last executing test programs:

1m12.384968549s ago: executing program 4 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x0, 0x40003, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000002300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004805}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8013)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r12 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
close(r8)

52.483661057s ago: executing program 4 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x0, 0x40003, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000002300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004805}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8013)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r12 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
close(r8)

42.683699019s ago: executing program 4 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x0, 0x40003, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000002300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004805}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8013)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r12 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
close(r8)

32.315480634s ago: executing program 4 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x0, 0x40003, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000002300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004805}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8013)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r12 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
close(r8)

21.11178093s ago: executing program 4 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x0, 0x40003, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000002300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004805}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8013)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r12 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
close(r8)

10.124319561s ago: executing program 4 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5], 0x0, 0x40003, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0)
getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000002300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004805}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8013)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r12 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
close(r8)

2.894366507s ago: executing program 2 (id=2782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14c21408}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x6, 0xb, 0x319, 0x1}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1000}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x14}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10080}, 0x4004)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8)
r3 = socket$inet6_sctp(0xa, 0x835063b2c13a17fa, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x10000, 0x10000, 0xfffffffd}, &(0x7f0000000340)=0x10)
r4 = accept(r3, 0x0, &(0x7f0000000380))
bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000440)={0x5b06}, 0x4)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r4)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000011}, 0x94)
bind$llc(r4, &(0x7f0000000640)={0x1a, 0x10f, 0x7c, 0xb7, 0x9c, 0xb, @random="d9e30766de64"}, 0x10)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r7, &(0x7f00000007c0)="bfd2f44f6dd5c20128b336e6776331ffd756219f8c8d47d86e02cbe132d40dee2f4c5dfd61d524a0fc3f683e0b548fd86926efbf208e8cda39d1c67d61cba8bac875722bd5855f082b986012aa9c7428e7fa1c0cb215f8a137e57153515a8f0c2249c877fdcaf1458858a766bcf3b5c74c73722abb3a14247759302d52b71c578cf4b0ea0260672f3d03fdfe4b68c9aaf3736374289111bd3327ab775573097661e5f0b0f7625de6aa42b2d5eda992366846aed7dc8d396a40ec0bd3eed32c725bca4ef2db11b70f7aac2d501e036684738153542cd58ec77f1d5f2600d80fa98e86ec6c7d8821fefccef978ead669afed3b0270"}, 0x20)
getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000900)=""/64, &(0x7f0000000940)=0x40)
connect$unix(r4, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl0\x00', <r10=>0x0, 0xa8a736d1226cc0c5, 0xf1, 0xf0, 0x8, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x8, 0x40, 0x1, 0x2}})
sendmsg$nl_route(r8, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xe040818}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@RTM_NEWMDB={0x38, 0x54, 0x8, 0x70bd29, 0x25dfdbfc, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r11, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006001}, 0x8001)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8)
ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000d80)={'pimreg\x00'})
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000e00)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xfffffffffffffffb, 0x4, 0x1, 0x3, 0x4], 0x3, &(0x7f0000000dc0)=[{}], 0x0, [{}, {}, {}]}, 0xa8)
setsockopt$RDS_RECVERR(r12, 0x114, 0x5, &(0x7f0000000ec0)=0x1, 0x4)

2.833389495s ago: executing program 2 (id=2784):
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3e000600", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250300000008000100020000000800010002000000080002000200000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e010600bf"], 0xffdd)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0)
close(r3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3a00eca0b6e9d35214eee1628e5db279b22100000000000000000004000000"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000308400000000000018110000", @ANYRES32=r6, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x43}, 0x18)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
read$alg(0xffffffffffffffff, &(0x7f00000005c0)=""/125, 0x7d)
r8 = socket(0x10, 0x4, 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01090900010073797a3100e60000140000001100010000000000000000000300000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800)
write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x1e, "32ccfe1feefa23d5a6c66b2cdef27749d08d8127b171e7e8811c8656c1e8"}, &(0x7f0000000440)=0x42)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r9, &(0x7f0000000400)='\x00', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

2.405258856s ago: executing program 3 (id=2789):
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
unshare(0x40600)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

2.13130893s ago: executing program 0 (id=2792):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
close(r0)
socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020003000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

2.119857918s ago: executing program 3 (id=2793):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) (async)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))

1.972146357s ago: executing program 0 (id=2795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmmsg(r1, 0x0, 0x0, 0x48801)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x18)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r4, &(0x7f00000009c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xf}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x7c}}, 0x20000004)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000c4c013d0000000000002000000240004802000018007000100637400001400f67f080001400000000108000240000000070900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4048880)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x9, 0x0, 0x0, @void, @value}, 0x28)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000240)={0x10000000})
sendto$inet(r6, &(0x7f0000000040)='\f', 0x1, 0x0, &(0x7f0000000340), 0x10)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r8, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x6c}, 0x1, 0xba01}, 0x20008084)

1.886586156s ago: executing program 3 (id=2797):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006050835900000000fc010000000000000000000000000000ff01000000000000000000000000000106000400000000000000000000000000df8a01d2324c5ab3e3456428021ca8ec85cec6a59d9fa42282cc8cbf9eeb58b959f52b3378019bec2ec9985a8dbb0e913397bc01e4d1d0f4be5aecc47028f7758bfe0ddb9e58c5ab15f136ea355c26ea7cde4395034b25dd7f64386be91c99e7f3f4b3ee"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}, 0x1}], 0x2, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b1200680d80001"], 0x20dc}}, 0x10)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000002c0)=0x28)
sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000540)="ff03", 0x2}, {0x0}], 0x2}}], 0x1, 0x4000000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3, @local, 0x80000001}, @in6={0xa, 0x4e20, 0x454c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e22, 0x79, @empty, 0xc9}, @in6={0xa, 0x4e20, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6d6}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x5, @remote, 0x28c52b83}], 0x9c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000d0000000d00000004000000020000000000000f01000000ee000000002e5f00f8313028dbbfc5cb9dc5ea973fcb71f5a37231e82d5638d87527aa8718"], 0x0, 0x2c, 0x0, 0x1, 0x7bb3, 0x10000, @value}, 0x28)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000480)=0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000001302"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2000, @local}, 0x10)
r5 = socket(0xb, 0x800, 0x6)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNADDRESOURCE(r7, 0x89e0, &(0x7f00000004c0)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010071e853cf6d32e20c24c5df7a", @ANYRES32=r8, @ANYBLOB="200100000620010014001680100001800c0004000400ffc3060000000a000100aa"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

1.833899925s ago: executing program 2 (id=2798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000308000640"], 0x6c}}, 0x0)

1.630557742s ago: executing program 2 (id=2800):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000140)="87", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r2, 0x1) (async)
shutdown(r2, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @void, @value}, 0x20)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000f40)={0x0, 0x4f2a2df0, 0x7, 0xbc2, 0x7ff, 0x7, 0x6, 0x3, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x8000, 0x10, 0x3, 0x5, 0x9}}, &(0x7f00000002c0)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000f40)={0x0, 0x4f2a2df0, 0x7, 0xbc2, 0x7ff, 0x7, 0x6, 0x3, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x8000, 0x10, 0x3, 0x5, 0x9}}, &(0x7f00000002c0)=0xb0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600f75c425b0000000000000a000000040000000c000a"], 0x24}}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600f75c425b0000000000000a000000040000000c000a"], 0x24}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0)

1.402150159s ago: executing program 2 (id=2802):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYRES64=0x0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pipe(&(0x7f00000007c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$kcm(0x29, 0x7, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xf0, 0xb, 0xd0e0011, 0x1c8, 0xc6, 0x1c8, 0x1d8, 0x190, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'nr0\x00', 'vlan0\x00', {}, {}, 0x1}, 0x0, 0x70, 0xa0, 0x2000000}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000022c0)={r5})
r11 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYRESOCT=r6], 0x40}}, 0x4040000)
write$cgroup_pid(r11, &(0x7f00000003c0), 0x12)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x320, 0x0, 0x32, 0x148, 0x0, 0x148, 0x288, 0x240, 0x240, 0x288, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', 0x0})
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="4aabcd8d18177d9e37a889c096040e5e2af508afa4", 0x15}], 0x1, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x89}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf7, [@empty, @empty, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb7}}], 0x70}, 0xc004)
close(r0)

1.306434478s ago: executing program 3 (id=2803):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
unshare(0x28000600) (async)
unshare(0x28000600)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r2, @ANYBLOB="010000000000fadbdf250c000000dc000380d70005009fc4ddccf93621f6bdea9895b629592add76a0c45c40e62e25b13890d290c485c815ed9b69304cfa4494c179232dac5ec367f3ec886d0bf3287c80f1f2002b2eb6011e2357f78033d9215ac9548aed4aa90140624255fd4492f0294d791629b6438af6aedead1b0ae08b3d8ae61975dd8457fb2c6bda88f5366bfbf580d62835210c29860339a1fd0fb5ac9e8bd3ee7d919b99517ec3a3d20b4276864af5e23d33128425a93de74e5b83e93c149ff5c8b8a34e096eb6341506fcf17bef12fc1a6b063f0fbbe6d23f35223406109fc5b6f30f9a00180001801400020076657468305f746f5f626f01640000ff"], 0x108}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x2}}, 0x18)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x20000ffd, 0x0, 0x0) (async)
sendto$inet(r5, 0x0, 0x0, 0x20000ffd, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r7 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="58d84c3fb4facf57280364e07062786dadf58e301ff3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c944117", 0x3a}, {&(0x7f00000002c0)="9e39cdede732", 0x6}, {&(0x7f00000003c0)="0cf10d26a3d34e0a62eea9d456dbe10644d554843f11fa5ea57b4716dfd53118d73a1028905bc3e2a9e0da01ac9c76b685411514a735bd687b9e501c693b02c0aefbad6877709b270df5502d26b5b4a78ab74bf88d88841b0e8ef9ae603b689ac959576a0889ce92e48cb79904ec352f7d86a008d0057fcce2b95d8105560cf31d38a6e5fce55b3b0e12e1806f034331f5de4f5f7fe21ae69a96f0141e481e357520c3db5234749dbde33bef5aa50b0e5e588ecfd746fe3559b104e37fa902a2269c4de8738bf9f6c123b437dcfd9b335d16f673ad0cf12d793c4571d0bff5c1acf4e81e433d24885a36b5ebcc56336e2aa96c7d5bbd65", 0xf7}], 0x3}, 0x20008040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @broadcast, 0xffffff00, 0x0, 'team0\x00', 'syzkaller1\x00', {}, {}, 0x2, 0x0, 0x42}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[], 0x8}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @broadcast, 0xffffff00, 0x0, 'team0\x00', 'syzkaller1\x00', {}, {}, 0x2, 0x0, 0x42}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[], 0x8}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)

1.155176795s ago: executing program 3 (id=2805):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', 0x0})
sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="4aabcd8d18177d9e37a889c096040e5e2af508afa4", 0x15}], 0x1, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf7, [@empty, @empty, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x70}, 0xc004)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90)
close(r0)

951.376962ms ago: executing program 2 (id=2807):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="070000020400000000000095000000e26dbbb9de63413bc35c3867b2e5a30d64f47a67c23afeb0a2f82faf499d52fe4b2e269d110dd9d04c0450211ee42de4879fc76882f5b8dc75f8ce73da375e6ebe60230ea399327d9d98fe8f32805d56cba127b4d23e791e6f263e4987eb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x4000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x17, 0x0, "61a1ed8479cde8054f2ada6fcd5fe76b933e8bb0ac60091e33519d5f73b4f5d80eb4881a5b98cb9fb96d225d0000000016d09dcc09b5c00987117502fbc24f1fe97f61fd27a06d6a38a700"}, 0xd8)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
shutdown(r4, 0x2)
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
close(r7)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x7, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000180)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
splice(r1, 0x0, r5, 0x0, 0x1100000000f336, 0x0)
r11 = socket(0x11, 0x2, 0x0)
close(r11)

922.49395ms ago: executing program 0 (id=2808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7f, r3})
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x74, r7, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa2, 0x21}}, @val={0x76, 0x6}}}]]}, 0x74}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wlan1\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)
recvmmsg(r5, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}, {&(0x7f0000000040)=""/44, 0x2c}], 0x6}, 0xfffffffc}], 0x2, 0x42, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="8000f2000a0002"], 0x28}}, 0x810)

725.875721ms ago: executing program 0 (id=2811):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x6, 0x6, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)

509.918303ms ago: executing program 0 (id=2813):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r0, 0x89e1)
r1 = socket$packet(0x11, 0x2, 0x300)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/81, 0x51}], 0x1}, 0xe1}], 0x4000000000001f5, 0x10022, 0x0)
getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001a40)={0x1, &(0x7f0000000740)=[{0x6}]}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000e16867469fa78286145d000000000000000000000d1824aa8e12aa9ba080638ce4df9366e4a8fe9b92"], 0x28}}, 0x0)

422.665756ms ago: executing program 1 (id=2814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0)

378.674783ms ago: executing program 1 (id=2815):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0xef}}, 0x1c}}, 0x0)

298.841569ms ago: executing program 1 (id=2816):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x0) (async)
syz_emit_ethernet(0x22, &(0x7f0000001480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'})

296.096847ms ago: executing program 1 (id=2817):
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/301], 0x98}}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0}) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xff96, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 32)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9) (async)
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000240)="127f31", 0x3}], 0x1) (async)
sendfile(r8, r7, 0x0, 0x10000)
socket$alg(0x26, 0x5, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
bpf$MAP_CREATE(0x0, 0x0, 0xc15c0549be0bd07c) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$packet(0x11, 0x2, 0x300) (async)
socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 32)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0)

212.423041ms ago: executing program 1 (id=2818):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0100001000130700000000000000007f000001000000000000000000000000fe800000000000000000000000000b1b00000001000000000a00000000000000", @ANYRES32=r5, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRESOCT=r3], 0x13c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4054)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x13, 0x0, @empty, 0x520}, 0x1c)
sendmmsg$inet6(r10, 0x0, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000006000000040000000200010000000000", @ANYRES32, @ANYBLOB="000000000f000000000000000000000000000000fc68abb598df1dfa430e66170730397a8b22f46050bf5568e7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)

209.762205ms ago: executing program 0 (id=2819):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @dev}}}})
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4024}, 0x80)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x800, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x58}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2c, 0x25dfdbfe, 0x7, ["", "", "", "", ""]}, 0x14}}, 0x0)

90.338935ms ago: executing program 3 (id=2820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xe)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r5)
setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000080), 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0xfffffffa, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x80, 0x5, 0x10001, 0x1000, 0x20, 0x1, 0xb}, &(0x7f0000000100)=0x9c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000800)={r9, 0x5, 0x2, 0x4})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r9})
r10 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getchain={0x3c, 0x66, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x5}, {0xfff2, 0xf}, {0xffe0, 0x8}}, [{0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'geneve1\x00', <r12=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000480001002dbd700020dbdf250a002000b9ae6ab51fe464fc6f44b17682961f2ca56fb5ef9790c317727714d200cf071b4b5af87be93e38d2f591df9a7745cca6b350dedcefc3d80ee45e619867c95cd6caf6d085dc4b30ddd15e833ae42d01f30a61d5e8eb54d4cdb50f2f62cdede259bf1865ea55db4abe18701d471e335359f9168fe87588954dc8c985e778ad44b6b90d88c8118fd9695ae0f0cce4826cb0c0fcfb1ea954f810a6c59dcd581721c7ce5a5379aa8aee9cbd1a9fb9397abcb0e46dfa98069184f448e3dd7ed6e36861516bd2a07005f35445b448575ab54ef665e9131d", @ANYRES32=r12, @ANYBLOB="0300000014000100000000000000000000000000000000000800020001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x0)

0s ago: executing program 1 (id=2821):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000065090100000068d01500000000000000180100002020702500000000002020207b1af8ff00000000bda900000000000037010000f8ffffffb702000008000000b70300000100000014000000060000004e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800090300000000000000000a002000000000000024000008000400", @ANYRES32=r3, @ANYBLOB="06001500050000000c001680080001000800cc18b84740ba759429ce297661d1d829c0c6928d57e28a795c05d39ed36a037c232d8192fa204965c3c8d0549ba1260e1d77"], 0x38}}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000500000000000000000091120000000000009500000000000000a0d0c6b140f356e867ae6b233f772c175640806109dea04996007358209100"/73], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', r3, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

es leftover after parsing attributes in process `syz.3.1831'.
[  228.188574][T11800] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20001
[  228.421644][T11813] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  228.761339][T11835] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.879857][T11844] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.887184][T11844] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  228.920194][T11844] bond3: (slave vcan1): Error -95 calling set_mac_address
[  229.951508][T11912] xt_l2tp: unknown flags: 10
[  229.970541][T11913] netlink: 'syz.2.1867': attribute type 3 has an invalid length.
[  229.991201][T11913] netlink: 'syz.2.1867': attribute type 3 has an invalid length.
[  230.532856][T11954] bridge_slave_0: left allmulticast mode
[  230.541370][T11954] bridge_slave_0: left promiscuous mode
[  230.551846][T11954] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.566186][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.592459][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.628638][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.666242][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.690909][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.713057][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.737661][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.760456][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.778802][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  230.804638][T11954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  231.141945][T11980] netlink: 'syz.0.1887': attribute type 21 has an invalid length.
[  231.658799][T12006] team0: Device ipvlan0 failed to register rx_handler
[  231.764468][T12008] netlink: 'syz.0.1898': attribute type 10 has an invalid length.
[  231.777781][T12008] team0: Port device virt_wifi0 added
[  232.262994][T12032] netlink: 'syz.2.1907': attribute type 6 has an invalid length.
[  232.652692][T12053] __nla_validate_parse: 14 callbacks suppressed
[  232.652714][T12053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1912'.
[  232.816678][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'.
[  233.004106][T12068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1919'.
[  233.159933][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'.
[  233.219185][T12080] lo speed is unknown, defaulting to 1000
[  233.250138][T12080] lo speed is unknown, defaulting to 1000
[  233.511081][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'.
[  233.991225][T12116] syzkaller0: entered promiscuous mode
[  234.005659][T12116] syzkaller0: entered allmulticast mode
[  234.023855][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'.
[  236.315061][T12148] netlink: 'syz.0.1938': attribute type 21 has an invalid length.
[  236.330057][T12148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1938'.
[  236.369488][T12149] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1937'.
[  236.485931][T12157] FAULT_INJECTION: forcing a failure.
[  236.485931][T12157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.537693][T12160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'.
[  236.537771][T12157] CPU: 0 UID: 0 PID: 12157 Comm: syz.1.1940 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  236.557449][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  236.567543][T12157] Call Trace:
[  236.570846][T12157]  <TASK>
[  236.573795][T12157]  dump_stack_lvl+0x241/0x360
[  236.578513][T12160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'.
[  236.578510][T12157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.578541][T12157]  ? __pfx__printk+0x10/0x10
[  236.597264][T12157]  ? __pfx_lock_release+0x10/0x10
[  236.602340][T12157]  ? __lock_acquire+0x1397/0x2100
[  236.607408][T12157]  should_fail_ex+0x3b0/0x4e0
[  236.612142][T12157]  _copy_from_user+0x2f/0xc0
[  236.616761][T12157]  do_ipv6_setsockopt+0x2f5/0x3640
[  236.621893][T12157]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  236.627446][T12157]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  236.632853][T12157]  ? __pfx___might_resched+0x10/0x10
[  236.638175][T12157]  ? __lock_acquire+0x1397/0x2100
[  236.643241][T12157]  ? aa_sk_perm+0x96d/0xab0
[  236.647794][T12157]  ? __pfx_aa_sk_perm+0x10/0x10
[  236.652691][T12157]  ipv6_setsockopt+0x5d/0x170
[  236.657401][T12157]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  236.663336][T12157]  do_sock_setsockopt+0x3af/0x720
[  236.668367][T12157]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  236.673912][T12157]  ? __fget_files+0x395/0x410
[  236.678580][T12157]  ? __fget_files+0x2a/0x410
[  236.683166][T12157]  __x64_sys_setsockopt+0x1ee/0x280
[  236.688367][T12157]  do_syscall_64+0xf3/0x230
[  236.692963][T12157]  ? clear_bhb_loop+0x35/0x90
[  236.697654][T12157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.703561][T12157] RIP: 0033:0x7fa42157ff19
[  236.707996][T12157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.727633][T12157] RSP: 002b:00007fa4222ed058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  236.736085][T12157] RAX: ffffffffffffffda RBX: 00007fa421745fa0 RCX: 00007fa42157ff19
[  236.744090][T12157] RDX: 0000000000000011 RSI: 0000000000000029 RDI: 0000000000000006
[  236.752093][T12157] RBP: 00007fa4222ed0a0 R08: 0000000000000004 R09: 0000000000000000
[  236.760096][T12157] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001
[  236.768097][T12157] R13: 0000000000000000 R14: 00007fa421745fa0 R15: 00007ffee58f6508
[  236.776114][T12157]  </TASK>
[  237.045968][ T8857] IPVS: starting estimator thread 0...
[  237.091460][T12182] lo speed is unknown, defaulting to 1000
[  237.118763][T12182] lo speed is unknown, defaulting to 1000
[  237.138670][T12183] IPVS: using max 22 ests per chain, 52800 per kthread
[  237.475084][T12197] net_ratelimit: 24 callbacks suppressed
[  237.475105][T12197] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  237.490211][T12197] tipc: Enabled bearer <udp:s>, priority 10
[  237.608812][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  237.637108][T12201] FAULT_INJECTION: forcing a failure.
[  237.637108][T12201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.682164][T12201] CPU: 1 UID: 0 PID: 12201 Comm: syz.3.1956 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  237.692989][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  237.703075][T12201] Call Trace:
[  237.706365][T12201]  <TASK>
[  237.709296][T12201]  dump_stack_lvl+0x241/0x360
[  237.713983][T12201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.719184][T12201]  ? __pfx__printk+0x10/0x10
[  237.723803][T12201]  ? snprintf+0xda/0x120
[  237.728481][T12201]  should_fail_ex+0x3b0/0x4e0
[  237.733161][T12201]  _copy_to_user+0x31/0xb0
[  237.737585][T12201]  simple_read_from_buffer+0xca/0x150
[  237.742973][T12201]  proc_fail_nth_read+0x1e9/0x250
[  237.748017][T12201]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.753583][T12201]  ? rw_verify_area+0x55e/0x6f0
[  237.758437][T12201]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.763991][T12201]  vfs_read+0x1fc/0xb70
[  237.768151][T12201]  ? __pfx___mutex_lock+0x10/0x10
[  237.773201][T12201]  ? __pfx_vfs_read+0x10/0x10
[  237.777876][T12201]  ? ipv6_setsockopt+0xe2/0x170
[  237.782736][T12201]  ? __fget_files+0x2a/0x410
[  237.787342][T12201]  ? __fget_files+0x395/0x410
[  237.788287][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  237.792019][T12201]  ? __fget_files+0x2a/0x410
[  237.803578][T12201]  ksys_read+0x18f/0x2b0
[  237.807828][T12201]  ? __pfx_ksys_read+0x10/0x10
[  237.812591][T12201]  ? do_syscall_64+0x100/0x230
[  237.817361][T12201]  ? do_syscall_64+0xb6/0x230
[  237.822044][T12201]  do_syscall_64+0xf3/0x230
[  237.826554][T12201]  ? clear_bhb_loop+0x35/0x90
[  237.831232][T12201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.837130][T12201] RIP: 0033:0x7f44b497e92c
[  237.841550][T12201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  237.861595][T12201] RSP: 002b:00007f44b56b0050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.870011][T12201] RAX: ffffffffffffffda RBX: 00007f44b4b45fa0 RCX: 00007f44b497e92c
[  237.877989][T12201] RDX: 000000000000000f RSI: 00007f44b56b00b0 RDI: 0000000000000007
[  237.885963][T12201] RBP: 00007f44b56b00a0 R08: 0000000000000000 R09: 0000000000000000
[  237.893941][T12201] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001
[  237.901922][T12201] R13: 0000000000000000 R14: 00007f44b4b45fa0 R15: 00007ffd9d9402f8
[  237.909908][T12201]  </TASK>
[  237.928333][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.039044][T12206] netlink: 'syz.0.1960': attribute type 27 has an invalid length.
[  238.059747][T12206] netlink: 'syz.0.1960': attribute type 27 has an invalid length.
[  238.078388][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.218370][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.224545][T12224] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  238.317490][T12234] __nla_validate_parse: 2 callbacks suppressed
[  238.317510][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  238.358456][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.429164][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1970'.
[  238.508818][ T8857] tipc: Node number set to 4278255617
[  238.648943][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.918411][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  239.149482][T12286] netlink: 'syz.1.1984': attribute type 1 has an invalid length.
[  239.212317][T12286] 8021q: adding VLAN 0 to HW filter on device bond5
[  239.302257][T12286] 8021q: adding VLAN 0 to HW filter on device bond5
[  239.322687][T12286] bond5: (slave vcan2): The slave device specified does not support setting the MAC address
[  239.354541][T12286] bond5: (slave vcan2): Error -95 calling set_mac_address
[  239.458338][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  239.614793][T12312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1990'.
[  239.900488][T12332] x_tables: duplicate underflow at hook 1
[  240.197985][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'.
[  240.473643][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'.
[  240.735281][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'.
[  240.825613][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'.
[  240.880754][T12392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2016'.
[  241.249694][T12411] batman_adv: batadv0: Adding interface: gretap2
[  241.275144][T12411] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.305991][T12411] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  241.324277][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'.
[  241.590767][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  241.654942][T12432] hsr_slave_1 (unregistering): left allmulticast mode
[  241.677859][T12434] tipc: Failed to remove unknown binding: 66,1,1/1:101981165/101981167
[  241.689969][T12432] hsr_slave_1 (unregistering): left promiscuous mode
[  241.694429][T12434] tipc: Failed to remove unknown binding: 66,1,1/1:101981165/101981167
[  242.170138][T12453] netlink: 'syz.4.2038': attribute type 10 has an invalid length.
[  242.337556][T12464] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  243.262279][T12506] netlink: 'syz.3.2056': attribute type 10 has an invalid length.
[  243.291712][T12506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.342395][T12506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.396960][T12506] 
: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  243.508991][T12523] x_tables: duplicate underflow at hook 1
[  243.542594][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.554086][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.565555][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.578756][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.589427][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  243.596952][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.656083][T12524] lo speed is unknown, defaulting to 1000
[  243.679045][T12524] lo speed is unknown, defaulting to 1000
[  244.087200][T12524] chnl_net:caif_netlink_parms(): no params data found
[  244.296217][T12524] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.308353][T12524] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.323224][T12524] bridge_slave_0: entered allmulticast mode
[  244.339402][T12524] bridge_slave_0: entered promiscuous mode
[  244.351109][T12572] lo speed is unknown, defaulting to 1000
[  244.357806][T12524] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.375959][T12524] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.408814][T12524] bridge_slave_1: entered allmulticast mode
[  244.424229][T12524] bridge_slave_1: entered promiscuous mode
[  244.477505][T12572] lo speed is unknown, defaulting to 1000
[  244.511801][T12524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.545024][T12524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.619808][T12582] __nla_validate_parse: 3 callbacks suppressed
[  244.619828][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'.
[  244.649625][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'.
[  244.706786][T12524] team0: Port device team_slave_0 added
[  244.729642][T12524] team0: Port device team_slave_1 added
[  244.805945][T12524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.813836][T12524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.866741][T12524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.914998][T12524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.925400][T12524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.988222][T12524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.062110][T12575] lo speed is unknown, defaulting to 1000
[  245.117377][T12575] lo speed is unknown, defaulting to 1000
[  245.150608][T12601] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2083'.
[  245.196002][T12524] hsr_slave_0: entered promiscuous mode
[  245.232288][T12524] hsr_slave_1: entered promiscuous mode
[  245.239925][T12524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.247564][T12524] Cannot create hsr debugfs directory
[  245.272873][T12603] pim6reg: entered allmulticast mode
[  245.475876][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'.
[  245.691094][ T5847] Bluetooth: hci2: command tx timeout
[  245.830361][T12621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2089'.
[  245.837612][T12618] net_ratelimit: 3 callbacks suppressed
[  245.837632][T12618] sock: sock_set_timeout: `syz.3.2088' (pid 12618) tries to set negative timeout
[  245.866199][T12623] netlink: 'syz.1.2090': attribute type 39 has an invalid length.
[  245.895165][T12615] syzkaller0: entered promiscuous mode
[  245.905497][T12615] syzkaller0: entered allmulticast mode
[  246.275564][T12637] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2095'.
[  246.295874][T12637] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2095'.
[  246.315528][T12638] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2095'.
[  246.326170][T12638] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2095'.
[  246.406121][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.426124][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.455540][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.477188][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.538404][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.560533][T12524] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  246.582121][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.599000][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.617509][T12524] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  246.637079][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.668559][T12524] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  246.675553][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.697781][T12524] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  246.718790][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.733668][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.749086][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.769519][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'.
[  246.778441][T12642] netlink: 'syz.0.2096': attribute type 30 has an invalid length.
[  246.796963][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.837536][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.866710][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.913637][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.945765][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  246.981212][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  247.016547][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  247.041716][T12524] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.057411][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  247.100837][T12524] 8021q: adding VLAN 0 to HW filter on device team0
[  247.133513][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  247.184227][T12670] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  247.204462][T12670] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  247.239722][ T5841] IPVS: starting estimator thread 0...
[  247.256127][T12642] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  247.301720][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.308891][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.329354][T12680] IPVS: using max 21 ests per chain, 50400 per kthread
[  247.333423][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.343378][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.381633][T12679] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  247.396994][T12679] tipc: Enabled bearer <udp:s>, priority 10
[  247.518483][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  247.526474][T12690] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  247.769995][ T5847] Bluetooth: hci2: command tx timeout
[  247.788186][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  247.939557][T12524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.318309][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  248.463656][T12524] veth0_vlan: entered promiscuous mode
[  248.474462][T12524] veth1_vlan: entered promiscuous mode
[  248.595623][T12524] veth0_macvtap: entered promiscuous mode
[  248.621274][T12524] veth1_macvtap: entered promiscuous mode
[  248.687702][T12524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.739632][T12524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.763658][T12524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.787505][T12524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.811893][T12524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.827135][T12524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.850302][T12764] sctp: [Deprecated]: syz.3.2134 (pid 12764) Use of int in max_burst socket option.
[  248.850302][T12764] Use struct sctp_assoc_value instead
[  248.857650][T12524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.898247][T12524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.070952][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.083931][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.139559][T12778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.162543][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.171453][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.368355][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  249.510223][T12800] bridge0: port 1(gretap0) entered blocking state
[  249.550275][T12800] bridge0: port 1(gretap0) entered disabled state
[  249.568617][T12800] gretap0: entered allmulticast mode
[  249.581427][T12800] gretap0: entered promiscuous mode
[  249.597828][T12808] gretap0: left allmulticast mode
[  249.612274][T12809] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  249.617591][T12808] gretap0: left promiscuous mode
[  249.635321][T12808] bridge0: port 1(gretap0) entered disabled state
[  249.669760][T12809] __nla_validate_parse: 11 callbacks suppressed
[  249.669785][T12809] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2148'.
[  249.825661][T12817] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20001
[  249.833727][T12817] x_tables: duplicate underflow at hook 1
[  249.875937][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.891339][T12819] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2152'.
[  249.904032][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.915011][T12819] validate_nla: 9 callbacks suppressed
[  249.915031][T12819] netlink: 'syz.1.2152': attribute type 1 has an invalid length.
[  250.202889][T12839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2158'.
[  250.254130][T12844] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20004
[  250.408228][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  250.722165][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.160259][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.180201][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.188769][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.196788][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.225131][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  251.242124][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.253577][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.324646][T12895] xt_l2tp: v2 sid > 0xffff: 262144
[  251.390185][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.448196][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  251.482283][T12887] lo speed is unknown, defaulting to 1000
[  251.595758][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.659865][T12887] lo speed is unknown, defaulting to 1000
[  251.758666][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'.
[  252.023765][T12927] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  252.053653][T12927] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  252.070908][   T12] bridge_slave_1: left allmulticast mode
[  252.081861][   T12] bridge_slave_1: left promiscuous mode
[  252.090702][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.103401][   T12] bridge_slave_0: left allmulticast mode
[  252.110154][   T12] bridge_slave_0: left promiscuous mode
[  252.117868][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.191636][T12942] netlink: 'syz.0.2190': attribute type 4 has an invalid length.
[  252.324211][T12946] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  252.488325][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  252.647032][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.661792][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.672812][   T12] bond0 (unregistering): Released all slaves
[  253.288824][ T5848] Bluetooth: hci2: command tx timeout
[  253.307774][T12887] chnl_net:caif_netlink_parms(): no params data found
[  253.323945][T12974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2201'.
[  253.379492][T12973] netlink: 'syz.3.2201': attribute type 10 has an invalid length.
[  253.457964][T12980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2201'.
[  253.528173][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  253.550847][T12973] 
: (slave dummy0): Enslaving as an active interface with an up link
[  253.691113][T12998] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2210'.
[  253.737445][   T12] hsr_slave_0: left promiscuous mode
[  253.786084][   T12] hsr_slave_1: left promiscuous mode
[  253.799992][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.807567][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.827873][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.846129][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.873750][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'.
[  253.896986][   T12] veth1_macvtap: left promiscuous mode
[  253.913730][   T12] veth0_macvtap: left promiscuous mode
[  253.920275][   T12] veth1_vlan: left promiscuous mode
[  253.926496][   T12] veth0_vlan: left promiscuous mode
[  254.192458][T13024] siw: device registration error -23
[  254.568237][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  254.609579][   T12] team0 (unregistering): Port device team_slave_1 removed
[  254.678421][   T12] team0 (unregistering): Port device team_slave_0 removed
[  255.330347][T12887] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.337487][T12887] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.345949][T12887] bridge_slave_0: entered allmulticast mode
[  255.353577][T12887] bridge_slave_0: entered promiscuous mode
[  255.369227][ T5848] Bluetooth: hci2: command tx timeout
[  255.412681][T12887] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.420344][T12887] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.427653][T12887] bridge_slave_1: entered allmulticast mode
[  255.434799][T12887] bridge_slave_1: entered promiscuous mode
[  255.497857][T13043] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  255.522832][T12887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.528442][T13043] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  255.570802][T12887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.608341][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  255.744007][T12887] team0: Port device team_slave_0 added
[  255.763317][T12887] team0: Port device team_slave_1 added
[  255.897708][T12887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.908188][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.988378][T12887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.020119][T12887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.027118][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.118401][T12887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.648264][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  256.892938][T12887] hsr_slave_0: entered promiscuous mode
[  256.899893][T12887] hsr_slave_1: entered promiscuous mode
[  257.688228][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  258.729383][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  259.768287][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  260.808204][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  261.848244][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  262.888228][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  263.018999][ T5848] Bluetooth: hci2: command tx timeout
[  263.278169][T12887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.285780][T12887] Cannot create hsr debugfs directory
[  263.928259][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  264.968216][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  265.048250][ T5847] Bluetooth: hci2: command tx timeout
[  265.311372][T13066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2233'.
[  265.328347][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'.
[  265.424830][T13066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2233'.
[  265.526451][T13073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2236'.
[  265.553767][T13080] FAULT_INJECTION: forcing a failure.
[  265.553767][T13080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.569747][T13080] CPU: 0 UID: 0 PID: 13080 Comm: syz.0.2237 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  265.580555][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  265.590632][T13080] Call Trace:
[  265.593916][T13080]  <TASK>
[  265.596853][T13080]  dump_stack_lvl+0x241/0x360
[  265.601544][T13080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.606748][T13080]  ? __pfx__printk+0x10/0x10
[  265.611360][T13080]  ? __pfx_lock_release+0x10/0x10
[  265.616401][T13080]  should_fail_ex+0x3b0/0x4e0
[  265.621083][T13080]  _copy_from_user+0x2f/0xc0
[  265.625687][T13080]  copy_msghdr_from_user+0xae/0x680
[  265.630896][T13080]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  265.636703][T13080]  ? __fget_files+0x2a/0x410
[  265.641306][T13080]  ? __fget_files+0x2a/0x410
[  265.645901][T13080]  __sys_sendmsg+0x209/0x350
[  265.650493][T13080]  ? __pfx_lock_release+0x10/0x10
[  265.655528][T13080]  ? __pfx___sys_sendmsg+0x10/0x10
[  265.660740][T13080]  ? __pfx_vfs_write+0x10/0x10
[  265.665532][T13080]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  265.671860][T13080]  ? do_syscall_64+0x100/0x230
[  265.676630][T13080]  ? do_syscall_64+0xb6/0x230
[  265.681309][T13080]  do_syscall_64+0xf3/0x230
[  265.685817][T13080]  ? clear_bhb_loop+0x35/0x90
[  265.690494][T13080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.696392][T13080] RIP: 0033:0x7ff71757ff19
[  265.700807][T13080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.720414][T13080] RSP: 002b:00007ff71836e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.728830][T13080] RAX: ffffffffffffffda RBX: 00007ff717745fa0 RCX: 00007ff71757ff19
[  265.736799][T13080] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  265.744773][T13080] RBP: 00007ff71836e0a0 R08: 0000000000000000 R09: 0000000000000000
[  265.752746][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.760721][T13080] R13: 0000000000000000 R14: 00007ff717745fa0 R15: 00007ffdd1f37c58
[  265.768712][T13080]  </TASK>
[  266.000095][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'.
[  266.009412][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  266.024011][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'.
[  266.329650][T13103] lo: entered allmulticast mode
[  266.380994][T12887] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  266.401397][T12887] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  266.422674][T12887] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  266.452015][T12887] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  266.678903][T12887] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.734274][T12887] 8021q: adding VLAN 0 to HW filter on device team0
[  266.770734][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.777979][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.841933][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.849141][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.871366][T13126] FAULT_INJECTION: forcing a failure.
[  266.871366][T13126] name failslab, interval 1, probability 0, space 0, times 0
[  266.905886][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.3.2252 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  266.916719][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  266.926789][T13126] Call Trace:
[  266.930072][T13126]  <TASK>
[  266.933006][T13126]  dump_stack_lvl+0x241/0x360
[  266.937696][T13126]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.942911][T13126]  ? __pfx__printk+0x10/0x10
[  266.947504][T13126]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  266.953528][T13126]  ? __pfx___might_resched+0x10/0x10
[  266.958816][T13126]  should_fail_ex+0x3b0/0x4e0
[  266.963497][T13126]  should_failslab+0xac/0x100
[  266.968186][T13126]  kmem_cache_alloc_node_noprof+0x77/0x380
[  266.973995][T13126]  ? __alloc_skb+0x1c3/0x440
[  266.978698][T13126]  __alloc_skb+0x1c3/0x440
[  266.983180][T13126]  ? __pfx___alloc_skb+0x10/0x10
[  266.988139][T13126]  ? netlink_autobind+0xd6/0x2f0
[  266.993087][T13126]  ? netlink_autobind+0x2b0/0x2f0
[  266.998117][T13126]  netlink_sendmsg+0x638/0xcb0
[  267.002897][T13126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.008187][T13126]  ? aa_sock_msg_perm+0x91/0x160
[  267.013135][T13126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.018432][T13126]  __sock_sendmsg+0x221/0x270
[  267.023119][T13126]  ____sys_sendmsg+0x52a/0x7e0
[  267.027912][T13126]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.033202][T13126]  ? __fget_files+0x2a/0x410
[  267.037815][T13126]  ? __fget_files+0x2a/0x410
[  267.042409][T13126]  __sys_sendmsg+0x269/0x350
[  267.047004][T13126]  ? __pfx_lock_release+0x10/0x10
[  267.048254][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  267.052031][T13126]  ? __pfx___sys_sendmsg+0x10/0x10
[  267.064120][T13126]  ? __pfx_vfs_write+0x10/0x10
[  267.068921][T13126]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.075280][T13126]  ? do_syscall_64+0x100/0x230
[  267.080074][T13126]  ? do_syscall_64+0xb6/0x230
[  267.084793][T13126]  do_syscall_64+0xf3/0x230
[  267.089321][T13126]  ? clear_bhb_loop+0x35/0x90
[  267.094002][T13126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.099903][T13126] RIP: 0033:0x7f44b497ff19
[  267.104328][T13126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.123952][T13126] RSP: 002b:00007f44b56b0058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.132374][T13126] RAX: ffffffffffffffda RBX: 00007f44b4b45fa0 RCX: 00007f44b497ff19
[  267.140349][T13126] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  267.148320][T13126] RBP: 00007f44b56b00a0 R08: 0000000000000000 R09: 0000000000000000
[  267.156290][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.164260][T13126] R13: 0000000000000000 R14: 00007f44b4b45fa0 R15: 00007ffd9d9402f8
[  267.172263][T13126]  </TASK>
[  267.192283][T12887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  267.203237][T12887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  267.303285][T13130] netlink: 'syz.2.2253': attribute type 6 has an invalid length.
[  267.312309][T13130] netlink: 'syz.2.2253': attribute type 6 has an invalid length.
[  267.381746][T13133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2255'.
[  267.477492][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'.
[  267.507427][T13140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'.
[  267.537061][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2258'.
[  267.637780][T12887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.996766][T12887] veth0_vlan: entered promiscuous mode
[  268.031749][T13173] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  268.032614][T12887] veth1_vlan: entered promiscuous mode
[  268.072178][T13175] 8021q: adding VLAN 0 to HW filter on device bond7
[  268.088375][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  268.095326][T13173] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  268.205666][T12887] veth0_macvtap: entered promiscuous mode
[  268.220318][T12887] veth1_macvtap: entered promiscuous mode
[  268.242166][T12887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.261567][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.272192][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.283419][T12887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.347261][T12887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.357207][T12887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.366190][T12887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.375544][T12887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.642232][ T7681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.665238][ T7681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.734984][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.777429][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.128338][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  269.353147][T13246] netlink: 'syz.1.2289': attribute type 1 has an invalid length.
[  269.386533][T13246] 8021q: adding VLAN 0 to HW filter on device bond6
[  269.855939][T13277] openvswitch: netlink: IP tunnel dst address not specified
[  269.865458][T13276] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  269.893242][T13276] 8021q: adding VLAN 0 to HW filter on device bond7
[  270.168290][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  270.641110][ T3488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.959708][T13312] netlink: 'syz.3.2313': attribute type 1 has an invalid length.
[  271.000950][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.014879][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.023826][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.033972][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.041737][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  271.049434][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  271.068335][T13315] 8021q: adding VLAN 0 to HW filter on device bond7
[  271.111414][T13312] 8021q: adding VLAN 0 to HW filter on device bond4
[  271.136027][T13318] 8021q: adding VLAN 0 to HW filter on device bond7
[  271.143385][T13318] bond7: (slave vcan2): The slave device specified does not support setting the MAC address
[  271.159507][T13318] bond7: (slave vcan2): Error -95 calling set_mac_address
[  271.200710][T13319] lo speed is unknown, defaulting to 1000
[  271.207717][T13319] lo speed is unknown, defaulting to 1000
[  271.213728][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  271.410454][ T3488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.438965][T13336] __nla_validate_parse: 8 callbacks suppressed
[  271.438985][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'.
[  271.546871][ T3488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.716093][ T3488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.739310][T13350] FAULT_INJECTION: forcing a failure.
[  271.739310][T13350] name failslab, interval 1, probability 0, space 0, times 0
[  271.821412][T13350] CPU: 0 UID: 0 PID: 13350 Comm: syz.1.2322 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  271.832224][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  271.842313][T13350] Call Trace:
[  271.845619][T13350]  <TASK>
[  271.848577][T13350]  dump_stack_lvl+0x241/0x360
[  271.853290][T13350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.858522][T13350]  ? __pfx__printk+0x10/0x10
[  271.863130][T13350]  ? __kmalloc_cache_noprof+0x48/0x390
[  271.868607][T13350]  ? __pfx___might_resched+0x10/0x10
[  271.873897][T13350]  should_fail_ex+0x3b0/0x4e0
[  271.878578][T13350]  should_failslab+0xac/0x100
[  271.883261][T13350]  __kmalloc_cache_noprof+0x70/0x390
[  271.888552][T13350]  ? ip6addrlbl_add+0x131/0xba0
[  271.893405][T13350]  ip6addrlbl_add+0x131/0xba0
[  271.898092][T13350]  ? __nla_parse+0x40/0x60
[  271.902510][T13350]  ip6addrlbl_newdel+0x4a3/0x600
[  271.907445][T13350]  ? __pfx_lock_release+0x10/0x10
[  271.912473][T13350]  ? __pfx_ip6addrlbl_newdel+0x10/0x10
[  271.917959][T13350]  ? __pfx_ip6addrlbl_newdel+0x10/0x10
[  271.923427][T13350]  rtnetlink_rcv_msg+0x791/0xcf0
[  271.928371][T13350]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  271.933502][T13350]  ? __lock_acquire+0x1397/0x2100
[  271.938525][T13350]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.943999][T13350]  netlink_rcv_skb+0x1e3/0x430
[  271.948767][T13350]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.954234][T13350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.959529][T13350]  ? netlink_deliver_tap+0x2e/0x1b0
[  271.964733][T13350]  netlink_unicast+0x7f6/0x990
[  271.969510][T13350]  ? __pfx_netlink_unicast+0x10/0x10
[  271.974817][T13350]  ? __virt_addr_valid+0x183/0x530
[  271.979946][T13350]  ? __check_object_size+0x48e/0x900
[  271.985247][T13350]  netlink_sendmsg+0x8e4/0xcb0
[  271.990023][T13350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.995313][T13350]  ? aa_sock_msg_perm+0x91/0x160
[  272.000256][T13350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.005538][T13350]  __sock_sendmsg+0x221/0x270
[  272.010223][T13350]  ____sys_sendmsg+0x52a/0x7e0
[  272.014993][T13350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.020274][T13350]  ? __fget_files+0x2a/0x410
[  272.024862][T13350]  ? __fget_files+0x2a/0x410
[  272.029474][T13350]  __sys_sendmsg+0x269/0x350
[  272.034089][T13350]  ? __pfx_lock_release+0x10/0x10
[  272.039127][T13350]  ? __pfx___sys_sendmsg+0x10/0x10
[  272.044254][T13350]  ? __pfx_vfs_write+0x10/0x10
[  272.049043][T13350]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  272.055375][T13350]  ? do_syscall_64+0x100/0x230
[  272.060143][T13350]  ? do_syscall_64+0xb6/0x230
[  272.064826][T13350]  do_syscall_64+0xf3/0x230
[  272.069333][T13350]  ? clear_bhb_loop+0x35/0x90
[  272.074012][T13350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.079912][T13350] RIP: 0033:0x7fa42157ff19
[  272.084331][T13350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.103958][T13350] RSP: 002b:00007fa4222ed058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.112394][T13350] RAX: ffffffffffffffda RBX: 00007fa421745fa0 RCX: 00007fa42157ff19
[  272.120368][T13350] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  272.128355][T13350] RBP: 00007fa4222ed0a0 R08: 0000000000000000 R09: 0000000000000000
[  272.136369][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.144372][T13350] R13: 0000000000000000 R14: 00007fa421745fa0 R15: 00007ffee58f6508
[  272.152373][T13350]  </TASK>
[  272.248199][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  272.318442][ T3488] bridge_slave_1: left allmulticast mode
[  272.324152][ T3488] bridge_slave_1: left promiscuous mode
[  272.330398][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.349695][ T3488] bridge_slave_0: left allmulticast mode
[  272.356587][ T3488] bridge_slave_0: left promiscuous mode
[  272.362534][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.378278][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'.
[  272.396414][T13369] netlink: 'syz.3.2326': attribute type 1 has an invalid length.
[  272.398912][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'.
[  272.791892][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.804064][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.814809][ T3488] bond0 (unregistering): Released all slaves
[  272.837971][T13360] veth0_vlan: left promiscuous mode
[  272.920481][T13369] 8021q: adding VLAN 0 to HW filter on device bond5
[  273.049655][T13359] delete_channel: no stack
[  273.082340][T13319] chnl_net:caif_netlink_parms(): no params data found
[  273.128738][ T5847] Bluetooth: hci2: command tx timeout
[  273.288288][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  273.363921][T13388] netlink: 'syz.0.2334': attribute type 21 has an invalid length.
[  273.402864][T13404] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  273.421339][T13404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2336'.
[  273.703744][T13414] FAULT_INJECTION: forcing a failure.
[  273.703744][T13414] name failslab, interval 1, probability 0, space 0, times 0
[  273.721073][T13414] CPU: 0 UID: 0 PID: 13414 Comm: syz.0.2338 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  273.731907][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  273.741995][T13414] Call Trace:
[  273.745295][T13414]  <TASK>
[  273.748233][T13414]  dump_stack_lvl+0x241/0x360
[  273.748279][T13319] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.752919][T13414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.752946][T13414]  ? __pfx__printk+0x10/0x10
[  273.761360][T13319] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.765182][T13414]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  273.782851][T13414]  ? __pfx___might_resched+0x10/0x10
[  273.784798][T13319] bridge_slave_0: entered allmulticast mode
[  273.788154][T13414]  should_fail_ex+0x3b0/0x4e0
[  273.788191][T13414]  should_failslab+0xac/0x100
[  273.803465][T13414]  kmem_cache_alloc_node_noprof+0x77/0x380
[  273.809317][T13414]  ? __alloc_skb+0x1c3/0x440
[  273.811676][T13319] bridge_slave_0: entered promiscuous mode
[  273.813926][T13414]  __alloc_skb+0x1c3/0x440
[  273.813958][T13414]  ? __pfx___alloc_skb+0x10/0x10
[  273.829166][T13414]  ? netlink_ack_tlv_len+0x6e/0x200
[  273.834380][T13414]  netlink_ack+0x145/0xa50
[  273.838821][T13414]  netlink_rcv_skb+0x262/0x430
[  273.843611][T13414]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  273.849094][T13414]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  273.854412][T13414]  ? netlink_deliver_tap+0x2e/0x1b0
[  273.859613][T13414]  netlink_unicast+0x7f6/0x990
[  273.864386][T13414]  ? __pfx_netlink_unicast+0x10/0x10
[  273.869673][T13414]  ? __virt_addr_valid+0x183/0x530
[  273.874786][T13414]  ? __check_object_size+0x48e/0x900
[  273.880083][T13414]  netlink_sendmsg+0x8e4/0xcb0
[  273.884856][T13414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.890151][T13414]  ? aa_sock_msg_perm+0x91/0x160
[  273.895096][T13414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.900381][T13414]  __sock_sendmsg+0x221/0x270
[  273.905076][T13414]  ____sys_sendmsg+0x52a/0x7e0
[  273.909846][T13414]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.915139][T13414]  ? __fget_files+0x2a/0x410
[  273.919729][T13414]  ? __fget_files+0x2a/0x410
[  273.924323][T13414]  __sys_sendmsg+0x269/0x350
[  273.928923][T13414]  ? __pfx_lock_release+0x10/0x10
[  273.933958][T13414]  ? __pfx___sys_sendmsg+0x10/0x10
[  273.939082][T13414]  ? __pfx_vfs_write+0x10/0x10
[  273.943863][T13414]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  273.950309][T13414]  ? do_syscall_64+0x100/0x230
[  273.955103][T13414]  ? do_syscall_64+0xb6/0x230
[  273.959812][T13414]  do_syscall_64+0xf3/0x230
[  273.964343][T13414]  ? clear_bhb_loop+0x35/0x90
[  273.969038][T13414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.974944][T13414] RIP: 0033:0x7ff71757ff19
[  273.979389][T13414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.999019][T13414] RSP: 002b:00007ff71836e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.007454][T13414] RAX: ffffffffffffffda RBX: 00007ff717745fa0 RCX: 00007ff71757ff19
[  274.015452][T13414] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  274.023431][T13414] RBP: 00007ff71836e0a0 R08: 0000000000000000 R09: 0000000000000000
[  274.031423][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.039410][T13414] R13: 0000000000000000 R14: 00007ff717745fa0 R15: 00007ffdd1f37c58
[  274.047398][T13414]  </TASK>
[  274.070079][T13319] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.077235][T13319] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.084033][T13416] netlink: 'syz.2.2339': attribute type 1 has an invalid length.
[  274.089786][T13319] bridge_slave_1: entered allmulticast mode
[  274.099510][T13319] bridge_slave_1: entered promiscuous mode
[  274.122920][ T3488] hsr_slave_0: left promiscuous mode
[  274.137042][ T3488] hsr_slave_1: left promiscuous mode
[  274.148010][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.165522][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.175850][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.188818][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.217695][ T3488] veth1_macvtap: left promiscuous mode
[  274.223391][ T3488] veth0_macvtap: left promiscuous mode
[  274.229507][ T3488] veth1_vlan: left promiscuous mode
[  274.234848][ T3488] veth0_vlan: left promiscuous mode
[  274.328394][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  274.865496][ T3488] team0 (unregistering): Port device team_slave_1 removed
[  274.916595][ T3488] team0 (unregistering): Port device team_slave_0 removed
[  275.211350][ T5847] Bluetooth: hci2: command tx timeout
[  275.375542][T13416] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  275.378223][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  275.439809][T13319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.467013][T13319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.553814][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'.
[  275.575403][T13432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2343'.
[  275.649627][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'.
[  275.664070][T13319] team0: Port device team_slave_0 added
[  275.709176][T13319] team0: Port device team_slave_1 added
[  275.799499][T13319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.806485][T13319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.847797][T13319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.869835][T13319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.877129][T13319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.924222][T13319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.027440][T13450] netlink: 'syz.1.2349': attribute type 1 has an invalid length.
[  276.059124][T13319] hsr_slave_0: entered promiscuous mode
[  276.076348][T13319] hsr_slave_1: entered promiscuous mode
[  276.085170][T13319] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.095679][T13319] Cannot create hsr debugfs directory
[  276.146415][T13457] FAULT_INJECTION: forcing a failure.
[  276.146415][T13457] name failslab, interval 1, probability 0, space 0, times 0
[  276.147106][T13450] 8021q: adding VLAN 0 to HW filter on device bond8
[  276.159631][T13457] CPU: 1 UID: 0 PID: 13457 Comm: syz.2.2351 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  276.159665][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  276.159677][T13457] Call Trace:
[  276.159685][T13457]  <TASK>
[  276.159693][T13457]  dump_stack_lvl+0x241/0x360
[  276.159725][T13457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.159749][T13457]  ? __pfx__printk+0x10/0x10
[  276.159782][T13457]  ? __kmalloc_cache_noprof+0x48/0x390
[  276.213316][T13457]  ? __pfx___might_resched+0x10/0x10
[  276.218609][T13457]  should_fail_ex+0x3b0/0x4e0
[  276.223287][T13457]  should_failslab+0xac/0x100
[  276.227991][T13457]  __kmalloc_cache_noprof+0x70/0x390
[  276.233297][T13457]  ? ip6addrlbl_add+0x131/0xba0
[  276.238166][T13457]  ip6addrlbl_add+0x131/0xba0
[  276.242864][T13457]  ? __nla_parse+0x40/0x60
[  276.247287][T13457]  ip6addrlbl_newdel+0x4a3/0x600
[  276.252236][T13457]  ? __pfx_lock_release+0x10/0x10
[  276.257264][T13457]  ? __pfx_ip6addrlbl_newdel+0x10/0x10
[  276.262732][T13457]  ? __pfx_ip6addrlbl_newdel+0x10/0x10
[  276.268191][T13457]  rtnetlink_rcv_msg+0x791/0xcf0
[  276.273129][T13457]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  276.278253][T13457]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  276.283730][T13457]  ? ref_tracker_free+0x643/0x7e0
[  276.288764][T13457]  netlink_rcv_skb+0x1e3/0x430
[  276.293528][T13457]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  276.298989][T13457]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.304286][T13457]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.309484][T13457]  netlink_unicast+0x7f6/0x990
[  276.314261][T13457]  ? __pfx_netlink_unicast+0x10/0x10
[  276.319547][T13457]  ? __virt_addr_valid+0x183/0x530
[  276.324664][T13457]  ? __check_object_size+0x48e/0x900
[  276.329952][T13457]  netlink_sendmsg+0x8e4/0xcb0
[  276.334726][T13457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.340026][T13457]  ? aa_sock_msg_perm+0x91/0x160
[  276.344966][T13457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.350246][T13457]  __sock_sendmsg+0x221/0x270
[  276.354929][T13457]  ____sys_sendmsg+0x52a/0x7e0
[  276.359698][T13457]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.364984][T13457]  ? __fget_files+0x2a/0x410
[  276.369570][T13457]  ? __fget_files+0x2a/0x410
[  276.374162][T13457]  __sys_sendmsg+0x269/0x350
[  276.379095][T13457]  ? __pfx_lock_release+0x10/0x10
[  276.384124][T13457]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.389241][T13457]  ? __pfx_vfs_write+0x10/0x10
[  276.394025][T13457]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  276.400350][T13457]  ? do_syscall_64+0x100/0x230
[  276.405118][T13457]  ? do_syscall_64+0xb6/0x230
[  276.409797][T13457]  do_syscall_64+0xf3/0x230
[  276.414303][T13457]  ? clear_bhb_loop+0x35/0x90
[  276.418974][T13457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.424871][T13457] RIP: 0033:0x7f4517d7ff19
[  276.429285][T13457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.448891][T13457] RSP: 002b:00007f4518b2c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.457319][T13457] RAX: ffffffffffffffda RBX: 00007f4517f45fa0 RCX: 00007f4517d7ff19
[  276.465291][T13457] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  276.473261][T13457] RBP: 00007f4518b2c0a0 R08: 0000000000000000 R09: 0000000000000000
[  276.481233][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.489199][T13457] R13: 0000000000000000 R14: 00007f4517f45fa0 R15: 00007ffdc1730608
[  276.497179][T13457]  </TASK>
[  276.501024][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  276.554474][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'.
[  276.581033][T13454] 8021q: adding VLAN 0 to HW filter on device bond8
[  276.588412][T13454] bond8: (slave vti0): The slave device specified does not support setting the MAC address
[  276.599356][T13454] bond8: (slave vti0): Error -95 calling set_mac_address
[  276.633347][T13464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.862097][T13470] netlink: 'syz.0.2355': attribute type 50 has an invalid length.
[  277.007382][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2358'.
[  277.186137][T13319] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  277.198650][T13319] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  277.207660][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'.
[  277.220342][T13319] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  277.231192][T13319] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  277.231218][T13491] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  277.288387][ T5847] Bluetooth: hci2: command tx timeout
[  277.337840][T13319] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.361780][T13319] 8021q: adding VLAN 0 to HW filter on device team0
[  277.374352][  T749] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.381561][  T749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.395174][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.402396][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.528250][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  277.624074][T13503] netlink: 'syz.2.2365': attribute type 1 has an invalid length.
[  277.654435][T13319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.663593][T13503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'.
[  277.914293][T13319] veth0_vlan: entered promiscuous mode
[  277.940664][T13319] veth1_vlan: entered promiscuous mode
[  278.009551][T13319] veth0_macvtap: entered promiscuous mode
[  278.027373][T13319] veth1_macvtap: entered promiscuous mode
[  278.077284][T13319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.094025][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.109652][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.129303][T13319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.143959][T13520] netlink: 'syz.3.2369': attribute type 3 has an invalid length.
[  278.158830][T13520] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2369'.
[  278.190169][T13319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.215291][T13319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.234488][T13319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.251805][T13319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.347162][T13523] team0: Device ipvlan2 failed to register rx_handler
[  278.428309][  T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.453018][  T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.462019][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'.
[  278.519934][  T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.533494][  T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.578381][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  278.853675][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'.
[  278.915403][T13548] netlink: 'syz.2.2376': attribute type 10 has an invalid length.
[  278.940806][T13548] bridge0: port 4(team0) entered disabled state
[  278.959146][T13548] team0: left allmulticast mode
[  278.967433][T13548] team_slave_0: left allmulticast mode
[  278.977325][T13551] netlink: 'syz.2.2376': attribute type 10 has an invalid length.
[  278.983624][T13548] team_slave_1: left allmulticast mode
[  279.001001][T13548] team0: left promiscuous mode
[  279.014679][T13548] team_slave_0: left promiscuous mode
[  279.029603][T13548] team_slave_1: left promiscuous mode
[  279.035313][T13548] bridge0: port 4(team0) entered disabled state
[  279.054480][T13548] 8021q: adding VLAN 0 to HW filter on device team0
[  279.064191][T13548] bond0: (slave team0): Enslaving as an active interface with an up link
[  279.083527][T13551] bond0: (slave team0): Releasing backup interface
[  279.127219][T13551] bridge0: port 1(team0) entered blocking state
[  279.149184][T13551] bridge0: port 1(team0) entered disabled state
[  279.166876][T13551] team0: entered allmulticast mode
[  279.199777][T13560] netlink: 'syz.2.2376': attribute type 126 has an invalid length.
[  279.209271][T13551] team_slave_0: entered allmulticast mode
[  279.215613][T13551] team_slave_1: entered allmulticast mode
[  279.249192][T13551] team0: entered promiscuous mode
[  279.254286][T13551] team_slave_0: entered promiscuous mode
[  279.264368][T13551] team_slave_1: entered promiscuous mode
[  279.273838][T13548] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2376'.
[  279.284520][T13554] tipc: MTU too low for tipc bearer
[  279.618370][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  279.995690][T13599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2391'.
[  280.077747][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'.
[  280.462760][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.648334][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  281.440754][T13646] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  281.476618][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  281.494891][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  281.504060][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  281.521132][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  281.535788][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  281.545292][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  281.657872][T13647] lo speed is unknown, defaulting to 1000
[  281.664790][T13653] x_tables: unsorted entry at hook 3
[  281.664942][T13647] lo speed is unknown, defaulting to 1000
[  281.688232][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  282.133101][T13647] chnl_net:caif_netlink_parms(): no params data found
[  282.275151][T13683] __nla_validate_parse: 4 callbacks suppressed
[  282.275171][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'.
[  282.285711][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'.
[  282.312186][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.338389][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'.
[  282.361992][T13684] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  282.377669][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'.
[  282.417547][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.595152][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.685679][T13706] netlink: 'syz.1.2423': attribute type 2 has an invalid length.
[  282.716220][T13705] netlink: 'syz.1.2423': attribute type 2 has an invalid length.
[  282.728257][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  282.777025][T13709] xt_recent: Unsupported userspace flags (00000042)
[  282.783059][T13712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2425'.
[  282.836934][T13647] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.845785][T13647] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.854004][T13647] bridge_slave_0: entered allmulticast mode
[  282.861938][T13647] bridge_slave_0: entered promiscuous mode
[  282.876785][T13647] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.884761][T13647] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.902385][T13647] bridge_slave_1: entered allmulticast mode
[  282.911169][T13719] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2427'.
[  282.921228][T13647] bridge_slave_1: entered promiscuous mode
[  283.151102][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.192929][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.218707][T13727] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.292468][T13647] team0: Port device team_slave_0 added
[  283.309236][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2431'.
[  283.319708][T13727] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.338466][T13647] team0: Port device team_slave_1 added
[  283.344608][   T12] bridge_slave_1: left allmulticast mode
[  283.350672][   T12] bridge_slave_1: left promiscuous mode
[  283.357806][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.367599][   T12] bridge_slave_0: left allmulticast mode
[  283.374537][   T12] bridge_slave_0: left promiscuous mode
[  283.381354][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.612565][ T5848] Bluetooth: hci2: command tx timeout
[  283.772805][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  283.876843][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.888228][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.899154][   T12] bond0 (unregistering): Released all slaves
[  283.942875][T13727] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.054818][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.069795][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.120196][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.135265][T13727] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.183927][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.196252][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.224389][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.256601][T13742] IPv6: sit1: Disabled Multicast RS
[  284.448885][T13647] hsr_slave_0: entered promiscuous mode
[  284.478995][T13647] hsr_slave_1: entered promiscuous mode
[  284.500754][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.521754][T13647] Cannot create hsr debugfs directory
[  284.541823][T13727] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.622632][   T12] hsr_slave_0: left promiscuous mode
[  284.640130][   T12] hsr_slave_1: left promiscuous mode
[  284.646270][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.653968][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.670230][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.677678][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.719351][   T12] veth1_macvtap: left promiscuous mode
[  284.724928][   T12] veth0_macvtap: left promiscuous mode
[  284.731013][   T12] veth1_vlan: left promiscuous mode
[  284.737587][   T12] veth0_vlan: left promiscuous mode
[  284.808299][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  285.254658][   T12] team0 (unregistering): Port device team_slave_1 removed
[  285.307359][   T12] team0 (unregistering): Port device team_slave_0 removed
[  285.690832][ T5848] Bluetooth: hci2: command tx timeout
[  285.839512][T13758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2440'.
[  285.848803][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  285.863291][T13727] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.880385][T13727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.895510][T13727] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.998940][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'.
[  286.225242][T13774] netlink: 372 bytes leftover after parsing attributes in process `syz.3.2444'.
[  286.311445][T13775] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  286.482522][T13784] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[  286.898200][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  287.280824][T13647] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  287.305126][T13647] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  287.315398][T13647] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  287.339976][T13647] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  287.414261][T13838] __nla_validate_parse: 3 callbacks suppressed
[  287.414281][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'.
[  287.606755][T13647] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.665226][T13647] 8021q: adding VLAN 0 to HW filter on device team0
[  287.689539][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.697153][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.730048][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.737218][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.768298][ T5848] Bluetooth: hci2: command tx timeout
[  287.928241][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  288.005114][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'.
[  288.042893][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.311848][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'.
[  288.337653][T13873] netlink: 'syz.2.2470': attribute type 10 has an invalid length.
[  288.351154][T13873] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2470'.
[  288.380428][T13873] bridge0: port 1(team0) entered blocking state
[  288.386872][T13873] bridge0: port 1(team0) entered forwarding state
[  288.394601][T13873] 8021q: adding VLAN 0 to HW filter on device team0
[  288.427170][T13647] veth0_vlan: entered promiscuous mode
[  288.435459][T13873] netlink: 'syz.2.2470': attribute type 1 has an invalid length.
[  288.449284][T13647] veth1_vlan: entered promiscuous mode
[  288.476168][T13873] gretap0: entered promiscuous mode
[  288.484049][T13873] vlan0: entered promiscuous mode
[  288.501120][T13876] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2471'.
[  288.519161][T13873] gretap0: left promiscuous mode
[  288.640515][T13647] veth0_macvtap: entered promiscuous mode
[  288.658540][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2471'.
[  288.677026][T13647] veth1_macvtap: entered promiscuous mode
[  288.752953][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.781691][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.795217][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.808774][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.854762][T13647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.885335][T13647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.906908][T13647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.928902][T13888] xt_CT: You must specify a L4 protocol and not use inversions on it
[  288.938356][T13647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.969811][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  289.158354][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.201733][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.277574][ T7681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.287893][ T7681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.323010][T13916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'.
[  289.442631][T13926] netlink: 'syz.2.2483': attribute type 1 has an invalid length.
[  289.538915][T13926] bond8: entered promiscuous mode
[  289.544608][T13926] 8021q: adding VLAN 0 to HW filter on device bond8
[  289.682764][T13941] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  289.686572][T13939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2486'.
[  289.691174][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'.
[  289.782510][T13947] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  289.998223][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2493'.
[  290.008318][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  290.135466][T13965] netlink: set zone limit has 8 unknown bytes
[  290.360913][T13979] netlink: 'syz.3.2498': attribute type 1 has an invalid length.
[  290.413872][T13979] 8021q: adding VLAN 0 to HW filter on device bond6
[  290.421518][T13982] FAULT_INJECTION: forcing a failure.
[  290.421518][T13982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.435783][T13982] CPU: 1 UID: 0 PID: 13982 Comm: syz.3.2498 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  290.446587][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  290.456646][T13982] Call Trace:
[  290.459927][T13982]  <TASK>
[  290.462863][T13982]  dump_stack_lvl+0x241/0x360
[  290.467562][T13982]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.472807][T13982]  ? __pfx__printk+0x10/0x10
[  290.477407][T13982]  ? __pfx_lock_release+0x10/0x10
[  290.482443][T13982]  should_fail_ex+0x3b0/0x4e0
[  290.487125][T13982]  _copy_from_user+0x2f/0xc0
[  290.491723][T13982]  copy_msghdr_from_user+0xae/0x680
[  290.496961][T13982]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  290.503117][T13982]  ? __fget_files+0x2a/0x410
[  290.507718][T13982]  ? __fget_files+0x2a/0x410
[  290.512311][T13982]  __sys_sendmsg+0x209/0x350
[  290.516902][T13982]  ? __pfx_lock_release+0x10/0x10
[  290.521932][T13982]  ? __pfx___sys_sendmsg+0x10/0x10
[  290.527057][T13982]  ? __pfx_vfs_write+0x10/0x10
[  290.531853][T13982]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.538188][T13982]  ? do_syscall_64+0x100/0x230
[  290.542970][T13982]  ? do_syscall_64+0xb6/0x230
[  290.547660][T13982]  do_syscall_64+0xf3/0x230
[  290.552177][T13982]  ? clear_bhb_loop+0x35/0x90
[  290.556859][T13982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.562761][T13982] RIP: 0033:0x7f44b497ff19
[  290.567175][T13982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.586791][T13982] RSP: 002b:00007f44b27f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.595215][T13982] RAX: ffffffffffffffda RBX: 00007f44b4b46080 RCX: 00007f44b497ff19
[  290.603190][T13982] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  290.611168][T13982] RBP: 00007f44b27f60a0 R08: 0000000000000000 R09: 0000000000000000
[  290.619142][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.627118][T13982] R13: 0000000000000001 R14: 00007f44b4b46080 R15: 00007ffd9d9402f8
[  290.635110][T13982]  </TASK>
[  290.765048][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.797400][T13988] batadv0: tun_chr_ioctl cmd 1074025677
[  290.828456][T13988] batadv0: linktype set to 1
[  291.049784][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  291.557400][T14001] openvswitch: netlink: Missing key (keys=40, expected=80)
[  291.974369][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  291.984879][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  291.998296][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  292.007741][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  292.017860][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  292.025592][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  292.088195][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  292.133496][ T5848] Bluetooth: hci4: command 0x0405 tx timeout
[  292.442180][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.457059][T14032] __nla_validate_parse: 3 callbacks suppressed
[  292.457080][T14032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2512'.
[  292.497099][T14020] lo speed is unknown, defaulting to 1000
[  292.516732][T14020] lo speed is unknown, defaulting to 1000
[  292.662044][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.852205][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.030681][T14056] netlink: 'syz.0.2518': attribute type 10 has an invalid length.
[  293.040140][T14020] chnl_net:caif_netlink_parms(): no params data found
[  293.138199][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  293.187255][T14066] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  293.276289][T14069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2523'.
[  293.366909][T14071] ip6tnl2: entered allmulticast mode
[  293.409449][T14020] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.416619][T14020] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.422083][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'.
[  293.439603][T14020] bridge_slave_0: entered allmulticast mode
[  293.446922][T14020] bridge_slave_0: entered promiscuous mode
[  293.493870][T14020] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.501505][T14020] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.522468][T14020] bridge_slave_1: entered allmulticast mode
[  293.541717][T14020] bridge_slave_1: entered promiscuous mode
[  293.673433][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'.
[  293.686758][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  293.707081][   T35] bridge_slave_1: left allmulticast mode
[  293.716244][   T35] bridge_slave_1: left promiscuous mode
[  293.736709][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.749247][   T35] bridge_slave_0: left allmulticast mode
[  293.755429][   T35] bridge_slave_0: left promiscuous mode
[  293.763010][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.807582][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'.
[  293.917653][T14099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.923865][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'.
[  294.089062][ T5848] Bluetooth: hci2: command tx timeout
[  294.178375][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  294.252890][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.269536][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.283226][   T35] bond0 (unregistering): Released all slaves
[  294.297575][T14088] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  294.316349][T14020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.334500][T14020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.345058][T14090] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  294.375845][T14094] netlink: 'syz.0.2526': attribute type 3 has an invalid length.
[  294.397310][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2526'.
[  294.594060][T14020] team0: Port device team_slave_0 added
[  294.677789][T14020] team0: Port device team_slave_1 added
[  294.794847][T14020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.818728][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.849011][T14020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.920061][T14020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.934740][T14119] IPVS: Scheduler module ip_vs_sip not found
[  294.942655][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.018842][T14020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.139543][T14132] netlink: 'syz.2.2539': attribute type 1 has an invalid length.
[  295.208232][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  295.216453][   T35] hsr_slave_0: left promiscuous mode
[  295.225885][   T35] hsr_slave_1: left promiscuous mode
[  295.252041][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.269161][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.279450][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.302048][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.357116][   T35] veth1_macvtap: left promiscuous mode
[  295.368027][   T35] veth0_macvtap: left promiscuous mode
[  295.379022][   T35] veth1_vlan: left promiscuous mode
[  295.387043][   T35] veth0_vlan: left promiscuous mode
[  295.667124][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'.
[  295.974588][   T35] team0 (unregistering): Port device team_slave_1 removed
[  296.027577][   T35] team0 (unregistering): Port device team_slave_0 removed
[  296.170729][ T5848] Bluetooth: hci2: command tx timeout
[  296.258316][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  296.531246][T14132] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  296.658006][T14165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2551'.
[  296.686992][T14020] hsr_slave_0: entered promiscuous mode
[  296.707242][T14020] hsr_slave_1: entered promiscuous mode
[  296.758384][T14020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.769077][T14020] Cannot create hsr debugfs directory
[  297.288305][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  297.603462][T14204] netlink: 'syz.2.2562': attribute type 1 has an invalid length.
[  297.794557][T14204] 8021q: adding VLAN 0 to HW filter on device bond9
[  297.811984][ T8856] IPVS: starting estimator thread 0...
[  297.884174][T14210] 8021q: adding VLAN 0 to HW filter on device bond9
[  297.900809][T14210] bond9: (slave vcan2): The slave device specified does not support setting the MAC address
[  297.913291][T14210] bond9: (slave vcan2): Error -95 calling set_mac_address
[  297.930769][T14221] IPVS: using max 25 ests per chain, 60000 per kthread
[  297.965200][T14228] __nla_validate_parse: 4 callbacks suppressed
[  297.965221][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'.
[  298.249980][T14020] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  298.258292][ T5848] Bluetooth: hci2: command tx timeout
[  298.291325][T14020] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  298.322141][T14020] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  298.335529][T14020] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  298.338387][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  298.385762][T14238] sit0: entered promiscuous mode
[  298.386559][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'.
[  298.405709][T14238] netlink: 'syz.3.2574': attribute type 1 has an invalid length.
[  298.417580][T14238] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2574'.
[  298.524573][T14020] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.605584][T14020] 8021q: adding VLAN 0 to HW filter on device team0
[  298.622664][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.629908][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.703744][T14256] netlink: 'syz.3.2576': attribute type 10 has an invalid length.
[  298.710420][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.718736][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.802301][T14256] 
: (slave wlan1): Enslaving as an active interface with an up link
[  298.899549][T14264] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  299.030848][T14020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.046662][T14276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2580'.
[  299.068563][T14273] netlink: 'syz.3.2582': attribute type 1 has an invalid length.
[  299.092873][T14277] netlink: 'syz.0.2583': attribute type 1 has an invalid length.
[  299.168913][T14273] 8021q: adding VLAN 0 to HW filter on device bond7
[  299.181565][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'.
[  299.230332][T14277] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.313419][T14283] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.333565][T14283] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[  299.355345][T14283] bond8: (slave vcan2): Error -95 calling set_mac_address
[  299.384783][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'.
[  299.466554][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'.
[  299.625958][T14020] veth0_vlan: entered promiscuous mode
[  299.654745][T14020] veth1_vlan: entered promiscuous mode
[  299.714876][T14020] veth0_macvtap: entered promiscuous mode
[  299.738605][T14020] veth1_macvtap: entered promiscuous mode
[  299.767415][T14314] sock: sock_timestamping_bind_phc: sock not bind to device
[  299.796787][T14020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.807709][T14020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.818533][T14020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.829538][T14020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.857844][T14020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.869508][T14020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.885563][T14020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.901519][T14020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.096791][ T7685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.120792][ T7685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.176650][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.191032][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.399612][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2601'.
[  300.422105][T14337] bridge0: port 1(team0) entered disabled state
[  300.428602][T14337] bridge0: port 3(macvlan1) entered disabled state
[  300.436301][T14337] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.579719][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'.
[  301.077407][T14364] netlink: 'syz.3.2605': attribute type 11 has an invalid length.
[  301.125217][T14337] veth1_vlan: left allmulticast mode
[  301.221926][T14337] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.236553][T14337] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.246285][T14337] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.257373][T14337] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.273891][T14337] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  301.297158][T14337] tipc: Resetting bearer <eth:syzkaller0>
[  301.310503][T14337] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  301.317666][T14337] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  301.330305][T14337] gtp0: left promiscuous mode
[  301.335035][T14337] gtp0: left allmulticast mode
[  301.356066][T14337] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 47688 - 0
[  301.364894][T14337] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 47688 - 0
[  301.373586][T14337] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 47688 - 0
[  301.382385][T14337] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 47688 - 0
[  301.392143][T14337] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 47076 - 0
[  301.400831][T14337] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 47076 - 0
[  301.409915][T14337] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 47076 - 0
[  301.418528][T14337] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 47076 - 0
[  301.427303][T14337] geneve2: left promiscuous mode
[  301.432503][T14337] geneve2: left allmulticast mode
[  301.463081][T14337] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 20000 - 0
[  301.471928][T14337] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 20000 - 0
[  301.480506][T14337] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 20000 - 0
[  301.489268][T14337] netdevsim netdevsim2 eth3: unset [1, 3] type 2 family 0 port 20000 - 0
[  301.627342][T14337] bond8: left promiscuous mode
[  301.787422][T14368] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2607'.
[  301.797367][T14368] openvswitch: netlink: Missing key (keys=40, expected=80)
[  302.032913][T14144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.159359][T14378] macvlan1 (unregistering): left allmulticast mode
[  302.165954][T14378] macvlan1 (unregistering): left promiscuous mode
[  302.172817][T14378] bridge0: port 3(macvlan1) entered disabled state
[  303.140734][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.145114][T14144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.162426][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.178402][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.222975][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.233321][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  303.243461][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.256649][T14407] __nla_validate_parse: 3 callbacks suppressed
[  303.256669][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'.
[  303.309175][T14401] lo speed is unknown, defaulting to 1000
[  303.320528][T14401] lo speed is unknown, defaulting to 1000
[  303.367931][T14410] lo: entered promiscuous mode
[  303.378465][T14409] lo: left promiscuous mode
[  303.394197][T14412] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2619'.
[  303.524379][T14420] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2623'.
[  303.535705][T14420] openvswitch: netlink: Missing key (keys=40, expected=80)
[  303.572364][T14144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.670619][T14144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.857127][T14144] bridge_slave_1: left allmulticast mode
[  303.868482][T14144] bridge_slave_1: left promiscuous mode
[  303.876356][T14144] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.894016][T14144] bridge_slave_0: left allmulticast mode
[  303.911807][T14144] bridge_slave_0: left promiscuous mode
[  303.918014][T14144] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.963278][T14436] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  304.546826][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.564739][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.576130][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'.
[  304.577018][T14144] bond0 (unregistering): Released all slaves
[  304.668799][T14401] chnl_net:caif_netlink_parms(): no params data found
[  304.914619][T14472] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2636'.
[  304.924735][T14472] openvswitch: netlink: Missing key (keys=40, expected=80)
[  305.014184][T14476] netlink: 'syz.1.2638': attribute type 1 has an invalid length.
[  305.048256][ T5848] Bluetooth: hci4: command 0x0405 tx timeout
[  305.103995][T14481] netlink: 'syz.2.2637': attribute type 1 has an invalid length.
[  305.163821][T14476] 8021q: adding VLAN 0 to HW filter on device bond9
[  305.172247][T14479] FAULT_INJECTION: forcing a failure.
[  305.172247][T14479] name failslab, interval 1, probability 0, space 0, times 0
[  305.221407][T14479] CPU: 1 UID: 0 PID: 14479 Comm: syz.1.2638 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  305.232239][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  305.242343][T14479] Call Trace:
[  305.245646][T14479]  <TASK>
[  305.248611][T14479]  dump_stack_lvl+0x241/0x360
[  305.253330][T14479]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.258562][T14479]  ? __pfx__printk+0x10/0x10
[  305.263173][T14479]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  305.268588][T14479]  ? __pfx___might_resched+0x10/0x10
[  305.273884][T14479]  should_fail_ex+0x3b0/0x4e0
[  305.278607][T14479]  should_failslab+0xac/0x100
[  305.283561][T14479]  __kmalloc_node_noprof+0xe1/0x4d0
[  305.288777][T14479]  ? __kvmalloc_node_noprof+0x72/0x190
[  305.294290][T14479]  __kvmalloc_node_noprof+0x72/0x190
[  305.299601][T14479]  alloc_netdev_mqs+0xc0f/0x1080
[  305.304588][T14479]  rtnl_create_link+0x2f9/0xc20
[  305.309480][T14479]  rtnl_newlink_create+0x210/0xa40
[  305.314651][T14479]  ? __pfx___mutex_lock+0x10/0x10
[  305.319704][T14479]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  305.325377][T14479]  ? ns_capable+0x8a/0xf0
[  305.329732][T14479]  rtnl_newlink+0x1b40/0x20e0
[  305.334436][T14479]  ? __pfx_rtnl_newlink+0x10/0x10
[  305.339472][T14479]  ? __pfx_validate_chain+0x10/0x10
[  305.344694][T14479]  ? validate_chain+0x11e/0x5920
[  305.349639][T14479]  ? __pfx_lock_acquire+0x10/0x10
[  305.354666][T14479]  ? __pfx_lock_release+0x10/0x10
[  305.359698][T14479]  ? __pfx_validate_chain+0x10/0x10
[  305.364902][T14479]  ? mark_lock+0x9a/0x360
[  305.369241][T14479]  ? __lock_acquire+0x1397/0x2100
[  305.374294][T14479]  ? __pfx_lock_release+0x10/0x10
[  305.379330][T14479]  ? __pfx_rtnl_newlink+0x10/0x10
[  305.384363][T14479]  rtnetlink_rcv_msg+0x791/0xcf0
[  305.389305][T14479]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  305.394421][T14479]  ? __lock_acquire+0x1397/0x2100
[  305.399446][T14479]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  305.404921][T14479]  netlink_rcv_skb+0x1e3/0x430
[  305.409692][T14479]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  305.415159][T14479]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.420463][T14479]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.425665][T14479]  netlink_unicast+0x7f6/0x990
[  305.430443][T14479]  ? __pfx_netlink_unicast+0x10/0x10
[  305.435734][T14479]  ? __virt_addr_valid+0x183/0x530
[  305.440853][T14479]  ? __check_object_size+0x48e/0x900
[  305.446156][T14479]  netlink_sendmsg+0x8e4/0xcb0
[  305.450933][T14479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.456228][T14479]  ? aa_sock_msg_perm+0x91/0x160
[  305.461170][T14479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.466455][T14479]  __sock_sendmsg+0x221/0x270
[  305.471157][T14479]  ____sys_sendmsg+0x52a/0x7e0
[  305.475932][T14479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.481220][T14479]  ? __fget_files+0x2a/0x410
[  305.485815][T14479]  ? __fget_files+0x2a/0x410
[  305.490416][T14479]  __sys_sendmsg+0x269/0x350
[  305.495008][T14479]  ? __pfx_lock_release+0x10/0x10
[  305.500043][T14479]  ? __pfx___sys_sendmsg+0x10/0x10
[  305.505167][T14479]  ? __pfx_vfs_write+0x10/0x10
[  305.509952][T14479]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  305.516283][T14479]  ? do_syscall_64+0x100/0x230
[  305.521059][T14479]  ? do_syscall_64+0xb6/0x230
[  305.525770][T14479]  do_syscall_64+0xf3/0x230
[  305.530279][T14479]  ? clear_bhb_loop+0x35/0x90
[  305.534956][T14479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.540857][T14479] RIP: 0033:0x7fa42157ff19
[  305.545295][T14479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.565043][T14479] RSP: 002b:00007fa4222cc058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.573467][T14479] RAX: ffffffffffffffda RBX: 00007fa421746080 RCX: 00007fa42157ff19
[  305.581443][T14479] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  305.589413][T14479] RBP: 00007fa4222cc0a0 R08: 0000000000000000 R09: 0000000000000000
[  305.597386][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  305.605354][T14479] R13: 0000000000000001 R14: 00007fa421746080 R15: 00007ffee58f6508
[  305.613350][T14479]  </TASK>
[  305.634957][ T5848] Bluetooth: hci2: command tx timeout
[  305.706785][T14401] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.714677][T14401] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.723389][T14401] bridge_slave_0: entered allmulticast mode
[  305.732783][T14401] bridge_slave_0: entered promiscuous mode
[  305.774134][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2642'.
[  305.785295][T14489] 8021q: adding VLAN 0 to HW filter on device bond11
[  305.785628][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'.
[  305.794001][T14489] bond10: (slave bond11): making interface the new active one
[  305.809722][T14489] bond10: (slave bond11): Enslaving as an active interface with an up link
[  305.819038][T14492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.835112][T14401] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.872751][T14401] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.886410][T14401] bridge_slave_1: entered allmulticast mode
[  305.902003][T14401] bridge_slave_1: entered promiscuous mode
[  305.987834][T14507] netlink: 'syz.3.2644': attribute type 1 has an invalid length.
[  306.196420][T14507] 8021q: adding VLAN 0 to HW filter on device bond8
[  306.222487][T14401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.245964][T14401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.266534][T14515] netlink: 'syz.1.2646': attribute type 3 has an invalid length.
[  306.271816][T14510] 8021q: adding VLAN 0 to HW filter on device bond8
[  306.282707][T14510] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[  306.297074][T14510] bond8: (slave vcan2): Error -95 calling set_mac_address
[  306.394214][T14144] hsr_slave_0: left promiscuous mode
[  306.406536][T14144] hsr_slave_1: left promiscuous mode
[  306.427772][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.453611][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.474922][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.493896][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.551445][T14144] veth1_macvtap: left promiscuous mode
[  306.557027][T14144] veth0_macvtap: left promiscuous mode
[  306.567708][T14144] veth1_vlan: left promiscuous mode
[  306.578222][T14144] veth0_vlan: left promiscuous mode
[  306.722898][T14536] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2650'.
[  306.738425][T14536] openvswitch: netlink: Missing key (keys=40, expected=80)
[  307.185349][T14144] team0 (unregistering): Port device team_slave_1 removed
[  307.237762][T14144] team0 (unregistering): Port device team_slave_0 removed
[  307.688463][ T5848] Bluetooth: hci2: command tx timeout
[  307.844755][T14401] team0: Port device team_slave_0 added
[  307.900543][T14401] team0: Port device team_slave_1 added
[  307.994300][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'.
[  308.008687][T14401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.015677][T14401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.053799][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'.
[  308.071086][T14401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.102944][T14552] netlink: 'syz.2.2651': attribute type 16 has an invalid length.
[  308.111117][T14552] netlink: 'syz.2.2651': attribute type 17 has an invalid length.
[  308.130276][T14553] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0
[  308.148217][T14401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.155212][T14401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.196955][T14401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.504496][T14401] hsr_slave_0: entered promiscuous mode
[  308.546676][T14401] hsr_slave_1: entered promiscuous mode
[  308.581663][T14401] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.589612][T14401] Cannot create hsr debugfs directory
[  309.003880][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'.
[  309.213679][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'.
[  309.263779][T14613] Cannot find add_set index 832 as target
[  309.323791][T14401] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  309.349839][T14401] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  309.376721][T14401] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  309.430959][T14401] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  309.472033][T14620] lo speed is unknown, defaulting to 1000
[  309.494844][T14623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2676'.
[  309.533705][T14620] lo speed is unknown, defaulting to 1000
[  309.649231][T14401] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.677004][T14401] 8021q: adding VLAN 0 to HW filter on device team0
[  309.742561][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.749785][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.777798][ T5848] Bluetooth: hci2: command tx timeout
[  309.785638][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.793366][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.914889][T14401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.925846][T14401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  310.204641][T14401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.269104][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'.
[  310.342908][T14656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2687'.
[  310.600817][ T8848] IPVS: starting estimator thread 0...
[  310.673538][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'.
[  310.700061][T14674] IPVS: using max 25 ests per chain, 60000 per kthread
[  310.727546][T14401] veth0_vlan: entered promiscuous mode
[  310.746853][T14401] veth1_vlan: entered promiscuous mode
[  310.839808][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'.
[  310.868007][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'.
[  310.900753][T14401] veth0_macvtap: entered promiscuous mode
[  310.912266][T14401] veth1_macvtap: entered promiscuous mode
[  310.928972][T14401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.940873][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.951463][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.962601][T14401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.973009][T14401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.981867][T14401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.990925][T14401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.000440][T14401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.070264][T14650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.285812][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.307007][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.393213][T14144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.404253][T14144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.502992][   T11] IPVS: stop unused estimator thread 0...
[  311.760962][T14712] sctp: [Deprecated]: syz.0.2705 (pid 14712) Use of int in maxseg socket option.
[  311.760962][T14712] Use struct sctp_assoc_value instead
[  311.787145][T14707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2703'.
[  311.839779][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'.
[  311.864265][T14707] team0 (unregistering): left allmulticast mode
[  311.870821][T14707] team_slave_0: left allmulticast mode
[  311.876518][T14707] team_slave_1: left allmulticast mode
[  311.882798][T14707] team0 (unregistering): left promiscuous mode
[  311.889398][T14707] team_slave_0: left promiscuous mode
[  311.895221][T14707] team_slave_1: left promiscuous mode
[  311.901627][T14707] bridge0: port 1(team0) entered disabled state
[  311.923162][T14707] team0 (unregistering): Port device team_slave_0 removed
[  311.942533][T14707] team0 (unregistering): Port device team_slave_1 removed
[  312.814970][T14764] syzkaller0: left promiscuous mode
[  312.851000][T14764] syzkaller0: left allmulticast mode
[  313.060086][T14773] netlink: 'syz.1.2720': attribute type 1 has an invalid length.
[  313.079796][ T3451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.930283][ T3451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.970178][T14787] vlan0: entered promiscuous mode
[  313.979559][T14787] vlan0: entered allmulticast mode
[  314.155774][ T3451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.178615][T14799] FAULT_INJECTION: forcing a failure.
[  314.178615][T14799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.218497][T14799] CPU: 0 UID: 0 PID: 14799 Comm: syz.3.2729 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  314.229324][T14799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  314.239504][T14799] Call Trace:
[  314.242800][T14799]  <TASK>
[  314.245754][T14799]  dump_stack_lvl+0x241/0x360
[  314.250476][T14799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.255717][T14799]  ? __pfx__printk+0x10/0x10
[  314.260348][T14799]  ? __pfx_lock_release+0x10/0x10
[  314.265417][T14799]  should_fail_ex+0x3b0/0x4e0
[  314.270135][T14799]  _copy_from_user+0x2f/0xc0
[  314.274756][T14799]  copy_msghdr_from_user+0xae/0x680
[  314.279990][T14799]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  314.285820][T14799]  ? __fget_files+0x2a/0x410
[  314.290436][T14799]  ? __fget_files+0x2a/0x410
[  314.295059][T14799]  __sys_sendmsg+0x209/0x350
[  314.299686][T14799]  ? __pfx_lock_release+0x10/0x10
[  314.304756][T14799]  ? __pfx___sys_sendmsg+0x10/0x10
[  314.309932][T14799]  ? __pfx_vfs_write+0x10/0x10
[  314.314767][T14799]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  314.321146][T14799]  ? do_syscall_64+0x100/0x230
[  314.325959][T14799]  ? do_syscall_64+0xb6/0x230
[  314.330679][T14799]  do_syscall_64+0xf3/0x230
[  314.335215][T14799]  ? clear_bhb_loop+0x35/0x90
[  314.339916][T14799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.345842][T14799] RIP: 0033:0x7f44b497ff19
[  314.350278][T14799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.369910][T14799] RSP: 002b:00007f44b56b0058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.378347][T14799] RAX: ffffffffffffffda RBX: 00007f44b4b45fa0 RCX: 00007f44b497ff19
[  314.386341][T14799] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  314.394435][T14799] RBP: 00007f44b56b00a0 R08: 0000000000000000 R09: 0000000000000000
[  314.402429][T14799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.410409][T14799] R13: 0000000000000000 R14: 00007f44b4b45fa0 R15: 00007ffd9d9402f8
[  314.418417][T14799]  </TASK>
[  314.431861][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.442821][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.452709][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.460773][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.468806][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  314.478475][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.520554][T14807] lo speed is unknown, defaulting to 1000
[  314.527320][T14807] lo speed is unknown, defaulting to 1000
[  314.609492][T14812] __nla_validate_parse: 6 callbacks suppressed
[  314.609512][T14812] netlink: 6084 bytes leftover after parsing attributes in process `syz.2.2734'.
[  314.641041][ T3451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.652966][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'.
[  314.664484][T14817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2736'.
[  314.690974][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'.
[  314.707746][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'.
[  314.737766][T14812] netlink: 6084 bytes leftover after parsing attributes in process `syz.2.2734'.
[  314.748551][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2735'.
[  314.988231][ T3451] bridge_slave_1: left allmulticast mode
[  315.010889][ T3451] bridge_slave_1: left promiscuous mode
[  315.017174][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.057772][ T3451] bridge_slave_0: left allmulticast mode
[  315.064406][ T3451] bridge_slave_0: left promiscuous mode
[  315.070226][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.165224][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'.
[  315.244580][T14843] netlink: 'syz.0.2744': attribute type 1 has an invalid length.
[  315.316272][T14847] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2744'.
[  315.350187][T14849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  315.734413][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.747963][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.763969][ T3451] bond0 (unregistering): Released all slaves
[  315.855004][T14843] bond9: entered promiscuous mode
[  315.863359][T14843] 8021q: adding VLAN 0 to HW filter on device bond9
[  315.925965][T14847] batadv1: entered promiscuous mode
[  315.945444][T14847] batadv1: entered allmulticast mode
[  315.954122][T14847] 8021q: adding VLAN 0 to HW filter on device batadv1
[  315.967511][T14847] bond9: (slave batadv1): making interface the new active one
[  315.977993][T14847] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  316.009509][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2743'.
[  316.424422][T14807] chnl_net:caif_netlink_parms(): no params data found
[  316.578549][ T5848] Bluetooth: hci2: command tx timeout
[  316.777996][ T3451] hsr_slave_0: left promiscuous mode
[  316.801281][ T3451] hsr_slave_1: left promiscuous mode
[  316.812299][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.838800][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.849112][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.856579][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.915462][ T3451] veth1_macvtap: left promiscuous mode
[  316.921205][ T3451] veth0_macvtap: left promiscuous mode
[  316.926840][ T3451] veth1_vlan: left promiscuous mode
[  316.932692][ T3451] veth0_vlan: left promiscuous mode
[  318.001092][ T3451] team0 (unregistering): Port device team_slave_1 removed
[  318.086221][ T3451] team0 (unregistering): Port device team_slave_0 removed
[  318.629152][T14807] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.638351][T14807] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.645692][T14807] bridge_slave_0: entered allmulticast mode
[  318.654745][ T5848] Bluetooth: hci2: command tx timeout
[  318.664249][T14807] bridge_slave_0: entered promiscuous mode
[  318.676170][T14807] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.683937][T14807] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.691383][T14807] bridge_slave_1: entered allmulticast mode
[  318.698140][T14807] bridge_slave_1: entered promiscuous mode
[  318.714689][T14901] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  318.832075][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.874941][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.944542][T14920] netlink: 'syz.2.2762': attribute type 3 has an invalid length.
[  318.960288][T14920] netlink: 'syz.2.2762': attribute type 2 has an invalid length.
[  319.004893][T14807] team0: Port device team_slave_0 added
[  319.053308][T14807] team0: Port device team_slave_1 added
[  319.208929][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.216035][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.307995][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.349112][T14941] netlink: 'syz.2.2767': attribute type 10 has an invalid length.
[  319.359056][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.366049][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.438293][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.561507][T14807] hsr_slave_0: entered promiscuous mode
[  319.575138][T14807] hsr_slave_1: entered promiscuous mode
[  319.586024][T14807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.602622][T14807] Cannot create hsr debugfs directory
[  319.627508][T14951] __nla_validate_parse: 4 callbacks suppressed
[  319.627528][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2771'.
[  319.746204][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2771'.
[  319.814563][T14961] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2776'.
[  319.834803][T14961] openvswitch: netlink: Missing key (keys=40, expected=80)
[  320.386777][T14807] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  320.417872][T14807] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  320.438597][T14807] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  320.464500][T14807] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  320.553845][T15001] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2788'.
[  320.579400][T15001] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2788'.
[  320.610935][T14807] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.645431][T14807] 8021q: adding VLAN 0 to HW filter on device team0
[  320.659447][T15004] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2790'.
[  320.673942][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.681143][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.689616][T15004] openvswitch: netlink: Missing key (keys=40, expected=80)
[  320.709323][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.716504][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.728405][   T54] Bluetooth: hci2: command tx timeout
[  320.735492][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'.
[  320.787986][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'.
[  320.936999][T15021] netlink: 'syz.3.2793': attribute type 18 has an invalid length.
[  320.963050][T15021] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.972514][T15021] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.981292][T15021] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.989700][T15021] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.049903][T14807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.088803][T15027] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2795'.
[  321.110113][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'.
[  321.159251][T15029] bond10: entered promiscuous mode
[  321.188752][T15033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.660297][T14807] veth0_vlan: entered promiscuous mode
[  321.685663][T15055] netlink: 'syz.2.2802': attribute type 3 has an invalid length.
[  321.703485][T14807] veth1_vlan: entered promiscuous mode
[  321.745714][T14807] veth0_macvtap: entered promiscuous mode
[  321.758016][T14807] veth1_macvtap: entered promiscuous mode
[  321.759757][T15062] openvswitch: netlink: Missing key (keys=40, expected=80)
[  321.773897][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.784728][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.795786][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.809218][T14807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.856940][T14807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.866416][T14807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.875818][T14807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.884719][T14807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.911661][T15055] Cannot find del_set index 4 as target
[  322.049395][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.058393][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.112213][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.148730][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.274610][T15079] netlink: 'syz.2.2807': attribute type 2 has an invalid length.
[  322.292321][T15081] netlink: 'syz.0.2811': attribute type 1 has an invalid length.
[  322.313999][T15081] 8021q: adding VLAN 0 to HW filter on device bond10
[  322.367426][T15081] 8021q: adding VLAN 0 to HW filter on device bond10
[  322.375338][T15081] bond10: (slave vcan2): The slave device specified does not support setting the MAC address
[  322.387377][T15081] bond10: (slave vcan2): Error -95 calling set_mac_address
[  322.808815][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  322.952679][T15107] ------------[ cut here ]------------
[  322.959035][T15107] WARNING: CPU: 1 PID: 15107 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  322.972191][T15107] Modules linked in:
[  322.976134][T15107] CPU: 1 UID: 0 PID: 15107 Comm: syz.0.2819 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  322.987030][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  322.997217][T15107] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.004042][T15107] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd
[  323.023842][T15107] RSP: 0018:ffffc900034676b0 EFLAGS: 00010283
[  323.029969][T15107] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: 0000000000080000
[  323.038377][T15107] RDX: ffffc90004c01000 RSI: 00000000000045e9 RDI: 00000000000045ea
[  323.046381][T15107] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6
[  323.055003][T15107] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff888028ccae32
[  323.063252][T15107] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880296830a0
[  323.071370][T15107] FS:  00007ff71836e6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  323.080416][T15107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.087064][T15107] CR2: 0000001b3010bff8 CR3: 00000000534e0000 CR4: 00000000003526f0
[  323.095174][T15107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  323.103427][T15107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  323.111577][T15107] Call Trace:
[  323.114887][T15107]  <TASK>
[  323.117842][T15107]  ? __warn+0x165/0x4d0
[  323.122098][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.128388][T15107]  ? report_bug+0x2b3/0x500
[  323.132936][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.139185][T15107]  ? handle_bug+0x60/0x90
[  323.143753][T15107]  ? exc_invalid_op+0x1a/0x50
[  323.148768][T15107]  ? asm_exc_invalid_op+0x1a/0x20
[  323.153856][T15107]  ? __pfx_mac80211_hwsim_add_interface+0x10/0x10
[  323.160373][T15107]  ? mac80211_hwsim_config_mac_nl+0xbd/0x370
[  323.166384][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b1/0x370
[  323.172585][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.178783][T15107]  ? mac80211_hwsim_add_interface+0x86/0x320
[  323.184805][T15107]  mac80211_hwsim_add_interface+0x9a/0x320
[  323.190685][T15107]  drv_add_interface+0x2f8/0x8e0
[  323.195652][T15107]  ieee80211_do_open+0x73d/0x2420
[  323.200799][T15107]  ? ieee80211_check_concurrent_iface+0x70e/0x7e0
[  323.207272][T15107]  ieee80211_open+0x192/0x200
[  323.212400][T15107]  __dev_open+0x2d3/0x450
[  323.216787][T15107]  ? __pfx___dev_open+0x10/0x10
[  323.221829][T15107]  ? dev_set_rx_mode+0xb8/0x2e0
[  323.226737][T15107]  __dev_change_flags+0x1e2/0x6f0
[  323.231864][T15107]  ? __pfx___mutex_lock+0x10/0x10
[  323.236943][T15107]  ? __pfx___dev_change_flags+0x10/0x10
[  323.242912][T15107]  ? apparmor_capable+0x13b/0x1b0
[  323.248308][T15107]  dev_change_flags+0x8b/0x1a0
[  323.253132][T15107]  devinet_ioctl+0xcce/0x1ac0
[  323.257866][T15107]  inet_ioctl+0x3d7/0x4f0
[  323.262365][T15107]  ? __pfx_inet_ioctl+0x10/0x10
[  323.267262][T15107]  ? tomoyo_path_number_perm+0x679/0x860
[  323.272986][T15107]  ? __lock_acquire+0x1397/0x2100
[  323.278138][T15107]  ? tomoyo_path_number_perm+0x206/0x860
[  323.283889][T15107]  sock_do_ioctl+0x158/0x460
[  323.288874][T15107]  ? __pfx_sock_do_ioctl+0x10/0x10
[  323.294040][T15107]  sock_ioctl+0x626/0x8e0
[  323.298485][T15107]  ? __pfx_sock_ioctl+0x10/0x10
[  323.303357][T15107]  ? __fget_files+0x2a/0x410
[  323.307943][T15107]  ? __fget_files+0x2a/0x410
[  323.312619][T15107]  ? __pfx_sock_ioctl+0x10/0x10
[  323.317488][T15107]  __se_sys_ioctl+0xf5/0x170
[  323.322165][T15107]  do_syscall_64+0xf3/0x230
[  323.326697][T15107]  ? clear_bhb_loop+0x35/0x90
[  323.331451][T15107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.337386][T15107] RIP: 0033:0x7ff71757fb1b
[  323.341867][T15107] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  323.361939][T15107] RSP: 002b:00007ff71836ce80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  323.370776][T15107] RAX: ffffffffffffffda RBX: 00007ff71836cfa0 RCX: 00007ff71757fb1b
[  323.378859][T15107] RDX: 00007ff71836cf00 RSI: 0000000000008914 RDI: 000000000000000c
[  323.386868][T15107] RBP: 000000000000000c R08: 0000000000000000 R09: 0000000000000000
[  323.394938][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[  323.402980][T15107] R13: 0000000000000048 R14: 00007ff71836cfc0 R15: 00007ff71836cf00
[  323.411065][T15107]  </TASK>
[  323.414131][T15107] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  323.421440][T15107] CPU: 1 UID: 0 PID: 15107 Comm: syz.0.2819 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0
[  323.432292][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  323.442359][T15107] Call Trace:
[  323.445637][T15107]  <TASK>
[  323.448566][T15107]  dump_stack_lvl+0x241/0x360
[  323.453253][T15107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.458454][T15107]  ? __pfx__printk+0x10/0x10
[  323.463049][T15107]  ? vscnprintf+0x5d/0x90
[  323.467383][T15107]  panic+0x349/0x880
[  323.471283][T15107]  ? __warn+0x174/0x4d0
[  323.475443][T15107]  ? __pfx_panic+0x10/0x10
[  323.479873][T15107]  __warn+0x344/0x4d0
[  323.483859][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.489929][T15107]  report_bug+0x2b3/0x500
[  323.494265][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.500341][T15107]  handle_bug+0x60/0x90
[  323.504507][T15107]  exc_invalid_op+0x1a/0x50
[  323.509009][T15107]  asm_exc_invalid_op+0x1a/0x20
[  323.513863][T15107] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  323.520536][T15107] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd
[  323.540151][T15107] RSP: 0018:ffffc900034676b0 EFLAGS: 00010283
[  323.546312][T15107] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: 0000000000080000
[  323.554286][T15107] RDX: ffffc90004c01000 RSI: 00000000000045e9 RDI: 00000000000045ea
[  323.562259][T15107] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6
[  323.570230][T15107] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff888028ccae32
[  323.578209][T15107] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880296830a0
[  323.586183][T15107]  ? __pfx_mac80211_hwsim_add_interface+0x10/0x10
[  323.592613][T15107]  ? mac80211_hwsim_config_mac_nl+0xbd/0x370
[  323.598592][T15107]  ? mac80211_hwsim_config_mac_nl+0x2b1/0x370
[  323.604664][T15107]  ? mac80211_hwsim_add_interface+0x86/0x320
[  323.610651][T15107]  mac80211_hwsim_add_interface+0x9a/0x320
[  323.616468][T15107]  drv_add_interface+0x2f8/0x8e0
[  323.621414][T15107]  ieee80211_do_open+0x73d/0x2420
[  323.626440][T15107]  ? ieee80211_check_concurrent_iface+0x70e/0x7e0
[  323.632866][T15107]  ieee80211_open+0x192/0x200
[  323.637552][T15107]  __dev_open+0x2d3/0x450
[  323.641891][T15107]  ? __pfx___dev_open+0x10/0x10
[  323.646749][T15107]  ? dev_set_rx_mode+0xb8/0x2e0
[  323.651608][T15107]  __dev_change_flags+0x1e2/0x6f0
[  323.656649][T15107]  ? __pfx___mutex_lock+0x10/0x10
[  323.661683][T15107]  ? __pfx___dev_change_flags+0x10/0x10
[  323.667232][T15107]  ? apparmor_capable+0x13b/0x1b0
[  323.672273][T15107]  dev_change_flags+0x8b/0x1a0
[  323.677041][T15107]  devinet_ioctl+0xcce/0x1ac0
[  323.681743][T15107]  inet_ioctl+0x3d7/0x4f0
[  323.686083][T15107]  ? __pfx_inet_ioctl+0x10/0x10
[  323.690939][T15107]  ? tomoyo_path_number_perm+0x679/0x860
[  323.696591][T15107]  ? __lock_acquire+0x1397/0x2100
[  323.701630][T15107]  ? tomoyo_path_number_perm+0x206/0x860
[  323.707277][T15107]  sock_do_ioctl+0x158/0x460
[  323.711877][T15107]  ? __pfx_sock_do_ioctl+0x10/0x10
[  323.717006][T15107]  sock_ioctl+0x626/0x8e0
[  323.721347][T15107]  ? __pfx_sock_ioctl+0x10/0x10
[  323.726211][T15107]  ? __fget_files+0x2a/0x410
[  323.730801][T15107]  ? __fget_files+0x2a/0x410
[  323.735417][T15107]  ? __pfx_sock_ioctl+0x10/0x10
[  323.740273][T15107]  __se_sys_ioctl+0xf5/0x170
[  323.744883][T15107]  do_syscall_64+0xf3/0x230
[  323.749393][T15107]  ? clear_bhb_loop+0x35/0x90
[  323.754072][T15107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.759972][T15107] RIP: 0033:0x7ff71757fb1b
[  323.764398][T15107] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  323.784008][T15107] RSP: 002b:00007ff71836ce80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  323.792435][T15107] RAX: ffffffffffffffda RBX: 00007ff71836cfa0 RCX: 00007ff71757fb1b
[  323.800405][T15107] RDX: 00007ff71836cf00 RSI: 0000000000008914 RDI: 000000000000000c
[  323.808379][T15107] RBP: 000000000000000c R08: 0000000000000000 R09: 0000000000000000
[  323.816349][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[  323.824314][T15107] R13: 0000000000000048 R14: 00007ff71836cfc0 R15: 00007ff71836cf00
[  323.832296][T15107]  </TASK>
[  323.835469][T15107] Kernel Offset: disabled
[  323.839872][T15107] Rebooting in 86400 seconds..