last executing test programs:

1m33.721528785s ago: executing program 3 (id=3164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setsockopt$inet6_buf(r7, 0x29, 0x32, &(0x7f00000003c0)="d3648f18ff9c02c9671f97b52455d39dd4a2117124798bb2fe0a9de70abdac4e5ce24c404d442f9bd8bfd7a69d939dc590ac54d1f76a03ba3356de1fba569afe565810de34055a99c94439b55855767eeec94098a16576a5a08256e88d3e196b32b84cd5de147a2024ad3a0462eaae547df6fafcd761c06630add6b535acc88ab07d1fc72ddc80a7f6524e2228768f9c5fc2da9804", 0x95)
sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2020410}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4006800}, 0x20000004)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r13=>0x0)
r14 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r13}, @NL802154_ATTR_PID={0x8, 0x1c, r14}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000004)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010029bd6a00ffdbdf25028010050003000b0030000008000100ac1414"], 0x24}}, 0x0)

1m33.372056321s ago: executing program 3 (id=3167):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="0d87e245bae397ee787bdcfe53d01cd68ae3f5c2680f25d00217d382afcde9bf487e34a7dffdd28e2cf5b8876f", @ANYBLOB="fbeb4d1afadc0246b154ffe2afbd2179428150df01e752454a68d76e169d4cf7b885d176d539ad16675e54873e3c2815ca06e3a84c3bb7414075270a3f7ce237604f16ee5ef16bc043eaa5a8da0fc2161fff5124fc3101a8ada8b7fc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r6 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)

1m31.756863687s ago: executing program 3 (id=3177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r3], 0x60}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b040000000000e02b6cf77467fb614000007a000000b579f208fb038158a836c31c0dc6d59b6a48de4d83ef5eeea2e9db06000000000000003371b05e033d910c4b7c52d85879ab3b94e2a756a3c7b39541a4e681819ef6123038cefd4448f02142c0f611198b78721081e5de06eacf753483b0f874b307aef25175441186157f43", @ANYRESDEC=r0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x50)

1m31.476558228s ago: executing program 3 (id=3181):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000050a030000000000000000000600000008000b400000000414000000020a0101000000000000000004000003140000001100010022000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x804)
mmap(&(0x7f0000139000/0x3000)=nil, 0x3000, 0x3, 0x10010, r0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000bffeea9e24e47e5d92bb00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
unshare(0x600)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x10f}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={<r4=>0x0, 0x0, 0x401, 0x400, 0x6, 0x9a1f9009}, &(0x7f0000000300)=0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x1, @empty}}, 0x0, 0x1, 0x3f8, 0x0, 0x32, 0xfffffffe}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001480)="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", 0x1c7}], 0x1}}], 0x2, 0x4048884)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)

1m29.376465382s ago: executing program 3 (id=3196):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r1, 0x6, 0x6, 0x1, 0xb810, 0x6, 0x6, 0x2, {r1, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x7}}, 0x89, 0x5, 0xef, 0x6, 0x7337}}, &(0x7f0000000140)=0xb0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r4, 0x5, 0x20}, &(0x7f00000001c0)=0x18)

1m20.739495746s ago: executing program 3 (id=3203):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000002c0)=0x74a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x16}}, 0x5d)
close(0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40)
setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, 0x0, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300))
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0)
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r14, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d000000040000040800091400000000", 0x24)

1m5.661619015s ago: executing program 32 (id=3203):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000002c0)=0x74a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x16}}, 0x5d)
close(0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40)
setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, 0x0, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300))
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0)
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r14, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d000000040000040800091400000000", 0x24)

3.982678509s ago: executing program 4 (id=4090):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r7, 0x0, 0x80, 0x8)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0)
write(r4, 0x0, 0x0)
close(r1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x80811)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r16 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r16, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x10, 0x6, 0x3, 0xfffffffa, 0xc219, 0x1, 0x3ccd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000)

3.072549107s ago: executing program 5 (id=4101):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r2, 0x0, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18)
connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18)
sendmmsg(r7, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0, 0xe}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0702000000000000000001000000040008802c0004800500030001000000050003000000000005000300010000000500030000000000050003000200000008000100030000000800020001000000"], 0x54}}, 0x880)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r11=>0xffffffffffffffff, 0x5248, 0x5, 0x8})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r11, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)

2.738022626s ago: executing program 4 (id=4106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x1c, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000120001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003"], 0x50}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)

2.486671931s ago: executing program 4 (id=4109):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cc, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x19)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x11)
r3 = socket$inet(0xa, 0x801, 0x84)
socket$inet(0xa, 0x801, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, <r6=>0x0}, 0x8)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="0300000000000000000000000000010000000000db441ead33e95cc0764f0f4703b415ea7e037908e0a46cc3c1c5842dc383cba6d0553116fdd675acb31aedaa23776f9728affb867a43cb3d53d734adbf041a4cd0dd8b236bf8a7cd8bfa00fbe59bbea0aeaf4ee8ce121810be77f16df3d9e9a5492977f068b4ec5ab8b9ffbd015b479a91398ca98d52cb15cd479138bfa968bb2b686360565c85d4f8441f562eecc5bb142a7d3187fac1c3d0", @ANYRESOCT, @ANYRES16, @ANYBLOB="04000000050000000300"/28], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000020000000b702000000620000008500000086000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r6, 0x0, 0x0, &(0x7f0000000880)=[r4, r4, r4, r7], 0x0, 0x10, 0x80}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='bcache_btree_insert_key\x00', r8, 0x0, 0x27c5}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x12, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.380689327s ago: executing program 0 (id=4110):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/73, 0x49}, {0x0}, {0x0}], 0x3)

2.329777703s ago: executing program 0 (id=4111):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x3, 0x9, 0x2c6, 0x9}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000300))
socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000100))
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0)

2.070896745s ago: executing program 5 (id=4114):
syz_emit_ethernet(0x10be, &(0x7f0000001200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x2a, 0x4, 0x1, 0x7, 0x10b0, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @rr={0x7, 0x1f, 0xd8, [@empty, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x44, 0xe, "ccf7229081a3ec68efb3bcc5"}, @end, @cipso={0x86, 0x64, 0x3, [{0x5, 0xa, "27e744d9edfe047a"}, {0x7, 0x6, "3ea4eccf"}, {0x1, 0xd, "7810bdd3932c5c3b4f51ce"}, {0x6, 0xb, "7ce0f7eabd8736ac17"}, {0x0, 0x12, "ce2010567866d507c297b49dc9a158d0"}, {0x6, 0x3, "c7"}, {0x7, 0x6, 'b`8<'}, {0x2, 0x4, "ea37"}, {0x0, 0xb, "fe8719eeee55f2aa14"}, {0x2, 0xc, "370c7daed5159b1fd656"}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x2, "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"}}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000340), 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0)
sendto$unix(r2, &(0x7f0000000480)="ed1600cf4fd7b44b3eca5c03fbe7c00fe038a43d4e34b961240bc2e98e6bcab302af04aaaacecbb4a42e5376dcc86c71534fbbd7e26c84ee38ce5683f78fe97fdfc647252e55706a911ba348813274da19b353ee76c5ba7692dae527e9606ed000c2d877ace5cbedf3280b8ac4795723b8499bf58f8f6e37faf175d4c843771eaccf55d7258556b3bc243b935681a80700e2a6f960a84615ac09fb272a13299c950a8a7270284bf678217aa2f777b2a0a9156f42e5e563aa925f3c4607596d", 0xbf, 0x8040, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1}], 0x1, 0x40010041, 0x0) (async)
recvmmsg(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1}], 0x1, 0x40010041, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20)

1.882010256s ago: executing program 5 (id=4117):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x3, "0000000108653904030405ffffff09c56a3000", "9384bbeb271daeb21b661fe808b21b77", {"694c875dfb9ba53fa4057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000100)="f49b8d47dcee4fdb429129ce78b6e18f4c2206d77c3cebcc44444ef90fda6ed774b81284f642b87cb0367b373bf52d60973998ba147695628b8763da7d35362e3c8630d0660a94d9a47d91f06285d7d4ff96aa88c86956d455cb6cd71c4a80a6a42a9b21a69ccba94b804d3bf5f28b96d9a46cc60274a92f48cb670ffd8ab0c379e05122aa8c4fa5a574dcab7d76f965d1f458901b16d224db9cc6379e414a2af5511ae2528b44be96", 0xa9, 0x8081, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51299}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x4000)

1.864220368s ago: executing program 2 (id=4118):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="3f075000f0ffffff8500000327000000"], &(0x7f0000000080)='GPL\x00', 0x7398, 0xb, &(0x7f00000000c0)=""/11, 0x40f00, 0x4430ffb454ef5873, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x1, 0x7, 0x7}, {0x4, 0x1, 0x3, 0x8}, {0x5, 0x4, 0x5, 0x4}, {0x5, 0x3, 0xf, 0x4}, {0x4, 0x4, 0x4, 0x6}, {0x2, 0x5, 0x2, 0x1}, {0x1, 0x3, 0x0, 0x1}, {0x5, 0x3, 0xe, 0x1}, {0x4, 0x2, 0xa, 0x8}], 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000380)='/', 0x0}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r2}, 0xc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x5}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x2, [{}, {}]}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

1.652664549s ago: executing program 2 (id=4121):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x19ae}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x81}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000140)=""/218, 0x0, 0xc}, 0x94)

1.51602675s ago: executing program 1 (id=4122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=<r2=>0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000980)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000a80)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000b00)=0xc)
r5 = gettid()
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000c40)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000cc0)=0xc)
sendmsg$unix(r1, &(0x7f0000000d80)={&(0x7f0000000000)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000140)="ed992be9c4ec5e4969083d24b171f167d4115d3f64366622beb779c913305a9c4e9b40377b25aa4c2b27c9aed4985e7bf2dd6df07626bbb0eabb32066432b880cc274f192987a7053f569ba0fcb040bf8ba70386d7af71ab6f402663e09abfd4fa7ec57ebb2f819e2b471de2f5af3f362cbb66e3a4a940be12557ad955fe642fa19e88f2c713d33898da7a6e7761f1e94826d71515d124451f3cb143aa7a079a1d7cf1ef64ff5e4061f868a9ac910a3911", 0xb1}, {&(0x7f0000000200)="a904dcf479846291d433bab9c2188e0cf48ea6628c252d9d399f4cff4bdede1081950b0a8308e3136abc8eea9997e3b9f1c03b9fdb1e22c06b13cfd777bc46f7ad71ee9b9a8b665615d1ed2d931502f399e9837e650e368bb47237209779b8dffd60d3368975d1c4bba6a702bd0102c0fe6074d3507e9cef5b0da0a9792462df51ad7ce33eab3be4f852d08ace5738119e67560fe135bb5c90dfb96f3065c869685fd7b0351d63df3d84e875ece72f0e1a9416042be0e1266c2758b53c9eefc93442e6f001eaee09b61357438d", 0xcd}, {&(0x7f0000000300)="bfc75c3ac70b525e3097c1a97122d44eddf320dd99183c00376057255699aad1cd1fe32d3b3700c76d45acd5b864d2bf01d7c97ec81863823cdcbb1e54ed04f80614ab799fb800e28fcf0a17b6fa1b64a027deeb237acc941f2cbc2ade1e0cf94342d8fd47b626605d63b030864d2f6382a54f57a7d275c30d6829b2d351d6bae52d9fabae2819b5315c73e36cc075ea793852569f7b19ba2b7f8025d8939df4ca58d488b355baadb7f439642cbfd16d69388b29846f4bbf6ef607c8ac740c915f", 0xc1}, {&(0x7f0000000080)="1e9f2d08482febc352d466b1bcb1bdb472c5ecf1384f90a6095b4f8c55c6a841b8724115512fecbd874926944480b7d4bba4a9f456c7c4a6507dd66aefdf8f1217ca99c3a2148e4920fa773fe77a7846f6fa12b790e917", 0x57}, {&(0x7f0000000400)="3bfed584f85f3435b838b1771fe3cc591f81803fca536e629ae0612c19a7547de28def8375f5c5e5fa58327b13e7d9bbd1a9a246d2becf1a9256e1f4feabb63fede277735f77c59de943f610150551b53422cb6787f73af9f9d1da64fecdac783c9362e0e6b050107c215418a23b9d751e80bec122182f11b9eee9eb1535fcfacc69781f9bde7bcc19525a787fcb03b6a31f8ad66357919668246946ded2fc0f79c22da5d76747a72fb6d33dce7e85f36bb9034d980be385f543d9365d7fd855", 0xc0}, {&(0x7f00000004c0)="402f22c2a950a0636f6f2820c23b4ced28fd31b68a37fcbbf931aabf890925f4b954075257940502f7703dcab35d28186cc2cdbe53ae9116739f5ca1580b15a73d89597cb156a2964a5947f3992aa35dac342e7c9814f6bd99ed0ccbfb673a169643f63350880708b9e25646444716d0d57377dfb4efb16b89bea06ea27c9070fe819aca2278c3eda29d6fcd8a8ecad69751f98f029d21a44e35", 0x9a}, {&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000680)="300989634fcff7852e483b4f98c43102c5be7d07410c020325ca1a2194302e8f34140d26c1e1212493c30cc53411f710b2f94a106b68290adc6385d53dbc9fb90c1efad6e1f0ced15c438c5748941bf3131e317b4ee95b0ea40789d22a86e723dd5cbfd5db4e2d4c8eb6dfbe55c1", 0x6e}], 0x8, &(0x7f0000000d00)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x58, 0x1}, 0x80)

1.498138856s ago: executing program 2 (id=4123):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
close(r1)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000140000012abd7000fcdbdf25028080fe13abdf5f0c099403870989e3407c3da54f73e049c100d743046edc3147d3877913036f693ae22116331140bdca71880d929a4cde97809165dd6dbac7b0a7ac2eb41cd61fdca34133c7788d53d2197030e7374066a9e39660878a21c9b3cf194dcae20b656ffb0343ec3aec6fd78640e8186de9c02449fc37a5e9e427e8d5d649f2b8c736fe223b42583872", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r7 = socket$inet(0x2, 0x2, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r7, @ANYRES32=r6, @ANYRESOCT=r5], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r11, {0xe, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x16c, 0x24, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1, 0xfff3}, {0xffff, 0xfff5}, {0xfff1, 0x6}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfb2}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1b}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000340)={0x3, [0x0, 0x0, 0x0]})
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r13}, 0x10)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000300)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004)

1.2494577s ago: executing program 0 (id=4124):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4060084}, 0xc001)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780))
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000270001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000000))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='ext4_fc_cleanup\x00', r5, 0x0, 0x3}, 0x18)
unshare(0x6020480)
r6 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r6, 0x0, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xffffff98}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@op={0x18}], 0x18, 0x4004}], 0x1, 0x4000800)

1.040914831s ago: executing program 0 (id=4125):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x40040)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4048055)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40891}, 0x80c0)

1.007528993s ago: executing program 0 (id=4126):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e827b38fce36763f0cbc5b81f3fb7d1abc84fe89d2662d0b79aa846bd1f0be46c52d774b11fdc82e86d8ef536a5c8180a4eb5c72c448566a347771c4e7e177d177d1fe2c08cd9bad969ce008cc8d85b66d5395d3ed5", 0x87, 0x20008040, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x86, 0xa)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto(r0, &(0x7f0000000480)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602ae4e0598acd3f41844de604d849a1e3b32905b0d26e9ff34b83f382a5b9bf4", 0x6f, 0x4008044, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000007c0)="01a4acc7cf28fc165466072a660bbf56352083db9d50454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b8900000000000000000e5176e584c970207f23b0073ca5375abddf56331be396e27704662eb4970a744988fc0", 0x72, 0x0, 0x0, 0x0)

891.969934ms ago: executing program 2 (id=4127):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0xffdffffe, 0x4)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000009e15000098000000060000000000000000000001000000000300000003000000d20000000e00000000000007000000000b0000000000000e03000000010000000600000000000002020000000900000000000012050000000900000000000012050000000e0000000000000804000000000000000500000d0000000009000000010000000d00000000000000030000000000000010000000050000000b000000040000000030614f61003d0042d339e075ef8687daa706f557afcc4889b22ebe2ed94039503ba8f1f99ac55d0e4a5dded139e02b60"], &(0x7f00000005c0)=""/127, 0xb6, 0x7f, 0x1, 0xd, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018698229a4bcb3689511a847a655bd76f662087b39cb861b0f1e0700acf93386202e36614ab1b55385510c4b9f5d5097dc0be6dd92316dc941b15d56d8df8c9f8957103d8ba2ae5ca9a11d98e590facac8b80756d26acccda1ce0b2f08f2f2c2f580a7bd40e1e682", @ANYRES32=0x0, @ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
socket$kcm(0x29, 0x2, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000680), 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000081001811", @ANYRES32=r3, @ANYBLOB="0000000000b70800fbffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000081001811", @ANYRES32=r3, @ANYBLOB="0000000000b70800fbffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x58, &(0x7f0000000200)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e24, 0x1000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}]}, &(0x7f0000000300)=0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10) (async)
close(r10)
ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) (async)
ioctl$TUNSETLINK(r8, 0x400454cd, 0x118)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd)

854.288101ms ago: executing program 5 (id=4128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r14=>0x0})
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r17=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000dd78ae546226e8cead0f8800", @ANYRES16=r16, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r17, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

850.806383ms ago: executing program 4 (id=4129):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000640000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xff8, &(0x7f0000000840)=""/4088, 0x0, 0xa}, 0x94)

732.512651ms ago: executing program 1 (id=4130):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=r0, @ANYBLOB="aedf9c05cb4a645daaf9533a29790a4e17b248f02682bb7d9cdb51e6efd1", @ANYRESDEC], &(0x7f0000000700)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=[0x3], 0x0, 0x7fff, 0x1, 0x1}}, 0x40)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000940)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYRES64=r2, @ANYRESDEC=r1], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18003c5068c3dc98b368fbe09d000000000000000000000000000085ad00000095925c8e0608ee8906ee4e21e7b0a2b195a17ec704bd2cc9ab4c65aefa5ec5ebbf9353e9cb37bfe35141a5cd310f9ecb137c7092ad3d83eedacd680bf2d8cc1d1210a39d6c3470d3a3631f5e4770aba7e2218d5a73d4f338f7e0a30003133d6cfc5483c1a75e0145302a943c3207acecb6b704564dd5c9b27fd7f4e0b59d00"/170], &(0x7f0000000000)='GPL\x00', 0x1, 0x87, &(0x7f0000000480)=""/135}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
close(0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020400)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, 0x0, &(0x7f00000001c0))
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f00000000c0)=0x42)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002fe250100000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x400c060}, 0x20008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$tipc(0x1e, 0x8, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r10, @ANYBLOB="00000000100001823e9c5f22", @ANYRES32, @ANYRES32=r11], 0x44}}, 0x8021)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3, <r12=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc0e1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query, @map_val={0x18, 0xe, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x15}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94)

732.250368ms ago: executing program 4 (id=4131):
socket$packet(0x11, 0x3, 0x300)
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x80, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0)
write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x16, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "3297"}}, 0x24)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

633.199807ms ago: executing program 1 (id=4132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x24, 0x9, 0x7, 0x12, @remote, @private2, 0x8, 0x10, 0x7}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "ca149a8ffbf958520940d250e51ed6a354de308aaf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000001}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000004c0)='macvtap0\x00', 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r6 = socket$inet(0x2, 0x3, 0xfffff55d)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001d80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d40)={&(0x7f00000006c0)={0x167c, r5, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x61}, @NL80211_ATTR_CSA_IES={0x3c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xa]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x180, 0x6, 0x7, 0x4, 0xffff, 0xa, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x800, 0x39d, 0x10, 0x8, 0x101]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x6, 0x401, 0x3, 0x4e]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8a}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc18f}], @NL80211_ATTR_CSA_IES={0x15ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x832, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@erp={0x2a, 0x1}, @chsw_timing={0x68, 0x4, {0x572, 0xfffe}}]}, @NL80211_ATTR_FTM_RESPONDER={0x30, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "085cdf9df937109ec1789933a7ac980f94ee9588a15d29544977"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x158, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf2, 0x3, "8f352eef94041a6ec2b7242ed3a10f985fba5ad7f0e2661a84deb08dfc42346e89849002818a25b7982288250c0e22710a1e896b8bedf58cd2e1a630e5006242c28bb902a63e1cf3394d42d9a2d3da71720f199a1afab609b0029299ca04510132fc20ac877bc6b0eab22002c47cdbda8ac175c6b49453f8c73c1ff0c1d0cc87fbca96417de87829a4ce3b322893301d9de366950edc801de08908083068320d1a16c1de36325e7cfbd9a96848f8d1dbbd3304595dd5f21d503e42e510c99e54062c519adec8b9382106184b8ebac293342c51534b5c959759ac0e64eca6fa7bea33c2c65b619e6c8fcc9bd53c9e"}, @NL80211_FTM_RESP_ATTR_LCI={0x45, 0x2, "23275fe8bdaa2b14212a55e08b810c6c143cf9a4ffbe7b759b95c23c2c26f5df877259b67d2e6dec6533a1e7acce6d05a85bed7fe8061ddd2674a3e5f068079cbd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x70, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6a, 0x2, "d651f277a3439900ef2a5d7511d6aa526d74e9dc9dfb04661f1727b5662342a54b990305c156449790b336bf6fabeef9945ab18b4d6d519f1f983adc8c73d85bacdb6c704ae7f6c188a8830330e50503e632e6ce006b3ed2b1d308eb6944bd8beafd71da0106"}]}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0xa65, "28d522e3f1bf", @short="064f02c9a55a1ef5"}}]}, @NL80211_ATTR_PROBE_RESP={0x76a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3d8, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@device_b, {0x7, 0xafb}}, 0x6, @default, 0x2c10, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x9d}, @void, @void, @val={0x5, 0x24, {0x4b, 0x17, 0x3, "ea8cf7f6f99b340e8d78f5740cff82db450f8d636f83c4fab5ecd442bece97d02b"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0xad, 0x5}}, @val={0x2d, 0x1a, {0x1, 0x1, 0x3, 0x0, {0x8, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xa, 0x85}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x50}}, @void, [{0xdd, 0xde, "b19ac94a800cd9ce5d54ac0b8460c373869b9f7bdd6976c18f80852abb0a918f59906cd4254dc145de007293ec4417022cbee2cc5a66a785e42840089831e5077407492f85081318d915f6df00d9a987f3b970cafa341dd66efd752c5b5ccef1b345ade646b9c04e2ae7a2efb82bc391cb04367a5ed5ff538344cdb9c0014d29d362c6ba2cc84ad30be45175917b0ac414b8bea37161236f78887f26225503a1a5d55f0e98e3ebf1db09f1f8d5f1df2149b5f04a0bdf424365101ed859e9cb89cfc28822313322cc271c30546141031477037d3b536b5e1836dfc2583210"}, {0xdd, 0x20, "4346a85118da1ac7e2a58a64714d80f6d86e9ab4bf8beaf5c6b3820940b33c7b"}, {0xdd, 0x58, "afdd907cd445f07a06c8a646bd3cdac173e8015ac6ff7c1a84594a12d1e3e19db93d86020343dcd2ce838941db7cfd9e5270323bf2f5fb2340d7a8ff26af42984f4c08e9800dc5ab95103f5bc80ebfda8781e620a1ebca51"}, {0xdd, 0x2a, "b03efe05ad48268e67760c72ec6bf987d5701aeeba8d2fb8ed8fcc8a6ce320e996bba118344d52def014"}, {0xdd, 0x5e, "166e110bc1ff123ca6fd0bc1c665cfdd6d8775a5f923463798e66d22f253ce8fb386c58666a08b4be2daa2b989ac3599f6e560044085687e39b8761669ccb6ec284bb61ce349883e9c35ff616cb4a9b03d60435b896b3b2a3a86639f5fa3"}, {0xdd, 0x8c, "6bd3fa4358486f717d886f2ba610ec84ef8341e8ba8c9241976609a614979e49dc57222f7396c7d1bbdd152a40a58da6512a6f139fe1fcce7537701a668d18b773dc5f27467a33a04798e8699f2048e57e8b0f9d979495d0bfaffece9ccbcb1e782b4e79ca7a7c845e193380858cbe256ce1f0f5925840e7604f43754df74eb1cbd9344cdd79e316bfe71ee8"}, {0xdd, 0x2d, "f6fc88e065ddef14084f7597ed015f77b0fa2316549d6e739bf5d7c31855993da9fb7586120a2e9844ba15e4d7"}, {0xdd, 0xa2, "b6160e685f69ee416cb6bddc1f68802aeb817778cc1386d204a329cda02b9bedc4b9762c087600c654390bf95a378676ed7575897ea904b506e7090a45bd293a2c47255813470ead8c5df5dc28dfca09f9610d79d0a266e0535c6e63791d9ee5de6410ccf6d805987184dbcb1ac5edf087156626e5b795c8fbf38804315a9507cfaa65a27390da35672c8d6e4fddbebf295cb1a3a36eeecc4c7b615fcb0f2a85b933"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xd2e7]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x167c}, 0x1, 0x0, 0x0, 0x4040800}, 0x1)
r9 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001dc0), 0x0)
setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000001e00)=0xe, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r0)
r10 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r10, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001f00)={'ip6_vti0\x00', &(0x7f0000001e80)={'ip6tnl0\x00', r2, 0x2f, 0x3, 0x8, 0x8, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7, 0x81, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002000)={'sit0\x00', &(0x7f0000001f40)={'syztnl2\x00', <r11=>r2, 0x20, 0x8000, 0xaf6, 0xc3, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x68, 0x0, 0x81, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x44, 0x68, 0x1, 0x7, [{@loopback, 0x5}, {@multicast1, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@empty, 0x5}, {@loopback, 0x6}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbfc}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x7bb4a6a027a89592, 0xa, "c2b622ab9c7b4e41"}, @timestamp={0x44, 0x24, 0x36, 0x0, 0x9, [0x0, 0x4, 0xcc, 0x1, 0xf, 0x401, 0x8, 0x101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000020c0)={'syztnl2\x00', &(0x7f0000002040)={'syztnl1\x00', r11, 0x4, 0xff, 0xa, 0x4, 0x59, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x40, 0x40, 0xf0f3}})
r12 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000002100), 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r12, 0x6, 0x2, &(0x7f0000002140), &(0x7f0000002180)=0x6)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002200), r7)
sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xac, r13, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

573.222636ms ago: executing program 1 (id=4133):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

504.706576ms ago: executing program 5 (id=4134):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x5, 0x6}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x34048098)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9a7c23ba94e9d4c28e0898cbee1cec0b1b1ae9998b36ad8516c3414a8e191251e3b1a209a8f722b5810a", @ANYRES16=r9, @ANYBLOB="07000000000000000000050000001800018014000200687372300000000000000000000000000c0003800400038004000100"], 0x38}}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, 0x0, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))

283.533467ms ago: executing program 2 (id=4135):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = accept4(r1, 0x0, 0x0, 0x81000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={<r3=>r0})
accept4$alg(r3, 0x0, 0x0, 0x80800)
sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x8044)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x22040841}, 0x4)

241.312263ms ago: executing program 1 (id=4136):
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x4, 0x8, 0x1}, 0x50)

176.830611ms ago: executing program 5 (id=4137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
socket(0x2a, 0x2, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
socket(0x1e, 0x4, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xff37, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000003c0)=0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000102010400000000000000000a0000024400018006000340000000000c00028105000100000000002c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000040000000700000018110000d08c4da541437081d4b911739e5349d1f5e272fbda82296bc229d5a01084aff5e94c64099bf9c2b3ba51c6bce17c0370ecdc1a523cd977d7d76aab1aa2ab258f71d3e5fa956201b5d47b32ccc124709049ea34688f5a1135d09db6fb0ffacbaea5e20e42b0f18e8876a7607d0ab663264e3931a12c354e325ccae3797e196dbda5bf3ba0da32dc70b61d165d7faf1765c557dadee35b56e218e7e6a0b972dcc4a3c25edabb44a55a0b4e1390b514f52cb9ca2e6e894bd65eda4b5dd45569b19e995fe304d18f5b0d", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000003b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xa2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r9}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

142.497868ms ago: executing program 2 (id=4138):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
unshare(0x600) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, 0x0, 0x0) (async)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="bc", 0x1)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={<r2=>0x0, 0x1, 0x7, 0xd5, 0x9, 0x10000}, &(0x7f00000000c0)=0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x4, 0x8001, 0xdd0e, 0x4, 0x3, 0x80000001, 0xff, r2}, 0x20)

126.842496ms ago: executing program 1 (id=4139):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1b, 0x0, 0x4000}, 0x20)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r3, r5, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x4b)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffc3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x854)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)

529.341µs ago: executing program 0 (id=4140):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000"], 0x48)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0xfef94000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000})

0s ago: executing program 4 (id=4141):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r1, 0x0, 0x500}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r2 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x1}, 0xa, {0x2, 0x4e20, @multicast2}, 'vxcan1\x00'})
ioctl$int_in(r4, 0x5452, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
setsockopt(r9, 0x84, 0x7f, 0x0, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

kernel console output (not intermixed with test programs):

] team0: Port device team_slave_0 added
[  380.330452][T17617] team0: Port device team_slave_1 added
[  380.416128][T17715] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.3005'.
[  380.456148][T17715] netlink: zone id is out of range
[  380.461320][T17715] netlink: zone id is out of range
[  380.468335][T17715] netlink: zone id is out of range
[  380.498649][T17617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.526986][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.551243][T17721] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000
[  380.585725][T17617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.607712][T17710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'.
[  380.702820][T17617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.714911][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.759986][T17617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.829621][ T8020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.042663][T14440] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.059932][T17714] lo speed is unknown, defaulting to 1000
[  381.112767][T16890] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.267249][T17617] hsr_slave_0: entered promiscuous mode
[  381.274171][T17617] hsr_slave_1: entered promiscuous mode
[  381.280993][T17617] debugfs: 'hsr0' already exists in 'hsr'
[  381.288407][T17617] Cannot create hsr debugfs directory
[  381.360535][T14440] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.435496][T14439] hsr_slave_0: left promiscuous mode
[  381.448461][T14439] hsr_slave_1: left promiscuous mode
[  381.516119][T14439] team0: left promiscuous mode
[  381.612943][T14439] pimreg3 (unregistering): left allmulticast mode
[  381.679476][T17760] netlink: 'syz.4.3012': attribute type 1 has an invalid length.
[  382.171290][ T5872] Bluetooth: hci3: command tx timeout
[  382.370414][T17757] batadv_slave_0: entered promiscuous mode
[  382.397797][T17760] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  382.406993][T17762] batadv_slave_0: left promiscuous mode
[  382.564680][T17770] FAULT_INJECTION: forcing a failure.
[  382.564680][T17770] name failslab, interval 1, probability 0, space 0, times 0
[  382.578364][T17770] CPU: 0 UID: 0 PID: 17770 Comm: syz.3.3017 Not tainted syzkaller #0 PREEMPT(full) 
[  382.578388][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  382.578403][T17770] Call Trace:
[  382.578410][T17770]  <TASK>
[  382.578417][T17770]  dump_stack_lvl+0x189/0x250
[  382.578443][T17770]  ? __pfx____ratelimit+0x10/0x10
[  382.578463][T17770]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.578482][T17770]  ? __pfx__printk+0x10/0x10
[  382.578518][T17770]  should_fail_ex+0x414/0x560
[  382.578544][T17770]  should_failslab+0xa8/0x100
[  382.578568][T17770]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  382.578589][T17770]  ? __alloc_skb+0x112/0x2d0
[  382.578612][T17770]  __alloc_skb+0x112/0x2d0
[  382.578633][T17770]  create_monitor_ctrl_event+0x38/0x480
[  382.578660][T17770]  mgmt_cmd_complete+0x20f/0x590
[  382.578688][T17770]  read_index_list+0x49f/0x540
[  382.578719][T17770]  hci_mgmt_cmd+0x9c6/0xef0
[  382.578753][T17770]  hci_sock_sendmsg+0x6ca/0xef0
[  382.578779][T17770]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  382.578799][T17770]  ? aa_sock_msg_perm+0xf1/0x1d0
[  382.578818][T17770]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.578836][T17770]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  382.578856][T17770]  __sock_sendmsg+0x21c/0x270
[  382.578882][T17770]  sock_write_iter+0x258/0x330
[  382.578906][T17770]  ? __pfx_sock_write_iter+0x10/0x10
[  382.578939][T17770]  ? bpf_lsm_file_permission+0x9/0x20
[  382.578956][T17770]  ? security_file_permission+0x75/0x290
[  382.578986][T17770]  vfs_write+0x5c9/0xb30
[  382.579012][T17770]  ? __pfx_sock_write_iter+0x10/0x10
[  382.579034][T17770]  ? __pfx_vfs_write+0x10/0x10
[  382.579066][T17770]  ? __fget_files+0x2a/0x420
[  382.579097][T17770]  ksys_write+0x145/0x250
[  382.579120][T17770]  ? __pfx_ksys_write+0x10/0x10
[  382.579138][T17770]  ? rcu_is_watching+0x15/0xb0
[  382.579160][T17770]  ? do_syscall_64+0xbe/0x3b0
[  382.579186][T17770]  do_syscall_64+0xfa/0x3b0
[  382.579203][T17770]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.579220][T17770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.579237][T17770]  ? clear_bhb_loop+0x60/0xb0
[  382.579257][T17770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.579277][T17770] RIP: 0033:0x7f9a8ab8ebe9
[  382.579293][T17770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.579307][T17770] RSP: 002b:00007f9a8ba47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  382.579325][T17770] RAX: ffffffffffffffda RBX: 00007f9a8adc5fa0 RCX: 00007f9a8ab8ebe9
[  382.579337][T17770] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000007
[  382.579348][T17770] RBP: 00007f9a8ba47090 R08: 0000000000000000 R09: 0000000000000000
[  382.579358][T17770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.579368][T17770] R13: 00007f9a8adc6038 R14: 00007f9a8adc5fa0 R15: 00007ffd9151b848
[  382.579399][T17770]  </TASK>
[  383.387455][T17784] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  383.476786][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'.
[  383.784779][T17800] lo speed is unknown, defaulting to 1000
[  383.887868][T17617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  383.932570][T17617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  383.975962][T17617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  384.031145][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055ec9400: rx timeout, send abort
[  384.057164][T17617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  384.145959][T17809] lo speed is unknown, defaulting to 1000
[  384.245257][ T5872] Bluetooth: hci3: command tx timeout
[  384.390901][T17617] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.450384][T17617] 8021q: adding VLAN 0 to HW filter on device team0
[  384.494839][T13527] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.502280][T13527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.540688][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055ec9400: abort rx timeout. Force session deactivation
[  384.590034][T16890] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.597380][T16890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.634367][T17838] netlink: 'syz.4.3032': attribute type 3 has an invalid length.
[  384.743231][T17842] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3033'.
[  384.784396][T17842] dvmrp1: entered allmulticast mode
[  385.078997][T17617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.171599][T17617] veth0_vlan: entered promiscuous mode
[  385.184614][T17617] veth1_vlan: entered promiscuous mode
[  385.273296][T17864] batadv_slave_1: entered promiscuous mode
[  385.305774][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3039'.
[  385.314945][T17617] veth0_macvtap: entered promiscuous mode
[  385.379230][T17864] batadv_slave_1 (unregistering): left promiscuous mode
[  385.402323][T17874] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3042'.
[  385.413593][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'.
[  385.518098][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3040'.
[  385.561244][T17617] veth1_macvtap: entered promiscuous mode
[  385.644476][T17617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.691230][T17617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.774159][T13527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.790935][T13527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.843504][T13527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.858926][T13527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.881568][T17887] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  385.998358][T16890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.027587][T16890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.117138][T17891] batadv_slave_0: entered promiscuous mode
[  386.125574][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'.
[  386.188876][T16893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.207878][T16893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.835010][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'.
[  386.907096][T17921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3056'.
[  387.273203][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.294112][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.304558][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.314228][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.324372][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.373567][T17944] lo speed is unknown, defaulting to 1000
[  387.471066][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'.
[  387.577035][   T43] IPVS: starting estimator thread 0...
[  387.695904][T17964] IPVS: using max 28 ests per chain, 67200 per kthread
[  387.706584][T17966] lo speed is unknown, defaulting to 1000
[  388.058109][T17972] syzkaller1: entered promiscuous mode
[  388.063810][T17972] syzkaller1: entered allmulticast mode
[  388.127469][   T30] audit: type=1800 audit(1757386477.636:8): pid=17972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3066" name="blkio.bfq.time_recursive" dev="tmpfs" ino=44 res=0 errno=0
[  388.223007][T17944] chnl_net:caif_netlink_parms(): no params data found
[  388.298397][T17981] vlan2: entered allmulticast mode
[  388.303793][T17981] macvtap0: entered allmulticast mode
[  388.309663][T17981] veth0_macvtap: entered allmulticast mode
[  388.341049][T17984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3068'.
[  388.466333][T17990] bridge0: port 3(macsec1) entered blocking state
[  388.473036][T17990] bridge0: port 3(macsec1) entered disabled state
[  388.480600][T17990] macsec1: entered allmulticast mode
[  388.491327][T17990] macsec1: left allmulticast mode
[  388.573572][T17994] bridge0: port 3(macsec1) entered blocking state
[  388.583342][T17994] bridge0: port 3(macsec1) entered disabled state
[  388.600250][T17994] macsec1: entered allmulticast mode
[  388.610148][T17994] macsec1: left allmulticast mode
[  388.621597][T17944] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.636781][T17944] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.650319][T17944] bridge_slave_0: entered allmulticast mode
[  388.667073][T17944] bridge_slave_0: entered promiscuous mode
[  388.682037][T17944] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.690009][T17944] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.698561][T17944] bridge_slave_1: entered allmulticast mode
[  388.707809][T17944] bridge_slave_1: entered promiscuous mode
[  388.857865][T17944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.886422][T17944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.010735][T17944] team0: Port device team_slave_0 added
[  389.034006][T17944] team0: Port device team_slave_1 added
[  389.131649][T18009] lo speed is unknown, defaulting to 1000
[  389.224846][T17944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.248706][T17944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.333458][T17944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.376494][ T5872] Bluetooth: hci4: command tx timeout
[  389.463184][T17944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.477313][T17944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.723788][T17944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.852103][T18026] lo speed is unknown, defaulting to 1000
[  389.875377][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'.
[  389.930777][T18026] lo speed is unknown, defaulting to 1000
[  389.957958][T17944] hsr_slave_0: entered promiscuous mode
[  389.967993][T17944] hsr_slave_1: entered promiscuous mode
[  389.974598][T17944] debugfs: 'hsr0' already exists in 'hsr'
[  389.980951][T17944] Cannot create hsr debugfs directory
[  389.991982][T18030] IPv6: sit1: Disabled Multicast RS
[  389.999406][T18030] sit1: entered allmulticast mode
[  390.020805][T18026] lo speed is unknown, defaulting to 1000
[  390.042832][T18026] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  390.117099][T18039] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[  390.154393][T18026] lo speed is unknown, defaulting to 1000
[  390.173324][T18026] lo speed is unknown, defaulting to 1000
[  390.194383][T18026] lo speed is unknown, defaulting to 1000
[  390.207925][T18026] lo speed is unknown, defaulting to 1000
[  390.238924][T18026] lo speed is unknown, defaulting to 1000
[  390.267039][T18026] lo speed is unknown, defaulting to 1000
[  390.276843][T18026] lo speed is unknown, defaulting to 1000
[  390.294477][T18026] lo speed is unknown, defaulting to 1000
[  390.316209][T18026] lo speed is unknown, defaulting to 1000
[  390.342004][T18026] lo speed is unknown, defaulting to 1000
[  390.367054][T18026] lo speed is unknown, defaulting to 1000
[  390.394729][T18026] lo speed is unknown, defaulting to 1000
[  390.408457][T18026] lo speed is unknown, defaulting to 1000
[  390.417003][T18026] lo speed is unknown, defaulting to 1000
[  390.440128][T18044] __nla_validate_parse: 2 callbacks suppressed
[  390.440145][T18044] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3084'.
[  390.461279][T18043] lo speed is unknown, defaulting to 1000
[  390.912830][T17944] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  390.934084][T17944] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  390.957363][T17944] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  391.208516][T17944] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  391.445823][ T5872] Bluetooth: hci4: command tx timeout
[  391.642248][T17944] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.696940][T17944] 8021q: adding VLAN 0 to HW filter on device team0
[  391.758750][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.765976][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.870118][T16890] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.878552][T16890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.170332][T18099] pim6reg: entered allmulticast mode
[  392.178984][T18099] pim6reg: left allmulticast mode
[  392.229944][T18106] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3096'.
[  392.484601][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'.
[  392.626512][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'.
[  392.666697][T17944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.027875][T18148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3109'.
[  393.258577][T18164] Bluetooth: MGMT ver 1.23
[  393.342992][T17944] veth0_vlan: entered promiscuous mode
[  393.391874][T17944] veth1_vlan: entered promiscuous mode
[  393.471494][T18170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'.
[  393.472117][T18177] netlink: 'syz.3.3115': attribute type 10 has an invalid length.
[  393.525885][ T5872] Bluetooth: hci4: command tx timeout
[  393.596670][T17944] veth0_macvtap: entered promiscuous mode
[  393.611896][T17944] veth1_macvtap: entered promiscuous mode
[  393.662495][T17944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.713682][T17944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.773139][ T8020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.815219][T14437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.851839][T14437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.901376][T14437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.912806][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'.
[  394.058182][T18200] veth0_to_bond: entered allmulticast mode
[  394.059544][T18196] netlink: 'syz.2.3123': attribute type 1 has an invalid length.
[  394.079277][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.087992][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.104663][T18196] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3123'.
[  394.270018][T14440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.279811][T14440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.429957][T18220] FAULT_INJECTION: forcing a failure.
[  394.429957][T18220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.497939][T18220] CPU: 1 UID: 0 PID: 18220 Comm: syz.4.3051 Not tainted syzkaller #0 PREEMPT(full) 
[  394.497986][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  394.498001][T18220] Call Trace:
[  394.498008][T18220]  <TASK>
[  394.498016][T18220]  dump_stack_lvl+0x189/0x250
[  394.498040][T18220]  ? __pfx____ratelimit+0x10/0x10
[  394.498060][T18220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  394.498079][T18220]  ? __pfx__printk+0x10/0x10
[  394.498115][T18220]  should_fail_ex+0x414/0x560
[  394.498142][T18220]  _copy_to_user+0x31/0xb0
[  394.498164][T18220]  simple_read_from_buffer+0xe1/0x170
[  394.498193][T18220]  proc_fail_nth_read+0x1b3/0x220
[  394.498217][T18220]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  394.498246][T18220]  ? rw_verify_area+0x2a6/0x4d0
[  394.498266][T18220]  ? __lock_acquire+0xab9/0xd20
[  394.498286][T18220]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  394.498307][T18220]  vfs_read+0x200/0xa30
[  394.498326][T18220]  ? fdget_pos+0x247/0x320
[  394.498347][T18220]  ? __pfx___mutex_lock+0x10/0x10
[  394.498367][T18220]  ? __pfx_vfs_read+0x10/0x10
[  394.498389][T18220]  ? __fget_files+0x2a/0x420
[  394.498409][T18220]  ? __fget_files+0x3a0/0x420
[  394.498423][T18220]  ? __fget_files+0x2a/0x420
[  394.498449][T18220]  ksys_read+0x145/0x250
[  394.498472][T18220]  ? __pfx_ksys_read+0x10/0x10
[  394.498499][T18220]  ? do_syscall_64+0xbe/0x3b0
[  394.498522][T18220]  do_syscall_64+0xfa/0x3b0
[  394.498539][T18220]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.498556][T18220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.498573][T18220]  ? clear_bhb_loop+0x60/0xb0
[  394.498594][T18220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.498610][T18220] RIP: 0033:0x7ff07578d5fc
[  394.498627][T18220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  394.498642][T18220] RSP: 002b:00007ff07669c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  394.498661][T18220] RAX: ffffffffffffffda RBX: 00007ff0759c5fa0 RCX: 00007ff07578d5fc
[  394.498673][T18220] RDX: 000000000000000f RSI: 00007ff07669c0a0 RDI: 0000000000000005
[  394.498684][T18220] RBP: 00007ff07669c090 R08: 0000000000000000 R09: 0000000000000000
[  394.498695][T18220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  394.498705][T18220] R13: 00007ff0759c6038 R14: 00007ff0759c5fa0 R15: 00007ffe4fe39a88
[  394.498736][T18220]  </TASK>
[  395.043970][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  395.066670][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  395.081373][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  395.090865][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  395.102777][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  395.160545][T18232] netlink: 'syz.3.3133': attribute type 1 has an invalid length.
[  395.194771][T18232] netlink: 'syz.3.3133': attribute type 1 has an invalid length.
[  395.229402][T18232] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3133'.
[  395.243113][T18227] lo speed is unknown, defaulting to 1000
[  395.260801][T18227] lo speed is unknown, defaulting to 1000
[  395.288378][T18232] netlink: 'syz.3.3133': attribute type 1 has an invalid length.
[  395.314262][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'.
[  395.567514][T18247] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3137'.
[  395.605350][ T5872] Bluetooth: hci4: command tx timeout
[  395.792989][T18252] lo speed is unknown, defaulting to 1000
[  395.857782][T18252] lo speed is unknown, defaulting to 1000
[  395.870604][T18247] lo speed is unknown, defaulting to 1000
[  395.879211][T18247] lo speed is unknown, defaulting to 1000
[  396.002937][T18261] netlink: 'syz.3.3140': attribute type 7 has an invalid length.
[  396.022477][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'.
[  396.137948][T18261] bridge6: port 1(bond12) entered blocking state
[  396.183070][T18261] bridge6: port 1(bond12) entered disabled state
[  396.191428][T18261] bond12: entered allmulticast mode
[  396.213452][T18227] chnl_net:caif_netlink_parms(): no params data found
[  396.488716][T18282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.512503][T18227] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.533783][T18227] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.549179][T18227] bridge_slave_0: entered allmulticast mode
[  396.577206][T18227] bridge_slave_0: entered promiscuous mode
[  396.613594][T18227] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.647434][T18227] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.673391][T18227] bridge_slave_1: entered allmulticast mode
[  396.698126][T18227] bridge_slave_1: entered promiscuous mode
[  396.791023][T18227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.837178][T18227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.946437][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3148'.
[  396.961893][T18227] team0: Port device team_slave_0 added
[  396.992586][T18302] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3149'.
[  397.078642][T18227] team0: Port device team_slave_1 added
[  397.127103][ T5872] Bluetooth: hci5: command tx timeout
[  397.211742][T18227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.224155][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.270509][T18227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.302822][T18305] lo speed is unknown, defaulting to 1000
[  397.303605][T18227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.335252][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.384744][T18227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.404538][T18305] lo speed is unknown, defaulting to 1000
[  397.549651][T18331] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  397.629597][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'.
[  397.641378][T18335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3154'.
[  397.726161][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'.
[  397.746751][T18227] hsr_slave_0: entered promiscuous mode
[  397.761915][T18227] hsr_slave_1: entered promiscuous mode
[  397.781283][T18227] debugfs: 'hsr0' already exists in 'hsr'
[  397.794748][T18227] Cannot create hsr debugfs directory
[  397.995465][T18345] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3159'.
[  398.352643][T18227] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.476052][T18358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3162'.
[  398.506923][T18227] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.535302][T18361] netlink: 'syz.0.3162': attribute type 10 has an invalid length.
[  398.576874][T18361] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  398.594857][T18363] !
: renamed from dummy0 (while UP)
[  398.637952][T18227] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.733986][T18227] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.941558][T18376] netlink: 'syz.3.3167': attribute type 13 has an invalid length.
[  398.963613][T18376] netlink: 'syz.3.3167': attribute type 17 has an invalid length.
[  399.091863][T18376] 8021q: adding VLAN 0 to HW filter on device team0
[  399.143744][T18376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  399.202600][T18368] lo speed is unknown, defaulting to 1000
[  399.215741][ T5872] Bluetooth: hci5: command tx timeout
[  399.412838][T18368] lo speed is unknown, defaulting to 1000
[  399.462081][T18227] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  399.532422][T18227] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  399.662486][T18373] lo speed is unknown, defaulting to 1000
[  399.733585][T18227] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  399.772550][T18227] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  399.804542][T18373] lo speed is unknown, defaulting to 1000
[  400.287183][T18425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3175'.
[  400.318225][T18425] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  400.493065][T18227] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.561926][T18227] 8021q: adding VLAN 0 to HW filter on device team0
[  400.596850][T16890] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.604049][T16890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.699656][T16890] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.706876][T16890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.863949][T18448] __nla_validate_parse: 4 callbacks suppressed
[  400.863968][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'.
[  401.087136][T18444] lo speed is unknown, defaulting to 1000
[  401.131061][T18444] lo speed is unknown, defaulting to 1000
[  401.173707][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'.
[  401.274800][T18459] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  401.274820][T14440] bond0: (slave bond_slave_0): interface is now down
[  401.295144][ T5872] Bluetooth: hci5: command tx timeout
[  401.311038][T14440] bond0: (slave bond_slave_1): interface is now down
[  401.345600][   T12] bond0: (slave bond_slave_0): interface is now down
[  401.357681][   T12] bond0: (slave bond_slave_1): interface is now down
[  401.397005][T16890] bond0: (slave bond_slave_0): interface is now down
[  401.403823][T16890] bond0: (slave bond_slave_1): interface is now down
[  401.445969][   T12] bond0: (slave bond_slave_0): interface is now down
[  401.452701][   T12] bond0: (slave bond_slave_1): interface is now down
[  401.496673][ T8020] bond0: (slave bond_slave_0): interface is now down
[  401.506796][ T8020] bond0: (slave bond_slave_1): interface is now down
[  401.516076][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3185'.
[  401.546342][T16893] bond0: (slave bond_slave_0): interface is now down
[  401.559812][T16893] bond0: (slave bond_slave_1): interface is now down
[  401.585432][T16893] bond0: (slave bond_slave_0): interface is now down
[  401.592346][T16893] bond0: (slave bond_slave_1): interface is now down
[  401.645775][T16890] bond0: (slave bond_slave_0): interface is now down
[  401.652606][T16890] bond0: (slave bond_slave_1): interface is now down
[  401.688269][T16890] bond0: now running without any active interface!
[  401.978728][T18227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.310132][T18491] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3191'.
[  402.356757][T18227] veth0_vlan: entered promiscuous mode
[  402.442962][T18227] veth1_vlan: entered promiscuous mode
[  402.674189][T18227] veth0_macvtap: entered promiscuous mode
[  402.737915][T18227] veth1_macvtap: entered promiscuous mode
[  402.804876][T18227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.823930][T18513] FAULT_INJECTION: forcing a failure.
[  402.823930][T18513] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.861055][T18513] CPU: 0 UID: 0 PID: 18513 Comm: syz.0.3194 Not tainted syzkaller #0 PREEMPT(full) 
[  402.861078][T18513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  402.861087][T18513] Call Trace:
[  402.861094][T18513]  <TASK>
[  402.861100][T18513]  dump_stack_lvl+0x189/0x250
[  402.861120][T18513]  ? __pfx____ratelimit+0x10/0x10
[  402.861136][T18513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.861161][T18513]  ? __pfx__printk+0x10/0x10
[  402.861178][T18513]  ? __might_fault+0xb0/0x130
[  402.861205][T18513]  should_fail_ex+0x414/0x560
[  402.861226][T18513]  _copy_from_user+0x2d/0xb0
[  402.861242][T18513]  do_sock_getsockopt+0x17d/0x450
[  402.861260][T18513]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  402.861273][T18513]  ? write_ibpb+0x30/0x40
[  402.861286][T18513]  ? __fget_files+0x3a0/0x420
[  402.861297][T18513]  ? __fget_files+0x2a/0x420
[  402.861314][T18513]  __x64_sys_getsockopt+0x1a5/0x250
[  402.861328][T18513]  ? write_ibpb+0x30/0x40
[  402.861342][T18513]  ? write_ibpb+0x30/0x40
[  402.861357][T18513]  do_syscall_64+0xfa/0x3b0
[  402.861370][T18513]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.861383][T18513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.861396][T18513]  ? clear_bhb_loop+0x60/0xb0
[  402.861412][T18513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.861424][T18513] RIP: 0033:0x7f76bb98ebe9
[  402.861438][T18513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.861449][T18513] RSP: 002b:00007f76bc7f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  402.861463][T18513] RAX: ffffffffffffffda RBX: 00007f76bbbc6090 RCX: 00007f76bb98ebe9
[  402.861472][T18513] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000004
[  402.861479][T18513] RBP: 00007f76bc7f2090 R08: 00002000000001c0 R09: 0000000000000000
[  402.861487][T18513] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  402.861494][T18513] R13: 00007f76bbbc6128 R14: 00007f76bbbc6090 R15: 00007ffd05fc74d8
[  402.861517][T18513]  </TASK>
[  403.119703][T18227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.142152][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.152469][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.163589][T14440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.185003][T14440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.227399][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'.
[  403.281413][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.301845][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.357594][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.374459][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.375908][ T5872] Bluetooth: hci5: command tx timeout
[  403.489123][T18529] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3131'.
[  403.506691][T18529] batadv1: entered promiscuous mode
[  403.511938][T18529] batadv1: entered allmulticast mode
[  403.614330][T18532] syz.4.3201: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  403.637338][T18532] CPU: 0 UID: 0 PID: 18532 Comm: syz.4.3201 Not tainted syzkaller #0 PREEMPT(full) 
[  403.637373][T18532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  403.637385][T18532] Call Trace:
[  403.637393][T18532]  <TASK>
[  403.637402][T18532]  dump_stack_lvl+0x189/0x250
[  403.637432][T18532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.637453][T18532]  ? __pfx__printk+0x10/0x10
[  403.637477][T18532]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  403.637497][T18532]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  403.637519][T18532]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  403.637543][T18532]  warn_alloc+0x214/0x310
[  403.637568][T18532]  ? stack_depot_save_flags+0x40/0x860
[  403.637594][T18532]  ? __pfx_warn_alloc+0x10/0x10
[  403.637620][T18532]  ? kasan_save_track+0x4f/0x80
[  403.637643][T18532]  ? xskq_create+0x56/0x170
[  403.637659][T18532]  ? xsk_init_queue+0xb0/0x110
[  403.637673][T18532]  ? xsk_setsockopt+0x4dc/0x8d0
[  403.637695][T18532]  ? do_sock_setsockopt+0x17c/0x1b0
[  403.637712][T18532]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  403.637728][T18532]  ? do_syscall_64+0xfa/0x3b0
[  403.637745][T18532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.637772][T18532]  __vmalloc_node_range_noprof+0x125/0x12f0
[  403.637828][T18532]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  403.637857][T18532]  ? __kasan_kmalloc+0x93/0xb0
[  403.637883][T18532]  vmalloc_user_noprof+0xad/0xf0
[  403.637907][T18532]  ? xskq_create+0xbf/0x170
[  403.637925][T18532]  xskq_create+0xbf/0x170
[  403.637946][T18532]  xsk_init_queue+0xb0/0x110
[  403.637969][T18532]  xsk_setsockopt+0x4dc/0x8d0
[  403.637996][T18532]  ? __pfx_xsk_setsockopt+0x10/0x10
[  403.638020][T18532]  ? __pfx_aa_sk_perm+0x10/0x10
[  403.638048][T18532]  ? aa_sock_opt_perm+0xff/0x1b0
[  403.638069][T18532]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  403.638086][T18532]  ? __pfx_xsk_setsockopt+0x10/0x10
[  403.638111][T18532]  do_sock_setsockopt+0x17c/0x1b0
[  403.638136][T18532]  __x64_sys_setsockopt+0x13f/0x1b0
[  403.638161][T18532]  do_syscall_64+0xfa/0x3b0
[  403.638177][T18532]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.638195][T18532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.638212][T18532]  ? clear_bhb_loop+0x60/0xb0
[  403.638232][T18532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.638248][T18532] RIP: 0033:0x7ff07578ebe9
[  403.638264][T18532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.638279][T18532] RSP: 002b:00007ff07669c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  403.638299][T18532] RAX: ffffffffffffffda RBX: 00007ff0759c5fa0 RCX: 00007ff07578ebe9
[  403.638312][T18532] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  403.638322][T18532] RBP: 00007ff075811e19 R08: 0000000000000004 R09: 0000000000000000
[  403.638332][T18532] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.638343][T18532] R13: 00007ff0759c6038 R14: 00007ff0759c5fa0 R15: 00007ffe4fe39a88
[  403.638382][T18532]  </TASK>
[  403.638689][T18532] Mem-Info:
[  403.748278][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'.
[  403.770779][T18536] netlink: 'syz.4.3201': attribute type 10 has an invalid length.
[  403.804338][T18537] Bluetooth: MGMT ver 1.23
[  403.815784][T18532] active_anon:4532 inactive_anon:0 isolated_anon:0
[  403.815784][T18532]  active_file:3340 inactive_file:39989 isolated_file:0
[  403.815784][T18532]  unevictable:768 dirty:121 writeback:0
[  403.815784][T18532]  slab_reclaimable:12847 slab_unreclaimable:199478
[  403.815784][T18532]  mapped:29359 shmem:1359 pagetables:1426
[  403.815784][T18532]  sec_pagetables:0 bounce:0
[  403.815784][T18532]  kernel_misc_reclaimable:0
[  403.815784][T18532]  free:1208018 free_pcp:17102 free_cma:0
[  403.837060][T18536] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.842428][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'.
[  403.845278][T18536] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.851201][T18532] Node 0 active_anon:18128kB inactive_anon:0kB active_file:13360kB inactive_file:159752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117436kB dirty:484kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14972kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  403.876550][T18536] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.916205][T18532] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  403.916259][T18532] Node 0 
[  403.924347][T18536] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.924667][T18536] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.956973][T18532] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  403.963836][T18536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.978545][T18532] lowmem_reserve[]:
[  404.113357][T18536] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  404.260853][T18538] bridge_slave_1: left allmulticast mode
[  404.275932][T18532]  0 2497 2499 2499 2499
[  404.285387][T18532] Node 0 DMA32 free:936800kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17700kB inactive_anon:0kB active_file:13420kB inactive_file:158180kB unevictable:1536kB writepending:508kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40464kB local_pcp:11456kB free_cma:0kB
[  404.295346][T18538] bridge_slave_1: left promiscuous mode
[  404.374665][T18538] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.422231][T18532] lowmem_reserve[]: 0 0 1 1 1
[  404.430124][T18538] bridge_slave_0: left allmulticast mode
[  404.450935][T18538] bridge_slave_0: left promiscuous mode
[  404.480068][T18532] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  404.520059][T18538] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.584087][T18532] lowmem_reserve[]: 0 0 0 0 0
[  404.595556][T18532] Node 1 Normal free:3887772kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23564kB local_pcp:10648kB free_cma:0kB
[  404.647761][T18550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3207'.
[  404.677904][T18532] lowmem_reserve[]: 0 0 0 0 0
[  404.682698][T18532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  404.726056][T18532] Node 0 DMA32: 618*4kB (M) 304*8kB (UM) 139*16kB (M) 38*32kB (ME) 75*64kB (M) 236*128kB (UME) 531*256kB (UM) 300*512kB (UM) 154*1024kB (UM) 3*2048kB (UM) 108*4096kB (UM) = 939096kB
[  404.775173][T18532] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  404.836510][T18532] Node 1 Normal: 189*4kB (UE) 51*8kB (UME) 39*16kB (UME) 87*32kB (UME) 27*64kB (UME) 10*128kB (UME) 5*256kB (UM) 8*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3887772kB
[  404.873591][T18532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  404.900833][T18532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.934885][T18532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  404.956320][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  404.959294][T18532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.968382][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  404.976829][T18532] 44701 total pagecache pages
[  404.984645][T18532] 0 pages in swap cache
[  404.989100][T18532] Free swap  = 124996kB
[  404.993263][T18532] Total swap = 124996kB
[  404.997743][T18532] 2097051 pages RAM
[  404.998724][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  405.001715][T18532] 0 pages HighMem/MovableOnly
[  405.013659][T18532] 425673 pages reserved
[  405.018192][T18532] 0 pages cma reserved
[  405.021695][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  405.032862][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  405.034306][T18538] bond0: (slave bridge0): Releasing backup interface
[  405.251672][T18555] lo speed is unknown, defaulting to 1000
[  405.277840][T18555] lo speed is unknown, defaulting to 1000
[  405.367690][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3209'.
[  405.444087][T18572] FAULT_INJECTION: forcing a failure.
[  405.444087][T18572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.468679][T18572] CPU: 1 UID: 0 PID: 18572 Comm: syz.0.3212 Not tainted syzkaller #0 PREEMPT(full) 
[  405.468705][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  405.468716][T18572] Call Trace:
[  405.468723][T18572]  <TASK>
[  405.468731][T18572]  dump_stack_lvl+0x189/0x250
[  405.468755][T18572]  ? __pfx____ratelimit+0x10/0x10
[  405.468774][T18572]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.468794][T18572]  ? __pfx__printk+0x10/0x10
[  405.468815][T18572]  ? __might_fault+0xb0/0x130
[  405.468847][T18572]  should_fail_ex+0x414/0x560
[  405.468872][T18572]  _copy_from_user+0x2d/0xb0
[  405.468893][T18572]  sctp_getsockopt_pr_streamstatus+0xca/0x780
[  405.468913][T18572]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.468933][T18572]  ? __pfx_sctp_getsockopt_pr_streamstatus+0x10/0x10
[  405.468949][T18572]  ? __local_bh_enable_ip+0x12d/0x1c0
[  405.468981][T18572]  sctp_getsockopt+0x814/0xb60
[  405.469000][T18572]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  405.469026][T18572]  do_sock_getsockopt+0x36f/0x450
[  405.469049][T18572]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  405.469066][T18572]  ? write_ibpb+0x30/0x40
[  405.469083][T18572]  ? __fget_files+0x3a0/0x420
[  405.469098][T18572]  ? __fget_files+0x2a/0x420
[  405.469122][T18572]  __x64_sys_getsockopt+0x1a5/0x250
[  405.469140][T18572]  ? write_ibpb+0x30/0x40
[  405.469168][T18572]  ? write_ibpb+0x30/0x40
[  405.469190][T18572]  do_syscall_64+0xfa/0x3b0
[  405.469206][T18572]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.469223][T18572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.469239][T18572]  ? clear_bhb_loop+0x60/0xb0
[  405.469258][T18572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.469273][T18572] RIP: 0033:0x7f76bb98ebe9
[  405.469289][T18572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.469304][T18572] RSP: 002b:00007f76bc7f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  405.469323][T18572] RAX: ffffffffffffffda RBX: 00007f76bbbc6090 RCX: 00007f76bb98ebe9
[  405.469335][T18572] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000004
[  405.469346][T18572] RBP: 00007f76bc7f2090 R08: 00002000000001c0 R09: 0000000000000000
[  405.469357][T18572] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  405.469368][T18572] R13: 00007f76bbbc6128 R14: 00007f76bbbc6090 R15: 00007ffd05fc74d8
[  405.469399][T18572]  </TASK>
[  405.934000][T18575] tipc: Started in network mode
[  405.940805][T18575] tipc: Node identity 92354777f3b3, cluster identity 4711
[  405.952214][T18575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.963984][T18577] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.987954][T18577] bond0: (slave rose0): Error: Slave does not support XDP
[  406.011855][T18578] syzkaller0: entered promiscuous mode
[  406.018311][T18578] syzkaller0: entered allmulticast mode
[  406.090447][T18578] tipc: Resetting bearer <eth:syzkaller0>
[  406.113469][T18578] tipc: Disabling bearer <eth:syzkaller0>
[  406.289628][T18555] chnl_net:caif_netlink_parms(): no params data found
[  406.419488][T18602] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3218'.
[  406.513879][T18555] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.533224][T18555] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.542180][T18555] bridge_slave_0: entered allmulticast mode
[  406.551479][T18555] bridge_slave_0: entered promiscuous mode
[  406.564778][T18555] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.577170][T18555] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.582576][T18611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3222'.
[  406.590333][T18555] bridge_slave_1: entered allmulticast mode
[  406.601361][T18555] bridge_slave_1: entered promiscuous mode
[  406.669507][T18616] wg1: entered promiscuous mode
[  406.674631][T18616] wg1: entered allmulticast mode
[  406.713661][T18555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.751347][T18555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.882154][T18555] team0: Port device team_slave_0 added
[  406.915843][T18555] team0: Port device team_slave_1 added
[  406.951292][T18629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  407.086195][T18626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3225'.
[  407.113616][T18555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.125336][ T5872] Bluetooth: hci1: command tx timeout
[  407.134665][T18555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.161948][T18555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.175525][T18555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.182511][T18555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.227715][T18555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.396517][T18555] hsr_slave_0: entered promiscuous mode
[  407.426540][T18555] hsr_slave_1: entered promiscuous mode
[  407.433790][T18555] debugfs: 'hsr0' already exists in 'hsr'
[  407.485542][T18555] Cannot create hsr debugfs directory
[  407.543057][T18651] netlink: 'syz.1.3232': attribute type 2 has an invalid length.
[  407.554796][T18651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3232'.
[  407.699331][T18660] bridge0: entered promiscuous mode
[  407.917847][T18672] FAULT_INJECTION: forcing a failure.
[  407.917847][T18672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.949088][T18671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3239'.
[  407.965469][T18672] CPU: 1 UID: 0 PID: 18672 Comm: syz.1.3236 Not tainted syzkaller #0 PREEMPT(full) 
[  407.965494][T18672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  407.965504][T18672] Call Trace:
[  407.965512][T18672]  <TASK>
[  407.965519][T18672]  dump_stack_lvl+0x189/0x250
[  407.965544][T18672]  ? __pfx____ratelimit+0x10/0x10
[  407.965563][T18672]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.965582][T18672]  ? __pfx__printk+0x10/0x10
[  407.965618][T18672]  should_fail_ex+0x414/0x560
[  407.965645][T18672]  _copy_to_user+0x31/0xb0
[  407.965666][T18672]  simple_read_from_buffer+0xe1/0x170
[  407.965693][T18672]  proc_fail_nth_read+0x1b3/0x220
[  407.965714][T18672]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  407.965734][T18672]  ? rw_verify_area+0x2a6/0x4d0
[  407.965752][T18672]  ? __lock_acquire+0xab9/0xd20
[  407.965772][T18672]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  407.965792][T18672]  vfs_read+0x200/0xa30
[  407.965812][T18672]  ? fdget_pos+0x247/0x320
[  407.965832][T18672]  ? __pfx___mutex_lock+0x10/0x10
[  407.965851][T18672]  ? __pfx_vfs_read+0x10/0x10
[  407.965873][T18672]  ? __fget_files+0x2a/0x420
[  407.965893][T18672]  ? __fget_files+0x3a0/0x420
[  407.965907][T18672]  ? __fget_files+0x2a/0x420
[  407.965931][T18672]  ksys_read+0x145/0x250
[  407.965954][T18672]  ? __pfx_ksys_read+0x10/0x10
[  407.965997][T18672]  do_syscall_64+0xfa/0x3b0
[  407.966014][T18672]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.966031][T18672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.966048][T18672]  ? clear_bhb_loop+0x60/0xb0
[  407.966069][T18672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.966085][T18672] RIP: 0033:0x7f3443b8d5fc
[  407.966101][T18672] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  407.966116][T18672] RSP: 002b:00007f3444968030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  407.966134][T18672] RAX: ffffffffffffffda RBX: 00007f3443dc6090 RCX: 00007f3443b8d5fc
[  407.966146][T18672] RDX: 000000000000000f RSI: 00007f34449680a0 RDI: 0000000000000006
[  407.966157][T18672] RBP: 00007f3444968090 R08: 0000000000000000 R09: 0000000000000000
[  407.966167][T18672] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  407.966178][T18672] R13: 00007f3443dc6128 R14: 00007f3443dc6090 R15: 00007ffdaee68278
[  407.966209][T18672]  </TASK>
[  408.250356][T18555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.354723][T18555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.454024][T18555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.524999][T18555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.720173][T18555] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  408.731987][T18555] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  408.748415][T18555] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  408.777832][T18555] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  409.065928][T18718] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  409.107375][T18719] can: request_module (can-proto-5) failed.
[  409.145854][T18555] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.160130][T18715] lo speed is unknown, defaulting to 1000
[  409.167238][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'.
[  409.187815][T18715] lo speed is unknown, defaulting to 1000
[  409.199046][T18555] 8021q: adding VLAN 0 to HW filter on device team0
[  409.216678][ T5872] Bluetooth: hci1: command tx timeout
[  409.297861][T14437] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.305085][T14437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.324541][T14440] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.331759][T14440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.724779][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'.
[  409.736131][T18747] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  409.941289][T18555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.080221][T18759] netlink: 'syz.0.3265': attribute type 2 has an invalid length.
[  410.083978][T18555] veth0_vlan: entered promiscuous mode
[  410.097812][T18760] netlink: 'syz.0.3265': attribute type 2 has an invalid length.
[  410.112684][T18555] veth1_vlan: entered promiscuous mode
[  410.159661][T18555] veth0_macvtap: entered promiscuous mode
[  410.189012][T18555] veth1_macvtap: entered promiscuous mode
[  410.278941][T18555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.308360][T18555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.380769][T13527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.413220][T13527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.442495][T18765] lo speed is unknown, defaulting to 1000
[  410.452301][T13527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.498998][T13527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.521355][T18765] lo speed is unknown, defaulting to 1000
[  410.704975][T18780] netlink: 'syz.2.3268': attribute type 4 has an invalid length.
[  410.728090][T18772] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  410.749186][T18772] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  410.769095][T18783] netlink: 'syz.2.3268': attribute type 4 has an invalid length.
[  410.938329][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3272'.
[  410.960663][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3272'.
[  410.972033][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'.
[  411.016747][T14430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.024723][T14430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.091137][   T10] lo speed is unknown, defaulting to 1000
[  411.103750][T18788] dummy0: entered promiscuous mode
[  411.112295][T18788] batadv_slave_1: entered promiscuous mode
[  411.142217][T18788] debugfs: 'hsr1' already exists in 'hsr'
[  411.150062][T18788] Cannot create hsr debugfs directory
[  411.269965][T18383] lo speed is unknown, defaulting to 1000
[  411.286051][ T5872] Bluetooth: hci1: command tx timeout
[  411.320021][T14440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.330998][T14440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.676413][T18811] unknown channel width for channel at 909000KHz?
[  412.033734][T18826] __nla_validate_parse: 1 callbacks suppressed
[  412.033753][T18826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3282'.
[  412.195701][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'.
[  412.816682][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'.
[  412.871663][T18869] netlink: 'syz.1.3298': attribute type 3 has an invalid length.
[  412.882026][T18869] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3298'.
[  412.914982][T18871] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0
[  413.365479][ T5872] Bluetooth: hci1: command tx timeout
[  413.776898][T18900] netlink: 'syz.0.3306': attribute type 3 has an invalid length.
[  413.795317][T18900] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3306'.
[  414.042227][T18911] lo speed is unknown, defaulting to 1000
[  414.054528][T18911] lo speed is unknown, defaulting to 1000
[  414.103471][T18912] netlink: 'syz.0.3312': attribute type 13 has an invalid length.
[  414.119736][T18912] netlink: 'syz.0.3312': attribute type 17 has an invalid length.
[  414.125280][T18913] netlink: 'syz.0.3312': attribute type 13 has an invalid length.
[  414.149590][T18913] netlink: 'syz.0.3312': attribute type 17 has an invalid length.
[  414.250219][T18912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.292210][T18913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.423119][T18918] lo speed is unknown, defaulting to 1000
[  414.435323][T18918] lo speed is unknown, defaulting to 1000
[  414.688445][T18928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.709175][T18928] tipc: Resetting bearer <eth:syzkaller0>
[  414.768912][T18927] tipc: Disabling bearer <eth:syzkaller0>
[  415.163963][T18954] netlink: 'syz.0.3327': attribute type 2 has an invalid length.
[  415.204279][T18953] tipc: Started in network mode
[  415.217244][T18953] tipc: Node identity 6a3d0fd69c51, cluster identity 4711
[  415.227558][T18953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.238345][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.354977][T18953] syzkaller0: entered promiscuous mode
[  415.373853][T18953] syzkaller0: entered allmulticast mode
[  415.387196][T18953] tipc: Resetting bearer <eth:syzkaller0>
[  415.406957][T18961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3330'.
[  415.432742][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3330'.
[  415.442252][T18951] tipc: Resetting bearer <eth:syzkaller0>
[  415.583789][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'.
[  416.295189][T18383] tipc: Node number set to 4134277078
[  417.602176][T18951] tipc: Disabling bearer <eth:syzkaller0>
[  417.612871][T18963] tipc: Started in network mode
[  417.618769][T18963] tipc: Node identity 7ef3a493c6b3, cluster identity 4711
[  417.627326][T18963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.634464][T18961] veth0_to_bridge: entered promiscuous mode
[  417.640829][T18961] veth0_to_bridge: entered allmulticast mode
[  417.895575][T18979] syzkaller0: entered promiscuous mode
[  417.901092][T18979] syzkaller0: entered allmulticast mode
[  417.912618][T18960] tipc: Disabling bearer <eth:syzkaller0>
[  418.107654][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'.
[  418.200108][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'.
[  418.724423][T19018] lo speed is unknown, defaulting to 1000
[  418.746252][T19018] lo speed is unknown, defaulting to 1000
[  419.152359][T19045] siw: device registration error -23
[  419.307098][T19054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3358'.
[  419.679735][T19072] lo speed is unknown, defaulting to 1000
[  419.722209][T19072] lo speed is unknown, defaulting to 1000
[  420.071977][T19093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.086500][T19093] syzkaller0: entered promiscuous mode
[  420.092554][T19093] syzkaller0: entered allmulticast mode
[  420.168061][T19093] tipc: Resetting bearer <eth:syzkaller0>
[  420.217391][T19091] tipc: Resetting bearer <eth:syzkaller0>
[  420.244464][T19091] tipc: Disabling bearer <eth:syzkaller0>
[  420.515527][T19116] tc_dump_action: action bad kind
[  420.547030][T19119] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3381'.
[  420.851422][T19130] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3386'.
[  420.879551][T19130] macvlan0: entered allmulticast mode
[  421.014854][T19137] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3389'.
[  421.040613][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'.
[  421.057553][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'.
[  421.081021][T19137] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3389'.
[  421.124174][T19137] netlink: 'syz.2.3389': attribute type 5 has an invalid length.
[  421.171427][T19140] netlink: 'syz.4.3390': attribute type 10 has an invalid length.
[  421.219398][T19140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3390'.
[  421.241523][T19140] veth0_vlan: entered allmulticast mode
[  421.250363][T19140] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  421.466988][T19157] bond1: entered promiscuous mode
[  421.472055][T19157] bond1: entered allmulticast mode
[  421.490304][T19157] 8021q: adding VLAN 0 to HW filter on device bond1
[  421.972366][T19187] lo speed is unknown, defaulting to 1000
[  421.990896][T19187] lo speed is unknown, defaulting to 1000
[  422.142495][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  422.493944][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.514903][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.531360][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.548131][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.850268][T19208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.986934][T19215] lo speed is unknown, defaulting to 1000
[  422.994542][T19215] lo speed is unknown, defaulting to 1000
[  423.081276][T19208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.212928][T19208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.314202][T19208] bond0: (slave netdevsim0): Releasing backup interface
[  423.336157][T19208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.531598][T13527] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.575588][T14440] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.610292][T13527] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.706697][T14440] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.895741][T19245] lo speed is unknown, defaulting to 1000
[  423.912081][T19245] lo speed is unknown, defaulting to 1000
[  424.102170][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  424.117675][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  424.157350][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  424.191273][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  424.920163][T19298] netlink: 'syz.4.3442': attribute type 5 has an invalid length.
[  424.939454][T19298] __nla_validate_parse: 7 callbacks suppressed
[  424.939472][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3442'.
[  425.096185][T19303] lo speed is unknown, defaulting to 1000
[  425.104639][T19303] lo speed is unknown, defaulting to 1000
[  425.388025][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'.
[  425.416133][T19318] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.425462][T19318] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.952088][T19342] lo speed is unknown, defaulting to 1000
[  425.991202][T19342] lo speed is unknown, defaulting to 1000
[  426.842185][T19384] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3473'.
[  427.057458][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  427.070048][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  427.083675][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  427.106950][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  427.116709][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  427.200099][T19392] lo speed is unknown, defaulting to 1000
[  427.211635][T19392] lo speed is unknown, defaulting to 1000
[  427.464174][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'.
[  427.606463][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  427.615851][T19421] FAULT_INJECTION: forcing a failure.
[  427.615851][T19421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.662225][T19392] chnl_net:caif_netlink_parms(): no params data found
[  427.687779][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.0.3486 Not tainted syzkaller #0 PREEMPT(full) 
[  427.687804][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  427.687815][T19421] Call Trace:
[  427.687821][T19421]  <TASK>
[  427.687829][T19421]  dump_stack_lvl+0x189/0x250
[  427.687861][T19421]  ? __pfx____ratelimit+0x10/0x10
[  427.687879][T19421]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.687897][T19421]  ? __pfx__printk+0x10/0x10
[  427.687919][T19421]  ? __might_fault+0xb0/0x130
[  427.687952][T19421]  should_fail_ex+0x414/0x560
[  427.687977][T19421]  _copy_from_user+0x2d/0xb0
[  427.687997][T19421]  do_sock_getsockopt+0x17d/0x450
[  427.688021][T19421]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  427.688037][T19421]  ? write_ibpb+0x30/0x40
[  427.688053][T19421]  ? __fget_files+0x3a0/0x420
[  427.688067][T19421]  ? __fget_files+0x2a/0x420
[  427.688090][T19421]  __x64_sys_getsockopt+0x1a5/0x250
[  427.688107][T19421]  ? write_ibpb+0x30/0x40
[  427.688125][T19421]  ? write_ibpb+0x30/0x40
[  427.688146][T19421]  do_syscall_64+0xfa/0x3b0
[  427.688163][T19421]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.688180][T19421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.688197][T19421]  ? clear_bhb_loop+0x60/0xb0
[  427.688217][T19421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.688233][T19421] RIP: 0033:0x7f76bb98ebe9
[  427.688249][T19421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.688262][T19421] RSP: 002b:00007f76bc813038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  427.688281][T19421] RAX: ffffffffffffffda RBX: 00007f76bbbc5fa0 RCX: 00007f76bb98ebe9
[  427.688293][T19421] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000003
[  427.688303][T19421] RBP: 00007f76bc813090 R08: 00002000000001c0 R09: 0000000000000000
[  427.688314][T19421] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  427.688324][T19421] R13: 00007f76bbbc6038 R14: 00007f76bbbc5fa0 R15: 00007ffd05fc74d8
[  427.688355][T19421]  </TASK>
[  428.266901][T19392] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.285349][T19392] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.300493][T19392] bridge_slave_0: entered allmulticast mode
[  428.309083][T19392] bridge_slave_0: entered promiscuous mode
[  428.341234][T19392] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.355514][T19392] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.363379][T19392] bridge_slave_1: entered allmulticast mode
[  428.373420][T19392] bridge_slave_1: entered promiscuous mode
[  428.435590][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'.
[  428.513390][T19392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.571395][T19392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.645965][T19463] FAULT_INJECTION: forcing a failure.
[  428.645965][T19463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.662511][T19463] CPU: 0 UID: 0 PID: 19463 Comm: syz.0.3501 Not tainted syzkaller #0 PREEMPT(full) 
[  428.662535][T19463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  428.662546][T19463] Call Trace:
[  428.662553][T19463]  <TASK>
[  428.662561][T19463]  dump_stack_lvl+0x189/0x250
[  428.662584][T19463]  ? __pfx____ratelimit+0x10/0x10
[  428.662603][T19463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.662620][T19463]  ? __pfx__printk+0x10/0x10
[  428.662642][T19463]  ? __might_fault+0xb0/0x130
[  428.662674][T19463]  should_fail_ex+0x414/0x560
[  428.662700][T19463]  _copy_from_user+0x2d/0xb0
[  428.662721][T19463]  sctp_getsockopt_pr_streamstatus+0xca/0x780
[  428.662741][T19463]  ? lockdep_hardirqs_on+0x9c/0x150
[  428.662771][T19463]  ? __pfx_sctp_getsockopt_pr_streamstatus+0x10/0x10
[  428.662787][T19463]  ? __local_bh_enable_ip+0x12d/0x1c0
[  428.662816][T19463]  sctp_getsockopt+0x814/0xb60
[  428.662834][T19463]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  428.662859][T19463]  do_sock_getsockopt+0x36f/0x450
[  428.662882][T19463]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  428.662900][T19463]  ? write_ibpb+0x30/0x40
[  428.662917][T19463]  ? __fget_files+0x3a0/0x420
[  428.662932][T19463]  ? __fget_files+0x2a/0x420
[  428.662955][T19463]  __x64_sys_getsockopt+0x1a5/0x250
[  428.662971][T19463]  ? write_ibpb+0x30/0x40
[  428.662990][T19463]  ? write_ibpb+0x30/0x40
[  428.663010][T19463]  do_syscall_64+0xfa/0x3b0
[  428.663023][T19463]  ? lockdep_hardirqs_on+0x9c/0x150
[  428.663035][T19463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.663052][T19463]  ? clear_bhb_loop+0x60/0xb0
[  428.663073][T19463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.663086][T19463] RIP: 0033:0x7f76bb98ebe9
[  428.663102][T19463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.663116][T19463] RSP: 002b:00007f76bc813038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  428.663133][T19463] RAX: ffffffffffffffda RBX: 00007f76bbbc5fa0 RCX: 00007f76bb98ebe9
[  428.663145][T19463] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000003
[  428.663155][T19463] RBP: 00007f76bc813090 R08: 00002000000001c0 R09: 0000000000000000
[  428.663166][T19463] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  428.663176][T19463] R13: 00007f76bbbc6038 R14: 00007f76bbbc5fa0 R15: 00007ffd05fc74d8
[  428.663211][T19463]  </TASK>
[  428.973099][T19392] team0: Port device team_slave_0 added
[  428.999122][T19392] team0: Port device team_slave_1 added
[  429.066176][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3503'.
[  429.092415][T19471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3503'.
[  429.124578][T19392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.133870][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.160939][T19392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.174059][T19392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.181421][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.209134][   T51] Bluetooth: hci2: command tx timeout
[  429.216466][T19392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.333180][T19392] hsr_slave_0: entered promiscuous mode
[  429.348815][T19392] hsr_slave_1: entered promiscuous mode
[  429.366434][T19392] debugfs: 'hsr0' already exists in 'hsr'
[  429.380331][T19392] Cannot create hsr debugfs directory
[  429.816036][T19496] lo speed is unknown, defaulting to 1000
[  429.849808][T19496] lo speed is unknown, defaulting to 1000
[  430.070656][T19508] FAULT_INJECTION: forcing a failure.
[  430.070656][T19508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.099303][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.2.3514 Not tainted syzkaller #0 PREEMPT(full) 
[  430.099329][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  430.099339][T19508] Call Trace:
[  430.099347][T19508]  <TASK>
[  430.099354][T19508]  dump_stack_lvl+0x189/0x250
[  430.099379][T19508]  ? __pfx____ratelimit+0x10/0x10
[  430.099398][T19508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  430.099417][T19508]  ? __pfx__printk+0x10/0x10
[  430.099452][T19508]  should_fail_ex+0x414/0x560
[  430.099480][T19508]  _copy_to_user+0x31/0xb0
[  430.099502][T19508]  simple_read_from_buffer+0xe1/0x170
[  430.099530][T19508]  proc_fail_nth_read+0x1b3/0x220
[  430.099552][T19508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  430.099574][T19508]  ? rw_verify_area+0x2a6/0x4d0
[  430.099591][T19508]  ? __lock_acquire+0xab9/0xd20
[  430.099612][T19508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  430.099629][T19508]  vfs_read+0x200/0xa30
[  430.099648][T19508]  ? fdget_pos+0x247/0x320
[  430.099667][T19508]  ? __pfx___mutex_lock+0x10/0x10
[  430.099687][T19508]  ? __pfx_vfs_read+0x10/0x10
[  430.099709][T19508]  ? __fget_files+0x2a/0x420
[  430.099725][T19508]  ? __fget_files+0x3a0/0x420
[  430.099739][T19508]  ? __fget_files+0x2a/0x420
[  430.099762][T19508]  ksys_read+0x145/0x250
[  430.099784][T19508]  ? __pfx_ksys_read+0x10/0x10
[  430.099802][T19508]  ? fput+0xa0/0xd0
[  430.099824][T19508]  ? do_syscall_64+0xbe/0x3b0
[  430.099846][T19508]  do_syscall_64+0xfa/0x3b0
[  430.099862][T19508]  ? lockdep_hardirqs_on+0x9c/0x150
[  430.099889][T19508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.099906][T19508]  ? clear_bhb_loop+0x60/0xb0
[  430.099926][T19508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.099942][T19508] RIP: 0033:0x7f722678d5fc
[  430.099958][T19508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  430.099972][T19508] RSP: 002b:00007f72276b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  430.099991][T19508] RAX: ffffffffffffffda RBX: 00007f72269c5fa0 RCX: 00007f722678d5fc
[  430.100004][T19508] RDX: 000000000000000f RSI: 00007f72276b30a0 RDI: 0000000000000005
[  430.100014][T19508] RBP: 00007f72276b3090 R08: 0000000000000000 R09: 0000000000000000
[  430.100024][T19508] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  430.100035][T19508] R13: 00007f72269c6038 R14: 00007f72269c5fa0 R15: 00007ffe59f50c78
[  430.100065][T19508]  </TASK>
[  430.387932][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'.
[  430.699760][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3517'.
[  430.844097][T19524] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  430.859847][T19524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.295229][   T51] Bluetooth: hci2: command tx timeout
[  431.720464][T19538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3521'.
[  431.897499][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3521'.
[  433.370645][   T51] Bluetooth: hci2: command tx timeout
[  433.572079][T19392] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  433.655540][T19392] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  433.754920][T19392] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  433.815745][T19392] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  433.910045][T19578] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  434.124427][T19582] syzkaller0: entered promiscuous mode
[  434.131837][T19582] syzkaller0: entered allmulticast mode
[  434.692424][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'.
[  435.453477][   T51] Bluetooth: hci2: command tx timeout
[  436.289707][T19392] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.348864][T19392] 8021q: adding VLAN 0 to HW filter on device team0
[  436.379414][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3538'.
[  436.412552][T14430] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.420013][T14430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.439772][T14430] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.447023][T14430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.548257][T19605] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  436.677237][T19621] veth3: entered promiscuous mode
[  436.789822][T19625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.809404][T19625] syzkaller0: entered promiscuous mode
[  436.814941][T19625] syzkaller0: entered allmulticast mode
[  436.823106][T19629] lo speed is unknown, defaulting to 1000
[  436.824921][T19625] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  436.852397][T19629] lo speed is unknown, defaulting to 1000
[  436.865754][T19625] tipc: Resetting bearer <eth:syzkaller0>
[  436.890117][T19624] tipc: Resetting bearer <eth:syzkaller0>
[  436.913312][T19624] tipc: Disabling bearer <eth:syzkaller0>
[  437.330695][T19392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.360317][T19648] netlink: 'syz.2.3547': attribute type 8 has an invalid length.
[  437.902152][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'.
[  437.940851][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'.
[  438.094754][T19392] veth0_vlan: entered promiscuous mode
[  438.130364][T19392] veth1_vlan: entered promiscuous mode
[  438.198295][T19392] veth0_macvtap: entered promiscuous mode
[  438.220623][T19392] veth1_macvtap: entered promiscuous mode
[  438.291915][T19392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.349562][T19392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.378753][T19672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3554'.
[  438.430125][ T8020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.449593][ T8020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.504095][T19672] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  438.577381][ T8020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.593984][ T8020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.789420][T19683] openvswitch: netlink: Duplicate or invalid key (type 0).
[  438.797018][T19683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.939383][ T8020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.002646][ T8020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.012502][T19654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3549'.
[  439.082587][T16893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.121710][T16893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.465905][T19701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3561'.
[  439.497056][T19705] netlink: 'syz.0.3562': attribute type 8 has an invalid length.
[  439.517949][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'.
[  439.614348][T19705] bond0: entered promiscuous mode
[  439.674608][T19705] bond_slave_0: entered promiscuous mode
[  439.690454][T19705] bond_slave_1: entered promiscuous mode
[  439.729362][T19705] bond0: left promiscuous mode
[  439.734228][T19705] bond_slave_0: left promiscuous mode
[  439.762460][T19705] bond_slave_1: left promiscuous mode
[  439.831494][T19707] lo speed is unknown, defaulting to 1000
[  439.856940][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'.
[  439.870920][T19707] lo speed is unknown, defaulting to 1000
[  439.882791][T19712] syzkaller0: entered promiscuous mode
[  439.896894][T19712] syzkaller0: entered allmulticast mode
[  440.062976][T19722] IPVS: length: 185 != 24
[  440.092655][T19720] netlink: 'syz.2.3565': attribute type 15 has an invalid length.
[  440.113162][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'.
[  440.223898][T19730] netlink: 'syz.2.3569': attribute type 5 has an invalid length.
[  440.304568][T19704] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  440.384460][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'.
[  440.733201][T19733] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  440.919365][T19764] lo speed is unknown, defaulting to 1000
[  440.978441][T19764] lo speed is unknown, defaulting to 1000
[  441.070280][T19773] siw: device registration error -23
[  441.730205][T19794] tipc: Started in network mode
[  441.735869][T19794] tipc: Node identity 9e000f52f355, cluster identity 4711
[  441.743173][T19794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.813883][T19780] lo speed is unknown, defaulting to 1000
[  441.821215][T19793] syzkaller0: entered promiscuous mode
[  441.877469][T19793] syzkaller0: entered allmulticast mode
[  441.918295][T19794] sch_tbf: peakrate 9 is lower than or equals to rate 4694680649230908341 !
[  442.061448][T19780] lo speed is unknown, defaulting to 1000
[  442.083059][T19790] tipc: Resetting bearer <eth:syzkaller0>
[  442.206893][T19790] tipc: Disabling bearer <eth:syzkaller0>
[  442.355343][T19798] lo speed is unknown, defaulting to 1000
[  442.411774][T19810] __nla_validate_parse: 7 callbacks suppressed
[  442.411792][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3590'.
[  442.434150][T19798] lo speed is unknown, defaulting to 1000
[  442.455103][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'.
[  442.576960][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3590'.
[  442.625422][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'.
[  442.643896][T13527] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  442.681464][T13527] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  442.807952][T13527] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  442.836604][T13527] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  443.626134][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3596'.
[  443.629402][T19831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3597'.
[  444.606267][T19845] netlink: 'syz.1.3600': attribute type 1 has an invalid length.
[  444.672511][T19845] 8021q: adding VLAN 0 to HW filter on device bond2
[  444.798914][T19847] 8021q: adding VLAN 0 to HW filter on device bond2
[  444.825775][T19847] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  444.857344][T19847] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  444.986894][T19845] veth3: entered promiscuous mode
[  445.025373][T19845] bond2: (slave veth3): Enslaving as an active interface with a down link
[  445.215619][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3600'.
[  445.294498][T19845] 8021q: adding VLAN 0 to HW filter on device bond2
[  445.373597][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3604'.
[  445.392844][T19861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3604'.
[  445.646009][T19878] Bluetooth: MGMT ver 1.23
[  445.788335][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3609'.
[  445.851878][T19889] netlink: 'syz.1.3613': attribute type 4 has an invalid length.
[  446.061433][T19896] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[  446.601118][T19912] dummy0: entered promiscuous mode
[  446.625588][T19912] macvtap1: entered promiscuous mode
[  446.642888][T19912] macvtap1: entered allmulticast mode
[  446.644800][T19915] netlink: 'syz.5.3621': attribute type 6 has an invalid length.
[  446.654099][T19912] dummy0: entered allmulticast mode
[  446.674974][T19916] netlink: 'syz.5.3621': attribute type 6 has an invalid length.
[  447.014060][T19932] ��: renamed from veth0_virt_wifi (while UP)
[  447.266118][T19938] lo speed is unknown, defaulting to 1000
[  447.273769][T19938] lo speed is unknown, defaulting to 1000
[  447.389367][T19952] IPv6: Can't replace route, no match found
[  447.551120][T19962] __nla_validate_parse: 3 callbacks suppressed
[  447.551138][T19962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3637'.
[  447.580374][T19962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3637'.
[  447.601848][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'.
[  448.345895][   T30] audit: type=1800 audit(1757386537.856:9): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3643" name="memory.events" dev="tmpfs" ino=168 res=0 errno=0
[  448.408149][T19998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3651'.
[  448.638833][T20005] lo speed is unknown, defaulting to 1000
[  448.664067][T20005] lo speed is unknown, defaulting to 1000
[  448.708260][T19986] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  449.548844][T20031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'.
[  450.123897][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3667'.
[  450.134545][T20028] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  450.141717][T20028] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  450.258142][T20028] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  450.264085][T20028] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  450.276466][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'.
[  450.313987][T20028] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  450.322734][T20028] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  450.332146][T20056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3667'.
[  450.358106][T20061] netlink: 'syz.4.3670': attribute type 1 has an invalid length.
[  450.465396][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3673'.
[  450.479601][T20061] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.519061][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'.
[  450.534301][T20028] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  450.549389][T20028] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  450.633371][T20028] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  450.653368][T20028] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  450.703662][T20075] netlink: 'syz.0.3674': attribute type 1 has an invalid length.
[  451.075403][T20091] netlink: 'syz.4.3677': attribute type 1 has an invalid length.
[  451.846391][T20129] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  452.283761][T20147] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len
[  452.510993][T20133] delete_channel: no stack
[  452.549620][T20160] netlink: 'syz.1.3690': attribute type 1 has an invalid length.
[  452.568136][T20160] __nla_validate_parse: 5 callbacks suppressed
[  452.568154][T20160] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3690'.
[  452.991823][T20180] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3697'.
[  453.163452][T20187] team0: Device gtp0 is of different type
[  453.405492][T20205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3703'.
[  453.454359][T20205] netlink: 'syz.0.3703': attribute type 16 has an invalid length.
[  453.475831][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3703'.
[  453.580281][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3706'.
[  453.639647][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3706'.
[  453.837884][T20235] netlink: 'syz.4.3708': attribute type 4 has an invalid length.
[  453.884278][T20227] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3709'.
[  453.889054][T20226] netlink: 'syz.4.3708': attribute type 4 has an invalid length.
[  453.976101][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'.
[  454.046786][T20239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'.
[  454.342999][T20261] netlink: 'syz.0.3715': attribute type 10 has an invalid length.
[  454.351827][T20261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3715'.
[  454.422825][T20265] nbd: nbd0 already in use
[  454.526119][T20261] team0: Port device geneve0 added
[  454.564194][T20270] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  454.736257][T20270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.769060][T20270] syzkaller0: entered promiscuous mode
[  454.780753][T20270] syzkaller0: entered allmulticast mode
[  454.828693][T20266] tipc: Resetting bearer <eth:syzkaller0>
[  454.926720][T20266] tipc: Disabling bearer <eth:syzkaller0>
[  455.091904][T20296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.099453][T20294] syzkaller0: entered promiscuous mode
[  455.104950][T20294] syzkaller0: entered allmulticast mode
[  455.115380][T20296] tipc: Resetting bearer <eth:syzkaller0>
[  455.154349][T20293] tipc: Resetting bearer <eth:syzkaller0>
[  455.206067][T20293] tipc: Disabling bearer <eth:syzkaller0>
[  455.262254][T20303] netlink: 'syz.0.3731': attribute type 15 has an invalid length.
[  455.383959][T20322] openvswitch: netlink: EtherType 0 is less than min 600
[  455.571980][T20320] lo speed is unknown, defaulting to 1000
[  455.634350][T20320] lo speed is unknown, defaulting to 1000
[  455.676158][T20332] team_slave_0: entered promiscuous mode
[  455.682234][T20332] team_slave_1: entered promiscuous mode
[  455.724870][T20332] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  455.816780][T20332] team0: Device macvtap1 is already an upper device of the team interface
[  455.886647][T20332] team_slave_0: left promiscuous mode
[  455.892314][T20332] team_slave_1: left promiscuous mode
[  456.311842][T20359] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  456.391271][T20361] batadv_slave_0: entered promiscuous mode
[  456.630117][T20374] netlink: 'syz.5.3743': attribute type 28 has an invalid length.
[  456.677896][T20353] batadv_slave_0: left promiscuous mode
[  456.746741][T20366] openvswitch: netlink: nsh attr 20 is out of range max 3
[  456.754062][T20366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.213971][T20404] netlink: 'syz.0.3749': attribute type 1 has an invalid length.
[  457.276653][T20405] netlink: 'syz.0.3749': attribute type 1 has an invalid length.
[  457.319737][T20407] gre0: entered promiscuous mode
[  457.324736][T20407] gre0: entered allmulticast mode
[  457.477814][T20404] 8021q: adding VLAN 0 to HW filter on device bond1
[  457.551032][T20411] vlan0: entered allmulticast mode
[  457.560672][T20411] bond1: (slave vlan0): making interface the new active one
[  457.574024][T20411] bond1: (slave vlan0): Enslaving as an active interface with an up link
[  457.590769][T20419] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  457.599166][T20421] __nla_validate_parse: 9 callbacks suppressed
[  457.599184][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3752'.
[  457.829989][T20433] Unsupported ieee802154 address type: 0
[  458.076644][T20432] lo speed is unknown, defaulting to 1000
[  458.084423][T20432] lo speed is unknown, defaulting to 1000
[  458.247455][T20450] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3758'.
[  458.424438][T20455] netlink: 'syz.0.3759': attribute type 1 has an invalid length.
[  458.632922][T20471] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3762'.
[  458.634033][T20472] netlink: 'syz.5.3762': attribute type 1 has an invalid length.
[  458.678482][T20459] lo speed is unknown, defaulting to 1000
[  458.727149][T20459] lo speed is unknown, defaulting to 1000
[  458.750597][T20475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3762'.
[  459.317491][T20498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.364648][T20498] tipc: Disabling bearer <eth:syzkaller0>
[  459.427235][T20503] gre0: left promiscuous mode
[  459.500791][T20509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3773'.
[  459.521811][T20511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3775'.
[  459.557521][T20503] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.565163][T20503] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.692382][T20503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.709586][T20503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.921652][T20509] macsec2: entered promiscuous mode
[  459.935931][T20509] macsec2: entered allmulticast mode
[  459.941275][T20509] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode
[  460.017643][T16890] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.027415][T16890] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.028672][T20526] netlink: 'syz.0.3777': attribute type 2 has an invalid length.
[  460.045219][T16890] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.065293][T20526] netlink: 'syz.0.3777': attribute type 1 has an invalid length.
[  460.074521][T16890] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.133162][T20525] geneve2: entered promiscuous mode
[  460.151547][T20520] netlink: 'syz.0.3777': attribute type 1 has an invalid length.
[  460.185834][T16890] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.194740][T16890] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.208122][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3780'.
[  460.217702][T16890] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.234078][T16890] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.361485][T20541] netlink: 'syz.5.3782': attribute type 11 has an invalid length.
[  460.442495][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'.
[  460.917153][T20562] lo speed is unknown, defaulting to 1000
[  460.951735][T20562] lo speed is unknown, defaulting to 1000
[  461.014348][T20566] lo speed is unknown, defaulting to 1000
[  461.145352][T20566] lo speed is unknown, defaulting to 1000
[  461.150139][T20568] lo speed is unknown, defaulting to 1000
[  461.251533][T20568] lo speed is unknown, defaulting to 1000
[  461.303805][T20583] netlink: 'syz.4.3796': attribute type 3 has an invalid length.
[  461.348223][T20559] lo speed is unknown, defaulting to 1000
[  461.387959][T20583] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3796'.
[  461.528206][T20559] lo speed is unknown, defaulting to 1000
[  461.528229][T20580] lo speed is unknown, defaulting to 1000
[  461.702509][T20580] lo speed is unknown, defaulting to 1000
[  462.109017][T20594] vlan2: entered allmulticast mode
[  462.131282][T20594] hsr0: entered allmulticast mode
[  462.147077][T20594] hsr_slave_0: entered allmulticast mode
[  462.153155][T20594] hsr_slave_1: entered allmulticast mode
[  462.234436][T20598] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3790'.
[  462.760933][T20614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.798570][T20614] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  462.877580][T16890] syzkaller0: tun_net_xmit 76
[  462.882865][T16890] syzkaller0: tun_net_xmit 48
[  462.915813][    T9] syzkaller0: tun_net_xmit 76
[  463.165826][    T9] syzkaller0: tun_net_xmit 76
[  463.172804][T20633] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  463.498101][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3814'.
[  463.545664][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3814'.
[  463.546608][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3814'.
[  464.006798][T20675] lo speed is unknown, defaulting to 1000
[  464.047888][T20675] lo speed is unknown, defaulting to 1000
[  464.679711][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3829'.
[  464.889986][T20712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.914688][T20712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.167654][T20712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.193026][T20712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.203874][   T30] audit: type=1107 audit(1757386554.696:10): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?}���H!���%z͘%��9��
[  465.203874][   T30] �Pq^��e����&��)-]�hs��q�8y�B�1��㻍������-8����D�������f�yHC�A�=����s�BÓ�7��,a,
[  465.203874][   T30] ӟpB��\�������¦���uJ�r'
[  465.441952][T20712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.471601][T20712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.534784][T20754] openvswitch: netlink: Missing valid actions attribute.
[  465.725920][T20754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.020635][T20712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.055222][T20712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.164372][T20764] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  466.486457][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3845'.
[  466.503141][T20775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3844'.
[  466.524592][T14440] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  466.537957][T14440] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.575665][T20771] block nbd3: server does not support multiple connections per device.
[  466.598622][T14440] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  466.615739][T20771] block nbd3: shutting down sockets
[  466.625264][T14440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.669397][ T8020] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  466.680022][T20775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3844'.
[  466.689893][ T8020] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.823571][ T8020] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  466.835501][ T8020] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.897899][T20715] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.922382][T20715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.998225][T20715] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.012618][T20715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.065926][T20788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.083786][T20792] syzkaller0: entered promiscuous mode
[  467.114302][T20792] syzkaller0: entered allmulticast mode
[  467.143853][T20787] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3849'.
[  467.174474][T20794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3850'.
[  467.207102][T20715] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.250880][T20715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.288631][T20788] tipc: Resetting bearer <eth:syzkaller0>
[  467.364700][T20715] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.391804][T20715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.430971][T20809] netlink: 'syz.4.3855': attribute type 4 has an invalid length.
[  467.799740][T20784] tipc: Resetting bearer <eth:syzkaller0>
[  467.837475][T20784] tipc: Disabling bearer <eth:syzkaller0>
[  467.918110][T20834] lo speed is unknown, defaulting to 1000
[  467.968148][T20834] lo speed is unknown, defaulting to 1000
[  468.009028][T20838] netlink: 'syz.1.3865': attribute type 1 has an invalid length.
[  468.133015][T20838] bond3: (slave bridge4): making interface the new active one
[  468.146247][T20838] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  468.182414][T20839] bond3: (slave bridge5): Enslaving as an active interface with a down link
[  468.291471][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'.
[  468.310098][T20848] openvswitch: netlink: Flow key attr not present in new flow.
[  468.382047][T20852] netlink: 'syz.5.3867': attribute type 2 has an invalid length.
[  468.540682][T20855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  468.550680][T20855] syzkaller0: entered promiscuous mode
[  468.557328][T20855] syzkaller0: entered allmulticast mode
[  468.611969][T20854] tipc: Resetting bearer <eth:syzkaller0>
[  468.660731][T20854] tipc: Disabling bearer <eth:syzkaller0>
[  468.988526][T20877] __nla_validate_parse: 1 callbacks suppressed
[  468.988545][T20877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3874'.
[  469.079755][T20883] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3874'.
[  469.123507][T20882] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3875'.
[  469.371542][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3881'.
[  469.401621][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3881'.
[  469.449915][T20898] dummy0: entered promiscuous mode
[  469.466257][T20898] batadv_slave_1: entered promiscuous mode
[  469.474960][T20898] debugfs: 'hsr1' already exists in 'hsr'
[  469.482872][T20898] Cannot create hsr debugfs directory
[  469.489984][T20898] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  469.513758][T20898] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  469.596152][T20905] lo speed is unknown, defaulting to 1000
[  469.614000][T20905] lo speed is unknown, defaulting to 1000
[  469.622341][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3882'.
[  469.828470][T20915] netlink: 'syz.4.3883': attribute type 3 has an invalid length.
[  470.004001][T20926] netlink: 'syz.5.3888': attribute type 28 has an invalid length.
[  470.270661][T20939] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  470.283841][T20939] CPU: 1 UID: 0 PID: 20939 Comm: syz.1.3892 Not tainted syzkaller #0 PREEMPT(full) 
[  470.283867][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.283878][T20939] Call Trace:
[  470.283886][T20939]  <TASK>
[  470.283894][T20939]  dump_stack_lvl+0x189/0x250
[  470.283923][T20939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.283941][T20939]  ? __pfx__printk+0x10/0x10
[  470.283967][T20939]  ? kernfs_path_from_node+0x2f/0x290
[  470.283985][T20939]  ? kernfs_path_from_node+0x250/0x290
[  470.284002][T20939]  ? kernfs_path_from_node+0x2f/0x290
[  470.284036][T20939]  sysfs_warn_dup+0x8e/0xa0
[  470.284055][T20939]  sysfs_do_create_link_sd+0xc0/0x110
[  470.284077][T20939]  device_add_class_symlinks+0x1cf/0x240
[  470.284100][T20939]  device_add+0x475/0xb50
[  470.284123][T20939]  wiphy_register+0x1ba6/0x28d0
[  470.284162][T20939]  ? __pfx_wiphy_register+0x10/0x10
[  470.284179][T20939]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  470.284210][T20939]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  470.284238][T20939]  ieee80211_register_hw+0x3484/0x4100
[  470.284276][T20939]  ? ieee80211_register_hw+0x14d1/0x4100
[  470.284306][T20939]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  470.284334][T20939]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  470.284367][T20939]  ? __hrtimer_setup+0x187/0x210
[  470.284382][T20939]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  470.284410][T20939]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  470.284466][T20939]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  470.284487][T20939]  ? trace_kmalloc+0x1f/0xd0
[  470.284506][T20939]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  470.284527][T20939]  ? kstrndup+0xbf/0x160
[  470.284555][T20939]  hwsim_new_radio_nl+0xea4/0x1b10
[  470.284581][T20939]  ? __pfx___nla_validate_parse+0x10/0x10
[  470.284618][T20939]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  470.284655][T20939]  ? __nla_parse+0x40/0x60
[  470.284674][T20939]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  470.284705][T20939]  genl_family_rcv_msg_doit+0x212/0x300
[  470.284736][T20939]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  470.284795][T20939]  ? bpf_lsm_capable+0x9/0x20
[  470.284817][T20939]  ? security_capable+0x7e/0x2e0
[  470.284850][T20939]  genl_rcv_msg+0x60e/0x790
[  470.284881][T20939]  ? __pfx_genl_rcv_msg+0x10/0x10
[  470.284901][T20939]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  470.284941][T20939]  netlink_rcv_skb+0x208/0x470
[  470.284957][T20939]  ? __lock_acquire+0xab9/0xd20
[  470.284981][T20939]  ? __pfx_genl_rcv_msg+0x10/0x10
[  470.285004][T20939]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  470.285057][T20939]  ? down_read+0x1ad/0x2e0
[  470.285081][T20939]  genl_rcv+0x28/0x40
[  470.285101][T20939]  netlink_unicast+0x82f/0x9e0
[  470.285135][T20939]  ? __pfx_netlink_unicast+0x10/0x10
[  470.285160][T20939]  ? netlink_sendmsg+0x642/0xb30
[  470.285176][T20939]  ? skb_put+0x11b/0x210
[  470.285201][T20939]  netlink_sendmsg+0x805/0xb30
[  470.285230][T20939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.285252][T20939]  ? aa_sock_msg_perm+0xf1/0x1d0
[  470.285270][T20939]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  470.285288][T20939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.285308][T20939]  __sock_sendmsg+0x21c/0x270
[  470.285334][T20939]  ____sys_sendmsg+0x505/0x830
[  470.285362][T20939]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.285395][T20939]  ? import_iovec+0x74/0xa0
[  470.285420][T20939]  ___sys_sendmsg+0x21f/0x2a0
[  470.285444][T20939]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.285513][T20939]  ? __fget_files+0x2a/0x420
[  470.285528][T20939]  ? __fget_files+0x3a0/0x420
[  470.285559][T20939]  __x64_sys_sendmsg+0x19b/0x260
[  470.285583][T20939]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.285617][T20939]  ? rcu_is_watching+0x15/0xb0
[  470.285642][T20939]  ? do_syscall_64+0xbe/0x3b0
[  470.285667][T20939]  do_syscall_64+0xfa/0x3b0
[  470.285685][T20939]  ? lockdep_hardirqs_on+0x9c/0x150
[  470.285703][T20939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.285721][T20939]  ? clear_bhb_loop+0x60/0xb0
[  470.285743][T20939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.285760][T20939] RIP: 0033:0x7f3443b8ebe9
[  470.285777][T20939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.285792][T20939] RSP: 002b:00007f3444989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.285811][T20939] RAX: ffffffffffffffda RBX: 00007f3443dc5fa0 RCX: 00007f3443b8ebe9
[  470.285825][T20939] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  470.285837][T20939] RBP: 00007f3443c11e19 R08: 0000000000000000 R09: 0000000000000000
[  470.285849][T20939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  470.285860][T20939] R13: 00007f3443dc6038 R14: 00007f3443dc5fa0 R15: 00007ffdaee68278
[  470.285894][T20939]  </TASK>
[  470.788548][T20945] netlink: 'syz.0.3894': attribute type 4 has an invalid length.
[  470.807968][T20946] ipvlan0: entered promiscuous mode
[  470.954551][T14440] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.995586][T14440] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.006076][T20956] netlink: 'syz.4.3896': attribute type 3 has an invalid length.
[  471.014583][T20956] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3896'.
[  471.058955][T14440] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  471.109355][T14440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.174748][T20959] netlink: 'syz.0.3898': attribute type 4 has an invalid length.
[  471.229176][T16893] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  471.240543][T16893] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.334743][T16893] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  471.363855][T16893] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.518395][T20976] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  471.526029][ T5932] IPVS: starting estimator thread 0...
[  471.625890][T20984] IPVS: using max 29 ests per chain, 69600 per kthread
[  471.979746][T21006] lo speed is unknown, defaulting to 1000
[  471.988097][T21006] lo speed is unknown, defaulting to 1000
[  472.002221][T21009] netlink: 'syz.5.3912': attribute type 11 has an invalid length.
[  472.065578][T21012] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  472.247856][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'.
[  472.679282][T21033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.687548][T21033] syzkaller0: entered promiscuous mode
[  472.694220][T21033] syzkaller0: entered allmulticast mode
[  472.826050][T21032] tipc: Resetting bearer <eth:syzkaller0>
[  472.884170][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'.
[  472.922798][T21032] tipc: Disabling bearer <eth:syzkaller0>
[  472.961035][T21048] siw: device registration error -23
[  472.969473][T21050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3925'.
[  473.076230][T21057] IPVS: Error connecting to the multicast addr
[  473.274481][T21060] team0 (unregistering): Port device team_slave_0 removed
[  473.297854][T21060] team0 (unregistering): Port device team_slave_1 removed
[  473.663867][T21078] netlink: 'syz.1.3933': attribute type 4 has an invalid length.
[  474.188764][T21090] __nla_validate_parse: 7 callbacks suppressed
[  474.188785][T21090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3937'.
[  474.237906][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'.
[  474.586752][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3947'.
[  474.598117][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'.
[  474.791577][T21131] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.3950'.
[  474.910174][T21136] netlink: 'syz.1.3949': attribute type 21 has an invalid length.
[  474.950098][T21136] netlink: 'syz.1.3949': attribute type 6 has an invalid length.
[  474.980983][T21136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3949'.
[  475.044805][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.149218][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.185599][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.224396][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.245592][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.259900][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.277740][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.300974][T21149] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  475.305656][T21155] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3958'.
[  475.322950][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.336750][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.344815][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.361435][T21157] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3958'.
[  475.371567][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.380441][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.455500][T21143] netlink: 'syz.0.3954': attribute type 10 has an invalid length.
[  475.482482][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.514090][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.554192][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.625462][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.671415][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.712484][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.769333][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.880334][T21143] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  476.936809][T21196] team0: Device dummy0 failed to register rx_handler
[  477.176802][T21207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.187541][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3973'.
[  477.601795][T21222] lo speed is unknown, defaulting to 1000
[  477.639727][T21222] lo speed is unknown, defaulting to 1000
[  478.091162][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'.
[  478.410868][T21248] lo speed is unknown, defaulting to 1000
[  478.451291][T21248] lo speed is unknown, defaulting to 1000
[  478.500058][T21251] batadv_slave_1: entered promiscuous mode
[  479.220565][T21251] batadv_slave_1 (unregistering): left promiscuous mode
[  479.237477][T21251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.858356][T21291] __nla_validate_parse: 2 callbacks suppressed
[  479.858375][T21291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3993'.
[  479.910819][T21294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3993'.
[  479.996171][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'.
[  480.398672][T21319] syzkaller1: entered promiscuous mode
[  480.406657][T21319] syzkaller1: entered allmulticast mode
[  480.533109][T21333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.595233][T21337] bridge_slave_0: left allmulticast mode
[  480.604900][T21337] bridge_slave_0: left promiscuous mode
[  480.616504][T21337] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.638161][T21333] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4005'.
[  480.677685][T21337] bridge_slave_1: left allmulticast mode
[  480.683390][T21337] bridge_slave_1: left promiscuous mode
[  480.716224][T21343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4009'.
[  480.735420][T21343] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4009'.
[  480.749139][T21337] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.884009][T21337] bond0: (slave bond_slave_0): Releasing backup interface
[  480.961852][T21337] bond0: (slave bond_slave_1): Releasing backup interface
[  481.006690][T21337] team0: Port device team_slave_0 removed
[  481.031091][T21337] team0: Port device team_slave_1 removed
[  481.038396][T21337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.074501][T21337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.219493][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'.
[  481.344336][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'.
[  481.377745][T21383] macvtap1: mtu less than device minimum
[  481.669301][T21392] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.677119][T21392] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.680332][T21403] validate_nla: 11 callbacks suppressed
[  481.680351][T21403] netlink: 'syz.1.4022': attribute type 10 has an invalid length.
[  481.736586][T21406] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  481.842590][T21392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.864017][T21392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.916402][T21392] veth0_macvtap: left allmulticast mode
[  481.942938][T21392] mac80211_hwsim hwsim37 wlan0: left promiscuous mode
[  482.013607][T21392] vlan0: left allmulticast mode
[  482.046719][T21389] lo speed is unknown, defaulting to 1000
[  482.056773][T21389] lo speed is unknown, defaulting to 1000
[  482.059990][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  482.078323][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.128838][T21393] lo speed is unknown, defaulting to 1000
[  482.138920][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  482.163477][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.189213][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  482.205465][T21393] lo speed is unknown, defaulting to 1000
[  482.215543][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.335634][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  482.354303][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  482.748066][T21429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  483.470357][T21429] bridge_slave_1: left allmulticast mode
[  483.477249][T21429] bridge_slave_1: left promiscuous mode
[  483.483283][T21429] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.495034][T21429] bridge_slave_0: left allmulticast mode
[  483.500851][T21429] bridge_slave_0: left promiscuous mode
[  483.510879][T21429] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.619541][T21446] netlink: 'syz.1.4033': attribute type 2 has an invalid length.
[  483.936670][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  484.000125][T21465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.021536][T21465] syzkaller0: entered promiscuous mode
[  484.058824][T21465] syzkaller0: entered allmulticast mode
[  484.986182][T21465] tipc: Resetting bearer <eth:syzkaller0>
[  485.042258][T21465] tipc: Disabling bearer <eth:syzkaller0>
[  485.081641][T21489] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  485.103628][T21489] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  485.165903][T21500] vlan0: entered promiscuous mode
[  485.348908][T21513] __nla_validate_parse: 3 callbacks suppressed
[  485.348925][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4051'.
[  486.033711][T21546] netlink: 'syz.2.4063': attribute type 1 has an invalid length.
[  486.067789][T21546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4063'.
[  486.333068][T21560] syzkaller1: entered promiscuous mode
[  486.339891][T21560] syzkaller1: entered allmulticast mode
[  486.410941][T21562] netlink: 'syz.5.4064': attribute type 3 has an invalid length.
[  486.431080][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'.
[  486.658690][T21575] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.4071'.
[  486.756020][T21583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4072'.
[  487.006931][T21595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4073'.
[  487.258265][T21606] tipc: Started in network mode
[  487.263199][T21606] tipc: Node identity 3239a5aa988, cluster identity 4711
[  487.295334][T21606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.318598][T21606] syzkaller0: entered promiscuous mode
[  487.324110][T21606] syzkaller0: entered allmulticast mode
[  487.474700][T21610] tipc: Resetting bearer <eth:syzkaller0>
[  487.770670][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'.
[  487.812527][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'.
[  488.039117][T21646] netlink: 'syz.1.4087': attribute type 2 has an invalid length.
[  488.047693][T21605] tipc: Resetting bearer <eth:syzkaller0>
[  488.086593][T21605] tipc: Disabling bearer <eth:syzkaller0>
[  488.104174][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'.
[  488.123228][T21646] k�*�]�: entered promiscuous mode
[  488.133573][T21646] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4087'.
[  488.186761][T21646] veth0_to_team: entered promiscuous mode
[  488.204664][T21646] veth0_to_team: entered allmulticast mode
[  488.281502][T21654] netlink: 'syz.0.4089': attribute type 4 has an invalid length.
[  488.356734][T21658] lo speed is unknown, defaulting to 1000
[  488.363656][T21658] lo speed is unknown, defaulting to 1000
[  488.493961][T21653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.533060][T21653] syzkaller0: entered promiscuous mode
[  488.545231][T21653] syzkaller0: entered allmulticast mode
[  488.571143][T21667] syzkaller1: entered promiscuous mode
[  488.577033][T21667] syzkaller1: entered allmulticast mode
[  488.951651][T21683] C: renamed from team_slave_0
[  488.961404][T21683] netlink: 'syz.1.4100': attribute type 3 has an invalid length.
[  488.973326][T21683] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  489.136707][T21651] tipc: Resetting bearer <eth:syzkaller0>
[  489.228012][T21651] tipc: Disabling bearer <eth:syzkaller0>
[  489.364821][T21698] lo speed is unknown, defaulting to 1000
[  489.476248][T21698] lo speed is unknown, defaulting to 1000
[  489.629276][T21714] netlink: 'syz.0.4107': attribute type 1 has an invalid length.
[  489.741556][T21716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.812768][T21724] syzkaller0: entered promiscuous mode
[  489.820822][T21724] syzkaller0: entered allmulticast mode
[  489.893672][T21716] tipc: Resetting bearer <eth:syzkaller0>
[  489.999271][T21715] tipc: Resetting bearer <eth:syzkaller0>
[  490.030644][T21715] tipc: Disabling bearer <eth:syzkaller0>
[  490.960764][T21765] netlink: 'syz.0.4124': attribute type 1 has an invalid length.
[  490.969106][T21765] __nla_validate_parse: 6 callbacks suppressed
[  490.969133][T21765] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4124'.
[  491.180671][T21758] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4122'.
[  491.192134][T21758] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4122'.
[  491.229891][T21758] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4122'.
[  491.355607][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'.
[  491.356975][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'.
[  491.508449][T21788] netlink: 'syz.4.4131': attribute type 1 has an invalid length.
[  491.537273][T21777] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  491.631591][T21788] 8021q: adding VLAN 0 to HW filter on device bond2
[  491.754931][T21788] vlan2: entered allmulticast mode
[  491.760631][T21788] batadv0: entered allmulticast mode
[  491.781829][T21799] nbd: nbd1 already in use
[  491.791792][T21799] block nbd1: NBD_DISCONNECT
[  491.797527][T21788] bond2: (slave vlan2): making interface the new active one
[  491.817020][T21799] block nbd1: Send disconnect failed -107
[  491.824850][T21799] block nbd1: shutting down sockets
[  491.833928][T21788] bond2: (slave vlan2): Enslaving as an active interface with an up link
[  491.879315][T21794] syzkaller1: entered promiscuous mode
[  491.884968][T21794] syzkaller1: entered allmulticast mode
[  492.111226][T21810] ==================================================================
[  492.119335][T21810] BUG: KASAN: slab-use-after-free in napi_gro_frags+0x6e/0x1030
[  492.126982][T21810] Read of size 8 at addr ffff8880348a5498 by task syz.1.4139/21810
[  492.134883][T21810] 
[  492.137217][T21810] CPU: 0 UID: 0 PID: 21810 Comm: syz.1.4139 Not tainted syzkaller #0 PREEMPT(full) 
[  492.137240][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  492.137251][T21810] Call Trace:
[  492.137260][T21810]  <TASK>
[  492.137267][T21810]  dump_stack_lvl+0x189/0x250
[  492.137297][T21810]  ? rcu_is_watching+0x15/0xb0
[  492.137315][T21810]  ? __kasan_check_byte+0x12/0x40
[  492.137339][T21810]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.137358][T21810]  ? rcu_is_watching+0x15/0xb0
[  492.137375][T21810]  ? lock_release+0x4b/0x3e0
[  492.137400][T21810]  ? __virt_addr_valid+0x1c8/0x5c0
[  492.137421][T21810]  ? __virt_addr_valid+0x4a5/0x5c0
[  492.137442][T21810]  print_report+0xca/0x240
[  492.137459][T21810]  ? napi_gro_frags+0x6e/0x1030
[  492.137476][T21810]  kasan_report+0x118/0x150
[  492.137499][T21810]  ? napi_gro_frags+0x6e/0x1030
[  492.137519][T21810]  ? tun_get_user+0x266c/0x3e20
[  492.137536][T21810]  napi_gro_frags+0x6e/0x1030
[  492.137553][T21810]  ? __pfx_napi_schedule_prep+0x10/0x10
[  492.137580][T21810]  ? tun_get_user+0x266c/0x3e20
[  492.137597][T21810]  tun_get_user+0x28cb/0x3e20
[  492.137621][T21810]  ? tun_get_user+0x266c/0x3e20
[  492.137640][T21810]  ? aa_file_perm+0x44d/0x1550
[  492.137658][T21810]  ? __pfx_tun_get_user+0x10/0x10
[  492.137685][T21810]  ? ref_tracker_alloc+0x318/0x460
[  492.137707][T21810]  ? __lock_acquire+0xab9/0xd20
[  492.137730][T21810]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  492.137762][T21810]  ? tun_get+0x1c/0x2f0
[  492.137782][T21810]  ? tun_get+0x1c/0x2f0
[  492.137798][T21810]  ? tun_get+0x1c/0x2f0
[  492.137817][T21810]  tun_chr_write_iter+0x113/0x200
[  492.137837][T21810]  vfs_write+0x5c9/0xb30
[  492.137861][T21810]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  492.137880][T21810]  ? __pfx_vfs_write+0x10/0x10
[  492.137905][T21810]  ? __fget_files+0x2a/0x420
[  492.137925][T21810]  ksys_write+0x145/0x250
[  492.137947][T21810]  ? __pfx_ksys_write+0x10/0x10
[  492.137966][T21810]  ? rcu_is_watching+0x15/0xb0
[  492.137984][T21810]  ? do_syscall_64+0xbe/0x3b0
[  492.138004][T21810]  do_syscall_64+0xfa/0x3b0
[  492.138022][T21810]  ? lockdep_hardirqs_on+0x9c/0x150
[  492.138039][T21810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.138057][T21810]  ? clear_bhb_loop+0x60/0xb0
[  492.138076][T21810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.138092][T21810] RIP: 0033:0x7f3443b8ebe9
[  492.138108][T21810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.138124][T21810] RSP: 002b:00007f3444989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  492.138144][T21810] RAX: ffffffffffffffda RBX: 00007f3443dc5fa0 RCX: 00007f3443b8ebe9
[  492.138158][T21810] RDX: 000000000000004b RSI: 0000200000000340 RDI: 0000000000000004
[  492.138170][T21810] RBP: 00007f3443c11e19 R08: 0000000000000000 R09: 0000000000000000
[  492.138182][T21810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.138194][T21810] R13: 00007f3443dc6038 R14: 00007f3443dc5fa0 R15: 00007ffdaee68278
[  492.138216][T21810]  </TASK>
[  492.138223][T21810] 
[  492.435160][T21810] Allocated by task 21810:
[  492.439756][T21810]  kasan_save_track+0x3e/0x80
[  492.444524][T21810]  __kasan_mempool_unpoison_object+0xa0/0x170
[  492.450616][T21810]  napi_skb_cache_get+0x37b/0x6d0
[  492.455644][T21810]  __alloc_skb+0x11e/0x2d0
[  492.460054][T21810]  napi_alloc_skb+0x84/0x7d0
[  492.464643][T21810]  napi_get_frags+0x69/0x140
[  492.469225][T21810]  tun_get_user+0x77c/0x3e20
[  492.473821][T21810]  tun_chr_write_iter+0x113/0x200
[  492.478828][T21810]  vfs_write+0x5c9/0xb30
[  492.483056][T21810]  ksys_write+0x145/0x250
[  492.487372][T21810]  do_syscall_64+0xfa/0x3b0
[  492.491879][T21810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.497760][T21810] 
[  492.500084][T21810] Freed by task 21810:
[  492.504131][T21810]  kasan_save_track+0x3e/0x80
[  492.508795][T21810]  kasan_save_free_info+0x46/0x50
[  492.513803][T21810]  __kasan_slab_free+0x5b/0x80
[  492.518552][T21810]  kmem_cache_free+0x18f/0x400
[  492.523306][T21810]  skb_pp_cow_data+0xdd8/0x13e0
[  492.528165][T21810]  do_xdp_generic+0x699/0x11a0
[  492.532946][T21810]  tun_get_user+0x2523/0x3e20
[  492.537614][T21810]  tun_chr_write_iter+0x113/0x200
[  492.542629][T21810]  vfs_write+0x5c9/0xb30
[  492.546869][T21810]  ksys_write+0x145/0x250
[  492.551198][T21810]  do_syscall_64+0xfa/0x3b0
[  492.555702][T21810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.561759][T21810] 
[  492.564128][T21810] The buggy address belongs to the object at ffff8880348a53c0
[  492.564128][T21810]  which belongs to the cache skbuff_head_cache of size 240
[  492.578699][T21810] The buggy address is located 216 bytes inside of
[  492.578699][T21810]  freed 240-byte region [ffff8880348a53c0, ffff8880348a54b0)
[  492.592579][T21810] 
[  492.594893][T21810] The buggy address belongs to the physical page:
[  492.601307][T21810] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x348a5
[  492.610101][T21810] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  492.617468][T21810] page_type: f5(slab)
[  492.621557][T21810] raw: 00fff00000000000 ffff8881416ee000 dead000000000122 0000000000000000
[  492.630131][T21810] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000
[  492.638763][T21810] page dumped because: kasan: bad access detected
[  492.645167][T21810] page_owner tracks the page as allocated
[  492.650862][T21810] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 803, tgid 803 (kworker/u8:5), ts 491328234844, free_ts 491307308768
[  492.670152][T21810]  post_alloc_hook+0x240/0x2a0
[  492.674940][T21810]  get_page_from_freelist+0x21e4/0x22c0
[  492.680478][T21810]  __alloc_frozen_pages_noprof+0x181/0x370
[  492.686289][T21810]  alloc_pages_mpol+0x232/0x4a0
[  492.691132][T21810]  allocate_slab+0x8a/0x370
[  492.695621][T21810]  ___slab_alloc+0xbeb/0x1420
[  492.700288][T21810]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  492.706165][T21810]  __alloc_skb+0x112/0x2d0
[  492.710567][T21810]  nsim_dev_trap_report_work+0x29a/0xb80
[  492.716183][T21810]  process_scheduled_works+0xae1/0x17b0
[  492.721721][T21810]  worker_thread+0x8a0/0xda0
[  492.726308][T21810]  kthread+0x70e/0x8a0
[  492.730372][T21810]  ret_from_fork+0x3fc/0x770
[  492.734973][T21810]  ret_from_fork_asm+0x1a/0x30
[  492.739724][T21810] page last free pid 803 tgid 803 stack trace:
[  492.745856][T21810]  __free_frozen_pages+0xbc4/0xd30
[  492.750956][T21810]  __tlb_remove_table+0x2d2/0x3b0
[  492.755963][T21810]  tlb_remove_table_rcu+0x85/0x100
[  492.761055][T21810]  rcu_core+0xcab/0x1770
[  492.765283][T21810]  handle_softirqs+0x283/0x870
[  492.770552][T21810]  __irq_exit_rcu+0xca/0x1f0
[  492.775137][T21810]  irq_exit_rcu+0x9/0x30
[  492.779399][T21810]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  492.785030][T21810]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  492.791020][T21810] 
[  492.793335][T21810] Memory state around the buggy address:
[  492.798950][T21810]  ffff8880348a5380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  492.807000][T21810]  ffff8880348a5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  492.815230][T21810] >ffff8880348a5480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[  492.823370][T21810]                             ^
[  492.828214][T21810]  ffff8880348a5500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  492.836345][T21810]  ffff8880348a5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[  492.844389][T21810] ==================================================================
[  492.852618][T21810] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  492.859820][T21810] CPU: 0 UID: 0 PID: 21810 Comm: syz.1.4139 Not tainted syzkaller #0 PREEMPT(full) 
[  492.869196][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  492.879256][T21810] Call Trace:
[  492.882550][T21810]  <TASK>
[  492.885487][T21810]  dump_stack_lvl+0x99/0x250
[  492.890113][T21810]  ? __asan_memcpy+0x40/0x70
[  492.894743][T21810]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.900003][T21810]  ? __pfx__printk+0x10/0x10
[  492.904616][T21810]  vpanic+0x281/0x750
[  492.908611][T21810]  ? __pfx_vpanic+0x10/0x10
[  492.913122][T21810]  ? irqentry_exit+0x74/0x90
[  492.917734][T21810]  panic+0xb9/0xc0
[  492.921458][T21810]  ? __pfx_panic+0x10/0x10
[  492.925863][T21810]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  492.931750][T21810]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  492.937637][T21810]  ? napi_gro_frags+0x6e/0x1030
[  492.942472][T21810]  check_panic_on_warn+0x89/0xb0
[  492.947399][T21810]  ? napi_gro_frags+0x6e/0x1030
[  492.952243][T21810]  end_report+0x78/0x160
[  492.956564][T21810]  kasan_report+0x129/0x150
[  492.961061][T21810]  ? napi_gro_frags+0x6e/0x1030
[  492.965938][T21810]  ? tun_get_user+0x266c/0x3e20
[  492.970779][T21810]  napi_gro_frags+0x6e/0x1030
[  492.975448][T21810]  ? __pfx_napi_schedule_prep+0x10/0x10
[  492.980997][T21810]  ? tun_get_user+0x266c/0x3e20
[  492.985834][T21810]  tun_get_user+0x28cb/0x3e20
[  492.990504][T21810]  ? tun_get_user+0x266c/0x3e20
[  492.995343][T21810]  ? aa_file_perm+0x44d/0x1550
[  493.000091][T21810]  ? __pfx_tun_get_user+0x10/0x10
[  493.005114][T21810]  ? ref_tracker_alloc+0x318/0x460
[  493.010220][T21810]  ? __lock_acquire+0xab9/0xd20
[  493.015063][T21810]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  493.020520][T21810]  ? tun_get+0x1c/0x2f0
[  493.024664][T21810]  ? tun_get+0x1c/0x2f0
[  493.028802][T21810]  ? tun_get+0x1c/0x2f0
[  493.032945][T21810]  tun_chr_write_iter+0x113/0x200
[  493.037958][T21810]  vfs_write+0x5c9/0xb30
[  493.042192][T21810]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  493.047734][T21810]  ? __pfx_vfs_write+0x10/0x10
[  493.052493][T21810]  ? __fget_files+0x2a/0x420
[  493.057072][T21810]  ksys_write+0x145/0x250
[  493.061395][T21810]  ? __pfx_ksys_write+0x10/0x10
[  493.066237][T21810]  ? rcu_is_watching+0x15/0xb0
[  493.071002][T21810]  ? do_syscall_64+0xbe/0x3b0
[  493.075675][T21810]  do_syscall_64+0xfa/0x3b0
[  493.080283][T21810]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.085481][T21810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.091534][T21810]  ? clear_bhb_loop+0x60/0xb0
[  493.096200][T21810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.102098][T21810] RIP: 0033:0x7f3443b8ebe9
[  493.106505][T21810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.126101][T21810] RSP: 002b:00007f3444989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  493.134508][T21810] RAX: ffffffffffffffda RBX: 00007f3443dc5fa0 RCX: 00007f3443b8ebe9
[  493.142473][T21810] RDX: 000000000000004b RSI: 0000200000000340 RDI: 0000000000000004
[  493.150607][T21810] RBP: 00007f3443c11e19 R08: 0000000000000000 R09: 0000000000000000
[  493.158563][T21810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.166516][T21810] R13: 00007f3443dc6038 R14: 00007f3443dc5fa0 R15: 00007ffdaee68278
[  493.174481][T21810]  </TASK>
[  493.177751][T21810] Kernel Offset: disabled
[  493.182058][T21810] Rebooting in 86400 seconds..