last executing test programs:

15.028142411s ago: executing program 0 (id=3221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800090000000000000000001c140000fe05000100000000140012000000f1c6a81697008d68a0328c49d2ee0800010000000300"], 0x44}}, 0x0)

14.815021762s ago: executing program 0 (id=3225):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28)
unshare(0x6a040000)

14.306820682s ago: executing program 0 (id=3227):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

13.357865199s ago: executing program 0 (id=3233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x325f81, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0xfce)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x325f81, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0xfce) (async)

13.134004651s ago: executing program 0 (id=3236):
r0 = socket$inet6(0xa, 0x2, 0x3202d617) (async)
r1 = socket(0x1a, 0x803, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r4) (async)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') (async, rerun: 32)
unshare(0x6a040000) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000200)) (rerun: 64)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000a40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0xffffffffffffff00) (async, rerun: 32)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000", 0x52}], 0x1) (rerun: 32)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x10}, 0x4840) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x10, '\x00', r2, r4, 0x0, 0x1, 0x1}, 0x50) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) (async)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) (async)
accept4$x25(r4, &(0x7f0000000100)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x0) (async)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

12.673557803s ago: executing program 3 (id=3239):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c021}, 0x0)
r3 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r3, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x19fa00, {{0xa, 0x4e21, 0xc422, @mcast2, 0x3c30}}}, 0x88)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0)
unshare(0x26020480)
r4 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r4, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

12.352481981s ago: executing program 3 (id=3241):
r0 = socket$alg(0x26, 0x5, 0x0)
sendfile(r0, r0, &(0x7f0000000080)=0x10, 0x8)
r1 = socket$inet6(0xa, 0x3, 0x1)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_iostat_latency\x00', r2, 0x0, 0x8000}, 0x18)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESDEC], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)={0x1194, 0x3d, 0x2, 0x70bd26, 0x25dfdbfd, "", [@generic="94123c4969d3d6e5236c4cf38c22f4c3d53f6f9379a710a09037060811b4e0cf5dfb31149419837421635eefc9f5cdb23215f63767f7e7e525fbf24699d20da4ce749e205f4413988cf2cff3e1545b7beabd870f", @nested={0x1120, 0xda, 0x0, 0x1, [@generic="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", @generic="462d05686284ab71665ced99fea415c2e28352fca1ef5568c5b9db137ae3142157ab9cd66b0da895cc9eb8bb2f26173fe6038b8fa312b3b7833b452a2ed7d8", @nested={0x4, 0x8a}, @nested={0x4, 0x1}, @generic="27c01d091058bf1d9ca3e2e4cc43eb25fab6eabbf2bcf8cf7920e2c7401ccec801b59aaabcb42e060254a1ac4abbbc24790cb3fddf4b6a4c5ccbf39b1deb76ca84f76ac27c8d283875f90f0b9bb0c82a44cdacf809888aedaf95c2c5bc6a7450db8d9fbdb9057bf02db9caa8a94359a04160a6a2200ed647490f94b316322db08fc17d7cf7d664b2e5c045cae45787afe3fc310c77d6d9e899885f3bca867387ca18ef72827a7da7f6802811e11aaf893d55f4785be9ac9ee356e676589884f9c27d8c8e60748e901929d4906f", @typed={0x4, 0xea}, @nested={0x4, 0x101}]}, @nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x92}]}, @typed={0x8, 0x131, 0x0, 0x0, @fd}]}, 0x1194}, {&(0x7f0000001680)={0x15c, 0x32, 0x1, 0x70bd27, 0x25dfdbfc, "", [@generic="6a344389056e67b429a4c953112bca5d398619", @nested={0x138, 0xc6, 0x0, 0x1, [@nested={0x4, 0x104}, @generic="c969f0fb72540c166c991e079b18b7cd2e3f7ffbea", @nested={0x4, 0x11}, @nested={0x4, 0xd3}, @typed={0x4, 0xbe}, @generic="5b062981613f005be0180bcf3f16aaf9108846bd4dfc43432ee71d31e0e4870ccf7808026225057b372e8a54dc8b5218e7d0a2c80d94fda53623dfcd82046241b8cec52041fa690744f74a3620282d8570daf621dc7aadcf10055e1cbcbc79349fad650ef1fd0ddb07a3690105b0f4ec03f73ecadcf4a1ea8ec6888f0dd1765f9780104746b9de612348859806480a4279168bcef22e72d77323a4b6c9d4b7a5403b5535318e6080288a7089afa447b05df1959b3f170b4b395ce2f74aa2a16642d1ada695b665ccba68632fb619e7a1b3fb5162dac2d1c238691c55", @generic="3b611fbd35c273825d4682508b285bcee14e4dc20d0f49dcb688c18aaaf6d5dd5894c0b98895f7d103b0493a41db15d607079f"]}]}, 0x15c}, {&(0x7f0000001800)={0x214, 0x26, 0x100, 0x70bd2d, 0x25dfdbff, "", [@generic="803e1e08f3be80c876912044046a61581be32598665beaf09bcbf62db9d142efde7fa971eaaea00c3bf3e5945ef52a760685862d9ed628bedd025a864de7ba7aeafa4f785e4879e6c575ca583c692f7aa7f05c1f7d9368dbbea731ea295ae11887be94d74e71fdb5f0bf282bfa31dc0970ce70da79452907624dd103c667fe81c70b750c364a52552a29747a48227fd7287a5e05e47f46630f3452639f2e117ce86003a42cf4467052c76795cc336ad74b1f3c553d522a66697a723bed4d95c77ac5", @generic="c2820bf217151f3b133aef0fda34f7c44a87451d4c5f96a2949dc3fd1b87e591a3d7a27fbfa4ea43d4b887bbe3bbe401949e26e603ccb4a94682ba1ed8b2faffb3fb960623433ef0c0989b79daf610eabcfa41e7490c641f7c3ea28aec5e4ad643b7f0191d2c352d15b15bfaadbec01ce4be2953f940e2d7a223119437666bb4aaa6a1c6df657f8bc81ee9043ed6dbca772f49888d825f", @generic="535a74726082be4b36a0dee82c53309fd863bedebd04d3e1d8ac119ba2d8ca41e1678c8a2d54ade5d66d713fce11a26fa2eac9102501234e4a94f505691b32b0465fb7882f7c4417c673577b0b410151590180674caf6f6d5cfc21ba9508a4a68d7b01e9100ce29365bb9eab019b6e761f3804757dd8471f74a08e562d2a864d96d20724d7982a8d59f3c3e115fb6e4f06262dd2a1cd3356d2f3e19967bc060d", @nested={0x8, 0x34, 0x0, 0x1, [@nested={0x4, 0x45}]}]}, 0x214}, {&(0x7f00000000c0)={0x18, 0x26, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x141, 0x0, 0x0, @ipv4=@remote}]}, 0x18}], 0x4, 0x0, 0x0, 0x4041}, 0x404c840)

12.142791145s ago: executing program 0 (id=3242):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
sendto$inet6(r0, &(0x7f0000000580)="03", 0x1, 0x20000800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

11.622818097s ago: executing program 4 (id=3243):
socket(0x0, 0x7b6421ce9d814102, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
r5 = accept4(r4, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r6}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000)
socket$netlink(0x10, 0x3, 0xc) (async)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000894) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000894)
socket(0x10, 0x803, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)

11.551493325s ago: executing program 3 (id=3245):
socket$nl_route(0x10, 0x3, 0x0)

11.49468957s ago: executing program 3 (id=3246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000)="f2f4c07f01d12cd5529ca013bd32bea08d5157771639f1bf024fdd6167c6a47e5a9bb5b73b513fd75a870a20c563d5ee7b9c675fdb247566d3f5084157682b7ae21c7d3cc4d8f4a894288a4d4f2942147843e4c9846dcdc1fe400f1dc748f2a296a12844def8d42cfe6221230973451ee6d9de4c3be26a864a56c8b2e5bb", &(0x7f0000000180)=""/56}, 0x20) (async)
close(0x3) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000180), &(0x7f0000001540)=""/161}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.402871587s ago: executing program 1 (id=3247):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) (async)
write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@noop]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0xb9}}}}, 0x3a) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffd9, &(0x7f0000000180)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred]}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff03, 0x0)
bind$bt_rfcomm(r6, &(0x7f0000000240)={0x1f, @any, 0x5}, 0xa)

11.301665057s ago: executing program 3 (id=3249):
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
socket(0xa, 0x3, 0x3a) (async)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56500}, 0xfffe, {[0x5447, 0x3, 0x7, 0xc4, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000fffeffffffffaaaaaaaa730854a34500002000000000002f907800001fe1e0000001a00086dd000c907801000000"], 0x32)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x20)
sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x104, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "622d75b9a38ad83fc411418f59e9d39f0f16142486afb32bbedc54"}}, @TIPC_NLA_NODE_ID={0x97, 0x3, "e775d2a8116faa7962fa417171c060cd4becb5dd9811e0a922a6f5933f842287a6ee9f6d0037ee20976c7253b34f6a5e8e0ef95f07fc2a08c4710fa926bd8fad55fdea1a70d34b077a14a12dfe2e0e6ffdce1baff8495213e2e5e24737d63b7c3d9749a80bf1f05eff2662e31be83ca7b91bebd7386a07a3d0d69e07347a18fd88be73fdcedcc633378232f14e1a4f4c1708fd"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) (async)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a)

11.203402426s ago: executing program 4 (id=3250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

11.085431359s ago: executing program 2 (id=3252):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)

10.892663511s ago: executing program 4 (id=3253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (fail_nth: 14)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a50000001000a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003953ed0b8ba7ffd79380900010073797a30030000000900020073797a320000000014000000110001000000000000000a220c41249919eaeb2b290acf3f76d66f17b036af7bd008f6a1f98c94879384556d8fac7f19bb65"], 0x78}}, 0x0)

10.88212124s ago: executing program 1 (id=3254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05001c0012800e00010069703665727370616e0000000800028004001200080001"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20044060)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x20000090, &(0x7f0000000100)={0xa, 0x4e23, 0x40000004, @mcast1, 0x8}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

10.400754206s ago: executing program 2 (id=3255):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, 0x4}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@empty, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
unshare(0x400)
unshare(0x0) (async)
unshare(0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x45c1c3, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x25, 0x0, &(0x7f0000000900))
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xe, @loopback, 0x6}, 0x1c)

10.393383367s ago: executing program 3 (id=3256):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000002000000000000828a0100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006d000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b50300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000200000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)

10.392069142s ago: executing program 1 (id=3257):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000700)=0x1c)
read$alg(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x781f}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x1, 0xac, &(0x7f0000000280)=""/172, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x800, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x3, 0x4, 0x3, 0xb}], 0x10, 0x3ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='tcp_probe\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000004800)={0x2, 0x8, 0xf8, 0x7, 0x7, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x5, 0x5, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}}]}, 0x38}}, 0x20000080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r11)
pipe(0x0)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0e0302000014"], 0x33fe0}}, 0x8890)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073"], 0xe0}}, 0x0)

10.236346728s ago: executing program 2 (id=3258):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfc0, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x9, 0x7, "4e1baee8bfcfb76a429b95545f92220c69a041ed67948576d31a8c0bd4e690f919f0d80bd992c1c887fe835a0779d6114d8919d079dc02e699ae5b3e916f6c708bd84bc21af131c898d3e9998a967677d0d67535ac16ded6d23ad83830f20d1f1e94d9e34ecdda83bff0d4b00475047698ef581df5fe5c4ca565d504bd87be4857444b6f1bd00adda97d83f79a37c1116515411283b9b261f1356e60ce9554a46b8013b88175e9c2e619e0b43d7a766d6c045a71e1a1f3d48dc145476e489f0157f095fbc45a4dc98b99c7c733d7ffd500c65924402e02ca6aef279c0809298009a882b1d1a2053a9206d8dc9574fb149cddc07c1043250ecd1989a774be552d4cb37e76a671234d4cf0782f186275b4fffdbe7c64052ffff19028628a573591e22b4786e7f630ae9245d4f45319ffebbe46d32caf85fe4cbaef9da96b209131b5bce1f965ac8483d67357cd3ca1306d49c018c47e3ea362af47f59d3d4e5da102b8ef8bbbb90a9b3e166d858370561ea2a71fbcaead1d22179d68703fbee4790451aa61d9a3677701ba3d17a86f4014a02d7b335b06dc1dd75108f769dd2105b449baca4037e16380e135415e88cb2d91cd6b4e4e3f9344bebbe5e36bc35ad6620d1369df9944eccffb0733d87c91392f8d6974cca39de6d8a87b8ecb6942510871798635369aa99ab30ea9ecce35d3ea2c6736eb469347de18c10178e89a727873c915d0426728721c2e230290ec614073be1592d47a6b6909c8f83d043b173d744ac5a641f4771d7394a91260ddbe047c68abcd90ae87c3829e648410788d0f2b47c7b9b95cb7b607e6d752db7ce1e5b350718001b980770a5e49c109cb7e88f8a8d89435a8e5fd449b542f5f5ac64144a6561f412fdeb6ca22426c14696f0f7ab2f94e7076a5219bf870e916d032021e21243edb8a01265cf9ce8714dfcbecebf096248dcf75f1c0eb938ee054f2dc2a7f66e01f0eb49e591965346ca7eac26ab1b91c28c35235926be9596f39f2c6ba2a09673be6e951a400c5ba96c5e87d7afc8544d68046645b9f16c58c7ba8664a84fc3fe8978cdf0814dc3f4172a153fee4e9abd5087960bfcdfe7bef560776d2e4abb6c317f5e9b8649d6ba1924351d66e826fe09e060430d0fccf3cda3cdd96988af4a90c5e6645109cb33ce0e766872e394ed3cb408e9c5f33d87f25156bd0a7580bdec729d040ae5a96a709c8946429f6e3a34e0670f03977ab36becb7c47740dddc4359a7626a726ab65f13cf289cb8e4c50efc2248abf755b6bff27b5e2a7627f4dbd3194be4464907a4885eee31787d0c35f61747d2a3570b882298c05b06ed4c8ef7fbde65e29e1eb8157aacbb53a20ebbb4cca0bdf9dd58a8a4991e1275f673a4bdaf09e02aba73de83e44711b04accfb3e7a38fbca834fbab6516f8ad578b21f357986d5309f3e7922ff22114c534214b186d144972640b6f036ebe4c32283f1ac63546a238c2d6c6b8158a3bc445fab0e6f1f0eb3c1afcdac1d1bb4a3a260dc776ae80be9b66128ee2ad571ccec08e52a61174eefd6ae910cb13cebe1980e21aa9594f9dd71c73f29d8835e5779b73063a46ff63b1eb82084a3b5379bccb5d0eb80f39e8767ce64efb3fc60c1a4ed23b520d0ad0ba868923f6b95a35991efbd7b344c2ee4386d4f90e53fcaa601bdb0473387b9696400c5c2e383e5597888a43d76bd3c6eb3f3b360a2234dd45a47daeedc4583b8e893cb2c39c5122d57b4fc97117ec4d4bb13ff99ac444db76d0dddf6d75e90eebc27870eb5d659559e036d1d9449c5d44bd14c69851068fd2e45b96e5188400e1e948d96e5a7187f5e442d5e971867a7dde0cf5316d2078685bec925059a12ffba8fcc88c733f93a3ff2be4018bf1b5a6d3dfe4583bcd408f11a7542cd14e978428e1baf42c31545cb6581a31ae26512e3fdc8a63c9f7b86aef885c7b68274e19c6727b696f6de09c3bb269f0f2aa9dce527dc65a20aad5e99d696413e9e036b8b356222c92d85001c45a30a2971ea684f667718a7de793836cea3c654fa4f5c7c3abe964defa54b63fe305d5b3e7d52c3d4ad5f0936235383bd791b4c8a54a7122fd06b3529642bb0ad91724136b7ee6f37a78a44c67df6f256b12edfbd662a9b6b066ae7d6ca75ac38d0f742bba4e9e660afd5ece74ec661c3f9745576ed2cdfc3f3d539d0275639bd4da53cb76ade2cd6b9f843a0faca8e09f8fa0f55024500869568713957fdfa2a7c683ee5c4cd739913a0cfd8e443f73b31287904799eaa27e45fa51e925ccb005feed9924588b6bba11ad1541f6897e02718746f899b63aaedff922152ae1a90a4f91c10b6010f08c2b90f3aa312597eb995ae0dee7b7cb2d3e97166be5fcf765df1394a77c9ccb4139d083afa6118f16014217861b106d063284593c011366869395b4ed7b123ab648719ac372ef2a461d4cd51798c1af469410430c1e0096498fa0eeb11cc65870f945795fb1918d462b252ee4250570177032fe8100fe6afc1f57b0e91ae97db0bebaab28cdc336c80147efc1508fabc339369c240c75f0601703181e5a1109334a5f877a4819e149c19fac0604361e7f2f3bd55de428f7aa10a68d439cd58f01031accee0b50bc82143c6cfc480f50a97c987292e82476448d5724ee8b56fe69169601e0bc0a2846ea17719a0642d344296b1e9d36dbcb54ece30ec17677c22fdf4c199a7e86cd3b5aa933f107080db8199ed0864e31517bed244b9685ba96af867a6557faf6a34b91b1612b2ca47d86366502d80b5d6aaa48af6868b55aecf86afc7c11a6f19cc201fbbd03074285b51fb8de7b60ada2933610f673e5eb3e76a1b5bb19f6bc6afa5d78812469d01d7b9c8b1dca6075ebbde8c343d5681c6de1a1ee1a92056ce8a6626efba6b1de9566159cb400de0ca63b9eb52fc5ee8ed980b3cc98d25c484c8114dfa963907c0e0fe69cf6ca3552f2f86dd50a2bedf8b197247ca3b4cd0a940a980b7df0ec5385f6b081877349cfdecbf640f6bb9baf194d084b0d5ff804640e8ae5c6f6bc87953bbcb499764457df039ab68e1f7cd3ad73c8647acb45177a5af4e13433117ee119b7f3e19979212d93bf490580c9409a48c5162d14c6c1e464027e6be4802738dcaad7648a24aafba2392ad6bab6975f8f334ca7f9618960db328fa7011fef09cbf18c11a7f250fbec54c2061d13f7cfb046126210a0f7993bed17eede2ab0197c0db820a015ed214a0df120fdc03411564c203ac4dbf08cec00ff495ee6d523a066fb2b1ba66cf37b3c175c76b8ec94ded8af6027f00953c48774ccc7869dd46d91f7d9b7d2f291db220290c529e8ed075560fba85bc3981e1d9cba30315e0f22c922fea4b33706b36148f597d9690343b05ba954377f97df13e601474a46725383a46f19d4e9657b12a2032007c5badf9b442ee28f25a1a0a247bd93569a53ddae9dc25ff33dc18a018225d008a180e53483e1edea36a342d02c454e8f19ea16e038a915383d0672bb276cf63b7e904f73acb720954cf1e6b9aac4dcfc8adb89fa52eaddd42ddd4cbe41501e79e21ee9180b27902dbf8c569588b40e2621b0e84f1699b141f272865f38ad7398c1609ff6730f1b96b939b2fb6f1d4ca23ebb48bc4ef94522459ad59c6868feb9d2cd8e9ce20cd10d432ff577f91a63b93da1b496b72ac0d5929c8ad47ee7b2b3c41376234c11cf743decef54a327fa9647648a93732a5b1e478081e26172224d9e40b110e3b504119bde69225ceea6766ed018e0655b8761debb369542abefd524c7261f1c76cb61206a7a5abb06939d16d5a17b920e6434821e0e76ac72aa8b0732775952528f6988485a967f7211238d983066bbf72bbcc8029a82c7e7e1fda966f261ed97a21a9c4b9057811d297ed0ba4c030c22fc78744f8c9c47ca41b0aafda4ee751d30f44f88d22ef374629c5bfbd6dcfaa4a0b25b534b9f9b087d4ec06976ff7c2a607326567504cb1d2e9ad19e0b765bfe34c6925b72ddd129d3e301cdee9463485acf8221cd64446a88eec29ebf1bae89ff21082f83b87e172e5b88ede8c7f9c7cbb86ece8aa1c35c1263cc41212e44ec27bd9587fae074a0e82ea79db0aacd37054cab3481812bc058f8713fa6ac3bff5b7004171a807ed3a7930b4ca8c7408c4c90b5a243aa620a318daa92591df8d449bef3fc8d7dea812f7b8a1e2a01773b6927cda13bab30dda4099b29fb9958f605c6703ba9a28c174c7b26d1498c0f102eaa54a81680840f322870fcea97d1076b8c80175d335aa225ee39b0569032eeb2221915f1d359da21dc0387ac42b0d4116db6da895453c37c041c412f59bde78ed7569e2477e5e9979639d649aea892639d7998119d71c258ad2a2011b72e7b9380b878151da2ae255ebf8bc8407f411d88adcee00fb562e46a0dabb7ca423fb6bfad5fc50c6c8c3d4f0b703dfe61aa08bd2bf52ec34f36f5d4c46b38943e5f83e0f7488269fdc04326eaf05afea413594be780d0eae92a792bc6ffdb88b80d0c9f9ff98f149be28ce434bfe35ff20162de2d3f77c29215bdf6a121b5a52ec84886aae25031a4e41777df15b19d2bd25ab0a84e839c1e532a424a4c3adf4f5c07a1a5d95d0691338dba4b3fb1aee897720c668a3d582b74e556ef961b070e9d698cf7fa721939ed403cc4da2ce99e97233440288c9e460466290e7ae1fe943f3e99b6107109c765e70a9c4da8eb50e9a357d9f020eb5ec6e740fd2b3836454bad00e90af093bb9a40296877241dda2af408d044155de8e35ecf5b63793d5daf366c1080fcd38318fe4066e387b26fe3f11212f8fe6114e9dbfdb88170ba29c11d2e13a0faf9e07dd1c672d0e193927226153c6a255492d1a344f4d884be47fee3dc6db4e5145472193cca861a8a12b82f15ce23b10d2cc93d15d21d86dc26beb9d0adb7e03a1fa4788937c34ff9925686dd0da5c3c4d28c13bf1490c07ed5311f05e429cfaf5c764c9b82f0f876dfabcc0bb8bf5adcda38c69807f307f13b342827afa9359f635d018fe948b314db575b5d8984775d9b6969cb5aeedba32507bef0d67bd4bd7cea0e01530a1439f49a06afd45fb3fd2013e00edbe6dab8fb7e94f8fff070a4fb91ee573de8c30a3eb1d72d18473d4a36e08979d9bf07560c8c4c0d1dc2186e3809bf625708a529126f1dec469ad55097001c1b81963c459afeba47b03770e44bac8014d4022f194c8c5f97c7253e6bbc392bfce68388100f26f3de8e5187c802b82f63d0bc1803ff648690aa4dc39a7739dd26e882505cc9c977dd74942f1d9a691949850f1be7862f7be4c5db7a307114793df46f578d5915367d26900ec08515b3fdaf6f8f64922f7d0686b514b9dad6a2129b5e79b183eb4a6c0547d4f5be661cfb58ea53f9f29e135567276cc7b42154a3b19eeee2dd24de0640d9b51b42b2e049e00c8c07767fb8673f5918f210a72d584d8de96396fc3bab8832664531adce2b4d8c95c24f6e8bfa823d489c19e0e8deed59f0d1a7a73ece278a607738761d4e5406a8a5ed2fc18d36a9615f739e32cddc380639685008d3fdb7a39cb57e0ab96929818d2f3e569437d123ceaa32ec7d400c397564fa8c48a1b7b9"}}}}}}, 0x0)
recvmmsg(r2, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0xfffffff1}], 0x1, 0x10061, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000000), 0x0}, 0x20)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xfc0, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x9, 0x7, "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"}}}}}}, 0x0) (async)
recvmmsg(r2, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0xfffffff1}], 0x1, 0x10061, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000000), 0x0}, 0x20) (async)

10.182466104s ago: executing program 4 (id=3259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140b, 0x300, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004)
unshare(0x400)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0)

9.99195174s ago: executing program 2 (id=3260):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000400000085000000360000001801000020646c25000000000000000007010000f8ffffffb702000008000000b70300000200000085000000170000009100"/96], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x22020600)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0x9da6]}, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000040)="9bc8922f7e5cc01feb6288daca37a8dce4cb59d8a4b7198f52c84041c2473658ec4228f2399fc5e950910ab0cdaa2d3be784823a4e212dd37985e42fcea0b651a17aaaa049b720ba185ec9948d586993914fdb5e9b98efcf946a0d085dc797ce3727b77c2ad7eccbdf34fcb29519dec5414cc12ddc5ade42")
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x4, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffd, 0x100000004, 0x0, 0xa413f061fffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6, 0x7, 0x0, 0x80000002}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
epoll_create1(0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000940), 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0xbe, 0x3, 0x5, 0x10, @loopback, @mcast2, 0x10, 0x7800, 0xb, 0x6}})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r5, &(0x7f0000000240)="96", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x461e, 0x9, @loopback, 0x8}, 0x1b)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000001080))

9.954075744s ago: executing program 1 (id=3261):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x4c, 0x11, 0x1, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x3a)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804000000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

9.777866918s ago: executing program 4 (id=3262):
r0 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x2d)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7ff}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x50}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000002d41e0000000020bff88a3f01000000887dc460a1f9fb3ad3468e74cfa7dff72e260002000000850000002f0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

8.680486493s ago: executing program 2 (id=3263):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a50000001000a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003953ed0b8ba7ffd79380900010073797a30030000000900020073797a320000000014000000110001000000000000000a220c41249919eaeb2b290acf3f76d66f17b036af7bd008f6a1f98c94879384556d8fac7f19bb65"], 0x78}}, 0x0)

8.607479633s ago: executing program 4 (id=3264):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000051e6850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r0, 0x0, 0x100000}, 0x18)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x100}, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@float={0xf, 0x0, 0x0, 0x10, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @const={0xe}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x3b, 0x2}, @ptr={0x4, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x5f, 0x30]}}, &(0x7f00000005c0)=""/96, 0x5d, 0x60, 0x0, 0x6, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r6, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x2000)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000008080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x45)
sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, &(0x7f0000001140)=@sack_info={0x0, 0xef, 0x6}, 0xc)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

8.52188542s ago: executing program 1 (id=3265):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic\x00', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_getnetconf={0x1c, 0x52, 0x0, 0x71bd2d, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}]}, 0x1c}}, 0x20000050)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b", 0xd2}], 0x1}}], 0x1, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="27f670d064", 0x5}], 0x5}}], 0x1, 0x80c0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680), 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0xa7}], 0x1}}], 0x2, 0x4008)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

6.528199037s ago: executing program 2 (id=3266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaff06000000ff08004500001c000000008002907800000000e00003000000907800e400d2"], 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="23002abd7000ffdbdf2501000000000000000741000000ec001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r8}, &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

0s ago: executing program 1 (id=3267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x800)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x3, @none, 0x5, 0x2}, 0xe)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

kernel console output (not intermixed with test programs):

kaller0: entered promiscuous mode
[  339.505124][T15109] syzkaller0: entered allmulticast mode
[  339.537041][T15119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2437'.
[  339.598995][T15109] tipc: Resetting bearer <eth:syzkaller0>
[  339.623800][T15108] tipc: Resetting bearer <eth:syzkaller0>
[  339.712843][T15108] tipc: Disabling bearer <eth:syzkaller0>
[  339.803249][T15128] netlink: 'syz.2.2439': attribute type 7 has an invalid length.
[  339.838015][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'.
[  339.925608][T15132] netlink: 'syz.0.2441': attribute type 1 has an invalid length.
[  339.944432][T15128] 8021q: adding VLAN 0 to HW filter on device bond5
[  339.953219][T15128] bridge7: port 1(bond5) entered blocking state
[  339.960175][T15128] bridge7: port 1(bond5) entered disabled state
[  339.967282][T15128] bond5: entered allmulticast mode
[  339.986020][T15128] bridge7: port 1(bond5) entered blocking state
[  339.992500][T15128] bridge7: port 1(bond5) entered forwarding state
[  340.142853][T15132] 8021q: adding VLAN 0 to HW filter on device bond8
[  340.256556][T15139] 8021q: adding VLAN 0 to HW filter on device bond8
[  340.283733][T15139] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  340.311178][T15139] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  340.509708][T15142] veth3: entered promiscuous mode
[  340.542849][T15142] bond8: (slave veth3): Enslaving as an active interface with a down link
[  340.788255][T15157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.832505][T15157] syzkaller0: entered promiscuous mode
[  340.858902][T15157] syzkaller0: entered allmulticast mode
[  340.882381][T13464] bridge7: port 1(bond5) entered disabled state
[  340.979915][T15157] tipc: Resetting bearer <eth:syzkaller0>
[  341.018692][T15155] tipc: Resetting bearer <eth:syzkaller0>
[  341.128951][T15155] tipc: Disabling bearer <eth:syzkaller0>
[  341.281984][ T3482] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  341.306097][ T3482] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  341.373686][ T1111] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  341.385170][ T1111] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  341.976943][T15201] wg1 speed is unknown, defaulting to 1000
[  342.238124][T15216] netlink: 'syz.3.2464': attribute type 2 has an invalid length.
[  342.251831][T15209] syzkaller1: entered promiscuous mode
[  342.258685][T15209] syzkaller1: entered allmulticast mode
[  342.729610][T15226] netlink: 'syz.4.2469': attribute type 12 has an invalid length.
[  342.865876][T15234] wg1 speed is unknown, defaulting to 1000
[  342.975649][T15241] netlink: 'syz.3.2472': attribute type 15 has an invalid length.
[  343.452060][T15251] __nla_validate_parse: 9 callbacks suppressed
[  343.452091][T15251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2474'.
[  343.813863][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'.
[  343.884776][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'.
[  343.897610][ T8277] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.928262][ T8277] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.982866][ T8277] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.158136][ T8277] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.215014][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2477'.
[  344.436875][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'.
[  344.447404][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'.
[  344.461259][T15278] netlink: 'syz.3.2481': attribute type 2 has an invalid length.
[  344.471219][T15278] netlink: 'syz.3.2481': attribute type 8 has an invalid length.
[  344.482824][T15278] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2481'.
[  344.496371][T15278] netlink: 'syz.3.2481': attribute type 9 has an invalid length.
[  344.670513][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'.
[  344.695873][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'.
[  344.735632][T15288] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2484'.
[  344.763316][T15294] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  344.853880][T15293] wg1 speed is unknown, defaulting to 1000
[  344.897829][ T5866] Bluetooth: hci4: link tx timeout
[  344.903115][ T5866] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  344.918350][ T5183] Bluetooth: hci4: link tx timeout
[  344.923521][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  345.627282][T15323] netlink: 'syz.0.2494': attribute type 10 has an invalid length.
[  347.014230][ T5183] Bluetooth: hci4: command 0x0405 tx timeout
[  347.042758][T15364] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  347.364695][   T30] audit: type=1800 audit(1757100309.324:7): pid=15374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2507" name="memory.events" dev="tmpfs" ino=2663 res=0 errno=0
[  348.372538][T15434] netlink: 'syz.2.2525': attribute type 30 has an invalid length.
[  348.554674][T15446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  348.564445][T15453] __nla_validate_parse: 18 callbacks suppressed
[  348.564467][T15453] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2526'.
[  348.624584][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'.
[  348.655525][T15453] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  348.953566][T15470] wg1 speed is unknown, defaulting to 1000
[  349.085645][T15465] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2532'.
[  349.301079][T15486] macvlan4: entered allmulticast mode
[  349.306802][T15486] veth1_vlan: entered allmulticast mode
[  349.326546][T15486] veth1_vlan: left allmulticast mode
[  349.536037][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'.
[  349.953447][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'.
[  350.406820][T15500] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  350.575000][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'.
[  350.662500][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'.
[  350.673801][T15535] gretap3: entered promiscuous mode
[  350.710139][T15532] macvlan0: left allmulticast mode
[  350.727988][T15532] netlink: 'syz.1.2548': attribute type 1 has an invalid length.
[  350.756675][T15532] netlink: 'syz.1.2548': attribute type 2 has an invalid length.
[  350.776149][T15536] netlink: 'syz.1.2548': attribute type 1 has an invalid length.
[  350.788827][T15540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2548'.
[  350.806377][T15536] netlink: 'syz.1.2548': attribute type 2 has an invalid length.
[  350.830360][T15542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.842791][T15542] syzkaller0: entered promiscuous mode
[  350.857813][T15542] syzkaller0: entered allmulticast mode
[  350.957229][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'.
[  350.970492][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2553'.
[  351.019863][T15542] tipc: Resetting bearer <eth:syzkaller0>
[  351.199664][T15542] tipc: Disabling bearer <eth:syzkaller0>
[  352.296711][T15614] netlink: 'syz.0.2567': attribute type 1 has an invalid length.
[  352.669891][T15586] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  354.336025][T15614] 8021q: adding VLAN 0 to HW filter on device bond9
[  354.358140][T15617] bond9: (slave geneve0): making interface the new active one
[  354.367315][T15617] bond9: (slave geneve0): Enslaving as an active interface with an up link
[  354.388755][T15610] bond9: entered promiscuous mode
[  354.394052][T15610] geneve0: entered promiscuous mode
[  354.442900][T15638] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  354.456439][ T8277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.481174][ T8277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.531402][ T8277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.589976][ T8277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.733356][T15642] syzkaller0: entered promiscuous mode
[  354.742601][T15642] syzkaller0: entered allmulticast mode
[  354.791392][T15663] netlink: 'syz.0.2573': attribute type 5 has an invalid length.
[  356.755739][T15666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.762872][T15670] syzkaller0: entered promiscuous mode
[  356.787771][T15670] syzkaller0: entered allmulticast mode
[  356.855325][T15679] tipc: Resetting bearer <eth:syzkaller0>
[  356.880626][T15661] tipc: Resetting bearer <eth:syzkaller0>
[  356.919558][T15661] tipc: Disabling bearer <eth:syzkaller0>
[  357.019745][T15693] sctp: [Deprecated]: syz.3.2582 (pid 15693) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.019745][T15693] Use struct sctp_sack_info instead
[  357.071329][T15693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.091936][T15693] syzkaller0: entered promiscuous mode
[  357.103113][T15693] syzkaller0: entered allmulticast mode
[  357.182359][T15703] netlink: 'syz.4.2584': attribute type 1 has an invalid length.
[  357.273184][T15703] 8021q: adding VLAN 0 to HW filter on device bond8
[  357.344100][T15711] bond8: (slave geneve3): making interface the new active one
[  357.364665][T15711] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  357.393765][T15712] tipc: Resetting bearer <eth:syzkaller0>
[  357.401007][ T3482] bond7: (slave ip6gretap3): link status up again after 0 ms
[  357.411850][ T3482] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  357.439095][T15714] bond8: entered promiscuous mode
[  357.444940][T15714] geneve3: entered promiscuous mode
[  357.479390][ T8277] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.499029][ T8277] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.513223][ T8277] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.529139][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  357.538404][ T8277] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.637632][ T3482] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  357.773885][T15689] tipc: Resetting bearer <eth:syzkaller0>
[  357.825324][T15719] openvswitch: netlink: Message has 1 unknown bytes.
[  357.845794][T15719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.849924][T15720] __nla_validate_parse: 4 callbacks suppressed
[  357.849944][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'.
[  357.878301][T15689] tipc: Disabling bearer <eth:syzkaller0>
[  357.917760][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  358.047940][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  358.157775][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  358.185388][T15737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2593'.
[  358.217894][T15737] netlink: 'syz.1.2593': attribute type 1 has an invalid length.
[  358.294572][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  358.673881][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'.
[  359.928278][T15776] sctp: [Deprecated]: syz.2.2614 (pid 15776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.928278][T15776] Use struct sctp_sack_info instead
[  360.393477][T15788] bond2: (slave geneve2): Releasing active interface
[  360.439236][T15788] bond3: (slave gretap1): Releasing active interface
[  360.456473][T15793] netlink: 'syz.3.2608': attribute type 10 has an invalid length.
[  360.482441][T15788] bond7: left allmulticast mode
[  360.492543][T15788] bridge5: port 1(bond7) entered disabled state
[  360.505752][T15788] batman_adv: batadv0: Interface deactivated: gretap3
[  360.520215][T15788] batman_adv: batadv0: Removing interface: gretap3
[  360.535311][T15788] bond8: (slave veth3): Releasing active interface
[  360.557179][T15788] bond9: (slave geneve0): Releasing active interface
[  360.572532][T15796] netlink: 'syz.4.2609': attribute type 21 has an invalid length.
[  360.581876][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'.
[  360.590794][T15798] netlink: 'syz.1.2610': attribute type 1 has an invalid length.
[  360.592016][T15788] geneve0: left promiscuous mode
[  360.599561][T15798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2610'.
[  360.631662][T15793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  360.647086][ T8277] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.668365][ T8277] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.693857][ T8277] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.713192][ T8277] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.847890][T15806] netlink: 'syz.4.2612': attribute type 7 has an invalid length.
[  360.864846][T15809] netlink: 'syz.3.2615': attribute type 5 has an invalid length.
[  360.874263][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'.
[  360.918524][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'.
[  360.959763][T15814] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2616'.
[  360.982151][T15812] 8021q: adding VLAN 0 to HW filter on device bond9
[  361.012296][T15814] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2616'.
[  361.055173][T15812] bridge4: port 1(bond9) entered blocking state
[  361.064359][T15822] netlink: 'syz.2.2616': attribute type 15 has an invalid length.
[  361.093237][T15812] bridge4: port 1(bond9) entered disabled state
[  361.104008][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2616'.
[  361.131216][T15812] bond9: entered allmulticast mode
[  361.155444][T15812] bridge4: port 1(bond9) entered blocking state
[  361.162118][T15812] bridge4: port 1(bond9) entered forwarding state
[  361.370568][T13464] bridge4: port 1(bond9) entered disabled state
[  361.792680][T15841] netlink: 'syz.2.2624': attribute type 24 has an invalid length.
[  361.805969][T15841] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  361.820936][T15841] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  361.845152][T15846] netlink: 'syz.4.2625': attribute type 3 has an invalid length.
[  361.999966][T15850] sctp: [Deprecated]: syz.2.2627 (pid 15850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  361.999966][T15850] Use struct sctp_sack_info instead
[  362.417620][ T3482] net_ratelimit: 26 callbacks suppressed
[  362.417641][ T3482] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  362.569640][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  362.643941][T15871] vlan2: entered promiscuous mode
[  362.674588][T15871] bridge0: entered promiscuous mode
[  362.734965][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  362.938567][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  363.061740][T15882] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  363.192571][T15880] syzkaller0: entered promiscuous mode
[  363.198334][T15880] syzkaller0: entered allmulticast mode
[  363.335444][T15895] __nla_validate_parse: 3 callbacks suppressed
[  363.335467][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'.
[  363.397886][T15899] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2637'.
[  363.421058][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'.
[  365.428767][T15909] netlink: 'syz.3.2640': attribute type 1 has an invalid length.
[  365.448677][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  365.482941][T15899] wg1 speed is unknown, defaulting to 1000
[  365.598469][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  365.785635][T15924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2643'.
[  365.817119][T15918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2643'.
[  365.901097][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'.
[  365.939179][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  366.060086][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  366.193716][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  366.212488][T15942] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  366.246175][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  366.344590][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  366.365248][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2652'.
[  366.410991][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2652'.
[  366.451685][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2653'.
[  367.039999][T15981] wg1 speed is unknown, defaulting to 1000
[  367.445172][ T8277] net_ratelimit: 5 callbacks suppressed
[  367.445194][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  367.919359][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  368.138993][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  368.204512][T16040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.317957][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  368.434115][T16052] __nla_validate_parse: 6 callbacks suppressed
[  368.434135][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'.
[  368.472899][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  368.566654][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'.
[  368.619198][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  368.760061][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  368.792751][T16068] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  368.834905][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'.
[  368.899380][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'.
[  368.911065][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  369.224910][T16085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.261065][T16085] syzkaller0: entered promiscuous mode
[  369.287130][T16085] syzkaller0: entered allmulticast mode
[  369.408980][T16084] tipc: Resetting bearer <eth:syzkaller0>
[  369.486411][T16084] tipc: Disabling bearer <eth:syzkaller0>
[  369.744015][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'.
[  369.772280][T16109] netlink: 'syz.3.2692': attribute type 1 has an invalid length.
[  369.781047][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'.
[  369.826532][T16109] 8021q: adding VLAN 0 to HW filter on device bond8
[  369.833951][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'.
[  369.874508][T16114] wg1 speed is unknown, defaulting to 1000
[  370.025696][T16119] wg1 speed is unknown, defaulting to 1000
[  370.469100][T16144] wg1 speed is unknown, defaulting to 1000
[  371.528139][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2710'.
[  371.576251][T16175] macvlan4: entered allmulticast mode
[  371.587813][T16175] veth1_vlan: entered allmulticast mode
[  371.649738][T16175] veth1_vlan: left allmulticast mode
[  371.814978][T16185] netlink: 'syz.4.2711': attribute type 1 has an invalid length.
[  371.843120][T16185] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2711'.
[  372.073794][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'.
[  372.083244][T16191] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  372.328151][T16209] netlink: 'syz.2.2712': attribute type 10 has an invalid length.
[  372.379445][T16201] bond5: left allmulticast mode
[  372.384508][T16201] bridge7: port 1(bond5) entered disabled state
[  372.456008][T16209] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  372.474811][T16209] �: (slave wlan1): refused to change device type
[  372.555238][T16212] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  372.641509][ T1088] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  372.663419][ T1088] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  372.672280][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  372.765074][ T1088] net_ratelimit: 18 callbacks suppressed
[  372.765097][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  372.902418][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  372.925376][T16236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.103379][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  373.238097][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  373.331742][T16251] netlink: 'syz.3.2730': attribute type 2 has an invalid length.
[  373.360204][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  373.408645][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  373.469030][T16263] wg1 speed is unknown, defaulting to 1000
[  373.489516][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  373.647941][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  373.659453][T16269] __nla_validate_parse: 5 callbacks suppressed
[  373.659474][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'.
[  373.758553][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  373.879216][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  374.192748][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  374.280614][T16286] wg1 speed is unknown, defaulting to 1000
[  374.380795][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'.
[  374.759450][T16310] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2747'.
[  374.784421][T16306] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2746'.
[  374.912949][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'.
[  375.024181][T16322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.050208][T16324] netlink: 'syz.4.2750': attribute type 1 has an invalid length.
[  375.059385][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'.
[  375.069817][T16329] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2753'.
[  375.244320][T16336] wg1 speed is unknown, defaulting to 1000
[  375.274258][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'.
[  375.292549][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'.
[  375.306148][T16322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.349485][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2757'.
[  375.433118][T16322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.554867][T16322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.716162][T16367] netlink: 'syz.4.2761': attribute type 5 has an invalid length.
[  375.794232][T16361] syzkaller1: entered promiscuous mode
[  375.811078][T16361] syzkaller1: entered allmulticast mode
[  375.856285][ T1111] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.947924][ T1111] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.976588][T13464] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.039747][ T1111] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.527663][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  376.885304][T16415] netlink: 'syz.4.2774': attribute type 5 has an invalid length.
[  376.935072][T16415] geneve4: entered promiscuous mode
[  376.945321][T16415] geneve4: entered allmulticast mode
[  376.963351][ T8277] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  376.990654][ T8277] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  377.019873][ T8277] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  377.047321][ T8277] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  377.309011][T16433] vlan3: entered promiscuous mode
[  377.314129][T16433] bond0: entered promiscuous mode
[  377.341312][T16433] vlan3: entered allmulticast mode
[  377.350977][T16433] bond0: entered allmulticast mode
[  377.769420][ T1111] net_ratelimit: 20 callbacks suppressed
[  377.769444][ T1111] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  377.924259][T16463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.963843][T16463] syzkaller0: entered promiscuous mode
[  377.992587][T16463] syzkaller0: entered allmulticast mode
[  378.061323][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  378.190196][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  378.287025][T16482] wg1 speed is unknown, defaulting to 1000
[  378.388701][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  378.577880][ T1111] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  378.699150][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  378.779355][T16462] tipc: Resetting bearer <eth:syzkaller0>
[  378.827215][T16462] tipc: Disabling bearer <eth:syzkaller0>
[  378.872011][T16497] syz_tun: entered allmulticast mode
[  378.930509][T16497] dvmrp8: entered allmulticast mode
[  378.936009][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.972533][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  379.052416][T16497] wg1 speed is unknown, defaulting to 1000
[  379.138686][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  379.177897][T16496] syz_tun: left allmulticast mode
[  379.183661][T16496] dvmrp8: left allmulticast mode
[  379.331029][T16511] pimreg3: entered allmulticast mode
[  379.358898][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  379.567113][T16522] __nla_validate_parse: 17 callbacks suppressed
[  379.567137][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'.
[  379.657281][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  379.673401][T16525] netlink: 'syz.1.2806': attribute type 5 has an invalid length.
[  379.699488][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2806'.
[  379.776835][T16525] geneve4: entered promiscuous mode
[  379.794669][T16525] geneve4: entered allmulticast mode
[  379.818358][ T1088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  379.845120][ T1088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  380.318830][ T1088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  380.339063][ T1088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  380.477118][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'.
[  380.505938][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'.
[  380.662826][T16556] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2800'.
[  380.914495][T16563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.952310][T16569] syzkaller0: entered promiscuous mode
[  380.959293][T16569] syzkaller0: entered allmulticast mode
[  381.385807][T16594] wg1 speed is unknown, defaulting to 1000
[  381.428482][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'.
[  381.447075][T16593] netlink: 'syz.2.2821': attribute type 5 has an invalid length.
[  381.483930][T16593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2821'.
[  381.524384][T16593] geneve3: entered promiscuous mode
[  381.531854][T16593] geneve3: entered allmulticast mode
[  381.539003][ T8277] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  381.660172][T16562] tipc: Resetting bearer <eth:syzkaller0>
[  381.714813][T16562] tipc: Disabling bearer <eth:syzkaller0>
[  381.751236][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  381.760104][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  381.774071][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  382.059410][T16617] wg1 speed is unknown, defaulting to 1000
[  382.456631][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2834'.
[  382.967971][   T59] net_ratelimit: 20 callbacks suppressed
[  382.968040][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  383.134819][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  383.209696][T16672] lo speed is unknown, defaulting to 1000
[  383.215920][T16672] lo speed is unknown, defaulting to 1000
[  383.228355][T16672] lo speed is unknown, defaulting to 1000
[  383.255679][T16672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  383.264533][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  383.414200][T16674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.422353][T16674] syzkaller0: entered promiscuous mode
[  383.429281][T16674] syzkaller0: entered allmulticast mode
[  383.438969][T16672] lo speed is unknown, defaulting to 1000
[  383.442303][ T1111] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  383.482351][T16672] lo speed is unknown, defaulting to 1000
[  383.503669][T16672] lo speed is unknown, defaulting to 1000
[  383.536280][T16672] lo speed is unknown, defaulting to 1000
[  383.559504][T16672] lo speed is unknown, defaulting to 1000
[  383.600865][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  383.679309][T16673] tipc: Resetting bearer <eth:syzkaller0>
[  383.756928][T16673] tipc: Disabling bearer <eth:syzkaller0>
[  383.807613][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  383.850497][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'.
[  383.893831][T16701] netlink: 'syz.1.2852': attribute type 1 has an invalid length.
[  384.073293][T16701] 8021q: adding VLAN 0 to HW filter on device bond11
[  384.108752][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  384.279750][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  384.330386][T16721] netlink: 'syz.4.2856': attribute type 1 has an invalid length.
[  384.438851][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  384.508793][T16721] bond10: (slave gretap3): making interface the new active one
[  384.527935][T16721] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  384.602773][T16721] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  384.627725][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  384.687675][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  384.799056][   T10] IPVS: starting estimator thread 0...
[  384.831567][T16734] netlink: 'syz.3.2862': attribute type 1 has an invalid length.
[  384.917893][T16737] IPVS: using max 25 ests per chain, 60000 per kthread
[  385.078610][T16745] __nla_validate_parse: 2 callbacks suppressed
[  385.078632][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  385.123024][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  385.276598][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'.
[  385.456543][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'.
[  385.466771][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  385.481659][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  385.499301][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  385.522505][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  385.532876][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  385.567077][T16752] macvlan1 (unregistering): left allmulticast mode
[  385.733217][ T5870] bond0: (slave syz_tun): Releasing backup interface
[  385.778576][T16763] syzkaller1: entered promiscuous mode
[  385.784665][T16763] syzkaller1: entered allmulticast mode
[  385.926526][T16759] wg1 speed is unknown, defaulting to 1000
[  385.959827][T16759] lo speed is unknown, defaulting to 1000
[  386.017164][T16772] 8021q: VLANs not supported on lo
[  386.023050][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'.
[  386.058916][T16774] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2871'.
[  386.381095][T16791] netlink: 676 bytes leftover after parsing attributes in process `syz.3.2875'.
[  386.402265][T16791] netlink: 676 bytes leftover after parsing attributes in process `syz.3.2875'.
[  386.512673][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'.
[  386.517988][T16759] chnl_net:caif_netlink_parms(): no params data found
[  386.808746][T16759] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.834796][T16759] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.852959][T16759] bridge_slave_0: entered allmulticast mode
[  386.864247][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'.
[  386.872323][T16759] bridge_slave_0: entered promiscuous mode
[  386.898396][T16759] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.915465][T16759] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.935463][T16759] bridge_slave_1: entered allmulticast mode
[  386.962739][T16759] bridge_slave_1: entered promiscuous mode
[  387.068136][T16805] wg1 speed is unknown, defaulting to 1000
[  387.076479][T16805] lo speed is unknown, defaulting to 1000
[  387.131889][T16759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.178186][T16759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.321920][T16759] team0: Port device team_slave_0 added
[  387.342844][T16759] team0: Port device team_slave_1 added
[  387.510923][T16827] netlink: 'syz.4.2884': attribute type 10 has an invalid length.
[  387.551941][T16759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.560029][T16759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.577119][ T5866] Bluetooth: hci2: command tx timeout
[  387.592535][T16759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.617272][T16759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.624987][T16759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.652747][T16759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.776163][T16759] hsr_slave_0: entered promiscuous mode
[  387.783668][T16759] hsr_slave_1: entered promiscuous mode
[  387.790974][T16759] debugfs: 'hsr0' already exists in 'hsr'
[  387.797106][T16759] Cannot create hsr debugfs directory
[  387.910172][T16840] wg1 speed is unknown, defaulting to 1000
[  387.952573][T16840] lo speed is unknown, defaulting to 1000
[  388.162302][T13464] net_ratelimit: 13 callbacks suppressed
[  388.162323][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  388.851561][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  389.035033][T16759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.047136][T16759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  389.211949][T16759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.231774][T16759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  389.278707][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  389.330255][T16864] wg1 speed is unknown, defaulting to 1000
[  389.460507][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  389.464394][T16864] lo speed is unknown, defaulting to 1000
[  389.523593][T16759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.537219][T16759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  389.576383][T16887] wg1 speed is unknown, defaulting to 1000
[  389.577708][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  389.612803][T16887] lo speed is unknown, defaulting to 1000
[  389.648257][ T5866] Bluetooth: hci2: command tx timeout
[  389.727744][T16759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.738844][T16759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  390.186251][T16907] __nla_validate_parse: 5 callbacks suppressed
[  390.186274][T16907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2903'.
[  390.238652][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  390.410358][ T1111] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  390.455035][T16759] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  390.504555][T16759] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  390.580707][T16759] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  390.622315][T16759] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  390.810234][T16932] netlink: 'syz.3.2908': attribute type 3 has an invalid length.
[  390.924691][T16759] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.134838][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2911'.
[  391.159128][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2911'.
[  391.200613][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'.
[  391.485917][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'.
[  391.495679][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'.
[  391.654258][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  391.730117][ T5866] Bluetooth: hci2: command tx timeout
[  391.821761][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2919'.
[  391.852647][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2919'.
[  391.862337][T16759] 8021q: adding VLAN 0 to HW filter on device team0
[  391.903361][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.910691][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.960470][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.968249][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.039904][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  392.096114][T16981] netlink: 'syz.4.2922': attribute type 2 has an invalid length.
[  392.119633][T16981] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2922'.
[  392.170800][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  392.485746][T16995] netlink: 'syz.4.2925': attribute type 1 has an invalid length.
[  392.527915][T16995] 8021q: adding VLAN 0 to HW filter on device bond11
[  392.542437][T16759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.662355][T16759] veth0_vlan: entered promiscuous mode
[  392.686669][T16759] veth1_vlan: entered promiscuous mode
[  392.756508][T16759] veth0_macvtap: entered promiscuous mode
[  392.774036][T16759] veth1_macvtap: entered promiscuous mode
[  392.797371][T17003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2928'.
[  392.806427][T16759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.828939][T16759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.869656][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.891706][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.903012][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.915156][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.972848][T16988] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  392.980843][T16988] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  393.002857][T16988] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  393.012448][T16988] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  393.032198][T16988] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  393.042894][T16988] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  393.080253][T16988] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  393.086565][T16988] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  393.216652][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.225186][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.240257][T17009] xt_limit: Overflow, try lower: 604147548/4200216962
[  393.330176][ T8277] net_ratelimit: 7 callbacks suppressed
[  393.330196][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  393.366126][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.376102][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.458446][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  393.609499][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  393.769540][ T1111] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.001762][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.318262][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.499133][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.609538][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.723829][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.841166][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  394.858961][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  394.872412][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  394.885313][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  394.892974][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  394.904130][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  394.965531][T17055] wg1 speed is unknown, defaulting to 1000
[  395.014128][ T1111] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.054220][ T1111] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  395.135364][T17055] lo speed is unknown, defaulting to 1000
[  395.201424][ T1111] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.229299][ T1111] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  395.274147][T17045] netlink: 'syz.0.2940': attribute type 1 has an invalid length.
[  395.282228][T17045] netlink: 'syz.0.2940': attribute type 1 has an invalid length.
[  395.290409][T17045] __nla_validate_parse: 3 callbacks suppressed
[  395.290430][T17045] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2940'.
[  395.341618][T17059] wg1 speed is unknown, defaulting to 1000
[  395.351199][ T1111] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.377735][ T1111] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  395.422901][T17059] lo speed is unknown, defaulting to 1000
[  395.516701][ T1111] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.560248][ T1111] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  395.641047][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'.
[  395.656393][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'.
[  395.790227][T17080] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2949'.
[  395.972774][T17085] veth1_to_bond: entered allmulticast mode
[  396.037899][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'.
[  396.061887][T17088] wg1 speed is unknown, defaulting to 1000
[  396.122103][T17085] bond0: (slave bond_slave_1): Releasing backup interface
[  396.202429][T17085] veth1_to_bond (unregistering): left allmulticast mode
[  396.258323][T17088] lo speed is unknown, defaulting to 1000
[  396.369506][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'.
[  396.393785][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'.
[  396.470223][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2959'.
[  396.946369][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'.
[  397.010606][ T5866] Bluetooth: hci4: command tx timeout
[  397.542213][ T1111] � (unregistering): Released all slaves
[  397.672467][ T1111] bond1 (unregistering): Released all slaves
[  397.794289][ T1111] bond2 (unregistering): Released all slaves
[  397.919830][ T1111] bond0 (unregistering): Released all slaves
[  398.061872][ T1111] bond3 (unregistering): Released all slaves
[  398.201172][ T1111] bond4 (unregistering): Released all slaves
[  398.341377][ T1111] bond5 (unregistering): Released all slaves
[  398.412431][   T12] net_ratelimit: 5 callbacks suppressed
[  398.412454][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  398.600742][ T1111] : left promiscuous mode
[  398.673431][T17059] chnl_net:caif_netlink_parms(): no params data found
[  398.822274][ T1111] tipc: Left network mode
[  399.062570][T17147] netlink: 'syz.4.2964': attribute type 10 has an invalid length.
[  399.086925][T17149] IPVS: length: 141 != 8
[  399.093989][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  399.102686][ T5866] Bluetooth: hci4: command tx timeout
[  399.163093][T17143] tipc: Started in network mode
[  399.175203][T17143] tipc: Node identity b21b0da0ddb7, cluster identity 4711
[  399.183514][T17143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.317381][T17148] syzkaller0: entered promiscuous mode
[  399.323187][T17148] syzkaller0: entered allmulticast mode
[  399.359626][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  399.460038][T17059] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.478106][T17059] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.485708][T17059] bridge_slave_0: entered allmulticast mode
[  399.501212][T17059] bridge_slave_0: entered promiscuous mode
[  399.520251][T17148] tipc: Resetting bearer <eth:syzkaller0>
[  399.586809][T17161] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2968'.
[  399.632801][T17059] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.661132][T17059] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.681730][T17059] bridge_slave_1: entered allmulticast mode
[  399.725984][T17059] bridge_slave_1: entered promiscuous mode
[  399.751534][T17141] tipc: Resetting bearer <eth:syzkaller0>
[  399.794552][T17141] tipc: Disabling bearer <eth:syzkaller0>
[  399.829008][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  399.873103][T17169] netlink: 'syz.3.2970': attribute type 2 has an invalid length.
[  400.045091][T17059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.056054][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  400.171801][T17059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.414679][ T1111] hsr_slave_0: left promiscuous mode
[  400.439617][ T1111] hsr_slave_1: left promiscuous mode
[  400.527412][T17182] __nla_validate_parse: 3 callbacks suppressed
[  400.573947][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'.
[  400.973195][T17179] syz.3.2974: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  400.995542][T17179] CPU: 0 UID: 0 PID: 17179 Comm: syz.3.2974 Not tainted syzkaller #0 PREEMPT(full) 
[  400.995570][T17179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  400.995583][T17179] Call Trace:
[  400.995591][T17179]  <TASK>
[  400.995600][T17179]  dump_stack_lvl+0x189/0x250
[  400.995632][T17179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.995654][T17179]  ? __pfx__printk+0x10/0x10
[  400.995681][T17179]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  400.995705][T17179]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  400.995729][T17179]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  400.995754][T17179]  warn_alloc+0x214/0x310
[  400.995792][T17179]  ? __pfx_warn_alloc+0x10/0x10
[  400.995830][T17179]  ? __get_vm_area_node+0x28f/0x300
[  400.995858][T17179]  ? packet_set_ring+0x6f4/0x2350
[  400.995891][T17179]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  400.995954][T17179]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  400.995985][T17179]  ? alloc_pages_mpol+0x3cd/0x4a0
[  400.996016][T17179]  ? packet_set_ring+0x6f4/0x2350
[  400.996042][T17179]  vzalloc_noprof+0xb2/0xf0
[  400.996069][T17179]  ? packet_set_ring+0x6f4/0x2350
[  400.996097][T17179]  packet_set_ring+0x6f4/0x2350
[  400.996147][T17179]  ? __pfx_packet_set_ring+0x10/0x10
[  400.996196][T17179]  ? _copy_from_user+0x94/0xb0
[  400.996234][T17179]  packet_setsockopt+0xc5a/0x12c0
[  400.996265][T17179]  ? __pfx_packet_setsockopt+0x10/0x10
[  400.996299][T17179]  ? __lock_acquire+0xab9/0xd20
[  400.996336][T17179]  ? aa_sk_perm+0x81e/0x950
[  400.996372][T17179]  ? __pfx_aa_sk_perm+0x10/0x10
[  400.996402][T17179]  ? __fget_files+0x2a/0x420
[  400.996418][T17179]  ? aa_sock_opt_perm+0xff/0x1b0
[  400.996442][T17179]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  400.996463][T17179]  ? __pfx_packet_setsockopt+0x10/0x10
[  400.996489][T17179]  do_sock_setsockopt+0x179/0x1b0
[  400.996516][T17179]  __x64_sys_setsockopt+0x13f/0x1b0
[  400.996544][T17179]  do_syscall_64+0xfa/0x3b0
[  400.996564][T17179]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.996583][T17179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.996602][T17179]  ? clear_bhb_loop+0x60/0xb0
[  400.996624][T17179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.996643][T17179] RIP: 0033:0x7fc38278ebe9
[  400.996663][T17179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.996680][T17179] RSP: 002b:00007fc3836bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  400.996703][T17179] RAX: ffffffffffffffda RBX: 00007fc3829c5fa0 RCX: 00007fc38278ebe9
[  400.996718][T17179] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
[  400.996731][T17179] RBP: 00007fc382811e19 R08: 000000000000001c R09: 0000000000000000
[  400.996744][T17179] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  400.996756][T17179] R13: 00007fc3829c6038 R14: 00007fc3829c5fa0 R15: 00007ffe6bc73a58
[  400.996793][T17179]  </TASK>
[  400.996801][T17179] Mem-Info:
[  401.172869][ T5866] Bluetooth: hci4: command tx timeout
[  401.183964][T17179] active_anon:3702 inactive_anon:0 isolated_anon:0
[  401.183964][T17179]  active_file:3488 inactive_file:39974 isolated_file:0
[  401.183964][T17179]  unevictable:768 dirty:185 writeback:0
[  401.183964][T17179]  slab_reclaimable:12844 slab_unreclaimable:120153
[  401.183964][T17179]  mapped:31363 shmem:1354 pagetables:991
[  401.183964][T17179]  sec_pagetables:0 bounce:0
[  401.183964][T17179]  kernel_misc_reclaimable:0
[  401.183964][T17179]  free:1284803 free_pcp:17095 free_cma:0
[  401.342832][T17179] Node 0 active_anon:14744kB inactive_anon:0kB active_file:13952kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125548kB dirty:740kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13392kB pagetables:3848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  401.375073][T17179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  401.410734][T17179] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  401.441313][T17179] lowmem_reserve[]: 0 2497 2499 2499 2499
[  401.447364][T17179] Node 0 DMA32 free:1226652kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14700kB inactive_anon:0kB active_file:13952kB inactive_file:158116kB unevictable:1536kB writepending:736kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:51316kB local_pcp:22612kB free_cma:0kB
[  401.490217][T17179] lowmem_reserve[]: 0 0 1 1 1
[  401.495116][T17179] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  401.525254][T17179] lowmem_reserve[]: 0 0 0 0 0
[  401.530128][T17179] Node 1 Normal free:3897156kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17428kB local_pcp:9844kB free_cma:0kB
[  401.561664][T17179] lowmem_reserve[]: 0 0 0 0 0
[  401.566521][T17179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  401.580415][T17179] Node 0 DMA32: 61*4kB (UME) 145*8kB (UM) 120*16kB (M) 63*32kB (M) 107*64kB (UME) 64*128kB (M) 26*256kB (ME) 11*512kB (UME) 28*1024kB (UM) 1*2048kB (U) 284*4096kB (UM) = 1226652kB
[  401.603703][T17179] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  401.616666][T17179] Node 1 Normal: 125*4kB (UE) 50*8kB (UME) 48*16kB (UME) 82*32kB (UME) 24*64kB (UME) 11*128kB (UME) 3*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3897156kB
[  401.636155][T17179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  401.646317][T17179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  401.656227][T17179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  401.666251][T17179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  401.675838][T17179] 44813 total pagecache pages
[  401.680829][T17179] 0 pages in swap cache
[  401.685039][T17179] Free swap  = 124996kB
[  401.689467][T17179] Total swap = 124996kB
[  401.693766][T17179] 2097051 pages RAM
[  401.698005][T17179] 0 pages HighMem/MovableOnly
[  401.703377][T17179] 425673 pages reserved
[  401.720572][T17179] 0 pages cma reserved
[  402.115038][T17059] team0: Port device team_slave_0 added
[  402.129571][T17059] team0: Port device team_slave_1 added
[  402.380476][T17059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.407808][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.487894][T17059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.520665][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  402.548074][T17059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.580692][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.654514][T17059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.689447][   T49] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  402.703187][T17221] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  402.859534][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  402.922694][T17059] hsr_slave_0: entered promiscuous mode
[  402.937286][T17228] netlink: 'syz.4.2988': attribute type 13 has an invalid length.
[  402.950732][T17059] hsr_slave_1: entered promiscuous mode
[  402.957370][T17059] debugfs: 'hsr0' already exists in 'hsr'
[  402.966781][T17228] netlink: 'syz.4.2988': attribute type 17 has an invalid length.
[  402.981029][T17059] Cannot create hsr debugfs directory
[  403.057275][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'.
[  403.129420][T17228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.185786][ T1111] IPVS: stop unused estimator thread 0...
[  403.249407][ T5866] Bluetooth: hci4: command tx timeout
[  403.290595][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  403.368795][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  403.375377][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  403.382045][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.389925][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.398077][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.406015][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.414112][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.422064][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.430093][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.438401][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.446430][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.454489][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.462561][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.470521][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.478515][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.486481][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.494540][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  403.502414][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  403.543317][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  403.614065][T17231] wg1 speed is unknown, defaulting to 1000
[  403.644506][T17231] lo speed is unknown, defaulting to 1000
[  403.687122][T17239] wg1 speed is unknown, defaulting to 1000
[  403.712834][T17247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'.
[  403.732658][T17247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'.
[  403.744025][T17239] lo speed is unknown, defaulting to 1000
[  403.757844][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  403.766840][T17245] wg1 speed is unknown, defaulting to 1000
[  403.861184][T17245] lo speed is unknown, defaulting to 1000
[  404.209911][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  404.540306][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  404.689009][   T59] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  404.849426][T17279] wg1 speed is unknown, defaulting to 1000
[  404.861892][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  404.897125][T17279] lo speed is unknown, defaulting to 1000
[  405.099250][T17296] bond0: (slave gretap0): Error: Device type is different from other slaves
[  405.214561][T17301] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3003'.
[  405.364051][T17309] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  405.412471][T17309] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  405.495768][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  405.625098][T17059] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  405.691808][T17059] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  405.742031][T17330] netlink: 'syz.1.3011': attribute type 13 has an invalid length.
[  405.764377][T17059] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  405.773113][T17330] netlink: 'syz.1.3011': attribute type 17 has an invalid length.
[  405.986733][T17330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.012600][T17059] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  406.125773][T17326] wg1 speed is unknown, defaulting to 1000
[  406.158412][T17326] lo speed is unknown, defaulting to 1000
[  406.162375][T13464] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  406.413097][T17363] netlink: 'syz.3.3015': attribute type 1 has an invalid length.
[  406.503555][T17367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3018'.
[  406.899442][T17059] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.930092][T17388] syz_tun: entered promiscuous mode
[  406.946996][T17388] syz_tun: entered allmulticast mode
[  407.003246][T17059] 8021q: adding VLAN 0 to HW filter on device team0
[  407.069858][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.077325][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.139009][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.146261][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.177340][T17399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3027'.
[  407.218098][T17399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3027'.
[  407.620632][T17059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  408.034340][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'.
[  408.089513][T17390] netlink: 'syz.4.3024': attribute type 1 has an invalid length.
[  408.097494][T17390] netlink: 'syz.4.3024': attribute type 1 has an invalid length.
[  408.105666][T17390] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3024'.
[  408.217028][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'.
[  408.220440][T17059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.415853][T17059] veth0_vlan: entered promiscuous mode
[  408.435034][T17059] veth1_vlan: entered promiscuous mode
[  408.514873][T17059] veth0_macvtap: entered promiscuous mode
[  408.529049][T17059] veth1_macvtap: entered promiscuous mode
[  408.585667][T17059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.614638][T17059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.644387][ T1111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.670145][ T1111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.716827][ T1111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.738615][ T1111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.850027][   T12] net_ratelimit: 10 callbacks suppressed
[  408.850048][   T12] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  409.001082][ T3482] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  409.012460][T13464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.024724][T13464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.064865][T17462] syz_tun: entered allmulticast mode
[  409.101225][T17462] dvmrp8: entered allmulticast mode
[  409.130227][T17461] syz_tun: left allmulticast mode
[  409.175596][T17461] dvmrp8: left allmulticast mode
[  409.258371][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.280863][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  409.281281][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.303619][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'.
[  409.428319][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  409.528171][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'.
[  409.559365][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  409.631522][T17477] wg1 speed is unknown, defaulting to 1000
[  409.650036][T17477] lo speed is unknown, defaulting to 1000
[  409.736807][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'.
[  409.756018][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  409.785726][T17485] bridge_slave_1: left allmulticast mode
[  409.798622][T17485] bridge_slave_1: left promiscuous mode
[  409.806692][T17485] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.823074][T17485] bridge_slave_0: left allmulticast mode
[  409.831602][T17485] bridge_slave_0: left promiscuous mode
[  409.839170][T17485] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.873451][T17493] netlink: 'syz.0.3048': attribute type 9 has an invalid length.
[  409.882745][T17493] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3048'.
[  410.188279][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  410.420816][ T8277] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  410.715623][T17515] FAULT_INJECTION: forcing a failure.
[  410.715623][T17515] name failslab, interval 1, probability 0, space 0, times 0
[  410.733910][T17515] CPU: 0 UID: 0 PID: 17515 Comm: syz.4.3054 Not tainted syzkaller #0 PREEMPT(full) 
[  410.733940][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  410.733951][T17515] Call Trace:
[  410.733959][T17515]  <TASK>
[  410.733968][T17515]  dump_stack_lvl+0x189/0x250
[  410.733996][T17515]  ? __pfx____ratelimit+0x10/0x10
[  410.734024][T17515]  ? __pfx_dump_stack_lvl+0x10/0x10
[  410.734046][T17515]  ? __pfx__printk+0x10/0x10
[  410.734073][T17515]  ? __lock_acquire+0xab9/0xd20
[  410.734113][T17515]  should_fail_ex+0x414/0x560
[  410.734145][T17515]  should_failslab+0xa8/0x100
[  410.734175][T17515]  kmem_cache_alloc_noprof+0x73/0x3c0
[  410.734200][T17515]  ? skb_clone+0x212/0x3a0
[  410.734229][T17515]  skb_clone+0x212/0x3a0
[  410.734257][T17515]  __netlink_deliver_tap+0x404/0x850
[  410.734292][T17515]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.734315][T17515]  netlink_deliver_tap+0x19c/0x1b0
[  410.734337][T17515]  netlink_unicast+0x7fa/0x9e0
[  410.734376][T17515]  ? __pfx_netlink_unicast+0x10/0x10
[  410.734407][T17515]  ? netlink_sendmsg+0x642/0xb30
[  410.734424][T17515]  ? skb_put+0x11b/0x210
[  410.734450][T17515]  netlink_sendmsg+0x805/0xb30
[  410.734482][T17515]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.734506][T17515]  ? aa_sock_msg_perm+0xf1/0x1d0
[  410.734528][T17515]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  410.734549][T17515]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.734571][T17515]  __sock_sendmsg+0x21c/0x270
[  410.734603][T17515]  ____sys_sendmsg+0x505/0x830
[  410.734633][T17515]  ? __pfx_____sys_sendmsg+0x10/0x10
[  410.734669][T17515]  ? import_iovec+0x74/0xa0
[  410.734698][T17515]  ___sys_sendmsg+0x21f/0x2a0
[  410.734724][T17515]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.734792][T17515]  ? __fget_files+0x2a/0x420
[  410.734809][T17515]  ? __fget_files+0x3a0/0x420
[  410.734849][T17515]  __x64_sys_sendmsg+0x19b/0x260
[  410.734875][T17515]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.734917][T17515]  ? __pfx_ksys_write+0x10/0x10
[  410.734939][T17515]  ? rcu_is_watching+0x15/0xb0
[  410.734966][T17515]  ? do_syscall_64+0xbe/0x3b0
[  410.734994][T17515]  do_syscall_64+0xfa/0x3b0
[  410.735024][T17515]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.735045][T17515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.735065][T17515]  ? clear_bhb_loop+0x60/0xb0
[  410.735090][T17515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.735107][T17515] RIP: 0033:0x7f1226f8ebe9
[  410.735125][T17515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.735141][T17515] RSP: 002b:00007f1227e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.735164][T17515] RAX: ffffffffffffffda RBX: 00007f12271c6090 RCX: 00007f1226f8ebe9
[  410.735177][T17515] RDX: 00000000000000c4 RSI: 0000200000000100 RDI: 0000000000000003
[  410.735190][T17515] RBP: 00007f1227e63090 R08: 0000000000000000 R09: 0000000000000000
[  410.735201][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.735212][T17515] R13: 00007f12271c6128 R14: 00007f12271c6090 R15: 00007fff90052968
[  410.735247][T17515]  </TASK>
[  411.068697][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  411.191487][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  411.208811][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  411.223575][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  411.234708][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  411.244000][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  411.254195][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  411.402684][T17527] netlink: 'syz.4.3057': attribute type 58 has an invalid length.
[  411.494186][T17516] wg1 speed is unknown, defaulting to 1000
[  411.541187][T17516] lo speed is unknown, defaulting to 1000
[  411.638869][T17535] wg1: entered promiscuous mode
[  411.643888][T17535] wg1: entered allmulticast mode
[  411.788169][T17534] 8021q: adding VLAN 0 to HW filter on device bond1
[  412.035346][T17548] __nla_validate_parse: 6 callbacks suppressed
[  412.035368][T17548] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3064'.
[  412.094981][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3064'.
[  412.168936][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3064'.
[  412.178562][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3064'.
[  412.253298][T17548] batadv0: entered promiscuous mode
[  412.276873][T17548] batadv0: left promiscuous mode
[  412.304777][T17516] chnl_net:caif_netlink_parms(): no params data found
[  412.406514][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3066'.
[  412.473291][   T59] bond0: (slave netdevsim0): Releasing backup interface
[  412.551150][T17560] FAULT_INJECTION: forcing a failure.
[  412.551150][T17560] name failslab, interval 1, probability 0, space 0, times 0
[  412.604777][T17560] CPU: 1 UID: 0 PID: 17560 Comm: syz.0.3066 Not tainted syzkaller #0 PREEMPT(full) 
[  412.604809][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  412.604821][T17560] Call Trace:
[  412.604828][T17560]  <TASK>
[  412.604835][T17560]  dump_stack_lvl+0x189/0x250
[  412.604888][T17560]  ? __pfx____ratelimit+0x10/0x10
[  412.604909][T17560]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.604931][T17560]  ? __pfx__printk+0x10/0x10
[  412.604963][T17560]  ? __pfx___might_resched+0x10/0x10
[  412.604980][T17560]  ? fs_reclaim_acquire+0x7d/0x100
[  412.605004][T17560]  should_fail_ex+0x414/0x560
[  412.605035][T17560]  should_failslab+0xa8/0x100
[  412.605065][T17560]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  412.605092][T17560]  ? __alloc_skb+0x112/0x2d0
[  412.605116][T17560]  __alloc_skb+0x112/0x2d0
[  412.605141][T17560]  netlink_ack+0x146/0xa50
[  412.605158][T17560]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  412.605175][T17560]  ? ref_tracker_free+0x63a/0x7d0
[  412.605213][T17560]  ? __asan_memcpy+0x40/0x70
[  412.605234][T17560]  ? __pfx_ref_tracker_free+0x10/0x10
[  412.605272][T17560]  netlink_rcv_skb+0x28c/0x470
[  412.605292][T17560]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  412.605312][T17560]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  412.605345][T17560]  ? netlink_deliver_tap+0x2e/0x1b0
[  412.605399][T17560]  netlink_unicast+0x82f/0x9e0
[  412.605445][T17560]  ? __pfx_netlink_unicast+0x10/0x10
[  412.605473][T17560]  ? netlink_sendmsg+0x642/0xb30
[  412.605490][T17560]  ? skb_put+0x11b/0x210
[  412.605522][T17560]  netlink_sendmsg+0x805/0xb30
[  412.605553][T17560]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.605577][T17560]  ? aa_sock_msg_perm+0xf1/0x1d0
[  412.605598][T17560]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  412.605620][T17560]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.605641][T17560]  __sock_sendmsg+0x21c/0x270
[  412.605680][T17560]  ____sys_sendmsg+0x505/0x830
[  412.605711][T17560]  ? __pfx_____sys_sendmsg+0x10/0x10
[  412.605745][T17560]  ? import_iovec+0x74/0xa0
[  412.605772][T17560]  ___sys_sendmsg+0x21f/0x2a0
[  412.605798][T17560]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.605863][T17560]  ? __fget_files+0x2a/0x420
[  412.605879][T17560]  ? __fget_files+0x3a0/0x420
[  412.605908][T17560]  __x64_sys_sendmsg+0x19b/0x260
[  412.605935][T17560]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.605967][T17560]  ? __pfx_ksys_write+0x10/0x10
[  412.605988][T17560]  ? rcu_is_watching+0x15/0xb0
[  412.606012][T17560]  ? do_syscall_64+0xbe/0x3b0
[  412.606037][T17560]  do_syscall_64+0xfa/0x3b0
[  412.606055][T17560]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.606075][T17560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.606093][T17560]  ? clear_bhb_loop+0x60/0xb0
[  412.606115][T17560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.606133][T17560] RIP: 0033:0x7f769d38ebe9
[  412.606151][T17560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.606182][T17560] RSP: 002b:00007f769e144038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.606204][T17560] RAX: ffffffffffffffda RBX: 00007f769d5c6090 RCX: 00007f769d38ebe9
[  412.606218][T17560] RDX: 00000000000000c4 RSI: 0000200000000100 RDI: 0000000000000003
[  412.606230][T17560] RBP: 00007f769e144090 R08: 0000000000000000 R09: 0000000000000000
[  412.606242][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.606254][T17560] R13: 00007f769d5c6128 R14: 00007f769d5c6090 R15: 00007ffca2de24a8
[  412.606287][T17560]  </TASK>
[  413.117907][   T30] audit: type=1107 audit(1757100375.084:8): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='���P/4�+��X)|�<��1�q�c�"iva{q�u"�cq�q������tn��|
[  413.117907][   T30] �ri�H��W<7��c�q+	<�6_eO-��Y>㞑�]��7�iw���	$��j܎�X�C%H��Q�ort�
[  413.117907][   T30] �#���������1e$����T���WS0W<hh����(>������P�o4.WR'
[  413.328813][  T980] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  413.336570][  T980] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  413.348353][ T5183] Bluetooth: hci5: command tx timeout
[  413.355643][  T980] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[  413.376517][T17586] netlink: 'syz.4.3071': attribute type 1 has an invalid length.
[  413.388528][  T980] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  413.520495][T17516] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.529033][T17516] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.540229][T17516] bridge_slave_0: entered allmulticast mode
[  413.549644][T17516] bridge_slave_0: entered promiscuous mode
[  413.567328][T17586] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3071'.
[  413.597205][T17516] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.622271][T17516] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.652205][T17516] bridge_slave_1: entered allmulticast mode
[  413.678880][T17516] bridge_slave_1: entered promiscuous mode
[  413.927290][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3077'.
[  414.000585][ T1088] net_ratelimit: 7 callbacks suppressed
[  414.000608][ T1088] bond7: (slave ip6gretap3): failed to get link speed/duplex
[  414.146896][T17516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.205552][T17516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.383923][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'.
[  414.421482][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'.
[  414.501778][T17516] team0: Port device team_slave_0 added
[  414.530569][T17516] team0: Port device team_slave_1 added
[  414.587009][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'.
[  414.969138][   T59] bond7 (unregistering): (slave ip6gretap3): Removing an active aggregator
[  414.995001][   T59] bond7 (unregistering): (slave ip6gretap3): Releasing backup interface
[  415.005477][   T59] bond7 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - 4a:33:cd:79:88:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  415.409855][ T5183] Bluetooth: hci5: command tx timeout
[  415.857356][   T59] bond0 (unregistering): Released all slaves
[  415.880566][   T59] bond1 (unregistering): Released all slaves
[  416.055884][   T59] bond2 (unregistering): Released all slaves
[  416.206100][   T59] bond3 (unregistering): Released all slaves
[  416.351758][   T59] bond4 (unregistering): Released all slaves
[  416.481672][   T59] bond5 (unregistering): Released all slaves
[  416.614927][   T59] bond6 (unregistering): Released all slaves
[  416.744772][   T59] bond7 (unregistering): (slave veth11): Releasing backup interface
[  416.755962][   T59] bond7 (unregistering): Released all slaves
[  416.895989][   T59] bond8 (unregistering): Released all slaves
[  416.910960][   T59] bond9 (unregistering): Released all slaves
[  416.928434][   T59] bond10 (unregistering): Released all slaves
[  416.948604][T17621] chnl_net:caif_netlink_parms(): no params data found
[  417.025308][T17516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.033244][T17516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.061617][T17516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.091840][T17516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.099984][T17516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.132251][T17516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.269181][T17643] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  417.297237][   T59] tipc: Left network mode
[  417.460743][T17625] wg1 speed is unknown, defaulting to 1000
[  417.484683][T17625] lo speed is unknown, defaulting to 1000
[  417.491194][ T5183] Bluetooth: hci5: command tx timeout
[  417.560317][T17516] hsr_slave_0: entered promiscuous mode
[  417.570143][T17516] hsr_slave_1: entered promiscuous mode
[  417.577959][T17516] debugfs: 'hsr0' already exists in 'hsr'
[  417.584728][T17516] Cannot create hsr debugfs directory
[  417.705489][T17672] __nla_validate_parse: 2 callbacks suppressed
[  417.705511][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'.
[  417.811827][T17677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3094'.
[  417.813536][T17674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3094'.
[  417.950109][T17684] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  418.103082][T17688] netlink: 'syz.0.3096': attribute type 10 has an invalid length.
[  418.692461][T17693] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3097'.
[  419.568480][ T5183] Bluetooth: hci5: command tx timeout
[  420.106199][T17688] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  420.133902][T17702] netlink: 'syz.2.3100': attribute type 1 has an invalid length.
[  420.511715][T17710] vxcan2: entered promiscuous mode
[  420.729861][   T59] IPVS: stop unused estimator thread 0...
[  420.772483][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3105'.
[  421.125536][T17737] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  421.256136][T17737] bridge_slave_0: left allmulticast mode
[  421.289475][T17737] bridge_slave_0: left promiscuous mode
[  421.302941][T17737] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.324382][T17737] bridge_slave_1: left allmulticast mode
[  421.331664][T17737] bridge_slave_1: left promiscuous mode
[  421.332020][T17747] netlink: 'syz.1.3110': attribute type 10 has an invalid length.
[  421.337622][T17737] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.363510][T17737] bond0: (slave bond_slave_0): Releasing backup interface
[  421.413918][T17737] team0: Port device team_slave_0 removed
[  421.455942][T17737] team0: Port device team_slave_1 removed
[  421.473222][T17737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.485307][T17737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.509764][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'.
[  421.512974][T17737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.526703][T17737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.581832][T17747] mac80211_hwsim hwsim36 wlan1: left allmulticast mode
[  421.609636][T17747] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  421.634518][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'.
[  421.683626][T17756] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  421.835064][T17745] wg1 speed is unknown, defaulting to 1000
[  421.846477][T17516] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  421.865123][T17745] lo speed is unknown, defaulting to 1000
[  421.873051][T17516] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  421.939465][T17516] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  421.974137][T17516] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  422.373158][T17516] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.664234][T17793] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3121'.
[  422.760619][T17516] 8021q: adding VLAN 0 to HW filter on device team0
[  422.918911][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.926121][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.967344][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.974941][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.182320][T17805] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.3124'.
[  423.446404][T17816] netlink: 'syz.0.3128': attribute type 1 has an invalid length.
[  423.575402][T17816] bond10: entered promiscuous mode
[  423.588096][T17816] 8021q: adding VLAN 0 to HW filter on device bond10
[  423.594193][T17824] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'.
[  423.604512][T17824] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3128'.
[  423.623237][T17827] netlink: 'syz.1.3130': attribute type 3 has an invalid length.
[  423.634072][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  423.655368][T17819] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  423.686381][T17819] netlink: 'syz.2.3129': attribute type 10 has an invalid length.
[  423.753192][T17822] 8021q: adding VLAN 0 to HW filter on device bond11
[  423.763077][T17822] bond10: (slave bond11): making interface the new active one
[  423.770885][T17822] bond11: entered promiscuous mode
[  423.778339][T17822] bond10: (slave bond11): Enslaving as an active interface with an up link
[  423.805940][T17823] bond0: (slave bond_slave_0): Releasing backup interface
[  423.821386][T17823] bond0: (slave bond_slave_1): Releasing backup interface
[  423.833107][T17834] netlink: 'syz.1.3131': attribute type 1 has an invalid length.
[  423.852777][T17823] team0: Port device team_slave_0 removed
[  423.864326][T17823] team0: Port device team_slave_1 removed
[  423.871944][T17823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.879985][T17823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.891291][T17823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.899948][T17823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.925602][T17824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  423.936414][T17824] gretap4: entered promiscuous mode
[  423.946930][T17824] gretap4: entered allmulticast mode
[  424.001390][T17836] bond2 (unregistering): Released all slaves
[  424.064176][T17819] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[  424.078825][T17819] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  424.380976][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'.
[  424.408014][T17516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.422763][  T980] IPVS: starting estimator thread 0...
[  424.433353][T17846] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  424.505189][T17850] wg1 speed is unknown, defaulting to 1000
[  424.538234][T17856] IPVS: using max 27 ests per chain, 64800 per kthread
[  424.560700][T17850] lo speed is unknown, defaulting to 1000
[  424.607126][T17864] FAULT_INJECTION: forcing a failure.
[  424.607126][T17864] name failslab, interval 1, probability 0, space 0, times 0
[  424.628249][T17864] CPU: 0 UID: 0 PID: 17864 Comm: syz.0.3139 Not tainted syzkaller #0 PREEMPT(full) 
[  424.628293][T17864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  424.628303][T17864] Call Trace:
[  424.628311][T17864]  <TASK>
[  424.628320][T17864]  dump_stack_lvl+0x189/0x250
[  424.628349][T17864]  ? __pfx____ratelimit+0x10/0x10
[  424.628370][T17864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  424.628394][T17864]  ? __pfx__printk+0x10/0x10
[  424.628427][T17864]  ? __pfx___might_resched+0x10/0x10
[  424.628445][T17864]  ? fs_reclaim_acquire+0x7d/0x100
[  424.628468][T17864]  should_fail_ex+0x414/0x560
[  424.628499][T17864]  should_failslab+0xa8/0x100
[  424.628530][T17864]  __kmalloc_cache_noprof+0x70/0x3d0
[  424.628555][T17864]  ? nf_tables_newchain+0xfeb/0x2900
[  424.628585][T17864]  nf_tables_newchain+0xfeb/0x2900
[  424.628629][T17864]  ? __pfx_nf_tables_newchain+0x10/0x10
[  424.628695][T17864]  ? nfnl_pernet+0x23/0x240
[  424.628734][T17864]  ? __nla_parse+0x40/0x60
[  424.628756][T17864]  nfnetlink_rcv+0x1132/0x2520
[  424.628823][T17864]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  424.628910][T17864]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  424.628949][T17864]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.628992][T17864]  netlink_unicast+0x82f/0x9e0
[  424.629031][T17864]  ? __pfx_netlink_unicast+0x10/0x10
[  424.629061][T17864]  ? netlink_sendmsg+0x642/0xb30
[  424.629078][T17864]  ? skb_put+0x11b/0x210
[  424.629104][T17864]  netlink_sendmsg+0x805/0xb30
[  424.629137][T17864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.629162][T17864]  ? aa_sock_msg_perm+0xf1/0x1d0
[  424.629182][T17864]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.629202][T17864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.629223][T17864]  __sock_sendmsg+0x21c/0x270
[  424.629256][T17864]  ____sys_sendmsg+0x505/0x830
[  424.629287][T17864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.629322][T17864]  ? import_iovec+0x74/0xa0
[  424.629349][T17864]  ___sys_sendmsg+0x21f/0x2a0
[  424.629375][T17864]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.629443][T17864]  ? __fget_files+0x2a/0x420
[  424.629459][T17864]  ? __fget_files+0x3a0/0x420
[  424.629490][T17864]  __x64_sys_sendmsg+0x19b/0x260
[  424.629516][T17864]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.629551][T17864]  ? __pfx_ksys_write+0x10/0x10
[  424.629583][T17864]  ? do_syscall_64+0xbe/0x3b0
[  424.629610][T17864]  do_syscall_64+0xfa/0x3b0
[  424.629629][T17864]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.629648][T17864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.629666][T17864]  ? clear_bhb_loop+0x60/0xb0
[  424.629690][T17864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.629708][T17864] RIP: 0033:0x7f769d38ebe9
[  424.629726][T17864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.629742][T17864] RSP: 002b:00007f769e165038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.629764][T17864] RAX: ffffffffffffffda RBX: 00007f769d5c5fa0 RCX: 00007f769d38ebe9
[  424.629778][T17864] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  424.629790][T17864] RBP: 00007f769e165090 R08: 0000000000000000 R09: 0000000000000000
[  424.629801][T17864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  424.629812][T17864] R13: 00007f769d5c6038 R14: 00007f769d5c5fa0 R15: 00007ffca2de24a8
[  424.629846][T17864]  </TASK>
[  424.748474][T17516] veth0_vlan: entered promiscuous mode
[  424.984048][T17862] gretap0: entered promiscuous mode
[  424.990813][T17862] vlan2: entered promiscuous mode
[  425.045509][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'.
[  425.056717][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'.
[  425.082680][T17869] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3141'.
[  425.116890][T17516] veth1_vlan: entered promiscuous mode
[  425.326324][T17875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3144'.
[  425.366400][T17875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  425.374263][T17875] IPv6: NLM_F_CREATE should be set when creating new route
[  425.381795][T17875] IPv6: NLM_F_CREATE should be set when creating new route
[  425.455021][T17516] veth0_macvtap: entered promiscuous mode
[  425.476266][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'.
[  425.663937][T17894] netlink: 'syz.4.3147': attribute type 1 has an invalid length.
[  425.703811][T17516] veth1_macvtap: entered promiscuous mode
[  425.832115][T17516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.900407][T17516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.915938][T17903] FAULT_INJECTION: forcing a failure.
[  425.915938][T17903] name failslab, interval 1, probability 0, space 0, times 0
[  425.932229][T17902] netlink: 'syz.2.3148': attribute type 10 has an invalid length.
[  425.948195][T17903] CPU: 1 UID: 0 PID: 17903 Comm: syz.0.3150 Not tainted syzkaller #0 PREEMPT(full) 
[  425.948226][T17903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  425.948238][T17903] Call Trace:
[  425.948246][T17903]  <TASK>
[  425.948254][T17903]  dump_stack_lvl+0x189/0x250
[  425.948281][T17903]  ? __pfx____ratelimit+0x10/0x10
[  425.948301][T17903]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.948324][T17903]  ? __pfx__printk+0x10/0x10
[  425.948356][T17903]  ? __pfx___might_resched+0x10/0x10
[  425.948382][T17903]  should_fail_ex+0x414/0x560
[  425.948415][T17903]  should_failslab+0xa8/0x100
[  425.948446][T17903]  __kmalloc_noprof+0xcb/0x4f0
[  425.948470][T17903]  ? __kasan_kmalloc+0x93/0xb0
[  425.948492][T17903]  ? nla_strdup+0x9d/0x140
[  425.948516][T17903]  nla_strdup+0x9d/0x140
[  425.948536][T17903]  nf_tables_newchain+0x1998/0x2900
[  425.948578][T17903]  ? __pfx_nf_tables_newchain+0x10/0x10
[  425.948641][T17903]  ? nfnl_pernet+0x23/0x240
[  425.948677][T17903]  ? __nla_parse+0x40/0x60
[  425.948699][T17903]  nfnetlink_rcv+0x1132/0x2520
[  425.948764][T17903]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  425.948811][T17903]  ? ref_tracker_free+0x63a/0x7d0
[  425.948873][T17903]  ? __netlink_deliver_tap+0x807/0x850
[  425.948894][T17903]  ? netlink_deliver_tap+0x2e/0x1b0
[  425.948932][T17903]  netlink_unicast+0x82f/0x9e0
[  425.948968][T17903]  ? __pfx_netlink_unicast+0x10/0x10
[  425.949007][T17903]  ? netlink_sendmsg+0x642/0xb30
[  425.949023][T17903]  ? skb_put+0x11b/0x210
[  425.949047][T17903]  netlink_sendmsg+0x805/0xb30
[  425.949073][T17903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.949091][T17903]  ? aa_sock_msg_perm+0xf1/0x1d0
[  425.949108][T17903]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  425.949123][T17903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.949139][T17903]  __sock_sendmsg+0x21c/0x270
[  425.949164][T17903]  ____sys_sendmsg+0x505/0x830
[  425.949195][T17903]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.949227][T17903]  ? import_iovec+0x74/0xa0
[  425.949248][T17903]  ___sys_sendmsg+0x21f/0x2a0
[  425.949267][T17903]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.949319][T17903]  ? __fget_files+0x2a/0x420
[  425.949332][T17903]  ? __fget_files+0x3a0/0x420
[  425.949355][T17903]  __x64_sys_sendmsg+0x19b/0x260
[  425.949375][T17903]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.949402][T17903]  ? __pfx_ksys_write+0x10/0x10
[  425.949418][T17903]  ? rcu_is_watching+0x15/0xb0
[  425.949438][T17903]  ? do_syscall_64+0xbe/0x3b0
[  425.949458][T17903]  do_syscall_64+0xfa/0x3b0
[  425.949472][T17903]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.949487][T17903]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.949501][T17903]  ? clear_bhb_loop+0x60/0xb0
[  425.949519][T17903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.949533][T17903] RIP: 0033:0x7f769d38ebe9
[  425.949548][T17903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.949560][T17903] RSP: 002b:00007f769e165038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.949578][T17903] RAX: ffffffffffffffda RBX: 00007f769d5c5fa0 RCX: 00007f769d38ebe9
[  425.949589][T17903] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  425.949599][T17903] RBP: 00007f769e165090 R08: 0000000000000000 R09: 0000000000000000
[  425.949608][T17903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  425.949616][T17903] R13: 00007f769d5c6038 R14: 00007f769d5c5fa0 R15: 00007ffca2de24a8
[  425.949642][T17903]  </TASK>
[  425.954083][ T3482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.837264][ T3482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.866980][ T3482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.891688][T13464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.207016][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.219793][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.326381][ T8277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.354043][ T8277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.561099][T17945] netlink: 'syz.3.3051': attribute type 4 has an invalid length.
[  427.615129][T17947] netlink: 'syz.3.3051': attribute type 4 has an invalid length.
[  428.088063][T17954] wg1 speed is unknown, defaulting to 1000
[  428.139677][T17954] lo speed is unknown, defaulting to 1000
[  428.656828][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  428.711478][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  428.718921][ T5873] bridge0: port 1(syz_tun) entered disabled state
[  428.735861][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  428.795264][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  428.818576][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  428.820966][ T5873] syz_tun (unregistering): left allmulticast mode
[  428.841429][ T5873] syz_tun (unregistering): left promiscuous mode
[  428.855207][ T5873] bridge0: port 1(syz_tun) entered disabled state
[  429.016413][ T3482] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.060701][ T3482] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.091292][ T3482] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  429.186087][T17980] wg1 speed is unknown, defaulting to 1000
[  429.223871][T17985] FAULT_INJECTION: forcing a failure.
[  429.223871][T17985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.239667][ T3482] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.250434][T17985] CPU: 0 UID: 0 PID: 17985 Comm: syz.0.3168 Not tainted syzkaller #0 PREEMPT(full) 
[  429.250465][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  429.250477][T17985] Call Trace:
[  429.250484][T17985]  <TASK>
[  429.250493][T17985]  dump_stack_lvl+0x189/0x250
[  429.250522][T17985]  ? __pfx____ratelimit+0x10/0x10
[  429.250543][T17985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  429.250566][T17985]  ? __pfx__printk+0x10/0x10
[  429.250593][T17985]  ? __might_fault+0xb0/0x130
[  429.250633][T17985]  should_fail_ex+0x414/0x560
[  429.250662][T17985]  _copy_from_user+0x2d/0xb0
[  429.250687][T17985]  memdup_user+0x5e/0xd0
[  429.250708][T17985]  bpf_prog_test_run_syscall+0x2d6/0x4b0
[  429.250735][T17985]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  429.250754][T17985]  ? __fget_files+0x2a/0x420
[  429.250779][T17985]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  429.250798][T17985]  bpf_prog_test_run+0x2c7/0x340
[  429.250830][T17985]  __sys_bpf+0x581/0x870
[  429.250858][T17985]  ? __pfx___sys_bpf+0x10/0x10
[  429.250899][T17985]  ? ksys_write+0x22a/0x250
[  429.250926][T17985]  ? __pfx_ksys_write+0x10/0x10
[  429.250948][T17985]  ? rcu_is_watching+0x15/0xb0
[  429.250975][T17985]  __x64_sys_bpf+0x7c/0x90
[  429.250999][T17985]  do_syscall_64+0xfa/0x3b0
[  429.251019][T17985]  ? lockdep_hardirqs_on+0x9c/0x150
[  429.251046][T17985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.251066][T17985]  ? clear_bhb_loop+0x60/0xb0
[  429.251090][T17985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.251107][T17985] RIP: 0033:0x7f769d38ebe9
[  429.251126][T17985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.251142][T17985] RSP: 002b:00007f769e165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  429.251164][T17985] RAX: ffffffffffffffda RBX: 00007f769d5c5fa0 RCX: 00007f769d38ebe9
[  429.251179][T17985] RDX: 0000000000000032 RSI: 0000200000000900 RDI: 000000000000000a
[  429.251191][T17985] RBP: 00007f769e165090 R08: 0000000000000000 R09: 0000000000000000
[  429.251203][T17985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.251214][T17985] R13: 00007f769d5c6038 R14: 00007f769d5c5fa0 R15: 00007ffca2de24a8
[  429.251246][T17985]  </TASK>
[  429.469630][T17989] Bluetooth: MGMT ver 1.23
[  429.471390][ T3482] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.514631][ T3482] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  429.539713][T17980] lo speed is unknown, defaulting to 1000
[  429.546555][T17973] wg1 speed is unknown, defaulting to 1000
[  429.596837][T17973] lo speed is unknown, defaulting to 1000
[  429.615202][ T3482] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.625779][ T3482] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.648483][ T3482] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  429.765089][ T3482] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.780418][ T3482] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.817476][ T3482] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  429.946929][T17998] __nla_validate_parse: 4 callbacks suppressed
[  429.946949][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3174'.
[  430.190947][T18007] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  430.285034][T18010] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  430.358171][T18013] FAULT_INJECTION: forcing a failure.
[  430.358171][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.392437][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.3.3178 Not tainted syzkaller #0 PREEMPT(full) 
[  430.392466][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  430.392478][T18013] Call Trace:
[  430.392486][T18013]  <TASK>
[  430.392494][T18013]  dump_stack_lvl+0x189/0x250
[  430.392523][T18013]  ? __pfx____ratelimit+0x10/0x10
[  430.392545][T18013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  430.392569][T18013]  ? __pfx__printk+0x10/0x10
[  430.392611][T18013]  should_fail_ex+0x414/0x560
[  430.392644][T18013]  _copy_to_user+0x31/0xb0
[  430.392671][T18013]  simple_read_from_buffer+0xe1/0x170
[  430.392705][T18013]  proc_fail_nth_read+0x1b3/0x220
[  430.392732][T18013]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  430.392758][T18013]  ? rw_verify_area+0x2a6/0x4d0
[  430.392790][T18013]  ? __lock_acquire+0xab9/0xd20
[  430.392815][T18013]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  430.392839][T18013]  vfs_read+0x200/0xa30
[  430.392863][T18013]  ? fdget_pos+0x247/0x320
[  430.392886][T18013]  ? __pfx___mutex_lock+0x10/0x10
[  430.392909][T18013]  ? __pfx_vfs_read+0x10/0x10
[  430.392936][T18013]  ? __fget_files+0x2a/0x420
[  430.392959][T18013]  ? __fget_files+0x3a0/0x420
[  430.392975][T18013]  ? __fget_files+0x2a/0x420
[  430.393000][T18013]  ksys_read+0x145/0x250
[  430.393028][T18013]  ? __pfx_ksys_read+0x10/0x10
[  430.393048][T18013]  ? rcu_is_watching+0x15/0xb0
[  430.393072][T18013]  ? do_syscall_64+0xbe/0x3b0
[  430.393097][T18013]  do_syscall_64+0xfa/0x3b0
[  430.393115][T18013]  ? lockdep_hardirqs_on+0x9c/0x150
[  430.393134][T18013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.393152][T18013]  ? clear_bhb_loop+0x60/0xb0
[  430.393176][T18013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.393194][T18013] RIP: 0033:0x7fa14538d5fc
[  430.393211][T18013] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  430.393228][T18013] RSP: 002b:00007fa1435f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  430.393250][T18013] RAX: ffffffffffffffda RBX: 00007fa1455c5fa0 RCX: 00007fa14538d5fc
[  430.393264][T18013] RDX: 000000000000000f RSI: 00007fa1435f60a0 RDI: 0000000000000004
[  430.393275][T18013] RBP: 00007fa1435f6090 R08: 0000000000000000 R09: 0000000000000000
[  430.393288][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.393299][T18013] R13: 00007fa1455c6038 R14: 00007fa1455c5fa0 R15: 00007ffe645bc518
[  430.393333][T18013]  </TASK>
[  430.761222][ T3482] bond5: left allmulticast mode
[  430.768027][ T3482] bridge3: port 1(bond5) entered disabled state
[  430.783475][ T3482] bond9: left allmulticast mode
[  430.789392][ T3482] bridge4: port 1(bond9) entered disabled state
[  430.928704][ T5866] Bluetooth: hci0: command tx timeout
[  431.104586][T18036] netlink: 'syz.1.3184': attribute type 4 has an invalid length.
[  431.123453][T18036] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3184'.
[  431.643563][ T3482] bond10 (unregistering): (slave gretap3): Releasing active interface
[  431.654427][ T3482] bond10 (unregistering): (slave gretap3): the permanent HWaddr of slave - e6:77:a3:23:1b:32 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  431.677088][ T3482] bond10 (unregistering): (slave gretap4): making interface the new active one
[  431.765155][ T3482] bond10 (unregistering): (slave gretap4): Releasing active interface
[  431.886504][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'.
[  431.912620][ T3482] bond8 (unregistering): (slave geneve3): Releasing active interface
[  431.922014][ T3482] geneve3 (unregistering): left promiscuous mode
[  432.302850][ T3482] bond1 (unregistering): Released all slaves
[  432.427498][ T3482] bond2 (unregistering): Released all slaves
[  432.560161][ T3482] bond3 (unregistering): Released all slaves
[  432.575488][ T3482] bond0 (unregistering): Released all slaves
[  432.712792][ T3482] bond4 (unregistering): Released all slaves
[  432.851023][ T3482] bond5 (unregistering): Released all slaves
[  432.999126][ T3482] bond6 (unregistering): Released all slaves
[  433.011805][ T5866] Bluetooth: hci0: command tx timeout
[  433.017969][ T3482] bond7 (unregistering): Released all slaves
[  433.163467][ T3482] bond8 (unregistering): Released all slaves
[  433.304971][ T3482] bond9 (unregistering): Released all slaves
[  433.319089][ T3482] bond10 (unregistering): Released all slaves
[  433.456231][ T3482] bond11 (unregistering): Released all slaves
[  433.586365][T18035] wg1 speed is unknown, defaulting to 1000
[  433.634330][T18035] lo speed is unknown, defaulting to 1000
[  433.695664][ T3482] tipc: Disabling bearer <eth:macvtap0>
[  433.710168][ T3482] tipc: Left network mode
[  433.768286][T17973] chnl_net:caif_netlink_parms(): no params data found
[  434.026010][T18063] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[  434.034180][T18063] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[  434.155169][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3191'.
[  434.386689][T17973] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.404498][T17973] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.426751][T17973] bridge_slave_0: entered allmulticast mode
[  434.450181][T17973] bridge_slave_0: entered promiscuous mode
[  434.477838][T17973] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.488221][T17973] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.495642][T17973] bridge_slave_1: entered allmulticast mode
[  434.513707][T17973] bridge_slave_1: entered promiscuous mode
[  434.847264][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.909569][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.985862][T18091] netlink: 'syz.0.3195': attribute type 13 has an invalid length.
[  434.996767][T18091] netlink: 'syz.0.3195': attribute type 17 has an invalid length.
[  435.027090][ T3482] hsr_slave_0: left promiscuous mode
[  435.043770][ T3482] hsr_slave_1: left promiscuous mode
[  435.088041][ T5866] Bluetooth: hci0: command tx timeout
[  435.110405][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'.
[  435.218663][T18099] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3198'.
[  435.247046][T18099] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3198'.
[  437.170599][ T5866] Bluetooth: hci0: command tx timeout
[  437.223349][T17973] team0: Port device team_slave_0 added
[  437.254774][T18091] 8021q: adding VLAN 0 to HW filter on device team0
[  437.284119][T18091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  437.344133][T17973] team0: Port device team_slave_1 added
[  437.557843][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.580462][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.629775][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.680573][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.698346][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.727389][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3201'.
[  437.739333][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.766883][T18115] syzkaller0: entered promiscuous mode
[  437.773252][T18115] syzkaller0: entered allmulticast mode
[  437.896032][T18118] wg1 speed is unknown, defaulting to 1000
[  437.966661][T18118] lo speed is unknown, defaulting to 1000
[  437.972623][T18122] wg1 speed is unknown, defaulting to 1000
[  437.986078][T17973] hsr_slave_0: entered promiscuous mode
[  437.996358][T17973] hsr_slave_1: entered promiscuous mode
[  438.126823][T18120] syzkaller0: entered promiscuous mode
[  438.139966][T18120] syzkaller0: entered allmulticast mode
[  438.147184][T18122] lo speed is unknown, defaulting to 1000
[  438.185110][ T3482] IPVS: stop unused estimator thread 0...
[  438.249359][T18131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3206'.
[  440.373335][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  440.502909][T18139] sctp: [Deprecated]: syz.1.3208 (pid 18139) Use of struct sctp_assoc_value in delayed_ack socket option.
[  440.502909][T18139] Use struct sctp_sack_info instead
[  441.025720][T18145] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  441.240524][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3210'.
[  441.276716][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3211'.
[  441.394647][T18161] netlink: 'syz.0.3211': attribute type 4 has an invalid length.
[  441.656717][T18171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'.
[  441.706823][T18164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.884878][T18164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.915041][T17973] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  441.931381][T17973] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  441.945198][T18166] wg1 speed is unknown, defaulting to 1000
[  441.952094][T17973] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  442.002275][T18164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.022403][T18166] lo speed is unknown, defaulting to 1000
[  442.028762][T17973] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  442.135768][T18164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.417235][T13465] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.430114][T13465] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.482535][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'.
[  442.573246][ T8277] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.586441][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'.
[  442.688803][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.710625][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'.
[  442.780929][T18194] syzkaller0: entered promiscuous mode
[  442.786732][T18194] syzkaller0: entered allmulticast mode
[  442.815751][T17973] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.876451][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3221'.
[  442.928416][T17973] 8021q: adding VLAN 0 to HW filter on device team0
[  443.036626][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.043886][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.082495][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.089775][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.131363][T18211] wg1 speed is unknown, defaulting to 1000
[  443.146862][T18211] lo speed is unknown, defaulting to 1000
[  443.153693][T18207] wg1 speed is unknown, defaulting to 1000
[  443.208335][T18207] lo speed is unknown, defaulting to 1000
[  443.620723][T18220] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.694024][T18223] tap0: tun_chr_ioctl cmd 1074025677
[  443.700402][T18223] tap0: linktype set to 0
[  443.766594][T18220] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.857856][T18220] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.954929][T18220] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.003547][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.108626][T13465] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  444.197063][ T3482] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  444.225273][ T3482] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  444.268341][ T3482] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  444.383385][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'.
[  444.630783][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  444.672715][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3234'.
[  444.795745][T17973] veth0_vlan: entered promiscuous mode
[  444.846669][T17973] veth1_vlan: entered promiscuous mode
[  444.903879][T18261] wg1 speed is unknown, defaulting to 1000
[  444.922251][T18261] lo speed is unknown, defaulting to 1000
[  444.931642][T17973] veth0_macvtap: entered promiscuous mode
[  444.944781][T17973] veth1_macvtap: entered promiscuous mode
[  444.963733][T18266] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  445.035729][T17973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.132099][T17973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.163800][ T8277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.182296][ T8277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.274049][ T8277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.313173][ T8277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.478067][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.486040][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.556054][T13465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.565467][T13465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.706303][T18291] sctp: [Deprecated]: syz.0.3242 (pid 18291) Use of int in max_burst socket option deprecated.
[  445.706303][T18291] Use struct sctp_assoc_value instead
[  445.770829][T18293] FAULT_INJECTION: forcing a failure.
[  445.770829][T18293] name failslab, interval 1, probability 0, space 0, times 0
[  445.784655][T18293] CPU: 1 UID: 0 PID: 18293 Comm: syz.4.3160 Not tainted syzkaller #0 PREEMPT(full) 
[  445.784684][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  445.784695][T18293] Call Trace:
[  445.784704][T18293]  <TASK>
[  445.784711][T18293]  dump_stack_lvl+0x189/0x250
[  445.784741][T18293]  ? __pfx____ratelimit+0x10/0x10
[  445.784762][T18293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  445.784785][T18293]  ? __pfx__printk+0x10/0x10
[  445.784817][T18293]  ? __pfx___might_resched+0x10/0x10
[  445.784842][T18293]  should_fail_ex+0x414/0x560
[  445.784872][T18293]  ? nf_tables_newchain+0x1b7e/0x2900
[  445.784893][T18293]  should_failslab+0xa8/0x100
[  445.784921][T18293]  __kvmalloc_node_noprof+0x161/0x5f0
[  445.784947][T18293]  ? nf_tables_newchain+0x1b7e/0x2900
[  445.784977][T18293]  nf_tables_newchain+0x1b7e/0x2900
[  445.785019][T18293]  ? __pfx_nf_tables_newchain+0x10/0x10
[  445.785084][T18293]  ? nfnl_pernet+0x23/0x240
[  445.785123][T18293]  ? __nla_parse+0x40/0x60
[  445.785146][T18293]  nfnetlink_rcv+0x1132/0x2520
[  445.785213][T18293]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  445.785300][T18293]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  445.785327][T18293]  ? netlink_deliver_tap+0x2e/0x1b0
[  445.785369][T18293]  netlink_unicast+0x82f/0x9e0
[  445.785422][T18293]  ? __pfx_netlink_unicast+0x10/0x10
[  445.785454][T18293]  ? netlink_sendmsg+0x642/0xb30
[  445.785477][T18293]  ? skb_put+0x11b/0x210
[  445.785503][T18293]  netlink_sendmsg+0x805/0xb30
[  445.785543][T18293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.785568][T18293]  ? aa_sock_msg_perm+0xf1/0x1d0
[  445.785590][T18293]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  445.785611][T18293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.785633][T18293]  __sock_sendmsg+0x21c/0x270
[  445.785665][T18293]  ____sys_sendmsg+0x505/0x830
[  445.785695][T18293]  ? __pfx_____sys_sendmsg+0x10/0x10
[  445.785729][T18293]  ? import_iovec+0x74/0xa0
[  445.785756][T18293]  ___sys_sendmsg+0x21f/0x2a0
[  445.785782][T18293]  ? __pfx____sys_sendmsg+0x10/0x10
[  445.785844][T18293]  ? __fget_files+0x2a/0x420
[  445.785861][T18293]  ? __fget_files+0x3a0/0x420
[  445.785891][T18293]  __x64_sys_sendmsg+0x19b/0x260
[  445.785918][T18293]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  445.785954][T18293]  ? __pfx_ksys_write+0x10/0x10
[  445.785976][T18293]  ? rcu_is_watching+0x15/0xb0
[  445.786001][T18293]  ? do_syscall_64+0xbe/0x3b0
[  445.786026][T18293]  do_syscall_64+0xfa/0x3b0
[  445.786047][T18293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.786065][T18293]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  445.786082][T18293]  ? clear_bhb_loop+0x60/0xb0
[  445.786105][T18293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.786122][T18293] RIP: 0033:0x7ff99d98ebe9
[  445.786141][T18293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.786157][T18293] RSP: 002b:00007ff99e837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.786179][T18293] RAX: ffffffffffffffda RBX: 00007ff99dbc5fa0 RCX: 00007ff99d98ebe9
[  445.786192][T18293] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  445.786205][T18293] RBP: 00007ff99e837090 R08: 0000000000000000 R09: 0000000000000000
[  445.786215][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  445.786226][T18293] R13: 00007ff99dbc6038 R14: 00007ff99dbc5fa0 R15: 00007ffe18018978
[  445.786260][T18293]  </TASK>
[  446.260414][T18296] __nla_validate_parse: 1 callbacks suppressed
[  446.260434][T18296] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3243'.
[  446.558583][T18314] syzkaller1: entered promiscuous mode
[  446.592877][T18314] syzkaller1: entered allmulticast mode
[  446.661412][T18322] netlink: 'syz.3.3249': attribute type 15 has an invalid length.
[  446.670409][T18322] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3249'.
[  446.692544][T18323] netlink: 'syz.3.3249': attribute type 15 has an invalid length.
[  446.737571][T18323] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3249'.
[  446.998934][T18332] FAULT_INJECTION: forcing a failure.
[  446.998934][T18332] name failslab, interval 1, probability 0, space 0, times 0
[  447.008752][T18333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.048777][T18332] CPU: 0 UID: 0 PID: 18332 Comm: syz.4.3253 Not tainted syzkaller #0 PREEMPT(full) 
[  447.048807][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  447.048818][T18332] Call Trace:
[  447.048826][T18332]  <TASK>
[  447.048836][T18332]  dump_stack_lvl+0x189/0x250
[  447.048866][T18332]  ? __pfx____ratelimit+0x10/0x10
[  447.048887][T18332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.048910][T18332]  ? __pfx__printk+0x10/0x10
[  447.048945][T18332]  ? __pfx___might_resched+0x10/0x10
[  447.048963][T18332]  ? fs_reclaim_acquire+0x7d/0x100
[  447.048988][T18332]  should_fail_ex+0x414/0x560
[  447.049020][T18332]  should_failslab+0xa8/0x100
[  447.049050][T18332]  __kmalloc_cache_noprof+0x70/0x3d0
[  447.049075][T18332]  ? nf_tables_newchain+0x1d01/0x2900
[  447.049106][T18332]  nf_tables_newchain+0x1d01/0x2900
[  447.049149][T18332]  ? __pfx_nf_tables_newchain+0x10/0x10
[  447.049216][T18332]  ? nfnl_pernet+0x23/0x240
[  447.049256][T18332]  ? __nla_parse+0x40/0x60
[  447.049280][T18332]  nfnetlink_rcv+0x1132/0x2520
[  447.049348][T18332]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  447.049397][T18332]  ? ref_tracker_free+0x63a/0x7d0
[  447.049459][T18332]  ? __netlink_deliver_tap+0x807/0x850
[  447.049480][T18332]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.049523][T18332]  netlink_unicast+0x82f/0x9e0
[  447.049577][T18332]  ? __pfx_netlink_unicast+0x10/0x10
[  447.049609][T18332]  ? netlink_sendmsg+0x642/0xb30
[  447.049626][T18332]  ? skb_put+0x11b/0x210
[  447.049652][T18332]  netlink_sendmsg+0x805/0xb30
[  447.049683][T18332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.049708][T18332]  ? aa_sock_msg_perm+0xf1/0x1d0
[  447.049730][T18332]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.049751][T18332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.049773][T18332]  __sock_sendmsg+0x21c/0x270
[  447.049804][T18332]  ____sys_sendmsg+0x505/0x830
[  447.049835][T18332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.049870][T18332]  ? import_iovec+0x74/0xa0
[  447.049897][T18332]  ___sys_sendmsg+0x21f/0x2a0
[  447.049924][T18332]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.049993][T18332]  ? __fget_files+0x2a/0x420
[  447.050009][T18332]  ? __fget_files+0x3a0/0x420
[  447.050040][T18332]  __x64_sys_sendmsg+0x19b/0x260
[  447.050067][T18332]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.050102][T18332]  ? __pfx_ksys_write+0x10/0x10
[  447.050124][T18332]  ? rcu_is_watching+0x15/0xb0
[  447.050151][T18332]  ? do_syscall_64+0xbe/0x3b0
[  447.050177][T18332]  do_syscall_64+0xfa/0x3b0
[  447.050197][T18332]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.050216][T18332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.050235][T18332]  ? clear_bhb_loop+0x60/0xb0
[  447.050260][T18332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.050278][T18332] RIP: 0033:0x7ff99d98ebe9
[  447.050296][T18332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.050312][T18332] RSP: 002b:00007ff99e837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.050334][T18332] RAX: ffffffffffffffda RBX: 00007ff99dbc5fa0 RCX: 00007ff99d98ebe9
[  447.050348][T18332] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  447.050361][T18332] RBP: 00007ff99e837090 R08: 0000000000000000 R09: 0000000000000000
[  447.050372][T18332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  447.050384][T18332] R13: 00007ff99dbc6038 R14: 00007ff99dbc5fa0 R15: 00007ffe18018978
[  447.050418][T18332]  </TASK>
[  447.594056][T18340] wg1 speed is unknown, defaulting to 1000
[  447.664950][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  447.693352][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  447.702115][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  447.711945][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  447.745385][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  447.830959][T18340] lo speed is unknown, defaulting to 1000
[  447.879323][T18360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3261'.
[  447.912461][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'.
[  448.103891][    C1] hrtimer: interrupt took 10660966 ns
[  449.107105][T18370] _�Z`Ԁ@: entered promiscuous mode
[  449.261866][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'.
[  451.173003][ T5866] Bluetooth: hci1: command tx timeout
[  451.253555][T18344] wg1 speed is unknown, defaulting to 1000
[  451.283341][T18344] lo speed is unknown, defaulting to 1000
[  458.197506][ T5183] Bluetooth: hci1: command tx timeout
[  481.281729][ T5866] Bluetooth: hci1: command tx timeout
[  520.163470][ T5866] Bluetooth: hci1: command tx timeout
[  520.171910][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  525.813539][    C1] sched: DL replenish lagged too much
[  611.676804][ T5878] Bluetooth: hci4: command 0x0406 tx timeout
[  717.067308][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  717.074314][    C0] rcu: 	1-...!: (1 GPs behind) idle=3154/1/0x4000000000000000 softirq=86217/86240 fqs=1
[  717.085894][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  717.092514][    C0] rcu: 	 number:       10         17           14
[  717.099038][    C0] rcu: 	cputime:        0         55            0   ==> 105500(ms)
[  717.107061][    C0] rcu: 	(detected by 0, t=10505 jiffies, g=78057, q=605 ncpus=2)
[  717.114906][    C0] Sending NMI from CPU 0 to CPUs 1:
[  717.114945][    C1] NMI backtrace for cpu 1
[  717.114958][    C1] CPU: 1 UID: 0 PID: 16727 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  717.114976][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  717.114985][    C1] RIP: 0010:rcu_is_watching+0x3a/0xb0
[  717.115008][    C1] Code: e8 1b 31 d4 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 1d be 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 fc c1 7c 00 48 c7 c3 98 ef a1 92 49 03 1e 48 89
[  717.115021][    C1] RSP: 0018:ffffc90000a08b58 EFLAGS: 00000046
[  717.115036][    C1] RAX: 1ffffffff1b7c3a3 RBX: 0000000000000001 RCX: ee4c84a5c3f1e700
[  717.115047][    C1] RDX: 0000000000000001 RSI: ffffffff8be33860 RDI: ffffffff8be33820
[  717.115058][    C1] RBP: ffffc90000a08c78 R08: 0000000000000003 R09: 0000000000000004
[  717.115067][    C1] R10: dffffc0000000000 R11: fffff5200014116c R12: dffffc0000000000
[  717.115078][    C1] R13: ffffffff84d055d2 R14: ffffffff8dbe1d18 R15: dffffc0000000000
[  717.115096][    C1] FS:  0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000
[  717.115108][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  717.115119][    C1] CR2: 0000001b31320000 CR3: 000000003154a000 CR4: 00000000003526f0
[  717.115134][    C1] Call Trace:
[  717.115143][    C1]  <IRQ>
[  717.115152][    C1]  lock_release+0x4b/0x3e0
[  717.115178][    C1]  _raw_spin_unlock_irqrestore+0x70/0x110
[  717.115202][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  717.115224][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  717.115244][    C1]  debug_object_activate+0x2e2/0x420
[  717.115267][    C1]  enqueue_hrtimer+0x30/0x3a0
[  717.115285][    C1]  __hrtimer_run_queues+0x656/0xc60
[  717.115308][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  717.115321][    C1]  ? read_tsc+0x9/0x20
[  717.115343][    C1]  ? rcu_is_watching+0x15/0xb0
[  717.115359][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  717.115385][    C1]  __sysvec_apic_timer_interrupt+0x108/0x410
[  717.115404][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  717.115420][    C1]  </IRQ>
[  717.115426][    C1]  <TASK>
[  717.115431][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  717.115447][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  717.115467][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 61 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  717.115478][    C1] RSP: 0018:ffffc9000e0ef278 EFLAGS: 00000206
[  717.115491][    C1] RAX: ee4c84a5c3f1e700 RBX: 0000000000000000 RCX: ee4c84a5c3f1e700
[  717.115501][    C1] RDX: 0000000000000000 RSI: ffffffff8dba928a RDI: ffffffff8be33880
[  717.115511][    C1] RBP: ffffffff822e691a R08: 0000000000000000 R09: ffffffff822e691a
[  717.115521][    C1] R10: dffffc0000000000 R11: fffff940003dbc61 R12: 0000000000000002
[  717.115531][    C1] R13: ffffffff8e139fe0 R14: 0000000000000000 R15: 0000000000000246
[  717.115542][    C1]  ? pfn_valid+0xba/0x490
[  717.115561][    C1]  ? pfn_valid+0xba/0x490
[  717.115587][    C1]  ? __folio_rmap_sanity_checks+0x411/0x7d0
[  717.115604][    C1]  ? pfn_valid+0xba/0x490
[  717.115622][    C1]  pfn_valid+0xd6/0x490
[  717.115639][    C1]  ? pfn_valid+0xba/0x490
[  717.115657][    C1]  page_table_check_clear+0x21/0x700
[  717.115676][    C1]  ? vm_normal_page+0xb7/0x210
[  717.115691][    C1]  unmap_page_range+0x3445/0x4370
[  717.115728][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  717.115745][    C1]  ? mas_find+0xb0e/0xd30
[  717.115759][    C1]  ? unmap_vmas+0x144/0x580
[  717.115775][    C1]  unmap_vmas+0x399/0x580
[  717.115793][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  717.115818][    C1]  exit_mmap+0x248/0xb50
[  717.115837][    C1]  ? uprobe_clear_state+0x20f/0x290
[  717.115856][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  717.115873][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  717.115894][    C1]  ? __pfx_exit_aio+0x10/0x10
[  717.115919][    C1]  ? uprobe_clear_state+0x274/0x290
[  717.115937][    C1]  __mmput+0x118/0x420
[  717.115953][    C1]  exit_mm+0x1da/0x2c0
[  717.115972][    C1]  ? __pfx_exit_mm+0x10/0x10
[  717.115988][    C1]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  717.116003][    C1]  ? rcu_is_watching+0x15/0xb0
[  717.116019][    C1]  do_exit+0x648/0x2300
[  717.116039][    C1]  ? do_raw_spin_lock+0x121/0x290
[  717.116057][    C1]  ? __pfx_do_exit+0x10/0x10
[  717.116081][    C1]  do_group_exit+0x21c/0x2d0
[  717.116107][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  717.116123][    C1]  get_signal+0x1286/0x1340
[  717.116146][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  717.116168][    C1]  ? __pfx___x64_sys_wait4+0x10/0x10
[  717.116189][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  717.116216][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  717.116237][    C1]  exit_to_user_mode_loop+0x75/0x110
[  717.116257][    C1]  do_syscall_64+0x2bd/0x3b0
[  717.116273][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  717.116287][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.116301][    C1]  ? clear_bhb_loop+0x60/0xb0
[  717.116317][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.116331][    C1] RIP: 0033:0x7fa403f84e13
[  717.116343][    C1] Code: Unable to access opcode bytes at 0x7fa403f84de9.
[  717.116351][    C1] RSP: 002b:00007ffe45875e98 EFLAGS: 00000202 ORIG_RAX: 000000000000003d
[  717.116366][    C1] RAX: fffffffffffffe00 RBX: 0000000000004177 RCX: 00007fa403f84e13
[  717.116376][    C1] RDX: 0000000040000000 RSI: 00007ffe45875eac RDI: 00000000ffffffff
[  717.116386][    C1] RBP: 00007ffe45875eac R08: 0000000000000000 R09: 0000000000000000
[  717.116395][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  717.116404][    C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  717.116420][    C1]  </TASK>
[  717.116938][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g78057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  717.683129][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  717.693119][    C0] rcu: RCU grace-period kthread stack dump:
[  717.699119][    C0] task:rcu_preempt     state:R  running task     stack:26792 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  717.712807][    C0] Call Trace:
[  717.716125][    C0]  <TASK>
[  717.719098][    C0]  __schedule+0x1798/0x4cc0
[  717.723985][    C0]  ? __lock_acquire+0xab9/0xd20
[  717.728920][    C0]  ? __pfx___schedule+0x10/0x10
[  717.734108][    C0]  ? schedule+0x91/0x360
[  717.738635][    C0]  schedule+0x165/0x360
[  717.742814][    C0]  schedule_timeout+0x12b/0x270
[  717.747754][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  717.753243][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  717.759274][    C0]  ? __pfx_process_timeout+0x10/0x10
[  717.764604][    C0]  ? prepare_to_swait_event+0x341/0x380
[  717.770313][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  717.775445][    C0]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  717.781397][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  717.786809][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  717.792156][    C0]  ? finish_swait+0xcd/0x1f0
[  717.796963][    C0]  rcu_gp_kthread+0x99/0x390
[  717.801881][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  717.807142][    C0]  ? __kthread_parkme+0x7b/0x200
[  717.812201][    C0]  ? __kthread_parkme+0x1a1/0x200
[  717.817430][    C0]  kthread+0x70e/0x8a0
[  717.821539][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  717.826884][    C0]  ? __pfx_kthread+0x10/0x10
[  717.831524][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  717.837014][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  717.842251][    C0]  ? __pfx_kthread+0x10/0x10
[  717.846868][    C0]  ret_from_fork+0x3fc/0x770
[  717.851566][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  717.856963][    C0]  ? __switch_to_asm+0x39/0x70
[  717.861751][    C0]  ? __switch_to_asm+0x33/0x70
[  717.866531][    C0]  ? __pfx_kthread+0x10/0x10
[  717.871142][    C0]  ret_from_fork_asm+0x1a/0x30
[  717.875967][    C0]  </TASK>
[  717.879088][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  717.885423][    C0] CPU: 0 UID: 0 PID: 18384 Comm: syz.1.3267 Not tainted syzkaller #0 PREEMPT(full) 
[  717.894994][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  717.905153][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70
[  717.911330][    C0] Code: 24 65 48 8b 0c 25 08 c0 a0 92 65 8b 15 c8 11 e1 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c <8b> 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48
[  717.931402][    C0] RSP: 0018:ffffc900046b7338 EFLAGS: 00000246
[  717.937508][    C0] RAX: ffffffff81b44fbb RBX: 1ffff110170e7f61 RCX: ffff888028b0bc00
[  717.945753][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  717.953835][    C0] RBP: ffffc900046b74c0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[  717.962036][    C0] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffff8880b873fb08
[  717.970028][    C0] R13: dffffc0000000000 R14: ffff8880b863b1c0 R15: 0000000000000001
[  717.978300][    C0] FS:  0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000
[  717.987785][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  717.994685][    C0] CR2: 00007f1bc9bc20c0 CR3: 000000000df36000 CR4: 00000000003526f0
[  718.002773][    C0] Call Trace:
[  718.006071][    C0]  <TASK>
[  718.009188][    C0]  smp_call_function_many_cond+0xd4b/0x12d0
[  718.015320][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  718.020552][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  718.027012][    C0]  ? rcu_is_watching+0x15/0xb0
[  718.031824][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  718.037075][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  718.042325][    C0]  flush_tlb_mm_range+0x6b1/0x12d0
[  718.047571][    C0]  ? free_pgd_range+0x144b/0x14c0
[  718.052701][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  718.058298][    C0]  tlb_flush_mmu+0x1a7/0x680
[  718.063057][    C0]  tlb_finish_mmu+0xc3/0x1d0
[  718.067775][    C0]  ? free_pgd_range+0x144b/0x14c0
[  718.073210][    C0]  free_ldt_pgtables+0x17b/0x320
[  718.078553][    C0]  ? __pfx_free_ldt_pgtables+0x10/0x10
[  718.084066][    C0]  ? down_read+0x1ad/0x2e0
[  718.088539][    C0]  exit_mmap+0x17c/0xb50
[  718.093887][    C0]  ? uprobe_clear_state+0x20f/0x290
[  718.099484][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  718.104583][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  718.110667][    C0]  ? __pfx_exit_aio+0x10/0x10
[  718.115700][    C0]  ? uprobe_clear_state+0x274/0x290
[  718.121128][    C0]  __mmput+0x118/0x420
[  718.125491][    C0]  exit_mm+0x1da/0x2c0
[  718.129676][    C0]  ? __pfx_exit_mm+0x10/0x10
[  718.134300][    C0]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  718.140042][    C0]  ? rcu_is_watching+0x15/0xb0
[  718.145267][    C0]  do_exit+0x648/0x2300
[  718.149452][    C0]  ? do_raw_spin_lock+0x121/0x290
[  718.154504][    C0]  ? __pfx_do_exit+0x10/0x10
[  718.159220][    C0]  do_group_exit+0x21c/0x2d0
[  718.164005][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  718.169223][    C0]  get_signal+0x1286/0x1340
[  718.173772][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  718.179358][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  718.185554][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  718.191059][    C0]  exit_to_user_mode_loop+0x75/0x110
[  718.196465][    C0]  do_syscall_64+0x2bd/0x3b0
[  718.201080][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  718.206297][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.212380][    C0]  ? clear_bhb_loop+0x60/0xb0
[  718.217095][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.223004][    C0] RIP: 0033:0x7fa403f8ec23
[  718.227436][    C0] Code: Unable to access opcode bytes at 0x7fa403f8ebf9.
[  718.234460][    C0] RSP: 002b:00007ffe458758e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  718.243155][    C0] RAX: 00007fa404dd0000 RBX: 00007fa4029f76c0 RCX: 00007fa403f8ec23
[  718.251144][    C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  718.259214][    C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  718.267399][    C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe45875a40
[  718.275606][    C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  718.283968][    C0]  </TASK>