last executing test programs:

1m0.516821659s ago: executing program 4 (id=654):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80803, 0x84) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="db6a535c32b52e81570834587ebd40d1e645d3c287dacb57a232dcfb85c45fa0af36049cd5fe40fbafe4556cd4893f72d36df6d063a220ca920c1329c38d7485d172846952bd1b9f04f28289a12feb902723e990ae2af6195da7e3263ac5889bd1b006e0f97d380388499f39a476ba098ad6a99c99324fb1d70d3a623f16453351db5ed9c8ab322acd8333955d561dff72d951becafbe58308eacfba5b2bb6d6c7ad1eb6452f", 0xa6}, {&(0x7f00000006c0)="f35f86b5504ca1242adfb87d4bda5fd32114302b192052313177afeee856b327b9af1fa5d4254a71ff9abd963d4944c15ef1931de900475a714d649aaf98d72d18f5c15949cb75993acfcb6d9e7c7316afe865a70b8a49a3f1855a06a0d72c9570f12b0d1213a5bc3d6339656a893f41106f64e61fdd36e1c6dc97dafe6e5d964b", 0x81}, {&(0x7f00000001c0)="9583953d90abd8dc790305c118acf14b6b54ee6a66bf4d715e828a1045ad0c968ca70e1848f2fbf709a3eb5fcb2150686b3fe27350faf5d0f25be92cf7c69251298b0c002749e2eec0", 0x49}], 0x3}}], 0x1, 0x4004004)
r4 = socket(0x15, 0x3, 0x5) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x4, 0x0, 0x236, 0x1, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r7, 0x100) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0xbe, 0x8000000000}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)

49.552817275s ago: executing program 4 (id=654):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80803, 0x84) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="db6a535c32b52e81570834587ebd40d1e645d3c287dacb57a232dcfb85c45fa0af36049cd5fe40fbafe4556cd4893f72d36df6d063a220ca920c1329c38d7485d172846952bd1b9f04f28289a12feb902723e990ae2af6195da7e3263ac5889bd1b006e0f97d380388499f39a476ba098ad6a99c99324fb1d70d3a623f16453351db5ed9c8ab322acd8333955d561dff72d951becafbe58308eacfba5b2bb6d6c7ad1eb6452f", 0xa6}, {&(0x7f00000006c0)="f35f86b5504ca1242adfb87d4bda5fd32114302b192052313177afeee856b327b9af1fa5d4254a71ff9abd963d4944c15ef1931de900475a714d649aaf98d72d18f5c15949cb75993acfcb6d9e7c7316afe865a70b8a49a3f1855a06a0d72c9570f12b0d1213a5bc3d6339656a893f41106f64e61fdd36e1c6dc97dafe6e5d964b", 0x81}, {&(0x7f00000001c0)="9583953d90abd8dc790305c118acf14b6b54ee6a66bf4d715e828a1045ad0c968ca70e1848f2fbf709a3eb5fcb2150686b3fe27350faf5d0f25be92cf7c69251298b0c002749e2eec0", 0x49}], 0x3}}], 0x1, 0x4004004)
r4 = socket(0x15, 0x3, 0x5) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x4, 0x0, 0x236, 0x1, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r7, 0x100) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0xbe, 0x8000000000}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)

37.717888363s ago: executing program 4 (id=654):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80803, 0x84) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="db6a535c32b52e81570834587ebd40d1e645d3c287dacb57a232dcfb85c45fa0af36049cd5fe40fbafe4556cd4893f72d36df6d063a220ca920c1329c38d7485d172846952bd1b9f04f28289a12feb902723e990ae2af6195da7e3263ac5889bd1b006e0f97d380388499f39a476ba098ad6a99c99324fb1d70d3a623f16453351db5ed9c8ab322acd8333955d561dff72d951becafbe58308eacfba5b2bb6d6c7ad1eb6452f", 0xa6}, {&(0x7f00000006c0)="f35f86b5504ca1242adfb87d4bda5fd32114302b192052313177afeee856b327b9af1fa5d4254a71ff9abd963d4944c15ef1931de900475a714d649aaf98d72d18f5c15949cb75993acfcb6d9e7c7316afe865a70b8a49a3f1855a06a0d72c9570f12b0d1213a5bc3d6339656a893f41106f64e61fdd36e1c6dc97dafe6e5d964b", 0x81}, {&(0x7f00000001c0)="9583953d90abd8dc790305c118acf14b6b54ee6a66bf4d715e828a1045ad0c968ca70e1848f2fbf709a3eb5fcb2150686b3fe27350faf5d0f25be92cf7c69251298b0c002749e2eec0", 0x49}], 0x3}}], 0x1, 0x4004004)
r4 = socket(0x15, 0x3, 0x5) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x4, 0x0, 0x236, 0x1, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r7, 0x100) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0xbe, 0x8000000000}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)

27.613733966s ago: executing program 4 (id=654):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80803, 0x84) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="db6a535c32b52e81570834587ebd40d1e645d3c287dacb57a232dcfb85c45fa0af36049cd5fe40fbafe4556cd4893f72d36df6d063a220ca920c1329c38d7485d172846952bd1b9f04f28289a12feb902723e990ae2af6195da7e3263ac5889bd1b006e0f97d380388499f39a476ba098ad6a99c99324fb1d70d3a623f16453351db5ed9c8ab322acd8333955d561dff72d951becafbe58308eacfba5b2bb6d6c7ad1eb6452f", 0xa6}, {&(0x7f00000006c0)="f35f86b5504ca1242adfb87d4bda5fd32114302b192052313177afeee856b327b9af1fa5d4254a71ff9abd963d4944c15ef1931de900475a714d649aaf98d72d18f5c15949cb75993acfcb6d9e7c7316afe865a70b8a49a3f1855a06a0d72c9570f12b0d1213a5bc3d6339656a893f41106f64e61fdd36e1c6dc97dafe6e5d964b", 0x81}, {&(0x7f00000001c0)="9583953d90abd8dc790305c118acf14b6b54ee6a66bf4d715e828a1045ad0c968ca70e1848f2fbf709a3eb5fcb2150686b3fe27350faf5d0f25be92cf7c69251298b0c002749e2eec0", 0x49}], 0x3}}], 0x1, 0x4004004)
r4 = socket(0x15, 0x3, 0x5) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x4, 0x0, 0x236, 0x1, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r7, 0x100) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0xbe, 0x8000000000}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)

16.211234436s ago: executing program 4 (id=654):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80803, 0x84) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="db6a535c32b52e81570834587ebd40d1e645d3c287dacb57a232dcfb85c45fa0af36049cd5fe40fbafe4556cd4893f72d36df6d063a220ca920c1329c38d7485d172846952bd1b9f04f28289a12feb902723e990ae2af6195da7e3263ac5889bd1b006e0f97d380388499f39a476ba098ad6a99c99324fb1d70d3a623f16453351db5ed9c8ab322acd8333955d561dff72d951becafbe58308eacfba5b2bb6d6c7ad1eb6452f", 0xa6}, {&(0x7f00000006c0)="f35f86b5504ca1242adfb87d4bda5fd32114302b192052313177afeee856b327b9af1fa5d4254a71ff9abd963d4944c15ef1931de900475a714d649aaf98d72d18f5c15949cb75993acfcb6d9e7c7316afe865a70b8a49a3f1855a06a0d72c9570f12b0d1213a5bc3d6339656a893f41106f64e61fdd36e1c6dc97dafe6e5d964b", 0x81}, {&(0x7f00000001c0)="9583953d90abd8dc790305c118acf14b6b54ee6a66bf4d715e828a1045ad0c968ca70e1848f2fbf709a3eb5fcb2150686b3fe27350faf5d0f25be92cf7c69251298b0c002749e2eec0", 0x49}], 0x3}}], 0x1, 0x4004004)
r4 = socket(0x15, 0x3, 0x5) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x4, 0x0, 0x236, 0x1, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r7, 0x100) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0xbe, 0x8000000000}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)

4.844575256s ago: executing program 4 (id=654):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80803, 0x84) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="db6a535c32b52e81570834587ebd40d1e645d3c287dacb57a232dcfb85c45fa0af36049cd5fe40fbafe4556cd4893f72d36df6d063a220ca920c1329c38d7485d172846952bd1b9f04f28289a12feb902723e990ae2af6195da7e3263ac5889bd1b006e0f97d380388499f39a476ba098ad6a99c99324fb1d70d3a623f16453351db5ed9c8ab322acd8333955d561dff72d951becafbe58308eacfba5b2bb6d6c7ad1eb6452f", 0xa6}, {&(0x7f00000006c0)="f35f86b5504ca1242adfb87d4bda5fd32114302b192052313177afeee856b327b9af1fa5d4254a71ff9abd963d4944c15ef1931de900475a714d649aaf98d72d18f5c15949cb75993acfcb6d9e7c7316afe865a70b8a49a3f1855a06a0d72c9570f12b0d1213a5bc3d6339656a893f41106f64e61fdd36e1c6dc97dafe6e5d964b", 0x81}, {&(0x7f00000001c0)="9583953d90abd8dc790305c118acf14b6b54ee6a66bf4d715e828a1045ad0c968ca70e1848f2fbf709a3eb5fcb2150686b3fe27350faf5d0f25be92cf7c69251298b0c002749e2eec0", 0x49}], 0x3}}], 0x1, 0x4004004)
r4 = socket(0x15, 0x3, 0x5) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xa) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x4, 0x0, 0x236, 0x1, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r7, 0x100) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@capable={0x1e, 0xc, 0x1, 0x8, 0xbe, 0x8000000000}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x14, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)

3.687742507s ago: executing program 1 (id=1246):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0xfffffffffffffe82, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x118, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b666360}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f35}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x37, 0x3, "d71893a4980897198f955b134400027c1fb66e99ad77932c52c9e20c790b39da642136cfed11c6468642479ebfbc44fca0b720"}, @TIPC_NLA_NODE_ID={0x34, 0x3, "5ab5184bac2f98b8efd1100b1808f5350fcb73e343aff7aeddaf31a7432706f0dff850b2ea947f69e3cba46f8a0518d9"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5c65c449d5e1a0453cc96cb0b77b07bea2824976f7b0"}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040800}, 0x400d4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002500)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xf5ff}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x1f, 0x0, 0x600)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="08001497733f5d3ead31a8a708ef4bbedcdd8c1a7af8e7991f92243d30f544d76940c0ffcfe8b5751f0c09276ddadefe731d918f92aaba00000000f91b0a35f9b2e771c2c673b078912d58c0a11a1ffd0819bbb607f9f5e8b04a9b00525d94175a1f4040614beef202624f251af7f06258d059eb1cf9096340aacc17e8e67642c5537150bc1f9a04a4cb531225439e08938f96bba6311b724713", 0x9a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x2004000)

3.585035306s ago: executing program 1 (id=1249):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="79eced8e46dc3f0adf33c9f7b986", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000000a40)=""/102, 0x26, 0x66, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000040)=0x2, 0x4)
setsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44acc14474f16fbe)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x3c, r6, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
write$ppp(r5, &(0x7f0000000280)="d32aca3afd", 0x5)
write$ppp(r5, &(0x7f0000000480)="2f9e4f74f0", 0x5)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0x24000040)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="44c240370bda0000008c1ea6b400000000000000000500000408000100040000090800034000010005080005400000000a089104400000001e0800034000000001080001"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit, @tail_call]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3.51130615s ago: executing program 3 (id=1251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000539c7ea21000030400000010ff0000005f0b70eb", @ANYRES32=0x0, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0xfc, 0x6}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f00000016c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000b40)="518cf972f4602550447422ed8ab8e292d2b9e8f110c883251bad904148ec2972fe137bd155df9280115c15ef84b13e47e1f03396189a1c190470ee546a28d085ff0101000000000070f822e5140fbfb110391250b8a84802dbf4588dc39d82195d48715ca048c7d8c59a24b6243810e456ba666105704711b987f85fb409a72e0b54194f1fd5a802e4692a1d90af11dc51df1ddced4389edb8073eb6f00f3ed16c292f5ba1ca872d781fd40050ce60814a7b3396efbe6fd294f4cd171446572145fe460ae70a488c39d6319c182c4346b63cb07a30b4bfcaccd9dfe7d9c9bb755cbdbcee5caa00000000000000", 0xed}, {&(0x7f0000000d80)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb66be91a4842e42342519a9e795b7d8ae5eff05bd34f2d417ee4148f2f3efb8e13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f81db185fa207b9c91db55092a3c317768237ae4f712188bbb2d032e001595a121e7a759044c8bfc84b4c44a5edc7f31a4abab6f1a8e3a9627c9e7ca1e2e51e4aacee8a00f91a237408fd05d07c396ec7af01efa343afb928af8af76430fe22fcce0ed181faae08f3038e23bd65ff05ce5de53d38b15c8717a698990f18ace9414b68cc98c865ab163257517c2f671dff", 0x176}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cfc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a5400"/232, 0xe8}, {&(0x7f00000000c0)="5cab1cd4386d9e0da57f099176822a04ecde038848f2a14590ae331a739346dc6190b07b965aa699ddce8f182904e77610ec", 0x32}, {&(0x7f0000000580)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e09", 0x2c}, {&(0x7f0000000480)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badeed08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64f", 0x72}, {0x0}], 0x5}}], 0x3, 0x2000c044)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x90)
sendto$inet(r3, &(0x7f0000000540)=';', 0x1, 0x80, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000539c7ea21000030400000010ff0000005f0b70eb", @ANYRES32=0x0, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0xfc, 0x6}]}, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f00000016c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000b40)="518cf972f4602550447422ed8ab8e292d2b9e8f110c883251bad904148ec2972fe137bd155df9280115c15ef84b13e47e1f03396189a1c190470ee546a28d085ff0101000000000070f822e5140fbfb110391250b8a84802dbf4588dc39d82195d48715ca048c7d8c59a24b6243810e456ba666105704711b987f85fb409a72e0b54194f1fd5a802e4692a1d90af11dc51df1ddced4389edb8073eb6f00f3ed16c292f5ba1ca872d781fd40050ce60814a7b3396efbe6fd294f4cd171446572145fe460ae70a488c39d6319c182c4346b63cb07a30b4bfcaccd9dfe7d9c9bb755cbdbcee5caa00000000000000", 0xed}, {&(0x7f0000000d80)="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", 0x176}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cfc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a5400"/232, 0xe8}, {&(0x7f00000000c0)="5cab1cd4386d9e0da57f099176822a04ecde038848f2a14590ae331a739346dc6190b07b965aa699ddce8f182904e77610ec", 0x32}, {&(0x7f0000000580)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e09", 0x2c}, {&(0x7f0000000480)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badeed08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64f", 0x72}, {0x0}], 0x5}}], 0x3, 0x2000c044) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x90) (async)
sendto$inet(r3, &(0x7f0000000540)=';', 0x1, 0x80, 0x0, 0x0) (async)

3.495905956s ago: executing program 0 (id=1252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0)

3.260742573s ago: executing program 0 (id=1253):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="146200000000000000000000000000000000000a20000000000a05000000000000000000070000060000010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073fb2d9a9a3a47d2d300010073797a30000000000800054000000018380000000c0a01010000000000000000070000000900010073797a0003090002007379000000000000000084000a"], 0xbc}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6(0xa, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002", @ANYRES32=r4], 0x48}}, 0x0)
r7 = socket(0x10, 0x80803, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r9, &(0x7f0000000040), 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a)
sendfile(r9, r10, 0x0, 0xffffffff000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
accept4(r9, 0x0, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r9, @ANYRES64=r2, @ANYRES32=r8], 0x1c}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)

3.252360592s ago: executing program 3 (id=1254):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r3, 0x0, 0x1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000900)={'syz_tun\x00', @remote})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001600)={'hsr0\x00', 0x8})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)={0x1064, 0x17, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @generic="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"]}, 0x1064}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
socket$inet(0x2b, 0x801, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140))
pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0xffffffbe}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0)
bind$llc(r8, &(0x7f0000000040)={0x1a, 0x309, 0x7, 0xcf, 0xb3, 0x2, @random="29b400892adf"}, 0x10)

3.017358976s ago: executing program 1 (id=1255):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/88, 0x58}], 0x1}, 0x8}], 0x1, 0x100, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @empty}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18)
connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0xc, 0x12, r5, 0x913e0000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x300000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4c47}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe9b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r9, &(0x7f00000001c0)=0x8000000001ba81, 0xfffffd1a)

2.586680589s ago: executing program 3 (id=1258):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0)
socket(0x3, 0x0, 0x4) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001140)={0x0, 0x2, 0x2, 0x8f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x8}]}, 0x18)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)

2.411755497s ago: executing program 1 (id=1260):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000015c0)={0x3, &(0x7f0000000040)=[{0x120, 0x0, 0x0, 0xfffff024}, {0x28}, {0x6}]}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x209, 0x2}, 0xe)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd339892f6021e467}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r10 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000000200"/20, @ANYRES8=r0, @ANYBLOB="930800000000000000800e0001f95fcf96370616916a5d25e8436d9e60007ac6e03c7273c2616e0000001c0002800502160001000000000011004e21000000", @ANYRESHEX=0x0], 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x10)
ioctl$sock_SIOCGIFCONF(r7, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e24, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x1c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x1}]}, 0x1c}], 0x1}, 0x0)

2.395048127s ago: executing program 3 (id=1261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendfile(r4, r3, 0x0, 0x7ffff000)
ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9c5e25b80f76a873664b5753444fe05f33e5f9104010400003cd6af10f0cd018f0c6f57f926ac", 0xb4, 0x0, 0x0, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r5, &(0x7f0000002080), 0x0, 0x82, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x3}}, 0x24)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
unshare(0x20000400)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd2c, 0x25dfdbff, {0x80, 0x10, 0x80, 0x3, 0xfd, 0x4, 0xc8, 0x8, 0x1400}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4004815)
ppoll(&(0x7f0000000040)=[{r7, 0xa220}, {0xffffffffffffffff, 0x44}, {r7, 0x40}, {r7, 0x1042}, {0xffffffffffffffff, 0x80}, {r7}, {r7, 0x1000}], 0x7, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x13dc]}, 0x8)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000003c0), 0x4)

2.304790762s ago: executing program 2 (id=1262):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fecf00000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a216798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271fefc583eec8912c37562d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de7368ca69f6f8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a113c38159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b2059ba4b923a1188dd61dc7de058a4dfa7e85a8bdf1d41a2d8bd044d66f47cc180f82c5f573c6d294d3645016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4ae52066bb5d4045c958549b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375c936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2c8956573dd4bef60fcf13464ca03aff14a9aa4bd9530243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e1dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd040000000000000034137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c5d904408996ec5db6a4d15b71ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072716bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366517f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff42961f8f3b555d9e8aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b636265aa202c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e8173d3d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000000000000000000000000000005519fe545110a9c01d6f0da7b0731b19ae17b64d6eb1a47675aea60371f629ed3446beb20bf2bab80e451b4139dc6c87e6b395853e42e24b596f636f8c248beeb268dbbf120b26693f73a6362e7c6bff6b08514763f6fbe6c914baf7e25ac7e8d36babeb6c58d012cf7b1ffbe996204af87412b9b21da1dfb01aa5a4ff142deb3bd70d11cf71752bdb33e1dfb6ef107ef3cb0016b2b6dcffb0be5a95d56172098ebf6075cc048f94350e2adb108eabccfae942bbca66ea83139ab4062963be6d549907b17d95b248601322cd8cc6540b6e369c7ebd9b98ec00000000000000d682e3b8635add2f0374c7bc37bb4f7ef54f39814e988b39355e65b4ede991ce83c2b5bf3d00a7dd9c9bbe0cffc6f05dfff9ac36"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x31, &(0x7f0000000240)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0xc, 0x12, r3, 0x913e0000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @random="e6266756da16", @private=0xa010101}}}}, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.111572918s ago: executing program 2 (id=1263):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xfffe], [], 0x0, 0x0, 0xc2, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x60c042, 0x0)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000200)=0x1)
getsockopt$inet6_buf(r3, 0x29, 0x7, 0x0, &(0x7f0000000180))

2.038185141s ago: executing program 0 (id=1264):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000017c00000400fc801000018054717f8008003700", @ANYRES32, @ANYBLOB="ac1b0280a51b72"], 0x1bd4}}, 0xc000)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

1.404966075s ago: executing program 2 (id=1265):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x5e, @multicast1, 0x4e22, 0x0, 'fo\x00', 0x1, 0x0, 0x28}, 0x2c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x5, './file0\x00'}})

631.111284ms ago: executing program 1 (id=1266):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x306)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250800010014000600ff0100000000000000001dffb7108bc6a2962d1e000000000001"], 0x28}}, 0x5)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003"], 0x1c}}, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000b0000d160b0c0ec94e87cf5b153e600"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

611.433824ms ago: executing program 0 (id=1267):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x3ff, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)

564.816015ms ago: executing program 3 (id=1268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250100000004000180100002800c"], 0x28}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb14ca7ab10000000000000c0000000c000000bdffffffffffffffff0000070000000000612e00615f00"], &(0x7f0000000b00)=""/227, 0x2b, 0xe3, 0x0, 0x7f, 0x0, @void, @value}, 0x28)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)={0xe0002008})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x2c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@generic={0x7, 0x5, 0x6, 0x10, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x80000000}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x66be, 0xc5, &(0x7f0000000a00)=""/197, 0x40f00, 0x8, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x2, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, r9], &(0x7f0000000c00)=[{0x4, 0x4, 0xe, 0x3}, {0x5, 0x3, 0x8}, {0x1, 0x5, 0x5, 0x8}, {0x3, 0x5, 0x1, 0xb}, {0x5, 0x1, 0xe, 0xb}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0xfff, @void, @value}, 0x94)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000140)={r12}, 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r12, 0x5c, 0x10}, 0xc)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x170, 0x10, 0x413, 0x0, 0x25dfdbf9, {{@in6=@dev, @in=@remote}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x62}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd2d, 0x70bd25, 0x70bd2d, 0x1, [0x1]}}]}, 0x170}}, 0x0)
recvmmsg(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x11008000}], 0x1, 0x0, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x11)
sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c0019800800020007050000300003802c00018014000300ff01000000000000000000f5ffffff0114000400fc000000000000000000ee927e3d96c697fb008ee70d3183e7b4a681c6723a014e0476f54a817df590030f36f1eff6778530e4f218c389e481d822d1803229d3fa10acdb4512ec3d2177f1e1388045f15ba467bf699092ab055fb9943a583831ad08c24f62e028b906fbb38b8c327cb00db1fb382c88d32f20a5a51e353ba48b3847751c0ca74f94e36776"], 0x50}}, 0x0)

552.698181ms ago: executing program 2 (id=1269):
pselect6(0x40, &(0x7f0000000080)={0x6, 0xdc, 0x2c8, 0x8001, 0x8000000000000001, 0xe7f8, 0x4, 0x3}, &(0x7f0000000340)={0x5000000000000000, 0xfffffffffffffffd, 0x5, 0x9, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000000000000000}, &(0x7f0000000100)={0x4, 0x2, 0x200000003, 0x9, 0x81, 0x7, 0x7fffffffffffffff, 0xa}, &(0x7f0000000140), &(0x7f0000000300)={&(0x7f0000000180)={[0x100000001]}, 0x8})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x44, 0x20, 0x108, 0x70bd2d, 0x25dfdbfb, "", [@generic="1a5f7f4f8b5a0ab5d480d377e451e98ac0c2dfa9c56813cf7e33761d6da9b4483e32", @typed={0xe, 0x71, 0x0, 0x0, @binary="e3776175b5bbc9f89143"}]}, 0x44}], 0x1, 0x0, 0x0, 0x4000040}, 0x0)

421.821502ms ago: executing program 0 (id=1270):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x7c9ce320e12db95)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f7)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, 0x0, 0x480c4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000100)=""/217, &(0x7f0000000200)=0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2a, 0x2, 0x0)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x531b4cdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x10)
sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c02000010000b0500000200000000006f6d8864d22a3e2f00a46c887c090200002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d28", @ANYRES32], 0x22c}], 0x1}, 0x0)

353.033026ms ago: executing program 2 (id=1271):
r0 = socket$netlink(0x10, 0x3, 0x12)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1)

204.439035ms ago: executing program 2 (id=1272):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x7fffffff}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x7fffffff}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r2], 0x30}}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0xffff}, 0x4) (async)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0xffff}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0)
getsockname$packet(r3, 0x0, 0x0) (async)
getsockname$packet(r3, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040))
listen(r5, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$unix(r6, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async)
sendmmsg$unix(r6, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x80a)
close(r5) (async)
close(r5)

142.435696ms ago: executing program 1 (id=1273):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04760146614613a407abbf4ebfe83a63b484dbb3bf6b2a850e7900ff7f0000f98ba19f91f3c938750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc5ad1d5e4ff6e216c724e88c70244858700", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x88, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x40855)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}], 0x1, 0x12141, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000070500"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b0001006d616373656300000c00028005000c000b"], 0x4c}}, 0x0)
r4 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x1}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0xa, 0x1, 0x4, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000500)={'wg1\x00', <r5=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)=r1}, 0x20)
bind$alg(r1, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="ba5a53667037797c97077e352e6243", @ANYRES32=r1, @ANYBLOB="0000000000000000fc027d06fcb50e7d9d99f0ffffffffff8520000001000000185400000b00"/48], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r1, r1, r1, r1, r6, r1, r1, r1], &(0x7f0000000480)=[{0x4, 0x5, 0xc, 0x1}], 0x10, 0xfffffff8, @void, @value}, 0x94)
r7 = accept4(r4, &(0x7f0000000980)=@can, &(0x7f00000006c0)=0x80, 0x80000)
accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000007c0)={@private2, 0x7a, r5})
r8 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000880)=0x124c, 0x4)
sendmmsg$alg(r8, &(0x7f0000000940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

663.963µs ago: executing program 0 (id=1274):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={<r0=>0xffffffffffffffff, 0x7f6c72f, 0x9, 0x8000})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000000240)=""/4096, 0x1000, <r1=>0x0, &(0x7f0000001240)=""/179, 0xb3}}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, &(0x7f0000001380)=@raw=[@call={0x85, 0x0, 0x0, 0x4b}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc4}], &(0x7f00000013c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[0x1], 0x0, 0x10, 0x81, @void, @value}, 0x94)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0x0, 0x5, 0xc}, 0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)}, 0x20)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={0xffffffffffffffff, 0xe8e5, 0x10}, 0xc)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0xffffffffffffffff, 0x8, 0x4}, 0xc)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1a, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x2, 0x0, 0x3, 0x4, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x8000, 0xfe, &(0x7f0000000080)=""/254, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2b, r0, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x6, 0xa3c, 0x72}, 0x10, r1, r2, 0x9, &(0x7f0000001900)=[r3, r4, r5, r6, r7, 0x1, r8, r9, 0x1, r10], &(0x7f0000001940)=[{0x1, 0x3, 0xa, 0x6}, {0x1, 0x3, 0x10, 0x8}, {0xe, 0x5, 0x4, 0x6}, {0x1, 0x2, 0xe, 0x8}, {0x2, 0x3, 0x3, 0x9}, {0x4, 0x3, 0xf, 0x7}, {0x1, 0x3, 0x2, 0x4}, {0x2, 0x3, 0x2, 0x7}, {0x3, 0x2, 0x8, 0x7}], 0x10, 0x0, @void, @value}, 0x94)
r12 = openat$cgroup_ro(r0, &(0x7f0000001b00)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ac0)={@cgroup=r12, r11, 0x12, 0xc, 0x0, @void, @value=r0}, 0x20)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001b40)=0x2002, 0x4)
getsockname$packet(r0, &(0x7f0000001bc0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getnetconf={0x34, 0x52, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r13}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)=@mpls_getnetconf={0x34, 0x52, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffffffff}, @NETCONFA_IFINDEX={0x8, 0x1, r13}, @NETCONFA_IFINDEX={0x8, 0x1, r13}, @NETCONFA_IFINDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x80)
setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000001e00)='bbr\x00', 0x4)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001e40)={0x8a73, <r15=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={r15, 0xb9, 0x10}, 0xc)
r16 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001f00), r4)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r16, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004050}, 0x60008004)
openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x10000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x40, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r17 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'})
r18 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), r18)

0s ago: executing program 3 (id=1275):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
bind$unix(r5, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0xfffe}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

kernel console output (not intermixed with test programs):

0]  should_failslab+0xac/0x100
[  158.149816][ T8890]  ? __kernfs_new_node+0xd8/0x870
[  158.149829][ T8890]  kmem_cache_alloc_noprof+0x70/0x380
[  158.149850][ T8890]  __kernfs_new_node+0xd8/0x870
[  158.149869][ T8890]  ? up_write+0x1a9/0x590
[  158.149884][ T8890]  ? __pfx___kernfs_new_node+0x10/0x10
[  158.149903][ T8890]  ? __pfx_up_write+0x10/0x10
[  158.149931][ T8890]  kernfs_new_node+0x137/0x240
[  158.149951][ T8890]  __kernfs_create_file+0x49/0x2e0
[  158.149971][ T8890]  sysfs_add_file_mode_ns+0x24a/0x310
[  158.149998][ T8890]  internal_create_group+0x782/0x12d0
[  158.150036][ T8890]  ? __pfx_internal_create_group+0x10/0x10
[  158.150071][ T8890]  sysfs_create_groups+0x56/0x120
[  158.150095][ T8890]  device_add_attrs+0x199/0x600
[  158.150116][ T8890]  ? __pfx_device_add_attrs+0x10/0x10
[  158.150130][ T8890]  ? kobject_put+0x446/0x480
[  158.150158][ T8890]  device_add+0x576/0xbf0
[  158.150173][ T8890]  ? device_initialize+0x266/0x460
[  158.150191][ T8890]  wakeup_source_sysfs_add+0x1aa/0x270
[  158.150210][ T8890]  wakeup_source_register+0x171/0x250
[  158.150235][ T8890]  ep_insert+0xd99/0x1ab0
[  158.150272][ T8890]  ? __pfx_ep_insert+0x10/0x10
[  158.150305][ T8890]  ? bpf_lsm_capable+0x9/0x10
[  158.150332][ T8890]  do_epoll_ctl+0x8bc/0xf80
[  158.150362][ T8890]  __x64_sys_epoll_ctl+0x161/0x1a0
[  158.150386][ T8890]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  158.150415][ T8890]  ? do_syscall_64+0x100/0x230
[  158.150439][ T8890]  ? do_syscall_64+0xb6/0x230
[  158.150463][ T8890]  do_syscall_64+0xf3/0x230
[  158.150483][ T8890]  ? clear_bhb_loop+0x35/0x90
[  158.150507][ T8890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.150527][ T8890] RIP: 0033:0x7fc82298cde9
[  158.150543][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.150556][ T8890] RSP: 002b:00007fc8238bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  158.150585][ T8890] RAX: ffffffffffffffda RBX: 00007fc822ba5fa0 RCX: 00007fc82298cde9
[  158.150597][ T8890] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  158.150606][ T8890] RBP: 00007fc8238bf090 R08: 0000000000000000 R09: 0000000000000000
[  158.150616][ T8890] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  158.150626][ T8890] R13: 0000000000000000 R14: 00007fc822ba5fa0 R15: 00007ffea64aded8
[  158.150654][ T8890]  </TASK>
[  158.152380][ T8881] team0: Port device team_slave_0 removed
[  158.467720][ T8881] team0: Port device team_slave_1 removed
[  158.473895][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.481782][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.491015][ T8881] bond0: (slave ip6erspan0): Releasing backup interface
[  158.553543][ T8874] lo speed is unknown, defaulting to 1000
[  158.593846][ T8869] lo speed is unknown, defaulting to 1000
[  158.605216][ T8869] lo speed is unknown, defaulting to 1000
[  158.767294][   T11] hsr_slave_0: left promiscuous mode
[  158.784911][   T11] hsr_slave_1: left promiscuous mode
[  158.791179][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.799298][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.817944][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.833629][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.865269][   T11] veth1_macvtap: left promiscuous mode
[  158.870927][   T11] veth0_macvtap: left promiscuous mode
[  158.876819][   T11] veth1_vlan: left promiscuous mode
[  158.882354][   T11] veth0_vlan: left promiscuous mode
[  158.963720][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'.
[  159.393172][   T54] Bluetooth: hci3: command tx timeout
[  159.576735][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'.
[  159.679398][   T11] team0 (unregistering): Port device team_slave_1 removed
[  159.726949][   T11] team0 (unregistering): Port device team_slave_0 removed
[  160.220651][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'.
[  160.234929][ T8925] bridge3: entered allmulticast mode
[  160.431930][ T8869] chnl_net:caif_netlink_parms(): no params data found
[  160.475583][ T8939] FAULT_INJECTION: forcing a failure.
[  160.475583][ T8939] name failslab, interval 1, probability 0, space 0, times 0
[  160.497417][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.2.830 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  160.497442][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  160.497451][ T8939] Call Trace:
[  160.497457][ T8939]  <TASK>
[  160.497464][ T8939]  dump_stack_lvl+0x241/0x360
[  160.497488][ T8939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.497503][ T8939]  ? __pfx__printk+0x10/0x10
[  160.497526][ T8939]  ? kmem_cache_alloc_noprof+0x48/0x380
[  160.497544][ T8939]  ? __pfx___might_resched+0x10/0x10
[  160.497568][ T8939]  should_fail_ex+0x40a/0x550
[  160.497591][ T8939]  should_failslab+0xac/0x100
[  160.497609][ T8939]  ? __kernfs_new_node+0xd8/0x870
[  160.497623][ T8939]  kmem_cache_alloc_noprof+0x70/0x380
[  160.497645][ T8939]  __kernfs_new_node+0xd8/0x870
[  160.497667][ T8939]  ? up_write+0x1a9/0x590
[  160.497682][ T8939]  ? __pfx___kernfs_new_node+0x10/0x10
[  160.497702][ T8939]  ? __pfx_up_write+0x10/0x10
[  160.497732][ T8939]  kernfs_new_node+0x137/0x240
[  160.497752][ T8939]  __kernfs_create_file+0x49/0x2e0
[  160.497774][ T8939]  sysfs_add_file_mode_ns+0x24a/0x310
[  160.497801][ T8939]  internal_create_group+0x782/0x12d0
[  160.497839][ T8939]  ? __pfx_internal_create_group+0x10/0x10
[  160.497873][ T8939]  sysfs_create_groups+0x56/0x120
[  160.497898][ T8939]  device_add_attrs+0x199/0x600
[  160.497918][ T8939]  ? __pfx_device_add_attrs+0x10/0x10
[  160.497933][ T8939]  ? kobject_put+0x446/0x480
[  160.497965][ T8939]  device_add+0x576/0xbf0
[  160.497990][ T8939]  ? device_initialize+0x266/0x460
[  160.498009][ T8939]  wakeup_source_sysfs_add+0x1aa/0x270
[  160.498027][ T8939]  wakeup_source_register+0x171/0x250
[  160.498052][ T8939]  ep_insert+0xd99/0x1ab0
[  160.498086][ T8939]  ? __pfx_ep_insert+0x10/0x10
[  160.498120][ T8939]  ? bpf_lsm_capable+0x9/0x10
[  160.498146][ T8939]  do_epoll_ctl+0x8bc/0xf80
[  160.498176][ T8939]  __x64_sys_epoll_ctl+0x161/0x1a0
[  160.498199][ T8939]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  160.498221][ T8939]  ? do_syscall_64+0x100/0x230
[  160.498243][ T8939]  ? do_syscall_64+0xb6/0x230
[  160.498267][ T8939]  do_syscall_64+0xf3/0x230
[  160.498287][ T8939]  ? clear_bhb_loop+0x35/0x90
[  160.498311][ T8939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.498330][ T8939] RIP: 0033:0x7f709218cde9
[  160.498345][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.498358][ T8939] RSP: 002b:00007f7093020038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  160.498377][ T8939] RAX: ffffffffffffffda RBX: 00007f70923a5fa0 RCX: 00007f709218cde9
[  160.498388][ T8939] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  160.498397][ T8939] RBP: 00007f7093020090 R08: 0000000000000000 R09: 0000000000000000
[  160.498407][ T8939] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  160.498416][ T8939] R13: 0000000000000000 R14: 00007f70923a5fa0 R15: 00007ffdfa5c0518
[  160.498440][ T8939]  </TASK>
[  160.830865][ T8950] netlink: 'syz.1.833': attribute type 21 has an invalid length.
[  160.911254][ T8953] lo speed is unknown, defaulting to 1000
[  160.919223][ T8953] lo speed is unknown, defaulting to 1000
[  160.998255][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.018538][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.028529][ T8869] bridge_slave_0: entered allmulticast mode
[  161.038566][ T8869] bridge_slave_0: entered promiscuous mode
[  161.082939][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.090194][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.097988][ T8869] bridge_slave_1: entered allmulticast mode
[  161.107491][ T8869] bridge_slave_1: entered promiscuous mode
[  161.236762][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.290571][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.331674][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  161.340918][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  161.387993][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'.
[  161.433006][ T8869] team0: Port device team_slave_0 added
[  161.453213][ T8869] team0: Port device team_slave_1 added
[  161.473029][   T54] Bluetooth: hci3: command tx timeout
[  161.795949][ T8976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.819639][ T8976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.847569][ T8976] bond0 (unregistering): Released all slaves
[  161.895533][ T8979] bridge0: port 1(hsr0) entered blocking state
[  161.903088][ T8979] bridge0: port 1(hsr0) entered disabled state
[  161.909806][ T8979] hsr0: entered allmulticast mode
[  161.922838][ T8979] hsr_slave_0: entered allmulticast mode
[  161.944322][ T8979] hsr0: entered promiscuous mode
[  161.962920][ T8979] bridge0: port 1(hsr0) entered blocking state
[  161.969283][ T8979] bridge0: port 1(hsr0) entered forwarding state
[  162.030870][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.060885][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.094974][ T8869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.146633][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.161294][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.174261][ T8992] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.216587][ T8869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.238033][ T8993] FAULT_INJECTION: forcing a failure.
[  162.238033][ T8993] name failslab, interval 1, probability 0, space 0, times 0
[  162.259403][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.3.844 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  162.259430][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  162.259440][ T8993] Call Trace:
[  162.259446][ T8993]  <TASK>
[  162.259454][ T8993]  dump_stack_lvl+0x241/0x360
[  162.259480][ T8993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.259497][ T8993]  ? __pfx__printk+0x10/0x10
[  162.259522][ T8993]  ? __kmalloc_noprof+0xb5/0x4c0
[  162.259541][ T8993]  ? __pfx___might_resched+0x10/0x10
[  162.259565][ T8993]  should_fail_ex+0x40a/0x550
[  162.259589][ T8993]  should_failslab+0xac/0x100
[  162.259606][ T8993]  __kmalloc_noprof+0xdd/0x4c0
[  162.259622][ T8993]  ? kobject_get_path+0xb8/0x230
[  162.259649][ T8993]  kobject_get_path+0xb8/0x230
[  162.259675][ T8993]  kobject_uevent_env+0x2a5/0x8e0
[  162.259690][ T8993]  ? bus_add_device+0xde/0x460
[  162.259721][ T8993]  device_add+0x63b/0xbf0
[  162.259744][ T8993]  wakeup_source_sysfs_add+0x1aa/0x270
[  162.259763][ T8993]  wakeup_source_register+0x171/0x250
[  162.259788][ T8993]  ep_insert+0xd99/0x1ab0
[  162.259825][ T8993]  ? __pfx_ep_insert+0x10/0x10
[  162.259858][ T8993]  ? bpf_lsm_capable+0x9/0x10
[  162.259885][ T8993]  do_epoll_ctl+0x8bc/0xf80
[  162.259921][ T8993]  __x64_sys_epoll_ctl+0x161/0x1a0
[  162.259946][ T8993]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  162.259969][ T8993]  ? do_syscall_64+0x100/0x230
[  162.259993][ T8993]  ? do_syscall_64+0xb6/0x230
[  162.260016][ T8993]  do_syscall_64+0xf3/0x230
[  162.260037][ T8993]  ? clear_bhb_loop+0x35/0x90
[  162.260062][ T8993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.260081][ T8993] RIP: 0033:0x7fc82298cde9
[  162.260097][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.260111][ T8993] RSP: 002b:00007fc82389e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  162.260130][ T8993] RAX: ffffffffffffffda RBX: 00007fc822ba6080 RCX: 00007fc82298cde9
[  162.260142][ T8993] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  162.260152][ T8993] RBP: 00007fc82389e090 R08: 0000000000000000 R09: 0000000000000000
[  162.260163][ T8993] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  162.260173][ T8993] R13: 0000000000000000 R14: 00007fc822ba6080 R15: 00007ffea64aded8
[  162.260201][ T8993]  </TASK>
[  162.563670][ T8869] hsr_slave_0: entered promiscuous mode
[  162.570106][ T8869] hsr_slave_1: entered promiscuous mode
[  162.576652][ T8869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.584345][ T8869] Cannot create hsr debugfs directory
[  162.704288][ T8998] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.847'.
[  162.750858][ T8998] openvswitch: netlink: Message has 44053 unknown bytes.
[  163.329299][ T8869] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  163.356922][ T8869] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  163.371999][ T8869] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  163.403628][ T8869] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  163.460283][ T9042] netlink: 14 bytes leftover after parsing attributes in process `syz.2.863'.
[  163.553408][   T54] Bluetooth: hci3: command tx timeout
[  163.656187][ T9046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.714086][ T9055] FAULT_INJECTION: forcing a failure.
[  163.714086][ T9055] name failslab, interval 1, probability 0, space 0, times 0
[  163.726337][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.757070][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.1.866 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  163.757099][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  163.757109][ T9055] Call Trace:
[  163.757116][ T9055]  <TASK>
[  163.757123][ T9055]  dump_stack_lvl+0x241/0x360
[  163.757150][ T9055]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.757167][ T9055]  ? __pfx__printk+0x10/0x10
[  163.757194][ T9055]  ? __kmalloc_noprof+0xb5/0x4c0
[  163.757212][ T9055]  ? __pfx___might_resched+0x10/0x10
[  163.757237][ T9055]  should_fail_ex+0x40a/0x550
[  163.757260][ T9055]  should_failslab+0xac/0x100
[  163.757279][ T9055]  __kmalloc_noprof+0xdd/0x4c0
[  163.757295][ T9055]  ? kobject_get_path+0xb8/0x230
[  163.757322][ T9055]  kobject_get_path+0xb8/0x230
[  163.757347][ T9055]  kobject_uevent_env+0x2a5/0x8e0
[  163.757362][ T9055]  ? bus_add_device+0xde/0x460
[  163.757391][ T9055]  device_add+0x63b/0xbf0
[  163.757414][ T9055]  wakeup_source_sysfs_add+0x1aa/0x270
[  163.757446][ T9055]  wakeup_source_register+0x171/0x250
[  163.757472][ T9055]  ep_insert+0xd99/0x1ab0
[  163.757509][ T9055]  ? __pfx_ep_insert+0x10/0x10
[  163.757542][ T9055]  ? bpf_lsm_capable+0x9/0x10
[  163.757569][ T9055]  do_epoll_ctl+0x8bc/0xf80
[  163.757599][ T9055]  __x64_sys_epoll_ctl+0x161/0x1a0
[  163.757623][ T9055]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  163.757645][ T9055]  ? do_syscall_64+0x100/0x230
[  163.757669][ T9055]  ? do_syscall_64+0xb6/0x230
[  163.757692][ T9055]  do_syscall_64+0xf3/0x230
[  163.757720][ T9055]  ? clear_bhb_loop+0x35/0x90
[  163.757745][ T9055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.757765][ T9055] RIP: 0033:0x7f265c78cde9
[  163.757780][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.757794][ T9055] RSP: 002b:00007f265a5f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  163.757812][ T9055] RAX: ffffffffffffffda RBX: 00007f265c9a6080 RCX: 00007f265c78cde9
[  163.757824][ T9055] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  163.757834][ T9055] RBP: 00007f265a5f6090 R08: 0000000000000000 R09: 0000000000000000
[  163.757844][ T9055] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  163.757855][ T9055] R13: 0000000000000000 R14: 00007f265c9a6080 R15: 00007fffd4323108
[  163.757882][ T9055]  </TASK>
[  164.049335][ T9046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.077917][ T8869] 8021q: adding VLAN 0 to HW filter on device team0
[  164.120956][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.128169][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.208625][ T9046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.236638][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.243753][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.330014][ T9046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.378448][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'.
[  164.455454][ T9046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.467737][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.495307][ T9046] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.532468][ T9046] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.565806][ T9046] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.650612][ T8869] veth0_vlan: entered promiscuous mode
[  164.697613][ T8869] veth1_vlan: entered promiscuous mode
[  164.734236][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'.
[  164.751104][ T8869] veth0_macvtap: entered promiscuous mode
[  164.763068][ T8869] veth1_macvtap: entered promiscuous mode
[  164.789463][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.800808][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.811224][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.880246][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.904021][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.929750][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.944360][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.954474][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.978605][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.990916][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.011295][ T9106] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�zR'
[  165.026833][ T9106] CPU: 1 UID: 0 PID: 9106 Comm: syz.2.880 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  165.026861][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  165.026872][ T9106] Call Trace:
[  165.026878][ T9106]  <TASK>
[  165.026894][ T9106]  dump_stack_lvl+0x241/0x360
[  165.026922][ T9106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.026941][ T9106]  ? __pfx__printk+0x10/0x10
[  165.026973][ T9106]  ? __kmalloc_cache_noprof+0x243/0x390
[  165.026992][ T9106]  ? sysfs_warn_dup+0x51/0xa0
[  165.027020][ T9106]  sysfs_warn_dup+0x8e/0xa0
[  165.027043][ T9106]  sysfs_do_create_link_sd+0xbe/0x110
[  165.027070][ T9106]  device_add_class_symlinks+0x1c5/0x250
[  165.027092][ T9106]  device_add+0x553/0xbf0
[  165.027116][ T9106]  wiphy_register+0x1a58/0x27b0
[  165.027152][ T9106]  ? __pfx_wiphy_register+0x10/0x10
[  165.027169][ T9106]  ? minstrel_ht_alloc+0x72b/0x860
[  165.027198][ T9106]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  165.027225][ T9106]  ieee80211_register_hw+0x354e/0x4240
[  165.027262][ T9106]  ? ieee80211_register_hw+0x1661/0x4240
[  165.027293][ T9106]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  165.027328][ T9106]  ? __asan_memset+0x23/0x50
[  165.027349][ T9106]  ? __hrtimer_init+0x170/0x250
[  165.027378][ T9106]  mac80211_hwsim_new_radio+0x2a9f/0x4aa0
[  165.027435][ T9106]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  165.027458][ T9106]  ? kstrndup+0x5c/0xb0
[  165.027478][ T9106]  ? __asan_memcpy+0x40/0x70
[  165.027505][ T9106]  hwsim_new_radio_nl+0xece/0x2290
[  165.027542][ T9106]  ? __pfx___nla_validate_parse+0x10/0x10
[  165.027570][ T9106]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  165.027631][ T9106]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  165.027663][ T9106]  genl_rcv_msg+0xb14/0xec0
[  165.027693][ T9106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.027744][ T9106]  ? __pfx_lock_acquire+0x10/0x10
[  165.027766][ T9106]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  165.027791][ T9106]  ? __pfx___might_resched+0x10/0x10
[  165.027823][ T9106]  netlink_rcv_skb+0x1e3/0x430
[  165.027841][ T9106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.027863][ T9106]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.027922][ T9106]  genl_rcv+0x28/0x40
[  165.027941][ T9106]  netlink_unicast+0x7f6/0x990
[  165.027975][ T9106]  ? __pfx_netlink_unicast+0x10/0x10
[  165.027997][ T9106]  ? __virt_addr_valid+0x45f/0x530
[  165.028023][ T9106]  ? __phys_addr_symbol+0x2f/0x70
[  165.028046][ T9106]  ? __check_object_size+0x47a/0x730
[  165.028069][ T9106]  netlink_sendmsg+0x8e4/0xcb0
[  165.028100][ T9106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.028123][ T9106]  ? aa_sock_msg_perm+0x91/0x160
[  165.028151][ T9106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.028166][ T9106]  __sock_sendmsg+0x221/0x270
[  165.028191][ T9106]  ____sys_sendmsg+0x52a/0x7e0
[  165.028218][ T9106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.028232][ T9106]  ? __fget_files+0x2a/0x410
[  165.028254][ T9106]  ? __fget_files+0x2a/0x410
[  165.028283][ T9106]  __sys_sendmsg+0x269/0x350
[  165.028306][ T9106]  ? __pfx___sys_sendmsg+0x10/0x10
[  165.028372][ T9106]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  165.028397][ T9106]  ? do_syscall_64+0x100/0x230
[  165.028423][ T9106]  ? do_syscall_64+0xb6/0x230
[  165.028449][ T9106]  do_syscall_64+0xf3/0x230
[  165.028470][ T9106]  ? clear_bhb_loop+0x35/0x90
[  165.028497][ T9106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.028518][ T9106] RIP: 0033:0x7f709218cde9
[  165.028534][ T9106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.028549][ T9106] RSP: 002b:00007f7092fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.028567][ T9106] RAX: ffffffffffffffda RBX: 00007f70923a6080 RCX: 00007f709218cde9
[  165.028580][ T9106] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008
[  165.028591][ T9106] RBP: 00007f709220e2a0 R08: 0000000000000000 R09: 0000000000000000
[  165.028602][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.028614][ T9106] R13: 0000000000000000 R14: 00007f70923a6080 R15: 00007ffdfa5c0518
[  165.028642][ T9106]  </TASK>
[  165.037127][ T8869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.072006][ T9065] delete_channel: no stack
[  165.079643][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'.
[  165.178068][ T8869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.464580][ T8869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.475601][ T8869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.499275][ T9114] lo speed is unknown, defaulting to 1000
[  165.595513][ T9114] lo speed is unknown, defaulting to 1000
[  165.634164][   T54] Bluetooth: hci3: command tx timeout
[  165.711163][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'.
[  165.727512][ T9118] FAULT_INJECTION: forcing a failure.
[  165.727512][ T9118] name failslab, interval 1, probability 0, space 0, times 0
[  165.780207][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.789317][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.805247][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.1.885 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  165.805275][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  165.805285][ T9118] Call Trace:
[  165.805291][ T9118]  <TASK>
[  165.805300][ T9118]  dump_stack_lvl+0x241/0x360
[  165.805325][ T9118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.805343][ T9118]  ? __pfx__printk+0x10/0x10
[  165.805369][ T9118]  ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0
[  165.805391][ T9118]  ? __pfx___might_resched+0x10/0x10
[  165.805414][ T9118]  should_fail_ex+0x40a/0x550
[  165.805438][ T9118]  should_failslab+0xac/0x100
[  165.805457][ T9118]  __kmalloc_node_track_caller_noprof+0xdc/0x4c0
[  165.805475][ T9118]  ? wakeup_source_register+0x70/0x250
[  165.805502][ T9118]  kstrdup+0x39/0xb0
[  165.805522][ T9118]  wakeup_source_register+0x70/0x250
[  165.805548][ T9118]  ep_insert+0xe94/0x1ab0
[  165.805585][ T9118]  ? __pfx_ep_insert+0x10/0x10
[  165.805617][ T9118]  ? bpf_lsm_capable+0x9/0x10
[  165.805644][ T9118]  do_epoll_ctl+0x8bc/0xf80
[  165.805675][ T9118]  __x64_sys_epoll_ctl+0x161/0x1a0
[  165.805699][ T9118]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  165.805722][ T9118]  ? do_syscall_64+0x100/0x230
[  165.805746][ T9118]  ? do_syscall_64+0xb6/0x230
[  165.805769][ T9118]  do_syscall_64+0xf3/0x230
[  165.805790][ T9118]  ? clear_bhb_loop+0x35/0x90
[  165.805814][ T9118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.805834][ T9118] RIP: 0033:0x7f265c78cde9
[  165.805851][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.805874][ T9118] RSP: 002b:00007f265d505038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  165.805893][ T9118] RAX: ffffffffffffffda RBX: 00007f265c9a5fa0 RCX: 00007f265c78cde9
[  165.805904][ T9118] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  165.805914][ T9118] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  165.805925][ T9118] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  165.805936][ T9118] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  165.805964][ T9118]  </TASK>
[  165.911933][ T9124] netlink: 'syz.3.886': attribute type 39 has an invalid length.
[  166.085971][ T9128] FAULT_INJECTION: forcing a failure.
[  166.085971][ T9128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.099528][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.1.887 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  166.099551][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  166.099559][ T9128] Call Trace:
[  166.099565][ T9128]  <TASK>
[  166.099572][ T9128]  dump_stack_lvl+0x241/0x360
[  166.099596][ T9128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.099611][ T9128]  ? __pfx__printk+0x10/0x10
[  166.099635][ T9128]  ? __pfx_lock_release+0x10/0x10
[  166.099663][ T9128]  should_fail_ex+0x40a/0x550
[  166.099684][ T9128]  _copy_from_user+0x2d/0xb0
[  166.099699][ T9128]  copy_msghdr_from_user+0xae/0x680
[  166.099720][ T9128]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  166.099736][ T9128]  ? __fget_files+0x2a/0x410
[  166.099756][ T9128]  ? __fget_files+0x2a/0x410
[  166.099779][ T9128]  __sys_sendmsg+0x209/0x350
[  166.099801][ T9128]  ? __pfx___sys_sendmsg+0x10/0x10
[  166.099826][ T9128]  ? do_sys_openat2+0x17a/0x1d0
[  166.099874][ T9128]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  166.099895][ T9128]  ? do_syscall_64+0x100/0x230
[  166.099918][ T9128]  ? do_syscall_64+0xb6/0x230
[  166.099940][ T9128]  do_syscall_64+0xf3/0x230
[  166.099960][ T9128]  ? clear_bhb_loop+0x35/0x90
[  166.099984][ T9128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.100003][ T9128] RIP: 0033:0x7f265c78cde9
[  166.100019][ T9128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.100032][ T9128] RSP: 002b:00007f265d505038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.100050][ T9128] RAX: ffffffffffffffda RBX: 00007f265c9a5fa0 RCX: 00007f265c78cde9
[  166.100062][ T9128] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000005
[  166.100071][ T9128] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  166.100079][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.100087][ T9128] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  166.100110][ T9128]  </TASK>
[  166.114355][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  166.134077][ T9111] delete_channel: no stack
[  166.354316][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.366355][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.549203][ T5887] IPVS: starting estimator thread 0...
[  166.642878][ T9139] IPVS: using max 26 ests per chain, 62400 per kthread
[  166.706355][ T9130] netlink: 96 bytes leftover after parsing attributes in process `syz.1.888'.
[  167.109068][ T9154] rdma_rxe: rxe_newlink: failed to add lo
[  167.315578][ T4256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.620216][ T9145] delete_channel: no stack
[  167.627936][ T4256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.701420][ T4256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.790885][ T4256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.945577][ T4256] bridge_slave_1: left allmulticast mode
[  167.951276][ T4256] bridge_slave_1: left promiscuous mode
[  167.962129][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.991699][ T9162] FAULT_INJECTION: forcing a failure.
[  167.991699][ T9162] name failslab, interval 1, probability 0, space 0, times 0
[  167.992899][ T9163] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  168.015291][ T4256] bridge_slave_0: left allmulticast mode
[  168.020971][ T4256] bridge_slave_0: left promiscuous mode
[  168.033160][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.0.897 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  168.033185][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  168.033196][ T9162] Call Trace:
[  168.033202][ T9162]  <TASK>
[  168.033209][ T9162]  dump_stack_lvl+0x241/0x360
[  168.033235][ T9162]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.033252][ T9162]  ? __pfx__printk+0x10/0x10
[  168.033278][ T9162]  ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0
[  168.033299][ T9162]  ? __pfx___might_resched+0x10/0x10
[  168.033322][ T9162]  should_fail_ex+0x40a/0x550
[  168.033346][ T9162]  should_failslab+0xac/0x100
[  168.033365][ T9162]  __kmalloc_node_track_caller_noprof+0xdc/0x4c0
[  168.033384][ T9162]  ? wakeup_source_register+0x70/0x250
[  168.033432][ T9162]  kstrdup+0x39/0xb0
[  168.033459][ T9162]  wakeup_source_register+0x70/0x250
[  168.033485][ T9162]  ep_insert+0xe94/0x1ab0
[  168.033521][ T9162]  ? __pfx_ep_insert+0x10/0x10
[  168.033555][ T9162]  ? bpf_lsm_capable+0x9/0x10
[  168.033582][ T9162]  do_epoll_ctl+0x8bc/0xf80
[  168.033613][ T9162]  __x64_sys_epoll_ctl+0x161/0x1a0
[  168.033637][ T9162]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  168.033659][ T9162]  ? do_syscall_64+0x100/0x230
[  168.033684][ T9162]  ? do_syscall_64+0xb6/0x230
[  168.033707][ T9162]  do_syscall_64+0xf3/0x230
[  168.033728][ T9162]  ? clear_bhb_loop+0x35/0x90
[  168.033752][ T9162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.033773][ T9162] RIP: 0033:0x7f0a22d8cde9
[  168.033788][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.033802][ T9162] RSP: 002b:00007f0a23b2a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  168.033821][ T9162] RAX: ffffffffffffffda RBX: 00007f0a22fa5fa0 RCX: 00007f0a22d8cde9
[  168.033833][ T9162] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  168.033842][ T9162] RBP: 00007f0a23b2a090 R08: 0000000000000000 R09: 0000000000000000
[  168.033853][ T9162] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  168.033863][ T9162] R13: 0000000000000000 R14: 00007f0a22fa5fa0 R15: 00007ffd94051308
[  168.033891][ T9162]  </TASK>
[  168.264338][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.684784][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.706322][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.716349][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.724492][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.732173][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  168.739795][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.870353][ T9192] FAULT_INJECTION: forcing a failure.
[  168.870353][ T9192] name failslab, interval 1, probability 0, space 0, times 0
[  168.884473][ T9192] CPU: 1 UID: 0 PID: 9192 Comm: syz.1.904 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  168.884496][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  168.884504][ T9192] Call Trace:
[  168.884510][ T9192]  <TASK>
[  168.884516][ T9192]  dump_stack_lvl+0x241/0x360
[  168.884539][ T9192]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.884553][ T9192]  ? __pfx__printk+0x10/0x10
[  168.884574][ T9192]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  168.884591][ T9192]  ? __pfx___might_resched+0x10/0x10
[  168.884610][ T9192]  should_fail_ex+0x40a/0x550
[  168.884630][ T9192]  should_failslab+0xac/0x100
[  168.884645][ T9192]  kmem_cache_alloc_node_noprof+0x77/0x380
[  168.884659][ T9192]  ? __alloc_skb+0x1c3/0x440
[  168.884680][ T9192]  __alloc_skb+0x1c3/0x440
[  168.884702][ T9192]  ? __pfx___alloc_skb+0x10/0x10
[  168.884721][ T9192]  ? netlink_autobind+0xd6/0x2f0
[  168.884735][ T9192]  ? netlink_autobind+0x2b0/0x2f0
[  168.884751][ T9192]  netlink_sendmsg+0x638/0xcb0
[  168.884774][ T9192]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.884790][ T9192]  ? aa_sock_msg_perm+0x91/0x160
[  168.884813][ T9192]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.884825][ T9192]  __sock_sendmsg+0x221/0x270
[  168.884844][ T9192]  ____sys_sendmsg+0x52a/0x7e0
[  168.884863][ T9192]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.884875][ T9192]  ? __fget_files+0x2a/0x410
[  168.884892][ T9192]  ? __fget_files+0x2a/0x410
[  168.884912][ T9192]  __sys_sendmsg+0x269/0x350
[  168.884930][ T9192]  ? __pfx___sys_sendmsg+0x10/0x10
[  168.884953][ T9192]  ? do_sys_openat2+0x17a/0x1d0
[  168.884988][ T9192]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  168.885007][ T9192]  ? do_syscall_64+0x100/0x230
[  168.885028][ T9192]  ? do_syscall_64+0xb6/0x230
[  168.885047][ T9192]  do_syscall_64+0xf3/0x230
[  168.885064][ T9192]  ? clear_bhb_loop+0x35/0x90
[  168.885085][ T9192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.885102][ T9192] RIP: 0033:0x7f265c78cde9
[  168.885117][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.885128][ T9192] RSP: 002b:00007f265d505038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.885145][ T9192] RAX: ffffffffffffffda RBX: 00007f265c9a5fa0 RCX: 00007f265c78cde9
[  168.885155][ T9192] RDX: 0000000004000000 RSI: 0000400000000780 RDI: 0000000000000007
[  168.885164][ T9192] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  168.885172][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.885181][ T9192] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  168.885203][ T9192]  </TASK>
[  169.276478][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.288446][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.299132][ T4256] bond0 (unregistering): Released all slaves
[  169.354053][ T9187] lo speed is unknown, defaulting to 1000
[  169.361703][ T9187] lo speed is unknown, defaulting to 1000
[  169.604101][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'.
[  169.673139][ T9187] chnl_net:caif_netlink_parms(): no params data found
[  170.049882][ T4256] hsr_slave_0: left promiscuous mode
[  170.064624][ T4256] hsr_slave_1: left promiscuous mode
[  170.073157][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.080708][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.093535][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.112407][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.166514][ T4256] veth1_macvtap: left promiscuous mode
[  170.198145][ T4256] veth0_macvtap: left promiscuous mode
[  170.213130][ T4256] veth1_vlan: left promiscuous mode
[  170.218585][ T4256] veth0_vlan: left promiscuous mode
[  170.344311][ T9206] delete_channel: no stack
[  170.806200][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  170.845623][ T5840] Bluetooth: hci3: command tx timeout
[  170.853400][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  171.271185][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.279173][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.286705][ T9187] bridge_slave_0: entered allmulticast mode
[  171.294181][ T9187] bridge_slave_0: entered promiscuous mode
[  171.304285][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.311389][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.319424][ T9187] bridge_slave_1: entered allmulticast mode
[  171.327115][ T9187] bridge_slave_1: entered promiscuous mode
[  171.334571][ T9244] netlink: 'syz.1.920': attribute type 12 has an invalid length.
[  171.441299][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.474366][ T9240] lo speed is unknown, defaulting to 1000
[  171.494295][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.553890][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'.
[  171.609683][ T9257] FAULT_INJECTION: forcing a failure.
[  171.609683][ T9257] name failslab, interval 1, probability 0, space 0, times 0
[  171.634926][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.1.924 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  171.634953][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  171.634963][ T9257] Call Trace:
[  171.634969][ T9257]  <TASK>
[  171.634976][ T9257]  dump_stack_lvl+0x241/0x360
[  171.634999][ T9257]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.635015][ T9257]  ? __pfx__printk+0x10/0x10
[  171.635047][ T9257]  should_fail_ex+0x40a/0x550
[  171.635068][ T9257]  should_failslab+0xac/0x100
[  171.635084][ T9257]  ? skb_clone+0x20c/0x390
[  171.635097][ T9257]  kmem_cache_alloc_noprof+0x70/0x380
[  171.635117][ T9257]  skb_clone+0x20c/0x390
[  171.635134][ T9257]  __netlink_deliver_tap+0x3cc/0x7f0
[  171.635224][ T9257]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.635238][ T9257]  netlink_deliver_tap+0x19d/0x1b0
[  171.635252][ T9257]  netlink_unicast+0x7c4/0x990
[  171.635280][ T9257]  ? __pfx_netlink_unicast+0x10/0x10
[  171.635297][ T9257]  ? __virt_addr_valid+0x45f/0x530
[  171.635317][ T9257]  ? __phys_addr_symbol+0x2f/0x70
[  171.635335][ T9257]  ? __check_object_size+0x47a/0x730
[  171.635354][ T9257]  netlink_sendmsg+0x8e4/0xcb0
[  171.635379][ T9257]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.635396][ T9257]  ? aa_sock_msg_perm+0x91/0x160
[  171.635484][ T9257]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.635499][ T9257]  __sock_sendmsg+0x221/0x270
[  171.635524][ T9257]  ____sys_sendmsg+0x52a/0x7e0
[  171.635546][ T9257]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.635558][ T9257]  ? __fget_files+0x2a/0x410
[  171.635577][ T9257]  ? __fget_files+0x2a/0x410
[  171.635599][ T9257]  __sys_sendmsg+0x269/0x350
[  171.635618][ T9257]  ? __pfx___sys_sendmsg+0x10/0x10
[  171.635643][ T9257]  ? do_sys_openat2+0x17a/0x1d0
[  171.635682][ T9257]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  171.635703][ T9257]  ? do_syscall_64+0x100/0x230
[  171.635724][ T9257]  ? do_syscall_64+0xb6/0x230
[  171.635745][ T9257]  do_syscall_64+0xf3/0x230
[  171.635763][ T9257]  ? clear_bhb_loop+0x35/0x90
[  171.635784][ T9257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.635802][ T9257] RIP: 0033:0x7f265c78cde9
[  171.635817][ T9257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.635829][ T9257] RSP: 002b:00007f265d505038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.635846][ T9257] RAX: ffffffffffffffda RBX: 00007f265c9a5fa0 RCX: 00007f265c78cde9
[  171.635857][ T9257] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000005
[  171.635866][ T9257] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  171.635875][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.635884][ T9257] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  171.635908][ T9257]  </TASK>
[  171.939673][ T9240] lo speed is unknown, defaulting to 1000
[  171.950497][ T9257] unknown channel width for channel at 909000KHz?
[  171.963777][ T9257] unknown channel width for channel at 909000KHz?
[  171.971599][ T9257] unknown channel width for channel at 909000KHz?
[  171.977648][ T9187] team0: Port device team_slave_0 added
[  171.996554][ T9266] FAULT_INJECTION: forcing a failure.
[  171.996554][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.022109][ T9187] team0: Port device team_slave_1 added
[  172.022776][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.2.928 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  172.022799][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  172.022809][ T9266] Call Trace:
[  172.022816][ T9266]  <TASK>
[  172.022823][ T9266]  dump_stack_lvl+0x241/0x360
[  172.022847][ T9266]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.022864][ T9266]  ? __pfx__printk+0x10/0x10
[  172.022889][ T9266]  ? __pfx_lock_release+0x10/0x10
[  172.022918][ T9266]  should_fail_ex+0x40a/0x550
[  172.022940][ T9266]  _copy_from_iter+0x1e9/0x1c20
[  172.022962][ T9266]  ? __virt_addr_valid+0x183/0x530
[  172.022993][ T9266]  ? __alloc_skb+0x28f/0x440
[  172.023014][ T9266]  ? __pfx__copy_from_iter+0x10/0x10
[  172.023037][ T9266]  ? __virt_addr_valid+0x183/0x530
[  172.023057][ T9266]  ? __virt_addr_valid+0x183/0x530
[  172.023077][ T9266]  ? __virt_addr_valid+0x45f/0x530
[  172.023098][ T9266]  ? __phys_addr_symbol+0x2f/0x70
[  172.023119][ T9266]  ? __check_object_size+0x47a/0x730
[  172.023138][ T9266]  netlink_sendmsg+0x73d/0xcb0
[  172.023173][ T9266]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.023193][ T9266]  ? aa_sock_msg_perm+0x91/0x160
[  172.023219][ T9266]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.023233][ T9266]  __sock_sendmsg+0x221/0x270
[  172.023255][ T9266]  ____sys_sendmsg+0x52a/0x7e0
[  172.023278][ T9266]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.023292][ T9266]  ? __fget_files+0x2a/0x410
[  172.023311][ T9266]  ? __fget_files+0x2a/0x410
[  172.023334][ T9266]  __sys_sendmsg+0x269/0x350
[  172.023354][ T9266]  ? __pfx___sys_sendmsg+0x10/0x10
[  172.023381][ T9266]  ? do_sys_openat2+0x17a/0x1d0
[  172.023420][ T9266]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  172.023442][ T9266]  ? do_syscall_64+0x100/0x230
[  172.023465][ T9266]  ? do_syscall_64+0xb6/0x230
[  172.023488][ T9266]  do_syscall_64+0xf3/0x230
[  172.023507][ T9266]  ? clear_bhb_loop+0x35/0x90
[  172.023530][ T9266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.023550][ T9266] RIP: 0033:0x7f709218cde9
[  172.023566][ T9266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.023580][ T9266] RSP: 002b:00007f7093020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.023597][ T9266] RAX: ffffffffffffffda RBX: 00007f70923a5fa0 RCX: 00007f709218cde9
[  172.023609][ T9266] RDX: 0000000004000000 RSI: 0000400000000780 RDI: 0000000000000007
[  172.023620][ T9266] RBP: 00007f7093020090 R08: 0000000000000000 R09: 0000000000000000
[  172.023630][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.023640][ T9266] R13: 0000000000000000 R14: 00007f70923a5fa0 R15: 00007ffdfa5c0518
[  172.023665][ T9266]  </TASK>
[  172.347856][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.365325][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.399684][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.468809][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.481558][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.519754][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.641607][ T9187] hsr_slave_0: entered promiscuous mode
[  172.656907][ T9187] hsr_slave_1: entered promiscuous mode
[  172.670203][ T9187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.678266][ T9187] Cannot create hsr debugfs directory
[  172.742078][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'.
[  172.913385][ T5840] Bluetooth: hci3: command tx timeout
[  173.027019][ T9270] delete_channel: no stack
[  173.113978][ T9296] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  173.140242][ T9296] netlink: 'syz.0.938': attribute type 4 has an invalid length.
[  173.163602][ T9296] netlink: 192 bytes leftover after parsing attributes in process `syz.0.938'.
[  173.174980][ T9301] FAULT_INJECTION: forcing a failure.
[  173.174980][ T9301] name failslab, interval 1, probability 0, space 0, times 0
[  173.197772][ T9302] netlink: 120 bytes leftover after parsing attributes in process `syz.3.939'.
[  173.212890][ T9301] CPU: 1 UID: 0 PID: 9301 Comm: syz.2.940 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  173.212916][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  173.212926][ T9301] Call Trace:
[  173.212932][ T9301]  <TASK>
[  173.212939][ T9301]  dump_stack_lvl+0x241/0x360
[  173.212963][ T9301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.212979][ T9301]  ? __pfx__printk+0x10/0x10
[  173.213004][ T9301]  ? kmem_cache_alloc_noprof+0x48/0x380
[  173.213040][ T9301]  ? __pfx___might_resched+0x10/0x10
[  173.213063][ T9301]  should_fail_ex+0x40a/0x550
[  173.213085][ T9301]  should_failslab+0xac/0x100
[  173.213108][ T9301]  ? skb_clone+0x20c/0x390
[  173.213122][ T9301]  kmem_cache_alloc_noprof+0x70/0x380
[  173.213139][ T9301]  skb_clone+0x20c/0x390
[  173.213154][ T9301]  nfnetlink_rcv+0x575/0x2ab0
[  173.213170][ T9301]  ? __pfx_validate_chain+0x10/0x10
[  173.213197][ T9301]  ? mark_lock+0x9a/0x360
[  173.213217][ T9301]  ? __pfx_validate_chain+0x10/0x10
[  173.213235][ T9301]  ? __lock_acquire+0x1397/0x2100
[  173.213262][ T9301]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  173.213291][ T9301]  ? __lock_acquire+0x1397/0x2100
[  173.213339][ T9301]  ? __pfx_lock_release+0x10/0x10
[  173.213360][ T9301]  ? netlink_deliver_tap+0x2e/0x1b0
[  173.213377][ T9301]  ? __pfx_lock_release+0x10/0x10
[  173.213410][ T9301]  ? netlink_deliver_tap+0x2e/0x1b0
[  173.213428][ T9301]  netlink_unicast+0x7f6/0x990
[  173.213456][ T9301]  ? __pfx_netlink_unicast+0x10/0x10
[  173.213475][ T9301]  ? __virt_addr_valid+0x45f/0x530
[  173.213498][ T9301]  ? __phys_addr_symbol+0x2f/0x70
[  173.213519][ T9301]  ? __check_object_size+0x47a/0x730
[  173.213539][ T9301]  netlink_sendmsg+0x8e4/0xcb0
[  173.213566][ T9301]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.213587][ T9301]  ? aa_sock_msg_perm+0x91/0x160
[  173.213612][ T9301]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.213626][ T9301]  __sock_sendmsg+0x221/0x270
[  173.213648][ T9301]  ____sys_sendmsg+0x52a/0x7e0
[  173.213670][ T9301]  ? __pfx_____sys_sendmsg+0x10/0x10
[  173.213684][ T9301]  ? __fget_files+0x2a/0x410
[  173.213703][ T9301]  ? __fget_files+0x2a/0x410
[  173.213727][ T9301]  __sys_sendmsg+0x269/0x350
[  173.213747][ T9301]  ? __pfx___sys_sendmsg+0x10/0x10
[  173.213773][ T9301]  ? do_sys_openat2+0x17a/0x1d0
[  173.213811][ T9301]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  173.213832][ T9301]  ? do_syscall_64+0x100/0x230
[  173.213856][ T9301]  ? do_syscall_64+0xb6/0x230
[  173.213879][ T9301]  do_syscall_64+0xf3/0x230
[  173.213899][ T9301]  ? clear_bhb_loop+0x35/0x90
[  173.213924][ T9301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.213943][ T9301] RIP: 0033:0x7f709218cde9
[  173.213959][ T9301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.213973][ T9301] RSP: 002b:00007f7093020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.213991][ T9301] RAX: ffffffffffffffda RBX: 00007f70923a5fa0 RCX: 00007f709218cde9
[  173.214003][ T9301] RDX: 0000000004000000 RSI: 0000400000000780 RDI: 0000000000000007
[  173.214014][ T9301] RBP: 00007f7093020090 R08: 0000000000000000 R09: 0000000000000000
[  173.214024][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.214034][ T9301] R13: 0000000000000000 R14: 00007f70923a5fa0 R15: 00007ffdfa5c0518
[  173.214060][ T9301]  </TASK>
[  173.244910][ T9306] netlink: 'syz.1.941': attribute type 10 has an invalid length.
[  173.268503][ T9302] netlink: 'syz.3.939': attribute type 1 has an invalid length.
[  173.445029][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.453162][ T9302] netlink: 68 bytes leftover after parsing attributes in process `syz.3.939'.
[  173.494000][ T9306] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  173.682497][ T9320] sctp: [Deprecated]: syz.0.943 (pid 9320) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.682497][ T9320] Use struct sctp_sack_info instead
[  173.709765][ T9187] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  173.746856][ T9187] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  173.795268][ T9187] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  173.836709][ T9187] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  173.867381][ T9330] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  173.911326][ T9330] bond3: entered promiscuous mode
[  173.917136][ T9330] 8021q: adding VLAN 0 to HW filter on device bond3
[  173.943092][ T9338] netlink: 3412 bytes leftover after parsing attributes in process `syz.3.950'.
[  173.962120][ T9330] 8021q: adding VLAN 0 to HW filter on device bond4
[  173.970976][ T9330] bond3: (slave bond4): making interface the new active one
[  173.978466][ T9330] bond4: entered promiscuous mode
[  173.985522][ T9330] bond3: (slave bond4): Enslaving as an active interface with an up link
[  174.091082][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.122646][ T9187] 8021q: adding VLAN 0 to HW filter on device team0
[  174.161393][ T9187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.183673][ T9345] FAULT_INJECTION: forcing a failure.
[  174.183673][ T9345] name failslab, interval 1, probability 0, space 0, times 0
[  174.196788][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.1.953 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  174.196811][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  174.196822][ T9345] Call Trace:
[  174.196828][ T9345]  <TASK>
[  174.196836][ T9345]  dump_stack_lvl+0x241/0x360
[  174.196863][ T9345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.196880][ T9345]  ? __pfx__printk+0x10/0x10
[  174.196917][ T9345]  should_fail_ex+0x40a/0x550
[  174.196941][ T9345]  should_failslab+0xac/0x100
[  174.196959][ T9345]  ? skb_clone+0x20c/0x390
[  174.196974][ T9345]  kmem_cache_alloc_noprof+0x70/0x380
[  174.196998][ T9345]  skb_clone+0x20c/0x390
[  174.197012][ T9345]  ? dev_queue_xmit_nit+0x3fe/0xca0
[  174.197036][ T9345]  dev_queue_xmit_nit+0x249/0xca0
[  174.197060][ T9345]  ? dev_queue_xmit_nit+0x2b/0xca0
[  174.197083][ T9345]  ? validate_xmit_skb+0x9b8/0xff0
[  174.197104][ T9345]  dev_hard_start_xmit+0x15f/0x7d0
[  174.197130][ T9345]  ? __pfx_validate_xmit_skb+0x10/0x10
[  174.197157][ T9345]  __dev_queue_xmit+0x1b73/0x3f40
[  174.197174][ T9345]  ? kasan_save_track+0x51/0x80
[  174.197201][ T9345]  ? ____sys_sendmsg+0x52a/0x7e0
[  174.197229][ T9345]  ? __dev_queue_xmit+0x2f4/0x3f40
[  174.197257][ T9345]  ? __pfx___dev_queue_xmit+0x10/0x10
[  174.197291][ T9345]  ? __copy_skb_header+0x437/0x5b0
[  174.197309][ T9345]  ? __asan_memcpy+0x40/0x70
[  174.197349][ T9345]  ? skb_clone+0x240/0x390
[  174.197370][ T9345]  __netlink_deliver_tap+0x56b/0x7f0
[  174.197398][ T9345]  ? netlink_deliver_tap+0x2e/0x1b0
[  174.197413][ T9345]  netlink_deliver_tap+0x19d/0x1b0
[  174.197432][ T9345]  netlink_unicast+0x7c4/0x990
[  174.197462][ T9345]  ? __pfx_netlink_unicast+0x10/0x10
[  174.197482][ T9345]  ? __virt_addr_valid+0x45f/0x530
[  174.197506][ T9345]  ? __phys_addr_symbol+0x2f/0x70
[  174.197527][ T9345]  ? __check_object_size+0x47a/0x730
[  174.197549][ T9345]  netlink_sendmsg+0x8e4/0xcb0
[  174.197579][ T9345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  174.197601][ T9345]  ? aa_sock_msg_perm+0x91/0x160
[  174.197628][ T9345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  174.197643][ T9345]  __sock_sendmsg+0x221/0x270
[  174.197666][ T9345]  ____sys_sendmsg+0x52a/0x7e0
[  174.197692][ T9345]  ? __pfx_____sys_sendmsg+0x10/0x10
[  174.197707][ T9345]  ? __fget_files+0x2a/0x410
[  174.197728][ T9345]  ? __fget_files+0x2a/0x410
[  174.197755][ T9345]  __sys_sendmsg+0x269/0x350
[  174.197777][ T9345]  ? __pfx___sys_sendmsg+0x10/0x10
[  174.197807][ T9345]  ? do_sys_openat2+0x17a/0x1d0
[  174.197853][ T9345]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  174.197876][ T9345]  ? do_syscall_64+0x100/0x230
[  174.197902][ T9345]  ? do_syscall_64+0xb6/0x230
[  174.197926][ T9345]  do_syscall_64+0xf3/0x230
[  174.197947][ T9345]  ? clear_bhb_loop+0x35/0x90
[  174.197972][ T9345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.197991][ T9345] RIP: 0033:0x7f265c78cde9
[  174.198008][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.198025][ T9345] RSP: 002b:00007f265d505038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.198043][ T9345] RAX: ffffffffffffffda RBX: 00007f265c9a5fa0 RCX: 00007f265c78cde9
[  174.198053][ T9345] RDX: 0000000004000000 RSI: 0000400000000780 RDI: 0000000000000007
[  174.198063][ T9345] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  174.198072][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.198081][ T9345] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  174.198106][ T9345]  </TASK>
[  174.198982][ T9187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.496310][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'.
[  174.636735][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.643986][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.660100][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'.
[  174.661128][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.676286][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.794486][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.884228][ T9341] delete_channel: no stack
[  174.954367][ T9187] veth0_vlan: entered promiscuous mode
[  174.990017][ T9187] veth1_vlan: entered promiscuous mode
[  174.995745][ T5840] Bluetooth: hci3: command tx timeout
[  175.101590][ T9187] veth0_macvtap: entered promiscuous mode
[  175.130866][ T9187] veth1_macvtap: entered promiscuous mode
[  175.168695][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.187680][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.201317][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.217000][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.238617][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.266895][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.285262][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.317213][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.348300][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.366725][ T9398] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.964'.
[  175.374657][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.413288][ T9398] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.964'.
[  175.444163][ T9187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.453979][ T9187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.464218][ T9187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.468016][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'.
[  175.474958][ T9187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.760847][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'.
[  175.840138][ T9405] bridge0: port 1(hsr0) entered disabled state
[  176.142958][ T9405] batadv_slave_1: left promiscuous mode
[  176.397853][ T9405] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.417004][ T9405] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.425975][ T9405] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.435757][ T9405] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.541970][ T9405] macsec1: left promiscuous mode
[  176.562770][ T9405] macsec1: left allmulticast mode
[  176.568593][ T9405] ip6gre2: left allmulticast mode
[  176.717123][ T9415] delete_channel: no stack
[  176.866753][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.881238][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.910217][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.933853][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.937495][ T9426] Bluetooth: MGMT ver 1.23
[  176.956156][ T9423] syz.0.973: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  176.958970][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[  176.975105][ T9423] CPU: 0 UID: 0 PID: 9423 Comm: syz.0.973 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  176.975127][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  176.975137][ T9423] Call Trace:
[  176.975143][ T9423]  <TASK>
[  176.975150][ T9423]  dump_stack_lvl+0x241/0x360
[  176.975176][ T9423]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.975192][ T9423]  ? __pfx__printk+0x10/0x10
[  176.975220][ T9423]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  176.975238][ T9423]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  176.975258][ T9423]  warn_alloc+0x278/0x410
[  176.975284][ T9423]  ? __pfx_warn_alloc+0x10/0x10
[  176.975309][ T9423]  ? xskq_create+0xb6/0x170
[  176.975326][ T9423]  ? __get_vm_area_node+0x1c8/0x2d0
[  176.975344][ T9423]  ? __get_vm_area_node+0x25c/0x2d0
[  176.975368][ T9423]  __vmalloc_node_range_noprof+0x62f/0x1380
[  176.975413][ T9423]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  176.975437][ T9423]  ? __kasan_kmalloc+0x98/0xb0
[  176.975463][ T9423]  vmalloc_user_noprof+0x74/0x80
[  176.975483][ T9423]  ? xskq_create+0xb6/0x170
[  176.975499][ T9423]  xskq_create+0xb6/0x170
[  176.975517][ T9423]  xsk_init_queue+0xa1/0x100
[  176.975536][ T9423]  xsk_setsockopt+0x598/0x950
[  176.975555][ T9423]  ? __pfx_xsk_setsockopt+0x10/0x10
[  176.975572][ T9423]  ? __pfx_aa_sk_perm+0x10/0x10
[  176.975593][ T9423]  ? __pfx_lock_acquire+0x10/0x10
[  176.975612][ T9423]  ? aa_sock_opt_perm+0x79/0x120
[  176.975636][ T9423]  ? __pfx_xsk_setsockopt+0x10/0x10
[  176.975651][ T9423]  do_sock_setsockopt+0x3af/0x720
[  176.975679][ T9423]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  176.975706][ T9423]  ? __fget_files+0x395/0x410
[  176.975722][ T9423]  ? __fget_files+0x2a/0x410
[  176.975746][ T9423]  __x64_sys_setsockopt+0x1ee/0x280
[  176.975773][ T9423]  do_syscall_64+0xf3/0x230
[  176.975794][ T9423]  ? clear_bhb_loop+0x35/0x90
[  176.975817][ T9423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.975836][ T9423] RIP: 0033:0x7f0a22d8cde9
[  176.975852][ T9423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.975866][ T9423] RSP: 002b:00007f0a23b2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  176.975883][ T9423] RAX: ffffffffffffffda RBX: 00007f0a22fa5fa0 RCX: 00007f0a22d8cde9
[  176.975895][ T9423] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007
[  176.975905][ T9423] RBP: 00007f0a22e0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  176.975915][ T9423] R10: 00004000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  176.975924][ T9423] R13: 0000000000000000 R14: 00007f0a22fa5fa0 R15: 00007ffd94051308
[  176.975950][ T9423]  </TASK>
[  176.975956][ T9423] Mem-Info:
[  177.102945][ T5840] Bluetooth: hci3: command tx timeout
[  177.107852][ T9423] active_anon:4693 inactive_anon:0 isolated_anon:0
[  177.107852][ T9423]  active_file:1707 inactive_file:38351 isolated_file:0
[  177.107852][ T9423]  unevictable:768 dirty:142 writeback:0
[  177.107852][ T9423]  slab_reclaimable:11339 slab_unreclaimable:102785
[  177.107852][ T9423]  mapped:28690 shmem:2239 pagetables:727
[  177.107852][ T9423]  sec_pagetables:0 bounce:0
[  177.107852][ T9423]  kernel_misc_reclaimable:0
[  177.107852][ T9423]  free:1333605 free_pcp:1674 free_cma:0
[  177.317865][ T9423] Node 0 active_anon:20568kB inactive_anon:0kB active_file:6828kB inactive_file:153336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114720kB dirty:580kB writeback:0kB shmem:9224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:2896kB sec_pagetables:0kB all_unreclaimable? no
[  177.350692][ T9423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  177.382044][ T9423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  177.410065][ T9423] lowmem_reserve[]: 0 2491 2491 0 0
[  177.416015][ T9423] Node 0 DMA32 free:1410940kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:16232kB inactive_anon:0kB active_file:6828kB inactive_file:152756kB unevictable:1536kB writepending:576kB present:3129332kB managed:2551084kB mlocked:0kB bounce:0kB free_pcp:10596kB local_pcp:5036kB free_cma:0kB
[  177.446661][ T9423] lowmem_reserve[]: 0 0 0 0 0
[  177.451549][ T9423] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  177.482994][ T9423] lowmem_reserve[]: 0 0 0 0 0
[  177.487882][ T9423] Node 1 Normal free:3906388kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:156kB free_cma:0kB
[  177.517602][ T9423] lowmem_reserve[]: 0 0 0 0 0
[  177.522368][ T9423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  177.535801][ T9423] Node 0 DMA32: 59*4kB (UM) 226*8kB (UME) 208*16kB (UM) 128*32kB (UME) 228*64kB (UME) 304*128kB (UME) 138*256kB (UME) 55*512kB (UM) 22*1024kB (UM) 17*2048kB (UME) 301*4096kB (UM) = 1416700kB
[  177.555816][ T9423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  177.567510][ T9423] Node 1 Normal: 241*4kB (UE) 64*8kB (UME) 47*16kB (UME) 205*32kB (UME) 90*64kB (UME) 43*128kB (UME) 13*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 945*4096kB (UM) = 3906388kB
[  177.586778][ T9423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  177.596426][ T9423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  177.606128][ T9423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  177.616177][ T9423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  177.625895][ T9423] 41500 total pagecache pages
[  177.630611][ T9423] 0 pages in swap cache
[  177.635416][ T9423] Free swap  = 124996kB
[  177.639599][ T9423] Total swap = 124996kB
[  177.646941][ T9423] 2097051 pages RAM
[  177.650865][ T9423] 0 pages HighMem/MovableOnly
[  177.665914][ T9423] 427494 pages reserved
[  177.670235][ T9423] 0 pages cma reserved
[  177.766443][ T9438] netlink: zone id is out of range
[  177.777444][ T9438] netlink: zone id is out of range
[  177.787685][ T9438] netlink: zone id is out of range
[  177.820044][ T9438] netlink: zone id is out of range
[  177.830587][ T9438] netlink: set zone limit has 8 unknown bytes
[  178.055920][ T9452] unknown channel width for channel at 909000KHz?
[  178.062385][ T9452] unknown channel width for channel at 909000KHz?
[  178.069175][ T9452] unknown channel width for channel at 909000KHz?
[  178.132334][ T9453] delete_channel: no stack
[  178.231253][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'.
[  178.409779][ T9465] openvswitch: netlink: Actions may not be safe on all matching packets
[  178.508309][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'.
[  178.711926][ T9481] unknown channel width for channel at 909000KHz?
[  178.726414][ T9481] unknown channel width for channel at 909000KHz?
[  178.746286][ T9481] unknown channel width for channel at 909000KHz?
[  178.771610][ T9481] FAULT_INJECTION: forcing a failure.
[  178.771610][ T9481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.788424][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.1.993 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  178.788453][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  178.788462][ T9481] Call Trace:
[  178.788469][ T9481]  <TASK>
[  178.788476][ T9481]  dump_stack_lvl+0x241/0x360
[  178.788502][ T9481]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.788518][ T9481]  ? __pfx__printk+0x10/0x10
[  178.788545][ T9481]  ? __pfx_lock_release+0x10/0x10
[  178.788566][ T9481]  ? __lock_acquire+0x1397/0x2100
[  178.788593][ T9481]  should_fail_ex+0x40a/0x550
[  178.788615][ T9481]  _copy_from_user+0x2d/0xb0
[  178.788633][ T9481]  kstrtouint_from_user+0xc6/0x190
[  178.788657][ T9481]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  178.788680][ T9481]  ? __pfx_lock_acquire+0x10/0x10
[  178.788710][ T9481]  proc_fail_nth_write+0xaa/0x2d0
[  178.788733][ T9481]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  178.788751][ T9481]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  178.788780][ T9481]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  178.788804][ T9481]  vfs_write+0x29f/0xd10
[  178.788826][ T9481]  ? fdget_pos+0x254/0x320
[  178.788842][ T9481]  ? __mutex_unlock_slowpath+0x227/0x800
[  178.788866][ T9481]  ? __pfx_vfs_write+0x10/0x10
[  178.788884][ T9481]  ? do_sys_openat2+0x17a/0x1d0
[  178.788903][ T9481]  ? __fget_files+0x2a/0x410
[  178.788922][ T9481]  ? __fget_files+0x395/0x410
[  178.788944][ T9481]  ? __fget_files+0x2a/0x410
[  178.788969][ T9481]  ksys_write+0x18f/0x2b0
[  178.788992][ T9481]  ? __pfx_ksys_write+0x10/0x10
[  178.789012][ T9481]  ? do_syscall_64+0x100/0x230
[  178.789035][ T9481]  ? do_syscall_64+0xb6/0x230
[  178.789056][ T9481]  do_syscall_64+0xf3/0x230
[  178.789072][ T9481]  ? clear_bhb_loop+0x35/0x90
[  178.789091][ T9481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.789107][ T9481] RIP: 0033:0x7f265c78b89f
[  178.789120][ T9481] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  178.789130][ T9481] RSP: 002b:00007f265d505030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  178.789146][ T9481] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f265c78b89f
[  178.789154][ T9481] RDX: 0000000000000001 RSI: 00007f265d5050a0 RDI: 0000000000000006
[  178.789162][ T9481] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  178.789170][ T9481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  178.789178][ T9481] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  178.789199][ T9481]  </TASK>
[  178.999199][ T9490] netlink: 72 bytes leftover after parsing attributes in process `syz.2.996'.
[  179.191643][ T1306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.281002][ T1306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.350678][ T1306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.430262][ T1306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.505883][ T1306] bridge_slave_1: left allmulticast mode
[  179.511602][ T1306] bridge_slave_1: left promiscuous mode
[  179.517646][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.527186][ T1306] bridge_slave_0: left allmulticast mode
[  179.533291][ T1306] bridge_slave_0: left promiscuous mode
[  179.539032][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.591502][ T9482] delete_channel: no stack
[  179.721988][ T5888] IPVS: starting estimator thread 0...
[  179.729452][ T9500] netlink: 56 bytes leftover after parsing attributes in process `syz.0.997'.
[  179.824840][ T9495] IPVS: using max 29 ests per chain, 69600 per kthread
[  179.841200][ T9508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'.
[  179.910889][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'.
[  180.179288][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.189542][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.198655][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.208815][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.217536][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  180.233875][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.456111][ T1306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.469544][ T1306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.488733][ T1306] bond0 (unregistering): Released all slaves
[  180.513321][ T9525] unknown channel width for channel at 909000KHz?
[  180.519871][ T9525] unknown channel width for channel at 909000KHz?
[  180.555226][ T9525] unknown channel width for channel at 909000KHz?
[  180.568109][ T9518] lo speed is unknown, defaulting to 1000
[  180.595882][ T9518] lo speed is unknown, defaulting to 1000
[  180.714308][ T9532] Bluetooth: MGMT ver 1.23
[  180.728873][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'.
[  181.022800][ T9540] ipt_REJECT: ECHOREPLY no longer supported.
[  181.065324][ T1306] hsr_slave_0: left promiscuous mode
[  181.074578][ T1306] hsr_slave_1: left promiscuous mode
[  181.080373][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.093333][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.104335][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.111976][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.157673][ T1306] veth1_macvtap: left promiscuous mode
[  181.164593][ T1306] veth0_macvtap: left promiscuous mode
[  181.174122][ T1306] veth1_vlan: left promiscuous mode
[  181.179573][ T1306] veth0_vlan: left promiscuous mode
[  181.469616][ T9529] delete_channel: no stack
[  181.680992][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'.
[  181.790078][ T1306] team0 (unregistering): Port device team_slave_1 removed
[  181.845477][ T1306] team0 (unregistering): Port device team_slave_0 removed
[  182.205729][ T9559] FAULT_INJECTION: forcing a failure.
[  182.205729][ T9559] name failslab, interval 1, probability 0, space 0, times 0
[  182.228037][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.1.1014 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  182.228066][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  182.228076][ T9559] Call Trace:
[  182.228082][ T9559]  <TASK>
[  182.228088][ T9559]  dump_stack_lvl+0x241/0x360
[  182.228112][ T9559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.228122][ T9559]  ? __pfx__printk+0x10/0x10
[  182.228137][ T9559]  ? kmem_cache_alloc_noprof+0x48/0x380
[  182.228149][ T9559]  ? __pfx___might_resched+0x10/0x10
[  182.228163][ T9559]  should_fail_ex+0x40a/0x550
[  182.228177][ T9559]  should_failslab+0xac/0x100
[  182.228187][ T9559]  ? __kernfs_new_node+0xd8/0x870
[  182.228196][ T9559]  kmem_cache_alloc_noprof+0x70/0x380
[  182.228209][ T9559]  __kernfs_new_node+0xd8/0x870
[  182.228223][ T9559]  ? __pfx___kernfs_new_node+0x10/0x10
[  182.228234][ T9559]  ? __pfx_lock_acquire+0x10/0x10
[  182.228249][ T9559]  ? __pfx___might_resched+0x10/0x10
[  182.228260][ T9559]  ? sysfs_create_dir_ns+0x189/0x3a0
[  182.228273][ T9559]  ? sysfs_create_dir_ns+0x1cf/0x3a0
[  182.228297][ T9559]  kernfs_new_node+0x137/0x240
[  182.228317][ T9559]  __kernfs_create_file+0x49/0x2e0
[  182.228338][ T9559]  sysfs_add_file_mode_ns+0x24a/0x310
[  182.228375][ T9559]  sysfs_create_file_ns+0x197/0x2a0
[  182.228391][ T9559]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  182.228405][ T9559]  ? __dev_fwnode+0x50/0x80
[  182.228414][ T9559]  ? device_create_file+0xf2/0x1c0
[  182.228429][ T9559]  device_add+0x522/0xbf0
[  182.228439][ T9559]  ? device_initialize+0x266/0x460
[  182.228449][ T9559]  wakeup_source_sysfs_add+0x1aa/0x270
[  182.228460][ T9559]  wakeup_source_register+0x171/0x250
[  182.228476][ T9559]  ep_insert+0xe94/0x1ab0
[  182.228496][ T9559]  ? __pfx_ep_insert+0x10/0x10
[  182.228515][ T9559]  ? bpf_lsm_capable+0x9/0x10
[  182.228530][ T9559]  do_epoll_ctl+0x8bc/0xf80
[  182.228547][ T9559]  __x64_sys_epoll_ctl+0x161/0x1a0
[  182.228560][ T9559]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  182.228573][ T9559]  ? do_syscall_64+0x100/0x230
[  182.228588][ T9559]  ? do_syscall_64+0xb6/0x230
[  182.228601][ T9559]  do_syscall_64+0xf3/0x230
[  182.228615][ T9559]  ? clear_bhb_loop+0x35/0x90
[  182.228630][ T9559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.228643][ T9559] RIP: 0033:0x7f265c78cde9
[  182.228657][ T9559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.228665][ T9559] RSP: 002b:00007f265a5f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  182.228676][ T9559] RAX: ffffffffffffffda RBX: 00007f265c9a6080 RCX: 00007f265c78cde9
[  182.228683][ T9559] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  182.228688][ T9559] RBP: 00007f265a5f6090 R08: 0000000000000000 R09: 0000000000000000
[  182.228694][ T9559] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  182.228700][ T9559] R13: 0000000000000000 R14: 00007f265c9a6080 R15: 00007fffd4323108
[  182.228715][ T9559]  </TASK>
[  182.529752][   T54] Bluetooth: hci3: command tx timeout
[  182.716930][ T9547] vlan2: entered allmulticast mode
[  182.722088][ T9547] bridge0: entered allmulticast mode
[  182.738746][ T9547] bridge0: left allmulticast mode
[  182.761993][ T9543] lo speed is unknown, defaulting to 1000
[  182.769846][ T9543] lo speed is unknown, defaulting to 1000
[  182.770244][ T9518] chnl_net:caif_netlink_parms(): no params data found
[  182.920937][ T9562] bond3: (slave bond4): Releasing backup interface
[  182.931889][ T9562] bond4: left promiscuous mode
[  182.971413][ T9562] team0: Mode changed to "loadbalance"
[  183.016141][ T9563] team0: Unable to change to the same mode the team is in
[  183.204132][ T9579] rdma_rxe: rxe_newlink: failed to add vcan0
[  183.221447][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.242224][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.254322][ T9518] bridge_slave_0: entered allmulticast mode
[  183.261447][ T9518] bridge_slave_0: entered promiscuous mode
[  183.277163][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.284488][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.292203][ T9518] bridge_slave_1: entered allmulticast mode
[  183.300296][ T9518] bridge_slave_1: entered promiscuous mode
[  183.467123][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.477856][ T9585] unknown channel width for channel at 909000KHz?
[  183.496526][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.503088][ T9585] unknown channel width for channel at 909000KHz?
[  183.512306][ T9585] unknown channel width for channel at 909000KHz?
[  183.690287][ T9589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'.
[  183.745065][ T9518] team0: Port device team_slave_0 added
[  183.751294][ T9587] lo speed is unknown, defaulting to 1000
[  183.751449][ T9593] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  183.791210][ T9518] team0: Port device team_slave_1 added
[  183.816838][ T9587] lo speed is unknown, defaulting to 1000
[  183.928965][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.942886][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.981442][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.005461][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.012630][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.039284][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.152360][ T9593] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[  184.208755][ T9604] IPv6: sit1: Disabled Multicast RS
[  184.218491][ T9604] sit1: entered allmulticast mode
[  184.309917][ T9518] hsr_slave_0: entered promiscuous mode
[  184.355278][ T9518] hsr_slave_1: entered promiscuous mode
[  184.405660][ T9518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.440223][ T9518] Cannot create hsr debugfs directory
[  184.593024][   T54] Bluetooth: hci3: command tx timeout
[  184.753802][ T9626] unknown channel width for channel at 909000KHz?
[  184.762929][ T9626] unknown channel width for channel at 909000KHz?
[  184.771819][ T9626] unknown channel width for channel at 909000KHz?
[  184.876504][ T9632] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1034'.
[  184.935124][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'.
[  184.947080][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'.
[  185.205112][ T9518] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  185.231579][ T9518] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  185.246811][ T9518] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  185.261447][ T9518] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  185.297071][ T9645] netlink: 'syz.0.1038': attribute type 3 has an invalid length.
[  185.411150][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.442464][ T9518] 8021q: adding VLAN 0 to HW filter on device team0
[  185.462357][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.469541][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.491082][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.498334][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.785748][ T9518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.139814][ T9518] veth0_vlan: entered promiscuous mode
[  186.159860][ T9518] veth1_vlan: entered promiscuous mode
[  186.192241][ T9518] veth0_macvtap: entered promiscuous mode
[  186.208160][ T9518] veth1_macvtap: entered promiscuous mode
[  186.241860][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.253226][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.270479][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.282501][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.294130][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.308901][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.317800][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'.
[  186.319600][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.340802][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.351382][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.364720][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.410606][ T9704] openvswitch: netlink: Tunnel attr 208 out of range max 16
[  186.442187][ T9518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.451632][ T9518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.460909][ T9518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.470568][ T9518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.544569][ T9706] lo speed is unknown, defaulting to 1000
[  186.559696][ T9706] lo speed is unknown, defaulting to 1000
[  186.591198][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.610586][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.637875][ T9683] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  186.671919][ T8745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.681368][   T54] Bluetooth: hci3: command tx timeout
[  186.708931][ T8745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.815302][ T9710] FAULT_INJECTION: forcing a failure.
[  186.815302][ T9710] name failslab, interval 1, probability 0, space 0, times 0
[  186.839904][ T9714] xt_TCPMSS: Only works on TCP SYN packets
[  186.862910][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.1.1053 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  186.862937][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  186.862948][ T9710] Call Trace:
[  186.862954][ T9710]  <TASK>
[  186.862962][ T9710]  dump_stack_lvl+0x241/0x360
[  186.862987][ T9710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.863006][ T9710]  ? __pfx__printk+0x10/0x10
[  186.863031][ T9710]  ? kmem_cache_alloc_noprof+0x48/0x380
[  186.863049][ T9710]  ? __pfx___might_resched+0x10/0x10
[  186.863072][ T9710]  should_fail_ex+0x40a/0x550
[  186.863096][ T9710]  should_failslab+0xac/0x100
[  186.863114][ T9710]  ? __kernfs_new_node+0xd8/0x870
[  186.863128][ T9710]  kmem_cache_alloc_noprof+0x70/0x380
[  186.863160][ T9710]  __kernfs_new_node+0xd8/0x870
[  186.863185][ T9710]  ? __pfx___kernfs_new_node+0x10/0x10
[  186.863211][ T9710]  ? sysfs_do_create_link_sd+0x77/0x110
[  186.863232][ T9710]  ? do_raw_spin_lock+0x14f/0x370
[  186.863249][ T9710]  ? __pfx_lock_release+0x10/0x10
[  186.863275][ T9710]  kernfs_new_node+0x137/0x240
[  186.863297][ T9710]  kernfs_create_link+0xa5/0x1f0
[  186.863318][ T9710]  sysfs_do_create_link_sd+0x85/0x110
[  186.863342][ T9710]  device_add_class_symlinks+0x1c5/0x250
[  186.863363][ T9710]  device_add+0x553/0xbf0
[  186.863379][ T9710]  ? device_initialize+0x266/0x460
[  186.863397][ T9710]  wakeup_source_sysfs_add+0x1aa/0x270
[  186.863416][ T9710]  wakeup_source_register+0x171/0x250
[  186.863442][ T9710]  ep_insert+0xe94/0x1ab0
[  186.863478][ T9710]  ? __pfx_ep_insert+0x10/0x10
[  186.863510][ T9710]  ? bpf_lsm_capable+0x9/0x10
[  186.863537][ T9710]  do_epoll_ctl+0x8bc/0xf80
[  186.863566][ T9710]  __x64_sys_epoll_ctl+0x161/0x1a0
[  186.863590][ T9710]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  186.863615][ T9710]  ? do_syscall_64+0x100/0x230
[  186.863635][ T9710]  ? do_syscall_64+0xb6/0x230
[  186.863653][ T9710]  do_syscall_64+0xf3/0x230
[  186.863670][ T9710]  ? clear_bhb_loop+0x35/0x90
[  186.863692][ T9710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.863708][ T9710] RIP: 0033:0x7f265c78cde9
[  186.863720][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.863730][ T9710] RSP: 002b:00007f265d505038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  186.863745][ T9710] RAX: ffffffffffffffda RBX: 00007f265c9a5fa0 RCX: 00007f265c78cde9
[  186.863754][ T9710] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  186.863761][ T9710] RBP: 00007f265d505090 R08: 0000000000000000 R09: 0000000000000000
[  186.863769][ T9710] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  186.863776][ T9710] R13: 0000000000000000 R14: 00007f265c9a5fa0 R15: 00007fffd4323108
[  186.863796][ T9710]  </TASK>
[  187.281920][ T9706] lo speed is unknown, defaulting to 1000
[  187.402297][ T9706] lo speed is unknown, defaulting to 1000
[  187.684110][ T9732] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  187.694311][ T5887] IPVS: starting estimator thread 0...
[  187.784154][ T9735] IPVS: using max 22 ests per chain, 52800 per kthread
[  187.873331][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  188.093361][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'.
[  188.154093][ T9759] FAULT_INJECTION: forcing a failure.
[  188.154093][ T9759] name failslab, interval 1, probability 0, space 0, times 0
[  188.174492][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.0.1066 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  188.174518][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  188.174527][ T9759] Call Trace:
[  188.174533][ T9759]  <TASK>
[  188.174540][ T9759]  dump_stack_lvl+0x241/0x360
[  188.174565][ T9759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.174580][ T9759]  ? __pfx__printk+0x10/0x10
[  188.174603][ T9759]  ? kmem_cache_alloc_noprof+0x48/0x380
[  188.174623][ T9759]  ? __pfx___might_resched+0x10/0x10
[  188.174646][ T9759]  should_fail_ex+0x40a/0x550
[  188.174669][ T9759]  should_failslab+0xac/0x100
[  188.174686][ T9759]  ? __kernfs_new_node+0xd8/0x870
[  188.174698][ T9759]  kmem_cache_alloc_noprof+0x70/0x380
[  188.174716][ T9759]  __kernfs_new_node+0xd8/0x870
[  188.174727][ T9759]  ? mark_lock+0x9a/0x360
[  188.174750][ T9759]  ? __pfx___kernfs_new_node+0x10/0x10
[  188.174765][ T9759]  ? __lock_acquire+0x1397/0x2100
[  188.174792][ T9759]  kernfs_new_node+0x137/0x240
[  188.174809][ T9759]  __kernfs_create_file+0x49/0x2e0
[  188.174826][ T9759]  sysfs_add_file_mode_ns+0x24a/0x310
[  188.174848][ T9759]  internal_create_group+0x782/0x12d0
[  188.174877][ T9759]  ? __pfx_internal_create_group+0x10/0x10
[  188.174904][ T9759]  sysfs_create_groups+0x56/0x120
[  188.174923][ T9759]  device_add_attrs+0x199/0x600
[  188.174938][ T9759]  ? __pfx_device_add_attrs+0x10/0x10
[  188.174960][ T9759]  ? kobject_put+0x446/0x480
[  188.174986][ T9759]  device_add+0x576/0xbf0
[  188.174999][ T9759]  ? device_initialize+0x266/0x460
[  188.175013][ T9759]  wakeup_source_sysfs_add+0x1aa/0x270
[  188.175028][ T9759]  wakeup_source_register+0x171/0x250
[  188.175048][ T9759]  ep_insert+0xe94/0x1ab0
[  188.175076][ T9759]  ? __pfx_ep_insert+0x10/0x10
[  188.175101][ T9759]  ? bpf_lsm_capable+0x9/0x10
[  188.175123][ T9759]  do_epoll_ctl+0x8bc/0xf80
[  188.175146][ T9759]  __x64_sys_epoll_ctl+0x161/0x1a0
[  188.175165][ T9759]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  188.175183][ T9759]  ? do_syscall_64+0x100/0x230
[  188.175203][ T9759]  ? do_syscall_64+0xb6/0x230
[  188.175221][ T9759]  do_syscall_64+0xf3/0x230
[  188.175242][ T9759]  ? clear_bhb_loop+0x35/0x90
[  188.175261][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.175277][ T9759] RIP: 0033:0x7f0a22d8cde9
[  188.175290][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.175301][ T9759] RSP: 002b:00007f0a23b09038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  188.175317][ T9759] RAX: ffffffffffffffda RBX: 00007f0a22fa6080 RCX: 00007f0a22d8cde9
[  188.175327][ T9759] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  188.175334][ T9759] RBP: 00007f0a23b09090 R08: 0000000000000000 R09: 0000000000000000
[  188.175342][ T9759] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  188.175351][ T9759] R13: 0000000000000000 R14: 00007f0a22fa6080 R15: 00007ffd94051308
[  188.175372][ T9759]  </TASK>
[  188.613996][ T9767] netlink: 'syz.1.1069': attribute type 1 has an invalid length.
[  188.651553][ T9767] 8021q: adding VLAN 0 to HW filter on device bond2
[  188.968720][ T9783] netlink: 'syz.2.1076': attribute type 13 has an invalid length.
[  188.987909][ T9783] gretap0: refused to change device tx_queue_len
[  188.995228][ T9783] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  189.024909][ T9786] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  189.032949][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1077'.
[  189.282664][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.298487][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'.
[  190.239810][ T9803] unknown channel width for channel at 909000KHz?
[  190.260571][ T9803] unknown channel width for channel at 909000KHz?
[  190.282869][ T9803] unknown channel width for channel at 909000KHz?
[  190.405698][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.468227][ T9810] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  190.477208][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'.
[  190.566225][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.776046][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.824080][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.834684][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.845340][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.854670][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.862241][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  190.870544][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.874743][ T9821] lo speed is unknown, defaulting to 1000
[  190.967093][ T9821] lo speed is unknown, defaulting to 1000
[  190.977887][ T9824] lo speed is unknown, defaulting to 1000
[  191.015400][ T9823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1090'.
[  191.049157][ T9836] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  191.074271][ T9824] lo speed is unknown, defaulting to 1000
[  191.158696][   T35] bridge_slave_1: left allmulticast mode
[  191.168162][   T35] bridge_slave_1: left promiscuous mode
[  191.177568][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.188578][   T35] bridge_slave_0: left allmulticast mode
[  191.195430][   T35] bridge_slave_0: left promiscuous mode
[  191.201773][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.289926][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  191.346565][ T9844] xt_hashlimit: overflow, try lower: 0/0
[  191.380569][ T9847] Bluetooth: MGMT ver 1.23
[  191.393841][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'.
[  191.552892][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  191.559829][ T5838] Bluetooth: hci2: command 0x0401 tx timeout
[  191.794575][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.805502][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.816590][   T35] bond0 (unregistering): Released all slaves
[  191.847776][ T9849] unknown channel width for channel at 909000KHz?
[  191.866914][ T9849] unknown channel width for channel at 909000KHz?
[  191.882137][ T9849] unknown channel width for channel at 909000KHz?
[  192.073753][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'.
[  192.231952][ T9864] FAULT_INJECTION: forcing a failure.
[  192.231952][ T9864] name failslab, interval 1, probability 0, space 0, times 0
[  192.312932][ T9864] CPU: 0 UID: 0 PID: 9864 Comm: syz.0.1101 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  192.312968][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  192.312977][ T9864] Call Trace:
[  192.312984][ T9864]  <TASK>
[  192.312992][ T9864]  dump_stack_lvl+0x241/0x360
[  192.313017][ T9864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.313033][ T9864]  ? __pfx__printk+0x10/0x10
[  192.313058][ T9864]  ? kmem_cache_alloc_noprof+0x48/0x380
[  192.313076][ T9864]  ? __pfx___might_resched+0x10/0x10
[  192.313099][ T9864]  should_fail_ex+0x40a/0x550
[  192.313122][ T9864]  should_failslab+0xac/0x100
[  192.313138][ T9864]  ? __kernfs_new_node+0xd8/0x870
[  192.313153][ T9864]  kmem_cache_alloc_noprof+0x70/0x380
[  192.313174][ T9864]  __kernfs_new_node+0xd8/0x870
[  192.313193][ T9864]  ? up_write+0x1a9/0x590
[  192.313208][ T9864]  ? __pfx___kernfs_new_node+0x10/0x10
[  192.313226][ T9864]  ? __pfx_up_write+0x10/0x10
[  192.313254][ T9864]  kernfs_new_node+0x137/0x240
[  192.313275][ T9864]  __kernfs_create_file+0x49/0x2e0
[  192.313296][ T9864]  sysfs_add_file_mode_ns+0x24a/0x310
[  192.313324][ T9864]  internal_create_group+0x782/0x12d0
[  192.313362][ T9864]  ? __pfx_internal_create_group+0x10/0x10
[  192.313397][ T9864]  sysfs_create_groups+0x56/0x120
[  192.313421][ T9864]  device_add_attrs+0x199/0x600
[  192.313441][ T9864]  ? __pfx_device_add_attrs+0x10/0x10
[  192.313456][ T9864]  ? kobject_put+0x446/0x480
[  192.313489][ T9864]  device_add+0x576/0xbf0
[  192.313505][ T9864]  ? device_initialize+0x266/0x460
[  192.313524][ T9864]  wakeup_source_sysfs_add+0x1aa/0x270
[  192.313542][ T9864]  wakeup_source_register+0x171/0x250
[  192.313564][ T9864]  ep_insert+0xe94/0x1ab0
[  192.313593][ T9864]  ? __pfx_ep_insert+0x10/0x10
[  192.313618][ T9864]  ? bpf_lsm_capable+0x9/0x10
[  192.313640][ T9864]  do_epoll_ctl+0x8bc/0xf80
[  192.313663][ T9864]  __x64_sys_epoll_ctl+0x161/0x1a0
[  192.313682][ T9864]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  192.313700][ T9864]  ? do_syscall_64+0x100/0x230
[  192.313721][ T9864]  ? do_syscall_64+0xb6/0x230
[  192.313739][ T9864]  do_syscall_64+0xf3/0x230
[  192.313756][ T9864]  ? clear_bhb_loop+0x35/0x90
[  192.313775][ T9864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.313791][ T9864] RIP: 0033:0x7f0a22d8cde9
[  192.313804][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.313815][ T9864] RSP: 002b:00007f0a23b2a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  192.313831][ T9864] RAX: ffffffffffffffda RBX: 00007f0a22fa5fa0 RCX: 00007f0a22d8cde9
[  192.313840][ T9864] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  192.313848][ T9864] RBP: 00007f0a23b2a090 R08: 0000000000000000 R09: 0000000000000000
[  192.313856][ T9864] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000002
[  192.313864][ T9864] R13: 0000000000000000 R14: 00007f0a22fa5fa0 R15: 00007ffd94051308
[  192.313886][ T9864]  </TASK>
[  192.513801][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'.
[  192.609822][ T9874] bond1: left promiscuous mode
[  192.643900][ T9874] bond2: left promiscuous mode
[  192.648728][ T9874] bond2: left allmulticast mode
[  192.655266][ T9874] bridge3: left allmulticast mode
[  192.667677][ T9874] bond3: left promiscuous mode
[  192.719824][ T9878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.733869][ T9878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.750283][ T9878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.761072][ T9878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.814114][ T9824] chnl_net:caif_netlink_parms(): no params data found
[  192.847817][   T35] hsr_slave_0: left promiscuous mode
[  192.858643][   T35] hsr_slave_1: left promiscuous mode
[  192.865015][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.872424][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.883143][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.890623][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.923261][ T5840] Bluetooth: hci3: command tx timeout
[  192.927461][   T35] veth1_macvtap: left promiscuous mode
[  192.935694][   T35] veth0_macvtap: left promiscuous mode
[  192.973987][   T35] veth1_vlan: left promiscuous mode
[  192.995961][   T35] veth0_vlan: left promiscuous mode
[  193.477417][ T9890] ipt_rpfilter: unknown options
[  193.690514][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'.
[  193.918431][   T35] team0 (unregistering): Port device team_slave_1 removed
[  193.966110][   T35] team0 (unregistering): Port device team_slave_0 removed
[  194.520652][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.542500][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.550581][ T9824] bridge_slave_0: entered allmulticast mode
[  194.557819][ T9824] bridge_slave_0: entered promiscuous mode
[  194.566442][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.575384][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'.
[  194.576007][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.592565][ T9824] bridge_slave_1: entered allmulticast mode
[  194.615212][ T9824] bridge_slave_1: entered promiscuous mode
[  194.683003][ T9924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.713225][ T6506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.722176][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'.
[  194.747771][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.785185][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.915274][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'.
[  194.957892][ T9824] team0: Port device team_slave_0 added
[  194.976915][ T9824] team0: Port device team_slave_1 added
[  194.993907][ T5840] Bluetooth: hci3: command tx timeout
[  195.045198][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.063005][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.099492][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.130816][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.160366][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.208323][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.348180][ T6506] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.522497][ T9936] bridge0: port 3(gretap0) entered blocking state
[  195.559790][ T9936] bridge0: port 3(gretap0) entered disabled state
[  195.602340][ T9936] gretap0: entered allmulticast mode
[  195.677230][ T9936] gretap0: entered promiscuous mode
[  195.693826][ T9936] bridge0: port 3(gretap0) entered blocking state
[  195.700413][ T9936] bridge0: port 3(gretap0) entered forwarding state
[  195.773189][ T9824] hsr_slave_0: entered promiscuous mode
[  195.803083][ T9824] hsr_slave_1: entered promiscuous mode
[  195.819473][ T9824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.834113][ T9824] Cannot create hsr debugfs directory
[  196.006956][ T9967] lo speed is unknown, defaulting to 1000
[  196.016723][ T9967] lo speed is unknown, defaulting to 1000
[  196.421829][ T9981] unknown channel width for channel at 909000KHz?
[  196.431772][ T9981] unknown channel width for channel at 909000KHz?
[  196.460051][ T9981] unknown channel width for channel at 909000KHz?
[  196.501663][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'.
[  196.627202][ T9984] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[  196.887832][ T9824] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  196.916840][ T9824] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  196.924689][ T9997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.951546][ T9824] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  196.994188][ T9824] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  197.058245][T10001] lo speed is unknown, defaulting to 1000
[  197.083276][ T5840] Bluetooth: hci3: command tx timeout
[  197.121399][T10001] lo speed is unknown, defaulting to 1000
[  197.162446][T10005] tipc: Started in network mode
[  197.183123][T10005] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  197.211363][T10005] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  197.257709][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'.
[  197.267599][T10010] netlink: 'syz.0.1136': attribute type 1 has an invalid length.
[  197.275623][T10010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1136'.
[  197.282910][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'.
[  197.355910][T10007] tc_dump_action: action bad kind
[  197.435483][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.503717][T10017] ip6tnl1: entered promiscuous mode
[  197.508974][T10017] ip6tnl1: entered allmulticast mode
[  197.674503][ T9824] 8021q: adding VLAN 0 to HW filter on device team0
[  197.701879][T10018] lo speed is unknown, defaulting to 1000
[  197.733154][T10018] lo speed is unknown, defaulting to 1000
[  197.775903][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.783095][ T8745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.805661][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'.
[  197.852487][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.859702][ T8745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.895333][T10030] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1139'.
[  197.920393][T10030] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  197.924454][ T9824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.950197][T10030] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1139'.
[  197.963597][T10032] unknown channel width for channel at 909000KHz?
[  197.989756][T10032] unknown channel width for channel at 909000KHz?
[  198.005109][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'.
[  198.005680][T10032] unknown channel width for channel at 909000KHz?
[  198.038983][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'.
[  198.404773][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'.
[  198.481236][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.496859][T10048] unknown channel width for channel at 909000KHz?
[  198.527713][T10048] unknown channel width for channel at 909000KHz?
[  198.542985][T10048] unknown channel width for channel at 909000KHz?
[  198.976148][ T9824] veth0_vlan: entered promiscuous mode
[  198.999240][ T9824] veth1_vlan: entered promiscuous mode
[  199.068859][ T9824] veth0_macvtap: entered promiscuous mode
[  199.099135][ T9824] veth1_macvtap: entered promiscuous mode
[  199.139047][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.160495][ T5840] Bluetooth: hci3: command tx timeout
[  199.190642][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.215101][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.235780][ T9824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.246949][ T9824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.261136][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.288033][ T9824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.324465][ T9824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.343406][T10074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.344421][ T9824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.385164][ T9824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.552924][T10081] lo speed is unknown, defaulting to 1000
[  199.560132][T10081] lo speed is unknown, defaulting to 1000
[  199.635309][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.661026][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.689005][T10084] unknown channel width for channel at 909000KHz?
[  199.693239][T10089] lo speed is unknown, defaulting to 1000
[  199.707019][T10084] unknown channel width for channel at 909000KHz?
[  199.743006][T10084] unknown channel width for channel at 909000KHz?
[  199.834962][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.845939][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.860073][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.930984][T10089] lo speed is unknown, defaulting to 1000
[  200.219791][T10099] sock: sock_set_timeout: `syz.1.1155' (pid 10099) tries to set negative timeout
[  200.857029][T10089] lo speed is unknown, defaulting to 1000
[  200.881840][T10089] lo speed is unknown, defaulting to 1000
[  200.970641][ T1306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.056896][ T1306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.239939][ T1306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.298052][ T1306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.386182][ T1306] bridge_slave_1: left allmulticast mode
[  201.391858][ T1306] bridge_slave_1: left promiscuous mode
[  201.399215][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.408589][ T1306] bridge_slave_0: left allmulticast mode
[  201.414681][ T1306] bridge_slave_0: left promiscuous mode
[  201.421752][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.864770][T10123] __nla_validate_parse: 5 callbacks suppressed
[  201.864788][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'.
[  201.959530][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'.
[  202.125409][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  202.136141][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  202.147495][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  202.147956][ T1306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.165071][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  202.177593][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  202.185245][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  202.209475][ T1306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.222009][ T1306] bond0 (unregistering): Released all slaves
[  202.280758][T10128] lo speed is unknown, defaulting to 1000
[  202.445632][T10128] lo speed is unknown, defaulting to 1000
[  202.705309][T10147] netlink: 'syz.3.1170': attribute type 10 has an invalid length.
[  202.718822][T10148] xt_TPROXY: Can be used only with -p tcp or -p udp
[  202.729888][T10143] bond0: (slave batadv0): Releasing backup interface
[  202.754092][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'.
[  202.768927][T10143] hsr0: left allmulticast mode
[  202.775188][T10143] hsr_slave_0: left allmulticast mode
[  202.783215][T10143] 0·: left allmulticast mode
[  202.787859][T10143] hsr0: left promiscuous mode
[  202.813284][T10143] bridge0: port 1(hsr0) entered disabled state
[  202.899135][T10160] gretap1: entered allmulticast mode
[  202.948612][T10165] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1173'.
[  202.982105][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'.
[  203.020904][ T1306] hsr_slave_0: left promiscuous mode
[  203.028621][ T1306] hsr_slave_1: left promiscuous mode
[  203.043988][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.051649][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.060195][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.070644][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.097056][ T1306] veth1_macvtap: left promiscuous mode
[  203.103047][ T1306] veth0_macvtap: left promiscuous mode
[  203.108670][ T1306] veth1_vlan: left promiscuous mode
[  203.115183][ T1306] veth0_vlan: left promiscuous mode
[  203.579654][ T1306] team0 (unregistering): Port device team_slave_1 removed
[  203.629781][ T1306] team0 (unregistering): Port device team_slave_0 removed
[  204.266490][T10128] chnl_net:caif_netlink_parms(): no params data found
[  204.274050][   T54] Bluetooth: hci3: command tx timeout
[  204.498454][T10128] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.530466][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'.
[  204.533840][T10128] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.590988][T10128] bridge_slave_0: entered allmulticast mode
[  204.606441][T10128] bridge_slave_0: entered promiscuous mode
[  204.617643][T10201] unknown channel width for channel at 909000KHz?
[  204.625424][T10201] unknown channel width for channel at 909000KHz?
[  204.643678][T10201] unknown channel width for channel at 909000KHz?
[  204.654609][T10128] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.671159][T10128] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.690291][T10208] Bluetooth: MGMT ver 1.23
[  204.696477][T10128] bridge_slave_1: entered allmulticast mode
[  204.706434][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'.
[  204.723008][T10128] bridge_slave_1: entered promiscuous mode
[  204.783010][T10207] unknown channel width for channel at 909000KHz?
[  204.785430][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.801806][T10207] unknown channel width for channel at 909000KHz?
[  204.833731][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  204.863104][T10207] unknown channel width for channel at 909000KHz?
[  204.904876][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.004093][T10212] netlink: 'syz.1.1185': attribute type 7 has an invalid length.
[  205.045163][T10128] team0: Port device team_slave_0 added
[  205.088880][T10128] team0: Port device team_slave_1 added
[  205.252246][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.272785][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.319495][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.339037][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.349252][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.385865][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.420970][T10221] vlan2: entered promiscuous mode
[  205.426294][T10221] gretap0: entered promiscuous mode
[  205.432258][T10221] vlan2: entered allmulticast mode
[  205.438591][T10221] gretap0: entered allmulticast mode
[  205.532209][T10128] hsr_slave_0: entered promiscuous mode
[  205.543639][T10128] hsr_slave_1: entered promiscuous mode
[  205.550085][T10128] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.559127][T10128] Cannot create hsr debugfs directory
[  205.609845][T10236] ipt_rpfilter: unknown options
[  205.777104][T10239] unknown channel width for channel at 909000KHz?
[  205.793000][T10239] unknown channel width for channel at 909000KHz?
[  205.800388][T10239] unknown channel width for channel at 909000KHz?
[  205.950823][T10246] netlink: 'syz.2.1197': attribute type 10 has an invalid length.
[  205.959212][T10246] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1197'.
[  206.220802][T10128] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.241966][T10245] delete_channel: no stack
[  206.269605][T10128] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.295240][T10128] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.335835][T10260] netlink: 'syz.2.1201': attribute type 2 has an invalid length.
[  206.349734][T10260] netlink: 'syz.2.1201': attribute type 8 has an invalid length.
[  206.354121][   T54] Bluetooth: hci3: command tx timeout
[  206.358946][T10260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'.
[  206.372357][T10128] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  206.388348][T10258] unknown channel width for channel at 909000KHz?
[  206.395178][T10258] unknown channel width for channel at 909000KHz?
[  206.410138][T10258] unknown channel width for channel at 909000KHz?
[  206.410577][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  206.579974][T10128] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.615548][T10128] 8021q: adding VLAN 0 to HW filter on device team0
[  206.643557][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.650709][ T8745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.689491][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.696699][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.789912][T10128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  206.820120][T10128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.003230][T10289] syzkaller1: entered allmulticast mode
[  207.169619][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.321356][T10315] tc_dump_action: action bad kind
[  207.583832][T10128] veth0_vlan: entered promiscuous mode
[  207.606270][T10128] veth1_vlan: entered promiscuous mode
[  207.642656][T10336] __nla_validate_parse: 1 callbacks suppressed
[  207.649129][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'.
[  207.699222][T10128] veth0_macvtap: entered promiscuous mode
[  207.726210][T10338] xt_nfacct: accounting object `syz1' does not exists
[  207.736778][T10128] veth1_macvtap: entered promiscuous mode
[  207.767686][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.786477][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.800407][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.809190][T10340] netlink: 'syz.0.1224': attribute type 11 has an invalid length.
[  207.813078][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.827966][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.838736][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.878124][T10128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.902794][T10128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.911574][T10128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.923652][T10128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.949614][T10349] netlink: 'syz.0.1227': attribute type 4 has an invalid length.
[  208.062468][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.087078][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.132194][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.141106][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.210298][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'.
[  208.307762][T10358] unknown channel width for channel at 909000KHz?
[  208.314643][T10358] unknown channel width for channel at 909000KHz?
[  208.321241][T10358] unknown channel width for channel at 909000KHz?
[  208.331112][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'.
[  208.546983][T10370] openvswitch: netlink: Message has 16 unknown bytes.
[  208.729851][T10386] netlink: 'syz.2.1238': attribute type 12 has an invalid length.
[  208.900685][T10393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.940962][T10393] netlink: zone id is out of range
[  208.957762][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  209.037402][T10399] netlink: 'syz.0.1242': attribute type 39 has an invalid length.
[  209.056454][T10402] netlink: 'syz.2.1238': attribute type 2 has an invalid length.
[  209.329521][T10412] netlink: 'syz.1.1243': attribute type 1 has an invalid length.
[  209.346078][T10412] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1243'.
[  212.004862][T10402] Tq€!7: entered promiscuous mode
[  212.034461][T10393] netlink: set zone limit has 4 unknown bytes
[  212.209664][ T4256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.324419][ T4256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.599652][ T4256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.655066][ T4256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.743204][ T4256] bridge_slave_1: left allmulticast mode
[  212.748861][ T4256] bridge_slave_1: left promiscuous mode
[  212.756511][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.766211][ T4256] bridge_slave_0: left allmulticast mode
[  212.771874][ T4256] bridge_slave_0: left promiscuous mode
[  212.777855][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.318792][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.418282][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1250'.
[  213.523258][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.570301][ T4256] bond0 (unregistering): Released all slaves
[  213.705021][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'.
[  213.801921][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.827417][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.841375][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.858509][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.867212][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.881009][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'.
[  213.891664][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.202590][T10459] lo speed is unknown, defaulting to 1000
[  214.210348][T10459] lo speed is unknown, defaulting to 1000
[  214.349631][ T4256] hsr_slave_0: left promiscuous mode
[  214.361209][ T4256] hsr_slave_1: left promiscuous mode
[  214.374293][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.392224][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.414843][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.422313][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.549014][ T4256] veth1_macvtap: left promiscuous mode
[  214.600383][ T4256] veth0_macvtap: left promiscuous mode
[  214.629167][ T4256] veth1_vlan: left promiscuous mode
[  214.650568][ T4256] veth0_vlan: left promiscuous mode
[  214.964685][T10491] netlink: 'syz.0.1264': attribute type 2 has an invalid length.
[  215.389023][T10496] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002
[  215.596636][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  215.641137][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  215.958156][ T5840] Bluetooth: hci3: command tx timeout
[  216.074372][T10491] Tq€: entered promiscuous mode
[  216.092403][T10496] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  216.123198][T10496] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  216.298157][T10459] chnl_net:caif_netlink_parms(): no params data found
[  216.376397][T10502] netlink: 'syz.3.1268': attribute type 21 has an invalid length.
[  216.400496][T10511] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1270'.
[  216.436833][T10499] tap0: tun_chr_ioctl cmd 1074025677
[  216.442336][T10499] tap0: linktype set to 774
[  216.503547][T10514] netlink: 'syz.3.1268': attribute type 3 has an invalid length.
[  216.580693][T10459] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.590048][T10459] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.640175][T10459] bridge_slave_0: entered allmulticast mode
[  216.656823][T10459] bridge_slave_0: entered promiscuous mode
[  216.743278][T10459] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.750453][T10459] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.775492][T10530] xt_TCPMSS: Only works on TCP SYN packets
[  216.787811][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1273'.
Connection to 10.128.0.8 closed by remote host.
[  216.833126][T10459] bridge_slave_1: entered allmulticast mode
[  216.840178][T10459] bridge_slave_1: entered promiscuous mode
[  217.393698][ T8853] ------------[ cut here ]------------
[  217.399501][ T8853] refcount_t: underflow; use-after-free.
[  217.405481][ T8853] WARNING: CPU: 0 PID: 8853 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0
[  217.415016][ T8853] Modules linked in:
[  217.418913][ T8853] CPU: 0 UID: 0 PID: 8853 Comm: kbnepd bnep0 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  217.429876][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  217.439944][ T8853] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  217.446103][ T8853] Code: 00 45 60 8c e8 17 4d 97 fc 90 0f 0b 90 90 eb 99 e8 9b a1 d6 fc c6 05 22 b6 1c 0b 01 90 48 c7 c7 60 45 60 8c e8 f7 4c 97 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 a1 d6 fc c6 05 fc b5 1c 0b 01 90
[  217.465952][ T8853] RSP: 0018:ffffc9000432f720 EFLAGS: 00010246
[  217.472095][ T8853] RAX: 63cc5772143b5a00 RBX: ffff88801238b878 RCX: ffff88802dc98000
[  217.480084][ T8853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  217.488057][ T8853] RBP: 0000000000000003 R08: ffffffff81800c22 R09: fffffbfff1cfa588
[  217.496038][ T8853] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffff88801238b860
[  217.504013][ T8853] R13: 1ffff1100247170c R14: ffff88801238b860 R15: ffffffff862ad220
[  217.512029][ T8853] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  217.521152][ T8853] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.527832][ T8853] CR2: 0000001b30514ff8 CR3: 000000000e738000 CR4: 00000000003526f0
[  217.535828][ T8853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  217.543806][ T8853] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  217.551789][ T8853] Call Trace:
[  217.555074][ T8853]  <TASK>
[  217.558010][ T8853]  ? __warn+0x165/0x4d0
[  217.562171][ T8853]  ? refcount_warn_saturate+0x15a/0x1d0
[  217.567814][ T8853]  ? report_bug+0x2b3/0x500
[  217.572308][ T8853]  ? refcount_warn_saturate+0x15a/0x1d0
[  217.577877][ T8853]  ? handle_bug+0x60/0x90
[  217.582228][ T8853]  ? exc_invalid_op+0x1a/0x50
[  217.586908][ T8853]  ? asm_exc_invalid_op+0x1a/0x20
[  217.591942][ T8853]  ? __pfx_klist_children_put+0x10/0x10
[  217.597544][ T8853]  ? __warn_printk+0x292/0x360
[  217.602329][ T8853]  ? refcount_warn_saturate+0x15a/0x1d0
[  217.607905][ T8853]  klist_dec_and_del+0x3ec/0x3f0
[  217.612925][ T8853]  ? __pfx_klist_children_put+0x10/0x10
[  217.618575][ T8853]  klist_del+0xa7/0x110
[  217.622855][ T8853]  device_del+0x2c9/0x9b0
[  217.627178][ T8853]  ? __pfx_device_del+0x10/0x10
[  217.632015][ T8853]  ? netdev_unregister_kobject+0x178/0x250
[  217.637971][ T8853]  unregister_netdevice_many_notify+0x1ae7/0x2070
[  217.644430][ T8853]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  217.651222][ T8853]  ? rcu_is_watching+0x15/0xb0
[  217.656011][ T8853]  ? trace_contention_end+0x3c/0x120
[  217.661280][ T8853]  ? __mutex_lock+0x397/0x1010
[  217.666305][ T8853]  ? unregister_netdev+0x17/0x30
[  217.671237][ T8853]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  217.677586][ T8853]  unregister_netdevice_queue+0x303/0x370
[  217.683362][ T8853]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  217.689590][ T8853]  ? down_write+0x18c/0x220
[  217.694106][ T8853]  ? __pfx_down_write+0x10/0x10
[  217.698970][ T8853]  unregister_netdev+0x21/0x30
[  217.703846][ T8853]  bnep_session+0x2e3c/0x3030
[  217.708538][ T8853]  ? __pfx_bnep_session+0x10/0x10
[  217.713691][ T8853]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  217.719677][ T8853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.726109][ T8853]  ? __pfx_woken_wake_function+0x10/0x10
[  217.731734][ T8853]  ? __kthread_parkme+0x169/0x1d0
[  217.736774][ T8853]  ? __pfx_bnep_session+0x10/0x10
[  217.741804][ T8853]  kthread+0x7a9/0x920
[  217.745888][ T8853]  ? __pfx_kthread+0x10/0x10
[  217.750467][ T8853]  ? __pfx_bnep_session+0x10/0x10
[  217.755516][ T8853]  ? __pfx_kthread+0x10/0x10
[  217.760094][ T8853]  ? __pfx_kthread+0x10/0x10
[  217.764770][ T8853]  ? __pfx_kthread+0x10/0x10
[  217.769353][ T8853]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.774592][ T8853]  ? lockdep_hardirqs_on+0x99/0x150
[  217.779807][ T8853]  ? __pfx_kthread+0x10/0x10
[  217.784421][ T8853]  ret_from_fork+0x4b/0x80
[  217.788823][ T8853]  ? __pfx_kthread+0x10/0x10
[  217.793427][ T8853]  ret_from_fork_asm+0x1a/0x30
[  217.798187][ T8853]  </TASK>
[  217.801224][ T8853] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  217.808481][ T8853] CPU: 0 UID: 0 PID: 8853 Comm: kbnepd bnep0 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0
[  217.819300][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  217.829340][ T8853] Call Trace:
[  217.832599][ T8853]  <TASK>
[  217.835512][ T8853]  dump_stack_lvl+0x241/0x360
[  217.840172][ T8853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.845352][ T8853]  ? __pfx__printk+0x10/0x10
[  217.849926][ T8853]  ? _printk+0xd5/0x120
[  217.854065][ T8853]  ? __init_begin+0x41000/0x41000
[  217.859075][ T8853]  ? vscnprintf+0x5d/0x90
[  217.863386][ T8853]  panic+0x349/0x880
[  217.867275][ T8853]  ? __warn+0x174/0x4d0
[  217.871412][ T8853]  ? __pfx_panic+0x10/0x10
[  217.875842][ T8853]  ? ret_from_fork_asm+0x1a/0x30
[  217.880761][ T8853]  __warn+0x344/0x4d0
[  217.884735][ T8853]  ? refcount_warn_saturate+0x15a/0x1d0
[  217.890263][ T8853]  report_bug+0x2b3/0x500
[  217.894572][ T8853]  ? refcount_warn_saturate+0x15a/0x1d0
[  217.900099][ T8853]  handle_bug+0x60/0x90
[  217.904236][ T8853]  exc_invalid_op+0x1a/0x50
[  217.908719][ T8853]  asm_exc_invalid_op+0x1a/0x20
[  217.913550][ T8853] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  217.919687][ T8853] Code: 00 45 60 8c e8 17 4d 97 fc 90 0f 0b 90 90 eb 99 e8 9b a1 d6 fc c6 05 22 b6 1c 0b 01 90 48 c7 c7 60 45 60 8c e8 f7 4c 97 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 a1 d6 fc c6 05 fc b5 1c 0b 01 90
[  217.939280][ T8853] RSP: 0018:ffffc9000432f720 EFLAGS: 00010246
[  217.945329][ T8853] RAX: 63cc5772143b5a00 RBX: ffff88801238b878 RCX: ffff88802dc98000
[  217.953279][ T8853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  217.961230][ T8853] RBP: 0000000000000003 R08: ffffffff81800c22 R09: fffffbfff1cfa588
[  217.969269][ T8853] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffff88801238b860
[  217.977309][ T8853] R13: 1ffff1100247170c R14: ffff88801238b860 R15: ffffffff862ad220
[  217.985281][ T8853]  ? __pfx_klist_children_put+0x10/0x10
[  217.990821][ T8853]  ? __warn_printk+0x292/0x360
[  217.995577][ T8853]  klist_dec_and_del+0x3ec/0x3f0
[  218.000500][ T8853]  ? __pfx_klist_children_put+0x10/0x10
[  218.006044][ T8853]  klist_del+0xa7/0x110
[  218.010184][ T8853]  device_del+0x2c9/0x9b0
[  218.014499][ T8853]  ? __pfx_device_del+0x10/0x10
[  218.019330][ T8853]  ? netdev_unregister_kobject+0x178/0x250
[  218.025121][ T8853]  unregister_netdevice_many_notify+0x1ae7/0x2070
[  218.031526][ T8853]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  218.038268][ T8853]  ? rcu_is_watching+0x15/0xb0
[  218.043012][ T8853]  ? trace_contention_end+0x3c/0x120
[  218.048286][ T8853]  ? __mutex_lock+0x397/0x1010
[  218.053039][ T8853]  ? unregister_netdev+0x17/0x30
[  218.057953][ T8853]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.064264][ T8853]  unregister_netdevice_queue+0x303/0x370
[  218.069968][ T8853]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  218.076186][ T8853]  ? down_write+0x18c/0x220
[  218.080670][ T8853]  ? __pfx_down_write+0x10/0x10
[  218.085540][ T8853]  unregister_netdev+0x21/0x30
[  218.090284][ T8853]  bnep_session+0x2e3c/0x3030
[  218.094972][ T8853]  ? __pfx_bnep_session+0x10/0x10
[  218.100018][ T8853]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  218.105904][ T8853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.112213][ T8853]  ? __pfx_woken_wake_function+0x10/0x10
[  218.117832][ T8853]  ? __kthread_parkme+0x169/0x1d0
[  218.122858][ T8853]  ? __pfx_bnep_session+0x10/0x10
[  218.127863][ T8853]  kthread+0x7a9/0x920
[  218.131913][ T8853]  ? __pfx_kthread+0x10/0x10
[  218.136484][ T8853]  ? __pfx_bnep_session+0x10/0x10
[  218.141494][ T8853]  ? __pfx_kthread+0x10/0x10
[  218.146063][ T8853]  ? __pfx_kthread+0x10/0x10
[  218.150632][ T8853]  ? __pfx_kthread+0x10/0x10
[  218.155204][ T8853]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.160386][ T8853]  ? lockdep_hardirqs_on+0x99/0x150
[  218.165566][ T8853]  ? __pfx_kthread+0x10/0x10
[  218.170162][ T8853]  ret_from_fork+0x4b/0x80
[  218.174561][ T8853]  ? __pfx_kthread+0x10/0x10
[  218.179135][ T8853]  ret_from_fork_asm+0x1a/0x30
[  218.183888][ T8853]  </TASK>
[  219.252989][ T8853] Shutting down cpus with NMI
[  219.258234][ T8853] Kernel Offset: disabled
[  219.262726][ T8853] Rebooting in 86400 seconds..