last executing test programs:

5.471058752s ago: executing program 4 (id=573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe0c)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18)
unshare(0x20000400)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES16=r3, @ANYRESHEX=r1, @ANYRES32, @ANYRES64=r4, @ANYRES32=r4, @ANYRESDEC], 0x50)
r5 = socket(0x2000000000000021, 0x2, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x20000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a06050045ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000140010808004100000007fcff70", 0x58}], 0x1)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000300)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB="00000000f2a08f116ca2d624afb13be052fd522b745d82ded6c3b943cd3cdeaef939a09d647ef61236672e28ad0eea09aa2fc87d942b76ead051db79a32456e2663e12a9679f502f16a48e7fdae96be979438e2b0ed37ae1b346224a8fb1d1230d8dc68f689e58c581d47558b1c011bb0db3476e08d872e1af54f06433d31c278fa47c1bcb47d03255b041dfbeec8651ecd5559933dc58b33b98d39ec36aeb91bcfc4f", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="edbd1688cd0dfd7ce0fbe6b3ebbbaba143d956ca182993d07b33d37330b1a2dd29a28bfa268ce53e8c6b95969b68e4b73d6113d7e5b045425c367815d3fd034746882fbdde5c55cc9e2e0544bcc55e02ac8a511e00e6ff86b5ca72069a9f4e15950d93b4503d1c9691d92da8e0999bbd31d35db1af2a2379527ba9d708f29d254f4af27a6b1591391b04480efa8c5dfe78d0c766bf54b8366f1e0080b643ca571fed18895c302ee3f6a0ebb3c0487f586a3d34dfebd19305164836d24a4786ac0bf258598ed978127572ad3000d19a9aa1545ab9ace1bece19a4d3f307c9e540b30cf79ecdcf2ace59cd06df4ce91cd330a6c58cfbff9e0cf1678889106a5cdd242b541c449df153590a962c5c7fdebcd89bc49bc4f164349fa1fdc5c315f2a9460c42a0634470b84707c9f04da174cdf8eeaa2d6ae8c300506dbe53cbed4cc4e52a80381b2a221b027a949c0e36f1aa69774edded07072f9fadb920f5e10f6cc7b69463569e51047ca8de20d5a4cdb5c003834918bc4066cf8345e1e525478457dcc83d7b2faf17a76c346846b98d871800abfe6ce55afa9f6b933961f405e582f152201f5176fa547009a624d324e142a2d4c34413972e36ac512262b2848fe61491afe10cbbef1d86e3155b622b7d06b932caa94ffc90bb8d2c50f385826418a14c6f7cb5f36f64aa8ef9aea48ccd78c5f340a82bbf3867368da48792016a169551b70c2faf2c1c76649b8fe5b3b1bb7acd04a4ef038131657edce321c44e31bbf990979a02a521155a23928204feceb669ffc8679f0b6860d2696accfb9be601b200b00166"], 0x10f8}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040011)
r11 = socket(0x10, 0x80002, 0x0)
r12 = socket(0x15, 0x4, 0x0)
connect$tipc(r12, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r12, &(0x7f0000004400), 0x400000000000203, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r13 = socket$can_raw(0x1d, 0x3, 0x1)
r14 = socket$packet(0x11, 0x2, 0x300)
setsockopt$IP_VS_SO_SET_DEL(r11, 0x0, 0x484, &(0x7f00000015c0)={0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'lc\x00', 0x0, 0x7, 0x4d}, 0x2c)
setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r14, 0x107, 0x16, &(0x7f0000000500)={0x0, &(0x7f00000004c0)}, 0x10)
getsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
ppoll(&(0x7f0000000000)=[{r11, 0x10}, {0xffffffffffffffff, 0xc009}, {r11, 0x20}, {r13, 0x4802}, {r0, 0x2440}, {r11, 0x20}, {r11}], 0x7, &(0x7f0000000040)={0x77359400}, 0x0, 0x0)

4.810884855s ago: executing program 1 (id=580):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff69, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40884}, 0x4010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000065778d01e1bad51c2cbd94a59e013b90808a29e38fd35e4de3660b33c745bd7ef3cf414b92a41607402411f7b750385fe24d415d1aa3231ee5badc230cbd13e2308a11def9fb1e7735c5cf1318294211020979c654bd45b12232e0263b101b323290c78cf501730e051638ea6c57b6b59e0e01219b12f636640e517d36354a9b3f94af6644baef564415e94367d9284234b97191479710b8999e459d33b19ac12acc4fc05511ec1162fe00a95ca812d4f0ba49c09212fad84d0411f7b165c2d76d09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48)
unshare(0x4000000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000947c6bcbec9fed33e2bc4feecd049aa4b21bdbfceb444682331accd048cf1254fc33b8db53b369b0de582cf17b1ef037c937106ea03f1e012635f2eb38a42adf9c8c5e99762e54c6c8b83d7a8d575a678f836dc23eee7051bb10cb129ab0ea90e252825284b447e9e26b5c633d1d55da87fbe987cee71115bab911fe8d422664516b09d9b2e362e7714c266b8a29922ab7215c7bd5af106f702804e3d135c4c0373035cbdddddf7d42cd49b94aed4132ba2d362ee3d0d7350aa6c5df29e4c1fd0edde5deba393a6d621b11974bc3d79111efd4c496f5748e7bc1ef469de4477ad03d11"], 0x50)
close(0x3)

4.528276579s ago: executing program 0 (id=581):
socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000100)={'wlan1\x00'})
r8 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
socket(0x10, 0x803, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000157375c535ac4df1f9b90000000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, 0x0, 0x0)

4.463533448s ago: executing program 1 (id=582):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108c000000000063000000000000009500090000000040"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x52, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x4, 0xd, &(0x7f00000032c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000880)=""/239, &(0x7f0000000980)=0xef)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa2f, 0x70bd2d, 0x44000000, {0x7, 0x0, 0x68, r2, 0x940, 0x32245}, [@IFLA_LINKINFO={0x1c, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x4, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x20000000)

4.383997565s ago: executing program 4 (id=583):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0xc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0)

4.228195066s ago: executing program 1 (id=584):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_genetlink_get_family_id$devlink(0x0, r0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105fe000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

3.803986556s ago: executing program 1 (id=587):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x80007, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@empty, 0x0, r7})
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="11000000190001ae4a0000000000000080200040fd04000500220000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan3\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r11}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000e40)={{<r12=>0x0, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x8001, 0x2, 0x4, 0x2, 0x4, 0xe, 0xffffffff, 0x6, 0xffffffff}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001e40)={{r12, 0xff, 0xc9, 0x5, 0x3, 0x1, 0xb6bc, 0x5, 0x401, 0x9, 0x5, 0x1, 0xfffffffffffffffb, 0x3, 0x5}})
socket$nl_generic(0x10, 0x3, 0x10)

3.36102722s ago: executing program 0 (id=588):
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB="000500000000004000000000ff0300005fb0b239f4e17b0865f7815817380f31ed16d23f841808ce", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x1fc, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x1e8, 0x1, [@m_xt={0x1e4, 0x1a, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2f, 0x6, {0x8, 'mangle\x00', 0x8, 0x2751, "b6868d5b60"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xf9}, @TCA_IPT_TARG={0xc0, 0x6, {0x6, 'raw\x00', 0x6, 0x9, "3481d587e3860332793baedd28c82fca6425240f3489937a55fa8d8dbf5f9fd2aa77dbb04cc747d0d933c4932e7279d3d089f818b0d2d81be7135b6bfcd735f0dcea360c74be51d06c6b2a981bac4dea3d4ccabfa260d95d0eff1994fbca3e608fa44e957b1f21154e0f1845735eb6fa1efe04faa5cbe303b7818efea31f626ae5c2c820408af33d9dcf9f2d740296770e8f8d15d1bd"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x401, 'mangle\x00', 0x8, 0x3}}, @TCA_IPT_HOOK={0x8}]}, {0x8f, 0x6, "efb0db90f6a84ef15c3869872e2e4da3347572d72ac07674eb52707126cd5d454cab52ec1696e246878f6f9dd1140596f53f38a976554dbaa94f90109cdd3b5b8b16b5125041e403e952c312cceb3f9dbb6004036d1ed0c9292e8073650277bf8fe6e629664481596e94537770e23cfaeda57bd3220df2a14027772a31d30b81c4027caafe1e9ac127fc0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x48, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x26)
socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x48, r5, 0x778011cc015f0020, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000044}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000200000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)

2.744715242s ago: executing program 2 (id=591):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x3f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

2.670084368s ago: executing program 4 (id=592):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff69, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40884}, 0x4010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000065778d01e1bad51c2cbd94a59e013b90808a29e38fd35e4de3660b33c745bd7ef3cf414b92a41607402411f7b750385fe24d415d1aa3231ee5badc230cbd13e2308a11def9fb1e7735c5cf1318294211020979c654bd45b12232e0263b101b323290c78cf501730e051638ea6c57b6b59e0e01219b12f636640e517d36354a9b3f94af6644baef564415e94367d9284234b97191479710b8999e459d33b19ac12acc4fc05511ec1162fe00a95ca812d4f0ba49c09212fad84d0411f7b165c2d76d09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48)
unshare(0x4000000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000947c6bcbec9fed33e2bc4feecd049aa4b21bdbfceb444682331accd048cf1254fc33b8db53b369b0de582cf17b1ef037c937106ea03f1e012635f2eb38a42adf9c8c5e99762e54c6c8b83d7a8d575a678f836dc23eee7051bb10cb129ab0ea90e252825284b447e9e26b5c633d1d55da87fbe987cee71115bab911fe8d422664516b09d9b2e362e7714c266b8a29922ab7215c7bd5af106f702804e3d135c4c0373035cbdddddf7d42cd49b94aed4132ba2d362ee3d0d7350aa6c5df29e4c1fd0edde5deba393a6d621b11974bc3d79111efd4c496f5748e7bc1ef469de4477ad03d11"], 0x50)
close(0x3)

2.546624728s ago: executing program 1 (id=593):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000040000000000000000000000000000000777976b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6})
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
write(r6, &(0x7f0000000040)="cb", 0xfffffdef)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf)

2.510570803s ago: executing program 2 (id=594):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108c000000000063000000000000009500090000000040"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x52, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x4, 0xd, &(0x7f00000032c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000880)=""/239, &(0x7f0000000980)=0xef)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa2f, 0x70bd2d, 0x44000000, {0x7, 0x0, 0x68, r2, 0x940, 0x32245}, [@IFLA_LINKINFO={0x1c, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x4, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x20000000)

2.419250048s ago: executing program 2 (id=595):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getuid()
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x801)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
write(0xffffffffffffffff, &(0x7f00000002c0)='#\x00\x00', 0x3)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @noop]}}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000940)}], 0x2}}], 0x1, 0x40)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bbf200000088fb", 0x15}], 0x1}, 0x20004000)

2.368283364s ago: executing program 0 (id=596):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000100)={0x3})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB="000500000000004000000000ff0300005fb0b239f4e17b0865f7815817380f31ed16d23f841808ce", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x1fc, 0x30, 0x0, 0x0, 0x25dfdbfb, {0x9}, [{0x1e8, 0x1, [@m_xt={0x1e4, 0x1a, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2f, 0x6, {0x8, 'mangle\x00', 0x8, 0x2751, "b6868d5b60"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xf9}, @TCA_IPT_TARG={0xc0, 0x6, {0x6, 'raw\x00', 0x6, 0x9, "3481d587e3860332793baedd28c82fca6425240f3489937a55fa8d8dbf5f9fd2aa77dbb04cc747d0d933c4932e7279d3d089f818b0d2d81be7135b6bfcd735f0dcea360c74be51d06c6b2a981bac4dea3d4ccabfa260d95d0eff1994fbca3e608fa44e957b1f21154e0f1845735eb6fa1efe04faa5cbe303b7818efea31f626ae5c2c820408af33d9dcf9f2d740296770e8f8d15d1bd"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x401, 'mangle\x00', 0x8, 0x3}}, @TCA_IPT_HOOK={0x8}]}, {0x8f, 0x6, "efb0db90f6a84ef15c3869872e2e4da3347572d72ac07674eb52707126cd5d454cab52ec1696e246878f6f9dd1140596f53f38a976554dbaa94f90109cdd3b5b8b16b5125041e403e952c312cceb3f9dbb6004036d1ed0c9292e8073650277bf8fe6e629664481596e94537770e23cfaeda57bd3220df2a14027772a31d30b81c4027caafe1e9ac127fc0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x48, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x26)
socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x48, r9, 0x778011cc015f0020, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000044}, 0x10)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)

1.964113002s ago: executing program 4 (id=597):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="17000000020001", 0x7)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/309], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800)
setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000002c0)="889c29d5efbaf3a2d9e01a4ae26efc751f827c32148a344dddd5539d7ba2578f20e4d76113579dea47d5fca1", 0x2c)
shutdown(r2, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x1, 0x1, 0x5, 0x5}, {0x4, 0x6, 0x8, 0x1}, {0x8000, 0x5, 0x7e, 0x4}, {0xbd, 0xc5, 0x50, 0x804c}, {0x2, 0x3c, 0x23, 0xfffffffc}]}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r10}, 0x10)

1.77235699s ago: executing program 3 (id=598):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300001600000003000000000000000400030007000000b90800000000000007000000000000000000000000000000050006006c0000000a00000000000000fe880000000000000000000000000001000010000000000004000400000000000700090000000000000000000000000000000020000000000200010000000000000000070000000005000500008000000a"], 0xb0}}, 0x40)

1.420442417s ago: executing program 3 (id=599):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

1.211651825s ago: executing program 0 (id=600):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x840000000002, 0x3, 0xfa)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6ef5, 0x400003a, 0x0, 0x2240, r0, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x205, 0x0, 0x4, 0xe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r2}, 0x38)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010326bd7000030000000000000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x59)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r7, 0x0, 0x178}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r13=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r12, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r13}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="c2bb16b26e234fc0f62528b402bef006087096dd2ecd0fea6deadd9b14959e16a3539076909e32238aafe9b0750e6b0bc5e495121c0c6cb064064b51f813f2406defffc86ff1eec66c595b52cac80fffffaf43bd063a7eafe8b18c6114280ebe25b80c1dc04b9b7738f67f940373677f62e80fd4089ff97ee9be000000000000000000000000000000000b8de660c8ef1ef8e69e22dc4d89a67b11d35b3173cb946faa", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r14 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10)
sendmmsg$inet(r14, &(0x7f0000005240), 0x4000095, 0x0)
r15 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r15, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)

1.169353002s ago: executing program 3 (id=601):
unshare(0x22020400)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe00000000020000080004000a000000", 0x24)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x1, 0x30, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000ffdbdf2507000002000000000000000000000800000000c648d206000a004e210000060001004e2100000400050008000800e0688fb400"/71], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x27, 0x22, 0x0, &(0x7f0000000400)="f80204000000000000007f5308001b762d3e4d0b889fcee8b7b5358c2efa3aed3adb", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002b000b0000000000000000000600000008000300040009000c000180"], 0x28}}, 0x8000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000005c0)={0x8, {{0xa, 0x4e23, 0x2, @empty, 0x6d00}}, {{0xa, 0x4621, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @empty}, 0x108000}}}, 0x108)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={<r4=>0x0, 0xdd, "d2dc95399c44c6dcf43b30b3e73f2f656374f6cff6fede89cf1d3b3b0fa468c7a52c3146bd0e32c9215d22c278f4235672806cc2c1b432932cf53832b474a7c71c95a37ba4f3a849053e84eda637224ac74cc8bb408cc9284e008ecfcf6856d20bfb96785780f3e042a2a22512af80822d887917f8a3d9a4bad23c5817da45324b23b80490ec461ab96d697a2527bf3cffc0e921e6c647325b02cca56015d01d4734ad5c573eef3dec731f324582cdf1d616831867b2b859d33f2a5439e504b34e17d56c973f90798eea491e95d839788bac364f0be9d8848f5a468aef"}, &(0x7f0000000000)=0xe5)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000080)={r4, 0x4e, "072c8ff3ca524ea095068a325aa05aaecaa04d165b3f3d40a9f3535860fa6d83fc7ef005bb23ba1d44a08c1393f78da1e73d67517b2ecf23ffe5e210a9f4e9c501e8bde6c01f4a7b01e9173ff01e"}, &(0x7f0000000140)=0x56)

923.685846ms ago: executing program 3 (id=602):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e000100000000000000000407000000", @ANYRES32, @ANYBLOB="00000003"], 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40010003, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100021040000000000000000a0340000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000000a0001000000000000000000"], 0x40}}, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, [0x4, 0xfffffffffffffffc, 0x0, 0x9, 0x6], [0x5, 0x6, 0x7, 0x0, 0x5, 0x76af, 0x2, 0x6, 0x8000, 0x6, 0x4, 0x7, 0x10001, 0x4, 0x4, 0x2, 0x8, 0x9, 0x7, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x4, 0x3, 0x3ec, 0x4, 0x4, 0x1, 0x1000000000000003, 0x5, 0x5, 0xd, 0x4, 0xfffffffffffffffe, 0x4, 0x0, 0x8, 0x7, 0x4, 0x0, 0x9, 0x8, 0xff, 0x6, 0x9, 0x4, 0x200, 0x401, 0x7fffffffffffffff, 0x101, 0xf, 0x10, 0x2, 0x5, 0x10000, 0x5, 0x8, 0x5580, 0x30000, 0x4, 0x8, 0x9, 0x3000, 0x5, 0x4, 0x1, 0x5, 0xc4b, 0xa2a, 0x7ff, 0x7f, 0x10001, 0x6, 0x5, 0x28cf, 0xd, 0x7b15, 0x9, 0x646, 0x0, 0x1, 0x2af5, 0x9, 0x8000000000000000, 0x1fe, 0x3700000000000000, 0xbab, 0x7, 0x2, 0x7fffffffffffffff, 0x400000004, 0x8, 0xa, 0x10001, 0x9, 0x36c6, 0xffffffff, 0x8000000000000001, 0x0, 0x100, 0x10, 0xe209, 0x2, 0x24d, 0x6, 0xfffffffffffffffd, 0xff, 0x0, 0x9, 0x5, 0x1, 0x6, 0x2, 0x8, 0xff7fffffffffffff, 0x7fffffffffffffff, 0x0, 0xd1ca, 0x1, 0x69]})

918.381075ms ago: executing program 4 (id=603):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e6430000000fd000000000000001c00128009000100626f6e64000000000c0002800500110001"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)

851.386805ms ago: executing program 2 (id=604):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

628.201093ms ago: executing program 3 (id=605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={r0, &(0x7f0000000000), &(0x7f0000000140)=@tcp6=r1}, 0x20)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
unshare(0x18040580)
r2 = socket(0x10, 0x803, 0x0)
unshare(0x2000800)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x3, 0x3, 0x2, 0x5, 0x3, 0xd7, 0x6, 0xfe, 0x2, 0x8, 0x1000, 0x0, 0x7, 0xff, 0x7, [0x3, 0xffffce76]}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0xe, 0x200cc, 0x6, 0x115, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100140038000180060001000200000008000500000000000a000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000009, 0x11, r3, 0xd5092000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000e000010400000000123d747bd37dbd16e357b7773df0d197033086daac20244e89b581dc672a4c5b3a02223f6e0abdca51e26343b2226f58c62847eb6e9d861b25f44c2b8e4db3879552e7b66637ca80662bc4f253fafc9b95a68839e788d220891ec9d575b92cfa573ae9c64b8208e0ed6e9f803260d6d700176d05fbd1979b4628671efad57f581e83e98901451e2dd61b99ecbae7"], 0x14}}, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x0, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x2, 0x20}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "39cc", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x3d, 0x37, 0x22, 0x27, 0x2e, 0x3f, 0x5, 0x18, 0x18, 0x34, 0x39, 0x9, 0x31, 0x30, 0x26], 0x1, 0x4, 0xe48}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7fffffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x2, 0x7, 0x1, 0x3], 0x6, 0x7}, {0x3, [0x5, 0x1, 0x4, 0x2, 0x1], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)
socket$kcm(0x29, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)

627.303927ms ago: executing program 4 (id=606):
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB="000500000000004000000000ff0300005fb0b239f4e17b0865f7815817380f31ed16d23f841808ce", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x1fc, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x1e8, 0x1, [@m_xt={0x1e4, 0x1a, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2f, 0x6, {0x8, 'mangle\x00', 0x8, 0x2751, "b6868d5b60"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xf9}, @TCA_IPT_TARG={0xc0, 0x6, {0x6, 'raw\x00', 0x6, 0x9, "3481d587e3860332793baedd28c82fca6425240f3489937a55fa8d8dbf5f9fd2aa77dbb04cc747d0d933c4932e7279d3d089f818b0d2d81be7135b6bfcd735f0dcea360c74be51d06c6b2a981bac4dea3d4ccabfa260d95d0eff1994fbca3e608fa44e957b1f21154e0f1845735eb6fa1efe04faa5cbe303b7818efea31f626ae5c2c820408af33d9dcf9f2d740296770e8f8d15d1bd"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x401, 'mangle\x00', 0x8, 0x3}}, @TCA_IPT_HOOK={0x8}]}, {0x8f, 0x6, "efb0db90f6a84ef15c3869872e2e4da3347572d72ac07674eb52707126cd5d454cab52ec1696e246878f6f9dd1140596f53f38a976554dbaa94f90109cdd3b5b8b16b5125041e403e952c312cceb3f9dbb6004036d1ed0c9292e8073650277bf8fe6e629664481596e94537770e23cfaeda57bd3220df2a14027772a31d30b81c4027caafe1e9ac127fc0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x48, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x26)
socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x48, r5, 0x778011cc015f0020, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000044}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000002100000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)

157.559487ms ago: executing program 2 (id=607):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff69, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40884}, 0x4010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000065778d01e1bad51c2cbd94a59e013b90808a29e38fd35e4de3660b33c745bd7ef3cf414b92a41607402411f7b750385fe24d415d1aa3231ee5badc230cbd13e2308a11def9fb1e7735c5cf1318294211020979c654bd45b12232e0263b101b323290c78cf501730e051638ea6c57b6b59e0e01219b12f636640e517d36354a9b3f94af6644baef564415e94367d9284234b97191479710b8999e459d33b19ac12acc4fc05511ec1162fe00a95ca812d4f0ba49c09212fad84d0411f7b165c2d76d09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
unshare(0x4000000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000947c6bcbec9fed33e2bc4feecd049aa4b21bdbfceb444682331accd048cf1254fc33b8db53b369b0de582cf17b1ef037c937106ea03f1e012635f2eb38a42adf9c8c5e99762e54c6c8b83d7a8d575a678f836dc23eee7051bb10cb129ab0ea90e252825284b447e9e26b5c633d1d55da87fbe987cee71115bab911fe8d422664516b09d9b2e362e7714c266b8a29922ab7215c7bd5af106f702804e3d135c4c0373035cbdddddf7d42cd49b94aed4132ba2d362ee3d0d7350aa6c5df29e4c1fd0edde5deba393a6d621b11974bc3d79111efd4c496f5748e7bc1ef469de4477ad03d11"], 0x50)
close(0x3)

156.629618ms ago: executing program 0 (id=608):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xa45325ef87d56922}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)

155.489584ms ago: executing program 1 (id=609):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getuid()
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x801)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
write(0xffffffffffffffff, &(0x7f00000002c0)='#\x00\x00\x00', 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @noop]}}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000940)}], 0x2}}], 0x1, 0x40)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bbf200000088fb", 0x15}], 0x1}, 0x20004000)

153.381555ms ago: executing program 3 (id=610):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000007300ffb1000000006926000000000000bf67000000000000150002000fff52004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8473e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b196b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000))
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r6, 0x0)
recvmmsg(r6, &(0x7f0000000080), 0x72a, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6, 0x20}], 0x1, 0x1)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20)

728.982µs ago: executing program 0 (id=611):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000001bc0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40)
getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)

0s ago: executing program 2 (id=612):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="0001010000400000", 0x8}], 0x1}, 0x4004)
readv(r0, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/154, 0x9a}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts.
[   86.139479][ T5848] cgroup: Unknown subsys name 'net'
[   86.275292][ T5848] cgroup: Unknown subsys name 'cpuset'
[   86.284909][ T5848] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   88.166848][ T5848] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.630343][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.641364][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.649387][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.661610][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.681410][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.740605][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.750098][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.759626][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.772748][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.781769][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.814970][ T5181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.825268][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.833374][ T5181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.845106][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.853385][ T5181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.905495][ T5181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.918901][ T5181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.927548][ T5181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.935148][ T5181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.949485][ T5181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.961993][ T5181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.971218][ T5181] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.978986][ T5181] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.004267][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.014045][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.525342][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   91.596569][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   91.729440][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   91.880828][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   91.990358][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.998116][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.005780][ T5859] bridge_slave_0: entered allmulticast mode
[   92.013658][ T5859] bridge_slave_0: entered promiscuous mode
[   92.023812][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.031145][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.038542][ T5859] bridge_slave_1: entered allmulticast mode
[   92.049285][ T5859] bridge_slave_1: entered promiscuous mode
[   92.090523][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.097840][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.105774][ T5863] bridge_slave_0: entered allmulticast mode
[   92.113735][ T5863] bridge_slave_0: entered promiscuous mode
[   92.122477][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.129695][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.137021][ T5863] bridge_slave_1: entered allmulticast mode
[   92.144723][ T5863] bridge_slave_1: entered promiscuous mode
[   92.230812][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.245101][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.255097][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   92.287019][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.294968][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.302375][ T5865] bridge_slave_0: entered allmulticast mode
[   92.309825][ T5865] bridge_slave_0: entered promiscuous mode
[   92.382965][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.390285][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.398135][ T5870] bridge_slave_0: entered allmulticast mode
[   92.406577][ T5870] bridge_slave_0: entered promiscuous mode
[   92.415183][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.422553][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.429847][ T5865] bridge_slave_1: entered allmulticast mode
[   92.437839][ T5865] bridge_slave_1: entered promiscuous mode
[   92.447672][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.463037][ T5859] team0: Port device team_slave_0 added
[   92.477254][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.484738][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.492226][ T5870] bridge_slave_1: entered allmulticast mode
[   92.500218][ T5870] bridge_slave_1: entered promiscuous mode
[   92.523839][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.549858][ T5859] team0: Port device team_slave_1 added
[   92.665018][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.678232][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.689763][ T5863] team0: Port device team_slave_0 added
[   92.699332][ T5863] team0: Port device team_slave_1 added
[   92.707145][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.714228][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.740233][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.760660][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.773907][ T5860] Bluetooth: hci0: command tx timeout
[   92.775136][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.816925][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.824199][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.850385][ T5860] Bluetooth: hci1: command tx timeout
[   92.856316][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.921442][ T5860] Bluetooth: hci2: command tx timeout
[   92.969084][ T5865] team0: Port device team_slave_0 added
[   92.977009][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.984455][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.011589][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.025859][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.032949][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.059221][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.081205][ T5873] Bluetooth: hci3: command tx timeout
[   93.087446][ T5860] Bluetooth: hci4: command tx timeout
[   93.105448][ T5859] hsr_slave_0: entered promiscuous mode
[   93.114140][ T5859] hsr_slave_1: entered promiscuous mode
[   93.137736][ T5870] team0: Port device team_slave_0 added
[   93.145819][ T5865] team0: Port device team_slave_1 added
[   93.193103][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.200259][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.210655][ T5869] bridge_slave_0: entered allmulticast mode
[   93.218748][ T5869] bridge_slave_0: entered promiscuous mode
[   93.228376][ T5870] team0: Port device team_slave_1 added
[   93.250828][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.257934][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.283907][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.316522][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.324040][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.331667][ T5869] bridge_slave_1: entered allmulticast mode
[   93.339025][ T5869] bridge_slave_1: entered promiscuous mode
[   93.360941][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.368083][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.394364][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.473039][ T5863] hsr_slave_0: entered promiscuous mode
[   93.479652][ T5863] hsr_slave_1: entered promiscuous mode
[   93.486859][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   93.493135][ T5863] Cannot create hsr debugfs directory
[   93.522397][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.529432][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.555714][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.568833][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.576703][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.603043][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.654087][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.733778][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.774542][ T5869] team0: Port device team_slave_0 added
[   93.791518][ T5865] hsr_slave_0: entered promiscuous mode
[   93.797960][ T5865] hsr_slave_1: entered promiscuous mode
[   93.805470][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   93.812368][ T5865] Cannot create hsr debugfs directory
[   93.834113][ T5869] team0: Port device team_slave_1 added
[   93.924067][ T5870] hsr_slave_0: entered promiscuous mode
[   93.930751][ T5870] hsr_slave_1: entered promiscuous mode
[   93.937343][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   93.943379][ T5870] Cannot create hsr debugfs directory
[   94.020204][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.027662][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.055479][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.119560][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.127103][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.153836][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.388115][ T5869] hsr_slave_0: entered promiscuous mode
[   94.395178][ T5869] hsr_slave_1: entered promiscuous mode
[   94.401644][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   94.407502][ T5869] Cannot create hsr debugfs directory
[   94.579427][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.593522][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.640391][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.664976][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.773606][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.785052][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.809812][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.822356][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.841586][ T5860] Bluetooth: hci0: command tx timeout
[   94.921665][ T5860] Bluetooth: hci1: command tx timeout
[   94.938236][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.966359][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.003798][ T5860] Bluetooth: hci2: command tx timeout
[   95.015431][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.045277][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.137197][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.161394][ T5873] Bluetooth: hci3: command tx timeout
[   95.167028][ T5860] Bluetooth: hci4: command tx timeout
[   95.178415][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.194573][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.209173][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.306645][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.340875][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.360243][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.386531][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.400807][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.417311][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.461500][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   95.510154][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.517513][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.552837][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.560176][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.573084][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   95.604338][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.611557][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.643429][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.650592][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.673868][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.740682][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.799016][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   95.846164][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   95.858508][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.865773][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.904344][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.911582][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.975278][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.982482][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.018593][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.025857][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.079269][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.187032][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   96.219132][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.226347][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.290967][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.298316][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.370188][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.513115][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.536053][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.692939][ T5859] veth0_vlan: entered promiscuous mode
[   96.740451][ T5865] veth0_vlan: entered promiscuous mode
[   96.790231][ T5859] veth1_vlan: entered promiscuous mode
[   96.837867][ T5865] veth1_vlan: entered promiscuous mode
[   96.916337][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.924254][ T5860] Bluetooth: hci0: command tx timeout
[   96.963088][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.995981][ T5859] veth0_macvtap: entered promiscuous mode
[   97.002629][ T5860] Bluetooth: hci1: command tx timeout
[   97.032125][ T5859] veth1_macvtap: entered promiscuous mode
[   97.084069][ T5860] Bluetooth: hci2: command tx timeout
[   97.107414][ T5865] veth0_macvtap: entered promiscuous mode
[   97.154282][ T5865] veth1_macvtap: entered promiscuous mode
[   97.180402][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.196043][ T5863] veth0_vlan: entered promiscuous mode
[   97.216129][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.243932][ T5860] Bluetooth: hci4: command tx timeout
[   97.249567][ T5860] Bluetooth: hci3: command tx timeout
[   97.257999][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.278317][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.303910][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.318260][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.331475][   T24] cfg80211: failed to load regulatory.db
[   97.343792][ T5863] veth1_vlan: entered promiscuous mode
[   97.351999][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.388436][ T1102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.400362][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.449708][ T1102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.493488][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.509623][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.563085][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.620042][ T5869] veth0_vlan: entered promiscuous mode
[   97.672880][ T5863] veth0_macvtap: entered promiscuous mode
[   97.689297][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.697784][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.710892][ T5869] veth1_vlan: entered promiscuous mode
[   97.737783][ T5863] veth1_macvtap: entered promiscuous mode
[   97.791245][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.799172][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.838852][ T5870] veth0_vlan: entered promiscuous mode
[   97.872070][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.880199][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.880697][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.899090][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.929875][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.939973][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.950554][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.960486][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.974304][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.983128][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.012190][ T5870] veth1_vlan: entered promiscuous mode
[   98.032817][ T5869] veth0_macvtap: entered promiscuous mode
[   98.039763][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.110431][ T5869] veth1_macvtap: entered promiscuous mode
[   98.213119][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.237084][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.309402][ T5870] veth0_macvtap: entered promiscuous mode
[   98.317728][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   98.329537][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.345237][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.351634][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.364618][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.383300][ T5870] veth1_macvtap: entered promiscuous mode
[   98.419423][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.432323][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.530412][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.570575][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.585616][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.609072][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.675883][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.855953][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.866019][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.875898][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.921444][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.938197][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.001825][ T5860] Bluetooth: hci0: command tx timeout
[   99.007959][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.049051][ T5998] Zero length message leads to an empty skb
[   99.082212][ T5860] Bluetooth: hci1: command tx timeout
[   99.124656][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   99.143413][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   99.148947][ T5998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.167683][ T5860] Bluetooth: hci2: command tx timeout
[   99.209639][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.229577][ T6003] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   99.236344][ T6003] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   99.253526][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.322639][ T5860] Bluetooth: hci3: command tx timeout
[   99.328232][ T5873] Bluetooth: hci4: command tx timeout
[   99.360046][ T5998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.380956][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   99.509735][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.551943][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.615724][ T5998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.663264][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   99.737263][ T5998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.790791][ T6011] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   99.905557][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.914192][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.075457][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.090974][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.237495][   T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.259655][   T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.295569][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.310335][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.339002][   T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.353869][   T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.490748][ T6019] netlink: 558 bytes leftover after parsing attributes in process `syz.0.13'.
[  100.552147][ T1329] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.571174][ T1329] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.609415][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.697275][   T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.978480][ T6035] netlink: 'syz.1.15': attribute type 10 has an invalid length.
[  101.028959][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[  101.063298][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.071301][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.115734][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.123111][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.131367][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.138596][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.177895][ T6035] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  101.199752][ T6036] bridge_slave_1: left allmulticast mode
[  101.215443][ T6036] bridge_slave_1: left promiscuous mode
[  101.228205][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.256750][ T6036] bridge_slave_0: left allmulticast mode
[  101.276829][ T6036] bridge_slave_0: left promiscuous mode
[  101.299334][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.466157][ T6036] bond0: (slave bridge0): Releasing backup interface
[  101.506269][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[  102.226084][ T6054] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.325467][ T6058] sctp: [Deprecated]: syz.3.20 (pid 6058) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.325467][ T6058] Use struct sctp_sack_info instead
[  102.438400][ T6060] netlink: 558 bytes leftover after parsing attributes in process `syz.4.21'.
[  102.473213][ T6062] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET)
[  102.569119][ T6062] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.577351][ T6062] bridge0: port 3(bond2) entered blocking state
[  102.584135][ T6062] bridge0: port 3(bond2) entered disabled state
[  102.590901][ T6062] bond2: entered allmulticast mode
[  102.615461][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'.
[  102.675260][ T6062] bond2: entered promiscuous mode
[  102.830743][ T6066] dummy0: entered promiscuous mode
[  102.866609][ T6066] team0: entered promiscuous mode
[  102.894364][ T6066] team_slave_0: entered promiscuous mode
[  102.910902][ T6066] team_slave_1: entered promiscuous mode
[  102.915326][ T6077] netlink: 'syz.0.24': attribute type 13 has an invalid length.
[  102.936896][ T6066] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  102.990265][ T6066] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  103.018021][ T6077] netlink: 'syz.0.24': attribute type 17 has an invalid length.
[  103.042497][ T6066] bridge0: port 4(hsr1) entered blocking state
[  103.071402][ T6066] bridge0: port 4(hsr1) entered disabled state
[  103.078248][ T6066] hsr1: entered allmulticast mode
[  103.101949][ T6066] dummy0: entered allmulticast mode
[  103.114594][ T6066] team0: entered allmulticast mode
[  103.150354][ T6066] team_slave_0: entered allmulticast mode
[  103.156208][ T6085] netlink: 'syz.4.26': attribute type 11 has an invalid length.
[  103.192368][ T6066] team_slave_1: entered allmulticast mode
[  103.200732][ T6066] hsr1: entered promiscuous mode
[  103.363578][ T6077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.398726][ T6090] __nla_validate_parse: 2 callbacks suppressed
[  103.398747][ T6090] netlink: 558 bytes leftover after parsing attributes in process `syz.4.27'.
[  104.014252][ T6104] netlink: 'syz.3.30': attribute type 2 has an invalid length.
[  104.289869][ T6112] netlink: 'syz.3.30': attribute type 9 has an invalid length.
[  104.303620][ T6104] : entered promiscuous mode
[  104.325003][ T6112] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.30'.
[  104.958736][ T6126] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  104.965464][ T6126] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  105.100857][ T6120] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.325050][ T6120] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.520902][ T6120] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.664000][ T6120] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.963276][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.014660][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.027876][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37'.
[  106.104855][   T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.162842][ T1147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.190194][ T6142] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.37'.
[  106.662571][ T6152] netlink: 200 bytes leftover after parsing attributes in process `syz.1.41'.
[  106.835634][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'.
[  106.846738][ T6164] openvswitch: netlink: EtherType 0 is less than min 600
[  106.947037][ T6157] netlink: 558 bytes leftover after parsing attributes in process `syz.4.40'.
[  107.155550][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.45'.
[  107.189083][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.45'.
[  107.215563][ T6173] netlink: 558 bytes leftover after parsing attributes in process `syz.1.46'.
[  107.246625][ T6171] ip6gretap0: entered promiscuous mode
[  107.256559][ T6171] syz_tun: entered promiscuous mode
[  107.264013][ T6171] debugfs: 'hsr1' already exists in 'hsr'
[  107.270218][ T6171] Cannot create hsr debugfs directory
[  107.633747][ T6186] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.643155][ T6186] bridge0: port 3(bond1) entered blocking state
[  107.649722][ T6186] bridge0: port 3(bond1) entered disabled state
[  107.656850][ T6186] bond1: entered allmulticast mode
[  107.665675][ T6186] bond1: entered promiscuous mode
[  107.671978][ T6186] bridge0: port 3(bond1) entered blocking state
[  107.678681][ T6186] bridge0: port 3(bond1) entered forwarding state
[  107.715517][ T6188] dummy0: entered promiscuous mode
[  107.722950][ T6188] team0: entered promiscuous mode
[  107.728251][ T6188] team_slave_0: entered promiscuous mode
[  107.737501][ T6188] team_slave_1: entered promiscuous mode
[  107.745171][ T6188] debugfs: 'hsr1' already exists in 'hsr'
[  107.751635][ T6188] Cannot create hsr debugfs directory
[  107.759604][ T6188] bridge0: port 4(hsr1) entered blocking state
[  107.767899][ T6188] bridge0: port 4(hsr1) entered disabled state
[  107.774724][ T6188] hsr1: entered allmulticast mode
[  107.780016][ T6188] dummy0: entered allmulticast mode
[  107.789099][ T6188] team0: entered allmulticast mode
[  107.794950][ T6188] team_slave_0: entered allmulticast mode
[  107.800889][ T6188] team_slave_1: entered allmulticast mode
[  107.809903][ T6188] hsr1: entered promiscuous mode
[  107.815872][ T6188] bridge0: port 4(hsr1) entered blocking state
[  107.822242][ T6188] bridge0: port 4(hsr1) entered forwarding state
[  107.845150][ T1102] bridge0: port 3(bond1) entered disabled state
[  108.324009][ T6201] netlink: 'syz.1.54': attribute type 11 has an invalid length.
[  108.535235][ T6209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.584761][ T6215] __nla_validate_parse: 4 callbacks suppressed
[  108.584784][ T6215] netlink: 558 bytes leftover after parsing attributes in process `syz.2.59'.
[  108.604589][ T6216] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  108.611145][ T6216] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  108.688796][ T6209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.813203][ T6209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.971717][ T6209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.322318][ T5873] Bluetooth: hci4: command 0x0405 tx timeout
[  109.340911][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.385870][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.445368][ T6241] netlink: 558 bytes leftover after parsing attributes in process `syz.3.64'.
[  109.490756][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'.
[  109.563404][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'.
[  109.625278][ T6242] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.666692][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.793689][ T6245] dummy0: entered promiscuous mode
[  109.816818][ T6245] team0: entered promiscuous mode
[  109.841400][ T6245] team_slave_0: entered promiscuous mode
[  109.854589][ T6245] team_slave_1: entered promiscuous mode
[  109.863519][ T6245] debugfs: 'hsr1' already exists in 'hsr'
[  109.896364][ T6245] Cannot create hsr debugfs directory
[  109.917951][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.057422][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.4.63'.
[  110.085057][ T6264] netlink: 'syz.2.67': attribute type 7 has an invalid length.
[  110.126339][ T6264] netlink: 'syz.2.67': attribute type 8 has an invalid length.
[  110.192071][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.67'.
[  110.246137][ T6269] netlink: 200 bytes leftover after parsing attributes in process `syz.0.69'.
[  110.275288][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'.
[  110.757981][ T6281] netlink: 'syz.1.72': attribute type 10 has an invalid length.
[  110.832822][ T6291] netlink: 'syz.1.72': attribute type 10 has an invalid length.
[  111.020222][ T6290] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  111.045721][ T6290] macvtap1: entered promiscuous mode
[  111.089358][ T6290] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  111.612103][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[  111.812912][ T6311] netlink: 558 bytes leftover after parsing attributes in process `syz.4.81'.
[  111.976006][ T6309] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.033559][ T6309] bridge0: port 5(bond3) entered blocking state
[  112.048215][ T6309] bridge0: port 5(bond3) entered disabled state
[  112.082936][ T6309] bond3: entered allmulticast mode
[  112.099258][ T6320] netlink: 'syz.3.82': attribute type 4 has an invalid length.
[  112.137699][ T6309] bond3: entered promiscuous mode
[  112.279769][ T6327] netlink: 'syz.1.83': attribute type 11 has an invalid length.
[  113.747756][ T6377] batadv_slave_1: entered promiscuous mode
[  113.756849][ T6377] __nla_validate_parse: 7 callbacks suppressed
[  113.756868][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'.
[  113.776233][ T6378] netlink: 200 bytes leftover after parsing attributes in process `syz.1.101'.
[  113.786800][ T6377] bridge_slave_1: left allmulticast mode
[  113.792646][ T6377] bridge_slave_1: left promiscuous mode
[  113.808043][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.920009][ T6377] bridge_slave_0: left allmulticast mode
[  113.930058][ T6377] bridge_slave_0: left promiscuous mode
[  113.936037][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.194277][ T6377] batadv_slave_1: left promiscuous mode
[  114.419035][ T6399] netlink: 558 bytes leftover after parsing attributes in process `syz.3.108'.
[  115.638838][ T6433] netlink: 200 bytes leftover after parsing attributes in process `syz.3.116'.
[  116.052760][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'.
[  117.086890][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'.
[  117.128465][ T6465] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.207244][ T6472] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  117.213825][ T6472] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  117.332583][ T6465] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.389855][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'.
[  117.428015][ T6474] wg1: entered promiscuous mode
[  117.437162][ T6474] wg1: entered allmulticast mode
[  117.452455][ T6465] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.496807][ T6478] netlink: 'syz.3.130': attribute type 4 has an invalid length.
[  117.533647][ T6465] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.638070][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'.
[  117.873370][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.907893][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.972055][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.030034][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.074481][ T6491] netlink: 'syz.3.134': attribute type 13 has an invalid length.
[  118.088833][ T6491] netlink: 'syz.3.134': attribute type 17 has an invalid length.
[  118.198052][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'.
[  118.269224][ T6491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.323591][ T6491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.960957][ T6518] netlink: 788 bytes leftover after parsing attributes in process `syz.0.144'.
[  118.999236][ T6515] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.474690][ T6559] netlink: 558 bytes leftover after parsing attributes in process `syz.0.155'.
[  120.485210][ T6557] netlink: 200 bytes leftover after parsing attributes in process `syz.4.154'.
[  120.783285][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'.
[  120.798841][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'.
[  120.845542][ T6563] ip6gretap0: entered promiscuous mode
[  120.866143][ T6563] syz_tun: entered promiscuous mode
[  120.877155][ T6563] debugfs: 'hsr1' already exists in 'hsr'
[  120.884798][ T6563] Cannot create hsr debugfs directory
[  120.921589][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'.
[  121.288564][ T6578] tipc: Started in network mode
[  121.314918][ T6578] tipc: Node identity 16f43894433c, cluster identity 4711
[  121.355321][ T6578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.392198][ T6581] netlink: 788 bytes leftover after parsing attributes in process `syz.4.162'.
[  121.407974][ T6578] tipc: Resetting bearer <eth:syzkaller0>
[  121.502062][ T6577] syzkaller0: entered promiscuous mode
[  121.507614][ T6577] syzkaller0: entered allmulticast mode
[  121.564033][ T6577] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.637166][ T6585] netlink: 'syz.3.163': attribute type 1 has an invalid length.
[  121.667868][ T6585] netlink: 144 bytes leftover after parsing attributes in process `syz.3.163'.
[  121.684608][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.3.163'.
[  121.698912][ T6576] tipc: Resetting bearer <eth:syzkaller0>
[  121.765577][ T6576] tipc: Disabling bearer <eth:syzkaller0>
[  121.898802][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[  122.437465][ T6596] 8021q: adding VLAN 0 to HW filter on device bond4
[  122.480413][ T6596] bridge0: port 6(bond4) entered blocking state
[  122.502211][ T6596] bridge0: port 6(bond4) entered disabled state
[  122.526160][ T6596] bond4: entered allmulticast mode
[  122.550754][ T6596] bond4: entered promiscuous mode
[  122.657153][ T6604] warning: `syz.4.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  122.865206][ T6616] netlink: 'syz.0.171': attribute type 2 has an invalid length.
[  123.124277][ T6627] netlink: 'syz.0.171': attribute type 9 has an invalid length.
[  123.156461][ T6616] : entered promiscuous mode
[  123.293421][ T6625] ip6gretap0: entered promiscuous mode
[  123.323433][ T6625] syz_tun: entered promiscuous mode
[  123.346967][ T6625] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  123.363390][ T6625] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  123.660484][ T6643] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.793052][ T6647] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  123.799661][ T6647] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  123.860288][ T6651] netlink: 'syz.2.181': attribute type 11 has an invalid length.
[  123.982997][ T6643] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.221798][ T6643] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.277413][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.312591][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.365270][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.401278][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.452305][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.462513][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.482568][ T6658] netlink: 'syz.4.184': attribute type 2 has an invalid length.
[  124.544539][ T6643] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.707364][ T6666] __nla_validate_parse: 9 callbacks suppressed
[  124.707383][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'.
[  124.776451][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'.
[  124.846796][ T6669] FAULT_INJECTION: forcing a failure.
[  124.846796][ T6669] name failslab, interval 1, probability 0, space 0, times 0
[  124.860126][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) 
[  124.860154][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  124.860175][ T6669] Call Trace:
[  124.860183][ T6669]  <TASK>
[  124.860194][ T6669]  dump_stack_lvl+0x189/0x250
[  124.860234][ T6669]  ? __pfx____ratelimit+0x10/0x10
[  124.860260][ T6669]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.860287][ T6669]  ? __pfx__printk+0x10/0x10
[  124.860392][ T6669]  ? rcu_is_watching+0x15/0xb0
[  124.860423][ T6669]  should_fail_ex+0x414/0x560
[  124.860462][ T6669]  should_failslab+0xa8/0x100
[  124.860496][ T6669]  kmem_cache_alloc_noprof+0x73/0x3c0
[  124.860525][ T6669]  ? skb_clone+0x212/0x3a0
[  124.860559][ T6669]  skb_clone+0x212/0x3a0
[  124.860593][ T6669]  bpf_clone_redirect+0xad/0x3d0
[  124.860622][ T6669]  ? bpf_test_run+0x197/0x7b0
[  124.860648][ T6669]  bpf_prog_c08ef512837047f4+0x62/0x6b
[  124.860685][ T6669]  ? preempt_schedule+0xae/0xc0
[  124.860707][ T6669]  ? bpf_test_run+0x197/0x7b0
[  124.860733][ T6669]  ? preempt_schedule_common+0x83/0xd0
[  124.860757][ T6669]  ? preempt_schedule+0xae/0xc0
[  124.860780][ T6669]  ? __pfx_preempt_schedule+0x10/0x10
[  124.860806][ T6669]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  124.860839][ T6669]  ? __local_bh_disable_ip+0xf1/0x190
[  124.860861][ T6669]  ? __pfx___cant_migrate+0x10/0x10
[  124.860879][ T6669]  ? __local_bh_enable_ip+0x12d/0x1c0
[  124.860900][ T6669]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  124.860926][ T6669]  ? bpf_test_timer_continue+0x136/0x350
[  124.860956][ T6669]  bpf_test_run+0x318/0x7b0
[  124.861010][ T6669]  ? __pfx_bpf_test_run+0x10/0x10
[  124.861062][ T6669]  ? slab_build_skb+0x273/0x3e0
[  124.861086][ T6669]  ? convert___skb_to_skb+0x3d/0x590
[  124.861115][ T6669]  bpf_prog_test_run_skb+0xb30/0x1560
[  124.861159][ T6669]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  124.861185][ T6669]  bpf_prog_test_run+0x2c7/0x340
[  124.861221][ T6669]  __sys_bpf+0x581/0x870
[  124.861253][ T6669]  ? __pfx___sys_bpf+0x10/0x10
[  124.861297][ T6669]  ? ksys_write+0x22a/0x250
[  124.861342][ T6669]  ? __pfx_ksys_write+0x10/0x10
[  124.861368][ T6669]  ? rcu_is_watching+0x15/0xb0
[  124.861399][ T6669]  __x64_sys_bpf+0x7c/0x90
[  124.861426][ T6669]  do_syscall_64+0xfa/0x3b0
[  124.861452][ T6669]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.861477][ T6669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.861498][ T6669]  ? clear_bhb_loop+0x60/0xb0
[  124.861525][ T6669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.861546][ T6669] RIP: 0033:0x7fd74058eba9
[  124.861566][ T6669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.861585][ T6669] RSP: 002b:00007fd741482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.861613][ T6669] RAX: ffffffffffffffda RBX: 00007fd7407d5fa0 RCX: 00007fd74058eba9
[  124.861629][ T6669] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  124.861643][ T6669] RBP: 00007fd741482090 R08: 0000000000000000 R09: 0000000000000000
[  124.861656][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.861668][ T6669] R13: 00007fd7407d6038 R14: 00007fd7407d5fa0 R15: 00007ffc49a1d198
[  124.861704][ T6669]  </TASK>
[  124.885289][   T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.226630][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.331572][   T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.675795][ T6684] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.190'.
[  125.757593][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.875841][ T6695] netlink: 112 bytes leftover after parsing attributes in process `syz.4.194'.
[  125.902931][ T6697] netlink: 200 bytes leftover after parsing attributes in process `syz.0.196'.
[  126.110153][ T6703] netlink: 558 bytes leftover after parsing attributes in process `syz.2.197'.
[  126.322777][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'.
[  126.500045][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'.
[  126.816967][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'.
[  127.084182][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'.
[  127.505334][ T6748] : entered promiscuous mode
[  127.877807][ T6759] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.364522][ T6778] validate_nla: 51 callbacks suppressed
[  128.364545][ T6778] netlink: 'syz.1.218': attribute type 4 has an invalid length.
[  128.397692][ T6771] nbd: socks must be embedded in a SOCK_ITEM attr
[  128.814110][ T6791] netlink: 'syz.3.220': attribute type 1 has an invalid length.
[  129.226453][ T6804] netlink: 'syz.4.225': attribute type 2 has an invalid length.
[  129.265195][ T6804] : entered promiscuous mode
[  129.374557][ T6804] netlink: 'syz.4.225': attribute type 9 has an invalid length.
[  129.557733][ T6815] macvlan2: entered promiscuous mode
[  129.569378][ T6815] vlan0: entered promiscuous mode
[  129.587476][ T6815] syz_tun: refused to change device tx_queue_len
[  129.660860][ T6819] Driver unsupported XDP return value 0 on prog  (id 96) dev N/A, expect packet loss!
[  130.079439][ T6827] __nla_validate_parse: 14 callbacks suppressed
[  130.079461][ T6827] netlink: 558 bytes leftover after parsing attributes in process `syz.0.235'.
[  130.637972][ T6838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'.
[  131.188782][ T6847] netlink: 'syz.1.241': attribute type 2 has an invalid length.
[  131.380598][ T6847] netlink: 'syz.1.241': attribute type 9 has an invalid length.
[  131.404747][ T6847] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.241'.
[  131.564018][ T6836] syz.3.237 (6836) used greatest stack depth: 18136 bytes left
[  132.096563][ T6868] netlink: 248 bytes leftover after parsing attributes in process `syz.4.248'.
[  132.340174][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.249'.
[  132.550739][ T6879] netlink: 558 bytes leftover after parsing attributes in process `syz.0.250'.
[  132.695542][ T6884] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.708335][ T6884] bridge0: port 5(bond3) entered blocking state
[  132.715151][ T6884] bridge0: port 5(bond3) entered disabled state
[  132.722311][ T6884] bond3: entered allmulticast mode
[  132.725460][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.252'.
[  132.731139][ T6884] bond3: entered promiscuous mode
[  132.743100][ T6884] bridge0: port 5(bond3) entered blocking state
[  132.749893][ T6884] bridge0: port 5(bond3) entered forwarding state
[  132.758805][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.252'.
[  132.779139][ T1102] bridge0: port 5(bond3) entered disabled state
[  132.805541][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.253'.
[  133.283205][ T6898] netlink: 'syz.4.256': attribute type 2 has an invalid length.
[  133.302126][ T6896] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.410162][ T6899] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  133.416829][ T6899] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  133.453939][ T6900] netlink: 'syz.4.256': attribute type 9 has an invalid length.
[  133.480742][ T6900] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.256'.
[  133.499398][ T6896] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.905394][ T6896] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.119021][ T6896] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.600729][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.757733][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.809187][ T6921] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.848485][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.885250][   T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.230187][ T6933] netlink: 788 bytes leftover after parsing attributes in process `syz.2.267'.
[  135.680554][ T6948] netlink: 'syz.1.270': attribute type 2 has an invalid length.
[  135.746508][ T6948] netlink: 'syz.1.270': attribute type 9 has an invalid length.
[  135.754527][ T6948] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.270'.
[  136.296869][ T6971] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.344569][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'.
[  136.385645][ T6975] FAULT_INJECTION: forcing a failure.
[  136.385645][ T6975] name failslab, interval 1, probability 0, space 0, times 0
[  136.398457][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) 
[  136.398484][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  136.398497][ T6975] Call Trace:
[  136.398506][ T6975]  <TASK>
[  136.398514][ T6975]  dump_stack_lvl+0x189/0x250
[  136.398546][ T6975]  ? __pfx____ratelimit+0x10/0x10
[  136.398571][ T6975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.398596][ T6975]  ? __pfx__printk+0x10/0x10
[  136.398629][ T6975]  ? rcu_is_watching+0x15/0xb0
[  136.398662][ T6975]  should_fail_ex+0x414/0x560
[  136.398700][ T6975]  should_failslab+0xa8/0x100
[  136.398735][ T6975]  kmem_cache_alloc_noprof+0x73/0x3c0
[  136.398764][ T6975]  ? skb_clone+0x212/0x3a0
[  136.398801][ T6975]  skb_clone+0x212/0x3a0
[  136.398836][ T6975]  bpf_clone_redirect+0xad/0x3d0
[  136.398867][ T6975]  ? bpf_test_run+0x197/0x7b0
[  136.398892][ T6975]  bpf_prog_c08ef512837047f4+0x62/0x6b
[  136.398919][ T6975]  ? preempt_schedule+0xae/0xc0
[  136.398940][ T6975]  ? bpf_test_run+0x197/0x7b0
[  136.398966][ T6975]  ? preempt_schedule_common+0x83/0xd0
[  136.398991][ T6975]  ? preempt_schedule+0xae/0xc0
[  136.399012][ T6975]  ? __pfx_preempt_schedule+0x10/0x10
[  136.399034][ T6975]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  136.399063][ T6975]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  136.399095][ T6975]  ? __local_bh_disable_ip+0xf1/0x190
[  136.399117][ T6975]  ? __pfx___cant_migrate+0x10/0x10
[  136.399137][ T6975]  ? __local_bh_enable_ip+0x12d/0x1c0
[  136.399158][ T6975]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  136.399185][ T6975]  ? bpf_test_timer_continue+0x136/0x350
[  136.399216][ T6975]  bpf_test_run+0x318/0x7b0
[  136.399260][ T6975]  ? __pfx_bpf_test_run+0x10/0x10
[  136.399312][ T6975]  ? slab_build_skb+0x273/0x3e0
[  136.399338][ T6975]  ? convert___skb_to_skb+0x3d/0x590
[  136.399365][ T6975]  bpf_prog_test_run_skb+0xb30/0x1560
[  136.399409][ T6975]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  136.399444][ T6975]  bpf_prog_test_run+0x2c7/0x340
[  136.399480][ T6975]  __sys_bpf+0x581/0x870
[  136.399512][ T6975]  ? __pfx___sys_bpf+0x10/0x10
[  136.399556][ T6975]  ? ksys_write+0x22a/0x250
[  136.399588][ T6975]  ? __pfx_ksys_write+0x10/0x10
[  136.399615][ T6975]  ? rcu_is_watching+0x15/0xb0
[  136.399645][ T6975]  __x64_sys_bpf+0x7c/0x90
[  136.399672][ T6975]  do_syscall_64+0xfa/0x3b0
[  136.399698][ T6975]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.399722][ T6975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.399744][ T6975]  ? clear_bhb_loop+0x60/0xb0
[  136.399771][ T6975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.399792][ T6975] RIP: 0033:0x7f417f58eba9
[  136.399811][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.399829][ T6975] RSP: 002b:00007f418040c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  136.399852][ T6975] RAX: ffffffffffffffda RBX: 00007f417f7d5fa0 RCX: 00007f417f58eba9
[  136.399868][ T6975] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  136.399881][ T6975] RBP: 00007f418040c090 R08: 0000000000000000 R09: 0000000000000000
[  136.399895][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.399907][ T6975] R13: 00007f417f7d6038 R14: 00007f417f7d5fa0 R15: 00007ffeccefca48
[  136.399942][ T6975]  </TASK>
[  136.418962][ T6981] netlink: 'syz.4.281': attribute type 1 has an invalid length.
[  136.492344][ T6979] netlink: 788 bytes leftover after parsing attributes in process `syz.1.278'.
[  136.651617][ T6988] netlink: 'syz.4.281': attribute type 1 has an invalid length.
[  136.804029][ T6991] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002
[  136.970304][ T6990] bond5: (slave gretap1): making interface the new active one
[  137.009824][ T6990] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  137.206294][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  137.240790][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  137.267129][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  137.278891][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  137.289444][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  137.314718][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  137.362845][ T7002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.498444][ T7005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.696169][ T7005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.824481][ T7005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.950304][ T7005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.084517][ T6709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.136027][ T6709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.190097][   T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.231798][   T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.309556][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  139.058316][ T7076] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  139.425642][ T7091] 8021q: adding VLAN 0 to HW filter on device bond2
[  139.497399][ T7091] dummy0: entered promiscuous mode
[  139.569214][ T7091] team0: entered promiscuous mode
[  139.597787][ T7091] team_slave_0: entered promiscuous mode
[  139.605141][ T7091] team_slave_1: entered promiscuous mode
[  139.613761][ T7091] debugfs: 'hsr2' already exists in 'hsr'
[  139.620225][ T7091] Cannot create hsr debugfs directory
[  140.208425][ T7112] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.343624][ T7112] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.471488][ T7112] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.538685][ T7112] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.553789][ T7128] __nla_validate_parse: 18 callbacks suppressed
[  140.553812][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'.
[  140.803201][ T6709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.847322][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.869841][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.934451][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.293792][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.323'.
[  141.316467][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'.
[  141.343825][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.323'.
[  141.405059][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.323'.
[  141.588572][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'.
[  141.608305][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'.
[  141.833150][ T7164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.328'.
[  141.901449][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.329'.
[  142.216028][ T7173] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.423930][ T7173] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.556307][ T7186] netlink: 'syz.2.333': attribute type 2 has an invalid length.
[  142.580677][ T7186] netlink: 'syz.2.333': attribute type 2 has an invalid length.
[  142.603828][ T7186] netlink: 'syz.2.333': attribute type 1 has an invalid length.
[  142.615593][ T7173] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.657080][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'.
[  142.789756][ T7173] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.079845][ T7199] netlink: 'syz.2.338': attribute type 11 has an invalid length.
[  144.411592][ T7227] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.630363][ T1102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.696016][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.776631][   T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.864521][ T7242] netlink: 'syz.2.350': attribute type 11 has an invalid length.
[  144.884348][   T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.727790][ T7273] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[  145.756528][ T7269] tipc: Started in network mode
[  145.767895][ T7269] tipc: Node identity a2b5254c619d, cluster identity 4711
[  145.777235][ T7269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.835521][ T7272] syzkaller0: entered promiscuous mode
[  145.876389][ T7272] syzkaller0: entered allmulticast mode
[  145.898534][ T7273] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  146.010633][ T7269] __nla_validate_parse: 7 callbacks suppressed
[  146.010658][ T7269] netlink: 165 bytes leftover after parsing attributes in process `syz.3.356'.
[  146.304659][ T7262] tipc: Resetting bearer <eth:syzkaller0>
[  146.325617][ T7290] netlink: 'syz.0.363': attribute type 11 has an invalid length.
[  146.336991][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'.
[  146.453925][ T7262] tipc: Disabling bearer <eth:syzkaller0>
[  146.743724][ T7304] veth1_to_bond: entered allmulticast mode
[  146.760789][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'.
[  146.770914][ T7304] veth1_to_bond: entered promiscuous mode
[  146.794665][ T7303] veth1_to_bond: left promiscuous mode
[  146.800511][ T7303] veth1_to_bond: left allmulticast mode
[  147.047004][ T7314] tipc: New replicast peer: 255.255.255.255
[  147.055935][ T7314] tipc: Enabled bearer <udp:syz2>, priority 10
[  147.187339][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[  147.237141][ T7321] FAULT_INJECTION: forcing a failure.
[  147.237141][ T7321] name failslab, interval 1, probability 0, space 0, times 0
[  147.250000][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(full) 
[  147.250028][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  147.250042][ T7321] Call Trace:
[  147.250050][ T7321]  <TASK>
[  147.250061][ T7321]  dump_stack_lvl+0x189/0x250
[  147.250093][ T7321]  ? __pfx____ratelimit+0x10/0x10
[  147.250119][ T7321]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.250145][ T7321]  ? __pfx__printk+0x10/0x10
[  147.250179][ T7321]  ? rcu_is_watching+0x15/0xb0
[  147.250212][ T7321]  should_fail_ex+0x414/0x560
[  147.250250][ T7321]  should_failslab+0xa8/0x100
[  147.250284][ T7321]  kmem_cache_alloc_noprof+0x73/0x3c0
[  147.250313][ T7321]  ? skb_clone+0x212/0x3a0
[  147.250349][ T7321]  skb_clone+0x212/0x3a0
[  147.250384][ T7321]  bpf_clone_redirect+0xad/0x3d0
[  147.250414][ T7321]  ? bpf_test_run+0x197/0x7b0
[  147.250440][ T7321]  bpf_prog_c08ef512837047f4+0x62/0x6b
[  147.250466][ T7321]  ? preempt_schedule+0xae/0xc0
[  147.250487][ T7321]  ? bpf_test_run+0x197/0x7b0
[  147.250513][ T7321]  ? preempt_schedule_common+0x83/0xd0
[  147.250537][ T7321]  ? preempt_schedule+0xae/0xc0
[  147.250559][ T7321]  ? __pfx_preempt_schedule+0x10/0x10
[  147.250580][ T7321]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  147.250609][ T7321]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  147.250650][ T7321]  ? __local_bh_disable_ip+0xf1/0x190
[  147.250673][ T7321]  ? __pfx___cant_migrate+0x10/0x10
[  147.250692][ T7321]  ? __local_bh_enable_ip+0x12d/0x1c0
[  147.250713][ T7321]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  147.250739][ T7321]  ? bpf_test_timer_continue+0x136/0x350
[  147.250772][ T7321]  bpf_test_run+0x318/0x7b0
[  147.250822][ T7321]  ? __pfx_bpf_test_run+0x10/0x10
[  147.250876][ T7321]  ? slab_build_skb+0x273/0x3e0
[  147.250901][ T7321]  ? convert___skb_to_skb+0x3d/0x590
[  147.250929][ T7321]  bpf_prog_test_run_skb+0xb30/0x1560
[  147.250977][ T7321]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  147.251004][ T7321]  bpf_prog_test_run+0x2c7/0x340
[  147.251040][ T7321]  __sys_bpf+0x581/0x870
[  147.251072][ T7321]  ? __pfx___sys_bpf+0x10/0x10
[  147.251114][ T7321]  ? ksys_write+0x22a/0x250
[  147.251145][ T7321]  ? __pfx_ksys_write+0x10/0x10
[  147.251171][ T7321]  ? rcu_is_watching+0x15/0xb0
[  147.251201][ T7321]  __x64_sys_bpf+0x7c/0x90
[  147.251228][ T7321]  do_syscall_64+0xfa/0x3b0
[  147.251254][ T7321]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.251279][ T7321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.251299][ T7321]  ? clear_bhb_loop+0x60/0xb0
[  147.251324][ T7321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.251345][ T7321] RIP: 0033:0x7fd74058eba9
[  147.251363][ T7321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.251380][ T7321] RSP: 002b:00007fd741482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  147.251403][ T7321] RAX: ffffffffffffffda RBX: 00007fd7407d5fa0 RCX: 00007fd74058eba9
[  147.251419][ T7321] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  147.251433][ T7321] RBP: 00007fd741482090 R08: 0000000000000000 R09: 0000000000000000
[  147.251447][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  147.251459][ T7321] R13: 00007fd7407d6038 R14: 00007fd7407d5fa0 R15: 00007ffc49a1d198
[  147.251493][ T7321]  </TASK>
[  147.683446][ T7324] netlink: 200 bytes leftover after parsing attributes in process `syz.4.375'.
[  148.143571][   T24] tipc: Node number set to 3274188108
[  148.506029][ T7340] tipc: Started in network mode
[  148.520143][ T7340] tipc: Node identity 82c76ec77301, cluster identity 4711
[  148.559988][ T7340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.579994][ T7348] syzkaller0: entered promiscuous mode
[  148.598908][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'.
[  148.604779][ T7348] syzkaller0: entered allmulticast mode
[  148.614448][ T7359] netlink: 27 bytes leftover after parsing attributes in process `syz.2.383'.
[  148.736508][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'.
[  148.810871][ T7340] tipc: Resetting bearer <eth:syzkaller0>
[  148.936225][ T7365] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.952618][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[  149.011364][ T7337] tipc: Resetting bearer <eth:syzkaller0>
[  149.113609][ T7371] netlink: 'syz.4.387': attribute type 4 has an invalid length.
[  149.125009][ T7337] tipc: Disabling bearer <eth:syzkaller0>
[  149.232386][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'.
[  149.645983][ T7388] FAULT_INJECTION: forcing a failure.
[  149.645983][ T7388] name failslab, interval 1, probability 0, space 0, times 0
[  149.673504][ T7388] CPU: 0 UID: 0 PID: 7388 Comm: syz.2.393 Not tainted syzkaller #0 PREEMPT(full) 
[  149.673541][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  149.673554][ T7388] Call Trace:
[  149.673562][ T7388]  <TASK>
[  149.673571][ T7388]  dump_stack_lvl+0x189/0x250
[  149.673605][ T7388]  ? __pfx____ratelimit+0x10/0x10
[  149.673632][ T7388]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.673658][ T7388]  ? __pfx__printk+0x10/0x10
[  149.673696][ T7388]  ? __pfx___might_resched+0x10/0x10
[  149.673723][ T7388]  should_fail_ex+0x414/0x560
[  149.673763][ T7388]  should_failslab+0xa8/0x100
[  149.673798][ T7388]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  149.673829][ T7388]  ? __alloc_skb+0x112/0x2d0
[  149.673861][ T7388]  __alloc_skb+0x112/0x2d0
[  149.673893][ T7388]  tipc_msg_build+0x13b/0xcf0
[  149.673926][ T7388]  ? tipc_node_find+0xb3/0x480
[  149.673949][ T7388]  ? __pfx_tipc_msg_build+0x10/0x10
[  149.673981][ T7388]  ? tipc_nametbl_lookup_anycast+0xce/0x1020
[  149.674011][ T7388]  ? tipc_nametbl_lookup_anycast+0x545/0x1020
[  149.674053][ T7388]  __tipc_sendmsg+0x1715/0x2960
[  149.674092][ T7388]  ? page_table_check_set+0x18d/0x730
[  149.674128][ T7388]  ? __pfx___tipc_sendmsg+0x10/0x10
[  149.674156][ T7388]  ? aa_label_sk_perm+0x4cd/0x630
[  149.674191][ T7388]  ? __handle_mm_fault+0x3af7/0x5440
[  149.674226][ T7388]  ? __handle_mm_fault+0x3b08/0x5440
[  149.674255][ T7388]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  149.674327][ T7388]  ? __lock_acquire+0xab9/0xd20
[  149.674377][ T7388]  ? __local_bh_enable_ip+0x12d/0x1c0
[  149.674400][ T7388]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.674426][ T7388]  ? __pfx_woken_wake_function+0x10/0x10
[  149.674458][ T7388]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  149.674493][ T7388]  tipc_sendmsg+0x55/0x70
[  149.674516][ T7388]  ? __pfx_tipc_sendmsg+0x10/0x10
[  149.674540][ T7388]  __sock_sendmsg+0x219/0x270
[  149.674566][ T7388]  ____sys_sendmsg+0x52d/0x830
[  149.674603][ T7388]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.674644][ T7388]  ? import_iovec+0x74/0xa0
[  149.674678][ T7388]  ___sys_sendmsg+0x21f/0x2a0
[  149.674711][ T7388]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.674789][ T7388]  ? vfs_write+0x956/0xb30
[  149.674828][ T7388]  __sys_sendmmsg+0x227/0x430
[  149.674865][ T7388]  ? __pfx___sys_sendmmsg+0x10/0x10
[  149.674906][ T7388]  ? kmem_cache_free+0x18f/0x400
[  149.674954][ T7388]  ? ksys_write+0x1e1/0x250
[  149.674985][ T7388]  ? __pfx_ksys_write+0x10/0x10
[  149.675012][ T7388]  ? rcu_is_watching+0x15/0xb0
[  149.675043][ T7388]  __x64_sys_sendmmsg+0xa0/0xc0
[  149.675076][ T7388]  do_syscall_64+0xfa/0x3b0
[  149.675101][ T7388]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.675126][ T7388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.675147][ T7388]  ? clear_bhb_loop+0x60/0xb0
[  149.675174][ T7388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.675195][ T7388] RIP: 0033:0x7fd74058eba9
[  149.675215][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.675233][ T7388] RSP: 002b:00007fd741482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  149.675256][ T7388] RAX: ffffffffffffffda RBX: 00007fd7407d5fa0 RCX: 00007fd74058eba9
[  149.675272][ T7388] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 000000000000000a
[  149.675295][ T7388] RBP: 00007fd741482090 R08: 0000000000000000 R09: 0000000000000000
[  149.675308][ T7388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.675321][ T7388] R13: 00007fd7407d6038 R14: 00007fd7407d5fa0 R15: 00007ffc49a1d198
[  149.675356][ T7388]  </TASK>
[  150.527886][ T7408] netlink: 'syz.0.400': attribute type 4 has an invalid length.
[  150.549687][ T7411] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  150.716940][ T7413] FAULT_INJECTION: forcing a failure.
[  150.716940][ T7413] name failslab, interval 1, probability 0, space 0, times 0
[  150.730243][ T7413] CPU: 1 UID: 0 PID: 7413 Comm: syz.0.403 Not tainted syzkaller #0 PREEMPT(full) 
[  150.730273][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.730286][ T7413] Call Trace:
[  150.730296][ T7413]  <TASK>
[  150.730304][ T7413]  dump_stack_lvl+0x189/0x250
[  150.730339][ T7413]  ? __pfx____ratelimit+0x10/0x10
[  150.730365][ T7413]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.730391][ T7413]  ? __pfx__printk+0x10/0x10
[  150.730425][ T7413]  ? rcu_is_watching+0x15/0xb0
[  150.730466][ T7413]  should_fail_ex+0x414/0x560
[  150.730505][ T7413]  should_failslab+0xa8/0x100
[  150.730541][ T7413]  kmem_cache_alloc_noprof+0x73/0x3c0
[  150.730571][ T7413]  ? skb_clone+0x212/0x3a0
[  150.730608][ T7413]  skb_clone+0x212/0x3a0
[  150.730643][ T7413]  bpf_clone_redirect+0xad/0x3d0
[  150.730675][ T7413]  ? bpf_test_run+0x197/0x7b0
[  150.730700][ T7413]  bpf_prog_c08ef512837047f4+0x62/0x6b
[  150.730725][ T7413]  ? preempt_schedule+0xae/0xc0
[  150.730746][ T7413]  ? bpf_test_run+0x197/0x7b0
[  150.730771][ T7413]  ? preempt_schedule_common+0x83/0xd0
[  150.730796][ T7413]  ? preempt_schedule+0xae/0xc0
[  150.730817][ T7413]  ? __pfx_preempt_schedule+0x10/0x10
[  150.730839][ T7413]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  150.730868][ T7413]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  150.730901][ T7413]  ? __local_bh_disable_ip+0xf1/0x190
[  150.730923][ T7413]  ? __pfx___cant_migrate+0x10/0x10
[  150.730943][ T7413]  ? __local_bh_enable_ip+0x12d/0x1c0
[  150.730969][ T7413]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  150.730994][ T7413]  ? bpf_test_timer_continue+0x136/0x350
[  150.731025][ T7413]  bpf_test_run+0x318/0x7b0
[  150.731074][ T7413]  ? __pfx_bpf_test_run+0x10/0x10
[  150.731125][ T7413]  ? slab_build_skb+0x273/0x3e0
[  150.731150][ T7413]  ? convert___skb_to_skb+0x3d/0x590
[  150.731179][ T7413]  bpf_prog_test_run_skb+0xb30/0x1560
[  150.731221][ T7413]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  150.731248][ T7413]  bpf_prog_test_run+0x2c7/0x340
[  150.731282][ T7413]  __sys_bpf+0x581/0x870
[  150.731314][ T7413]  ? __pfx___sys_bpf+0x10/0x10
[  150.731358][ T7413]  ? ksys_write+0x22a/0x250
[  150.731391][ T7413]  ? __pfx_ksys_write+0x10/0x10
[  150.731417][ T7413]  ? rcu_is_watching+0x15/0xb0
[  150.731458][ T7413]  __x64_sys_bpf+0x7c/0x90
[  150.731486][ T7413]  do_syscall_64+0xfa/0x3b0
[  150.731511][ T7413]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.731536][ T7413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.731557][ T7413]  ? clear_bhb_loop+0x60/0xb0
[  150.731583][ T7413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.731604][ T7413] RIP: 0033:0x7f417f58eba9
[  150.731623][ T7413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.731641][ T7413] RSP: 002b:00007f418040c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  150.731664][ T7413] RAX: ffffffffffffffda RBX: 00007f417f7d5fa0 RCX: 00007f417f58eba9
[  150.731679][ T7413] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  150.731692][ T7413] RBP: 00007f418040c090 R08: 0000000000000000 R09: 0000000000000000
[  150.731705][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  150.731718][ T7413] R13: 00007f417f7d6038 R14: 00007f417f7d5fa0 R15: 00007ffeccefca48
[  150.731753][ T7413]  </TASK>
[  151.131716][ T7420] __nla_validate_parse: 6 callbacks suppressed
[  151.131738][ T7420] netlink: 200 bytes leftover after parsing attributes in process `syz.4.405'.
[  151.418434][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'.
[  151.430359][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'.
[  151.847009][ T7445] netlink: 666 bytes leftover after parsing attributes in process `syz.2.415'.
[  151.919862][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  151.935562][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  152.052957][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'.
[  152.549807][ T7475] netlink: 558 bytes leftover after parsing attributes in process `syz.3.424'.
[  152.639029][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'.
[  152.740817][ T7477] netlink: 'syz.4.425': attribute type 4 has an invalid length.
[  152.750785][ T7477] netlink: 'syz.4.425': attribute type 4 has an invalid length.
[  153.039919][ T7495] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.104083][ T5860] Bluetooth: hci4: link tx timeout
[  153.104980][ T7497] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  153.110432][ T5860] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  153.115996][ T7497] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  153.132423][ T5860] Bluetooth: hci4: link tx timeout
[  153.137680][ T5860] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.250099][ T7495] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.340431][ T7495] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.411329][ T7495] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.580418][   T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.627343][   T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.684354][   T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.762354][   T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.846739][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'.
[  153.889101][ T7523] netlink: 'syz.2.437': attribute type 1 has an invalid length.
[  153.970611][ T7523] 8021q: adding VLAN 0 to HW filter on device bond5
[  154.056353][ T7535] Bluetooth: MGMT ver 1.23
[  154.083591][ T7529] ipvlan2: entered allmulticast mode
[  154.095937][ T7535] netlink: 'syz.0.438': attribute type 4 has an invalid length.
[  154.109168][ T7529] bond5: entered allmulticast mode
[  154.184045][ T7523] bond5: (slave gretap1): making interface the new active one
[  154.196790][ T7523] gretap1: entered allmulticast mode
[  154.207165][ T7523] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  154.904708][ T7563] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  154.967068][ T7563] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  155.161443][ T5860] Bluetooth: hci4: command 0x0405 tx timeout
[  155.660280][ T7592] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  156.037731][   T30] audit: type=1804 audit(1757885534.681:2): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.462" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=469 res=1 errno=0
[  156.172776][   T30] audit: type=1800 audit(1757885534.721:3): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.462" name="cgroup.controllers" dev="tmpfs" ino=469 res=0 errno=0
[  157.242058][ T5860] Bluetooth: hci4: command 0x0405 tx timeout
[  158.412920][ T7659] __nla_validate_parse: 1 callbacks suppressed
[  158.412942][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  158.469353][ T7652] 8021q: adding VLAN 0 to HW filter on device bond3
[  158.477974][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'.
[  158.480254][ T7661] netlink: 200 bytes leftover after parsing attributes in process `syz.4.476'.
[  158.648569][ T7670] netlink: 'syz.1.478': attribute type 13 has an invalid length.
[  158.659176][ T7670] netlink: 'syz.1.478': attribute type 17 has an invalid length.
[  158.959546][ T7670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.099071][ T7678] sctp: [Deprecated]: syz.4.480 (pid 7678) Use of int in maxseg socket option.
[  159.099071][ T7678] Use struct sctp_assoc_value instead
[  159.298297][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'.
[  159.359793][ T7688] netlink: 'syz.4.480': attribute type 7 has an invalid length.
[  159.377307][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'.
[  159.397530][ T7688] netlink: 'syz.4.480': attribute type 8 has an invalid length.
[  159.434399][ T7691] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[  159.482129][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'.
[  159.502483][ T7696] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[  160.154794][ T7718] netlink: 'syz.1.490': attribute type 2 has an invalid length.
[  160.264384][ T7718] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  161.059496][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'.
[  161.219542][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'.
[  161.318798][ T7740] netlink: 'syz.1.495': attribute type 1 has an invalid length.
[  161.356373][ T7740] netlink: 212 bytes leftover after parsing attributes in process `syz.1.495'.
[  161.396471][ T7740] netlink: 'syz.1.495': attribute type 1 has an invalid length.
[  161.506760][ T7744] netlink: 'syz.4.497': attribute type 11 has an invalid length.
[  161.539151][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'.
[  161.572132][ T7742] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.697136][ T7742] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.783397][ T7742] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.859357][ T7742] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.090003][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.112926][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.135647][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.181212][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.537958][ T7789] __nla_validate_parse: 4 callbacks suppressed
[  163.537980][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'.
[  163.761981][ T7789] validate_nla: 4 callbacks suppressed
[  163.762004][ T7789] netlink: 'syz.0.511': attribute type 4 has an invalid length.
[  163.782358][ T7789] netlink: 'syz.0.511': attribute type 4 has an invalid length.
[  163.952231][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'.
[  163.966051][ T7792] 8021q: adding VLAN 0 to HW filter on device bond6
[  164.027858][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.512'.
[  164.086637][ T7792] bridge0: port 6(bond6) entered blocking state
[  164.105212][ T7792] bridge0: port 6(bond6) entered disabled state
[  164.142994][ T7792] bond6: entered allmulticast mode
[  164.162515][ T7792] bond6: entered promiscuous mode
[  164.182459][ T7792] bridge0: port 6(bond6) entered blocking state
[  164.189019][ T7792] bridge0: port 6(bond6) entered forwarding state
[  164.247499][   T36] bridge0: port 6(bond6) entered disabled state
[  164.357462][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'.
[  164.669849][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'.
[  164.769857][ T7810] netlink: 'syz.4.518': attribute type 2 has an invalid length.
[  165.180337][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'.
[  165.189989][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.519'.
[  165.365871][ T7816] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.374751][ T7816] bridge0: port 7(bond6) entered blocking state
[  165.387056][ T7816] bridge0: port 7(bond6) entered disabled state
[  165.407183][ T7823] netlink: 200 bytes leftover after parsing attributes in process `syz.0.521'.
[  165.408612][ T7816] bond6: entered allmulticast mode
[  165.465593][ T7816] bond6: entered promiscuous mode
[  166.245768][ T7851] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.360302][ T7864] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.366917][ T7864] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.450216][ T7869] netlink: 'syz.3.535': attribute type 4 has an invalid length.
[  166.473243][ T7851] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.486880][ T7868] netlink: 'syz.1.534': attribute type 2 has an invalid length.
[  166.515060][ T7869] openvswitch: netlink: ct_state flags 0008599e unsupported
[  166.608385][ T7851] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.716010][ T7876] netlink: 'syz.3.537': attribute type 8 has an invalid length.
[  166.730829][ T7851] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.771856][ T7878] netlink: 'syz.2.536': attribute type 4 has an invalid length.
[  166.920714][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.036818][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.109880][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.137785][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.273574][ T7884] syz.3.540 (7884) used greatest stack depth: 17864 bytes left
[  167.345990][ T7891] netlink: 'syz.1.541': attribute type 5 has an invalid length.
[  167.382898][ T7873] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  167.533896][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  167.588220][ T7900] FAULT_INJECTION: forcing a failure.
[  167.588220][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  167.633529][ T7900] CPU: 0 UID: 0 PID: 7900 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT(full) 
[  167.633562][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  167.633575][ T7900] Call Trace:
[  167.633584][ T7900]  <TASK>
[  167.633593][ T7900]  dump_stack_lvl+0x189/0x250
[  167.633627][ T7900]  ? __pfx____ratelimit+0x10/0x10
[  167.633653][ T7900]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.633679][ T7900]  ? __pfx__printk+0x10/0x10
[  167.633750][ T7900]  ? __might_fault+0xb0/0x130
[  167.633793][ T7900]  should_fail_ex+0x414/0x560
[  167.633832][ T7900]  _copy_from_user+0x2d/0xb0
[  167.633863][ T7900]  ___sys_sendmsg+0x158/0x2a0
[  167.633897][ T7900]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.633968][ T7900]  ? __fget_files+0x2a/0x420
[  167.633987][ T7900]  ? __fget_files+0x3a0/0x420
[  167.634019][ T7900]  __sys_sendmmsg+0x227/0x430
[  167.634055][ T7900]  ? __pfx___sys_sendmmsg+0x10/0x10
[  167.634081][ T7900]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  167.634138][ T7900]  ? ksys_write+0x22a/0x250
[  167.634170][ T7900]  ? __pfx_ksys_write+0x10/0x10
[  167.634197][ T7900]  ? rcu_is_watching+0x15/0xb0
[  167.634227][ T7900]  __x64_sys_sendmmsg+0xa0/0xc0
[  167.634260][ T7900]  do_syscall_64+0xfa/0x3b0
[  167.634286][ T7900]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.634311][ T7900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.634332][ T7900]  ? clear_bhb_loop+0x60/0xb0
[  167.634360][ T7900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.634380][ T7900] RIP: 0033:0x7fd74058eba9
[  167.634400][ T7900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.634419][ T7900] RSP: 002b:00007fd741482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  167.634442][ T7900] RAX: ffffffffffffffda RBX: 00007fd7407d5fa0 RCX: 00007fd74058eba9
[  167.634458][ T7900] RDX: 07fffffffffffd33 RSI: 0000200000004d00 RDI: 0000000000000007
[  167.634473][ T7900] RBP: 00007fd741482090 R08: 0000000000000000 R09: 0000000000000000
[  167.634486][ T7900] R10: 0000000020000890 R11: 0000000000000246 R12: 0000000000000001
[  167.634500][ T7900] R13: 00007fd7407d6038 R14: 00007fd7407d5fa0 R15: 00007ffc49a1d198
[  167.634535][ T7900]  </TASK>
[  167.639848][ T7898] IPv6: addrconf: prefix option has invalid lifetime
[  167.912441][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.864214][ T7913] TCP: TCP_TX_DELAY enabled
[  168.869794][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[  169.435401][ T7937] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.730450][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'.
[  169.779660][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'.
[  170.040721][ T7943] team0: entered promiscuous mode
[  170.099245][ T7943] team_slave_0: entered promiscuous mode
[  170.155118][ T7943] team_slave_1: entered promiscuous mode
[  170.198037][ T7943] bond0: entered promiscuous mode
[  170.225982][ T7943] bond_slave_0: entered promiscuous mode
[  170.249987][ T7943] bond_slave_1: entered promiscuous mode
[  170.275014][ T7943] debugfs: 'hsr2' already exists in 'hsr'
[  170.312058][ T7943] Cannot create hsr debugfs directory
[  170.322245][ T7943] 8021q: adding VLAN 0 to HW filter on device hsr2
[  171.102408][ T7984] FAULT_INJECTION: forcing a failure.
[  171.102408][ T7984] name failslab, interval 1, probability 0, space 0, times 0
[  171.123771][ T7984] CPU: 1 UID: 0 PID: 7984 Comm: syz.0.569 Not tainted syzkaller #0 PREEMPT(full) 
[  171.123803][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  171.123816][ T7984] Call Trace:
[  171.123825][ T7984]  <TASK>
[  171.123835][ T7984]  dump_stack_lvl+0x189/0x250
[  171.123867][ T7984]  ? __pfx____ratelimit+0x10/0x10
[  171.123894][ T7984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.123920][ T7984]  ? __pfx__printk+0x10/0x10
[  171.123958][ T7984]  ? __ip_dev_find+0x444/0x4e0
[  171.123988][ T7984]  ? __ip_dev_find+0xa2/0x4e0
[  171.124019][ T7984]  should_fail_ex+0x414/0x560
[  171.124059][ T7984]  should_failslab+0xa8/0x100
[  171.124094][ T7984]  kmem_cache_alloc_noprof+0x73/0x3c0
[  171.124123][ T7984]  ? dst_alloc+0x105/0x170
[  171.124161][ T7984]  dst_alloc+0x105/0x170
[  171.124198][ T7984]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  171.124245][ T7984]  ? ip_route_output_key_hash+0xc1/0x280
[  171.124281][ T7984]  ip_route_output_key_hash+0x174/0x280
[  171.124319][ T7984]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  171.124356][ T7984]  ? percpu_counter_add_batch+0xea/0x1e0
[  171.124392][ T7984]  ? sk_dst_check+0x25/0x480
[  171.124415][ T7984]  ? dst_release+0x126/0x1b0
[  171.124457][ T7984]  ip_route_output_flow+0x2a/0x150
[  171.124486][ T7984]  ? security_sk_classify_flow+0x70/0x180
[  171.124519][ T7984]  udp_sendmsg+0x142e/0x2170
[  171.124559][ T7984]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  171.124596][ T7984]  ? __pfx_udp_sendmsg+0x10/0x10
[  171.124624][ T7984]  ? __lock_acquire+0xab9/0xd20
[  171.124683][ T7984]  ? __lock_acquire+0xab9/0xd20
[  171.124714][ T7984]  ? __pfx_aa_sk_perm+0x10/0x10
[  171.124746][ T7984]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  171.124774][ T7984]  ? sock_rps_record_flow+0x19/0x410
[  171.124799][ T7984]  ? inet_sendmsg+0x29c/0x370
[  171.124819][ T7984]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.124847][ T7984]  __sock_sendmsg+0x19c/0x270
[  171.124873][ T7984]  ____sys_sendmsg+0x52d/0x830
[  171.124910][ T7984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.124951][ T7984]  ? import_iovec+0x74/0xa0
[  171.124984][ T7984]  ___sys_sendmsg+0x21f/0x2a0
[  171.125018][ T7984]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.125092][ T7984]  ? __fget_files+0x2a/0x420
[  171.125110][ T7984]  ? __fget_files+0x3a0/0x420
[  171.125141][ T7984]  __sys_sendmmsg+0x227/0x430
[  171.125179][ T7984]  ? __pfx___sys_sendmmsg+0x10/0x10
[  171.125207][ T7984]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  171.125283][ T7984]  ? ksys_write+0x22a/0x250
[  171.125316][ T7984]  ? __pfx_ksys_write+0x10/0x10
[  171.125343][ T7984]  ? rcu_is_watching+0x15/0xb0
[  171.125374][ T7984]  __x64_sys_sendmmsg+0xa0/0xc0
[  171.125407][ T7984]  do_syscall_64+0xfa/0x3b0
[  171.125433][ T7984]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.125465][ T7984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.125487][ T7984]  ? clear_bhb_loop+0x60/0xb0
[  171.125514][ T7984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.125535][ T7984] RIP: 0033:0x7f417f58eba9
[  171.125554][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.125572][ T7984] RSP: 002b:00007f418040c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  171.125594][ T7984] RAX: ffffffffffffffda RBX: 00007f417f7d5fa0 RCX: 00007f417f58eba9
[  171.125610][ T7984] RDX: 07fffffffffffd33 RSI: 0000200000004d00 RDI: 0000000000000007
[  171.125624][ T7984] RBP: 00007f418040c090 R08: 0000000000000000 R09: 0000000000000000
[  171.125637][ T7984] R10: 0000000020000890 R11: 0000000000000246 R12: 0000000000000001
[  171.125650][ T7984] R13: 00007f417f7d6038 R14: 00007f417f7d5fa0 R15: 00007ffeccefca48
[  171.125686][ T7984]  </TASK>
[  171.984033][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'.
[  172.287730][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'.
[  172.424563][ T8006] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.576'.
[  172.528073][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[  172.578536][ T8020] ip6tnl0: entered promiscuous mode
[  172.584357][ T8020] ip6tnl0: entered allmulticast mode
[  173.965075][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.586'.
[  174.355924][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'.
[  174.415324][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'.
[  174.810046][ T8068] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.590'.
[  174.893827][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'.
[  175.188654][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[  175.240886][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'.
[  175.478506][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'.
[  175.519662][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'.
[  175.925731][ T8105] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.597'.
[  176.418836][ T8113] netlink: 'syz.3.601': attribute type 1 has an invalid length.
[  177.003638][ T5860] Bluetooth: hci4: command 0x0405 tx timeout
[  177.213886][ T8125] IPVS: Scheduler module ip_vs_ not found
[  177.228039][ T8132] bridge0: entered promiscuous mode
[  177.253659][ T8132] ip6gretap0: entered promiscuous mode
[  177.271855][ T8132] debugfs: 'hsr2' already exists in 'hsr'
[  177.277782][ T8132] Cannot create hsr debugfs directory
[  177.397703][ T8140] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.482208][ T8142] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  177.489174][ T8142] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  177.502279][ T5983] 
[  177.504758][ T5983] ============================================
[  177.511285][ T5983] WARNING: possible recursive locking detected
[  177.517483][ T5983] syzkaller #0 Not tainted
[  177.522095][ T5983] --------------------------------------------
[  177.528883][ T5983] kworker/1:6/5983 is trying to acquire lock:
[  177.534965][ T5983] ffff888079fe4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  177.544061][ T5983] 
[  177.544061][ T5983] but task is already holding lock:
[  177.551527][ T5983] ffff88803389af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  177.560959][ T5983] 
[  177.560959][ T5983] other info that might help us debug this:
[  177.569307][ T5983]  Possible unsafe locking scenario:
[  177.569307][ T5983] 
[  177.576772][ T5983]        CPU0
[  177.580070][ T5983]        ----
[  177.583354][ T5983]   lock(&hsr->seqnr_lock);
[  177.587905][ T5983]   lock(&hsr->seqnr_lock);
[  177.592449][ T5983] 
[  177.592449][ T5983]  *** DEADLOCK ***
[  177.592449][ T5983] 
[  177.600697][ T5983]  May be due to missing lock nesting notation
[  177.600697][ T5983] 
[  177.609248][ T5983] 13 locks held by kworker/1:6/5983:
[  177.614546][ T5983]  #0: ffff88802f03a548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  177.625259][ T5983]  #1: ffffc9000472fbc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  177.638584][ T5983]  #2: ffff88807b9c8538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60
[  177.647845][ T5983]  #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1e7/0xe60
[  177.657098][ T5983]  #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  177.666155][ T5983]  #5: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  177.676219][ T5983]  #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  177.685383][ T5983]  #7: ffff88803389af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  177.694984][ T5983]  #8: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860
[  177.704480][ T5983]  #9: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  177.714417][ T5983]  #10: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840
[  177.723744][ T5983]  #11: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  177.733859][ T5983]  #12: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  177.743102][ T5983] 
[  177.743102][ T5983] stack backtrace:
[  177.749010][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) 
[  177.749032][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  177.749043][ T5983] Workqueue: mld mld_ifc_work
[  177.749063][ T5983] Call Trace:
[  177.749073][ T5983]  <TASK>
[  177.749080][ T5983]  dump_stack_lvl+0x189/0x250
[  177.749102][ T5983]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.749120][ T5983]  ? __pfx__printk+0x10/0x10
[  177.749146][ T5983]  print_deadlock_bug+0x28b/0x2a0
[  177.749164][ T5983]  validate_chain+0x1a3f/0x2140
[  177.749180][ T5983]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.749198][ T5983]  ? skb_network_protocol+0x508/0x760
[  177.749221][ T5983]  ? kmem_cache_free_bulk+0x2d1/0x520
[  177.749244][ T5983]  ? __pfx_skb_network_protocol+0x10/0x10
[  177.749268][ T5983]  __lock_acquire+0xab9/0xd20
[  177.749293][ T5983]  ? hsr_dev_xmit+0x237/0x360
[  177.749315][ T5983]  lock_acquire+0x120/0x360
[  177.749336][ T5983]  ? hsr_dev_xmit+0x237/0x360
[  177.749363][ T5983]  ? hsr_dev_xmit+0x237/0x360
[  177.749385][ T5983]  _raw_spin_lock_bh+0x36/0x50
[  177.749400][ T5983]  ? hsr_dev_xmit+0x237/0x360
[  177.749422][ T5983]  hsr_dev_xmit+0x237/0x360
[  177.749443][ T5983]  ? hsr_dev_xmit+0x2d/0x360
[  177.749466][ T5983]  dev_hard_start_xmit+0x2d4/0x830
[  177.749495][ T5983]  __dev_queue_xmit+0x1b8d/0x3b50
[  177.749521][ T5983]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.749544][ T5983]  ? check_noncircular+0xe0/0x160
[  177.749559][ T5983]  ? __bfs+0x154/0x2a0
[  177.749570][ T5983]  ? __pfx_usage_match+0x10/0x10
[  177.749585][ T5983]  ? lockdep_unlock+0x89/0x120
[  177.749605][ T5983]  ? validate_chain+0x897/0x2140
[  177.749620][ T5983]  ? __pfx___dev_queue_xmit+0x10/0x10
[  177.749660][ T5983]  br_dev_queue_push_xmit+0x6c5/0x890
[  177.749683][ T5983]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  177.749703][ T5983]  ? NF_HOOK+0x9e/0x3c0
[  177.749721][ T5983]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  177.749739][ T5983]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  177.749758][ T5983]  NF_HOOK+0x320/0x3c0
[  177.749777][ T5983]  ? NF_HOOK+0x9e/0x3c0
[  177.749794][ T5983]  ? __pfx_NF_HOOK+0x10/0x10
[  177.749813][ T5983]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  177.749836][ T5983]  br_forward_finish+0xd3/0x130
[  177.749853][ T5983]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  177.749872][ T5983]  ? __pfx_br_forward_finish+0x10/0x10
[  177.749896][ T5983]  ? __pfx_br_forward_finish+0x10/0x10
[  177.749914][ T5983]  NF_HOOK+0x320/0x3c0
[  177.749933][ T5983]  ? NF_HOOK+0x9e/0x3c0
[  177.749950][ T5983]  ? __pfx_NF_HOOK+0x10/0x10
[  177.749974][ T5983]  __br_forward+0x41e/0x600
[  177.749991][ T5983]  ? __pfx_br_forward_finish+0x10/0x10
[  177.750012][ T5983]  ? __pfx___br_forward+0x10/0x10
[  177.750032][ T5983]  ? skb_clone+0x246/0x3a0
[  177.750054][ T5983]  maybe_deliver+0xb5/0x160
[  177.750074][ T5983]  br_flood+0x31a/0x6a0
[  177.750095][ T5983]  ? br_dev_xmit+0x185/0x1840
[  177.750118][ T5983]  br_dev_xmit+0x11b3/0x1840
[  177.750142][ T5983]  ? br_dev_xmit+0x185/0x1840
[  177.750167][ T5983]  ? __pfx_br_dev_xmit+0x10/0x10
[  177.750189][ T5983]  ? validate_xmit_xfrm+0xbf/0x1160
[  177.750210][ T5983]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  177.750230][ T5983]  ? kasan_save_track+0x4f/0x80
[  177.750255][ T5983]  dev_hard_start_xmit+0x2d4/0x830
[  177.750282][ T5983]  __dev_queue_xmit+0x1b8d/0x3b50
[  177.750309][ T5983]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.750334][ T5983]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  177.750353][ T5983]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  177.750375][ T5983]  ? __pfx___dev_queue_xmit+0x10/0x10
[  177.750397][ T5983]  ? __copy_skb_header+0xa7/0x550
[  177.750417][ T5983]  ? __asan_memcpy+0x40/0x70
[  177.750434][ T5983]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  177.750456][ T5983]  ? __asan_memcpy+0x40/0x70
[  177.750473][ T5983]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  177.750500][ T5983]  ? hsr_addr_subst_dest+0x307/0xac0
[  177.750527][ T5983]  hsr_forward_skb+0x158b/0x2860
[  177.750547][ T5983]  ? hsr_forward_skb+0x9e/0x2860
[  177.750564][ T5983]  ? __pfx_hsr_forward_skb+0x10/0x10
[  177.750579][ T5983]  ? do_raw_spin_lock+0x121/0x290
[  177.750598][ T5983]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  177.750618][ T5983]  ? hsr_dev_xmit+0x237/0x360
[  177.750641][ T5983]  hsr_dev_xmit+0x242/0x360
[  177.750663][ T5983]  ? hsr_dev_xmit+0x2d/0x360
[  177.750686][ T5983]  dev_hard_start_xmit+0x2d4/0x830
[  177.750713][ T5983]  __dev_queue_xmit+0x1b8d/0x3b50
[  177.750740][ T5983]  ? __dev_queue_xmit+0x27b/0x3b50
[  177.750767][ T5983]  ? __pfx___dev_queue_xmit+0x10/0x10
[  177.750790][ T5983]  ? read_seqbegin+0x122/0x250
[  177.750805][ T5983]  ? neigh_connected_output+0x1ea/0x460
[  177.750821][ T5983]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.750838][ T5983]  ? read_seqbegin+0x1ac/0x250
[  177.750853][ T5983]  ? __pfx_read_seqbegin+0x10/0x10
[  177.750869][ T5983]  ? eth_header+0x11b/0x200
[  177.750895][ T5983]  ? __asan_memcpy+0x40/0x70
[  177.750922][ T5983]  ip6_finish_output2+0xfb0/0x1480
[  177.750945][ T5983]  ? __pfx_ip6_finish_output2+0x10/0x10
[  177.750964][ T5983]  ? ip6_mtu+0x7d/0x490
[  177.750979][ T5983]  ? ip6_mtu+0x38c/0x490
[  177.751003][ T5983]  ? ip6_finish_output+0x2ef/0x4e0
[  177.751019][ T5983]  ? ip6_output+0x126/0x550
[  177.751036][ T5983]  ip6_output+0x340/0x550
[  177.751055][ T5983]  NF_HOOK+0x9e/0x380
[  177.751075][ T5983]  ? __pfx_NF_HOOK+0x10/0x10
[  177.751091][ T5983]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  177.751116][ T5983]  ? do_raw_spin_unlock+0x122/0x240
[  177.751137][ T5983]  ? icmp6_dst_alloc+0x3a5/0x420
[  177.751154][ T5983]  ? icmp6_dst_alloc+0x3a5/0x420
[  177.751171][ T5983]  mld_sendpack+0x8d4/0xe60
[  177.751195][ T5983]  ? mld_sendpack+0x1e7/0xe60
[  177.751212][ T5983]  ? __pfx_mld_sendpack+0x10/0x10
[  177.751237][ T5983]  mld_ifc_work+0x83e/0xd60
[  177.751254][ T5983]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.751270][ T5983]  ? process_scheduled_works+0x9ef/0x17b0
[  177.751288][ T5983]  process_scheduled_works+0xae1/0x17b0
[  177.751316][ T5983]  ? __pfx_process_scheduled_works+0x10/0x10
[  177.751338][ T5983]  worker_thread+0x8a0/0xda0
[  177.751356][ T5983]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.751376][ T5983]  ? __kthread_parkme+0x7b/0x200
[  177.751396][ T5983]  kthread+0x70e/0x8a0
[  177.751417][ T5983]  ? __pfx_worker_thread+0x10/0x10
[  177.751433][ T5983]  ? __pfx_kthread+0x10/0x10
[  177.751454][ T5983]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.751469][ T5983]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.751486][ T5983]  ? __pfx_kthread+0x10/0x10
[  177.751506][ T5983]  ret_from_fork+0x436/0x7d0
[  177.751524][ T5983]  ? __pfx_ret_from_fork+0x10/0x10
[  177.751542][ T5983]  ? __switch_to_asm+0x39/0x70
[  177.751563][ T5983]  ? __switch_to_asm+0x33/0x70
[  177.751583][ T5983]  ? __pfx_kthread+0x10/0x10
[  177.751603][ T5983]  ret_from_fork_asm+0x1a/0x30
[  177.751631][ T5983]  </TASK>
[  178.456171][ T8139] sctp: [Deprecated]: syz.3.610 (pid 8139) Use of int in max_burst socket option.
[  178.456171][ T8139] Use struct sctp_assoc_value instead
[  178.496182][ T8140] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.575152][ T8140] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.664586][ T8140] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.727312][   T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.742932][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.757399][   T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.772538][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.081672][ T5860] Bluetooth: hci4: command 0x0405 tx timeout
[  181.161766][ T5860] Bluetooth: hci4: command 0x0405 tx timeout