last executing test programs:

37.389416139s ago: executing program 3 (id=1381):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200000000000000000000004045f0ff000000f59500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', <r4=>0x0, 0x1, 0x40, 0x7, 0x7, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0xb, 0x6c, [@local, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0x66, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x7}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9231}, {@rand_addr=0x64010101, 0xffffffff}, {@rand_addr=0x64010100, 0x5}]}, @ssrr={0x89, 0xb, 0x2f, [@remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0x10, [@remote, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @private=0xa010102, @broadcast, @multicast2, @multicast2, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0xb, "bc8c2893af2074229f"}]}}}}}) (async)
pipe(&(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
readv(r5, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) (async)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000003c0)=0xfffffffe, 0x4) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="0700edd30f0000", @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r9], 0x10) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r10, &(0x7f0000000740)='|', 0x1, 0xc, &(0x7f00000007c0)={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xb) (async)
shutdown(r10, 0x1) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, 0x0, 0x0) (async)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in6={0xa, 0x4e23, 0x9, @remote, 0xfcb3}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x3, @local, 0x3ff}], 0x64) (async)
accept(r0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000880)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20)

37.206061776s ago: executing program 3 (id=1383):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fffc9060000c0"}, 0x38)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000180)=0xd, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) (async)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001900010000000008fedbdf251c140000fe00000100000000080001"], 0x24}}, 0x8000)

36.837696129s ago: executing program 3 (id=1386):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0xa000, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@end]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c00000010001ffe0098", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

31.642456907s ago: executing program 3 (id=1386):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0xa000, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@end]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c00000010001ffe0098", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

24.778789595s ago: executing program 1 (id=1508):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0xc4e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x62040200)
socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xfffffffffffffe59, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a00000027bd700000000000030006003301000002000000000000000000000000000000030005000000000002000000ac1e000100000000000000000200130013"], 0x50}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
close(r5)
socket(0x28, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000100000ddffffff000000d0a4fdc5ea70c7ac588f090055b4266e8300fb0c8c1680da9be1781dc24bb513e64045ba36c53e32105e0a8176cc9669c96ed6c7fffcfe574eea008fd434df4c46ac9eefdcdb0929e0345c4ff30e6ac1b8866933e837d4b50ec9db06517812f574bd16000000"], 0x50)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f00000008c0)={0x1ff}, 0x0, 0x0)
shutdown(r0, 0x0)

23.58503938s ago: executing program 1 (id=1521):
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x123, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, 0x0, 0x0)
unshare(0x24060400)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000180), 0x0}, 0x20)
recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/130, 0x82}, {&(0x7f0000001780)=""/154, 0x9a}, {&(0x7f0000001840)=""/249, 0xf9}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000001940)=""/123, 0x7b}], 0xa, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@lld}, @printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001ac0)={0xc0, 0x14, 0x780, 0x70bd25, 0x25dfdbfe, {0x29, 0xc}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "b60f23377d046ee37043f15e9e17a3365777a9f6a16ec33fdc7a892062f8162695bcdc1ed99b99f217cecd789ac7337a8f1e5bf1817f8a923481af3c74bb98aa1f22d223f7277228873fd05d1bb32367f947b96ba7084470cc044f642d31e580a4b4596f94365006e11be19b2897a19616a91f9026b0c47846d9a253551c223939e9c98037380c34fed27ebfedf41b93de2c4ef7fbbe411b41203d24b3567ce4e7a803768a712921"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x20004004)

23.444834732s ago: executing program 1 (id=1522):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="89850000000000000062"], &(0x7f0000000180)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

23.072409059s ago: executing program 1 (id=1526):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

22.751740774s ago: executing program 1 (id=1529):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x4, 0x5, 0x2, 0x80, 0xfffffff9, 0x7, 0x1000}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x4, 0x5, 0x2, 0x80, 0xfffffff9, 0x7, 0x1000}, 0x1c)

19.690007074s ago: executing program 3 (id=1386):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0xa000, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@end]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c00000010001ffe0098", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

8.587727364s ago: executing program 1 (id=1529):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x4, 0x5, 0x2, 0x80, 0xfffffff9, 0x7, 0x1000}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x4, 0x5, 0x2, 0x80, 0xfffffff9, 0x7, 0x1000}, 0x1c)

5.581442813s ago: executing program 3 (id=1386):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0xa000, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@end]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c00000010001ffe0098", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

4.611022627s ago: executing program 2 (id=1629):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x40000000)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00040000df7f00e6000000004d8cc8a036fa914941ed48a271bc38b05f4925f815fed82f6c7e6a543a9a6c20074a8d45e5a6587d6ac4a476a9a6bb5e98d57531a0cde105224b1b8dc6dbfb777bbfcd575baf1cd29d055422af606de7bd8772f69362a2c009156a0b533894d9e3d12d80230ebb76d9f46559c31361c6794e942fe0c0cfaed393c39971b1adf1877f7a4807396b95baf88e66e36d0652a00908e06f90468004562da4233fe66214f91623bf7956da11159c6fb48d3753c6b2953d745c34f9e20311d40bd37214377124082c4106400e036e256a986e201153cc3442c82628ef92c0287d08e6e7e3b37d08f5"], 0xffffffffffffffea}, 0x1, 0x0, 0x0, 0x2000c8d6}, 0x4ff0e4580c5fd45)

2.862162309s ago: executing program 2 (id=1637):
pipe(0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf87, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1e, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001100)="1e644d71429f169d7fa20a31b7261df2c55d402d08fabd798b37c1a1a902cfb4eb329d6bb0054bd7c1a6269aa24bb02179173f5a26c8121a725efe5fb1fde3673e7d4c8541b26cb8084ae451cf", 0x4d)
shutdown(r4, 0x2)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r3, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES64, @ANYRES32=r2, @ANYBLOB="39085b64850939db04eea73818277299808998da6e40d51dcde298f70857921e6f02cf29d602978ae869d8886f0424b11bf34dfe071f01cd49edd434380dc44fb60b0754b296528c178d5021cf5ee2251ee41dc01c2bc859f6f87e3965236e97e1f98696a361d6cde0563d916f0b703e0c686962a35e2d6ed7e0c4d7ef2d5a7817c0c79ac1e9a7b5a969c3", @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r1], 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r4, 0x4108a000)
readv(r7, &(0x7f00000010c0)=[{&(0x7f0000000f80)=""/151, 0x97}, {&(0x7f0000001040)=""/63, 0x3f}, {&(0x7f0000001080)=""/1, 0x1}], 0x3)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r8 = socket(0x1d, 0x1, 0x62)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, &(0x7f0000000040))
r9 = socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write(r9, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.856101068s ago: executing program 4 (id=1638):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfeab, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d605596e3d582a1c9322827787f4befc77fb80946a5bfccb7f13ed319ab96cbe2ff25f4a5efa691026d5ebd147fcd4a69476e1f2decbb48b2d7fe", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60101040001c0600fc010000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="748ad91b7309acff370ee2d47c211709a19bbefd3ba27db09514f48dfb68b750edb9582800fa8850970798"], 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/10, 0x2}, 0x20)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xad, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)=""/153, 0x117, 0x99, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, <r7=>0x0, 0xb9, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x6b, 0x8, 0x0, 0x0}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r7, @ANYRESDEC=r7], 0x32600)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r10, &(0x7f0000001100)=[{&(0x7f0000000ac0)='F', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$TUNSETLINK(r11, 0x400454cd, 0x6)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_lsm={0x1d, 0xb, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x69}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}], &(0x7f00000002c0)='GPL\x00', 0xad, 0x1000, &(0x7f0000000fc0)=""/4096, 0x41000, 0x32, '\x00', r5, 0x1b, r6, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xe, 0x8}, 0x10, r7, 0x0, 0x4, &(0x7f0000000a40)=[r9, r10, r13], &(0x7f0000000a80)=[{0x4, 0x5, 0xf, 0x2}, {0x4, 0x5, 0x9}, {0x4, 0x5}, {0x5, 0x4, 0x4, 0xb}], 0x10, 0x8001, @void, @value}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x4000010, r2, 0x180000000)

2.712380167s ago: executing program 4 (id=1640):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x200, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x50) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.669060294s ago: executing program 4 (id=1641):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r1}, 0x47)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48814}, 0x40810)
setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xffffc499, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a400000000009000200737d7a31000000000900010073797a30000000000800054000000025140011800a0001006c696d6974000000040001"], 0x98}, 0x1, 0x0, 0x0, 0x810}, 0xc4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0xfffffffffffffd59, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@RTA_UID={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x25dfdbf2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50c08}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x20)

2.537264793s ago: executing program 2 (id=1642):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="038000000000000000000000008000000eab00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
unshare(0x22020600)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c591", 0x5)
r3 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x581f72be6025aae0, 0x4, &(0x7f0000000780)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES32=r5], 0x20)

2.004966295s ago: executing program 0 (id=1644):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000500000000000000000000000a020000000000"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x1f)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xffffffff}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x301)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x11, 0x4}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xce, &(0x7f0000000200)=""/206, 0x0, 0x1, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)

1.794094652s ago: executing program 0 (id=1645):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000000000001000000", @ANYRES32, @ANYBLOB="0000f1ffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
unshare(0x4000680)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2600000000000000000000009c64ca9db1c16638bcac2cdfbd1ea8c9367690f43758a5fea84d1775c0fb290d5a24b43c8fcc0752c64a8ecd945a41fd278895f8017fd79b8d4ceba07fc6a99b39c1b5c9a4c4443fb6fb447a2fed0542587e2dc332231da6453456021033f81f9f6522bb91f669209431086e48be45f2d326213d9c8372bc740e61db46089b289ae3fc1a621ec27584ef8cd59294219869347b2ed61c723dfd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)

1.786041255s ago: executing program 4 (id=1646):
socket$caif_seqpacket(0x25, 0x5, 0x4)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2, {0x1, 0x0, 0x4}}, 0x18)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x2, {0x1, 0x0, 0x4}}, 0x18)
r8 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000300)={0xb000201e})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=<r9=>r3, 0x10, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="1b00000000000000", @ANYRES32=r2, @ANYBLOB="77816ee75cd78b10ca1ad8f6712f835d30f3d2eb6a311516cf1a7902598639ce7d583f8c53b65df3f9b1b03f", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r10], 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='ext4_collapse_range\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x33)
ppoll(&(0x7f0000000480)=[{r8, 0x2000}, {0xffffffffffffffff, 0x90ad}, {r11, 0x5440}, {r0, 0x8404}], 0x1, 0x0, 0x0, 0xffffffffffffff8c)
pselect6(0x40, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffd, 0x0, 0x4a}, 0x0, &(0x7f00000002c0)={0x9, 0x52, 0x3, 0x6, 0xfffffffffffffffd, 0x80000001, 0x2}, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, 0x0, 0x20000050)

1.736061064s ago: executing program 0 (id=1647):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000004c0)=@req={0x8, 0x8, 0x3, 0xfffffff7}, 0x10) (async, rerun: 64)
r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xf, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x8b8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xa5, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'sit0\x00', r6, 0x20, 0x8, 0x2, 0x40, {{0x1b, 0x4, 0x1, 0x4, 0x6c, 0x66, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @local, {[@end, @end, @lsrr={0x83, 0x1f, 0x2b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @remote, @remote, @multicast1]}, @lsrr={0x83, 0x3, 0x2e}, @rr={0x7, 0xf, 0x16, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xac02}, {@loopback, 0x1}, {@multicast1, 0x9}, {@multicast1, 0x8}]}]}}}}})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@deltfilter={0x38, 0x2d, 0x5, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, r11, {0x7, 0xfff3}, {0x0, 0xf}, {0xffff, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
pselect6(0x40, &(0x7f0000000900)={0x9a80000000, 0x6, 0x9, 0xffffffffffffff81, 0x7, 0x4, 0x6}, &(0x7f0000000940)={0x8, 0x0, 0x9e69, 0x1, 0x5, 0x0, 0x10001, 0x7b}, &(0x7f0000000980)={0x3, 0xfffffffffffffffc, 0x800, 0x8001, 0x5, 0x5a, 0x5, 0x5}, &(0x7f00000009c0)={0x0, 0x989680}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x1000000]}, 0x8})
shutdown(r7, 0x1) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) (rerun: 64)
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x1}, 0x24000090)
recvmsg(r7, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x40010022)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) (async)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]})
close(0x4)

1.40992908s ago: executing program 2 (id=1648):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
pipe(0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x3, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x1, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x58}}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@fallback=r7, r9, 0x1e, 0x0, 0x0, @void, @value}, 0x20)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f0000000108100040300000000000000fe8800000000fbffb600000000006556f25ce70001640101010000000000000000000000c30d00000000010000001400b7c20a4f991501e75630e12fc573251dd44c4f13e4cc60c123f4f92bbfb21a3edb37597c354cff92cb2ec3edacda5f5d299a6743ff7f60234ad9da86f811ee6045a252adc2f4b5b845b0dab8d978a0320d3e0018f4472a52c59f0bfabb9822f106306c1488da9afd4ad043e8145da1d48dcd0b5c32e8a1d7756be1af03bcaa20afd6ada908f4a1affb8ffd4793f902c7689808fe4fddc45eb1e60979496eab83bd7f6c93f8a6893cd974a7ed47ef39faa127ffcb5443df0b733a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000006c000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000900000000000000feffffffffffffff000000000000000000000000000000000000000000000000040000000000000005000000000000000000000025bd700003000000020000390000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

1.107885575s ago: executing program 0 (id=1649):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x800, 0x5, 0x8, 0x1000, r1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x5, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2a, 0x2, {0x60, 0x0, 0x0, r6, {0x1, 0x7}, {0xfff2, 0x4}, {0x0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6b}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x0, 0xffffffff, 0x101, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1c0}, 0x20042080)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r7}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\'-$'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x30}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r8 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000000100))
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0xa9, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000540), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x33, 0x0, 0x0)

894.273175ms ago: executing program 4 (id=1650):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x2)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x6d, &(0x7f0000000300)=ANY=[@ANYBLOB="0c005f22000000071190787f0000010000000000004e20004b9078417f0000cc8b2e7101d170908e071b38ebc3b160bf860073831b2b2202b9be4acde0181db14335e44f6561facc86d3bb283f0e2124867278110ee9788926a99e1f0a9200"/109], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
recvmmsg(r10, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1}, 0x1ff}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)

501.334709ms ago: executing program 2 (id=1651):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x8, 0x4) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x8, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet(0x2, 0x2, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r0, 0x80000000)

494.138643ms ago: executing program 0 (id=1652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'veth0_to_team\x00', @local})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50)

313.75506ms ago: executing program 2 (id=1653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1ff}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x20008000)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c)
shutdown(0xffffffffffffffff, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
shutdown(r4, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/221}, {&(0x7f0000000680)=""/228}]}}], 0x1, 0x60, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000880)={0x3, 0x9, 0x4, 0xfffffff9, 0x87f, 0x7, 0x6, 0x4}, &(0x7f00000008c0)=0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

110.05351ms ago: executing program 0 (id=1654):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x7fff)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000016000a0a25bd7000fedbdf250a0000fd", @ANYRES32=r2, @ANYBLOB="080008006005000008000a000000000014000200"/36], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4c040)

0s ago: executing program 4 (id=1655):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000246b0000000000000000000000000000000000000000000000400000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
unshare(0x26020480)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
unshare(0x2000400)
r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (fail_nth: 86)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}], 0x1, 0x400c000)
recvmmsg(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x40000001, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, 0x0, 0x20000000)
close(0xffffffffffffffff)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0xfffffffc)

kernel console output (not intermixed with test programs):

0/0x10
[  264.206659][T10172]  ? __pfx_generic_write_checks+0x10/0x10
[  264.206683][T10172]  ? rcu_read_lock_any_held+0xb7/0x160
[  264.206708][T10172]  ? file_update_time+0x2ab/0x450
[  264.206730][T10172]  shmem_file_write_iter+0xf9/0x120
[  264.206753][T10172]  vfs_write+0xacf/0xd10
[  264.206775][T10172]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  264.206799][T10172]  ? __pfx_vfs_write+0x10/0x10
[  264.206815][T10172]  ? do_sys_openat2+0x17a/0x1d0
[  264.206842][T10172]  ? __pfx_do_sys_openat2+0x10/0x10
[  264.206882][T10172]  ksys_write+0x18f/0x2b0
[  264.206903][T10172]  ? __pfx_ksys_write+0x10/0x10
[  264.206922][T10172]  ? do_syscall_64+0x100/0x230
[  264.206947][T10172]  ? do_syscall_64+0xb6/0x230
[  264.206971][T10172]  do_syscall_64+0xf3/0x230
[  264.206993][T10172]  ? clear_bhb_loop+0x35/0x90
[  264.207027][T10172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.207052][T10172] RIP: 0033:0x7fb10f18d169
[  264.207067][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.207082][T10172] RSP: 002b:00007fb10ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  264.207100][T10172] RAX: ffffffffffffffda RBX: 00007fb10f3a5fa0 RCX: 00007fb10f18d169
[  264.207113][T10172] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  264.207125][T10172] RBP: 00007fb10ffbe090 R08: 0000000000000000 R09: 0000000000000000
[  264.207136][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  264.207146][T10172] R13: 0000000000000000 R14: 00007fb10f3a5fa0 R15: 00007ffeff71e598
[  264.207173][T10172]  </TASK>
[  264.566371][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'.
[  264.576368][T10176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  264.601852][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'.
[  264.656422][T10186] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.665814][T10186] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.674956][T10186] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.684128][T10186] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.712751][T10186] vxlan0: entered promiscuous mode
[  264.722392][T10186] vxlan0: entered allmulticast mode
[  265.204083][T10219] FAULT_INJECTION: forcing a failure.
[  265.204083][T10219] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  265.234072][T10219] CPU: 0 UID: 0 PID: 10219 Comm: syz.3.1229 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  265.234100][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  265.234113][T10219] Call Trace:
[  265.234120][T10219]  <TASK>
[  265.234128][T10219]  dump_stack_lvl+0x241/0x360
[  265.234157][T10219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.234179][T10219]  ? __pfx__printk+0x10/0x10
[  265.234198][T10219]  ? __handle_mm_fault+0x5d44/0x70f0
[  265.234238][T10219]  should_fail_ex+0x40a/0x550
[  265.234272][T10219]  prepare_alloc_pages+0x1da/0x5b0
[  265.234302][T10219]  __alloc_frozen_pages_noprof+0x16f/0x710
[  265.234328][T10219]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  265.234371][T10219]  alloc_pages_mpol+0x311/0x660
[  265.234402][T10219]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  265.234428][T10219]  ? filemap_get_entry+0x123/0x3b0
[  265.234456][T10219]  ? __pfx_lock_release+0x10/0x10
[  265.234491][T10219]  folio_alloc_mpol_noprof+0x36/0x70
[  265.234519][T10219]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  265.234555][T10219]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  265.234584][T10219]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  265.234604][T10219]  ? __pfx___up_read+0x10/0x10
[  265.234631][T10219]  shmem_get_folio_gfp+0x621/0x1840
[  265.234649][T10219]  ? lockdep_hardirqs_on+0x99/0x150
[  265.234689][T10219]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  265.234706][T10219]  ? fault_in_iov_iter_readable+0x49/0x280
[  265.234727][T10219]  ? fault_in_readable+0x169/0x2d0
[  265.234758][T10219]  ? fault_in_readable+0x173/0x2d0
[  265.234782][T10219]  shmem_write_begin+0x165/0x350
[  265.234827][T10219]  ? __pfx_shmem_write_begin+0x10/0x10
[  265.234857][T10219]  ? fault_in_iov_iter_readable+0x229/0x280
[  265.234885][T10219]  generic_perform_write+0x346/0x990
[  265.234921][T10219]  ? __pfx_generic_perform_write+0x10/0x10
[  265.234944][T10219]  ? __pfx_generic_write_checks+0x10/0x10
[  265.234973][T10219]  ? rcu_read_lock_any_held+0xb7/0x160
[  265.235002][T10219]  ? file_update_time+0x2ab/0x450
[  265.235029][T10219]  shmem_file_write_iter+0xf9/0x120
[  265.235057][T10219]  vfs_write+0xacf/0xd10
[  265.235082][T10219]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  265.235110][T10219]  ? __pfx_vfs_write+0x10/0x10
[  265.235129][T10219]  ? do_sys_openat2+0x17a/0x1d0
[  265.235160][T10219]  ? __pfx_do_sys_openat2+0x10/0x10
[  265.235207][T10219]  ksys_write+0x18f/0x2b0
[  265.235231][T10219]  ? __pfx_ksys_write+0x10/0x10
[  265.235253][T10219]  ? do_syscall_64+0x100/0x230
[  265.235282][T10219]  ? do_syscall_64+0xb6/0x230
[  265.235310][T10219]  do_syscall_64+0xf3/0x230
[  265.235335][T10219]  ? clear_bhb_loop+0x35/0x90
[  265.235368][T10219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.235396][T10219] RIP: 0033:0x7f853e18d169
[  265.235413][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.235431][T10219] RSP: 002b:00007f853f0c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  265.235454][T10219] RAX: ffffffffffffffda RBX: 00007f853e3a5fa0 RCX: 00007f853e18d169
[  265.235468][T10219] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  265.235481][T10219] RBP: 00007f853f0c7090 R08: 0000000000000000 R09: 0000000000000000
[  265.235494][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  265.235506][T10219] R13: 0000000000000000 R14: 00007f853e3a5fa0 R15: 00007ffe34a11d18
[  265.235537][T10219]  </TASK>
[  265.594046][T10226] vxlan1: entered promiscuous mode
[  265.599204][T10226] vxlan1: entered allmulticast mode
[  265.959368][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1235'.
[  266.064803][T10242] bridge0: port 4(gretap0) entered blocking state
[  266.071462][T10242] bridge0: port 4(gretap0) entered forwarding state
[  266.084828][T10242] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.116021][T10242] 8021q: adding VLAN 0 to HW filter on device team0
[  266.217740][T10242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.294894][T10253] "syz.2.1238" (10253) uses obsolete ecb(arc4) skcipher
[  266.342162][T10253] delete_channel: no stack
[  266.462066][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'.
[  266.674903][T10276] lo speed is unknown, defaulting to 1000
[  266.854994][T10284] lo speed is unknown, defaulting to 1000
[  267.083043][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1247'.
[  267.170086][T10298] netlink: 'syz.2.1249': attribute type 7 has an invalid length.
[  267.386736][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'.
[  267.411860][T10308] lo speed is unknown, defaulting to 1000
[  267.459809][T10306] openvswitch: netlink: Flow key attr not present in new flow.
[  267.552515][T10311] Â: renamed from pim6reg1
[  267.635968][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'.
[  267.708182][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  267.721733][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  267.733215][T10323] netlink: 'syz.1.1257': attribute type 21 has an invalid length.
[  267.843553][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  267.884009][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  267.953292][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  268.004002][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'.
[  268.045798][T10332] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002
[  268.079988][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  268.089471][T10332] macvlan3: entered promiscuous mode
[  268.105426][T10332] macvlan3: entered allmulticast mode
[  268.118214][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  268.484071][T10359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.538743][T10358] tipc: Resetting bearer <eth:syzkaller0>
[  269.975654][T10358] tipc: Disabling bearer <eth:syzkaller0>
[  270.145529][T10382] netlink: 'syz.0.1275': attribute type 10 has an invalid length.
[  270.278548][T10381] netlink: set zone limit has 4 unknown bytes
[  270.634391][T10409] vxlan0: left promiscuous mode
[  270.643705][T10409] vxlan0: left allmulticast mode
[  270.660908][T10409] macvlan0: left promiscuous mode
[  270.680008][T10409] veth3: left promiscuous mode
[  270.804543][T10423] lo speed is unknown, defaulting to 1000
[  270.874123][T10427] bridge0: entered promiscuous mode
[  270.880770][T10427] macvlan3: entered promiscuous mode
[  271.053461][T10433] lo speed is unknown, defaulting to 1000
[  271.080832][T10435] lo speed is unknown, defaulting to 1000
[  271.196693][T10450] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  271.209375][T10449] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  271.298529][T10453] FAULT_INJECTION: forcing a failure.
[  271.298529][T10453] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  271.327365][T10453] CPU: 0 UID: 0 PID: 10453 Comm: syz.4.1295 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  271.327388][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  271.327400][T10453] Call Trace:
[  271.327406][T10453]  <TASK>
[  271.327414][T10453]  dump_stack_lvl+0x241/0x360
[  271.327447][T10453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.327467][T10453]  ? __pfx__printk+0x10/0x10
[  271.327485][T10453]  ? __handle_mm_fault+0x5d44/0x70f0
[  271.327522][T10453]  should_fail_ex+0x40a/0x550
[  271.327554][T10453]  prepare_alloc_pages+0x1da/0x5b0
[  271.327582][T10453]  __alloc_frozen_pages_noprof+0x16f/0x710
[  271.327604][T10453]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  271.327644][T10453]  alloc_pages_mpol+0x311/0x660
[  271.327673][T10453]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  271.327697][T10453]  ? filemap_get_entry+0x123/0x3b0
[  271.327724][T10453]  ? __pfx_lock_release+0x10/0x10
[  271.327756][T10453]  folio_alloc_mpol_noprof+0x36/0x70
[  271.327781][T10453]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  271.327815][T10453]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  271.327842][T10453]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  271.327861][T10453]  ? __pfx___up_read+0x10/0x10
[  271.327885][T10453]  shmem_get_folio_gfp+0x621/0x1840
[  271.327903][T10453]  ? lockdep_hardirqs_on+0x99/0x150
[  271.327939][T10453]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  271.327956][T10453]  ? fault_in_iov_iter_readable+0x49/0x280
[  271.327978][T10453]  ? fault_in_readable+0x169/0x2d0
[  271.327997][T10453]  ? fault_in_readable+0x173/0x2d0
[  271.328020][T10453]  shmem_write_begin+0x165/0x350
[  271.328045][T10453]  ? __pfx_shmem_write_begin+0x10/0x10
[  271.328071][T10453]  ? fault_in_iov_iter_readable+0x229/0x280
[  271.328096][T10453]  generic_perform_write+0x346/0x990
[  271.328127][T10453]  ? __pfx_generic_perform_write+0x10/0x10
[  271.328147][T10453]  ? __pfx_generic_write_checks+0x10/0x10
[  271.328172][T10453]  ? rcu_read_lock_any_held+0xb7/0x160
[  271.328198][T10453]  ? file_update_time+0x2ab/0x450
[  271.328222][T10453]  shmem_file_write_iter+0xf9/0x120
[  271.328246][T10453]  vfs_write+0xacf/0xd10
[  271.328269][T10453]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  271.328293][T10453]  ? __pfx_vfs_write+0x10/0x10
[  271.328309][T10453]  ? do_sys_openat2+0x17a/0x1d0
[  271.328337][T10453]  ? __pfx_do_sys_openat2+0x10/0x10
[  271.328377][T10453]  ksys_write+0x18f/0x2b0
[  271.328398][T10453]  ? __pfx_ksys_write+0x10/0x10
[  271.328418][T10453]  ? do_syscall_64+0x100/0x230
[  271.328451][T10453]  ? do_syscall_64+0xb6/0x230
[  271.328476][T10453]  do_syscall_64+0xf3/0x230
[  271.328497][T10453]  ? clear_bhb_loop+0x35/0x90
[  271.328525][T10453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.328549][T10453] RIP: 0033:0x7f9880f8d169
[  271.328564][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.328581][T10453] RSP: 002b:00007f9881e32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  271.328599][T10453] RAX: ffffffffffffffda RBX: 00007f98811a5fa0 RCX: 00007f9880f8d169
[  271.328613][T10453] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  271.328624][T10453] RBP: 00007f9881e32090 R08: 0000000000000000 R09: 0000000000000000
[  271.328635][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  271.328645][T10453] R13: 0000000000000000 R14: 00007f98811a5fa0 R15: 00007ffc34371b48
[  271.328673][T10453]  </TASK>
[  271.466417][T10439] IPv6: addrconf: prefix option has invalid lifetime
[  271.542899][   T29] audit: type=1804 audit(1741682789.025:4): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1293" name="/newroot/248/cgroup.controllers" dev="tmpfs" ino=1294 res=1 errno=0
[  271.695923][   T29] audit: type=1800 audit(1741682789.035:5): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1293" name="cgroup.controllers" dev="tmpfs" ino=1294 res=0 errno=0
[  271.789432][T10444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  271.878325][T10444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  272.304505][T10491] FAULT_INJECTION: forcing a failure.
[  272.304505][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.317790][T10491] CPU: 0 UID: 0 PID: 10491 Comm: syz.2.1307 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  272.317813][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  272.317824][T10491] Call Trace:
[  272.317831][T10491]  <TASK>
[  272.317838][T10491]  dump_stack_lvl+0x241/0x360
[  272.317866][T10491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.317888][T10491]  ? __pfx__printk+0x10/0x10
[  272.317910][T10491]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  272.317931][T10491]  ? __pfx___up_read+0x10/0x10
[  272.317959][T10491]  should_fail_ex+0x40a/0x550
[  272.317991][T10491]  copy_page_from_iter_atomic+0x301/0x1e60
[  272.318025][T10491]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  272.318058][T10491]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  272.318081][T10491]  ? shmem_write_begin+0x1e9/0x350
[  272.318117][T10491]  ? __pfx_shmem_write_begin+0x10/0x10
[  272.318145][T10491]  ? fault_in_iov_iter_readable+0x229/0x280
[  272.318171][T10491]  generic_perform_write+0x675/0x990
[  272.318204][T10491]  ? __pfx_generic_perform_write+0x10/0x10
[  272.318225][T10491]  ? __pfx_generic_write_checks+0x10/0x10
[  272.318251][T10491]  ? rcu_read_lock_any_held+0xb7/0x160
[  272.318278][T10491]  ? file_update_time+0x2ab/0x450
[  272.318303][T10491]  shmem_file_write_iter+0xf9/0x120
[  272.318329][T10491]  vfs_write+0xacf/0xd10
[  272.318353][T10491]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  272.318386][T10491]  ? __pfx_vfs_write+0x10/0x10
[  272.318403][T10491]  ? do_sys_openat2+0x17a/0x1d0
[  272.318432][T10491]  ? __pfx_do_sys_openat2+0x10/0x10
[  272.318474][T10491]  ksys_write+0x18f/0x2b0
[  272.318496][T10491]  ? __pfx_ksys_write+0x10/0x10
[  272.318516][T10491]  ? do_syscall_64+0x100/0x230
[  272.318544][T10491]  ? do_syscall_64+0xb6/0x230
[  272.318569][T10491]  do_syscall_64+0xf3/0x230
[  272.318591][T10491]  ? clear_bhb_loop+0x35/0x90
[  272.318622][T10491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.318647][T10491] RIP: 0033:0x7f0adbb8d169
[  272.318664][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.318680][T10491] RSP: 002b:00007f0adca1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  272.318700][T10491] RAX: ffffffffffffffda RBX: 00007f0adbda5fa0 RCX: 00007f0adbb8d169
[  272.318714][T10491] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  272.318726][T10491] RBP: 00007f0adca1f090 R08: 0000000000000000 R09: 0000000000000000
[  272.318738][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  272.318749][T10491] R13: 0000000000000000 R14: 00007f0adbda5fa0 R15: 00007ffcfbc307e8
[  272.318777][T10491]  </TASK>
[  272.644987][T10494] gretap0: left allmulticast mode
[  272.650065][T10494] gretap0: left promiscuous mode
[  272.685336][T10494] bridge0: port 4(gretap0) entered disabled state
[  272.770648][T10494] bond0: (slave batadv0): Releasing backup interface
[  272.779416][T10494] bridge_slave_0: left allmulticast mode
[  272.785551][T10494] bridge_slave_0: left promiscuous mode
[  272.791673][T10494] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.800223][T10494] bridge_slave_1: left promiscuous mode
[  272.806640][T10494] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.817695][T10494] bond0: (slave bond_slave_0): Releasing backup interface
[  272.827262][T10494] bond0: (slave bond_slave_1): Releasing backup interface
[  272.840912][T10494] team0: Failed to send options change via netlink (err -105)
[  272.849465][T10494] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  272.861990][T10494] team0: Port device team_slave_0 removed
[  272.869146][T10494] team0: Failed to send options change via netlink (err -105)
[  272.876883][T10494] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  272.886536][T10494] team0: Port device team_slave_1 removed
[  272.892669][T10494] batman_adv: batadv0: Removing interface: 

[  272.899544][T10494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.933068][T10494] team0: Failed to send options change via netlink (err -105)
[  272.940853][T10494] team0: Failed to send port change of device wlan1 via netlink (err -105)
[  272.950512][T10494] team0: Port device wlan1 removed
[  272.957914][T10494] batadv1: left allmulticast mode
[  272.963056][T10494] batadv1: left promiscuous mode
[  272.968390][T10494] bridge0: port 3(batadv1) entered disabled state
[  273.011725][T10503] team0: Failed to send options change via netlink (err -105)
[  273.020568][T10503] team0: Mode changed to "loadbalance"
[  273.068270][T10508] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  273.134663][T10510] __nla_validate_parse: 15 callbacks suppressed
[  273.134678][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'.
[  273.178907][T10510] hsr_slave_0: left promiscuous mode
[  273.201773][T10510] hsr_slave_1: left promiscuous mode
[  273.281150][T10521] netlink: 'syz.4.1316': attribute type 12 has an invalid length.
[  273.537037][T10521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.557165][T10521] netlink: 'syz.4.1316': attribute type 2 has an invalid length.
[  273.578539][T10521] Tq€!7: entered promiscuous mode
[  273.613888][T10540] lo speed is unknown, defaulting to 1000
[  273.852132][T10542] syzkaller1: entered promiscuous mode
[  273.871608][T10542] syzkaller1: entered allmulticast mode
[  274.185786][T10551] FAULT_INJECTION: forcing a failure.
[  274.185786][T10551] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  274.189273][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'.
[  274.209658][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'.
[  274.253645][T10551] CPU: 1 UID: 0 PID: 10551 Comm: syz.2.1323 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  274.253669][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  274.253680][T10551] Call Trace:
[  274.253686][T10551]  <TASK>
[  274.253693][T10551]  dump_stack_lvl+0x241/0x360
[  274.253721][T10551]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.253742][T10551]  ? __pfx__printk+0x10/0x10
[  274.253760][T10551]  ? __handle_mm_fault+0x5d44/0x70f0
[  274.253796][T10551]  should_fail_ex+0x40a/0x550
[  274.253827][T10551]  prepare_alloc_pages+0x1da/0x5b0
[  274.253853][T10551]  __alloc_frozen_pages_noprof+0x16f/0x710
[  274.253878][T10551]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  274.253917][T10551]  alloc_pages_mpol+0x311/0x660
[  274.253946][T10551]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  274.253978][T10551]  ? filemap_get_entry+0x123/0x3b0
[  274.254005][T10551]  ? __pfx_lock_release+0x10/0x10
[  274.254037][T10551]  folio_alloc_mpol_noprof+0x36/0x70
[  274.254062][T10551]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  274.254096][T10551]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  274.254122][T10551]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  274.254141][T10551]  ? __pfx___up_read+0x10/0x10
[  274.254165][T10551]  shmem_get_folio_gfp+0x621/0x1840
[  274.254182][T10551]  ? lockdep_hardirqs_on+0x99/0x150
[  274.254218][T10551]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  274.254236][T10551]  ? fault_in_iov_iter_readable+0x49/0x280
[  274.254257][T10551]  ? fault_in_readable+0x169/0x2d0
[  274.254276][T10551]  ? fault_in_readable+0x173/0x2d0
[  274.254298][T10551]  shmem_write_begin+0x165/0x350
[  274.254323][T10551]  ? __pfx_shmem_write_begin+0x10/0x10
[  274.254348][T10551]  ? fault_in_iov_iter_readable+0x229/0x280
[  274.254372][T10551]  generic_perform_write+0x346/0x990
[  274.254401][T10551]  ? __pfx_generic_perform_write+0x10/0x10
[  274.254421][T10551]  ? __mark_inode_dirty+0x3db/0xe90
[  274.254449][T10551]  ? mnt_put_write_access_file+0xbf/0x100
[  274.254468][T10551]  ? file_update_time+0x3dd/0x450
[  274.254491][T10551]  shmem_file_write_iter+0xf9/0x120
[  274.254514][T10551]  vfs_write+0xacf/0xd10
[  274.254537][T10551]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  274.254561][T10551]  ? __pfx_vfs_write+0x10/0x10
[  274.254577][T10551]  ? do_sys_openat2+0x17a/0x1d0
[  274.254604][T10551]  ? __pfx_do_sys_openat2+0x10/0x10
[  274.254644][T10551]  ksys_write+0x18f/0x2b0
[  274.254665][T10551]  ? __pfx_ksys_write+0x10/0x10
[  274.254685][T10551]  ? do_syscall_64+0x100/0x230
[  274.254710][T10551]  ? do_syscall_64+0xb6/0x230
[  274.254734][T10551]  do_syscall_64+0xf3/0x230
[  274.254755][T10551]  ? clear_bhb_loop+0x35/0x90
[  274.254784][T10551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.254807][T10551] RIP: 0033:0x7f0adbb8d169
[  274.254822][T10551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.254837][T10551] RSP: 002b:00007f0adca1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.254856][T10551] RAX: ffffffffffffffda RBX: 00007f0adbda5fa0 RCX: 00007f0adbb8d169
[  274.254869][T10551] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  274.254881][T10551] RBP: 00007f0adca1f090 R08: 0000000000000000 R09: 0000000000000000
[  274.254891][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  274.254902][T10551] R13: 0000000000000000 R14: 00007f0adbda5fa0 R15: 00007ffcfbc307e8
[  274.254929][T10551]  </TASK>
[  274.750054][T10557] lo speed is unknown, defaulting to 1000
[  274.825304][T10563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1326'.
[  275.028216][T10567] netlink: 'syz.1.1327': attribute type 3 has an invalid length.
[  275.284385][T10581] netlink: 'syz.1.1331': attribute type 3 has an invalid length.
[  275.312182][T10581] x_tables: duplicate underflow at hook 1
[  275.377623][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[  275.670717][T10595] FAULT_INJECTION: forcing a failure.
[  275.670717][T10595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.684054][T10595] CPU: 0 UID: 0 PID: 10595 Comm: syz.1.1336 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  275.684078][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  275.684089][T10595] Call Trace:
[  275.684095][T10595]  <TASK>
[  275.684103][T10595]  dump_stack_lvl+0x241/0x360
[  275.684131][T10595]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.684153][T10595]  ? __pfx__printk+0x10/0x10
[  275.684176][T10595]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  275.684197][T10595]  ? __pfx___up_read+0x10/0x10
[  275.684225][T10595]  should_fail_ex+0x40a/0x550
[  275.684259][T10595]  copy_page_from_iter_atomic+0x301/0x1e60
[  275.684294][T10595]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  275.684328][T10595]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  275.684351][T10595]  ? shmem_write_begin+0x1e9/0x350
[  275.684377][T10595]  ? __pfx_shmem_write_begin+0x10/0x10
[  275.684405][T10595]  ? fault_in_iov_iter_readable+0x229/0x280
[  275.684432][T10595]  generic_perform_write+0x675/0x990
[  275.684465][T10595]  ? __pfx_generic_perform_write+0x10/0x10
[  275.684487][T10595]  ? __pfx_generic_write_checks+0x10/0x10
[  275.684513][T10595]  ? rcu_read_lock_any_held+0xb7/0x160
[  275.684540][T10595]  ? file_update_time+0x2ab/0x450
[  275.684564][T10595]  shmem_file_write_iter+0xf9/0x120
[  275.684589][T10595]  vfs_write+0xacf/0xd10
[  275.684613][T10595]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  275.684639][T10595]  ? __pfx_vfs_write+0x10/0x10
[  275.684656][T10595]  ? do_sys_openat2+0x17a/0x1d0
[  275.684685][T10595]  ? __pfx_do_sys_openat2+0x10/0x10
[  275.684728][T10595]  ksys_write+0x18f/0x2b0
[  275.684751][T10595]  ? __pfx_ksys_write+0x10/0x10
[  275.684772][T10595]  ? do_syscall_64+0x100/0x230
[  275.684800][T10595]  ? do_syscall_64+0xb6/0x230
[  275.684826][T10595]  do_syscall_64+0xf3/0x230
[  275.684849][T10595]  ? clear_bhb_loop+0x35/0x90
[  275.684886][T10595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.684912][T10595] RIP: 0033:0x7fb25338d169
[  275.684928][T10595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.684945][T10595] RSP: 002b:00007fb25427e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  275.684964][T10595] RAX: ffffffffffffffda RBX: 00007fb2535a5fa0 RCX: 00007fb25338d169
[  275.684978][T10595] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  275.684990][T10595] RBP: 00007fb25427e090 R08: 0000000000000000 R09: 0000000000000000
[  275.685001][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  275.685012][T10595] R13: 0000000000000000 R14: 00007fb2535a5fa0 R15: 00007ffd77273308
[  275.685042][T10595]  </TASK>
[  276.502554][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  276.589468][T10626] FAULT_INJECTION: forcing a failure.
[  276.589468][T10626] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  276.620332][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.3.1347 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  276.620362][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  276.620375][T10626] Call Trace:
[  276.620382][T10626]  <TASK>
[  276.620390][T10626]  dump_stack_lvl+0x241/0x360
[  276.620437][T10626]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.620460][T10626]  ? __pfx__printk+0x10/0x10
[  276.620492][T10626]  ? __handle_mm_fault+0x5d44/0x70f0
[  276.620531][T10626]  should_fail_ex+0x40a/0x550
[  276.620565][T10626]  prepare_alloc_pages+0x1da/0x5b0
[  276.620596][T10626]  __alloc_frozen_pages_noprof+0x16f/0x710
[  276.620622][T10626]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  276.620664][T10626]  alloc_pages_mpol+0x311/0x660
[  276.620695][T10626]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  276.620720][T10626]  ? filemap_get_entry+0x123/0x3b0
[  276.620759][T10626]  ? __pfx_lock_release+0x10/0x10
[  276.620792][T10626]  folio_alloc_mpol_noprof+0x36/0x70
[  276.620817][T10626]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  276.620870][T10626]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  276.620899][T10626]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  276.620920][T10626]  ? __pfx___up_read+0x10/0x10
[  276.620957][T10626]  shmem_get_folio_gfp+0x621/0x1840
[  276.620974][T10626]  ? lockdep_hardirqs_on+0x99/0x150
[  276.621011][T10626]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  276.621036][T10626]  ? fault_in_iov_iter_readable+0x49/0x280
[  276.621057][T10626]  ? fault_in_readable+0x169/0x2d0
[  276.621077][T10626]  ? fault_in_readable+0x173/0x2d0
[  276.621100][T10626]  shmem_write_begin+0x165/0x350
[  276.621125][T10626]  ? __pfx_shmem_write_begin+0x10/0x10
[  276.621152][T10626]  ? fault_in_iov_iter_readable+0x229/0x280
[  276.621176][T10626]  generic_perform_write+0x346/0x990
[  276.621207][T10626]  ? __pfx_generic_perform_write+0x10/0x10
[  276.621227][T10626]  ? __mark_inode_dirty+0x3db/0xe90
[  276.621255][T10626]  ? mnt_put_write_access_file+0xbf/0x100
[  276.621277][T10626]  ? file_update_time+0x3dd/0x450
[  276.621300][T10626]  shmem_file_write_iter+0xf9/0x120
[  276.621324][T10626]  vfs_write+0xacf/0xd10
[  276.621346][T10626]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  276.621370][T10626]  ? __pfx_vfs_write+0x10/0x10
[  276.621400][T10626]  ? __task_pid_nr_ns+0x28/0x450
[  276.621425][T10626]  ksys_write+0x18f/0x2b0
[  276.621447][T10626]  ? __pfx_ksys_write+0x10/0x10
[  276.621466][T10626]  ? do_syscall_64+0x100/0x230
[  276.621492][T10626]  ? do_syscall_64+0xb6/0x230
[  276.621516][T10626]  do_syscall_64+0xf3/0x230
[  276.621538][T10626]  ? clear_bhb_loop+0x35/0x90
[  276.621567][T10626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.621591][T10626] RIP: 0033:0x7f853e18d169
[  276.621606][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.621622][T10626] RSP: 002b:00007f853f0c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  276.621641][T10626] RAX: ffffffffffffffda RBX: 00007f853e3a5fa0 RCX: 00007f853e18d169
[  276.621654][T10626] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  276.621665][T10626] RBP: 00007f853f0c7090 R08: 0000000000000000 R09: 0000000000000000
[  276.621676][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  276.621686][T10626] R13: 0000000000000000 R14: 00007f853e3a5fa0 R15: 00007ffe34a11d18
[  276.621714][T10626]  </TASK>
[  277.071787][T10634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  277.079275][T10634] IPv6: NLM_F_CREATE should be set when creating new route
[  277.086554][T10634] IPv6: NLM_F_CREATE should be set when creating new route
[  277.093812][T10634] IPv6: NLM_F_CREATE should be set when creating new route
[  277.175180][T10637] lo speed is unknown, defaulting to 1000
[  277.211261][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1352'.
[  277.296789][T10646] SET target dimension over the limit!
[  277.609622][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1356'.
[  277.616394][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1357'.
[  277.724732][T10660] netlink: 'syz.3.1358': attribute type 12 has an invalid length.
[  277.763807][T10660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1358'.
[  277.884791][T10667] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  277.914850][T10673] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.264715][T10693] netlink: 'syz.3.1368': attribute type 3 has an invalid length.
[  278.271410][T10685] lo speed is unknown, defaulting to 1000
[  278.280065][T10690] __nla_validate_parse: 5 callbacks suppressed
[  278.280082][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'.
[  278.307683][T10693] netlink: 'syz.3.1368': attribute type 3 has an invalid length.
[  278.319121][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1368'.
[  278.442242][T10700] tipc: Started in network mode
[  278.461571][T10700] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  278.470788][T10700] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  278.480463][T10702] netlink: 'syz.3.1373': attribute type 4 has an invalid length.
[  278.598939][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'.
[  278.681739][T10714] x_tables: duplicate underflow at hook 3
[  278.713487][T10714] xt_TCPMSS: Only works on TCP SYN packets
[  278.754183][T10714] netlink: 'syz.4.1378': attribute type 2 has an invalid length.
[  278.889303][T10685] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1369'.
[  278.949268][T10723] lo speed is unknown, defaulting to 1000
[  279.760401][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1380'.
[  280.018880][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.028874][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.038055][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.046046][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  280.054740][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  280.062086][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  280.143153][T10762] lo speed is unknown, defaulting to 1000
[  280.249381][T10761] infiniband syz1: set down
[  280.281396][T10761] infiniband syz1: added team_slave_0
[  280.373031][T10776] lo speed is unknown, defaulting to 1000
[  280.380972][T10761] RDS/IB: syz1: added
[  280.385325][T10761] smc: adding ib device syz1 with port count 1
[  280.391750][T10761] smc:    ib device syz1 port 1 has pnetid 
[  280.426421][T10779] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  280.449424][T10762] chnl_net:caif_netlink_parms(): no params data found
[  280.483274][T10779] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:0
[  280.622287][T10762] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.629694][T10762] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.637353][T10762] bridge_slave_0: entered allmulticast mode
[  280.644342][T10762] bridge_slave_0: entered promiscuous mode
[  280.652701][T10762] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.660342][T10762] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.667617][T10762] bridge_slave_1: entered allmulticast mode
[  280.675357][T10762] bridge_slave_1: entered promiscuous mode
[  280.712917][T10762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.732848][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'.
[  280.759751][T10762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.810019][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  280.824190][T10762] team0: Port device team_slave_0 added
[  280.832988][T10762] team0: Port device team_slave_1 added
[  280.839076][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  280.854823][T10792] netlink: 'syz.1.1398': attribute type 14 has an invalid length.
[  280.862659][T10792] netlink: 'syz.1.1398': attribute type 11 has an invalid length.
[  280.886959][T10762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.894864][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.930185][T10762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.949019][T10762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.957204][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.989934][T10762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.050854][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1399'.
[  281.109353][T10762] hsr_slave_0: entered promiscuous mode
[  281.134531][T10762] hsr_slave_1: entered promiscuous mode
[  281.140545][T10762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.169510][T10762] Cannot create hsr debugfs directory
[  281.381147][T10806] netlink: 'syz.2.1403': attribute type 4 has an invalid length.
[  281.565766][T10811] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  281.591663][T10818] Bluetooth: MGMT ver 1.23
[  281.595131][T10811] bond_slave_1: entered promiscuous mode
[  281.601744][T10811] bond_slave_1: entered allmulticast mode
[  281.745940][T10762] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  281.762511][T10762] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  281.776589][T10762] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  281.791495][T10762] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  281.925533][T10762] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.944021][T10762] 8021q: adding VLAN 0 to HW filter on device team0
[  281.965983][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.973100][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.983924][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.991099][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.026664][T10762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  282.047234][T10762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  282.106650][ T5848] Bluetooth: hci2: command tx timeout
[  282.154960][T10820] lo speed is unknown, defaulting to 1000
[  282.386264][T10762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.470098][T10762] veth0_vlan: entered promiscuous mode
[  282.510398][T10762] veth1_vlan: entered promiscuous mode
[  282.567311][T10762] veth0_macvtap: entered promiscuous mode
[  282.604491][T10762] veth1_macvtap: entered promiscuous mode
[  282.624890][T10762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.642506][T10762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.661151][T10762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.671872][T10762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.686608][T10762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.696921][T10762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.801143][T10852] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1414'.
[  282.812953][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.838204][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.855597][T10852] openvswitch: netlink: Message has 8 unknown bytes.
[  282.890407][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.898799][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.168162][T10874] wireguard0: entered promiscuous mode
[  283.175793][T10874] wireguard0: entered allmulticast mode
[  283.525793][T10896] lo speed is unknown, defaulting to 1000
[  283.551018][T10898] __nla_validate_parse: 5 callbacks suppressed
[  283.551030][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'.
[  283.593944][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'.
[  283.616687][T10898] dummy0: entered promiscuous mode
[  283.622773][T10898] erspan0: entered promiscuous mode
[  283.645626][T10898] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  283.653206][T10898] Cannot create hsr debugfs directory
[  283.659107][T10898] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  283.774462][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'.
[  283.869173][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1430'.
[  283.878572][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1430'.
[  284.008064][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1432'.
[  284.010993][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'.
[  284.056699][T10911] macvlan0: entered promiscuous mode
[  284.075715][T10910] bridge0: port 1(gretap0) entered blocking state
[  284.082448][T10910] bridge0: port 1(gretap0) entered disabled state
[  284.089962][T10910] gretap0: entered allmulticast mode
[  284.100730][T10910] gretap0: entered promiscuous mode
[  284.114425][T10910] bridge0: port 1(gretap0) entered blocking state
[  284.120986][T10910] bridge0: port 1(gretap0) entered forwarding state
[  284.149515][T10912] gretap0: left allmulticast mode
[  284.158911][T10912] gretap0: left promiscuous mode
[  284.175400][T10912] bridge0: port 1(gretap0) entered disabled state
[  284.922516][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.082729][T10934] 8021q: VLANs not supported on ipvlan1
[  285.101457][T10934] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  285.362211][T10949] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1442'.
[  285.386107][T10956] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1442'.
[  285.518136][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  285.537679][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  285.549590][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  285.570985][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  285.583050][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  285.590596][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  285.692267][T10959] lo speed is unknown, defaulting to 1000
[  285.814655][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'.
[  286.077856][T10991] netlink: 'syz.2.1455': attribute type 1 has an invalid length.
[  286.167071][T10991] bond1: entered promiscuous mode
[  286.172381][T10991] 8021q: adding VLAN 0 to HW filter on device bond1
[  286.226438][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.251071][T11010] netlink: zone id is out of range
[  286.260016][T11010] netlink: get zone limit has 8 unknown bytes
[  286.335991][T11016] netlink: 'syz.4.1460': attribute type 3 has an invalid length.
[  286.345112][T10959] chnl_net:caif_netlink_parms(): no params data found
[  286.431996][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.450295][T11024] netlink: 'syz.2.1459': attribute type 10 has an invalid length.
[  286.466771][T11016] macvlan3: entered promiscuous mode
[  286.472736][T11016] macvlan3: entered allmulticast mode
[  286.480857][T11016] bond0: entered allmulticast mode
[  286.491770][T11016] bond0: entered promiscuous mode
[  286.499710][T11016] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  286.508833][T11016] team0: Port device macvlan3 added
[  286.514988][T11029] sctp: [Deprecated]: syz.2.1459 (pid 11029) Use of int in maxseg socket option.
[  286.514988][T11029] Use struct sctp_assoc_value instead
[  286.544153][T11024] veth0_macvtap: left promiscuous mode
[  286.553002][T11024] batman_adv: batadv0: Adding interface: macvtap0
[  286.574657][T11024] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.630628][T11024] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  286.742748][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.895320][T11052] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  286.961421][T10959] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.987984][T10959] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.996419][T10959] bridge_slave_0: entered allmulticast mode
[  287.003905][T10959] bridge_slave_0: entered promiscuous mode
[  287.012377][T11054] syz_tun: entered allmulticast mode
[  287.022457][T11052] xt_hashlimit: size too large, truncated to 1048576
[  287.075235][T11058] xt_hashlimit: size too large, truncated to 1048576
[  287.105752][T11053] syz_tun: left allmulticast mode
[  287.128479][T10959] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.144998][T10959] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.152338][T10959] bridge_slave_1: entered allmulticast mode
[  287.183566][T10959] bridge_slave_1: entered promiscuous mode
[  287.327810][T11067] netlink: 'syz.0.1471': attribute type 3 has an invalid length.
[  287.362101][T11070] macvlan1: entered promiscuous mode
[  287.375086][T11070] macvlan1: entered allmulticast mode
[  287.396696][T10959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.412693][T11074] pim6reg: entered allmulticast mode
[  287.457008][T10959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.609169][   T12] bridge_slave_1: left allmulticast mode
[  287.616175][   T12] bridge_slave_1: left promiscuous mode
[  287.623284][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.630649][ T5837] Bluetooth: hci2: command tx timeout
[  287.641076][T11072] lo speed is unknown, defaulting to 1000
[  287.665453][   T12] bridge_slave_0: left allmulticast mode
[  287.673544][   T12] bridge_slave_0: left promiscuous mode
[  287.689636][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.845088][T11094] ipt_rpfilter: unknown options
[  288.204540][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.220457][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.230658][   T12] bond0 (unregistering): Released all slaves
[  288.264932][T10959] team0: Port device team_slave_0 added
[  288.348783][T10959] team0: Port device team_slave_1 added
[  288.539157][T10959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.562343][T10959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.603823][T10959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.635446][T11119] __nla_validate_parse: 10 callbacks suppressed
[  288.635461][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'.
[  288.673878][T10959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.680850][T10959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.714748][T10959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.759414][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'.
[  288.879614][T11127] ip6gre1: entered allmulticast mode
[  288.885834][T11134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  288.962397][T10959] hsr_slave_0: entered promiscuous mode
[  288.970030][T10959] hsr_slave_1: entered promiscuous mode
[  288.976078][T10959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.984148][T10959] Cannot create hsr debugfs directory
[  288.993220][T11136] IPVS: Error connecting to the multicast addr
[  289.018643][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'.
[  289.027796][T11140] FAULT_INJECTION: forcing a failure.
[  289.027796][T11140] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.040905][T11140] CPU: 1 UID: 0 PID: 11140 Comm: syz.2.1489 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  289.040937][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  289.040948][T11140] Call Trace:
[  289.040954][T11140]  <TASK>
[  289.040961][T11140]  dump_stack_lvl+0x241/0x360
[  289.040988][T11140]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.041007][T11140]  ? __pfx__printk+0x10/0x10
[  289.041028][T11140]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  289.041055][T11140]  ? __pfx___up_read+0x10/0x10
[  289.041082][T11140]  should_fail_ex+0x40a/0x550
[  289.041114][T11140]  copy_page_from_iter_atomic+0x301/0x1e60
[  289.041147][T11140]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  289.041195][T11140]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  289.041218][T11140]  ? shmem_write_begin+0x1e9/0x350
[  289.041243][T11140]  ? __pfx_shmem_write_begin+0x10/0x10
[  289.041271][T11140]  ? fault_in_iov_iter_readable+0x229/0x280
[  289.041297][T11140]  generic_perform_write+0x675/0x990
[  289.041330][T11140]  ? __pfx_generic_perform_write+0x10/0x10
[  289.041350][T11140]  ? __pfx_generic_write_checks+0x10/0x10
[  289.041377][T11140]  ? rcu_read_lock_any_held+0xb7/0x160
[  289.041403][T11140]  ? file_update_time+0x2ab/0x450
[  289.041429][T11140]  shmem_file_write_iter+0xf9/0x120
[  289.041454][T11140]  vfs_write+0xacf/0xd10
[  289.041478][T11140]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  289.041504][T11140]  ? __pfx_vfs_write+0x10/0x10
[  289.041520][T11140]  ? do_sys_openat2+0x17a/0x1d0
[  289.041550][T11140]  ? __pfx_do_sys_openat2+0x10/0x10
[  289.041592][T11140]  ksys_write+0x18f/0x2b0
[  289.041614][T11140]  ? __pfx_ksys_write+0x10/0x10
[  289.041635][T11140]  ? do_syscall_64+0x100/0x230
[  289.041661][T11140]  ? do_syscall_64+0xb6/0x230
[  289.041687][T11140]  do_syscall_64+0xf3/0x230
[  289.041710][T11140]  ? clear_bhb_loop+0x35/0x90
[  289.041740][T11140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.041765][T11140] RIP: 0033:0x7f0adbb8d169
[  289.041782][T11140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.041798][T11140] RSP: 002b:00007f0adca1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  289.041818][T11140] RAX: ffffffffffffffda RBX: 00007f0adbda5fa0 RCX: 00007f0adbb8d169
[  289.041832][T11140] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  289.041844][T11140] RBP: 00007f0adca1f090 R08: 0000000000000000 R09: 0000000000000000
[  289.041855][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  289.041866][T11140] R13: 0000000000000000 R14: 00007f0adbda5fa0 R15: 00007ffcfbc307e8
[  289.041896][T11140]  </TASK>
[  289.310140][T11141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1488'.
[  289.515224][T11149] netlink: 'syz.4.1492': attribute type 11 has an invalid length.
[  289.704533][ T5837] Bluetooth: hci2: command tx timeout
[  289.725801][   T12] hsr_slave_0: left promiscuous mode
[  289.733060][   T12] hsr_slave_1: left promiscuous mode
[  289.746909][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.770133][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.785786][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.793270][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.817978][   T12] veth1_macvtap: left promiscuous mode
[  289.840534][   T12] veth0_macvtap: left promiscuous mode
[  289.853256][   T12] veth1_vlan: left promiscuous mode
[  289.865854][   T12] veth0_vlan: left promiscuous mode
[  290.273560][   T12] team0 (unregistering): Port device team_slave_1 removed
[  290.334112][   T12] team0 (unregistering): Port device team_slave_0 removed
[  290.691768][T11160] netlink: 'syz.4.1497': attribute type 7 has an invalid length.
[  290.699739][T11160] netlink: 'syz.4.1497': attribute type 8 has an invalid length.
[  290.795104][T11176] netlink: 'syz.4.1500': attribute type 1 has an invalid length.
[  290.939964][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1504'.
[  290.955154][T11182] FAULT_INJECTION: forcing a failure.
[  290.955154][T11182] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  290.969787][T11184] hsr_slave_1: left allmulticast mode
[  290.987462][T11182] CPU: 0 UID: 0 PID: 11182 Comm: syz.0.1502 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  290.987485][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  290.987496][T11182] Call Trace:
[  290.987503][T11182]  <TASK>
[  290.987511][T11182]  dump_stack_lvl+0x241/0x360
[  290.987537][T11182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.987557][T11182]  ? __pfx__printk+0x10/0x10
[  290.987574][T11182]  ? __handle_mm_fault+0x5d44/0x70f0
[  290.987608][T11182]  should_fail_ex+0x40a/0x550
[  290.987648][T11182]  prepare_alloc_pages+0x1da/0x5b0
[  290.987675][T11182]  __alloc_frozen_pages_noprof+0x16f/0x710
[  290.987698][T11182]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  290.987736][T11182]  alloc_pages_mpol+0x311/0x660
[  290.987764][T11182]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  290.987787][T11182]  ? filemap_get_entry+0x123/0x3b0
[  290.987812][T11182]  ? __pfx_lock_release+0x10/0x10
[  290.987844][T11182]  folio_alloc_mpol_noprof+0x36/0x70
[  290.987868][T11182]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  290.987900][T11182]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  290.987925][T11182]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  290.987944][T11182]  ? __pfx___up_read+0x10/0x10
[  290.987968][T11182]  shmem_get_folio_gfp+0x621/0x1840
[  290.987984][T11182]  ? lockdep_hardirqs_on+0x99/0x150
[  290.988019][T11182]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  290.988036][T11182]  ? fault_in_iov_iter_readable+0x49/0x280
[  290.988057][T11182]  ? fault_in_readable+0x169/0x2d0
[  290.988076][T11182]  ? fault_in_readable+0x173/0x2d0
[  290.988097][T11182]  shmem_write_begin+0x165/0x350
[  290.988122][T11182]  ? __pfx_shmem_write_begin+0x10/0x10
[  290.988146][T11182]  ? fault_in_iov_iter_readable+0x229/0x280
[  290.988169][T11182]  generic_perform_write+0x346/0x990
[  290.988199][T11182]  ? __pfx_generic_perform_write+0x10/0x10
[  290.988218][T11182]  ? __pfx_generic_write_checks+0x10/0x10
[  290.988241][T11182]  ? rcu_read_lock_any_held+0xb7/0x160
[  290.988266][T11182]  ? file_update_time+0x2ab/0x450
[  290.988288][T11182]  shmem_file_write_iter+0xf9/0x120
[  290.988311][T11182]  vfs_write+0xacf/0xd10
[  290.988332][T11182]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  290.988356][T11182]  ? __pfx_vfs_write+0x10/0x10
[  290.988371][T11182]  ? do_sys_openat2+0x17a/0x1d0
[  290.988397][T11182]  ? __pfx_do_sys_openat2+0x10/0x10
[  290.988436][T11182]  ksys_write+0x18f/0x2b0
[  290.988463][T11182]  ? __pfx_ksys_write+0x10/0x10
[  290.988482][T11182]  ? do_syscall_64+0x100/0x230
[  290.988506][T11182]  ? do_syscall_64+0xb6/0x230
[  290.988529][T11182]  do_syscall_64+0xf3/0x230
[  290.988549][T11182]  ? clear_bhb_loop+0x35/0x90
[  290.988577][T11182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.988599][T11182] RIP: 0033:0x7fb10f18d169
[  290.988614][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.988629][T11182] RSP: 002b:00007fb10ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  290.988656][T11182] RAX: ffffffffffffffda RBX: 00007fb10f3a5fa0 RCX: 00007fb10f18d169
[  290.988669][T11182] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  290.988680][T11182] RBP: 00007fb10ffbe090 R08: 0000000000000000 R09: 0000000000000000
[  290.988690][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  290.988700][T11182] R13: 0000000000000000 R14: 00007fb10f3a5fa0 R15: 00007ffeff71e598
[  290.988726][T11182]  </TASK>
[  291.537311][T11197] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  291.550121][T11197] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  291.577253][T11197] lo speed is unknown, defaulting to 1000
[  291.783764][ T5848] Bluetooth: hci2: command tx timeout
[  291.807354][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'.
[  291.926924][T11208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'.
[  292.017942][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'.
[  292.119594][T10959] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  292.182254][T10959] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  292.229269][T10959] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  292.280292][T10959] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  292.352274][T11227] FAULT_INJECTION: forcing a failure.
[  292.352274][T11227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.365644][T11227] CPU: 1 UID: 0 PID: 11227 Comm: syz.4.1519 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  292.365669][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  292.365680][T11227] Call Trace:
[  292.365687][T11227]  <TASK>
[  292.365695][T11227]  dump_stack_lvl+0x241/0x360
[  292.365723][T11227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.365745][T11227]  ? __pfx__printk+0x10/0x10
[  292.365767][T11227]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  292.365788][T11227]  ? __pfx___up_read+0x10/0x10
[  292.365817][T11227]  should_fail_ex+0x40a/0x550
[  292.365850][T11227]  copy_page_from_iter_atomic+0x301/0x1e60
[  292.365884][T11227]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  292.365918][T11227]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  292.365941][T11227]  ? shmem_write_begin+0x1e9/0x350
[  292.365965][T11227]  ? __pfx_shmem_write_begin+0x10/0x10
[  292.365994][T11227]  ? fault_in_iov_iter_readable+0x229/0x280
[  292.366020][T11227]  generic_perform_write+0x675/0x990
[  292.366064][T11227]  ? __pfx_generic_perform_write+0x10/0x10
[  292.366084][T11227]  ? __pfx_generic_write_checks+0x10/0x10
[  292.366109][T11227]  ? rcu_read_lock_any_held+0xb7/0x160
[  292.366133][T11227]  ? file_update_time+0x2ab/0x450
[  292.366156][T11227]  shmem_file_write_iter+0xf9/0x120
[  292.366180][T11227]  vfs_write+0xacf/0xd10
[  292.366202][T11227]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  292.366226][T11227]  ? __pfx_vfs_write+0x10/0x10
[  292.366242][T11227]  ? do_sys_openat2+0x17a/0x1d0
[  292.366268][T11227]  ? __pfx_do_sys_openat2+0x10/0x10
[  292.366308][T11227]  ksys_write+0x18f/0x2b0
[  292.366329][T11227]  ? __pfx_ksys_write+0x10/0x10
[  292.366348][T11227]  ? do_syscall_64+0x100/0x230
[  292.366373][T11227]  ? do_syscall_64+0xb6/0x230
[  292.366397][T11227]  do_syscall_64+0xf3/0x230
[  292.366418][T11227]  ? clear_bhb_loop+0x35/0x90
[  292.366447][T11227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.366471][T11227] RIP: 0033:0x7f9880f8d169
[  292.366486][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.366501][T11227] RSP: 002b:00007f9881e32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  292.366519][T11227] RAX: ffffffffffffffda RBX: 00007f98811a5fa0 RCX: 00007f9880f8d169
[  292.366539][T11227] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  292.366550][T11227] RBP: 00007f9881e32090 R08: 0000000000000000 R09: 0000000000000000
[  292.366561][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  292.366572][T11227] R13: 0000000000000000 R14: 00007f98811a5fa0 R15: 00007ffc34371b48
[  292.366598][T11227]  </TASK>
[  292.892701][T10959] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.909552][T10959] 8021q: adding VLAN 0 to HW filter on device team0
[  292.977339][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.984653][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.010445][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.017622][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.105648][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1525'.
[  293.113106][T10959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  293.128617][T10959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  293.141515][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'.
[  293.775990][T10959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.868828][T10959] veth0_vlan: entered promiscuous mode
[  293.870934][ T5848] Bluetooth: hci2: command 0x0419 tx timeout
[  293.880293][T10959] veth1_vlan: entered promiscuous mode
[  293.897060][T10959] veth0_macvtap: entered promiscuous mode
[  293.940958][T11281] FAULT_INJECTION: forcing a failure.
[  293.940958][T11281] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  293.956561][T10959] veth1_macvtap: entered promiscuous mode
[  293.979786][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.2.1535 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  293.979813][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  293.979826][T11281] Call Trace:
[  293.979834][T11281]  <TASK>
[  293.979842][T11281]  dump_stack_lvl+0x241/0x360
[  293.979875][T11281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.979900][T11281]  ? __pfx__printk+0x10/0x10
[  293.979922][T11281]  ? __handle_mm_fault+0x5d44/0x70f0
[  293.979966][T11281]  should_fail_ex+0x40a/0x550
[  293.980004][T11281]  prepare_alloc_pages+0x1da/0x5b0
[  293.980037][T11281]  __alloc_frozen_pages_noprof+0x16f/0x710
[  293.980067][T11281]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  293.980115][T11281]  alloc_pages_mpol+0x311/0x660
[  293.980150][T11281]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  293.980179][T11281]  ? filemap_get_entry+0x123/0x3b0
[  293.980211][T11281]  ? __pfx_lock_release+0x10/0x10
[  293.980250][T11281]  folio_alloc_mpol_noprof+0x36/0x70
[  293.980281][T11281]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  293.980322][T11281]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  293.980355][T11281]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  293.980378][T11281]  ? __pfx___up_read+0x10/0x10
[  293.980417][T11281]  shmem_get_folio_gfp+0x621/0x1840
[  293.980447][T11281]  ? lockdep_hardirqs_on+0x99/0x150
[  293.980486][T11281]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  293.980503][T11281]  ? fault_in_iov_iter_readable+0x49/0x280
[  293.980525][T11281]  ? fault_in_readable+0x169/0x2d0
[  293.980545][T11281]  ? fault_in_readable+0x173/0x2d0
[  293.980568][T11281]  shmem_write_begin+0x165/0x350
[  293.980594][T11281]  ? __pfx_shmem_write_begin+0x10/0x10
[  293.980621][T11281]  ? fault_in_iov_iter_readable+0x229/0x280
[  293.980645][T11281]  generic_perform_write+0x346/0x990
[  293.980677][T11281]  ? __pfx_generic_perform_write+0x10/0x10
[  293.980698][T11281]  ? __pfx_generic_write_checks+0x10/0x10
[  293.980723][T11281]  ? rcu_read_lock_any_held+0xb7/0x160
[  293.980749][T11281]  ? file_update_time+0x2ab/0x450
[  293.980773][T11281]  shmem_file_write_iter+0xf9/0x120
[  293.980798][T11281]  vfs_write+0xacf/0xd10
[  293.980821][T11281]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  293.980845][T11281]  ? __pfx_vfs_write+0x10/0x10
[  293.980861][T11281]  ? do_sys_openat2+0x17a/0x1d0
[  293.980889][T11281]  ? __pfx_do_sys_openat2+0x10/0x10
[  293.980930][T11281]  ksys_write+0x18f/0x2b0
[  293.980951][T11281]  ? __pfx_ksys_write+0x10/0x10
[  293.980971][T11281]  ? do_syscall_64+0x100/0x230
[  293.980995][T11281]  ? do_syscall_64+0xb6/0x230
[  293.981020][T11281]  do_syscall_64+0xf3/0x230
[  293.981042][T11281]  ? clear_bhb_loop+0x35/0x90
[  293.981071][T11281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.981094][T11281] RIP: 0033:0x7f0adbb8d169
[  293.981110][T11281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.981125][T11281] RSP: 002b:00007f0adca1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  293.981144][T11281] RAX: ffffffffffffffda RBX: 00007f0adbda5fa0 RCX: 00007f0adbb8d169
[  293.981157][T11281] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  293.981168][T11281] RBP: 00007f0adca1f090 R08: 0000000000000000 R09: 0000000000000000
[  293.981179][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  293.981190][T11281] R13: 0000000000000000 R14: 00007f0adbda5fa0 R15: 00007ffcfbc307e8
[  293.981217][T11281]  </TASK>
[  294.039077][T10959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.387550][T10959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.403293][T11288] ip6tnl2: entered promiscuous mode
[  294.410791][T11288] ip6tnl2: entered allmulticast mode
[  294.484888][T10959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.525758][T10959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.543715][T10959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.552428][T10959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.589308][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'.
[  294.609843][T11291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'.
[  294.691343][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1539'.
[  294.753990][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  294.765951][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  294.771341][T11294] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1539'.
[  294.783877][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  294.794274][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  294.794985][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.810268][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  294.819978][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  294.867745][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.913839][T11299] lo speed is unknown, defaulting to 1000
[  294.960521][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.991857][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.048527][T11309] Bluetooth: MGMT ver 1.23
[  295.176736][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'.
[  295.357118][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'.
[  295.484953][T11338] FAULT_INJECTION: forcing a failure.
[  295.484953][T11338] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  295.498499][T11338] CPU: 0 UID: 0 PID: 11338 Comm: syz.4.1548 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  295.498522][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  295.498533][T11338] Call Trace:
[  295.498539][T11338]  <TASK>
[  295.498546][T11338]  dump_stack_lvl+0x241/0x360
[  295.498575][T11338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.498595][T11338]  ? __pfx__printk+0x10/0x10
[  295.498613][T11338]  ? __handle_mm_fault+0x5d44/0x70f0
[  295.498650][T11338]  should_fail_ex+0x40a/0x550
[  295.498682][T11338]  prepare_alloc_pages+0x1da/0x5b0
[  295.498711][T11338]  __alloc_frozen_pages_noprof+0x16f/0x710
[  295.498753][T11338]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  295.498796][T11338]  alloc_pages_mpol+0x311/0x660
[  295.498827][T11338]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  295.498854][T11338]  ? filemap_get_entry+0x123/0x3b0
[  295.498883][T11338]  ? __pfx_lock_release+0x10/0x10
[  295.498919][T11338]  folio_alloc_mpol_noprof+0x36/0x70
[  295.498958][T11338]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  295.498993][T11338]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  295.499019][T11338]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  295.499039][T11338]  ? __pfx___up_read+0x10/0x10
[  295.499064][T11338]  shmem_get_folio_gfp+0x621/0x1840
[  295.499082][T11338]  ? lockdep_hardirqs_on+0x99/0x150
[  295.499140][T11338]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  295.499159][T11338]  ? fault_in_iov_iter_readable+0x49/0x280
[  295.499182][T11338]  ? fault_in_readable+0x169/0x2d0
[  295.499204][T11338]  ? fault_in_readable+0x173/0x2d0
[  295.499228][T11338]  shmem_write_begin+0x165/0x350
[  295.499275][T11338]  ? __pfx_shmem_write_begin+0x10/0x10
[  295.499315][T11338]  ? fault_in_iov_iter_readable+0x229/0x280
[  295.499346][T11338]  generic_perform_write+0x346/0x990
[  295.499384][T11338]  ? __pfx_generic_perform_write+0x10/0x10
[  295.499408][T11338]  ? __pfx_generic_write_checks+0x10/0x10
[  295.499437][T11338]  ? rcu_read_lock_any_held+0xb7/0x160
[  295.499468][T11338]  ? file_update_time+0x2ab/0x450
[  295.499496][T11338]  shmem_file_write_iter+0xf9/0x120
[  295.499525][T11338]  vfs_write+0xacf/0xd10
[  295.499553][T11338]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  295.499582][T11338]  ? __pfx_vfs_write+0x10/0x10
[  295.499601][T11338]  ? do_sys_openat2+0x17a/0x1d0
[  295.499634][T11338]  ? __pfx_do_sys_openat2+0x10/0x10
[  295.499684][T11338]  ksys_write+0x18f/0x2b0
[  295.499710][T11338]  ? __pfx_ksys_write+0x10/0x10
[  295.499733][T11338]  ? do_syscall_64+0x100/0x230
[  295.499763][T11338]  ? do_syscall_64+0xb6/0x230
[  295.499793][T11338]  do_syscall_64+0xf3/0x230
[  295.499819][T11338]  ? clear_bhb_loop+0x35/0x90
[  295.499853][T11338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.499881][T11338] RIP: 0033:0x7f9880f8d169
[  295.499900][T11338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.499917][T11338] RSP: 002b:00007f9881e32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  295.499938][T11338] RAX: ffffffffffffffda RBX: 00007f98811a5fa0 RCX: 00007f9880f8d169
[  295.499953][T11338] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  295.499967][T11338] RBP: 00007f9881e32090 R08: 0000000000000000 R09: 0000000000000000
[  295.499980][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  295.499992][T11338] R13: 0000000000000000 R14: 00007f98811a5fa0 R15: 00007ffc34371b48
[  295.500024][T11338]  </TASK>
[  295.883169][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'.
[  295.897766][T11299] chnl_net:caif_netlink_parms(): no params data found
[  296.042955][T11299] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.061192][T11299] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.074554][T11299] bridge_slave_0: entered allmulticast mode
[  296.081441][T11299] bridge_slave_0: entered promiscuous mode
[  296.089144][T11299] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.096535][T11299] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.103979][T11299] bridge_slave_1: entered allmulticast mode
[  296.110833][T11299] bridge_slave_1: entered promiscuous mode
[  296.113432][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1550'.
[  296.142058][T11356] syzkaller0: entered promiscuous mode
[  296.147973][T11356] syzkaller0: entered allmulticast mode
[  296.176795][T11299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.188344][T11299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.250417][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'.
[  296.260858][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'.
[  296.280412][T11299] team0: Port device team_slave_0 added
[  296.282063][T11360] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  296.303804][T11299] team0: Port device team_slave_1 added
[  296.342409][T11299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.362095][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.407865][T11299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.585386][T11299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.603637][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.668915][T11299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.845578][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.904082][ T5848] Bluetooth: hci4: command tx timeout
[  296.968857][T11386] netlink: 'syz.2.1556': attribute type 11 has an invalid length.
[  297.278041][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.298055][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.305989][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.320782][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.328525][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  297.335947][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.742860][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.767017][T11393] FAULT_INJECTION: forcing a failure.
[  298.767017][T11393] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  298.780788][T11393] CPU: 0 UID: 0 PID: 11393 Comm: syz.4.1560 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  298.780812][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  298.780823][T11393] Call Trace:
[  298.780829][T11393]  <TASK>
[  298.780837][T11393]  dump_stack_lvl+0x241/0x360
[  298.780865][T11393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.780886][T11393]  ? __pfx__printk+0x10/0x10
[  298.780904][T11393]  ? __handle_mm_fault+0x5d44/0x70f0
[  298.780941][T11393]  should_fail_ex+0x40a/0x550
[  298.780973][T11393]  prepare_alloc_pages+0x1da/0x5b0
[  298.781000][T11393]  __alloc_frozen_pages_noprof+0x16f/0x710
[  298.781032][T11393]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  298.781072][T11393]  alloc_pages_mpol+0x311/0x660
[  298.781101][T11393]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  298.781125][T11393]  ? filemap_get_entry+0x123/0x3b0
[  298.781152][T11393]  ? __pfx_lock_release+0x10/0x10
[  298.781186][T11393]  folio_alloc_mpol_noprof+0x36/0x70
[  298.781212][T11393]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  298.781247][T11393]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  298.781274][T11393]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  298.781294][T11393]  ? __pfx___up_read+0x10/0x10
[  298.781320][T11393]  shmem_get_folio_gfp+0x621/0x1840
[  298.781337][T11393]  ? lockdep_hardirqs_on+0x99/0x150
[  298.781376][T11393]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  298.781394][T11393]  ? fault_in_iov_iter_readable+0x49/0x280
[  298.781415][T11393]  ? fault_in_readable+0x169/0x2d0
[  298.781435][T11393]  ? fault_in_readable+0x173/0x2d0
[  298.781457][T11393]  shmem_write_begin+0x165/0x350
[  298.781483][T11393]  ? __pfx_shmem_write_begin+0x10/0x10
[  298.781509][T11393]  ? fault_in_iov_iter_readable+0x229/0x280
[  298.781534][T11393]  generic_perform_write+0x346/0x990
[  298.781565][T11393]  ? __pfx_generic_perform_write+0x10/0x10
[  298.781586][T11393]  ? __pfx_generic_write_checks+0x10/0x10
[  298.781610][T11393]  ? rcu_read_lock_any_held+0xb7/0x160
[  298.781636][T11393]  ? file_update_time+0x2ab/0x450
[  298.781659][T11393]  shmem_file_write_iter+0xf9/0x120
[  298.781684][T11393]  vfs_write+0xacf/0xd10
[  298.781707][T11393]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  298.781730][T11393]  ? __pfx_vfs_write+0x10/0x10
[  298.781746][T11393]  ? do_sys_openat2+0x17a/0x1d0
[  298.781775][T11393]  ? __pfx_do_sys_openat2+0x10/0x10
[  298.781817][T11393]  ksys_write+0x18f/0x2b0
[  298.781838][T11393]  ? __pfx_ksys_write+0x10/0x10
[  298.781859][T11393]  ? do_syscall_64+0x100/0x230
[  298.781883][T11393]  ? do_syscall_64+0xb6/0x230
[  298.781909][T11393]  do_syscall_64+0xf3/0x230
[  298.781931][T11393]  ? clear_bhb_loop+0x35/0x90
[  298.781959][T11393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.781983][T11393] RIP: 0033:0x7f9880f8d169
[  298.781999][T11393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.782014][T11393] RSP: 002b:00007f9881e32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  298.782037][T11393] RAX: ffffffffffffffda RBX: 00007f98811a5fa0 RCX: 00007f9880f8d169
[  298.782050][T11393] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  298.782062][T11393] RBP: 00007f9881e32090 R08: 0000000000000000 R09: 0000000000000000
[  298.782073][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  298.782083][T11393] R13: 0000000000000000 R14: 00007f98811a5fa0 R15: 00007ffc34371b48
[  298.782112][T11393]  </TASK>
[  299.135131][ T5848] Bluetooth: hci4: command tx timeout
[  299.170135][T11390] lo speed is unknown, defaulting to 1000
[  299.221942][T11299] hsr_slave_0: entered promiscuous mode
[  299.235133][T11299] hsr_slave_1: entered promiscuous mode
[  299.255106][T11299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.274190][T11299] Cannot create hsr debugfs directory
[  299.305946][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.358724][T11400] lo speed is unknown, defaulting to 1000
[  299.384109][ T5848] Bluetooth: hci2: command tx timeout
[  299.402451][T11402] lo speed is unknown, defaulting to 1000
[  299.529094][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.731879][T11416] __nla_validate_parse: 5 callbacks suppressed
[  299.731896][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'.
[  299.763086][T11416] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  299.839215][   T12] bridge_slave_1: left allmulticast mode
[  299.849413][   T12] bridge_slave_1: left promiscuous mode
[  299.857790][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.873488][   T12] bridge_slave_0: left allmulticast mode
[  299.881968][   T12] bridge_slave_0: left promiscuous mode
[  299.887989][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.277284][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.290618][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.300940][   T12] bond0 (unregistering): Released all slaves
[  300.585728][T11431] 8021q: VLANs not supported on nlmon0
[  300.662630][T11390] chnl_net:caif_netlink_parms(): no params data found
[  300.833374][T11440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'.
[  300.881156][   T12] hsr_slave_0: left promiscuous mode
[  300.890320][   T12] hsr_slave_1: left promiscuous mode
[  300.900408][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.907926][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.921004][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.929159][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.960233][   T12] veth1_macvtap: left promiscuous mode
[  300.968964][   T12] veth0_macvtap: left promiscuous mode
[  300.974725][   T12] veth1_vlan: left promiscuous mode
[  300.980073][   T12] veth0_vlan: left promiscuous mode
[  301.104432][T11450] FAULT_INJECTION: forcing a failure.
[  301.104432][T11450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.117903][T11450] CPU: 1 UID: 0 PID: 11450 Comm: syz.0.1571 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  301.117925][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  301.117936][T11450] Call Trace:
[  301.117943][T11450]  <TASK>
[  301.117950][T11450]  dump_stack_lvl+0x241/0x360
[  301.117977][T11450]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.117997][T11450]  ? __pfx__printk+0x10/0x10
[  301.118018][T11450]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  301.118038][T11450]  ? __pfx___up_read+0x10/0x10
[  301.118064][T11450]  should_fail_ex+0x40a/0x550
[  301.118100][T11450]  copy_page_from_iter_atomic+0x301/0x1e60
[  301.118132][T11450]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  301.118163][T11450]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  301.118184][T11450]  ? shmem_write_begin+0x1e9/0x350
[  301.118207][T11450]  ? __pfx_shmem_write_begin+0x10/0x10
[  301.118233][T11450]  ? fault_in_iov_iter_readable+0x229/0x280
[  301.118256][T11450]  generic_perform_write+0x675/0x990
[  301.118287][T11450]  ? __pfx_generic_perform_write+0x10/0x10
[  301.118307][T11450]  ? __pfx_generic_write_checks+0x10/0x10
[  301.118332][T11450]  ? rcu_read_lock_any_held+0xb7/0x160
[  301.118358][T11450]  ? file_update_time+0x2ab/0x450
[  301.118381][T11450]  shmem_file_write_iter+0xf9/0x120
[  301.118405][T11450]  vfs_write+0xacf/0xd10
[  301.118428][T11450]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  301.118452][T11450]  ? __pfx_vfs_write+0x10/0x10
[  301.118468][T11450]  ? do_sys_openat2+0x17a/0x1d0
[  301.118496][T11450]  ? __pfx_do_sys_openat2+0x10/0x10
[  301.118536][T11450]  ksys_write+0x18f/0x2b0
[  301.118557][T11450]  ? __pfx_ksys_write+0x10/0x10
[  301.118577][T11450]  ? do_syscall_64+0x100/0x230
[  301.118602][T11450]  ? do_syscall_64+0xb6/0x230
[  301.118627][T11450]  do_syscall_64+0xf3/0x230
[  301.118649][T11450]  ? clear_bhb_loop+0x35/0x90
[  301.118677][T11450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.118702][T11450] RIP: 0033:0x7fb10f18d169
[  301.118718][T11450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.118734][T11450] RSP: 002b:00007fb10ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  301.118752][T11450] RAX: ffffffffffffffda RBX: 00007fb10f3a5fa0 RCX: 00007fb10f18d169
[  301.118765][T11450] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  301.118777][T11450] RBP: 00007fb10ffbe090 R08: 0000000000000000 R09: 0000000000000000
[  301.118788][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  301.118798][T11450] R13: 0000000000000000 R14: 00007fb10f3a5fa0 R15: 00007ffeff71e598
[  301.118826][T11450]  </TASK>
[  301.144220][ T5848] Bluetooth: hci4: command tx timeout
[  301.463738][ T5848] Bluetooth: hci2: command tx timeout
[  301.695768][   T12] team0 (unregistering): Port device team_slave_1 removed
[  301.735269][   T12] team0 (unregistering): Port device team_slave_0 removed
[  302.092816][T11437] lo speed is unknown, defaulting to 1000
[  302.102965][T11442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1569'.
[  302.129615][T11390] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.160647][T11390] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.261866][T11390] bridge_slave_0: entered allmulticast mode
[  302.284183][T11390] bridge_slave_0: entered promiscuous mode
[  302.312202][T11458] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  302.329511][T11299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  302.370923][T11390] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.378274][T11390] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.389187][T11390] bridge_slave_1: entered allmulticast mode
[  302.395994][T11390] bridge_slave_1: entered promiscuous mode
[  302.419199][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'.
[  302.432852][T11299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  302.444218][T11299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  302.490724][T11299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  302.532668][T11390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.620865][T11390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.648037][T11466] syzkaller0: entered promiscuous mode
[  302.653951][T11466] syzkaller0: entered allmulticast mode
[  303.098556][T11390] team0: Port device team_slave_0 added
[  303.205275][T11390] team0: Port device team_slave_1 added
[  303.261215][T11486] 8021q: adding VLAN 0 to HW filter on device batadv1
[  303.271540][T11486] bridge0: port 1(batadv1) entered blocking state
[  303.278186][T11486] bridge0: port 1(batadv1) entered disabled state
[  303.284950][T11486] batadv1: entered allmulticast mode
[  303.292377][T11486] batadv1: entered promiscuous mode
[  303.301168][T11486] bridge0: port 1(batadv1) entered blocking state
[  303.307976][T11486] bridge0: port 1(batadv1) entered forwarding state
[  303.355651][T11390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.362622][T11390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.393203][T11494] FAULT_INJECTION: forcing a failure.
[  303.393203][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  303.398141][T11390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.406491][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.0.1583 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  303.406515][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  303.406533][T11494] Call Trace:
[  303.406540][T11494]  <TASK>
[  303.406548][T11494]  dump_stack_lvl+0x241/0x360
[  303.406577][T11494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.406599][T11494]  ? __pfx__printk+0x10/0x10
[  303.406620][T11494]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  303.406642][T11494]  ? __pfx___up_read+0x10/0x10
[  303.406668][T11494]  should_fail_ex+0x40a/0x550
[  303.406702][T11494]  copy_page_from_iter_atomic+0x301/0x1e60
[  303.406734][T11494]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  303.406766][T11494]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  303.406789][T11494]  ? shmem_write_begin+0x1e9/0x350
[  303.406815][T11494]  ? __pfx_shmem_write_begin+0x10/0x10
[  303.406842][T11494]  ? fault_in_iov_iter_readable+0x229/0x280
[  303.406868][T11494]  generic_perform_write+0x675/0x990
[  303.406900][T11494]  ? __pfx_generic_perform_write+0x10/0x10
[  303.406929][T11494]  ? __pfx_generic_write_checks+0x10/0x10
[  303.406954][T11494]  ? rcu_read_lock_any_held+0xb7/0x160
[  303.406983][T11494]  ? file_update_time+0x2ab/0x450
[  303.407007][T11494]  shmem_file_write_iter+0xf9/0x120
[  303.407033][T11494]  vfs_write+0xacf/0xd10
[  303.407056][T11494]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  303.407081][T11494]  ? __pfx_vfs_write+0x10/0x10
[  303.407098][T11494]  ? do_sys_openat2+0x17a/0x1d0
[  303.407128][T11494]  ? __pfx_do_sys_openat2+0x10/0x10
[  303.407169][T11494]  ksys_write+0x18f/0x2b0
[  303.407192][T11494]  ? __pfx_ksys_write+0x10/0x10
[  303.407213][T11494]  ? do_syscall_64+0x100/0x230
[  303.407239][T11494]  ? do_syscall_64+0xb6/0x230
[  303.407265][T11494]  do_syscall_64+0xf3/0x230
[  303.407288][T11494]  ? clear_bhb_loop+0x35/0x90
[  303.407317][T11494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.407346][T11494] RIP: 0033:0x7fb10f18d169
[  303.407363][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.407379][T11494] RSP: 002b:00007fb10ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  303.407398][T11494] RAX: ffffffffffffffda RBX: 00007fb10f3a5fa0 RCX: 00007fb10f18d169
[  303.407412][T11494] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  303.407425][T11494] RBP: 00007fb10ffbe090 R08: 0000000000000000 R09: 0000000000000000
[  303.407436][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  303.407448][T11494] R13: 0000000000000000 R14: 00007fb10f3a5fa0 R15: 00007ffeff71e598
[  303.407477][T11494]  </TASK>
[  303.482369][ T5848] Bluetooth: hci4: command tx timeout
[  303.548617][ T5837] Bluetooth: hci2: command tx timeout
[  303.693524][T11390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.708371][T11390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.735460][T11390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.775245][T11490] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  303.784753][T11490] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  303.972462][T11390] hsr_slave_0: entered promiscuous mode
[  303.978878][T11390] hsr_slave_1: entered promiscuous mode
[  303.984892][T11390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  303.992451][T11390] Cannot create hsr debugfs directory
[  304.004963][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'.
[  304.118489][T11299] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.198851][T11515] netlink: 'syz.0.1590': attribute type 11 has an invalid length.
[  304.281622][T11299] 8021q: adding VLAN 0 to HW filter on device team0
[  304.365045][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.372276][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.410722][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.417847][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.453530][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'.
[  304.710613][T11510] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  304.750745][T11390] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  304.770329][T11390] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  304.832717][T11390] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  304.846492][T11390] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  304.943506][T11533] FAULT_INJECTION: forcing a failure.
[  304.943506][T11533] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  304.959231][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.4.1596 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  304.959272][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  304.959283][T11533] Call Trace:
[  304.959290][T11533]  <TASK>
[  304.959298][T11533]  dump_stack_lvl+0x241/0x360
[  304.959325][T11533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.959345][T11533]  ? __pfx__printk+0x10/0x10
[  304.959365][T11533]  ? __handle_mm_fault+0x5d44/0x70f0
[  304.959404][T11533]  should_fail_ex+0x40a/0x550
[  304.959439][T11533]  prepare_alloc_pages+0x1da/0x5b0
[  304.959468][T11533]  __alloc_frozen_pages_noprof+0x16f/0x710
[  304.959493][T11533]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  304.959535][T11533]  alloc_pages_mpol+0x311/0x660
[  304.959569][T11533]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  304.959596][T11533]  ? filemap_get_entry+0x123/0x3b0
[  304.959627][T11533]  ? __pfx_lock_release+0x10/0x10
[  304.959667][T11533]  folio_alloc_mpol_noprof+0x36/0x70
[  304.959699][T11533]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  304.959740][T11533]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  304.959771][T11533]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  304.959803][T11533]  ? __pfx___up_read+0x10/0x10
[  304.959831][T11533]  shmem_get_folio_gfp+0x621/0x1840
[  304.959851][T11533]  ? lockdep_hardirqs_on+0x99/0x150
[  304.959898][T11533]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  304.959918][T11533]  ? fault_in_iov_iter_readable+0x49/0x280
[  304.959943][T11533]  ? fault_in_readable+0x169/0x2d0
[  304.959967][T11533]  ? fault_in_readable+0x173/0x2d0
[  304.959999][T11533]  shmem_write_begin+0x165/0x350
[  304.960029][T11533]  ? __pfx_shmem_write_begin+0x10/0x10
[  304.960061][T11533]  ? fault_in_iov_iter_readable+0x229/0x280
[  304.960091][T11533]  generic_perform_write+0x346/0x990
[  304.960129][T11533]  ? __pfx_generic_perform_write+0x10/0x10
[  304.960153][T11533]  ? __pfx_generic_write_checks+0x10/0x10
[  304.960181][T11533]  ? rcu_read_lock_any_held+0xb7/0x160
[  304.960211][T11533]  ? file_update_time+0x2ab/0x450
[  304.960240][T11533]  shmem_file_write_iter+0xf9/0x120
[  304.960269][T11533]  vfs_write+0xacf/0xd10
[  304.960296][T11533]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  304.960324][T11533]  ? __pfx_vfs_write+0x10/0x10
[  304.960344][T11533]  ? do_sys_openat2+0x17a/0x1d0
[  304.960376][T11533]  ? __pfx_do_sys_openat2+0x10/0x10
[  304.960436][T11533]  ksys_write+0x18f/0x2b0
[  304.960460][T11533]  ? __pfx_ksys_write+0x10/0x10
[  304.960493][T11533]  ? do_syscall_64+0x100/0x230
[  304.960518][T11533]  ? do_syscall_64+0xb6/0x230
[  304.960543][T11533]  do_syscall_64+0xf3/0x230
[  304.960565][T11533]  ? clear_bhb_loop+0x35/0x90
[  304.960593][T11533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.960617][T11533] RIP: 0033:0x7f9880f8d169
[  304.960633][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.960648][T11533] RSP: 002b:00007f9881e32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  304.960667][T11533] RAX: ffffffffffffffda RBX: 00007f98811a5fa0 RCX: 00007f9880f8d169
[  304.960680][T11533] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  304.960691][T11533] RBP: 00007f9881e32090 R08: 0000000000000000 R09: 0000000000000000
[  304.960702][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  304.960712][T11533] R13: 0000000000000000 R14: 00007f98811a5fa0 R15: 00007ffc34371b48
[  304.960740][T11533]  </TASK>
[  305.124766][T11390] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.403327][T11299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.468056][T11390] 8021q: adding VLAN 0 to HW filter on device team0
[  305.521939][T11492] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.529089][T11492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.602274][T11492] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.609517][T11492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.705310][ T5837] Bluetooth: hci2: command tx timeout
[  305.778449][T11299] veth0_vlan: entered promiscuous mode
[  305.802987][T11299] veth1_vlan: entered promiscuous mode
[  305.877240][T11552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.896183][T11552] +
: renamed from syzkaller0
[  305.906100][T11552] tipc: Disabling bearer <eth:syzkaller0>
[  305.963494][T11557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'.
[  305.990185][T11559] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  306.019810][T11299] veth0_macvtap: entered promiscuous mode
[  306.044721][T11299] veth1_macvtap: entered promiscuous mode
[  306.132976][T11299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.195210][T11299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.216177][T11299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.235290][T11299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.249986][T11299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.261055][T11299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.297290][T11390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.435111][T11492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.441698][T11574] FAULT_INJECTION: forcing a failure.
[  306.441698][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.456491][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.2.1607 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  306.456514][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  306.456526][T11574] Call Trace:
[  306.456532][T11574]  <TASK>
[  306.456540][T11574]  dump_stack_lvl+0x241/0x360
[  306.456569][T11574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.456590][T11574]  ? __pfx__printk+0x10/0x10
[  306.456612][T11574]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  306.456644][T11574]  ? __pfx___up_read+0x10/0x10
[  306.456671][T11574]  should_fail_ex+0x40a/0x550
[  306.456702][T11574]  copy_page_from_iter_atomic+0x301/0x1e60
[  306.456740][T11574]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  306.456772][T11574]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  306.456793][T11574]  ? shmem_write_begin+0x1e9/0x350
[  306.456818][T11574]  ? __pfx_shmem_write_begin+0x10/0x10
[  306.456844][T11574]  ? fault_in_iov_iter_readable+0x229/0x280
[  306.456869][T11574]  generic_perform_write+0x675/0x990
[  306.456900][T11574]  ? __pfx_generic_perform_write+0x10/0x10
[  306.456920][T11574]  ? __pfx_generic_write_checks+0x10/0x10
[  306.456944][T11574]  ? rcu_read_lock_any_held+0xb7/0x160
[  306.456970][T11574]  ? file_update_time+0x2ab/0x450
[  306.456994][T11574]  shmem_file_write_iter+0xf9/0x120
[  306.457018][T11574]  vfs_write+0xacf/0xd10
[  306.457041][T11574]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  306.457065][T11574]  ? __pfx_vfs_write+0x10/0x10
[  306.457081][T11574]  ? do_sys_openat2+0x17a/0x1d0
[  306.457109][T11574]  ? __pfx_do_sys_openat2+0x10/0x10
[  306.457149][T11574]  ksys_write+0x18f/0x2b0
[  306.457171][T11574]  ? __pfx_ksys_write+0x10/0x10
[  306.457190][T11574]  ? do_syscall_64+0x100/0x230
[  306.457216][T11574]  ? do_syscall_64+0xb6/0x230
[  306.457241][T11574]  do_syscall_64+0xf3/0x230
[  306.457262][T11574]  ? clear_bhb_loop+0x35/0x90
[  306.457291][T11574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.457315][T11574] RIP: 0033:0x7f0adbb8d169
[  306.457330][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.457345][T11574] RSP: 002b:00007f0adca1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  306.457363][T11574] RAX: ffffffffffffffda RBX: 00007f0adbda5fa0 RCX: 00007f0adbb8d169
[  306.457375][T11574] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  306.457387][T11574] RBP: 00007f0adca1f090 R08: 0000000000000000 R09: 0000000000000000
[  306.457397][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  306.457408][T11574] R13: 0000000000000000 R14: 00007f0adbda5fa0 R15: 00007ffcfbc307e8
[  306.457435][T11574]  </TASK>
[  306.486436][T11492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.815517][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.824883][T11390] veth0_vlan: entered promiscuous mode
[  306.837113][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.956914][T11390] veth1_vlan: entered promiscuous mode
[  307.023487][T11390] veth0_macvtap: entered promiscuous mode
[  307.053280][T11390] veth1_macvtap: entered promiscuous mode
[  307.199286][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.216912][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.228235][T11390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.302215][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.322637][T11594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'.
[  307.350595][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.364626][T11390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.433958][T11390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.498007][T11390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.510506][T11390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.528905][T11390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.641732][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'.
[  307.749387][T11491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.925654][T11491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.034039][T11490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.041882][T11490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.149939][T11610] FAULT_INJECTION: forcing a failure.
[  308.149939][T11610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.163284][T11610] CPU: 1 UID: 0 PID: 11610 Comm: syz.2.1619 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  308.163306][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  308.163317][T11610] Call Trace:
[  308.163324][T11610]  <TASK>
[  308.163331][T11610]  dump_stack_lvl+0x241/0x360
[  308.163358][T11610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.163379][T11610]  ? __pfx__printk+0x10/0x10
[  308.163400][T11610]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  308.163421][T11610]  ? __pfx___up_read+0x10/0x10
[  308.163448][T11610]  should_fail_ex+0x40a/0x550
[  308.163478][T11610]  copy_page_from_iter_atomic+0x301/0x1e60
[  308.163510][T11610]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  308.163548][T11610]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  308.163574][T11610]  ? shmem_write_begin+0x1e9/0x350
[  308.163598][T11610]  ? __pfx_shmem_write_begin+0x10/0x10
[  308.163625][T11610]  ? fault_in_iov_iter_readable+0x229/0x280
[  308.163649][T11610]  generic_perform_write+0x675/0x990
[  308.163679][T11610]  ? __pfx_generic_perform_write+0x10/0x10
[  308.163699][T11610]  ? __mark_inode_dirty+0x3db/0xe90
[  308.163727][T11610]  ? mnt_put_write_access_file+0xbf/0x100
[  308.163749][T11610]  ? file_update_time+0x3dd/0x450
[  308.163772][T11610]  shmem_file_write_iter+0xf9/0x120
[  308.163797][T11610]  vfs_write+0xacf/0xd10
[  308.163820][T11610]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  308.163844][T11610]  ? __pfx_vfs_write+0x10/0x10
[  308.163866][T11610]  ? do_sys_openat2+0x17a/0x1d0
[  308.163894][T11610]  ? __pfx_do_sys_openat2+0x10/0x10
[  308.163935][T11610]  ksys_write+0x18f/0x2b0
[  308.163956][T11610]  ? __pfx_ksys_write+0x10/0x10
[  308.163976][T11610]  ? do_syscall_64+0x100/0x230
[  308.164002][T11610]  ? do_syscall_64+0xb6/0x230
[  308.164027][T11610]  do_syscall_64+0xf3/0x230
[  308.164049][T11610]  ? clear_bhb_loop+0x35/0x90
[  308.164077][T11610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.164102][T11610] RIP: 0033:0x7f0adbb8d169
[  308.164118][T11610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.164133][T11610] RSP: 002b:00007f0adca1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  308.164151][T11610] RAX: ffffffffffffffda RBX: 00007f0adbda5fa0 RCX: 00007f0adbb8d169
[  308.164164][T11610] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  308.164175][T11610] RBP: 00007f0adca1f090 R08: 0000000000000000 R09: 0000000000000000
[  308.164186][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  308.164196][T11610] R13: 0000000000000000 R14: 00007f0adbda5fa0 R15: 00007ffcfbc307e8
[  308.164224][T11610]  </TASK>
[  308.629982][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.640624][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.652671][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.660939][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.668899][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  308.676358][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.709564][T11491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.789393][T11615] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1621'.
[  308.791128][T11491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.799176][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'.
[  308.799207][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1621'.
[  308.893650][T11616] netlink: 'syz.4.1621': attribute type 10 has an invalid length.
[  308.898007][T11490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.927614][T11616] batman_adv: batadv0: Adding interface: team0
[  308.931492][T11490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.934029][T11616] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.945922][T11617] netlink: 'syz.4.1621': attribute type 10 has an invalid length.
[  308.974907][T11617] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1621'.
[  308.983909][T11616] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  309.002155][T11612] lo speed is unknown, defaulting to 1000
[  309.008493][T11617] team0: entered promiscuous mode
[  309.014579][T11617] 8021q: adding VLAN 0 to HW filter on device team0
[  309.022078][T11617] batman_adv: batadv0: Interface activated: team0
[  309.028613][T11617] batman_adv: batadv0: Interface deactivated: team0
[  309.035368][T11617] batman_adv: batadv0: Removing interface: team0
[  309.043450][T11617] bridge0: port 2(team0) entered blocking state
[  309.051030][T11617] bridge0: port 2(team0) entered disabled state
[  309.057603][T11617] team0: entered allmulticast mode
[  309.167895][T11491] bridge_slave_1: left allmulticast mode
[  309.179775][T11491] bridge_slave_1: left promiscuous mode
[  309.189964][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.234915][T11491] bridge_slave_0: left allmulticast mode
[  309.283714][T11491] bridge_slave_0: left promiscuous mode
[  309.289492][T11491] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.581287][T11626] xt_l2tp: v2 tid > 0xffff: 4294967295
[  310.043988][T11491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.066828][T11491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.085796][T11491] bond0 (unregistering): Released all slaves
[  310.420515][T11630] bridge0: port 1(batadv1) entered disabled state
[  310.525932][T11630] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.535013][T11630] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.543780][T11630] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.552307][T11630] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.574772][T11630] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  310.583251][T11630] vlan2: left promiscuous mode
[  310.599000][T11630] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.607802][T11630] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.616425][T11630] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.625036][T11630] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.635673][T11630] vxlan1: left promiscuous mode
[  310.640556][T11630] vxlan1: left allmulticast mode
[  310.653506][T11630] bond0: left allmulticast mode
[  310.658530][T11630] bond0: left promiscuous mode
[  310.730689][T11639] lo speed is unknown, defaulting to 1000
[  310.744978][ T5848] Bluetooth: hci4: command tx timeout
[  310.797535][T11642] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1628'.
[  311.254999][T11612] chnl_net:caif_netlink_parms(): no params data found
[  311.276741][T11491] hsr_slave_0: left promiscuous mode
[  311.290062][T11491] hsr_slave_1: left promiscuous mode
[  311.298114][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.312042][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.323054][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.331350][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'.
[  311.343894][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.381858][T11491] veth1_macvtap: left promiscuous mode
[  311.387684][T11491] veth0_macvtap: left promiscuous mode
[  311.393295][T11491] veth1_vlan: left promiscuous mode
[  311.398766][T11491] veth0_vlan: left promiscuous mode
[  311.648033][T11654] netlink: 'syz.4.1630': attribute type 1 has an invalid length.
[  312.111581][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.126740][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.136066][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.160459][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.168915][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  312.176584][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.181889][T11667] FAULT_INJECTION: forcing a failure.
[  312.181889][T11667] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  312.198517][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.0.1632 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  312.198539][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  312.198551][T11667] Call Trace:
[  312.198557][T11667]  <TASK>
[  312.198564][T11667]  dump_stack_lvl+0x241/0x360
[  312.198593][T11667]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.198614][T11667]  ? __pfx__printk+0x10/0x10
[  312.198632][T11667]  ? __handle_mm_fault+0x5d44/0x70f0
[  312.198670][T11667]  should_fail_ex+0x40a/0x550
[  312.198702][T11667]  prepare_alloc_pages+0x1da/0x5b0
[  312.198730][T11667]  __alloc_frozen_pages_noprof+0x16f/0x710
[  312.198755][T11667]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  312.198797][T11667]  alloc_pages_mpol+0x311/0x660
[  312.198827][T11667]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  312.198851][T11667]  ? filemap_get_entry+0x123/0x3b0
[  312.198879][T11667]  ? __pfx_lock_release+0x10/0x10
[  312.198913][T11667]  folio_alloc_mpol_noprof+0x36/0x70
[  312.198939][T11667]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  312.198985][T11667]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  312.199013][T11667]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  312.199033][T11667]  ? __pfx___up_read+0x10/0x10
[  312.199058][T11667]  shmem_get_folio_gfp+0x621/0x1840
[  312.199076][T11667]  ? lockdep_hardirqs_on+0x99/0x150
[  312.199115][T11667]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  312.199133][T11667]  ? fault_in_iov_iter_readable+0x49/0x280
[  312.199154][T11667]  ? fault_in_readable+0x169/0x2d0
[  312.199175][T11667]  ? fault_in_readable+0x173/0x2d0
[  312.199198][T11667]  shmem_write_begin+0x165/0x350
[  312.199224][T11667]  ? __pfx_shmem_write_begin+0x10/0x10
[  312.199272][T11667]  ? fault_in_iov_iter_readable+0x229/0x280
[  312.199299][T11667]  generic_perform_write+0x346/0x990
[  312.199335][T11667]  ? __pfx_generic_perform_write+0x10/0x10
[  312.199358][T11667]  ? __pfx_generic_write_checks+0x10/0x10
[  312.199385][T11667]  ? rcu_read_lock_any_held+0xb7/0x160
[  312.199414][T11667]  ? file_update_time+0x2ab/0x450
[  312.199441][T11667]  shmem_file_write_iter+0xf9/0x120
[  312.199467][T11667]  vfs_write+0xacf/0xd10
[  312.199494][T11667]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  312.199520][T11667]  ? __pfx_vfs_write+0x10/0x10
[  312.199539][T11667]  ? do_sys_openat2+0x17a/0x1d0
[  312.199569][T11667]  ? __pfx_do_sys_openat2+0x10/0x10
[  312.199615][T11667]  ksys_write+0x18f/0x2b0
[  312.199640][T11667]  ? __pfx_ksys_write+0x10/0x10
[  312.199662][T11667]  ? do_syscall_64+0x100/0x230
[  312.199691][T11667]  ? do_syscall_64+0xb6/0x230
[  312.199718][T11667]  do_syscall_64+0xf3/0x230
[  312.199743][T11667]  ? clear_bhb_loop+0x35/0x90
[  312.199775][T11667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.199802][T11667] RIP: 0033:0x7fb10f18d169
[  312.199821][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.199838][T11667] RSP: 002b:00007fb10ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  312.199860][T11667] RAX: ffffffffffffffda RBX: 00007fb10f3a5fa0 RCX: 00007fb10f18d169
[  312.199874][T11667] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  312.199888][T11667] RBP: 00007fb10ffbe090 R08: 0000000000000000 R09: 0000000000000000
[  312.199900][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  312.199912][T11667] R13: 0000000000000000 R14: 00007fb10f3a5fa0 R15: 00007ffeff71e598
[  312.199943][T11667]  </TASK>
[  312.588609][T11491] team0 (unregistering): Port device team_slave_1 removed
[  312.627628][T11491] team0 (unregistering): Port device team_slave_0 removed
[  312.824473][ T5848] Bluetooth: hci4: command tx timeout
[  312.993847][T11654] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  313.107090][T11664] lo speed is unknown, defaulting to 1000
[  313.176324][T11612] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.246023][T11612] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.267459][T11682] netlink: 'syz.4.1636': attribute type 1 has an invalid length.
[  313.283324][T11612] bridge_slave_0: entered allmulticast mode
[  313.332804][T11612] bridge_slave_0: entered promiscuous mode
[  313.341283][T11612] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.348585][T11612] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.356216][T11612] bridge_slave_1: entered allmulticast mode
[  313.375547][T11612] bridge_slave_1: entered promiscuous mode
[  313.495964][T11612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.589529][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'.
[  313.598831][T11612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.621811][T11693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'.
[  313.647271][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'.
[  313.661103][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'.
[  313.677879][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'.
[  313.709370][T11612] team0: Port device team_slave_0 added
[  313.739862][T11612] team0: Port device team_slave_1 added
[  313.794945][T11612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.801787][T11704] FAULT_INJECTION: forcing a failure.
[  313.801787][T11704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.815213][T11704] CPU: 0 UID: 0 PID: 11704 Comm: syz.0.1643 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  313.815235][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  313.815246][T11704] Call Trace:
[  313.815252][T11704]  <TASK>
[  313.815260][T11704]  dump_stack_lvl+0x241/0x360
[  313.815287][T11704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.815307][T11704]  ? __pfx__printk+0x10/0x10
[  313.815328][T11704]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  313.815348][T11704]  ? __pfx___up_read+0x10/0x10
[  313.815367][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.815376][T11704]  should_fail_ex+0x40a/0x550
[  313.815407][T11704]  copy_page_from_iter_atomic+0x301/0x1e60
[  313.815444][T11704]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  313.815479][T11704]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  313.815501][T11704]  ? shmem_write_begin+0x1e9/0x350
[  313.815528][T11704]  ? __pfx_shmem_write_begin+0x10/0x10
[  313.815554][T11704]  ? fault_in_iov_iter_readable+0x229/0x280
[  313.815580][T11704]  generic_perform_write+0x675/0x990
[  313.815614][T11704]  ? __pfx_generic_perform_write+0x10/0x10
[  313.815650][T11704]  ? __pfx_generic_write_checks+0x10/0x10
[  313.815680][T11704]  ? rcu_read_lock_any_held+0xb7/0x160
[  313.815709][T11704]  ? file_update_time+0x2ab/0x450
[  313.815735][T11704]  shmem_file_write_iter+0xf9/0x120
[  313.815762][T11704]  vfs_write+0xacf/0xd10
[  313.815788][T11704]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  313.815815][T11704]  ? __pfx_vfs_write+0x10/0x10
[  313.815833][T11704]  ? do_sys_openat2+0x17a/0x1d0
[  313.815871][T11704]  ? __pfx_do_sys_openat2+0x10/0x10
[  313.815916][T11704]  ksys_write+0x18f/0x2b0
[  313.815939][T11704]  ? __pfx_ksys_write+0x10/0x10
[  313.815962][T11704]  ? do_syscall_64+0x100/0x230
[  313.815991][T11704]  ? do_syscall_64+0xb6/0x230
[  313.816018][T11704]  do_syscall_64+0xf3/0x230
[  313.816042][T11704]  ? clear_bhb_loop+0x35/0x90
[  313.816082][T11704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.816108][T11704] RIP: 0033:0x7fb10f18d169
[  313.816124][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.816140][T11704] RSP: 002b:00007fb10ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  313.816160][T11704] RAX: ffffffffffffffda RBX: 00007fb10f3a5fa0 RCX: 00007fb10f18d169
[  313.816174][T11704] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  313.816186][T11704] RBP: 00007fb10ffbe090 R08: 0000000000000000 R09: 0000000000000000
[  313.816197][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  313.816208][T11704] R13: 0000000000000000 R14: 00007fb10f3a5fa0 R15: 00007ffeff71e598
[  313.816237][T11704]  </TASK>
[  314.113208][T11612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.149776][T11612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.161592][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.196609][T11612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.256651][T11491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.274358][ T5848] Bluetooth: hci2: command tx timeout
[  314.292543][T11710] tun0: tun_chr_ioctl cmd 1074025677
[  314.298122][T11710] tun0: linktype set to 769
[  314.348293][T11491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.446779][T11491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.476844][T11612] hsr_slave_0: entered promiscuous mode
[  314.490247][T11612] hsr_slave_1: entered promiscuous mode
[  314.501046][T11612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.508898][T11612] Cannot create hsr debugfs directory
[  314.560323][T11491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.608595][T11664] chnl_net:caif_netlink_parms(): no params data found
[  314.853870][T11733] xt_bpf: check failed: parse error
[  314.904123][ T5848] Bluetooth: hci4: command tx timeout
[  314.956416][T11664] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.969917][T11664] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.978215][T11664] bridge_slave_0: entered allmulticast mode
[  314.995338][T11664] bridge_slave_0: entered promiscuous mode
[  315.004242][T11664] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.011342][T11664] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.028575][T11664] bridge_slave_1: entered allmulticast mode
[  315.040349][T11664] bridge_slave_1: entered promiscuous mode
[  315.075333][T11491] bridge_slave_1: left allmulticast mode
[  315.081125][T11491] bridge_slave_1: left promiscuous mode
[  315.087297][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.098181][T11491] bridge_slave_0: left allmulticast mode
[  315.109615][T11491] bridge_slave_0: left promiscuous mode
[  315.116608][T11491] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.614214][T11491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.628622][T11491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.639429][T11491] bond0 (unregistering): Released all slaves
[  315.724430][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.770814][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.871921][T11746] tun0: tun_chr_ioctl cmd 35108
[  315.898083][T11664] team0: Port device team_slave_0 added
[  315.930604][T11664] team0: Port device team_slave_1 added
[  316.010873][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.019401][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.045634][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.073506][T11751] netlink: 'syz.2.1653': attribute type 10 has an invalid length.
[  316.106582][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.115203][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.124880][T11754] netlink: 'syz.2.1653': attribute type 10 has an invalid length.
[  316.142287][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.163689][T11754] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1653'.
[  316.272804][T11758] FAULT_INJECTION: forcing a failure.
[  316.272804][T11758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  316.279190][T11760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1654'.
[  316.286241][T11758] CPU: 0 UID: 0 PID: 11758 Comm: syz.4.1655 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  316.286264][T11758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  316.286276][T11758] Call Trace:
[  316.286283][T11758]  <TASK>
[  316.286291][T11758]  dump_stack_lvl+0x241/0x360
[  316.286323][T11758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.286345][T11758]  ? __pfx__printk+0x10/0x10
[  316.286369][T11758]  ? shmem_allowable_huge_orders+0x1fe/0x420
[  316.286408][T11758]  ? __pfx___up_read+0x10/0x10
[  316.286447][T11758]  should_fail_ex+0x40a/0x550
[  316.286480][T11758]  copy_page_from_iter_atomic+0x301/0x1e60
[  316.286514][T11758]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  316.286546][T11758]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[  316.286568][T11758]  ? shmem_write_begin+0x1e9/0x350
[  316.286593][T11758]  ? __pfx_shmem_write_begin+0x10/0x10
[  316.286620][T11758]  ? fault_in_iov_iter_readable+0x229/0x280
[  316.286646][T11758]  generic_perform_write+0x675/0x990
[  316.286677][T11758]  ? __pfx_generic_perform_write+0x10/0x10
[  316.286699][T11758]  ? __pfx_generic_write_checks+0x10/0x10
[  316.286725][T11758]  ? rcu_read_lock_any_held+0xb7/0x160
[  316.286751][T11758]  ? file_update_time+0x2ab/0x450
[  316.286776][T11758]  shmem_file_write_iter+0xf9/0x120
[  316.286800][T11758]  vfs_write+0xacf/0xd10
[  316.286824][T11758]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  316.286849][T11758]  ? __pfx_vfs_write+0x10/0x10
[  316.286866][T11758]  ? do_sys_openat2+0x17a/0x1d0
[  316.286895][T11758]  ? __pfx_do_sys_openat2+0x10/0x10
[  316.286944][T11758]  ksys_write+0x18f/0x2b0
[  316.286965][T11758]  ? __pfx_ksys_write+0x10/0x10
[  316.286986][T11758]  ? do_syscall_64+0x100/0x230
[  316.287012][T11758]  ? do_syscall_64+0xb6/0x230
[  316.287037][T11758]  do_syscall_64+0xf3/0x230
[  316.287060][T11758]  ? clear_bhb_loop+0x35/0x90
[  316.287089][T11758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.287114][T11758] RIP: 0033:0x7f9880f8d169
[  316.287131][T11758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.287147][T11758] RSP: 002b:00007f9881e32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  316.287167][T11758] RAX: ffffffffffffffda RBX: 00007f98811a5fa0 RCX: 00007f9880f8d169
[  316.287181][T11758] RDX: 0000000000032600 RSI: 0000400000000100 RDI: 0000000000000009
[  316.287193][T11758] RBP: 00007f9881e32090 R08: 0000000000000000 R09: 0000000000000000
[  316.287205][T11758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  316.287215][T11758] R13: 0000000000000000 R14: 00007f98811a5fa0 R15: 00007ffc34371b48
[  316.287245][T11758]  </TASK>
[  316.430402][ T5848] Bluetooth: hci2: command tx timeout
[  316.566967][T11751] team0: left allmulticast mode
[  316.571943][T11751] vlan2: left allmulticast mode
[  316.576972][T11751] batadv0: left allmulticast mode
[  316.582275][T11751] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562
[  316.591707][T11751] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11751, name: syz.2.1653
[  316.600912][T11751] preempt_count: 0, expected: 0
[  316.605948][T11751] RCU nest depth: 1, expected: 0
[  316.610957][T11751] 2 locks held by syz.2.1653/11751:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  316.616355][T11751]  #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90
[  316.625508][T11751]  #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330
[  316.635656][T11751] CPU: 0 UID: 0 PID: 11751 Comm: syz.2.1653 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  316.635683][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  316.635695][T11751] Call Trace:
[  316.635703][T11751]  <TASK>
[  316.635711][T11751]  dump_stack_lvl+0x241/0x360
[  316.635740][T11751]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.635774][T11751]  ? __pfx__printk+0x10/0x10
[  316.635805][T11751]  __might_resched+0x5d4/0x780
[  316.635833][T11751]  ? dev_set_rx_mode+0x57/0x2e0
[  316.635851][T11751]  ? __pfx___might_resched+0x10/0x10
[  316.635886][T11751]  ? mark_lock+0x9a/0x360
[  316.635914][T11751]  __mutex_lock+0x126/0x1010
[  316.635943][T11751]  ? __pfx___dev_notify_flags+0x10/0x10
[  316.635964][T11751]  ? _raw_spin_unlock+0x28/0x50
[  316.635980][T11751]  ? dev_set_allmulti+0x11c/0x270
[  316.635998][T11751]  ? netif_set_allmulti+0x224/0x380
[  316.636016][T11751]  ? __pfx___mutex_lock+0x10/0x10
[  316.636048][T11751]  ? __pfx_vlan_dev_change_rx_flags+0x10/0x10
[  316.636088][T11751]  dev_set_allmulti+0x11c/0x270
[  316.636112][T11751]  team_change_rx_flags+0x1a8/0x330
[  316.636135][T11751]  ? team_change_rx_flags+0x29/0x330
[  316.636159][T11751]  ? __pfx_team_change_rx_flags+0x10/0x10
[  316.636182][T11751]  netif_set_allmulti+0x20e/0x380
[  316.636207][T11751]  __dev_change_flags+0x579/0x6f0
[  316.636232][T11751]  ? __pfx___dev_change_flags+0x10/0x10
[  316.636250][T11751]  ? validate_linkmsg+0x828/0xa40
[  316.636275][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  316.636304][T11751]  ? __pfx_validate_linkmsg+0x10/0x10
[  316.636330][T11751]  netif_change_flags+0x8b/0x1a0
[  316.636354][T11751]  do_setlink+0xf42/0x40f0
[  316.636400][T11751]  ? mark_lock+0x9a/0x360
[  316.636422][T11751]  ? __pfx_do_setlink+0x10/0x10
[  316.636448][T11751]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  316.636479][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  316.636513][T11751]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  316.636532][T11751]  ? lockdep_hardirqs_on+0x99/0x150
[  316.636554][T11751]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  316.636573][T11751]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  316.636598][T11751]  ? rcu_is_watching+0x15/0xb0
[  316.636622][T11751]  ? __mutex_lock+0xba3/0x1010
[  316.636646][T11751]  ? __mutex_lock+0x602/0x1010
[  316.636675][T11751]  ? rtnl_newlink+0xc4c/0x1d90
[  316.636708][T11751]  ? __pfx___mutex_lock+0x10/0x10
[  316.636740][T11751]  ? ns_capable+0x8a/0xf0
[  316.636763][T11751]  ? rtnl_link_get_net_capable+0x168/0x340
[  316.636796][T11751]  rtnl_newlink+0x15a6/0x1d90
[  316.636821][T11751]  ? stack_depot_save_flags+0x37/0x940
[  316.636864][T11751]  ? __pfx_rtnl_newlink+0x10/0x10
[  316.636895][T11751]  ? __netlink_deliver_tap+0x561/0x7f0
[  316.636922][T11751]  ? __pfx_validate_chain+0x10/0x10
[  316.636941][T11751]  ? __sock_sendmsg+0x221/0x270
[  316.636964][T11751]  ? ____sys_sendmsg+0x53a/0x860
[  316.636982][T11751]  ? __sys_sendmsg+0x269/0x350
[  316.637000][T11751]  ? do_syscall_64+0xf3/0x230
[  316.637022][T11751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.637067][T11751]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  316.637097][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  316.637134][T11751]  ? mark_lock+0x9a/0x360
[  316.637156][T11751]  ? __lock_acquire+0x1397/0x2100
[  316.637214][T11751]  ? __pfx_lock_release+0x10/0x10
[  316.637257][T11751]  ? __pfx_rtnl_newlink+0x10/0x10
[  316.637285][T11751]  rtnetlink_rcv_msg+0x791/0xcf0
[  316.637310][T11751]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  316.637340][T11751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  316.637374][T11751]  ? ref_tracker_free+0x643/0x7e0
[  316.637398][T11751]  netlink_rcv_skb+0x206/0x480
[  316.637424][T11751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  316.637453][T11751]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  316.637502][T11751]  ? netlink_deliver_tap+0x2e/0x1b0
[  316.637530][T11751]  netlink_unicast+0x7f6/0x990
[  316.637562][T11751]  ? __pfx_netlink_unicast+0x10/0x10
[  316.637583][T11751]  ? __virt_addr_valid+0x45f/0x530
[  316.637602][T11751]  ? __phys_addr_symbol+0x2f/0x70
[  316.637619][T11751]  ? __check_object_size+0x47a/0x730
[  316.637649][T11751]  netlink_sendmsg+0x8de/0xcb0
[  316.637686][T11751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  316.637717][T11751]  ? aa_sock_msg_perm+0x91/0x160
[  316.637751][T11751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  316.637775][T11751]  __sock_sendmsg+0x221/0x270
[  316.637803][T11751]  ____sys_sendmsg+0x53a/0x860
[  316.637832][T11751]  ? __pfx_____sys_sendmsg+0x10/0x10
[  316.637850][T11751]  ? __fget_files+0x2a/0x410
[  316.637886][T11751]  ? __fget_files+0x2a/0x410
[  316.637922][T11751]  __sys_sendmsg+0x269/0x350
[  316.637941][T11751]  ? __pfx_futex_wake+0x10/0x10
[  316.637973][T11751]  ? __pfx___sys_sendmsg+0x10/0x10
[  316.638035][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  316.638065][T11751]  ? do_syscall_64+0x100/0x230
[  316.638091][T11751]  ? do_syscall_64+0xb6/0x230
[  316.638117][T11751]  do_syscall_64+0xf3/0x230
[  316.638139][T11751]  ? clear_bhb_loop+0x35/0x90
[  316.638169][T11751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.638194][T11751] RIP: 0033:0x7f0adbb8d169
[  316.638211][T11751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.638227][T11751] RSP: 002b:00007f0adc9fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.638246][T11751] RAX: ffffffffffffffda RBX: 00007f0adbda6080 RCX: 00007f0adbb8d169
[  316.638260][T11751] RDX: 0000000004040850 RSI: 0000400000000000 RDI: 000000000000000c
[  316.638272][T11751] RBP: 00007f0adbc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  316.638284][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.638295][T11751] R13: 0000000000000000 R14: 00007f0adbda6080 R15: 00007ffcfbc307e8
[  316.638324][T11751]  </TASK>
[  316.638395][T11751] 
[  317.191868][T11751] =============================
[  317.196720][T11751] [ BUG: Invalid wait context ]
[  317.201578][T11751] 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 Tainted: G        W         
[  317.210153][T11751] -----------------------------
[  317.214991][T11751] syz.2.1653/11751 is trying to lock:
[  317.220359][T11751] ffff88805fa9cd28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270
[  317.229299][T11751] other info that might help us debug this:
[  317.235184][T11751] context-{5:5}
[  317.238638][T11751] 2 locks held by syz.2.1653/11751:
[  317.243831][T11751]  #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90
[  317.252895][T11751]  #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330
[  317.262743][T11751] stack backtrace:
[  317.266462][T11751] CPU: 0 UID: 0 PID: 11751 Comm: syz.2.1653 Tainted: G        W          6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  317.266482][T11751] Tainted: [W]=WARN
[  317.266487][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  317.266497][T11751] Call Trace:
[  317.266502][T11751]  <TASK>
[  317.266510][T11751]  dump_stack_lvl+0x241/0x360
[  317.266528][T11751]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.266545][T11751]  ? __pfx__printk+0x10/0x10
[  317.266563][T11751]  __lock_acquire+0x15a8/0x2100
[  317.266594][T11751]  lock_acquire+0x1ed/0x550
[  317.266615][T11751]  ? dev_set_allmulti+0x11c/0x270
[  317.266631][T11751]  ? __pfx_lock_acquire+0x10/0x10
[  317.266653][T11751]  ? dev_set_rx_mode+0x57/0x2e0
[  317.266666][T11751]  ? __pfx___might_resched+0x10/0x10
[  317.266687][T11751]  ? mark_lock+0x9a/0x360
[  317.266704][T11751]  __mutex_lock+0x19c/0x1010
[  317.266721][T11751]  ? dev_set_allmulti+0x11c/0x270
[  317.266736][T11751]  ? __pfx___dev_notify_flags+0x10/0x10
[  317.266750][T11751]  ? _raw_spin_unlock+0x28/0x50
[  317.266763][T11751]  ? dev_set_allmulti+0x11c/0x270
[  317.266776][T11751]  ? netif_set_allmulti+0x224/0x380
[  317.266790][T11751]  ? __pfx___mutex_lock+0x10/0x10
[  317.266810][T11751]  ? __pfx_vlan_dev_change_rx_flags+0x10/0x10
[  317.266842][T11751]  dev_set_allmulti+0x11c/0x270
[  317.266858][T11751]  team_change_rx_flags+0x1a8/0x330
[  317.266876][T11751]  ? team_change_rx_flags+0x29/0x330
[  317.266894][T11751]  ? __pfx_team_change_rx_flags+0x10/0x10
[  317.266912][T11751]  netif_set_allmulti+0x20e/0x380
[  317.266928][T11751]  __dev_change_flags+0x579/0x6f0
[  317.266944][T11751]  ? __pfx___dev_change_flags+0x10/0x10
[  317.266958][T11751]  ? validate_linkmsg+0x828/0xa40
[  317.266976][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  317.266998][T11751]  ? __pfx_validate_linkmsg+0x10/0x10
[  317.267016][T11751]  netif_change_flags+0x8b/0x1a0
[  317.267032][T11751]  do_setlink+0xf42/0x40f0
[  317.267060][T11751]  ? mark_lock+0x9a/0x360
[  317.267075][T11751]  ? __pfx_do_setlink+0x10/0x10
[  317.267096][T11751]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  317.267119][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  317.267143][T11751]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  317.267158][T11751]  ? lockdep_hardirqs_on+0x99/0x150
[  317.267174][T11751]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  317.267189][T11751]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  317.267205][T11751]  ? rcu_is_watching+0x15/0xb0
[  317.267223][T11751]  ? __mutex_lock+0xba3/0x1010
[  317.267240][T11751]  ? __mutex_lock+0x602/0x1010
[  317.267259][T11751]  ? rtnl_newlink+0xc4c/0x1d90
[  317.267280][T11751]  ? __pfx___mutex_lock+0x10/0x10
[  317.267300][T11751]  ? ns_capable+0x8a/0xf0
[  317.267317][T11751]  ? rtnl_link_get_net_capable+0x168/0x340
[  317.267341][T11751]  rtnl_newlink+0x15a6/0x1d90
[  317.267362][T11751]  ? stack_depot_save_flags+0x37/0x940
[  317.267389][T11751]  ? __pfx_rtnl_newlink+0x10/0x10
[  317.267409][T11751]  ? __netlink_deliver_tap+0x561/0x7f0
[  317.267431][T11751]  ? __pfx_validate_chain+0x10/0x10
[  317.267445][T11751]  ? __sock_sendmsg+0x221/0x270
[  317.267464][T11751]  ? ____sys_sendmsg+0x53a/0x860
[  317.267478][T11751]  ? __sys_sendmsg+0x269/0x350
[  317.267492][T11751]  ? do_syscall_64+0xf3/0x230
[  317.267509][T11751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.267537][T11751]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  317.267560][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  317.267587][T11751]  ? mark_lock+0x9a/0x360
[  317.267601][T11751]  ? __lock_acquire+0x1397/0x2100
[  317.267634][T11751]  ? __pfx_lock_release+0x10/0x10
[  317.267661][T11751]  ? __pfx_rtnl_newlink+0x10/0x10
[  317.267683][T11751]  rtnetlink_rcv_msg+0x791/0xcf0
[  317.267703][T11751]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  317.267725][T11751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  317.267748][T11751]  ? ref_tracker_free+0x643/0x7e0
[  317.267764][T11751]  netlink_rcv_skb+0x206/0x480
[  317.267784][T11751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  317.267806][T11751]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  317.267837][T11751]  ? netlink_deliver_tap+0x2e/0x1b0
[  317.267858][T11751]  netlink_unicast+0x7f6/0x990
[  317.267879][T11751]  ? __pfx_netlink_unicast+0x10/0x10
[  317.267896][T11751]  ? __virt_addr_valid+0x45f/0x530
[  317.267910][T11751]  ? __phys_addr_symbol+0x2f/0x70
[  317.267923][T11751]  ? __check_object_size+0x47a/0x730
[  317.267944][T11751]  netlink_sendmsg+0x8de/0xcb0
[  317.267969][T11751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.267991][T11751]  ? aa_sock_msg_perm+0x91/0x160
[  317.268015][T11751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.268035][T11751]  __sock_sendmsg+0x221/0x270
[  317.268055][T11751]  ____sys_sendmsg+0x53a/0x860
[  317.268073][T11751]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.268088][T11751]  ? __fget_files+0x2a/0x410
[  317.268110][T11751]  ? __fget_files+0x2a/0x410
[  317.268133][T11751]  __sys_sendmsg+0x269/0x350
[  317.268147][T11751]  ? __pfx_futex_wake+0x10/0x10
[  317.268171][T11751]  ? __pfx___sys_sendmsg+0x10/0x10
[  317.268201][T11751]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  317.268224][T11751]  ? do_syscall_64+0x100/0x230
[  317.268243][T11751]  ? do_syscall_64+0xb6/0x230
[  317.268261][T11751]  do_syscall_64+0xf3/0x230
[  317.268278][T11751]  ? clear_bhb_loop+0x35/0x90
[  317.268300][T11751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.268320][T11751] RIP: 0033:0x7f0adbb8d169
[  317.268332][T11751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.268345][T11751] RSP: 002b:00007f0adc9fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.268360][T11751] RAX: ffffffffffffffda RBX: 00007f0adbda6080 RCX: 00007f0adbb8d169
[  317.268371][T11751] RDX: 0000000004040850 RSI: 0000400000000000 RDI: 000000000000000c
[  317.268380][T11751] RBP: 00007f0adbc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  317.268390][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.268398][T11751] R13: 0000000000000000 R14: 00007f0adbda6080 R15: 00007ffcfbc307e8
[  317.268414][T11751]  </TASK>
[  317.855238][ T5848] Bluetooth: hci4: command tx timeout
[  317.873742][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.874176][T11751] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  317.880119][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  317.932373][T11753] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  317.932587][T11754] team0: entered promiscuous mode
[  317.946380][T11754] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  317.958101][T11754] 8021q: adding VLAN 0 to HW filter on device team0
[  317.965875][T11754] bridge0: port 1(team0) entered blocking state
[  317.972227][T11754] bridge0: port 1(team0) entered disabled state
[  317.985827][T11754] team0: entered allmulticast mode
[  317.990977][T11754] vlan2: entered allmulticast mode
[  317.996612][T11754] batadv0: entered allmulticast mode
[  318.001911][T11754] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562
[  318.013873][T11754] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11754, name: syz.2.1653
[  318.023048][T11754] preempt_count: 0, expected: 0
[  318.031383][T11754] RCU nest depth: 1, expected: 0
[  318.036780][T11754] INFO: lockdep is turned off.
[  318.041552][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.2.1653 Tainted: G        W          6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0
[  318.041579][T11754] Tainted: [W]=WARN
[  318.041585][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  318.041596][T11754] Call Trace:
[  318.041603][T11754]  <TASK>
[  318.041610][T11754]  dump_stack_lvl+0x241/0x360
[  318.041636][T11754]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.041656][T11754]  ? __pfx__printk+0x10/0x10
[  318.041672][T11754]  ? rcu_is_watching+0x15/0xb0
[  318.041692][T11754]  ? lock_acquire+0xe3/0x550
[  318.041718][T11754]  ? __pfx_lockdep_softirqs_off+0x10/0x10
[  318.041748][T11754]  __might_resched+0x5d4/0x780
[  318.041773][T11754]  ? dev_set_rx_mode+0x57/0x2e0
[  318.041791][T11754]  ? __pfx___might_resched+0x10/0x10
[  318.041815][T11754]  ? __pfx_lock_acquire+0x10/0x10
[  318.041844][T11754]  ? netif_set_allmulti+0x224/0x380
[  318.041863][T11754]  __mutex_lock+0x126/0x1010
[  318.041886][T11754]  ? __pfx___dev_notify_flags+0x10/0x10
[  318.041905][T11754]  ? __local_bh_enable_ip+0x168/0x200
[  318.041926][T11754]  ? _raw_spin_unlock+0x28/0x50
[  318.041943][T11754]  ? dev_set_allmulti+0x11c/0x270
[  318.041959][T11754]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  318.041979][T11754]  ? netif_set_allmulti+0x224/0x380
[  318.041995][T11754]  ? __pfx___mutex_lock+0x10/0x10
[  318.042017][T11754]  ? __pfx_vlan_dev_set_rx_mode+0x10/0x10
[  318.042044][T11754]  ? dev_set_rx_mode+0x233/0x2e0
[  318.042062][T11754]  ? __pfx_vlan_dev_change_rx_flags+0x10/0x10
[  318.042090][T11754]  ? netif_set_allmulti+0x264/0x380
[  318.042110][T11754]  dev_set_allmulti+0x11c/0x270
[  318.042129][T11754]  team_change_rx_flags+0x1a8/0x330
[  318.042151][T11754]  ? team_change_rx_flags+0x29/0x330
[  318.042174][T11754]  ? __pfx_team_change_rx_flags+0x10/0x10
[  318.042195][T11754]  netif_set_allmulti+0x20e/0x380
[  318.042216][T11754]  dev_set_allmulti+0x143/0x270
[  318.042235][T11754]  br_add_if+0x317/0xef0
[  318.042255][T11754]  ? validate_linkmsg+0x828/0xa40
[  318.042280][T11754]  do_set_master+0x579/0x730
[  318.042301][T11754]  do_setlink+0xfee/0x40f0
[  318.042332][T11754]  ? rcu_is_watching+0x15/0xb0
[  318.042356][T11754]  ? do_raw_spin_lock+0x14f/0x370
[  318.042379][T11754]  ? __pfx_do_setlink+0x10/0x10
[  318.042408][T11754]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  318.042440][T11754]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  318.042458][T11754]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  318.042479][T11754]  ? rcu_is_watching+0x15/0xb0
[  318.042500][T11754]  ? __mutex_lock+0xba3/0x1010
[  318.042527][T11754]  ? __mutex_lock+0x602/0x1010
[  318.042552][T11754]  ? rtnl_newlink+0xc4c/0x1d90
[  318.042578][T11754]  ? __pfx___mutex_lock+0x10/0x10
[  318.042603][T11754]  ? ns_capable+0x8a/0xf0
[  318.042624][T11754]  ? rtnl_link_get_net_capable+0x168/0x340
[  318.042654][T11754]  rtnl_newlink+0x15a6/0x1d90
[  318.042679][T11754]  ? stack_depot_save_flags+0x37/0x940
[  318.042713][T11754]  ? __pfx_rtnl_newlink+0x10/0x10
[  318.042738][T11754]  ? __netlink_deliver_tap+0x561/0x7f0
[  318.042764][T11754]  ? __pfx_validate_chain+0x10/0x10
[  318.042784][T11754]  ? __sock_sendmsg+0x221/0x270
[  318.042807][T11754]  ? ____sys_sendmsg+0x53a/0x860
[  318.042825][T11754]  ? __sys_sendmsg+0x269/0x350
[  318.042842][T11754]  ? do_syscall_64+0xf3/0x230
[  318.042862][T11754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.042896][T11754]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  318.042924][T11754]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  318.042955][T11754]  ? mark_lock+0x9a/0x360
[  318.042974][T11754]  ? __lock_acquire+0x1397/0x2100
[  318.043015][T11754]  ? __pfx_lock_release+0x10/0x10
[  318.043049][T11754]  ? __pfx_rtnl_newlink+0x10/0x10
[  318.043075][T11754]  rtnetlink_rcv_msg+0x791/0xcf0
[  318.043100][T11754]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  318.043127][T11754]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  318.043156][T11754]  ? ref_tracker_free+0x643/0x7e0
[  318.043176][T11754]  netlink_rcv_skb+0x206/0x480
[  318.043200][T11754]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  318.043226][T11754]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.043279][T11754]  ? netlink_deliver_tap+0x2e/0x1b0
[  318.043307][T11754]  netlink_unicast+0x7f6/0x990
[  318.043335][T11754]  ? __pfx_netlink_unicast+0x10/0x10
[  318.043357][T11754]  ? __virt_addr_valid+0x45f/0x530
[  318.043375][T11754]  ? __phys_addr_symbol+0x2f/0x70
[  318.043393][T11754]  ? __check_object_size+0x47a/0x730
[  318.043421][T11754]  netlink_sendmsg+0x8de/0xcb0
[  318.043454][T11754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.043483][T11754]  ? aa_sock_msg_perm+0x91/0x160
[  318.043519][T11754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.043545][T11754]  __sock_sendmsg+0x221/0x270
[  318.043576][T11754]  ____sys_sendmsg+0x53a/0x860
[  318.043600][T11754]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.043620][T11754]  ? __fget_files+0x2a/0x410
[  318.043649][T11754]  ? __fget_files+0x2a/0x410
[  318.043680][T11754]  __sys_sendmsg+0x269/0x350
[  318.043700][T11754]  ? __pfx_futex_wake+0x10/0x10
[  318.043730][T11754]  ? __pfx___sys_sendmsg+0x10/0x10
[  318.043773][T11754]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  318.043807][T11754]  ? do_syscall_64+0x100/0x230
[  318.043833][T11754]  ? do_syscall_64+0xb6/0x230
[  318.043858][T11754]  do_syscall_64+0xf3/0x230
[  318.043882][T11754]  ? clear_bhb_loop+0x35/0x90
[  318.043912][T11754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.043939][T11754] RIP: 0033:0x7f0adbb8d169
[  318.043956][T11754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.043973][T11754] RSP: 002b:00007f0adc9dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.043994][T11754] RAX: ffffffffffffffda RBX: 00007f0adbda6160 RCX: 00007f0adbb8d169
[  318.044009][T11754] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 000000000000000c
[  318.044021][T11754] RBP: 00007f0adbc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  318.044033][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.044044][T11754] R13: 0000000000000000 R14: 00007f0adbda6160 R15: 00007ffcfbc307e8
[  318.044064][T11754]  </TASK>
[  318.583725][ T5837] Bluetooth: hci2: command tx timeout
[  318.603896][T11754] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  318.787298][T11491] hsr_slave_0: left promiscuous mode
[  318.793291][T11491] hsr_slave_1: left promiscuous mode
[  318.799112][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.806741][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.824951][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.832359][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.870110][T11491] veth1_macvtap: left promiscuous mode
[  318.875683][T11491] veth0_macvtap: left promiscuous mode
[  318.881230][T11491] veth1_vlan: left promiscuous mode
[  318.886586][T11491] veth0_vlan: left promiscuous mode
[  319.019567][T11491] team0 (unregistering): Port device team_slave_1 removed
[  319.041996][T11491] team0 (unregistering): Port device team_slave_0 removed
[  319.439223][T11491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.449612][T11491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.478029][T11491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.488340][T11491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.517211][T11491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.527492][T11491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.581971][T11491] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  319.590550][T11491] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  319.599815][T11491] team0: Port device netdevsim0 removed
[  319.606483][T11491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.617096][T11491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.856134][T11491] bridge_slave_1: left allmulticast mode
[  319.861863][T11491] bridge_slave_1: left promiscuous mode
[  319.867860][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.875921][T11491] bridge_slave_0: left allmulticast mode
[  319.881591][T11491] bridge_slave_0: left promiscuous mode
[  319.887332][T11491] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.895619][T11491] team0: left allmulticast mode
[  319.900482][T11491] vlan2: left allmulticast mode
[  319.905456][T11491] batadv0: left allmulticast mode
[  319.910570][T11491] bridge0: port 1(team0) entered disabled state
[  319.919779][T11491] bridge_slave_1: left allmulticast mode
[  319.925521][T11491] bridge_slave_1: left promiscuous mode
[  319.931149][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.939108][T11491] bridge_slave_0: left allmulticast mode
[  319.944919][T11491] bridge_slave_0: left promiscuous mode
[  319.950538][T11491] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.959152][T11491] team0: left allmulticast mode
[  319.964313][T11491] macvlan3: left allmulticast mode
[  319.969413][T11491] team0: left promiscuous mode
[  319.974264][T11491] macvlan3: left promiscuous mode
[  319.979438][T11491] bridge0: port 2(team0) entered disabled state
[  319.987774][T11491] batadv1: left allmulticast mode
[  319.992812][T11491] batadv1: left promiscuous mode
[  319.997990][T11491] bridge0: port 1(batadv1) entered disabled state
[  320.037965][T11491] ip6gretap0 (unregistering): left allmulticast mode
[  320.077911][T11491] ip6gretap0 (unregistering): left promiscuous mode
[  320.172157][T11491] erspan0 (unregistering): left promiscuous mode
[  320.190311][T11491] erspan0 (unregistering): left promiscuous mode
[  320.766303][T11491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.776261][T11491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.785650][T11491] bond0 (unregistering): Released all slaves
[  320.873338][T11491] bond0 (unregistering): Released all slaves
[  320.956895][T11491] bond1 (unregistering): Released all slaves
[  320.966819][T11491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.976513][T11491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.987856][T11491] bond0 (unregistering): Released all slaves
[  321.082516][T11491] team0: Port device macvlan3 removed
[  321.089788][T11491] bond0 (unregistering): Released all slaves
[  321.098159][T11491] bond1 (unregistering): Released all slaves
[  321.107273][T11491] bond2 (unregistering): Released all slaves
[  321.116623][T11491] bond3 (unregistering): Released all slaves
[  321.203953][T11491] bond4 (unregistering): Released all slaves
[  321.281986][T11491] Tq€!7: left promiscuous mode
[  321.319747][T11491] tipc: Disabling bearer <udp:syz2>
[  321.325090][T11491] tipc: Left network mode
[  321.337654][T11491] tipc: Left network mode
[  321.344965][T11491] IPVS: stopping master sync thread 7882 ...
[  321.351122][T11491] IPVS: stopping backup sync thread 11559 ...
[  321.817886][T11491] hsr_slave_0: left promiscuous mode
[  321.826147][T11491] hsr_slave_1: left promiscuous mode
[  321.831821][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.839605][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.851059][T11491] macvlan0: left promiscuous mode
[  321.857033][T11491] dummy0: left promiscuous mode
[  321.866740][T11491] hsr_slave_0: left promiscuous mode
[  321.872329][T11491] hsr_slave_1: left promiscuous mode
[  321.877975][T11491] batman_adv: batadv0: Removing interface: macvtap0
[  321.884909][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.892351][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.900877][T11491] hsr_slave_0: left promiscuous mode
[  321.906712][T11491] hsr_slave_1: left promiscuous mode
[  321.915360][T11491] batadv0: left promiscuous mode
[  321.920398][T11491] veth1_macvtap: left promiscuous mode
[  321.925970][T11491] veth1_vlan: left promiscuous mode
[  321.931168][T11491] veth0_vlan: left promiscuous mode
[  322.037635][T11491] team0 (unregistering): Port device team_slave_1 removed
[  322.058098][T11491] team0 (unregistering): Port device team_slave_0 removed
[  322.127787][T11491] team0 (unregistering): Port device vlan2 removed
[  322.439367][T11491] team0 (unregistering): Port device team_slave_1 removed
[  322.449316][T11491] team0 (unregistering): Port device team_slave_0 removed
[  323.729470][T11491] IPVS: stop unused estimator thread 0...