switch_to_asm+0x39/0x70
[  361.691057][    C0]  ? __switch_to_asm+0x33/0x70
[  361.691074][    C0]  ? __pfx_kthread+0x10/0x10
[  361.691093][    C0]  ret_from_fork_asm+0x1a/0x30
[  361.691119][    C0]  </TASK>
[  361.691917][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  361.691935][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) 
[  361.691971][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.691985][   T31] Call Trace:
[  361.691994][   T31]  <TASK>
[  361.692003][   T31]  dump_stack_lvl+0x99/0x250
[  361.692038][   T31]  ? __asan_memcpy+0x40/0x70
[  361.692069][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.692102][   T31]  ? __pfx__printk+0x10/0x10
[  361.692155][   T31]  panic+0x2db/0x790
[  361.692195][   T31]  ? __pfx_panic+0x10/0x10
[  361.692230][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  361.692273][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  361.692305][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  361.692345][   T31]  watchdog+0x102d/0x1030
[  361.692378][   T31]  ? watchdog+0x1de/0x1030
[  361.692419][   T31]  kthread+0x70e/0x8a0
[  361.692447][   T31]  ? __pfx_watchdog+0x10/0x10
[  361.692477][   T31]  ? __pfx_kthread+0x10/0x10
[  361.692505][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.692535][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.692566][   T31]  ? __pfx_kthread+0x10/0x10
[  361.692594][   T31]  ret_from_fork+0x3fc/0x770
[  361.692629][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  361.692667][   T31]  ? __switch_to_asm+0x39/0x70
[  361.692690][   T31]  ? __switch_to_asm+0x33/0x70
[  361.692712][   T31]  ? __pfx_kthread+0x10/0x10
[  361.692739][   T31]  ret_from_fork_asm+0x1a/0x30
[  361.692790][   T31]  </TASK>
[  361.695454][   T31] Kernel Offset: disabled