last executing test programs:

21.193952643s ago: executing program 3 (id=639):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
socketpair(0x1, 0x100000005, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
listen(r2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x31, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000001c0)="a681e1fababb82747388565515f6f9e25179ab383c3cda7e46de8672e9ed9a", 0x1f}], 0x2)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000200)=@in6={0xa, 0x4e21, 0x7fffffff, @mcast1, 0x2ce9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0xffffffffffffffa5}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x20048041)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000280)={0x8f6, [0x1, 0x8d], 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
unshare(0x40000080)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c)
syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500300601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0400008907800001e0aa500ac159b764cca4f2bbd4dac1414bb059f2cba4b0ca30f3500"], 0x0)

20.383998708s ago: executing program 3 (id=646):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="005804405bf961b047a4763a04558141e27ebd9699ad5285735098886c2120d94e3a83d45eddaa2df41d84b604a40e62b5a14be62731d084d86ee59d561e86b500dd668a008bf4d573703492a22f2e1c3f8829c1e44234f1", @ANYRES64=0x0], 0x10)

20.297313925s ago: executing program 3 (id=648):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa0, 0x11, 0x148, 0xa0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xfc}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r2 = socket$inet6(0xa, 0x4, 0x0)
listen(r2, 0x80080400)
recvfrom(r2, 0x0, 0x0, 0x40000121, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x2a, 0xfffffffffffffffc}, 0xf)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)

19.99902122s ago: executing program 3 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000bb990000002c31a0e5c9f2bca6d000000040"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
r6 = gettid()
syz_open_procfs$namespace(r6, &(0x7f00000003c0)='ns/pid_for_children\x00')
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r6, 0x12)
syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/cgroup\x00')
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000140004006e696376763000000000000000000000080005000900000005005300010000000a00180003030303030300000800050004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x7, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r11, 0x0, 0x0, 0x20010004, 0x0, 0x0)

12.831198141s ago: executing program 3 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000bb990000002c31a0e5c9f2bca6d000000040"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
r6 = gettid()
syz_open_procfs$namespace(r6, &(0x7f00000003c0)='ns/pid_for_children\x00')
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r6, 0x12)
syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/cgroup\x00')
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000140004006e696376763000000000000000000000080005000900000005005300010000000a00180003030303030300000800050004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x7, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r11, 0x0, 0x0, 0x20010004, 0x0, 0x0)

11.923538686s ago: executing program 4 (id=765):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = socket(0x21, 0x2, 0x4)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0x10004, 0xfe90)
r3 = socket(0x40000000002, 0x3, 0x80000000002)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=<r4=>0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000500)=r4)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='veth1_virt_wifi\x00', 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffff2b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0xffffffffffffff24, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000003c0)=ANY=[@ANYRES64=r3], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.887808493s ago: executing program 4 (id=801):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x288, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x258, 0x2, [@TCA_FLOW_EMATCHES={0x254, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, "ed75e2fae0"}}]}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x80000001, 0x8b3, 0xb, 0x6, 0x4, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x400}, {0xcd6, 0x2, 0x3, 0x4, 0x0, 0x2}}}, @TCF_EM_META={0x9c, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0xfffa}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0x1, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="65050000010000000000"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5}, {0xf6, 0x9e, 0x1}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ba3420ca3074da62", @TCF_META_TYPE_VAR="a04e4195", @TCF_META_TYPE_VAR="21895a91", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1c"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a254c51d8981fa3a41", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c70c58d9459dafcbdc54", @TCF_META_TYPE_VAR="f0aa"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x1}, {0xe8d}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0xe, 0x2, 0x2, 0x2, 0x7, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc8c1, 0x8, 0x3}, {0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x800, 0x4, 0x958b}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0xc8, 0x2}, {0xfffe, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="8c8cc90eddb6598da1", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="10859d798f", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="f0c13f", @TCF_META_TYPE_VAR="8d"]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x3, 0x7fffffff, 0x1, 0x0, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x4}, "0e887e3174c9ba846637edad004e88480ceb3ba83fe627ddec02d71469f46a71ed307ff97180b6cf452a2064eddf1f2c7503ff934449de192a8f10073e146122632b22676eef1f7b072dd70f5a19031ca016ff08f7f2513e0dc244f23de34c2d81781763637c08ae5356421782c3b49f35cbb8bc24aa1ccdd49950d898eece937fa2d8f1f12396735c82642886e28b7fae042f827fb1a2babfeed2af70911e0ca1650f5f01b58148781aaae9634b8a68f15194c8f9"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x100}, {0xfb8, 0x6, 0x0, "8ff0ad1d2390"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}]}]}}]}, 0x288}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="38005a80340001800500040003000000140003"], 0x54}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.308011062s ago: executing program 4 (id=808):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev}, 0x10)
close(0x3)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x813c1000)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8, 0x7, 0x7}}, @sndrcv={0x48, 0x84, 0x1, {0x3, 0x0, 0x6, 0x0, 0xffffff81, 0xb7c, 0x1000, 0x7}}, @init={0x18, 0x84, 0x0, {0x7, 0x1, 0x10, 0x402}}], 0x68, 0x24004850}], 0x1, 0x2000c000)
bind$rds(r4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

3.787824506s ago: executing program 4 (id=812):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x60}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_newaddr={0x40, 0x14, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x32, 0xc8, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0xe4d, 0x4, 0x668e83aa}}, @IFA_LABEL={0x14, 0x3, 'macsec0\x00'}]}, 0x40}}, 0x4048800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}}, 0x8d4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000800000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008001000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x15, &(0x7f0000000000)=""/21, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.415878132s ago: executing program 4 (id=818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b52a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000d11e172844014263d95395ae0d63c0a6a2e6baa014e2012ee44", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000a890)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000380)=0xe, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x6)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000002060a090400dffecf8849607409c05c3301000000040000000200000024000480100001800c0001006e6f747261636b0010fd01800c000100636f756e7465720000000000000fff30000000000900020073797a32000000001400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000100a0108000000000000000000000000d84ef3c40f568721475cd06a38841171b132b289cb73bcd7105dd8ff3da4b93dbaa41822a925d96961b4c6ff87118f552f7c108de35fea3d6f4252003ee9109829dc208771b53c494684ded9231ca298905e232026aa1e589907addc2f9e7852daa045106344e09c077ea2a75c44a4e81fe9cdab54835b0ae79318bcb97c31a3d5c3c03d1c3400000000"], 0x18}}, 0x0)
syz_emit_ethernet(0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd605678c1000a2c00fec00000001166bdbe8dbcb036000000fe8000000000000000000000000000aa33"], 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
mmap(&(0x7f0000403000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0)
close(0x3)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0xa, 0x12, r5, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000aee000/0x4000)=nil, 0x4000, 0x0, 0x28011, r4, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000000090000000100"/20, @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaa0000000008004500fde10000000000119078000000000000000000004e22fd00"/65], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.080452836s ago: executing program 4 (id=820):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000240), 0x4) (async)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
mmap(&(0x7f000009a000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0xc2f88000) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) (async)
r4 = socket(0x2a, 0x2, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123a000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x6}}]}}]}, 0x38}}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x3) (async)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x1, 0x3}, 0x90)

2.609516476s ago: executing program 0 (id=823):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048801)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048801) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async)

2.03855901s ago: executing program 2 (id=829):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0xffff, 0x6}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0xe3a, 0x4)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f0000fdab2576ff000000000000000001000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x0, 0x104}, 0x90)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

1.966022801s ago: executing program 0 (id=830):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async, rerun: 64)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (rerun: 64)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async, rerun: 32)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async, rerun: 32)
bind$tipc(r2, 0x0, 0x0)
read$alg(r1, &(0x7f0000000080)=""/16, 0x10) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x48, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x48}}, 0x0) (async)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x72a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x29}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x41041) (async)
sendmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@can={{0x0, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "5b977d1a0b13beb8"}, 0x10}, 0x1, 0x0, 0x0, 0x94}, 0x4004880)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000140)=""/93, &(0x7f00000001c0)=0x5d) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="830400000084fddbdf25010000001c0002800c00018008000100070000000c000180080001000600000004000180"], 0x34}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
clock_gettime(0x0, &(0x7f0000000080)={<r11=>0x0, <r12=>0x0})
setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f00000000c0)={r11, r12/1000+10000}, 0x10) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x7, 0x3ff, 0x7}, 0x10) (rerun: 64)

1.820053346s ago: executing program 1 (id=831):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001c000000140001800800030001000000080001", @ANYRES32=r7], 0x28}}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="1a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ff0000be200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0)
sendfile(0xffffffffffffffff, r3, &(0x7f0000000240)=0x2, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r8, 0x0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)

1.818456645s ago: executing program 2 (id=832):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@func_proto, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto={0x20000000}, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x5e, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28)

1.705752074s ago: executing program 0 (id=833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26f1a36d0bcb501e}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8}}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x5}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r4}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/145, 0x91}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)}], 0x3, &(0x7f00000003c0)=""/52, 0x34}, 0x2}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/221, 0xdd}], 0x1, &(0x7f0000002a00)=""/4096, 0x1000}, 0x61}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000740)=""/176, 0xb0}], 0x3, &(0x7f0000000840)=""/43, 0x2b}, 0xc}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/220, 0xdc}, {&(0x7f0000000e80)=""/158, 0x9e}, {&(0x7f0000000bc0)=""/66, 0x42}], 0x4, &(0x7f0000000c80)=""/114, 0x72}, 0x8001}], 0x5, 0x3, &(0x7f0000000e40))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000004780)=""/4107, 0x100b}], 0x1}}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x5, 0x0, 0x0)

1.700461916s ago: executing program 2 (id=834):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x26e1, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80800)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r2, 0x0, 0x0) (async)
r6 = accept(r2, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) (async)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0xa)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) (async)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8)
syz_genetlink_get_family_id$fou(&(0x7f0000000300), r8)
r9 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$unix(r9, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x3, 0x4004851, 0x0, 0x9ba26bef) (async)
sendto$inet6(r1, 0x0, 0x3, 0x4004851, 0x0, 0x9ba26bef)
socket$isdn(0x22, 0x3, 0x11) (async)
socket$isdn(0x22, 0x3, 0x11)
close(r0) (async)
close(r0)

1.543133501s ago: executing program 3 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000bb990000002c31a0e5c9f2bca6d000000040"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
r6 = gettid()
syz_open_procfs$namespace(r6, &(0x7f00000003c0)='ns/pid_for_children\x00')
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r6, 0x12)
syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/cgroup\x00')
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000140004006e696376763000000000000000000000080005000900000005005300010000000a00180003030303030300000800050004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x7, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r11, 0x0, 0x0, 0x20010004, 0x0, 0x0)

1.322394766s ago: executing program 0 (id=835):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xb) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f00000002c0)=0x5, 0x12)
openat$cgroup_ro(r4, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x97, 0xd}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20000)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close(r3) (async)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010f00000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB="c2302bbb99b7ea0857f52c87d107ba77183198dde8a0721c197dba9cfe1d676c38183502d91b115e9419d5e6b9c92b434e2c9c100083542a775cf195dc5c3636a1f444dd0e111e81f663020fe354cd8df65c1dbe810b3ffda5aa31bb20da9ee8fc6be900b14c02e215b58fb671720d1f27e3311792eb7d4205bdc0bf7760437915c1b8460ace57eb934fbef786bbb3e54c843ca2fa53019381c0f3942a2f786cdb52f0211cf6d2a358d9482efbd7598d2bbeed2d5e92ee2cb15ca2218729ba968a104c81a7b277c4c5071eb8711357b54e0233a5c0d06711bfef69ed59e6b259ad0b2559a6113bec068118fd59c07379cb"], 0x1c}}, 0x0)

1.321810545s ago: executing program 1 (id=836):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, r1, 0x7d243a6ea807936d, 0x10, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r6, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)

1.307669355s ago: executing program 2 (id=837):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x4, 0xfffffe99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000400)={0x1d, r3}, 0x10)
r4 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="e10931d8640ae1ffffff000086dd600141400002880020010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r6, 0x10d, 0xfe, &(0x7f0000000000), &(0x7f0000000240)=0x4)
sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f00000003c0)=@can={{0x1, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "ded43c1601b884ca"}, 0x10}}, 0x4000010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @private=0x7fffffff}}, 0xffffffff, 0x401, 0x101, 0x5, 0x80, 0xfffffffa, 0x9}, 0x9c)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000090001007309"], 0x34}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37)
close(r0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r9, r11, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r12)
accept$alg(r12, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040)=0x39ca, r12, &(0x7f00000000c0)=0x8, 0x6, 0xa)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r12)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r12, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000402}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="76e1c76b70152ab418b71c00454bce9f53785c8979da1ae9a0c0c88724cfb808561386bd785410c639378839122498bc3b493e25930d181c925513d1395aa280d080c279de587a0c559437b006ab72537694d5e95ff686f63e0a21fd082c680627dd65062e96a9f516b8b22bf006d98390e813fa3b1e3b16e6a4283839a5f495aed3e895442d9da3cc7429a26784246c6d58efaa7b63a42eaa322bccd2f89dd656eb774a6b3a77", @ANYRES16=r13, @ANYBLOB="00012abd7000ffdbdf250800000005002f0000000000"], 0x1c}}, 0x4000814)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r12}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r11}, 0x8)

1.195554282s ago: executing program 0 (id=838):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x007'], 0x24}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x20008810)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8)

860.025839ms ago: executing program 0 (id=839):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0xff}, 0xfd}, 0x18) (async)
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0xff}, 0xfd}, 0x18)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x6, 0x3, 0x34013, r0, 0x6, '\x00', r2, r0, 0x2, 0x0, 0x3, 0xe, @void, @value, @value=r0}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x6, 0x3, 0x34013, r0, 0x6, '\x00', r2, r0, 0x2, 0x0, 0x3, 0xe, @void, @value, @value=r0}, 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x30, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x4b315000)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

724.930759ms ago: executing program 2 (id=840):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0)
getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

658.762029ms ago: executing program 1 (id=841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x129, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0x24}}, 0x20000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x10001}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1f, &(0x7f0000000080)=""/31, 0x40f00, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0xf, 0x200, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[{0x3, 0x1, 0x4, 0x2}, {0x0, 0x1, 0x1, 0x7}, {0x2, 0x1, 0xe, 0x8}, {0x2, 0x5, 0x8, 0xc}, {0x0, 0x5, 0x4, 0xc}], 0x10, 0x3, @void, @value}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0)
ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000540)=r7)
sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x81}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7b, 0xbe, "948e2e8cf93622930de929b5bcbe7a277bc6f18deb8d99046dcb5ee26a1575c5cba540a3b1a2ccbeae7c2b17c60c3a06dc4d03344edfc0c1f774102097415978416fa55806a262c0299d5945ae0ec2ad43084d0cfe96d8b77dd8ece03e56a900a4953e28b304c56f510c84f450e3ac2e5799903b34f953"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8d0}, 0x4c000)

271.827662ms ago: executing program 2 (id=842):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}]}, 0x44}}, 0x0)
socketpair(0x21, 0x80000, 0x10000, &(0x7f0000000340)={<r3=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f00000000c0)={<r6=>0x0, <r7=>0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000100)={0x1, 0x400, 0x10, {r4, r5/1000+10000}, {r6, r7/1000+10000}, {0x0, 0x1}, 0x1, @canfd={{0x3, 0x1}, 0x16, 0x3, 0x0, 0x0, "45404d3c260718917413d0e9f0ce2e8fcbe1ef1c05453c45b6577136947d01ba621979156ebfe5b09c1b70d81386fe83e8b2f63f38967bd63b282f8a613d4db2"}}, 0x80}}, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x355}], 0x1}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000480)={0x0, 'tunl0\x00', {}, 0x6})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x8}, 0x8)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x100000000}, {0x5, 0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9, <r13=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r12}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9, &(0x7f0000000780)}, 0x20)
r14 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private2, @in6=@remote, 0x4e21, 0xe8f, 0x4e21, 0x5, 0xa, 0x20, 0xa0, 0x1f, r2, r15}, {0x5, 0x8, 0x8, 0xe9a, 0x8, 0x7, 0x5, 0x7a6}, {0x7, 0x800, 0x7, 0x101}, 0x10, 0x6e6bb6, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4d4, 0x3c}, 0x2, @in6=@remote, 0x0, 0x0, 0x3, 0x2, 0x9, 0x9, 0x6}}, 0xe8)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x80000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x50}}, 0x0)

252.243484ms ago: executing program 1 (id=843):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r1, &(0x7f0000000600)={0xa, 0x2, 0xfffffffe, @mcast1, 0x18}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000600)={0xa, 0x2, 0xfffffffe, @mcast1, 0x18}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x60c, 0xd}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x1, 0x1}, 0x2) (async)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x1, 0x1}, 0x2)

97.224465ms ago: executing program 1 (id=844):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@func_proto, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto={0x0, 0x20}, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x5e, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28)

0s ago: executing program 1 (id=845):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x28, &(0x7f00000013c0)=""/163, &(0x7f0000001480)=0xa3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r4, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)

kernel console output (not intermixed with test programs):


[   70.688034][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.695990][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.703768][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.711850][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.720843][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.757356][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.766873][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.768374][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.782438][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.786872][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.796858][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.797099][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.804243][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.818812][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.826212][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   70.832292][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.840849][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.841854][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   70.856346][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.858301][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.880547][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.888078][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   70.895573][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.922242][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   70.931527][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.253612][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   71.327857][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   71.358795][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   71.558303][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   71.576442][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   71.586933][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.595149][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.602794][ T5842] bridge_slave_0: entered allmulticast mode
[   71.609627][ T5842] bridge_slave_0: entered promiscuous mode
[   71.625688][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.632957][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.640133][ T5851] bridge_slave_0: entered allmulticast mode
[   71.647594][ T5851] bridge_slave_0: entered promiscuous mode
[   71.668418][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.678620][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.679668][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.686399][ T5842] bridge_slave_1: entered allmulticast mode
[   71.698323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   71.699725][ T5842] bridge_slave_1: entered promiscuous mode
[   71.720160][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.727372][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.734790][ T5836] bridge_slave_0: entered allmulticast mode
[   71.742151][ T5836] bridge_slave_0: entered promiscuous mode
[   71.749056][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.756408][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.763726][ T5851] bridge_slave_1: entered allmulticast mode
[   71.770371][ T5851] bridge_slave_1: entered promiscuous mode
[   71.819601][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.826883][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.834935][ T5836] bridge_slave_1: entered allmulticast mode
[   71.842778][ T5836] bridge_slave_1: entered promiscuous mode
[   71.876469][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.891418][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.913885][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.930439][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.953332][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.987845][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.063634][ T5851] team0: Port device team_slave_0 added
[   72.076654][ T5836] team0: Port device team_slave_0 added
[   72.089674][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.099065][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.106449][ T5848] bridge_slave_0: entered allmulticast mode
[   72.113817][ T5848] bridge_slave_0: entered promiscuous mode
[   72.126025][ T5842] team0: Port device team_slave_0 added
[   72.132344][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.139461][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.146747][ T5848] bridge_slave_1: entered allmulticast mode
[   72.154669][ T5848] bridge_slave_1: entered promiscuous mode
[   72.163030][ T5851] team0: Port device team_slave_1 added
[   72.179650][ T5836] team0: Port device team_slave_1 added
[   72.185711][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.193113][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.200289][ T5841] bridge_slave_0: entered allmulticast mode
[   72.207538][ T5841] bridge_slave_0: entered promiscuous mode
[   72.217157][ T5842] team0: Port device team_slave_1 added
[   72.256904][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.268120][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.275862][ T5841] bridge_slave_1: entered allmulticast mode
[   72.283038][ T5841] bridge_slave_1: entered promiscuous mode
[   72.323285][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.330282][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.356414][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.372656][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.383864][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.393656][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.400629][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.426885][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.447244][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.458031][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.484856][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.496658][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.504103][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.530451][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.550737][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.557952][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.584213][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.607885][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.614996][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.641075][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.672958][ T5848] team0: Port device team_slave_0 added
[   72.682872][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.697849][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.728994][ T5848] team0: Port device team_slave_1 added
[   72.776339][ T5836] hsr_slave_0: entered promiscuous mode
[   72.783587][ T5836] hsr_slave_1: entered promiscuous mode
[   72.810573][ T5841] team0: Port device team_slave_0 added
[   72.820155][ T5851] hsr_slave_0: entered promiscuous mode
[   72.828019][ T5851] hsr_slave_1: entered promiscuous mode
[   72.834901][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.842918][ T5851] Cannot create hsr debugfs directory
[   72.857914][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.866657][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.893796][   T54] Bluetooth: hci2: command tx timeout
[   72.899523][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.912674][ T5841] team0: Port device team_slave_1 added
[   72.918879][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.926347][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.952591][   T54] Bluetooth: hci4: command tx timeout
[   72.957102][ T5844] Bluetooth: hci3: command tx timeout
[   72.958293][   T54] Bluetooth: hci1: command tx timeout
[   72.963916][ T5844] Bluetooth: hci0: command tx timeout
[   72.970036][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.033317][ T5842] hsr_slave_0: entered promiscuous mode
[   73.039685][ T5842] hsr_slave_1: entered promiscuous mode
[   73.047228][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.055280][ T5842] Cannot create hsr debugfs directory
[   73.074419][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.085289][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.111595][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.145154][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.152393][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.179036][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.258151][ T5848] hsr_slave_0: entered promiscuous mode
[   73.264533][ T5848] hsr_slave_1: entered promiscuous mode
[   73.271420][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.279012][ T5848] Cannot create hsr debugfs directory
[   73.375672][ T5841] hsr_slave_0: entered promiscuous mode
[   73.385501][ T5841] hsr_slave_1: entered promiscuous mode
[   73.391847][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.399423][ T5841] Cannot create hsr debugfs directory
[   73.630775][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.643572][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.655830][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.679227][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.739219][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.759777][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.780443][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.795477][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.855652][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.895418][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.924190][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.937585][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.985991][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.023691][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.035974][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.047948][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.122725][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.129666][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.153234][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.167425][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.197258][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.205178][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.228243][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   74.263757][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.271162][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.283684][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.290817][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.308947][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   74.355760][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.362912][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.388320][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.395474][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.440076][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.474705][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.526615][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   74.588144][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.615851][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.626752][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.633942][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.665018][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.672234][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.713603][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   74.800443][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.807645][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.828707][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   74.842774][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.849933][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.894462][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.950380][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.964194][ T5844] Bluetooth: hci2: command tx timeout
[   74.968963][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.989649][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.996845][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.009368][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.016558][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.031529][ T5844] Bluetooth: hci0: command tx timeout
[   75.031549][ T5854] Bluetooth: hci1: command tx timeout
[   75.031572][   T54] Bluetooth: hci3: command tx timeout
[   75.036972][ T5854] Bluetooth: hci4: command tx timeout
[   75.114765][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.231157][ T5851] veth0_vlan: entered promiscuous mode
[   75.267278][ T5836] veth0_vlan: entered promiscuous mode
[   75.298534][ T5851] veth1_vlan: entered promiscuous mode
[   75.326242][ T5836] veth1_vlan: entered promiscuous mode
[   75.426343][ T5851] veth0_macvtap: entered promiscuous mode
[   75.474525][ T5851] veth1_macvtap: entered promiscuous mode
[   75.492370][ T5836] veth0_macvtap: entered promiscuous mode
[   75.506264][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.519443][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.535155][ T5836] veth1_macvtap: entered promiscuous mode
[   75.550285][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.566421][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.580133][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.636454][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.648257][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.663111][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.674736][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.696944][ T5841] veth0_vlan: entered promiscuous mode
[   75.715169][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.732214][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.744460][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.785457][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.797540][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.808913][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.836360][ T5841] veth1_vlan: entered promiscuous mode
[   75.893890][ T5848] veth0_vlan: entered promiscuous mode
[   75.903628][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.918019][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.927212][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.936116][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.967684][ T5848] veth1_vlan: entered promiscuous mode
[   76.050928][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.059875][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.084918][ T5841] veth0_macvtap: entered promiscuous mode
[   76.108822][ T5848] veth0_macvtap: entered promiscuous mode
[   76.137332][ T5842] veth0_vlan: entered promiscuous mode
[   76.146293][ T5848] veth1_macvtap: entered promiscuous mode
[   76.178769][ T5842] veth1_vlan: entered promiscuous mode
[   76.190586][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.212591][ T5841] veth1_macvtap: entered promiscuous mode
[   76.225345][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.228013][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.248877][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.259125][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.270468][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.281859][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.335067][ T5842] veth0_macvtap: entered promiscuous mode
[   76.335117][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.347510][ T5842] veth1_macvtap: entered promiscuous mode
[   76.355018][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.364300][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.373216][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.384553][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.395301][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.409118][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.419623][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.430864][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.443275][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.455021][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.465345][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.477880][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.487787][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.498322][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.509582][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.531720][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.543079][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.554782][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.565353][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.575344][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.586965][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.596939][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.607728][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.618669][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.650519][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.662248][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.672758][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.683309][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.693184][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.703691][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.731993][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.741588][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.751503][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.760229][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.768483][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.785392][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.800999][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.810054][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.819414][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.829197][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.853343][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.864621][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.876197][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.888309][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.909224][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.926749][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.937400][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.948682][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.967597][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.984068][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.993737][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.004783][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.016262][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.032859][ T5844] Bluetooth: hci2: command tx timeout
[   77.111808][ T5844] Bluetooth: hci0: command tx timeout
[   77.117711][   T54] Bluetooth: hci3: command tx timeout
[   77.123252][   T54] Bluetooth: hci1: command tx timeout
[   77.128682][   T54] Bluetooth: hci4: command tx timeout
[   77.142898][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.162669][   T46] IPVS: starting estimator thread 0...
[   77.261225][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.269195][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.272772][ T5929] IPVS: using max 16 ests per chain, 38400 per kthread
[   77.388223][ T1889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.396289][ T1889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.434779][ T5940] team0: Device wg2 is of different type
[   77.468922][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   77.508860][ T1889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.519688][ T1889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.566825][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.578202][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.681456][ T1889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.710017][ T1889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.784704][ T5946] syz.1.10: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   77.803638][ T5954] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   77.807255][ T5949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.818780][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   77.826705][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.1.10 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[   77.840957][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   77.851046][ T5946] Call Trace:
[   77.854341][ T5946]  <TASK>
[   77.857290][ T5946]  dump_stack_lvl+0x241/0x360
[   77.862010][ T5946]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.867226][ T5946]  ? __pfx__printk+0x10/0x10
[   77.871830][ T5946]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[   77.878263][ T5946]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[   77.884788][ T5946]  warn_alloc+0x278/0x410
[   77.889136][ T5946]  ? __pfx_warn_alloc+0x10/0x10
[   77.894012][ T5946]  ? xskq_create+0xb6/0x170
[   77.898536][ T5946]  ? __get_vm_area_node+0x23d/0x270
[   77.903762][ T5946]  __vmalloc_node_range_noprof+0x691/0x13f0
[   77.909701][ T5946]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   77.916061][ T5946]  ? __kasan_kmalloc+0x98/0xb0
[   77.920837][ T5946]  ? xskq_create+0x54/0x170
[   77.925364][ T5946]  vmalloc_user_noprof+0x74/0x80
[   77.930311][ T5946]  ? xskq_create+0xb6/0x170
[   77.934839][ T5946]  xskq_create+0xb6/0x170
[   77.939192][ T5946]  xsk_init_queue+0xa1/0x100
[   77.943809][ T5946]  xsk_setsockopt+0x598/0x950
[   77.948504][ T5946]  ? irqentry_exit+0x63/0x90
[   77.953112][ T5946]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.958328][ T5946]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.963545][ T5946]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.968855][ T5946]  ? __pfx_xsk_setsockopt+0x10/0x10
[   77.974075][ T5946]  do_sock_setsockopt+0x3af/0x720
[   77.979133][ T5946]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   77.984707][ T5946]  ? __fget_files+0x29/0x470
[   77.989407][ T5946]  ? __fget_files+0x3f3/0x470
[   77.994100][ T5946]  ? __fget_files+0x29/0x470
[   77.998715][ T5946]  __sys_setsockopt+0x1a2/0x250
[   78.003592][ T5946]  __x64_sys_setsockopt+0xb5/0xd0
[   78.008648][ T5946]  do_syscall_64+0xf3/0x230
[   78.013165][ T5946]  ? clear_bhb_loop+0x35/0x90
[   78.017866][ T5946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.023772][ T5946] RIP: 0033:0x7f1658d7e719
[   78.028209][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.047859][ T5946] RSP: 002b:00007f1659aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   78.056328][ T5946] RAX: ffffffffffffffda RBX: 00007f1658f35f80 RCX: 00007f1658d7e719
[   78.064319][ T5946] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[   78.072305][ T5946] RBP: 00007f1658df175e R08: 0000000000000004 R09: 0000000000000000
[   78.080292][ T5946] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000
[   78.088377][ T5946] R13: 0000000000000000 R14: 00007f1658f35f80 R15: 00007ffc81e121f8
[   78.096379][ T5946]  </TASK>
[   78.118693][ T5946] Mem-Info:
[   78.129323][ T5946] active_anon:4343 inactive_anon:0 isolated_anon:0
[   78.129323][ T5946]  active_file:752 inactive_file:38179 isolated_file:0
[   78.129323][ T5946]  unevictable:768 dirty:1273 writeback:0
[   78.129323][ T5946]  slab_reclaimable:9748 slab_unreclaimable:97048
[   78.129323][ T5946]  mapped:20548 shmem:1424 pagetables:622
[   78.129323][ T5946]  sec_pagetables:0 bounce:0
[   78.129323][ T5946]  kernel_misc_reclaimable:0
[   78.129323][ T5946]  free:1356634 free_pcp:476 free_cma:0
[   78.144819][ T1889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.215072][ T1889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.239002][ T5946] Node 0 active_anon:17556kB inactive_anon:0kB active_file:3104kB inactive_file:152652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82280kB dirty:5052kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10892kB pagetables:2608kB sec_pagetables:0kB all_unreclaimable? no
[   78.284024][ T5946] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   78.289177][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   78.315229][ T5946] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   78.375560][ T5949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.398788][ T5946] lowmem_reserve[]: 0 2463 2464 0 0
[   78.437178][ T5946] Node 0 DMA32 free:1499512kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:17512kB inactive_anon:0kB active_file:3204kB inactive_file:152080kB unevictable:1536kB writepending:5052kB present:3129332kB managed:2550480kB mlocked:0kB bounce:0kB free_pcp:1352kB local_pcp:376kB free_cma:0kB
[   78.549028][ T5946] lowmem_reserve[]: 0 0 0 0 0
[   78.570192][ T5946] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:572kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[   78.610572][ T5946] lowmem_reserve[]: 0 0 0 0 0
[   78.617575][ T5946] Node 1 Normal free:3908168kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:400kB free_cma:0kB
[   78.675998][ T5946] lowmem_reserve[]: 0 0 0 0 0
[   78.692547][ T5946] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   78.694586][ T5949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.735805][ T5946] Node 0 DMA32: 52*4kB (UME) 68*8kB (UME) 10*16kB (UME) 23*32kB (UME) 8*64kB (UE) 4*128kB (ME) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UM) 3*2048kB (UM) 365*4096kB (UM) = 1508464kB
[   78.768777][ T5946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   78.890022][ T5946] Node 1 Normal: 166*4kB (UME) 54*8kB (UME) 38*16kB (UME) 200*32kB (UME) 93*64kB (UME) 32*128kB (UME) 13*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 946*4096kB (M) = 3908072kB
[   78.931213][ T5946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   78.994915][ T5946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.029315][ T5949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.039911][ T5946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   79.059373][ T5977] dccp_invalid_packet: P.Data Offset(0) too small
[   79.081304][ T5946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.092584][ T5946] 40689 total pagecache pages
[   79.097340][ T5946] 0 pages in swap cache
[   79.104013][ T5946] Free swap  = 124996kB
[   79.109132][ T5946] Total swap = 124996kB
[   79.114312][ T5946] 2097051 pages RAM
[   79.118176][ T5946] 0 pages HighMem/MovableOnly
[   79.122957][ T5946] 427645 pages reserved
[   79.127223][ T5946] 0 pages cma reserved
[   79.145971][ T5854] Bluetooth: hci2: command tx timeout
[   79.191589][ T5854] Bluetooth: hci4: command tx timeout
[   79.197191][ T5854] Bluetooth: hci0: command tx timeout
[   79.203265][ T5854] Bluetooth: hci1: command tx timeout
[   79.208992][ T5854] Bluetooth: hci3: command tx timeout
[   79.298703][ T5984] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.503627][ T5993] Illegal XDP return value 4291469488 on prog  (id 7) dev N/A, expect packet loss!
[   79.604575][ T5949] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.607225][ T5997] netlink: 'syz.3.20': attribute type 10 has an invalid length.
[   79.642228][ T5949] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.675169][ T6001] netlink: 'syz.4.22': attribute type 7 has an invalid length.
[   79.689535][ T5949] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.701326][ T6001] netlink: 224 bytes leftover after parsing attributes in process `syz.4.22'.
[   79.733123][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22'.
[   79.778707][ T5949] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.834605][ T6009] Zero length message leads to an empty skb
[   79.848438][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'.
[   79.899235][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   80.158144][ T6023] netlink: 'syz.3.27': attribute type 6 has an invalid length.
[   80.185739][ T6023] netlink: 'syz.3.27': attribute type 7 has an invalid length.
[   80.190788][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.210704][ T6023] netlink: 'syz.3.27': attribute type 8 has an invalid length.
[   80.248795][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.469375][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'.
[   80.503829][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'.
[   80.705423][ T6045] netlink: 'syz.4.35': attribute type 2 has an invalid length.
[   82.079311][ T6086] netlink: 'syz.3.47': attribute type 12 has an invalid length.
[   82.586993][ T6095] netlink: 'syz.3.52': attribute type 1 has an invalid length.
[   82.639563][ T6095] __nla_validate_parse: 3 callbacks suppressed
[   82.639586][ T6095] netlink: 224 bytes leftover after parsing attributes in process `syz.3.52'.
[   82.822614][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   82.858496][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'.
[   83.453719][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.57'.
[   83.812635][ T6143] syz.0.61 uses old SIOCAX25GETINFO
[   84.244203][ T6170] pimreg: entered allmulticast mode
[   84.270855][ T6171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ
[   84.342555][ T6182] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   84.665178][ T6200] netlink: 'syz.1.78': attribute type 2 has an invalid length.
[   84.673990][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'.
[   84.719503][ T6202] syz.2.79 (6202) used obsolete PPPIOCDETACH ioctl
[   84.898773][ T6211] x_tables: duplicate underflow at hook 3
[   85.168302][ T6217] Can't find ip_set type hash:ipbQ3k
[   85.483209][ T6230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.87'.
[   85.493438][ T6230] netlink: 'syz.1.87': attribute type 13 has an invalid length.
[   85.530010][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.89'.
[   85.546326][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.89'.
[   85.579122][ T6230] veth0_macvtap: left promiscuous mode
[   85.592155][ T6230] macvtap0: entered allmulticast mode
[   85.642748][ T6230] macvtap0: refused to change device tx_queue_len
[   85.808497][ T6247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.92'.
[   85.852974][ T6252] Unsupported ieee802154 address type: 0
[   85.958336][ T6261] netlink: 'syz.0.98': attribute type 6 has an invalid length.
[   86.622895][ T6303] Cannot find set identified by id 0 to match
[   86.688387][ T6310] netlink: 'syz.2.106': attribute type 11 has an invalid length.
[   86.700687][ T6299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.729268][ T6310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.106'.
[   86.755879][ T6303] pim6reg: entered allmulticast mode
[   86.837724][ T6308] pim6reg: left allmulticast mode
[   87.046284][ T6328] syz.0.116 uses obsolete (PF_INET,SOCK_PACKET)
[   87.054547][    T9] cfg80211: failed to load regulatory.db
[   87.148590][ T6331] netlink: 'syz.1.117': attribute type 10 has an invalid length.
[   87.167891][ T6331] bridge0: port 3(macvlan1) entered blocking state
[   87.168327][ T6333] Unsupported ieee802154 address type: 0
[   87.177309][ T6331] bridge0: port 3(macvlan1) entered disabled state
[   87.208500][ T6331] macvlan1: entered allmulticast mode
[   87.235793][ T6331] veth1_vlan: entered allmulticast mode
[   87.263573][ T6331] macvlan1: entered promiscuous mode
[   87.270053][ T6331] bridge0: port 3(macvlan1) entered blocking state
[   87.277003][ T6331] bridge0: port 3(macvlan1) entered forwarding state
[   87.381670][ T6347] geneve2: entered promiscuous mode
[   87.401962][ T6347] geneve2: entered allmulticast mode
[   87.803849][ T6380] geneve2: entered promiscuous mode
[   87.810375][ T6380] geneve2: entered allmulticast mode
[   88.035349][ T6391] bridge_slave_0: left allmulticast mode
[   88.049902][ T6391] bridge_slave_0: left promiscuous mode
[   88.065788][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.097807][ T6391] bridge_slave_1: left allmulticast mode
[   88.106614][ T6391] bridge_slave_1: left promiscuous mode
[   88.117428][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.145167][ T6391] bond0: (slave bond_slave_0): Releasing backup interface
[   88.173707][ T6391] bond0: (slave bond_slave_1): Releasing backup interface
[   88.212713][ T6391] team0: Port device team_slave_0 removed
[   88.237859][ T6391] team0: Port device team_slave_1 removed
[   88.268369][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.280027][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.298399][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.310475][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.442002][ T6397] team0: Port device wg2 added
[   88.663977][ T6415] batadv1: entered promiscuous mode
[   88.681830][ T6415] 8021q: adding VLAN 0 to HW filter on device batadv1
[   88.811668][ T6419] __nla_validate_parse: 1 callbacks suppressed
[   88.811687][ T6419] netlink: 104 bytes leftover after parsing attributes in process `syz.1.139'.
[   88.878365][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'.
[   88.930696][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'.
[   89.441335][ T6446] netlink: 'syz.3.148': attribute type 1 has an invalid length.
[   89.453441][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'.
[   89.494432][ T6450] Cannot find set identified by id 0 to match
[   89.523116][ T6438] syzkaller1: entered promiscuous mode
[   89.533738][ T6438] syzkaller1: entered allmulticast mode
[   89.869669][ T6461] tap0: tun_chr_ioctl cmd 1074025677
[   89.876806][ T6461] tap0: linktype set to 776
[   89.887612][ T6461] tap0: tun_chr_ioctl cmd 1082156677
[   89.982238][ T6472] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[   89.996773][ T6472] netlink: 'syz.1.157': attribute type 4 has an invalid length.
[   90.006092][ T6472] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.157'.
[   90.157166][ T6485] vlan0: entered promiscuous mode
[   90.179173][ T6485] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   90.617153][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'.
[   90.626694][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'.
[   91.044245][ T6530] bridge_slave_0: left allmulticast mode
[   91.049968][ T6530] bridge_slave_0: left promiscuous mode
[   91.064090][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.087812][ T6530] bridge_slave_1: left allmulticast mode
[   91.094421][ T6530] bridge_slave_1: left promiscuous mode
[   91.100345][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.115815][ T6530] bond0: (slave bond_slave_0): Releasing backup interface
[   91.129481][ T6530] bond0: (slave bond_slave_1): Releasing backup interface
[   91.227991][ T6530] team0: Port device team_slave_0 removed
[   91.276381][ T6530] team0: Port device team_slave_1 removed
[   91.292542][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.314716][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.339185][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.352350][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.366254][ T6547] netlink: 68 bytes leftover after parsing attributes in process `syz.4.180'.
[   91.430486][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   91.485858][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   91.535562][ T6553] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb
[   91.632319][ T6558] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[   92.290814][ T6602] ieee802154 phy0 wpan0: encryption failed: -22
[   92.493552][ T6615] netlink: 'syz.0.194': attribute type 4 has an invalid length.
[   92.708941][ T6596] netlink: 'syz.4.192': attribute type 10 has an invalid length.
[   92.751327][ T6596] netlink: 'syz.4.192': attribute type 10 has an invalid length.
[   92.799703][ T6596] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   92.814955][ T6596] netlink: 'syz.4.192': attribute type 3 has an invalid length.
[   92.974432][ T6624] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   92.988436][ T6626] pim6reg: entered allmulticast mode
[   93.147518][ T6636] ax25_connect(): syz.4.201 uses autobind, please contact jreuter@yaina.de
[   93.171722][ T6640] dccp_invalid_packet: P.Data Offset(4) too small
[   93.382007][ T6644] team0: entered promiscuous mode
[   93.406951][ T6643] team0: left promiscuous mode
[   94.112451][ T6694] __nla_validate_parse: 4 callbacks suppressed
[   94.112473][ T6694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.222'.
[   94.152325][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.222'.
[   94.169977][ T6650] delete_channel: no stack
[   94.179035][ T6694] netlink: 84 bytes leftover after parsing attributes in process `syz.4.222'.
[   94.208703][ T6694] netem: invalid attributes len -16
[   94.222881][ T6694] netem: change failed
[   94.373377][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.226'.
[   94.410341][ T6705] erspan1: entered promiscuous mode
[   94.420803][ T6705] erspan1: entered allmulticast mode
[   95.556729][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   96.121761][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[   96.297207][ T6756] netlink: 'syz.3.242': attribute type 1 has an invalid length.
[   96.351382][ T6757] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   96.806896][ T6797] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20000
[   96.834096][    T9] IPVS: starting estimator thread 0...
[   96.848413][ T6797] tipc: Started in network mode
[   96.854481][ T6797] tipc: Node identity ac1414aa, cluster identity 4711
[   96.869406][ T6797] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   96.877434][ T6797] tipc: Enabled bearer <udp:s>, priority 10
[   96.929038][ T6798] IPVS: using max 17 ests per chain, 40800 per kthread
[   96.975909][ T6804] sock: sock_timestamping_bind_phc: sock not bind to device
[   97.002458][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.141214][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.291142][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.379798][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'.
[   97.436555][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'.
[   97.441606][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.446845][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'.
[   97.571174][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.666916][ T6849] dvmrp1: entered allmulticast mode
[   97.680772][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'.
[   97.711098][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.862937][ T5915] tipc: Node number set to 2886997162
[   97.986822][ T6868] xt_connbytes: Forcing CT accounting to be enabled
[   98.001149][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   98.008563][ T6868] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   98.027886][ T6868] xt_bpf: check failed: parse error
[   98.110738][ T6871] TCP: TCP_TX_DELAY enabled
[   98.281212][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   98.811178][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   99.364044][ T6927] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   99.610295][ T6944] __nla_validate_parse: 3 callbacks suppressed
[   99.610315][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'.
[   99.644673][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'.
[   99.707389][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'.
[   99.841731][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   99.954665][ T6969] vlan2: entered promiscuous mode
[   99.960766][ T6969] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  100.000766][ T6969] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  100.038995][ T6973] netlink: 68 bytes leftover after parsing attributes in process `syz.0.290'.
[  100.343875][ T7002] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  100.414502][ T7006] pim6reg: left allmulticast mode
[  100.471848][ T7010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'.
[  100.494251][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[  100.521540][ T7012] netlink: 'syz.0.298': attribute type 4 has an invalid length.
[  100.871108][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  100.991479][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'.
[  101.012044][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'.
[  101.026747][ T7045] netlink: 'syz.1.305': attribute type 7 has an invalid length.
[  101.060996][ T7045] netlink: 'syz.1.305': attribute type 8 has an invalid length.
[  101.068904][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[  101.093262][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'.
[  101.183008][ T7058] raw_sendmsg: syz.2.308 forgot to set AF_INET. Fix it!
[  101.506350][ T7068] ebt_among: src integrity fail: 100
[  101.911173][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  102.308882][ T7111] netlink: 'syz.4.326': attribute type 6 has an invalid length.
[  102.467503][ T7118] ieee802154 phy0 wpan0: encryption failed: -22
[  102.951117][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  103.170483][ T7160] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  103.360375][ T7170] vlan1: entered allmulticast mode
[  103.381943][ T7170] bond0: entered allmulticast mode
[  103.387136][ T7170] bond_slave_0: entered allmulticast mode
[  103.396130][ T7170] bond_slave_1: entered allmulticast mode
[  103.405752][ T7170] bond0: left allmulticast mode
[  103.417853][ T7170] bond_slave_0: left allmulticast mode
[  103.423585][ T7170] bond_slave_1: left allmulticast mode
[  103.445330][ T7177] 
: renamed from bond0 (while UP)
[  103.508240][ T7173] sctp: [Deprecated]: syz.3.346 (pid 7173) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.508240][ T7173] Use struct sctp_sack_info instead
[  104.001285][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  104.354326][ T7205] tap0: tun_chr_ioctl cmd 1074025677
[  104.365407][ T7205] tap0: linktype set to 780
[  104.406095][ T7207] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  104.743235][ T7221] netlink: 'syz.4.358': attribute type 46 has an invalid length.
[  104.755662][ T7221] __nla_validate_parse: 6 callbacks suppressed
[  104.755679][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'.
[  105.031183][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  105.087286][ T7243] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  105.425166][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'.
[  105.455384][ T7256] batadv0: entered promiscuous mode
[  105.472503][ T7256] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  105.515307][ T7256] batadv0: left promiscuous mode
[  105.596703][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'.
[  105.609997][ T7267] netlink: 'syz.1.372': attribute type 10 has an invalid length.
[  105.623489][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'.
[  105.647176][ T7267] batman_adv: batadv0: Adding interface: vlan1
[  105.667126][ T7267] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.701629][ T7267] batman_adv: batadv0: Interface activated: vlan1
[  105.851483][ T7276] x_tables: duplicate underflow at hook 1
[  105.910061][ T7278] ieee802154 phy0 wpan0: encryption failed: -22
[  105.929420][ T7280] set match dimension is over the limit!
[  106.040110][ T7285] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.071147][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  106.169236][ T7294] pim6reg: entered allmulticast mode
[  106.177868][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'.
[  106.258957][ T7280] pim6reg: left allmulticast mode
[  106.292582][ T7302] atomic_op ffff888028822198 conn xmit_atomic 0000000000000000
[  106.304433][ T7296] Cannot find set identified by id 0 to match
[  106.489323][ T7311] x_tables: duplicate underflow at hook 2
[  106.888352][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'.
[  107.111197][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.264775][ T7344] FAULT_INJECTION: forcing a failure.
[  107.264775][ T7344] name failslab, interval 1, probability 0, space 0, times 1
[  107.270370][ T7343] netlink: 'syz.1.393': attribute type 11 has an invalid length.
[  107.295274][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.4.390 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  107.305930][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  107.316021][ T7344] Call Trace:
[  107.319308][ T7344]  <TASK>
[  107.322260][ T7344]  dump_stack_lvl+0x241/0x360
[  107.327134][ T7344]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.332348][ T7344]  ? __pfx__printk+0x10/0x10
[  107.336952][ T7344]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  107.342527][ T7344]  ? __pfx___might_resched+0x10/0x10
[  107.347835][ T7344]  should_fail_ex+0x3b0/0x4e0
[  107.352524][ T7344]  ? mas_alloc_nodes+0x26c/0x840
[  107.357471][ T7344]  should_failslab+0xac/0x100
[  107.362262][ T7344]  ? mas_alloc_nodes+0x26c/0x840
[  107.367211][ T7344]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  107.372608][ T7344]  mas_alloc_nodes+0x26c/0x840
[  107.377392][ T7344]  mas_preallocate+0x554/0x8c0
[  107.382174][ T7344]  ? __pfx_mas_preallocate+0x10/0x10
[  107.387476][ T7344]  ? __mas_set_range+0x133/0x3c0
[  107.392433][ T7344]  __split_vma+0x302/0xc50
[  107.396891][ T7344]  ? __pfx___split_vma+0x10/0x10
[  107.402021][ T7344]  ? mas_find+0x950/0xbb0
[  107.406369][ T7344]  vms_gather_munmap_vmas+0x4b2/0x15d0
[  107.411858][ T7344]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  107.417786][ T7344]  ? mas_find+0x8c0/0xbb0
[  107.422132][ T7344]  mmap_region+0x938/0x23f0
[  107.426700][ T7344]  ? __pfx_mmap_region+0x10/0x10
[  107.431674][ T7344]  ? __pfx_lock_acquire+0x10/0x10
[  107.436725][ T7344]  ? mm_get_unmapped_area+0xa8/0xd0
[  107.441947][ T7344]  ? bpf_lsm_mmap_addr+0x9/0x10
[  107.446804][ T7344]  ? security_mmap_addr+0x6f/0x250
[  107.451933][ T7344]  do_mmap+0x8f0/0x1000
[  107.456110][ T7344]  ? __pfx_do_mmap+0x10/0x10
[  107.460713][ T7344]  ? __pfx_down_write_killable+0x10/0x10
[  107.466361][ T7344]  ? common_file_perm+0x1a6/0x210
[  107.471404][ T7344]  vm_mmap_pgoff+0x1dd/0x3d0
[  107.476009][ T7344]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  107.481157][ T7344]  ? __fget_files+0x29/0x470
[  107.485761][ T7344]  ? __fget_files+0x3f3/0x470
[  107.490459][ T7344]  ? __fget_files+0x29/0x470
[  107.495068][ T7344]  ksys_mmap_pgoff+0x4eb/0x720
[  107.499869][ T7344]  ? __x64_sys_mmap+0x7f/0x140
[  107.504734][ T7344]  do_syscall_64+0xf3/0x230
[  107.509257][ T7344]  ? clear_bhb_loop+0x35/0x90
[  107.513963][ T7344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.519888][ T7344] RIP: 0033:0x7fc3f5b7e719
[  107.524325][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.543970][ T7344] RSP: 002b:00007fc3f69ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  107.552401][ T7344] RAX: ffffffffffffffda RBX: 00007fc3f5d35f80 RCX: 00007fc3f5b7e719
[  107.560383][ T7344] RDX: 0000000000000000 RSI: 0000000000b36000 RDI: 0000000020000000
[  107.568369][ T7344] RBP: 00007fc3f69ed090 R08: 0000000000000006 R09: 0000000000000000
[  107.576354][ T7344] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001
[  107.584333][ T7344] R13: 0000000000000000 R14: 00007fc3f5d35f80 R15: 00007ffc335a8398
[  107.592334][ T7344]  </TASK>
[  107.936051][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.399'.
[  107.948660][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.399'.
[  107.960426][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[  107.969823][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[  108.152302][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  108.169433][ T7378] syzkaller0: refused to change device tx_queue_len
[  108.522987][ T7391] Bluetooth: MGMT ver 1.23
[  109.201844][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  109.394700][ T7437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  109.421896][ T7437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  109.519340][ T7423] delete_channel: no stack
[  109.534361][ T7423] delete_channel: no stack
[  109.539353][ T7423] delete_channel: no stack
[  109.551454][ T7423] delete_channel: no stack
[  109.559588][ T7423] delete_channel: no stack
[  109.569001][ T7423] delete_channel: no stack
[  109.581501][ T7423] delete_channel: no stack
[  109.586112][ T7423] delete_channel: no stack
[  109.590678][ T7423] delete_channel: no stack
[  109.601731][ T7423] delete_channel: no stack
[  109.629912][ T7423] delete_channel: no stack
[  109.631005][ T7446] FAULT_INJECTION: forcing a failure.
[  109.631005][ T7446] name failslab, interval 1, probability 0, space 0, times 0
[  109.634909][ T7423] delete_channel: no stack
[  109.652914][ T7423] delete_channel: no stack
[  109.657685][ T7423] delete_channel: no stack
[  109.663147][ T7423] delete_channel: no stack
[  109.666299][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.0.424 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  109.667934][ T7423] delete_channel: no stack
[  109.678181][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  109.678199][ T7446] Call Trace:
[  109.678208][ T7446]  <TASK>
[  109.678218][ T7446]  dump_stack_lvl+0x241/0x360
[  109.678256][ T7446]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.678285][ T7446]  ? __pfx__printk+0x10/0x10
[  109.678315][ T7446]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  109.678347][ T7446]  ? __pfx___might_resched+0x10/0x10
[  109.678377][ T7446]  ? can_vma_merge_right+0x1c9/0x500
[  109.683494][ T7423] delete_channel: no stack
[  109.692845][ T7446]  should_fail_ex+0x3b0/0x4e0
[  109.692880][ T7446]  ? vm_area_alloc+0x24/0x1d0
[  109.692906][ T7446]  should_failslab+0xac/0x100
[  109.692936][ T7446]  ? vm_area_alloc+0x24/0x1d0
[  109.692961][ T7446]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  109.692994][ T7446]  vm_area_alloc+0x24/0x1d0
[  109.693021][ T7446]  mmap_region+0x113b/0x23f0
[  109.697024][ T7423] delete_channel: no stack
[  109.699264][ T7446]  ? __pfx_mmap_region+0x10/0x10
[  109.704367][ T7423] delete_channel: no stack
[  109.709138][ T7446]  ? __pfx_lock_acquire+0x10/0x10
[  109.709206][ T7446]  ? mm_get_unmapped_area+0xa8/0xd0
[  109.791421][ T7446]  ? bpf_lsm_mmap_addr+0x9/0x10
[  109.796293][ T7446]  ? security_mmap_addr+0x6f/0x250
[  109.801425][ T7446]  do_mmap+0x8f0/0x1000
[  109.805608][ T7446]  ? __pfx_do_mmap+0x10/0x10
[  109.810219][ T7446]  ? __pfx_down_write_killable+0x10/0x10
[  109.815885][ T7446]  ? common_file_perm+0x1a6/0x210
[  109.820940][ T7446]  vm_mmap_pgoff+0x1dd/0x3d0
[  109.825557][ T7446]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  109.830677][ T7446]  ? __fget_files+0x29/0x470
[  109.835289][ T7446]  ? __fget_files+0x3f3/0x470
[  109.839980][ T7446]  ? __fget_files+0x29/0x470
[  109.844589][ T7446]  ksys_mmap_pgoff+0x4eb/0x720
[  109.849370][ T7446]  ? __x64_sys_mmap+0x7f/0x140
[  109.854168][ T7446]  do_syscall_64+0xf3/0x230
[  109.858720][ T7446]  ? clear_bhb_loop+0x35/0x90
[  109.863451][ T7446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.869366][ T7446] RIP: 0033:0x7f2dbb17e719
[  109.873797][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.893441][ T7446] RSP: 002b:00007f2dbbf19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  109.901916][ T7446] RAX: ffffffffffffffda RBX: 00007f2dbb335f80 RCX: 00007f2dbb17e719
[  109.909913][ T7446] RDX: 0000000000000000 RSI: 0000000000b36000 RDI: 0000000020000000
[  109.917911][ T7446] RBP: 00007f2dbbf19090 R08: 0000000000000006 R09: 0000000000000000
[  109.925897][ T7446] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001
[  109.933880][ T7446] R13: 0000000000000000 R14: 00007f2dbb335f80 R15: 00007ffe03a4c848
[  109.941879][ T7446]  </TASK>
[  109.961595][ T7423] delete_channel: no stack
[  109.966219][ T7423] delete_channel: no stack
[  109.970894][ T7423] delete_channel: no stack
[  110.022062][ T7423] delete_channel: no stack
[  110.026971][ T7423] delete_channel: no stack
[  110.077542][ T7423] delete_channel: no stack
[  110.083116][ T7423] delete_channel: no stack
[  110.087735][ T7423] delete_channel: no stack
[  110.093443][ T7423] delete_channel: no stack
[  110.098045][ T7423] delete_channel: no stack
[  110.103236][ T7423] delete_channel: no stack
[  110.107829][ T7423] delete_channel: no stack
[  110.113019][ T7423] delete_channel: no stack
[  110.117658][ T7423] delete_channel: no stack
[  110.122639][ T7423] delete_channel: no stack
[  110.127442][ T7423] delete_channel: no stack
[  110.133314][ T7423] delete_channel: no stack
[  110.137900][ T7423] delete_channel: no stack
[  110.142849][ T7423] delete_channel: no stack
[  110.147566][ T7423] delete_channel: no stack
[  110.154379][ T7423] delete_channel: no stack
[  110.158982][ T7423] delete_channel: no stack
[  110.172520][ T7423] delete_channel: no stack
[  110.177146][ T7423] delete_channel: no stack
[  110.183416][ T7423] delete_channel: no stack
[  110.188037][ T7423] delete_channel: no stack
[  110.201352][ T7423] delete_channel: no stack
[  110.206001][ T7423] delete_channel: no stack
[  110.210595][ T7423] delete_channel: no stack
[  110.221499][ T7423] delete_channel: no stack
[  110.226215][ T7423] delete_channel: no stack
[  110.238996][ T7423] delete_channel: no stack
[  110.241125][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  110.244914][ T7423] delete_channel: no stack
[  110.255286][ T7423] delete_channel: no stack
[  110.260063][ T7423] delete_channel: no stack
[  110.264761][ T7423] delete_channel: no stack
[  110.269371][ T7423] delete_channel: no stack
[  110.274114][ T7423] delete_channel: no stack
[  110.278721][ T7423] delete_channel: no stack
[  110.283609][ T7423] delete_channel: no stack
[  110.288229][ T7423] delete_channel: no stack
[  110.333387][ T7423] delete_channel: no stack
[  110.338031][ T7423] delete_channel: no stack
[  110.351889][ T7423] delete_channel: no stack
[  110.357869][ T7423] delete_channel: no stack
[  110.377240][ T7423] delete_channel: no stack
[  110.383878][ T7463] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  110.399905][ T7463] macvlan2: entered allmulticast mode
[  110.407209][ T7463] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  110.420712][ T7463] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  110.449842][ T7467] Bluetooth: MGMT ver 1.23
[  110.939811][ T7495] __nla_validate_parse: 7 callbacks suppressed
[  110.939832][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.438'.
[  111.020926][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'.
[  111.271222][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.518855][ T7508] netlink: 'syz.0.443': attribute type 4 has an invalid length.
[  111.545008][ T7508] netlink: 152 bytes leftover after parsing attributes in process `syz.0.443'.
[  111.648352][ T7514] netlink: 'syz.2.444': attribute type 2 has an invalid length.
[  112.087079][ T7533] netpci0: renamed from team0 (while UP)
[  112.105295][ T7533] netpci0: Cannot enslave team device to itself
[  112.119711][ T7533] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check.
[  112.274860][ T7544] netlink: 'syz.1.452': attribute type 1 has an invalid length.
[  112.311148][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  112.435732][ T7548] netlink: 172 bytes leftover after parsing attributes in process `syz.3.453'.
[  112.445636][ T7548] netlink: 172 bytes leftover after parsing attributes in process `syz.3.453'.
[  112.480760][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  112.703241][ T7556] sctp: [Deprecated]: syz.3.456 (pid 7556) Use of int in maxseg socket option.
[  112.703241][ T7556] Use struct sctp_assoc_value instead
[  112.880522][ T7564] delete_channel: no stack
[  113.209184][ T7576] IPVS: Scheduler module ip_vs_sip not found
[  113.229512][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'.
[  113.266868][ T7581] netlink: 'syz.3.465': attribute type 7 has an invalid length.
[  113.279693][ T7581] netlink: 'syz.3.465': attribute type 8 has an invalid length.
[  113.288465][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'.
[  113.351228][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  113.543889][ T7597] netlink: 260 bytes leftover after parsing attributes in process `syz.4.470'.
[  113.598991][ T7598] IPv6: sit1: Disabled Multicast RS
[  113.615531][ T7598] sit1: entered allmulticast mode
[  113.657146][ T7604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.470'.
[  113.891213][ T7610] netlink: 'syz.4.474': attribute type 11 has an invalid length.
[  114.130525][ T7624] netlink: 'syz.1.478': attribute type 21 has an invalid length.
[  114.146824][ T7624] IPv6: NLM_F_CREATE should be specified when creating new route
[  114.156195][ T7624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.163935][ T7624] IPv6: NLM_F_CREATE should be set when creating new route
[  114.171398][ T7624] IPv6: NLM_F_CREATE should be set when creating new route
[  114.178673][ T7624] IPv6: NLM_F_CREATE should be set when creating new route
[  114.391169][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  114.757995][ T7667] Â: renamed from pim6reg1
[  114.970213][ T7678] ieee802154 phy0 wpan0: encryption failed: -90
[  115.431099][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  115.853466][ T7740] trusted_key: syz.1.511 sent an empty control message without MSG_MORE.
[  115.899889][ T7746] tap0: tun_chr_ioctl cmd 1074025677
[  115.915864][ T7746] tap0: linktype set to 270
[  115.930129][ T7746] netlink: 'syz.4.513': attribute type 9 has an invalid length.
[  115.948710][ T7746] bond_slave_0: entered promiscuous mode
[  115.954862][ T7746] bond_slave_1: entered promiscuous mode
[  115.960682][ T7746] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  115.971429][ T7746] macvlan2: entered promiscuous mode
[  115.976787][ T7746] bond0: entered promiscuous mode
[  115.984017][ T7746] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  116.118528][ T7754] batman_adv: batadv0: Interface deactivated: vlan1
[  116.142149][ T7754] veth0_vlan: left promiscuous mode
[  116.181975][ T7754] batman_adv: batadv0: Removing interface: vlan1
[  116.373409][ T7767] netlink: 'syz.4.519': attribute type 30 has an invalid length.
[  116.472597][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  116.759772][ T7795] __nla_validate_parse: 9 callbacks suppressed
[  116.759793][ T7795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.527'.
[  116.905858][ T7798] pim6reg: entered allmulticast mode
[  117.131549][ T5915] IPVS: starting estimator thread 0...
[  117.231294][ T7822] IPVS: using max 17 ests per chain, 40800 per kthread
[  117.252878][ T7825] vlan1: entered allmulticast mode
[  117.269756][ T7825] macvtap0: entered allmulticast mode
[  117.277622][ T7825] veth0_macvtap: entered allmulticast mode
[  117.308336][ T7821] Cannot find del_set index 286 as target
[  117.390162][ T7825] macvtap0: left allmulticast mode
[  117.399058][ T7825] veth0_macvtap: left allmulticast mode
[  117.521205][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  117.997975][ T7854] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.545'.
[  118.428577][ T7872] netlink: 'syz.3.552': attribute type 32 has an invalid length.
[  118.447484][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'.
[  118.457336][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'.
[  118.552289][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  118.889539][ T7891] FAULT_INJECTION: forcing a failure.
[  118.889539][ T7891] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  118.919912][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.1.558 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  118.930664][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  118.940777][ T7891] Call Trace:
[  118.944077][ T7891]  <TASK>
[  118.947019][ T7891]  dump_stack_lvl+0x241/0x360
[  118.951729][ T7891]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.956941][ T7891]  ? __pfx__printk+0x10/0x10
[  118.961553][ T7891]  should_fail_ex+0x3b0/0x4e0
[  118.966248][ T7891]  _copy_from_user+0x2f/0xc0
[  118.970862][ T7891]  move_addr_to_kernel+0x82/0x150
[  118.975905][ T7891]  __sys_sendto+0x29f/0x4f0
[  118.980434][ T7891]  ? __pfx___sys_sendto+0x10/0x10
[  118.985494][ T7891]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  118.991498][ T7891]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  118.997844][ T7891]  ? exc_page_fault+0x590/0x8c0
[  119.002711][ T7891]  __x64_sys_sendto+0xde/0x100
[  119.007523][ T7891]  do_syscall_64+0xf3/0x230
[  119.012060][ T7891]  ? clear_bhb_loop+0x35/0x90
[  119.016776][ T7891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.022688][ T7891] RIP: 0033:0x7f1658d805ac
[  119.027113][ T7891] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  119.046740][ T7891] RSP: 002b:00007f1659aa0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  119.055190][ T7891] RAX: ffffffffffffffda RBX: 00007f1659aa0fc0 RCX: 00007f1658d805ac
[  119.063180][ T7891] RDX: 0000000000000024 RSI: 00007f1659aa1010 RDI: 0000000000000006
[  119.071180][ T7891] RBP: 0000000000000000 R08: 00007f1659aa0f14 R09: 000000000000000c
[  119.079171][ T7891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  119.087157][ T7891] R13: 00007f1659aa0f68 R14: 00007f1659aa1010 R15: 0000000000000000
[  119.095154][ T7891]  </TASK>
[  119.158495][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'.
[  119.364313][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'.
[  119.373897][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'.
[  119.591167][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  119.682028][ T7919] netlink: 'syz.3.572': attribute type 10 has an invalid length.
[  119.733060][ T7926] netlink: 'syz.3.572': attribute type 10 has an invalid length.
[  119.745551][ T7925] FAULT_INJECTION: forcing a failure.
[  119.745551][ T7925] name failslab, interval 1, probability 0, space 0, times 0
[  119.778632][ T7919] team0: Failed to send options change via netlink (err -105)
[  119.788003][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.1.571 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  119.798647][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  119.808765][ T7925] Call Trace:
[  119.812078][ T7925]  <TASK>
[  119.815036][ T7925]  dump_stack_lvl+0x241/0x360
[  119.819757][ T7925]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.824998][ T7925]  ? __pfx__printk+0x10/0x10
[  119.829630][ T7925]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  119.835659][ T7925]  ? __pfx___might_resched+0x10/0x10
[  119.840993][ T7925]  ? aa_label_sk_perm+0x4f3/0x6c0
[  119.846061][ T7925]  ? __lock_acquire+0x1384/0x2050
[  119.851143][ T7925]  should_fail_ex+0x3b0/0x4e0
[  119.855871][ T7925]  should_failslab+0xac/0x100
[  119.860597][ T7925]  ? __alloc_skb+0x1c3/0x440
[  119.865241][ T7925]  kmem_cache_alloc_node_noprof+0x71/0x320
[  119.871107][ T7925]  __alloc_skb+0x1c3/0x440
[  119.875615][ T7925]  ? __pfx___alloc_skb+0x10/0x10
[  119.880709][ T7925]  netlink_sendmsg+0x638/0xcb0
[  119.885648][ T7925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.891019][ T7925]  ? aa_sock_msg_perm+0x91/0x160
[  119.896013][ T7925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.901431][ T7925]  __sock_sendmsg+0x221/0x270
[  119.906153][ T7925]  __sys_sendto+0x39b/0x4f0
[  119.910732][ T7925]  ? __pfx___sys_sendto+0x10/0x10
[  119.915836][ T7925]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  119.921875][ T7925]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  119.928259][ T7925]  ? exc_page_fault+0x590/0x8c0
[  119.933157][ T7925]  __x64_sys_sendto+0xde/0x100
[  119.937979][ T7925]  do_syscall_64+0xf3/0x230
[  119.942531][ T7925]  ? clear_bhb_loop+0x35/0x90
[  119.947298][ T7925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.953241][ T7925] RIP: 0033:0x7f1658d805ac
[  119.957689][ T7925] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  119.977367][ T7925] RSP: 002b:00007f1659aa0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  119.985846][ T7925] RAX: ffffffffffffffda RBX: 00007f1659aa0fc0 RCX: 00007f1658d805ac
[  119.993866][ T7925] RDX: 0000000000000024 RSI: 00007f1659aa1010 RDI: 0000000000000006
[  120.001880][ T7925] RBP: 0000000000000000 R08: 00007f1659aa0f14 R09: 000000000000000c
[  120.009890][ T7925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  120.017896][ T7925] R13: 00007f1659aa0f68 R14: 00007f1659aa1010 R15: 0000000000000000
[  120.025928][ T7925]  </TASK>
[  120.030033][ T7919] team0: Port device netdevsim0 added
[  120.048317][ T7926] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  120.121480][ T7926] team0: Failed to send options change via netlink (err -105)
[  120.129311][ T7926] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  120.182573][ T7926] team0: Port device netdevsim0 removed
[  120.222787][ T7926] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  120.577979][ T7958] IPv6: addrconf: prefix option has invalid lifetime
[  120.586049][ T7959] IPv6: addrconf: prefix option has invalid lifetime
[  120.631161][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  120.986399][ T7971] netlink: 'syz.4.583': attribute type 1 has an invalid length.
[  120.988210][ T7970] ieee802154 phy0 wpan0: encryption failed: -22
[  121.024906][ T7970] ieee802154 phy0 wpan0: encryption failed: -22
[  121.144902][ T7943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.165873][ T7943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.180051][ T7943] bond0 (unregistering): Released all slaves
[  121.220074][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.585'.
[  121.229528][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.585'.
[  121.428881][ T7984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.588'.
[  121.671170][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  121.821103][ T8011] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received
[  121.863466][ T8016] netlink: 'syz.0.596': attribute type 4 has an invalid length.
[  122.007594][ T8022] IPv6: sit1: Disabled Multicast RS
[  122.050517][ T8028] FAULT_INJECTION: forcing a failure.
[  122.050517][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.082286][ T8028] CPU: 1 UID: 0 PID: 8028 Comm: syz.3.601 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  122.092976][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  122.103088][ T8028] Call Trace:
[  122.106418][ T8028]  <TASK>
[  122.109393][ T8028]  dump_stack_lvl+0x241/0x360
[  122.114122][ T8028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.119393][ T8028]  ? __pfx__printk+0x10/0x10
[  122.124034][ T8028]  ? __pfx_lock_release+0x10/0x10
[  122.129133][ T8028]  should_fail_ex+0x3b0/0x4e0
[  122.133874][ T8028]  _copy_from_iter+0x21f/0x1e70
[  122.138804][ T8028]  ? __virt_addr_valid+0x183/0x530
[  122.143971][ T8028]  ? __pfx_lock_release+0x10/0x10
[  122.149059][ T8028]  ? __alloc_skb+0x28f/0x440
[  122.153700][ T8028]  ? __pfx__copy_from_iter+0x10/0x10
[  122.159033][ T8028]  ? __virt_addr_valid+0x183/0x530
[  122.164184][ T8028]  ? __virt_addr_valid+0x183/0x530
[  122.169361][ T8028]  ? __virt_addr_valid+0x45f/0x530
[  122.174531][ T8028]  ? __check_object_size+0x48e/0x900
[  122.179875][ T8028]  netlink_sendmsg+0x73d/0xcb0
[  122.184709][ T8028]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.190054][ T8028]  ? aa_sock_msg_perm+0x91/0x160
[  122.195053][ T8028]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.200406][ T8028]  __sock_sendmsg+0x221/0x270
[  122.205142][ T8028]  __sys_sendto+0x39b/0x4f0
[  122.209725][ T8028]  ? __pfx___sys_sendto+0x10/0x10
[  122.214855][ T8028]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  122.220904][ T8028]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  122.227292][ T8028]  ? exc_page_fault+0x590/0x8c0
[  122.232210][ T8028]  __x64_sys_sendto+0xde/0x100
[  122.237039][ T8028]  do_syscall_64+0xf3/0x230
[  122.241598][ T8028]  ? clear_bhb_loop+0x35/0x90
[  122.246336][ T8028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.252283][ T8028] RIP: 0033:0x7fc7a29805ac
[  122.256740][ T8028] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  122.276484][ T8028] RSP: 002b:00007fc7a36a1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  122.284956][ T8028] RAX: ffffffffffffffda RBX: 00007fc7a36a1fc0 RCX: 00007fc7a29805ac
[  122.289092][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.603'.
[  122.292945][ T8028] RDX: 0000000000000024 RSI: 00007fc7a36a2010 RDI: 0000000000000006
[  122.292966][ T8028] RBP: 0000000000000000 R08: 00007fc7a36a1f14 R09: 000000000000000c
[  122.292980][ T8028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  122.292994][ T8028] R13: 00007fc7a36a1f68 R14: 00007fc7a36a2010 R15: 0000000000000000
[  122.293025][ T8028]  </TASK>
[  122.349113][ T8033] netlink: 5 bytes leftover after parsing attributes in process `syz.1.603'.
[  122.621717][ T8045] sctp: [Deprecated]: syz.2.606 (pid 8045) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.621717][ T8045] Use struct sctp_sack_info instead
[  122.711238][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  122.825604][ T8055] veth1_macvtap: left promiscuous mode
[  122.838656][ T8055] macsec0: entered allmulticast mode
[  122.854722][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'.
[  122.908480][ T8060] veth1_macvtap: entered promiscuous mode
[  122.967072][ T8060] veth1_macvtap: entered allmulticast mode
[  123.002304][ T8060] macsec0: left allmulticast mode
[  123.022903][ T8060] veth1_macvtap: left allmulticast mode
[  123.343035][ T8079] FAULT_INJECTION: forcing a failure.
[  123.343035][ T8079] name failslab, interval 1, probability 0, space 0, times 0
[  123.386430][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.2.615 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  123.397189][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  123.407288][ T8079] Call Trace:
[  123.410609][ T8079]  <TASK>
[  123.413576][ T8079]  dump_stack_lvl+0x241/0x360
[  123.418304][ T8079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.423554][ T8079]  ? __pfx__printk+0x10/0x10
[  123.428198][ T8079]  ? ref_tracker_alloc+0x332/0x490
[  123.433355][ T8079]  should_fail_ex+0x3b0/0x4e0
[  123.438072][ T8079]  ? skb_clone+0x20c/0x390
[  123.442535][ T8079]  should_failslab+0xac/0x100
[  123.447393][ T8079]  ? skb_clone+0x20c/0x390
[  123.451847][ T8079]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  123.457274][ T8079]  skb_clone+0x20c/0x390
[  123.461577][ T8079]  __netlink_deliver_tap+0x3cc/0x7f0
[  123.466930][ T8079]  ? netlink_deliver_tap+0x2e/0x1b0
[  123.472179][ T8079]  netlink_deliver_tap+0x19d/0x1b0
[  123.477330][ T8079]  netlink_unicast+0x7c4/0x990
[  123.482151][ T8079]  ? __pfx_netlink_unicast+0x10/0x10
[  123.487457][ T8079]  ? __virt_addr_valid+0x183/0x530
[  123.492586][ T8079]  ? __check_object_size+0x48e/0x900
[  123.497892][ T8079]  netlink_sendmsg+0x8e4/0xcb0
[  123.502690][ T8079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.508013][ T8079]  ? aa_sock_msg_perm+0x91/0x160
[  123.512971][ T8079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.518271][ T8079]  __sock_sendmsg+0x221/0x270
[  123.522987][ T8079]  __sys_sendto+0x39b/0x4f0
[  123.527515][ T8079]  ? __pfx___sys_sendto+0x10/0x10
[  123.532579][ T8079]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  123.538581][ T8079]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  123.544954][ T8079]  ? exc_page_fault+0x590/0x8c0
[  123.549819][ T8079]  __x64_sys_sendto+0xde/0x100
[  123.554608][ T8079]  do_syscall_64+0xf3/0x230
[  123.559136][ T8079]  ? clear_bhb_loop+0x35/0x90
[  123.563835][ T8079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.569744][ T8079] RIP: 0033:0x7f689ad805ac
[  123.574172][ T8079] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  123.593794][ T8079] RSP: 002b:00007f689bb79ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  123.602227][ T8079] RAX: ffffffffffffffda RBX: 00007f689bb79fc0 RCX: 00007f689ad805ac
[  123.610313][ T8079] RDX: 0000000000000024 RSI: 00007f689bb7a010 RDI: 0000000000000006
[  123.618338][ T8079] RBP: 0000000000000000 R08: 00007f689bb79f14 R09: 000000000000000c
[  123.626319][ T8079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  123.634300][ T8079] R13: 00007f689bb79f68 R14: 00007f689bb7a010 R15: 0000000000000000
[  123.642293][ T8079]  </TASK>
[  123.670691][ T8085] batadv_slave_0: entered promiscuous mode
[  123.751202][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  123.810297][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  123.829966][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'.
[  123.840586][ T8091] netlink: 'syz.2.618': attribute type 5 has an invalid length.
[  124.097234][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  124.174948][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.182678][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.280980][ T8089] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  124.565870][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[  124.646716][ T8141] FAULT_INJECTION: forcing a failure.
[  124.646716][ T8141] name failslab, interval 1, probability 0, space 0, times 0
[  124.685415][ T8141] CPU: 0 UID: 0 PID: 8141 Comm: syz.2.628 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  124.696091][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  124.706193][ T8141] Call Trace:
[  124.709513][ T8141]  <TASK>
[  124.712480][ T8141]  dump_stack_lvl+0x241/0x360
[  124.717227][ T8141]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.722477][ T8141]  ? __pfx__printk+0x10/0x10
[  124.727118][ T8141]  ? __kmalloc_noprof+0xb0/0x400
[  124.732107][ T8141]  ? __pfx___might_resched+0x10/0x10
[  124.737449][ T8141]  ? __mutex_lock+0x2ef/0xd70
[  124.742175][ T8141]  should_fail_ex+0x3b0/0x4e0
[  124.746898][ T8141]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  124.753194][ T8141]  should_failslab+0xac/0x100
[  124.757922][ T8141]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  124.764383][ T8141]  __kmalloc_noprof+0xd8/0x400
[  124.769212][ T8141]  ? __asan_memcpy+0x40/0x70
[  124.773933][ T8141]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  124.780056][ T8141]  genl_rcv_msg+0x802/0xec0
[  124.784612][ T8141]  ? __pfx_genl_rcv_msg+0x10/0x10
[  124.789711][ T8141]  ? __pfx_lock_acquire+0x10/0x10
[  124.791366][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  124.794764][ T8141]  ? __pfx_ctrl_getfamily+0x10/0x10
[  124.806888][ T8141]  ? __pfx___might_resched+0x10/0x10
[  124.812234][ T8141]  netlink_rcv_skb+0x1e3/0x430
[  124.817055][ T8141]  ? __pfx_genl_rcv_msg+0x10/0x10
[  124.822124][ T8141]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.827477][ T8141]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  124.833009][ T8141]  genl_rcv+0x28/0x40
[  124.837034][ T8141]  netlink_unicast+0x7f6/0x990
[  124.841858][ T8141]  ? __pfx_netlink_unicast+0x10/0x10
[  124.847183][ T8141]  ? __virt_addr_valid+0x183/0x530
[  124.852334][ T8141]  ? __check_object_size+0x48e/0x900
[  124.857668][ T8141]  netlink_sendmsg+0x8e4/0xcb0
[  124.862501][ T8141]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.867847][ T8141]  ? aa_sock_msg_perm+0x91/0x160
[  124.872842][ T8141]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.878177][ T8141]  __sock_sendmsg+0x221/0x270
[  124.882909][ T8141]  __sys_sendto+0x39b/0x4f0
[  124.887493][ T8141]  ? __pfx___sys_sendto+0x10/0x10
[  124.892607][ T8141]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  124.898763][ T8141]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  124.905165][ T8141]  ? exc_page_fault+0x590/0x8c0
[  124.910070][ T8141]  __x64_sys_sendto+0xde/0x100
[  124.914891][ T8141]  do_syscall_64+0xf3/0x230
[  124.919442][ T8141]  ? clear_bhb_loop+0x35/0x90
[  124.924177][ T8141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.930155][ T8141] RIP: 0033:0x7f689ad805ac
[  124.934612][ T8141] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  124.954280][ T8141] RSP: 002b:00007f689bb79ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  124.962751][ T8141] RAX: ffffffffffffffda RBX: 00007f689bb79fc0 RCX: 00007f689ad805ac
[  124.970774][ T8141] RDX: 0000000000000024 RSI: 00007f689bb7a010 RDI: 0000000000000006
[  124.978791][ T8141] RBP: 0000000000000000 R08: 00007f689bb79f14 R09: 000000000000000c
[  124.986807][ T8141] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  124.994822][ T8141] R13: 00007f689bb79f68 R14: 00007f689bb7a010 R15: 0000000000000000
[  125.002856][ T8141]  </TASK>
[  125.022301][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'.
[  125.278758][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'.
[  125.291114][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.632'.
[  125.483586][   T29] audit: type=1107 audit(1731895814.436:2): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  125.717424][ T8187] FAULT_INJECTION: forcing a failure.
[  125.717424][ T8187] name failslab, interval 1, probability 0, space 0, times 0
[  125.730505][ T8186] sctp: [Deprecated]: syz.4.642 (pid 8186) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.730505][ T8186] Use struct sctp_sack_info instead
[  125.811462][ T8187] CPU: 0 UID: 0 PID: 8187 Comm: syz.1.641 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  125.849079][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  125.859170][ T8187] Call Trace:
[  125.862469][ T8187]  <TASK>
[  125.865411][ T8187]  dump_stack_lvl+0x241/0x360
[  125.870129][ T8187]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.871460][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  125.875332][ T8187]  ? __pfx__printk+0x10/0x10
[  125.886811][ T8187]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  125.892815][ T8187]  ? __pfx___might_resched+0x10/0x10
[  125.898127][ T8187]  should_fail_ex+0x3b0/0x4e0
[  125.902825][ T8187]  should_failslab+0xac/0x100
[  125.907516][ T8187]  ? __alloc_skb+0x1c3/0x440
[  125.912125][ T8187]  kmem_cache_alloc_node_noprof+0x71/0x320
[  125.917946][ T8187]  ? idr_get_next+0x3c6/0x4a0
[  125.922641][ T8187]  __alloc_skb+0x1c3/0x440
[  125.927081][ T8187]  ? __pfx___alloc_skb+0x10/0x10
[  125.932049][ T8187]  ctrl_getfamily+0x48c/0x6b0
[  125.936741][ T8187]  ? __pfx_ctrl_getfamily+0x10/0x10
[  125.941950][ T8187]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  125.948296][ T8187]  genl_rcv_msg+0xb14/0xec0
[  125.952817][ T8187]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.957960][ T8187]  ? __pfx_lock_acquire+0x10/0x10
[  125.963011][ T8187]  ? __pfx_ctrl_getfamily+0x10/0x10
[  125.968222][ T8187]  ? __pfx___might_resched+0x10/0x10
[  125.973532][ T8187]  netlink_rcv_skb+0x1e3/0x430
[  125.978313][ T8187]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.983348][ T8187]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.988687][ T8187]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  125.994178][ T8187]  genl_rcv+0x28/0x40
[  125.998196][ T8187]  netlink_unicast+0x7f6/0x990
[  126.002984][ T8187]  ? __pfx_netlink_unicast+0x10/0x10
[  126.008310][ T8187]  ? __virt_addr_valid+0x183/0x530
[  126.013432][ T8187]  ? __check_object_size+0x48e/0x900
[  126.018734][ T8187]  netlink_sendmsg+0x8e4/0xcb0
[  126.023570][ T8187]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.028875][ T8187]  ? aa_sock_msg_perm+0x91/0x160
[  126.033832][ T8187]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.039148][ T8187]  __sock_sendmsg+0x221/0x270
[  126.043866][ T8187]  __sys_sendto+0x39b/0x4f0
[  126.048420][ T8187]  ? __pfx___sys_sendto+0x10/0x10
[  126.053512][ T8187]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  126.059538][ T8187]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  126.065892][ T8187]  ? exc_page_fault+0x590/0x8c0
[  126.070934][ T8187]  __x64_sys_sendto+0xde/0x100
[  126.075819][ T8187]  do_syscall_64+0xf3/0x230
[  126.080457][ T8187]  ? clear_bhb_loop+0x35/0x90
[  126.085242][ T8187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.091150][ T8187] RIP: 0033:0x7f1658d805ac
[  126.095578][ T8187] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  126.115200][ T8187] RSP: 002b:00007f1659aa0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  126.123635][ T8187] RAX: ffffffffffffffda RBX: 00007f1659aa0fc0 RCX: 00007f1658d805ac
[  126.131615][ T8187] RDX: 0000000000000024 RSI: 00007f1659aa1010 RDI: 0000000000000006
[  126.139596][ T8187] RBP: 0000000000000000 R08: 00007f1659aa0f14 R09: 000000000000000c
[  126.147575][ T8187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  126.155551][ T8187] R13: 00007f1659aa0f68 R14: 00007f1659aa1010 R15: 0000000000000000
[  126.163545][ T8187]  </TASK>
[  126.187095][   T54] Bluetooth: hci4: command tx timeout
[  126.707670][ T8216] netlink: 'syz.1.647': attribute type 4 has an invalid length.
[  126.951201][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  127.041152][ T8229] tipc: Started in network mode
[  127.051617][ T8229] tipc: Node identity 2ef3ffffffffff39000000000000005f, cluster identity 4711
[  127.060568][ T8229] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  127.108405][ T8233] bridge0: entered promiscuous mode
[  127.125731][ T8233] macvlan3: entered allmulticast mode
[  127.146239][ T8233] bridge0: entered allmulticast mode
[  127.167506][ T8233] bridge0: left promiscuous mode
[  127.428697][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.433275][ T8256] __nla_validate_parse: 1 callbacks suppressed
[  127.433296][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'.
[  127.464111][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.473747][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.484732][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.494659][ T8257] netlink: zone id is out of range
[  127.500567][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  127.508024][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.528304][ T8257] netlink: set zone limit has 4 unknown bytes
[  127.836923][ T8254] chnl_net:caif_netlink_parms(): no params data found
[  128.001160][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  128.040067][ T8292] batadv0: entered promiscuous mode
[  128.047279][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.062297][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.070478][ T8254] bridge_slave_0: entered allmulticast mode
[  128.086399][ T8254] bridge_slave_0: entered promiscuous mode
[  128.097619][ T8290] batadv0: left promiscuous mode
[  128.111781][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.121778][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.129198][ T8254] bridge_slave_1: entered allmulticast mode
[  128.136826][ T8254] bridge_slave_1: entered promiscuous mode
[  128.146812][ T8297] tap0: tun_chr_ioctl cmd 1074025673
[  128.259450][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.303266][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.405699][ T8254] team0: Port device team_slave_0 added
[  128.424070][ T8254] team0: Port device team_slave_1 added
[  128.453261][ T8310] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  128.487465][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.506681][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.558951][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.615597][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.648010][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.685796][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.774722][ T8254] hsr_slave_0: entered promiscuous mode
[  128.816022][ T8254] hsr_slave_1: entered promiscuous mode
[  128.839620][ T8254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.855743][ T8254] Cannot create hsr debugfs directory
[  128.917311][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'.
[  128.952409][ T8349] netlink: 'syz.0.682': attribute type 4 has an invalid length.
[  129.004010][ T8351] netlink: 'syz.0.682': attribute type 4 has an invalid length.
[  129.031298][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  129.489222][ T8254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.609782][ T5854] Bluetooth: hci1: command tx timeout
[  129.638301][ T8388] netlink: 'syz.0.696': attribute type 4 has an invalid length.
[  129.682147][ T8254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.831349][ T8254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.890356][ T8408] geneve2: entered promiscuous mode
[  129.907724][ T8408] geneve2: entered allmulticast mode
[  130.009984][ T8254] bond0: (slave netdevsim0): Releasing backup interface
[  130.023512][ T8254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.071201][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  130.158953][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.704'.
[  130.316983][ T8254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  130.350375][ T8254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  130.384535][ T8254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  130.413498][ T8254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  130.433602][ T8431] netlink: 'syz.2.706': attribute type 30 has an invalid length.
[  130.563721][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.616672][ T8254] 8021q: adding VLAN 0 to HW filter on device team0
[  130.644894][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.652165][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.701087][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.708268][ T6832] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.796980][ T8254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.111134][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  131.180033][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'.
[  131.182075][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.369598][ T8254] veth0_vlan: entered promiscuous mode
[  131.393003][ T8254] veth1_vlan: entered promiscuous mode
[  131.417526][ T8468] netlink: 'syz.2.716': attribute type 3 has an invalid length.
[  131.452126][ T8470] netlink: 'syz.0.717': attribute type 17 has an invalid length.
[  131.468244][ T8470] netlink: 152 bytes leftover after parsing attributes in process `syz.0.717'.
[  131.489450][ T8254] veth0_macvtap: entered promiscuous mode
[  131.517667][ T8470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.564343][ T8254] veth1_macvtap: entered promiscuous mode
[  131.635063][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.671246][ T5854] Bluetooth: hci1: command tx timeout
[  131.681233][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.741773][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.772168][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.782532][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.795420][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.807917][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.840007][ T8486] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  131.856330][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.891201][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.921132][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.951069][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.968258][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.978974][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.994958][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.075822][ T8254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.121273][ T8254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.130045][ T8254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.151198][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  132.171189][ T8254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.325281][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.343305][ T8504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.727'.
[  132.348231][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.433656][ T8503] netlink: 67 bytes leftover after parsing attributes in process `syz.0.725'.
[  132.489116][ T6832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.500402][ T6832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.517365][ T8510] netlink: 56 bytes leftover after parsing attributes in process `syz.1.728'.
[  132.548625][ T8510] netlink: 56 bytes leftover after parsing attributes in process `syz.1.728'.
[  133.119105][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.125744][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.191183][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  133.355121][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  133.492583][ T8568] netlink: 'syz.0.747': attribute type 13 has an invalid length.
[  133.507893][ T8568] veth0_macvtap: left promiscuous mode
[  133.518122][ T8568] macvtap0: entered allmulticast mode
[  133.528055][ T8568] macvtap0: refused to change device tx_queue_len
[  133.611402][ T8573] vxcan1: tx address claim with different name
[  133.662248][ T8579] netlink: 'syz.1.749': attribute type 10 has an invalid length.
[  133.918789][ T8601] gretap1: entered promiscuous mode
[  134.042922][ T6832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.241107][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  134.548838][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[  134.667600][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.677303][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.685547][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.740429][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.749319][ T6832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.761491][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  134.774787][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.974747][ T6832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.136952][ T6832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.188075][ T8646] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  135.212560][ T8646] team0: Device ipvlan2 is already an upper device of the team interface
[  135.271111][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  135.346947][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'.
[  135.432236][ T8663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'.
[  135.479493][ T8627] chnl_net:caif_netlink_parms(): no params data found
[  135.665741][ T6832] bridge_slave_1: left allmulticast mode
[  135.678433][ T6832] bridge_slave_1: left promiscuous mode
[  135.685198][ T8671] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  135.692098][ T8671] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  135.701852][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.740463][ T6832] bridge_slave_0: left allmulticast mode
[  135.752882][ T6832] bridge_slave_0: left promiscuous mode
[  135.762612][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.155356][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'.
[  136.314830][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  136.457352][ T6832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.483862][ T6832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.500749][ T6832] bond0 (unregistering): Released all slaves
[  136.612883][ T8684] bond0 (unregistering): Released all slaves
[  136.707424][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.740723][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.800175][ T8627] bridge_slave_0: entered allmulticast mode
[  136.813951][ T8627] bridge_slave_0: entered promiscuous mode
[  136.852031][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.859692][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.872027][   T54] Bluetooth: hci1: command tx timeout
[  136.889879][ T8627] bridge_slave_1: entered allmulticast mode
[  136.902526][ T8627] bridge_slave_1: entered promiscuous mode
[  137.036189][ T8696] netlink: 'syz.1.777': attribute type 4 has an invalid length.
[  137.259513][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.302065][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.357069][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  137.453533][ T8705] netlink: 'syz.2.780': attribute type 1 has an invalid length.
[  137.484185][ T8627] team0: Port device team_slave_0 added
[  137.503178][ T8627] team0: Port device team_slave_1 added
[  137.517233][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'.
[  137.600502][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.663760][ T8709] 8021q: adding VLAN 0 to HW filter on device batadv1
[  137.695123][ T8709] bond1: (slave batadv1): making interface the new active one
[  137.726250][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  137.727142][ T8709] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  137.782629][ T6832] hsr_slave_0: left promiscuous mode
[  137.796170][ T6832] hsr_slave_1: left promiscuous mode
[  137.813290][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.824442][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.838178][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.850348][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.900856][ T6832] veth1_macvtap: left promiscuous mode
[  137.907678][ T6832] veth0_macvtap: left promiscuous mode
[  137.913976][ T6832] veth1_vlan: left promiscuous mode
[  137.919853][ T6832] veth0_vlan: left promiscuous mode
[  138.391078][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  138.674332][ T6832] team0 (unregistering): Port device team_slave_1 removed
[  138.764271][ T6832] team0 (unregistering): Port device team_slave_0 removed
[  138.961137][   T54] Bluetooth: hci1: command tx timeout
[  139.431088][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  139.449815][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.466710][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.493125][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.522868][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.530070][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.557323][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.585235][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'.
[  139.595330][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'.
[  139.611357][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'.
[  139.810806][ T8732] FAULT_INJECTION: forcing a failure.
[  139.810806][ T8732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.844029][ T8627] hsr_slave_0: entered promiscuous mode
[  139.847947][ T8732] CPU: 1 UID: 0 PID: 8732 Comm: syz.0.785 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  139.860232][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  139.870319][ T8732] Call Trace:
[  139.873619][ T8732]  <TASK>
[  139.876573][ T8732]  dump_stack_lvl+0x241/0x360
[  139.881278][ T8732]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.886504][ T8732]  ? __pfx__printk+0x10/0x10
[  139.891114][ T8732]  ? __pfx_lock_release+0x10/0x10
[  139.896184][ T8732]  should_fail_ex+0x3b0/0x4e0
[  139.900886][ T8732]  _copy_from_user+0x2f/0xc0
[  139.905504][ T8732]  sk_setsockopt+0x2d4/0x33b0
[  139.910214][ T8732]  ? __pfx_sk_setsockopt+0x10/0x10
[  139.915353][ T8732]  ? aa_sk_perm+0x96d/0xab0
[  139.919881][ T8732]  ? __pfx_aa_sk_perm+0x10/0x10
[  139.924747][ T8732]  ? __pfx_lock_acquire+0x10/0x10
[  139.929795][ T8732]  ? __fget_files+0x29/0x470
[  139.934404][ T8732]  ? aa_sock_opt_perm+0x79/0x120
[  139.939366][ T8732]  do_sock_setsockopt+0x2fb/0x720
[  139.944438][ T8732]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  139.950024][ T8732]  ? __fget_files+0x29/0x470
[  139.954645][ T8732]  ? __fget_files+0x3f3/0x470
[  139.959340][ T8732]  ? __fget_files+0x29/0x470
[  139.963986][ T8732]  __sys_setsockopt+0x1a2/0x250
[  139.968866][ T8732]  __x64_sys_setsockopt+0xb5/0xd0
[  139.973911][ T8732]  do_syscall_64+0xf3/0x230
[  139.978430][ T8732]  ? clear_bhb_loop+0x35/0x90
[  139.983129][ T8732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.989037][ T8732] RIP: 0033:0x7f2dbb17e719
[  139.993463][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.013084][ T8732] RSP: 002b:00007f2dbbf19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  140.021521][ T8732] RAX: ffffffffffffffda RBX: 00007f2dbb335f80 RCX: 00007f2dbb17e719
[  140.029530][ T8732] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003
[  140.037526][ T8732] RBP: 00007f2dbbf19090 R08: 0000000000000010 R09: 0000000000000000
[  140.045513][ T8732] R10: 00000000200018c0 R11: 0000000000000246 R12: 0000000000000001
[  140.053498][ T8732] R13: 0000000000000000 R14: 00007f2dbb335f80 R15: 00007ffe03a4c848
[  140.061505][ T8732]  </TASK>
[  140.139881][ T8627] hsr_slave_1: entered promiscuous mode
[  140.160766][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.168671][ T8627] Cannot create hsr debugfs directory
[  140.471117][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  141.031166][   T54] Bluetooth: hci1: command tx timeout
[  141.114992][ T8627] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  141.122671][ T8766] netlink: 432 bytes leftover after parsing attributes in process `syz.1.794'.
[  141.135326][ T8627] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  141.154253][ T8627] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  141.200667][ T8627] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  141.217683][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'.
[  141.393034][ T8776] FAULT_INJECTION: forcing a failure.
[  141.393034][ T8776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.437461][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.444538][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.1.798 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  141.455196][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  141.465289][ T8776] Call Trace:
[  141.468601][ T8776]  <TASK>
[  141.471567][ T8776]  dump_stack_lvl+0x241/0x360
[  141.476298][ T8776]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.481552][ T8776]  ? __pfx__printk+0x10/0x10
[  141.486190][ T8776]  ? __pfx_lock_release+0x10/0x10
[  141.491363][ T8776]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  141.497416][ T8776]  should_fail_ex+0x3b0/0x4e0
[  141.502181][ T8776]  _copy_from_user+0x2f/0xc0
[  141.506821][ T8776]  copy_bpf_fprog_from_user+0x167/0x450
[  141.512418][ T8776]  ? __pfx_copy_bpf_fprog_from_user+0x10/0x10
[  141.518539][ T8776]  sk_setsockopt+0x14d4/0x33b0
[  141.523355][ T8776]  ? __pfx_sk_setsockopt+0x10/0x10
[  141.528519][ T8776]  ? aa_sk_perm+0x96d/0xab0
[  141.533068][ T8776]  ? __pfx_aa_sk_perm+0x10/0x10
[  141.537967][ T8776]  ? __pfx_lock_acquire+0x10/0x10
[  141.543053][ T8776]  ? __fget_files+0x29/0x470
[  141.547676][ T8776]  ? aa_sock_opt_perm+0x79/0x120
[  141.551144][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  141.552636][ T8776]  do_sock_setsockopt+0x2fb/0x720
[  141.564576][ T8776]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  141.570179][ T8776]  ? __fget_files+0x29/0x470
[  141.574817][ T8776]  ? __fget_files+0x3f3/0x470
[  141.579509][ T8776]  ? __fget_files+0x29/0x470
[  141.584119][ T8776]  __sys_setsockopt+0x1a2/0x250
[  141.589006][ T8776]  __x64_sys_setsockopt+0xb5/0xd0
[  141.594053][ T8776]  do_syscall_64+0xf3/0x230
[  141.598572][ T8776]  ? clear_bhb_loop+0x35/0x90
[  141.603269][ T8776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.609177][ T8776] RIP: 0033:0x7f1658d7e719
[  141.613603][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.633219][ T8776] RSP: 002b:00007f1659aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  141.641734][ T8776] RAX: ffffffffffffffda RBX: 00007f1658f35f80 RCX: 00007f1658d7e719
[  141.649713][ T8776] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003
[  141.657690][ T8776] RBP: 00007f1659aa2090 R08: 0000000000000010 R09: 0000000000000000
[  141.665668][ T8776] R10: 00000000200018c0 R11: 0000000000000246 R12: 0000000000000001
[  141.673646][ T8776] R13: 0000000000000000 R14: 00007f1658f35f80 R15: 00007ffc81e121f8
[  141.681642][ T8776]  </TASK>
[  141.717458][ T8779] bond0: entered promiscuous mode
[  141.729603][ T8779] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  141.759955][ T8779] bond0: left promiscuous mode
[  141.922292][ T8782] Bluetooth: MGMT ver 1.23
[  141.937941][ T8627] 8021q: adding VLAN 0 to HW filter on device team0
[  141.959657][ T8783] batadv0: entered promiscuous mode
[  141.965438][ T8783] macvtap1: entered promiscuous mode
[  141.972523][ T8783] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  141.990869][ T8783] batadv0: left promiscuous mode
[  142.208866][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'.
[  142.310515][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'.
[  142.323735][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.330878][ T7235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.406459][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.413630][ T7235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.479529][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'.
[  142.554004][ T8815] FAULT_INJECTION: forcing a failure.
[  142.554004][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.558313][ T8627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.569374][ T8815] CPU: 0 UID: 0 PID: 8815 Comm: syz.2.810 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[  142.579001][ T8627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.588472][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  142.588495][ T8815] Call Trace:
[  142.588506][ T8815]  <TASK>
[  142.588518][ T8815]  dump_stack_lvl+0x241/0x360
[  142.588557][ T8815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.625185][ T8815]  ? __pfx__printk+0x10/0x10
[  142.629800][ T8815]  ? snprintf+0xda/0x120
[  142.634062][ T8815]  should_fail_ex+0x3b0/0x4e0
[  142.638756][ T8815]  _copy_to_user+0x31/0xb0
[  142.643185][ T8815]  simple_read_from_buffer+0xca/0x150
[  142.648580][ T8815]  proc_fail_nth_read+0x1e9/0x250
[  142.653615][ T8815]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  142.659183][ T8815]  ? rw_verify_area+0x55e/0x6f0
[  142.664078][ T8815]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  142.669645][ T8815]  vfs_read+0x1fc/0xb70
[  142.671153][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  142.673807][ T8815]  ? fdget_pos+0x24e/0x320
[  142.685086][ T8815]  ? __pfx_vfs_read+0x10/0x10
[  142.689789][ T8815]  ? __fget_files+0x3f3/0x470
[  142.694499][ T8815]  ? fdget_pos+0x24e/0x320
[  142.698932][ T8815]  ksys_read+0x183/0x2b0
[  142.703184][ T8815]  ? __pfx_ksys_read+0x10/0x10
[  142.707954][ T8815]  ? do_syscall_64+0x100/0x230
[  142.712737][ T8815]  ? do_syscall_64+0xb6/0x230
[  142.717428][ T8815]  do_syscall_64+0xf3/0x230
[  142.721950][ T8815]  ? clear_bhb_loop+0x35/0x90
[  142.726644][ T8815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.732547][ T8815] RIP: 0033:0x7f689ad7d15c
[  142.736974][ T8815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  142.756619][ T8815] RSP: 002b:00007f689bb7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  142.765044][ T8815] RAX: ffffffffffffffda RBX: 00007f689af35f80 RCX: 00007f689ad7d15c
[  142.773026][ T8815] RDX: 000000000000000f RSI: 00007f689bb7b0a0 RDI: 0000000000000004
[  142.781008][ T8815] RBP: 00007f689bb7b090 R08: 0000000000000000 R09: 0000000000000000
[  142.788992][ T8815] R10: 00000000200018c0 R11: 0000000000000246 R12: 0000000000000001
[  142.796971][ T8815] R13: 0000000000000000 R14: 00007f689af35f80 R15: 00007fff4dcca038
[  142.805053][ T8815]  </TASK>
[  142.837849][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'.
[  142.846962][ T8807] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  143.111611][   T54] Bluetooth: hci1: command tx timeout
[  143.126578][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.238733][ T8627] veth0_vlan: entered promiscuous mode
[  143.294514][ T8627] veth1_vlan: entered promiscuous mode
[  143.392860][ T8627] veth0_macvtap: entered promiscuous mode
[  143.414459][ T8846] netlink: 'syz.4.818': attribute type 12 has an invalid length.
[  143.451910][ T8846] netlink: 120 bytes leftover after parsing attributes in process `syz.4.818'.
[  143.480139][ T8627] veth1_macvtap: entered promiscuous mode
[  143.494807][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'.
[  143.531866][ T8850] netlink: 'syz.1.819': attribute type 14 has an invalid length.
[  143.552652][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.572499][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.595192][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.617252][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.630133][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.647624][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.665257][ T8851] netlink: 134612 bytes leftover after parsing attributes in process `syz.1.819'.
[  143.675598][ T8851] openvswitch: netlink: ufid size 107 bytes exceeds the range (1, 16)
[  143.685754][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.700262][ T8851] openvswitch: netlink: Message has 76 unknown bytes.
[  143.745493][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.756162][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  143.776746][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.795723][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.819857][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.832251][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.860968][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.929586][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.967916][ T8627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.997224][ T8627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.045288][ T8627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.065117][ T8627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.164559][ T8862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'.
[  144.384675][ T7232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.414007][ T7232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.443323][ T8864] syzkaller0: entered allmulticast mode
[  144.524376][ T8870] syzkaller0 (unregistering): left allmulticast mode
[  144.542096][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'.
[  144.686439][ T7232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.728484][ T7232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.791093][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  145.168412][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  145.361462][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.606882][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'.
[  145.689411][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.698991][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.711437][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.722406][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.730391][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  145.739478][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.753613][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.831085][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  145.889137][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.211608][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.504510][ T8912] chnl_net:caif_netlink_parms(): no params data found
[  146.543236][ T8934] netlink: 156 bytes leftover after parsing attributes in process `syz.1.843'.
[  146.763107][ T8931] 
[  146.765491][ T8931] ================================================
[  146.772011][ T8931] WARNING: lock held when returning to user space!
[  146.778534][ T8931] 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 Not tainted
[  146.785754][ T8931] ------------------------------------------------
[  146.792276][ T8931] syz.2.842/8931 is leaving the kernel with locks still held!
[  146.799756][ T8931] 1 lock held by syz.2.842/8931:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.804721][ T8931]  #0: ffffffff8f46c2a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250
[  146.844118][   T35] bridge_slave_1: left allmulticast mode
[  146.852586][   T35] bridge_slave_1: left promiscuous mode
[  146.871067][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  146.879016][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.971635][   T35] bridge_slave_0: left allmulticast mode
[  146.977368][   T35] bridge_slave_0: left promiscuous mode
[  147.006692][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.167678][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.183111][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.197394][   T35] bond0 (unregistering): Released all slaves
[  147.208227][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.221136][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.228373][ T8912] bridge_slave_0: entered allmulticast mode
[  147.235975][ T8912] bridge_slave_0: entered promiscuous mode
[  147.767019][   T35] hsr_slave_0: left promiscuous mode
[  147.773922][   T35] hsr_slave_1: left promiscuous mode
[  147.779725][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.787272][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.795238][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.803274][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.814199][   T35] veth1_macvtap: left promiscuous mode
[  147.819736][   T35] veth0_macvtap: left promiscuous mode
[  147.825557][   T35] veth1_vlan: left promiscuous mode
[  147.830830][   T35] veth0_vlan: left promiscuous mode
[  147.911073][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  147.987085][   T35] team0 (unregistering): Port device team_slave_1 removed
[  148.009605][   T35] team0 (unregistering): Port device team_slave_0 removed
[  148.403099][   T35] bridge_slave_0: left allmulticast mode
[  148.408790][   T35] bridge_slave_0: left promiscuous mode
[  148.414562][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.479011][   T35] bond0 (unregistering): Released all slaves
[  148.951294][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.991124][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  151.031205][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  152.071207][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  153.111114][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  154.151113][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  155.191094][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  156.231109][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available