last executing test programs:

27.480865781s ago: executing program 2 (id=1481):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24822}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async)
sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) (async, rerun: 32)
write$cgroup_type(r4, &(0x7f0000000000), 0x9) (rerun: 32)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="ba", 0x1}], 0x1) (async)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\f\x00\x00\x00'], 0x1d) (async)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="014afc000000000000e51d00"], 0x28}}, 0x0)

27.152646503s ago: executing program 2 (id=1483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001940)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r4=>r0})
recvmsg$unix(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)=""/114, 0x72}], 0x1, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
write(r7, &(0x7f0000000000)="89", 0x24)
socket(0x15, 0x5, 0x0)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r9, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r10, 0x2, 0x2, 0x0, @void, @value}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000300)={'geneve0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x4, 0xfffffffffffffffb}})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10)
socketpair(0x2, 0x3, 0x2, &(0x7f0000000380))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080002002101000008000300000000008f371b6f02a4b6a099e00fdc8a1a7a07db7d9e3d7d1aedb696069efa0000b7f3c2961f2fa7f3867b6f16ffabf25e4ddac7e67d11317af30572e64d7000"/120], 0x44}}, 0x0)

26.659558462s ago: executing program 2 (id=1487):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x16, 0x3, 0x5}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x16, 0x3, 0x5})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x4, 0x3, 0xb, 0x800, 0x21, @loopback, @loopback, 0x8000, 0xff1b, 0xfffffffd, 0x7470}})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@struct={0x7, 0x9, 0x0, 0x4, 0x0, 0x2, [{0xf, 0x5, 0xc46}, {0x10, 0x2, 0x4}, {0x10, 0x1, 0x9}, {0x1, 0x5, 0x101}, {0x5, 0x0, 0x8}, {0x0, 0x5, 0x50}, {0xc, 0x4, 0x7}, {0xb, 0x2}, {0x3, 0x0, 0x9}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x4}, @restrict={0xf}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x78, 0x0, 0x4d, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x30, 0x0, 0x5f]}}, &(0x7f0000000240)=""/78, 0xda, 0x4e, 0x0, 0xf4c, 0x10000, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x200, '\x00', r2, r3, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair(0x0, 0x1, 0x7, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$can_j1939(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x1d, r2, 0x3, {0x1, 0x1, 0x3}, 0xff}, 0x18, &(0x7f0000000440)={&(0x7f0000000400)="6b80f61a2613fad8bc5134f05d4a243d6428fa48", 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40081) (async)
sendmsg$can_j1939(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x1d, r2, 0x3, {0x1, 0x1, 0x3}, 0xff}, 0x18, &(0x7f0000000440)={&(0x7f0000000400)="6b80f61a2613fad8bc5134f05d4a243d6428fa48", 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40081)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f00000004c0)) (async)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f00000004c0))
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
socket$unix(0x1, 0x5, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a4, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "df56cf3ea0cb1478376cd323f7bee8273a47895bf234587d6945a4c58c53786522c4a1bbbc63073f40fb9543fcbbca7ef5499718d9"}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "9b9be8d1"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x94{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*-{{{+)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3da2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%[,-(\x13\xc1\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\-(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[\\\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xe4b2e35eace582b3}, 0x488c0)
shutdown(r8, 0x0) (async)
shutdown(r8, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r9, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd, 0x51}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="9bce"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xa5350174aa0c8fe7) (async)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r9, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd, 0x51}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="9bce"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xa5350174aa0c8fe7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1, <r11=>0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x29, &(0x7f0000000a40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffe0, 0xffffffffffffffe8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x880}}, @generic={0x81, 0x7, 0x2, 0x1, 0x8}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000bc0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x2, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000001c00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001c40)={0x1, 0x0, 0xd, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[r1], &(0x7f0000001cc0), 0x10, 0x3ff00000, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x29, &(0x7f0000000a40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffe0, 0xffffffffffffffe8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x880}}, @generic={0x81, 0x7, 0x2, 0x1, 0x8}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000bc0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x2, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000001c00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001c40)={0x1, 0x0, 0xd, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[r1], &(0x7f0000001cc0), 0x10, 0x3ff00000, @void, @value}, 0x94)
r12 = accept4(r7, &(0x7f0000001dc0)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000001e40)=0x80, 0x800)
recvfrom(r4, &(0x7f0000001e80)=""/27, 0x1b, 0x12000, &(0x7f0000001ec0)=@sco, 0x80)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001f40), &(0x7f0000001f80)=0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000001fc0)={0x7, 'veth0_to_batadv\x00', {0x10001}, 0xc968})
r13 = accept4$phonet_pipe(r12, 0x0, &(0x7f0000002000), 0x80000)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r13, 0x8008f511, &(0x7f0000002040))
ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000002080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
socket(0x25, 0x1, 0x8)
write(r8, &(0x7f00000020c0)="4e71928d6429957c28c2c00d1a0fc52904b57cad78bfab8b7d6aefdc19bb1185f33e66d84ca43f5fed9cf80f2c262d831b5a4b8342ce9bcbcd7a62efffb4325e265a41398d8fbd11bbca121825c2645cec9a14010322d86049d5dbc5715a3dc494b8f911f02bebcace1a9efa3af636b1f99d101d7ea286da14671486ef822c25f5a04127911ac4d4e4acea0d105547887212a2515ee02799d1fe22483179ef5f29d1da4f707f0be0d669faeadc1f745e4b97417cc144cf710b1e0c115e36e2", 0xbf)

26.559737368s ago: executing program 2 (id=1494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18904b77860ba7c2f1000000030000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

15.299504841s ago: executing program 2 (id=1494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18904b77860ba7c2f1000000030000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

8.601526021s ago: executing program 2 (id=1494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18904b77860ba7c2f1000000030000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2.644484325s ago: executing program 1 (id=1695):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r4, &(0x7f0000001880)={@val={0x0, 0xc}, @val={0x1, 0x4, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "4966cd", 0x17, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x1}, {"50f6d8"}}}}}}, 0x4d)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x114}, {&(0x7f00000008c0)=ANY=[@ANYBLOB="f40000001f0000012bbd7000fcdbdf2554d13a31411dbf89c2f5b5d45968ba8e50ad98c543a25352f90bcdaae836324c673b903924000e7d3c17f25bda89d12f5cde0ab3b38bd599c70e914f9c53d6e00b5f52ba72bccaeb1227f4599bda4fd82a7ae453bd8628965c8521703338a20c470f47b943747cae60b970a6fe9a97e662c7967f0096800a5f2c947cd361adc0795c2df1201bb8aa2f8f517a1a0f5c8f8928ffdfe4c29d09bf18df8df674c1434b7d0455f4506e6bcb56c6875bc57f8f533dea12efa06eb3eca4323e0d66128bfa05314d9e255bd9722295715f02e409aa6c7d65b7d94fde7c2aa893ee74301bfaedc72ea5f1a511024db8221a8c12bd280f98392f277184750400000085785632008607ce6d687c0d944e8176fa71dfbc2474f04a37c452daf908eb052228b4352f03c3c40cc9da72a293fc79ce3057b79ba9d8ec129b1d97b8f76fa8cb44cf1c4963aede044fa2f638cff7b6878a5da320bef2dd54a610a288df1e0d12232fc1a0f8a5ebae9445ec4ec72b0e0befffab"], 0xf4}], 0x2, 0x0, 0x0, 0x20040840}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000fffe160003006873683a6e65742c706f72742c6e657400000005000400000000000900020073797a30000000000c000780080012409efffffd050005000a0000000500010006000000"], 0x5c}}, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r9 = socket(0x15, 0x5, 0x0)
r10 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd2c, 0x25dfdbfb, {0x80, 0x10, 0x14, 0xb7, 0xfd, 0x1, 0xff, 0x6, 0x2100}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002d00)=ANY=[@ANYBLOB="a0030000330004002cbd7000fedbdf25a3000f8008000800", @ANYRES32=0x0, @ANYBLOB="08006300020000000400ee80e0b2dc5bfb3d715f4935413d5eb974a9432a05194e77455bd9dbf2d42792848c568bb4515f263c523e6ab12542ff4106cb4033bc64583764366e93a7b97762f7e1bd517067962ce6b7e2fe6d5e1f1181974b20ed36bd01520de6c0097261573212b5ad215d7d6573e70ef732656f480400d6800800f900", @ANYRES32=0x0, @ANYBLOB="04006b800400e080040055800400ef80008db1478e94a4d648ef18a978e8e1815f8ad6b08e8aa67ec3fef3c4049f07c4a941442078508b1a27cb3757784b80ef3875195c262526b4ffd47b71d7d611ed582610d653723de9186325d2d8694aac2ac086165c910d3de60bf0a4ec1cab9011ea17bafad34d0173038ae1b743a93a99e0d388e81e7ae6ca3746d22377d60b08001b00", @ANYRES32=0x0, @ANYBLOB="bb00318077e2206116068683f5aa34f619df736c33acaac7335a5d2c60fc6f344c1217e1e0bd7e66eaf4e5f95af9d36da7e698449503a708f0c58512269eba56682291156ad1559b2426721bcb602fb7b8179e5b9cf63cc8adb2567a575311db9314c8d344307a889f67dda5d5dbc5d1958944a10fd3e794e3d9c700cbb6b33faab547e3c0ecd535671ef87786e5ca6f1ba156b2d3fc15369a03dacb00846dcdd5259fb5d55b2270996d745621267effe2583b08008600", @ANYRES32=0x0, @ANYBLOB="9b4ea743faab9fd30054942eb0831e3359a55c3700db81d883991d8b030b5b65fd6e9b5fcebde85e1e52506b1db11b9dbde0ac70653d1dc6923dde50cd9b42d5629c4bdbca05ff0c0239e43b6e11d904490d31671d4ab9df75582f9bc1efbfa0aea4c04a4f5567558f597877baa571a68e88bbbb6daee628d2145c67eba7082480de0016d2191b438b975b5f8c9bc0fbaa2547582f4de334e95ff60050f574dc21f4c04d6b96c971ecd05a93415af860db252238ea52065ca207288bb61e81c195fcc03ade0fb0810095fba536d33616843cadf93940f00ef976684df9382aaa18ff4316695cb55710b301ac2a23ab91340b4a5a003e54", @ANYRES32, @ANYBLOB="0400338014001800ff0100000000000000000000000000010800bd00", @ANYRES32=0x0, @ANYBLOB="7c0132800400498008003200", @ANYRES32=0x0, @ANYBLOB="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"], 0x3a0}, {&(0x7f0000001900)={0x13cc, 0x3b, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x5a, 0xca, 0x0, 0x1, [@nested={0x4, 0xd9}, @generic="44cc4c64d73fb40f086bc6c9ede84332f1b5fc030a8a8c97ebfc313ad8888ae2f60cb396a3395040785d81c6f331c4897a791f243676", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x1ff}, @nested={0x4, 0x45}, @typed={0xc, 0x4a, 0x0, 0x0, @str='[.){$\'}\x00'}]}, @typed={0xf1, 0xc4, 0x0, 0x0, @binary="50f7991350063e11ab5fa40cf7163b3b2185815b4eb4a474269c38053a7e80f21e4c191abdbe1391be7671e9898a0b3ff02a1f4b1b2de578210dd7d849ddf91b2d2a4fce5eb61f9b8e9f216a48d2f9abe49c86c9f2a856d4f1960631f70fdf44798aa1ac269338e61f62f60c3031205895e3d404610e84604f74fe4c85ec65dc91ff59578775a36d64f70232eebfe816980e85e8b206ef87979a6316d0895ad32499df0fb5c6d6c039424f898ea3d7a240f930d70ae83a7b56c7df21d479e9c30f87593890ecedbfeeae52863ef231ba5850bae9b78cfb1eba64c2114af2af22a45b0cfe76a712efb4e203300e"}, @nested={0x194, 0x96, 0x0, 0x1, [@generic="9846f63a5ae5cf4823b68de008832b5fc8e92fadbc6b8a1c476975fd8dd74ee60815ff31c75c7798dd4c335d9b2362e5c069ee91725385c1877d423292db0c09b4973195df3c80f7d9483c0b75dfb880e671f4a75ae609dc0b03fc3ff57c52c001bbdae4ad24d539db86", @generic="7ee65562bb06af6be48b86fd77a4b6bd2f1cd9b178cf1add49d758cbede7f63c77b16da5023f45a64ce7c0f0b731bea83da461ff3699442fe0ff7ad4ddf501b70259e472e5cfbc71712f44aaed416c3fc3d08468926347d98543d39d4c767e366c606290d85c7bd2daf36ba5832404bbfab75d7da741c3c31784d7a0d02d107061c51cd57e46", @typed={0x9e, 0x147, 0x0, 0x0, @binary="d4479e0afb37ea27f014aceb1d4213ac96e12236472e3fcfd0664d94b0782ba57713c08786993daf94a9d5514716acbd05ebf0eaf5093ffe4665ebfa1b119c2b9ab612ec8f35dff7b038c30d26c2d2fcf92f5e01eaa5706049be88614f5642477f76d3c1eb416e360f1a1daf5be4017468fb3ddc6066097389de50ac67168bb864d655da53c985a14a9a8e351a27a6b9a7e5f069fa3a2865053e"}]}, @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@empty}, @nested={0x85, 0xff, 0x0, 0x1, [@generic="1e97c37d910ca3634cf301a5c028461bdde65258fe9bea7c82f24cc76d695bd42961680e13e71b06ede8764594404f48abc98ac72768c77386324f76a9a2dfedb0430dadc06b37354a243dabeadf042b0ff5102a8f03b2fd64e82580a4", @typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x113, 0x0, 0x0, @uid}]}, @nested={0x102c, 0x111, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @str='-\x8a*\x00'}, @nested={0x4, 0x110}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0xc54b}, @nested={0x4, 0xeb}, @generic="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", @nested={0x4, 0x7b}, @nested={0x4, 0x21}, @nested={0x4, 0x14c}, @nested={0x4, 0xaf}]}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x13cc}], 0x2, 0x0, 0x0, 0x400c080}, 0x0)
getsockopt(r9, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r12 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @empty}, {0x307, @random="3be734a94f93"}, 0x16, {0x2, 0x4e21, @remote}})

2.36898568s ago: executing program 0 (id=1699):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r1 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bdfe28bd7000fc5bdf250a00000008000300", @ANYRES32=r5, @ANYBLOB="0500080004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
bind$rds(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x1)
r6 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)="1e12643e36a1ac4cc6e0e4a418d12de0252aa8f2a392833aa6446635661a18dd1a2b86227ddff373c9d530f1b840a7d92c1ca76213b4c041455bc2d366947f4c0ff8a41a642cec34299020493f705da6883cf119f2e925d0f8c5114b53b3aa67093ce5cd22569af7daa183baefb86a26304e2625f2db30dc88f2deca7e7947a56937f37a2c2c9490eb03de8d9293326f66e3389c41c05e9acc432da9db68d1bdd094ac68b179dc4cf9d02d868afb351d31f4bfb160859778b898463e71f760db31eaf3da287857234cb45eed3813da6b296bb9dd26c9", 0xd6}, {&(0x7f0000000900)="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", 0x1e2}, {&(0x7f0000002c80)="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", 0x1016}, {&(0x7f0000000340)="3fc5e77126347c5363a734cbbe0da25bde4f8e6689b841faf183aa43e7015a430f4446a4a1c6", 0xfffffd85}, {&(0x7f0000000740)="c09850de3a09e6fe6eab9917f59bd0413daa5a7b2da0fe5ba2a6c9fd768bab9b832cb3f243b525ec4adc216cc7b5e15d73db163a9deb97535a52c01fdd173ace819843e1a231fa162a7983d9a37cfeaead32c1cb250b2eca84e017f70d63c3605e8c703563973b1b8309d17cc846d33cf4d3517e4e63e432ae3a27cd7d91f35da83c4c2f807fb72b9bd068a882434f9236", 0x91}, {&(0x7f0000000800)="68a9179e3069a0f0448a4fb99b4821c5cf38a5d0ccd6711cd339460da4cf64cf0281f6b2d54a9fe448e535318bc2fdac3706369bfa7e44a85464b4a76a22929ffd56547b30c80aaa", 0x48}, {&(0x7f0000000400)="120f0edb57a7cde17d45d1e82e94e1a6c0d3d294b434a00f3667e41789dad54847f356bc", 0x24}], 0x7, 0x0, 0x0, 0x4808}], 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x5b8, 0x6, 0x1, 0x80, 0x5}, 0xc)

2.160493458s ago: executing program 1 (id=1701):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000ff03000004000000f9ffffff00080100", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0300000003000000000000000800"/24, @ANYRES32, @ANYBLOB="6f750351c8c2eb24cd160c0e453673d3ba46cbb89a56d2cf6d5bcdf47782cb8fe7f7878a80a797420a5c"], 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8fe82ccbdbf4ee4f, 0x1c, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x242}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x66, '\x00', r3, 0x0, r9, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x1, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[{0x5, 0x3, 0xe, 0x7}, {0x2, 0x3, 0xd, 0x8}, {0x3, 0x5, 0xb, 0xc}], 0x10, 0x2, @void, @value}, 0x94)

2.155231113s ago: executing program 0 (id=1702):
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @dev, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000290000000400000000000000000000004000000000000000290000000500000000020201"], 0x58}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
socket$inet(0x2, 0x1, 0x0) (async)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000100)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async)
setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000100)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) (async)
setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0)

1.957428385s ago: executing program 1 (id=1704):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x3, 0x4, 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x301)

1.849660237s ago: executing program 4 (id=1705):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x61780, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
socketpair(0x18, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x2, r3, 0x1, 0x5, 0x6, @remote}, 0x14)

1.800291528s ago: executing program 1 (id=1706):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x3, 0x2, 0x8d, 0x8}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0xc880)
unshare(0xc000000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x4, r5}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700)
socket$nl_route(0x10, 0x3, 0x0)

1.659477869s ago: executing program 4 (id=1707):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
close(r1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000200), 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
socketpair(0x2b, 0x1, 0x0, &(0x7f00000020c0))

1.349478994s ago: executing program 4 (id=1709):
r0 = socket$netlink(0x10, 0x3, 0x13)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xf}, 0xc)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6821, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x24}}, 0x40004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000ff7f000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008506000000000000bf090000000000005f090c0000000000950000000000000018130000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600004b510e10001000000018400000fdffffff0000000000000c00000085100000f8ffe17648f40219eef40000b7020000010000008500000084000000b7000000000000009500"/168], &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x8e, &(0x7f0000000280)=""/142, 0x41100, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x3ff, 0xfffffff7}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000480)=[r3, r4, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0x6}, {0x2, 0x1, 0xb, 0x9}, {0x3, 0x1, 0x4, 0xc}, {0x5, 0x4, 0x9, 0xc}, {0x5, 0x3, 0x2, 0xb}], 0x10, 0x7a75, @void, @value}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x8, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x12}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r8, &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r8}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx  \x00'}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000004003c0012800b00010069703667726500002c0002801400060000000000000000000000ffffac1e01011400070000000000000002"], 0x5c}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, &(0x7f0000000000)={0x81, 0x5})
socket$kcm(0x25, 0x1, 0x0)

1.071593148s ago: executing program 4 (id=1711):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010004c40800000000002c"], 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', <r3=>0x0, 0x8000, 0x40, 0x22a6, 0x5, {{0x1c, 0x4, 0x2, 0xe, 0x70, 0x68, 0x0, 0x5b, 0x0, 0x0, @loopback, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0x14, 0x3c, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xffffff09}, {@loopback, 0x911}]}, @timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x7, [{@rand_addr=0x64010102, 0x7}, {@empty, 0x6c}, {@remote, 0x7}, {@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0x2f73}, {@local}, {@loopback, 0x6}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x2, [0xfff]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x5, 0x3, 0x8500, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x80, 0x5, 0x6}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', <r7=>0x0, 0x29, 0x3, 0x5, 0x3, 0x43, @local, @private2, 0x700, 0x1, 0x1, 0x3}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x140, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "41717f429544cca28067a019"}}}}}}, 0x0)

1.071225836s ago: executing program 3 (id=1712):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
bind$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000224d9ce218b34016000c6499669f72a20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.033417278s ago: executing program 4 (id=1713):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000002000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000ff", 0x43}], 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0xffffffe0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000940)={0x2, 0x3, {0x100, @usage=0x8, 0x0, 0x7a6, 0x2, 0xba13, 0x84, 0x7, 0x1, @struct={0x8, 0x3}, 0x3, 0x2, [0x70dc, 0x6, 0x1, 0xe0, 0xffffffffffffffca, 0xb]}, {0x3, @struct={0x99f9, 0x3}, 0x0, 0x8, 0x83d, 0x0, 0x8, 0x6, 0x88, @struct={0x767}, 0xff, 0xfffffff9, [0x3, 0x3, 0x47, 0x3, 0x7fffffff, 0x100000000]}, {0x584, @struct={0x3, 0x8001}, <r6=>0x0, 0x0, 0xcb17, 0x7, 0x4, 0x10, 0x23, @struct={0x3, 0x80000000}, 0x67f, 0x4, [0x35, 0x7, 0x4, 0x4, 0xddac, 0xffffffffffffffff]}, {0x3, 0xfc11, 0xb}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000d40)={r6, "c798ba66eaa916698a4d4fb998b81add"})
write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaa2aabb86dd6d75a3d0ed11110100000000000000000000000000000000ff0200000000000f00000000ff7f00014e214e20"], 0x4b)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r8, 0x6858604f277b68af, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
writev(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000780)="18943582cfc95a4c17de1524e11fa76ef3de37aa294129b5724faee81b4a4dfaf38ea0d1898a56e4606b0eb66c172bfe4a74249a4a1892e26e83ebddb30dc3da36d840eb2a8fa3242601623cacd868eb44e8404ef6d4be9abde6577533f15a8ae4862751092f90d2ef49fc3a1167bcca03427709f911fa58a13c192495baae341afe37c81c375382b33d27d2", 0x8c}, {&(0x7f0000000840)="05dedd1cf5a912d99e4887503ea2ae090f87bed8a5c47601276eceb374be0aadf4d797eaf590f3f15a75c5ffd55de9b4f353088573e5abea5dbde6f70426e0fa6cf00132cff410003b4cff2666b634fd0bc7b700caf45d51f9bb8637e97ef44ae89243a6d1629548cf9ea6d741a361d44e8a989f818bcd86f5cfd3c0c78f984de09e17b72b962ac5573b0dc52ec80f3864b0595f9008dcc1d17ea1b1bd5ecabee7e79dfa99ce85c9fb56214e7b8a82ddd4af7875a6d3115e6a91eec12c69f35edab787", 0xc3}, {&(0x7f0000002680)="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", 0xde8}], 0xffffffffffffebe)
socket$kcm(0x2c, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)

958.263482ms ago: executing program 3 (id=1714):
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x24008800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
sendmmsg(r0, &(0x7f0000000000), 0x33ebd378d66b390, 0x0)

769.607324ms ago: executing program 3 (id=1715):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x5, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x3, 0x1, 0x1, 0x7ff, 0x80000001, 0x8, 0xf5d1, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}})
getsockopt$inet6_opts(r3, 0x29, 0xe, &(0x7f0000000680)=""/4096, &(0x7f0000000200)=0x1000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x3c, r4, 0x507, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x6, 0x8}, &(0x7f00000001c0)=0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7})
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x44880)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)

708.601418ms ago: executing program 0 (id=1716):
unshare(0x24040000)
r0 = socket(0x2b, 0x80801, 0x1)
sendmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}}], 0x1, 0x20000090)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r3 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e300000000080045000030000000000001907800000000e00000010c00907804010000453f000400640009022100037f005ae0b0010001"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3], [0x4, 0xb, 0xfffc, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r6, &(0x7f0000000000)=@proc, 0xc)
close(0x3)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r8, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/74, 0x328000}, 0x20)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@empty, @remote}, 0x10)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000002b000/0x4000)=nil, 0x4000, 0x0, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8)

612.236148ms ago: executing program 3 (id=1717):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071124e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
listen(r1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_cmd={0x2e, 0x7, 0x4, 0x0, 0x14, 0x5, 0x1, 0x3, 0xfc, 0x5, 0x7ff, 0x29d, 0x8000, 0xee, 0x1c, 0x3, [0x4, 0x1]}})

485.52983ms ago: executing program 3 (id=1718):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000700000080000085000000750000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000740)=""/4096, &(0x7f0000000040)=0x1000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000700000080000085000000750000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000740)=""/4096, &(0x7f0000000040)=0x1000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)

484.92073ms ago: executing program 0 (id=1719):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000002000000000000000000000d0a000000000000000200000604000000022000000000000001000000001000000d00000000000012050000000f00000003000004040000000000000001000000080000000f00000002000000f90800000c00000002002100070000000000"], &(0x7f0000000f40)=""/4089, 0x7e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="19000000040000000400000002000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03090000"], 0x50)
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))

371.910719ms ago: executing program 3 (id=1720):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x8, 0xc, 0x0, 0x20000, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x60}, 0x1, 0x7}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x429}], 0x1}, 0x20)
close(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r4, 0x6, 0x1}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r5, &(0x7f0000000a00)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000a80)="000000000087e43b71a5c451c66dde", 0xf}], 0x2)
r7 = socket$inet6(0xa, 0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x1)
recvmmsg(r7, &(0x7f0000000800), 0x62, 0x12141, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001, 0x2106}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)

293.241081ms ago: executing program 0 (id=1721):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
pipe(&(0x7f0000000580)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0)
sendfile(r4, r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x20044810)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000500)='}*(}((:]-!\x00', 0xb)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000003100)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000003180)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)

266.107127ms ago: executing program 1 (id=1722):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10081}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x7, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x25, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r5}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10081}, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x7, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x25, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r5}, 0x10) (async)

132.539243ms ago: executing program 1 (id=1723):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000000a00f22dc7a70ed1f9036564fd00002000000000"], 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140063a91d639e62e25245bcb872d943023d4cb4936b79ef3308d8c209b3a31d47089d0317c611daa8ddec86c27051906f0f57efcbd1ed7bec7dff62314c8345a220983a467e2971bca8281cd8090773357e3d764a3d3444803ff3d8c2d1fddbdc", @ANYRES16=r2, @ANYBLOB="010726bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0xc000)
unshare(0x26020480)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r8, 0x89a2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x9}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200480c4)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f00000002c0)=@in6={0xa, 0x4e25, 0x10, @local, 0xf}, 0x80, 0x0}, 0x20000000)
r11 = socket$kcm(0x10, 0x2, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'veth1_to_bond\x00', {0x80000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, [0x0, 0xff0000ff, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xffffff00, 0xffffff00], 'macsec0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x19, 0xf9, 0x4, 0xc}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x401, 0xa4, 0x3, '\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r13}, 0x10)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r14, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200010000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="04000000080031"], 0x28}], 0x1}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x380}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xc, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44040}, 0x0)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)

26.563792ms ago: executing program 4 (id=1724):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x8080)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x200000d0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x0, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x88}}, 0x24040084)
syz_emit_ethernet(0x3e, &(0x7f0000001200)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "5e722f5a3bc7afae27b241340b0e785fc538df57"}}}}}, 0x0)

0s ago: executing program 0 (id=1725):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @local}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x30}}], 0x1, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @local}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x30}}], 0x1, 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async)

kernel console output (not intermixed with test programs):

l module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  122.922176][ T7702] gretap1: entered promiscuous mode
[  123.161040][ T7699] lo speed is unknown, defaulting to 1000
[  124.368520][ T7711] dccp_close: ABORT with 28 bytes unread
[  124.584348][ T7731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  124.765376][ T7739] netlink: 'syz.4.487': attribute type 1 has an invalid length.
[  124.796449][ T7739] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.833072][ T7739] bond2: (slave ip6gretap2): making interface the new active one
[  124.867797][ T7739] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link
[  124.943076][ T7746] __nla_validate_parse: 3 callbacks suppressed
[  124.943105][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'.
[  124.995444][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'.
[  125.288055][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.492'.
[  125.305530][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.492'.
[  125.368239][ T7762] IPv6: addrconf: prefix option has invalid lifetime
[  125.916332][ T7775] veth0_macvtap (unregistering): left allmulticast mode
[  126.123256][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[  126.141887][ T7788] ip6gretap1: entered promiscuous mode
[  126.148873][ T7788] ip6gretap1: entered allmulticast mode
[  126.174653][ T7789] netlink: 830 bytes leftover after parsing attributes in process `syz.4.500'.
[  126.459113][ T7774] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  126.901875][ T7791] lo speed is unknown, defaulting to 1000
[  127.185716][ T7804] netlink: 44 bytes leftover after parsing attributes in process `syz.3.505'.
[  127.215422][ T7804] netlink: 43 bytes leftover after parsing attributes in process `syz.3.505'.
[  127.243185][ T7804] netlink: 'syz.3.505': attribute type 5 has an invalid length.
[  127.288855][ T7804] netlink: 43 bytes leftover after parsing attributes in process `syz.3.505'.
[  127.547277][ T7813] netlink: 'syz.2.507': attribute type 25 has an invalid length.
[  127.736635][ T7819] veth1_to_bond: entered allmulticast mode
[  127.743508][ T7819] veth1_to_bond: entered promiscuous mode
[  127.763760][ T7819] veth1_to_bond: left promiscuous mode
[  127.783798][ T7819] veth1_to_bond: left allmulticast mode
[  127.977730][ T7826] macvlan1: entered promiscuous mode
[  127.985071][ T7826] ipvlan0: entered promiscuous mode
[  128.006389][ T7826] ipvlan0: left promiscuous mode
[  128.011731][ T7826] macvlan1: left promiscuous mode
[  128.092978][ T7829] netlink: 96 bytes leftover after parsing attributes in process `syz.2.513'.
[  129.173391][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.198230][ T7861] team0: Port device bond0 added
[  129.214771][ T7872] syzkaller1: entered promiscuous mode
[  129.255421][ T7872] syzkaller1: entered allmulticast mode
[  129.449446][ T7891] bond3: entered promiscuous mode
[  129.483460][ T7891] bond3: entered allmulticast mode
[  129.605863][ T7891] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.658718][ T7898] tipc: Enabling of bearer <ib:pim6reg1> rejected, failed to enable media
[  129.669102][ T7898] sch_fq: defrate 0 ignored.
[  130.100758][ T7921] xt_CT: No such helper "pptp"
[  130.131138][ T7931] __nla_validate_parse: 9 callbacks suppressed
[  130.131158][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'.
[  130.161225][ T7931] bridge_slave_1: left allmulticast mode
[  130.169142][ T7931] bridge_slave_1: left promiscuous mode
[  130.176065][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.189507][ T7931] bridge_slave_0: left allmulticast mode
[  130.195729][ T7931] bridge_slave_0: left promiscuous mode
[  130.202204][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.334528][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'.
[  130.344395][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'.
[  130.445322][ T7941] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x5
[  130.550340][ T7943] netlink: 44 bytes leftover after parsing attributes in process `syz.4.545'.
[  130.607695][ T7943] netlink: 2 bytes leftover after parsing attributes in process `syz.4.545'.
[  130.617984][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.628654][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.638630][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.652322][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.663311][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.674097][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.684683][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.695655][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.705999][ T7943] batadv_slave_1: entered promiscuous mode
[  130.878157][ T7957] FAULT_INJECTION: forcing a failure.
[  130.878157][ T7957] name failslab, interval 1, probability 0, space 0, times 1
[  130.891224][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.1.549 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  130.891255][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  130.891272][ T7957] Call Trace:
[  130.891280][ T7957]  <TASK>
[  130.891288][ T7957]  dump_stack_lvl+0x241/0x360
[  130.891331][ T7957]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.891359][ T7957]  ? __pfx__printk+0x10/0x10
[  130.891381][ T7957]  ? tipc_conn_rcv_sub+0x294/0x340
[  130.891420][ T7957]  should_fail_ex+0x424/0x570
[  130.891453][ T7957]  should_failslab+0xac/0x100
[  130.891482][ T7957]  __kmalloc_cache_noprof+0x73/0x370
[  130.891511][ T7957]  ? tipc_group_create_member+0x63/0x580
[  130.891533][ T7957]  tipc_group_create_member+0x63/0x580
[  130.891559][ T7957]  tipc_nametbl_build_group+0x2db/0x4c0
[  130.891581][ T7957]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  130.891608][ T7957]  tipc_sk_join+0x424/0x8a0
[  130.891640][ T7957]  ? __local_bh_enable_ip+0x168/0x200
[  130.891671][ T7957]  ? lockdep_hardirqs_on+0x9d/0x150
[  130.891704][ T7957]  ? __pfx_tipc_sk_join+0x10/0x10
[  130.891739][ T7957]  tipc_setsockopt+0x914/0xc40
[  130.891769][ T7957]  ? __pfx_tipc_setsockopt+0x10/0x10
[  130.891798][ T7957]  ? aa_sock_opt_perm+0x79/0x120
[  130.891829][ T7957]  ? __pfx_tipc_setsockopt+0x10/0x10
[  130.891853][ T7957]  do_sock_setsockopt+0x3b1/0x710
[  130.891885][ T7957]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  130.891909][ T7957]  ? __fget_files+0x2a/0x420
[  130.891941][ T7957]  ? __fget_files+0x39d/0x420
[  130.891968][ T7957]  ? __fget_files+0x2a/0x420
[  130.892002][ T7957]  __x64_sys_setsockopt+0x1ee/0x280
[  130.892034][ T7957]  do_syscall_64+0xf3/0x230
[  130.892062][ T7957]  ? clear_bhb_loop+0x45/0xa0
[  130.892086][ T7957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.892110][ T7957] RIP: 0033:0x7ff50758d169
[  130.892133][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.892150][ T7957] RSP: 002b:00007ff508349038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  130.892173][ T7957] RAX: ffffffffffffffda RBX: 00007ff5077a5fa0 RCX: 00007ff50758d169
[  130.892188][ T7957] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  130.892200][ T7957] RBP: 00007ff508349090 R08: 0000000000000010 R09: 0000000000000000
[  130.892213][ T7957] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  130.892226][ T7957] R13: 0000000000000000 R14: 00007ff5077a5fa0 R15: 00007ffede703748
[  130.892252][ T7957]  </TASK>
[  131.292983][ T7970] bridge_slave_1: entered promiscuous mode
[  131.354480][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'.
[  131.396942][ T7953] lo speed is unknown, defaulting to 1000
[  131.595545][ T7970] bridge_slave_1 (unregistering): left promiscuous mode
[  131.772857][ T7980] netlink: 256 bytes leftover after parsing attributes in process `syz.4.558'.
[  131.879530][ T7969] lo speed is unknown, defaulting to 1000
[  132.030622][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'.
[  132.055557][ T7972] netlink: 'syz.1.554': attribute type 4 has an invalid length.
[  132.075611][   T24] lo speed is unknown, defaulting to 1000
[  132.370598][ T8004] FAULT_INJECTION: forcing a failure.
[  132.370598][ T8004] name failslab, interval 1, probability 0, space 0, times 0
[  132.383392][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.3.564 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  132.383418][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  132.383429][ T8004] Call Trace:
[  132.383460][ T8004]  <TASK>
[  132.383468][ T8004]  dump_stack_lvl+0x241/0x360
[  132.383499][ T8004]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.383522][ T8004]  ? __pfx__printk+0x10/0x10
[  132.383550][ T8004]  should_fail_ex+0x424/0x570
[  132.383576][ T8004]  should_failslab+0xac/0x100
[  132.383601][ T8004]  __kmalloc_cache_noprof+0x73/0x370
[  132.383625][ T8004]  ? tipc_group_create_member+0x63/0x580
[  132.383644][ T8004]  tipc_group_create_member+0x63/0x580
[  132.383664][ T8004]  tipc_nametbl_build_group+0x2db/0x4c0
[  132.383682][ T8004]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  132.383703][ T8004]  tipc_sk_join+0x424/0x8a0
[  132.383723][ T8004]  ? __local_bh_enable_ip+0x168/0x200
[  132.383753][ T8004]  ? lockdep_hardirqs_on+0x9d/0x150
[  132.383779][ T8004]  ? __pfx_tipc_sk_join+0x10/0x10
[  132.383807][ T8004]  tipc_setsockopt+0x914/0xc40
[  132.383831][ T8004]  ? __pfx_tipc_setsockopt+0x10/0x10
[  132.383854][ T8004]  ? aa_sock_opt_perm+0x79/0x120
[  132.383880][ T8004]  ? __pfx_tipc_setsockopt+0x10/0x10
[  132.383899][ T8004]  do_sock_setsockopt+0x3b1/0x710
[  132.383925][ T8004]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  132.383944][ T8004]  ? __fget_files+0x2a/0x420
[  132.383970][ T8004]  ? __fget_files+0x39d/0x420
[  132.383992][ T8004]  ? __fget_files+0x2a/0x420
[  132.384020][ T8004]  __x64_sys_setsockopt+0x1ee/0x280
[  132.384045][ T8004]  do_syscall_64+0xf3/0x230
[  132.384068][ T8004]  ? clear_bhb_loop+0x45/0xa0
[  132.384087][ T8004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.384104][ T8004] RIP: 0033:0x7f6ebf78d169
[  132.384119][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.384132][ T8004] RSP: 002b:00007f6ec0517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  132.384150][ T8004] RAX: ffffffffffffffda RBX: 00007f6ebf9a5fa0 RCX: 00007f6ebf78d169
[  132.384162][ T8004] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  132.384172][ T8004] RBP: 00007f6ec0517090 R08: 0000000000000010 R09: 0000000000000000
[  132.384182][ T8004] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  132.384192][ T8004] R13: 0000000000000000 R14: 00007f6ebf9a5fa0 R15: 00007ffed2bb9028
[  132.384213][ T8004]  </TASK>
[  132.627018][ T8001] x_tables: duplicate underflow at hook 2
[  132.937445][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.943805][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  132.952584][ T8017] dccp_invalid_packet: P.Data Offset(100) too large
[  132.993019][ T8017] syzkaller1: left promiscuous mode
[  133.008712][ T8017] syzkaller1: left allmulticast mode
[  133.537575][ T8046] FAULT_INJECTION: forcing a failure.
[  133.537575][ T8046] name failslab, interval 1, probability 0, space 0, times 0
[  133.550653][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.4.576 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  133.550689][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  133.550703][ T8046] Call Trace:
[  133.550710][ T8046]  <TASK>
[  133.550718][ T8046]  dump_stack_lvl+0x241/0x360
[  133.550752][ T8046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.550778][ T8046]  ? __pfx__printk+0x10/0x10
[  133.550801][ T8046]  ? __pfx_tipc_sub_timeout+0x10/0x10
[  133.550835][ T8046]  ? kasan_save_track+0x51/0x80
[  133.550858][ T8046]  ? __kasan_kmalloc+0x9d/0xb0
[  133.550880][ T8046]  ? __kmalloc_cache_noprof+0x236/0x370
[  133.550909][ T8046]  ? tipc_group_create_member+0x63/0x580
[  133.550927][ T8046]  ? tipc_nametbl_build_group+0x2db/0x4c0
[  133.550948][ T8046]  ? tipc_sk_join+0x424/0x8a0
[  133.550972][ T8046]  ? tipc_setsockopt+0x914/0xc40
[  133.551000][ T8046]  should_fail_ex+0x424/0x570
[  133.551032][ T8046]  should_failslab+0xac/0x100
[  133.551060][ T8046]  __kmalloc_cache_noprof+0x73/0x370
[  133.551088][ T8046]  ? tipc_nametbl_insert_publ+0x64/0x1510
[  133.551112][ T8046]  tipc_nametbl_insert_publ+0x64/0x1510
[  133.551134][ T8046]  ? do_raw_spin_lock+0x151/0x370
[  133.551165][ T8046]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  133.551190][ T8046]  ? tipc_net+0x45/0x280
[  133.551210][ T8046]  ? tipc_nametbl_publish+0x77/0x1e0
[  133.551235][ T8046]  tipc_nametbl_publish+0xc7/0x1e0
[  133.551260][ T8046]  tipc_sk_publish+0x200/0x4b0
[  133.551288][ T8046]  ? __pfx_tipc_sk_publish+0x10/0x10
[  133.551312][ T8046]  ? tipc_nametbl_build_group+0x488/0x4c0
[  133.551332][ T8046]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  133.551359][ T8046]  tipc_sk_join+0x42f/0x8a0
[  133.551385][ T8046]  ? __local_bh_enable_ip+0x168/0x200
[  133.551414][ T8046]  ? lockdep_hardirqs_on+0x9d/0x150
[  133.551447][ T8046]  ? __pfx_tipc_sk_join+0x10/0x10
[  133.551482][ T8046]  tipc_setsockopt+0x914/0xc40
[  133.551512][ T8046]  ? __pfx_tipc_setsockopt+0x10/0x10
[  133.551541][ T8046]  ? aa_sock_opt_perm+0x79/0x120
[  133.551573][ T8046]  ? __pfx_tipc_setsockopt+0x10/0x10
[  133.551597][ T8046]  do_sock_setsockopt+0x3b1/0x710
[  133.551628][ T8046]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  133.551653][ T8046]  ? __fget_files+0x2a/0x420
[  133.551691][ T8046]  ? __fget_files+0x39d/0x420
[  133.551719][ T8046]  ? __fget_files+0x2a/0x420
[  133.551752][ T8046]  __x64_sys_setsockopt+0x1ee/0x280
[  133.551783][ T8046]  do_syscall_64+0xf3/0x230
[  133.551811][ T8046]  ? clear_bhb_loop+0x45/0xa0
[  133.551835][ T8046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.551854][ T8046] RIP: 0033:0x7f9239f8d169
[  133.551872][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.551889][ T8046] RSP: 002b:00007f923ae0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.551911][ T8046] RAX: ffffffffffffffda RBX: 00007f923a1a5fa0 RCX: 00007f9239f8d169
[  133.551926][ T8046] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  133.551939][ T8046] RBP: 00007f923ae0e090 R08: 0000000000000010 R09: 0000000000000000
[  133.551951][ T8046] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  133.551964][ T8046] R13: 0000000000000000 R14: 00007f923a1a5fa0 R15: 00007ffd32df59e8
[  133.551989][ T8046]  </TASK>
[  133.932502][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'.
[  133.967803][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'.
[  134.029143][ T8058] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  134.568298][ T8098] FAULT_INJECTION: forcing a failure.
[  134.568298][ T8098] name failslab, interval 1, probability 0, space 0, times 0
[  134.581284][ T8098] CPU: 0 UID: 0 PID: 8098 Comm: syz.4.594 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  134.581306][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  134.581315][ T8098] Call Trace:
[  134.581321][ T8098]  <TASK>
[  134.581328][ T8098]  dump_stack_lvl+0x241/0x360
[  134.581354][ T8098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.581376][ T8098]  ? __pfx__printk+0x10/0x10
[  134.581401][ T8098]  should_fail_ex+0x424/0x570
[  134.581425][ T8098]  should_failslab+0xac/0x100
[  134.581446][ T8098]  __kmalloc_cache_noprof+0x73/0x370
[  134.581467][ T8098]  ? tipc_nametbl_insert_publ+0x9c6/0x1510
[  134.581485][ T8098]  tipc_nametbl_insert_publ+0x9c6/0x1510
[  134.581513][ T8098]  tipc_nametbl_publish+0xc7/0x1e0
[  134.581530][ T8098]  tipc_sk_publish+0x200/0x4b0
[  134.581550][ T8098]  ? __pfx_tipc_sk_publish+0x10/0x10
[  134.581567][ T8098]  ? tipc_nametbl_build_group+0x488/0x4c0
[  134.581582][ T8098]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  134.581600][ T8098]  tipc_sk_join+0x42f/0x8a0
[  134.581626][ T8098]  ? __local_bh_enable_ip+0x168/0x200
[  134.581647][ T8098]  ? lockdep_hardirqs_on+0x9d/0x150
[  134.581670][ T8098]  ? __pfx_tipc_sk_join+0x10/0x10
[  134.581694][ T8098]  tipc_setsockopt+0x914/0xc40
[  134.581716][ T8098]  ? __pfx_tipc_setsockopt+0x10/0x10
[  134.581736][ T8098]  ? aa_sock_opt_perm+0x79/0x120
[  134.581759][ T8098]  ? __pfx_tipc_setsockopt+0x10/0x10
[  134.581776][ T8098]  do_sock_setsockopt+0x3b1/0x710
[  134.581799][ T8098]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  134.581825][ T8098]  ? __fget_files+0x2a/0x420
[  134.581858][ T8098]  ? __fget_files+0x39d/0x420
[  134.581886][ T8098]  ? __fget_files+0x2a/0x420
[  134.581920][ T8098]  __x64_sys_setsockopt+0x1ee/0x280
[  134.581952][ T8098]  do_syscall_64+0xf3/0x230
[  134.581981][ T8098]  ? clear_bhb_loop+0x45/0xa0
[  134.581998][ T8098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.582013][ T8098] RIP: 0033:0x7f9239f8d169
[  134.582026][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.582038][ T8098] RSP: 002b:00007f923ae0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  134.582053][ T8098] RAX: ffffffffffffffda RBX: 00007f923a1a5fa0 RCX: 00007f9239f8d169
[  134.582064][ T8098] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  134.582073][ T8098] RBP: 00007f923ae0e090 R08: 0000000000000010 R09: 0000000000000000
[  134.582082][ T8098] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  134.582091][ T8098] R13: 0000000000000000 R14: 00007f923a1a5fa0 R15: 00007ffd32df59e8
[  134.582108][ T8098]  </TASK>
[  134.582115][ T8098] tipc: Failed to bind to 66,245,245
[  135.017418][ T1108] tipc: Subscription rejected, illegal request
[  135.032570][ T8107] openvswitch: netlink: IP tunnel dst address not specified
[  135.197058][ T8116] netlink: 'syz.3.601': attribute type 3 has an invalid length.
[  135.204757][ T8116] __nla_validate_parse: 2 callbacks suppressed
[  135.204775][ T8116] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.601'.
[  135.247498][ T8115] batadv_slave_1: entered promiscuous mode
[  135.378342][ T8116] batadv_slave_1: left promiscuous mode
[  135.388651][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'.
[  135.484372][ T8132] FAULT_INJECTION: forcing a failure.
[  135.484372][ T8132] name failslab, interval 1, probability 0, space 0, times 0
[  135.497382][ T8132] CPU: 1 UID: 0 PID: 8132 Comm: syz.3.605 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  135.497416][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  135.497430][ T8132] Call Trace:
[  135.497438][ T8132]  <TASK>
[  135.497446][ T8132]  dump_stack_lvl+0x241/0x360
[  135.497481][ T8132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.497509][ T8132]  ? __pfx__printk+0x10/0x10
[  135.497532][ T8132]  ? __local_bh_enable_ip+0x168/0x200
[  135.497569][ T8132]  ? tipc_conn_lookup+0x2a7/0x3b0
[  135.497599][ T8132]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  135.497636][ T8132]  should_fail_ex+0x424/0x570
[  135.497669][ T8132]  should_failslab+0xac/0x100
[  135.497699][ T8132]  __kmalloc_cache_noprof+0x73/0x370
[  135.497727][ T8132]  ? tipc_topsrv_queue_evt+0xf1/0x300
[  135.497760][ T8132]  tipc_topsrv_queue_evt+0xf1/0x300
[  135.497793][ T8132]  tipc_sub_report_overlap+0x4c9/0x840
[  135.497831][ T8132]  tipc_nametbl_insert_publ+0xfd3/0x1510
[  135.497872][ T8132]  tipc_nametbl_publish+0xc7/0x1e0
[  135.497898][ T8132]  tipc_sk_publish+0x200/0x4b0
[  135.497926][ T8132]  ? __pfx_tipc_sk_publish+0x10/0x10
[  135.497950][ T8132]  ? tipc_nametbl_build_group+0x488/0x4c0
[  135.497971][ T8132]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  135.497997][ T8132]  tipc_sk_join+0x42f/0x8a0
[  135.498023][ T8132]  ? __local_bh_enable_ip+0x168/0x200
[  135.498052][ T8132]  ? lockdep_hardirqs_on+0x9d/0x150
[  135.498085][ T8132]  ? __pfx_tipc_sk_join+0x10/0x10
[  135.498121][ T8132]  tipc_setsockopt+0x914/0xc40
[  135.498151][ T8132]  ? __pfx_tipc_setsockopt+0x10/0x10
[  135.498179][ T8132]  ? aa_sock_opt_perm+0x79/0x120
[  135.498211][ T8132]  ? __pfx_tipc_setsockopt+0x10/0x10
[  135.498235][ T8132]  do_sock_setsockopt+0x3b1/0x710
[  135.498266][ T8132]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  135.498290][ T8132]  ? __fget_files+0x2a/0x420
[  135.498324][ T8132]  ? __fget_files+0x39d/0x420
[  135.498351][ T8132]  ? __fget_files+0x2a/0x420
[  135.498391][ T8132]  __x64_sys_setsockopt+0x1ee/0x280
[  135.498422][ T8132]  do_syscall_64+0xf3/0x230
[  135.498452][ T8132]  ? clear_bhb_loop+0x45/0xa0
[  135.498476][ T8132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.498496][ T8132] RIP: 0033:0x7f6ebf78d169
[  135.498514][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.498531][ T8132] RSP: 002b:00007f6ec0517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.498566][ T8132] RAX: ffffffffffffffda RBX: 00007f6ebf9a5fa0 RCX: 00007f6ebf78d169
[  135.498581][ T8132] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  135.498594][ T8132] RBP: 00007f6ec0517090 R08: 0000000000000010 R09: 0000000000000000
[  135.498607][ T8132] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  135.498619][ T8132] R13: 0000000000000000 R14: 00007f6ebf9a5fa0 R15: 00007ffed2bb9028
[  135.498646][ T8132]  </TASK>
[  135.852338][ T8138] syzkaller0: entered promiscuous mode
[  135.860173][ T8138] syzkaller0: entered allmulticast mode
[  136.261657][ T8160] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0
[  136.685458][ T8168] delete_channel: no stack
[  136.798827][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'.
[  137.141718][ T8181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.619'.
[  137.293392][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[  137.338753][ T8187] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[  137.363300][ T8187] netlink: 244 bytes leftover after parsing attributes in process `syz.1.620'.
[  138.428367][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'.
[  138.442480][ T8186] pimreg3: entered allmulticast mode
[  138.465335][ T8190] netlink: 'syz.0.622': attribute type 12 has an invalid length.
[  138.473151][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.622'.
[  138.592734][ T8197] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  138.848475][ T8214] netlink: 136 bytes leftover after parsing attributes in process `syz.0.631'.
[  138.867547][ T8225] netlink: 136 bytes leftover after parsing attributes in process `syz.0.631'.
[  139.302566][ T8224] gtp0: entered promiscuous mode
[  139.372626][ T8242] lo speed is unknown, defaulting to 1000
[  139.580397][ T8255] vlan2: entered promiscuous mode
[  139.589964][ T8255] hsr0: entered promiscuous mode
[  139.751030][ T8253] lo speed is unknown, defaulting to 1000
[  140.286527][ T8258] lo speed is unknown, defaulting to 1000
[  140.501653][ T8288] __nla_validate_parse: 4 callbacks suppressed
[  140.501675][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[  140.850073][ T8298] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  140.937122][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'.
[  141.654052][ T8355] xt_l2tp: v2 sid > 0xffff: 4294967295
[  141.674716][ T8358] xt_l2tp: v2 sid > 0xffff: 4294967295
[  141.766952][ T8364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.786082][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'.
[  141.830359][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'.
[  141.839810][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'.
[  141.852101][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'.
[  141.865227][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'.
[  141.900469][ T8362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  141.917460][ T8362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.945549][ T8362] dummy0: entered promiscuous mode
[  141.952575][ T8362] syz_tun: entered promiscuous mode
[  142.019600][ T8366] pim6reg: entered allmulticast mode
[  142.025070][ T8367] pim6reg: left allmulticast mode
[  142.327006][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[  142.419188][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'.
[  142.441106][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'.
[  142.472749][ T8381] rdma_op ffff888021bf31f0 conn xmit_rdma 0000000000000000
[  142.671726][ T8401] openvswitch: netlink: IP tunnel dst address not specified
[  142.709094][ T8401] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  142.737837][ T8401] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  142.861831][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.930030][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.995048][ T8411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.001870][ T8422] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  143.010247][ T8407] syz.3.679: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.022925][ T8422] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  143.031979][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.3.679 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  143.032014][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  143.032028][ T8407] Call Trace:
[  143.032037][ T8407]  <TASK>
[  143.032046][ T8407]  dump_stack_lvl+0x241/0x360
[  143.032086][ T8407]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.032117][ T8407]  ? __pfx__printk+0x10/0x10
[  143.032146][ T8407]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  143.032178][ T8407]  ? __rcu_read_unlock+0xa1/0x110
[  143.032211][ T8407]  warn_alloc+0x27c/0x410
[  143.032236][ T8407]  ? __vmalloc_node_range_noprof+0x108/0x1390
[  143.032260][ T8407]  ? __pfx_warn_alloc+0x10/0x10
[  143.032283][ T8407]  ? kasan_save_track+0x3f/0x80
[  143.032306][ T8407]  ? __kasan_kmalloc+0x9d/0xb0
[  143.032333][ T8407]  ? xsk_setsockopt+0x449/0x840
[  143.032359][ T8407]  ? do_sock_setsockopt+0x3b1/0x710
[  143.032386][ T8407]  ? __x64_sys_setsockopt+0x1ee/0x280
[  143.032413][ T8407]  ? do_syscall_64+0xf3/0x230
[  143.032444][ T8407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.032475][ T8407]  __vmalloc_node_range_noprof+0x128/0x1390
[  143.032519][ T8407]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.032546][ T8407]  ? __kasan_kmalloc+0x9d/0xb0
[  143.032576][ T8407]  vmalloc_user_noprof+0x74/0x80
[  143.032598][ T8407]  ? xskq_create+0xb6/0x170
[  143.032625][ T8407]  xskq_create+0xb6/0x170
[  143.032653][ T8407]  xsk_init_queue+0xa1/0x100
[  143.032691][ T8407]  xsk_setsockopt+0x449/0x840
[  143.032720][ T8407]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.032745][ T8407]  ? __lock_acquire+0xad5/0xd80
[  143.032778][ T8407]  ? __pfx_aa_sk_perm+0x10/0x10
[  143.032808][ T8407]  ? aa_sock_opt_perm+0x79/0x120
[  143.032841][ T8407]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.032866][ T8407]  do_sock_setsockopt+0x3b1/0x710
[  143.032904][ T8407]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  143.032930][ T8407]  ? __fget_files+0x2a/0x420
[  143.032965][ T8407]  ? __fget_files+0x39d/0x420
[  143.032996][ T8407]  ? __fget_files+0x2a/0x420
[  143.033035][ T8407]  __x64_sys_setsockopt+0x1ee/0x280
[  143.033070][ T8407]  do_syscall_64+0xf3/0x230
[  143.033101][ T8407]  ? clear_bhb_loop+0x45/0xa0
[  143.033127][ T8407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.033149][ T8407] RIP: 0033:0x7f6ebf78d169
[  143.033168][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.033187][ T8407] RSP: 002b:00007f6ec0517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.033212][ T8407] RAX: ffffffffffffffda RBX: 00007f6ebf9a5fa0 RCX: 00007f6ebf78d169
[  143.033228][ T8407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  143.033242][ T8407] RBP: 00007f6ebf80e2a0 R08: 0000000000000004 R09: 0000000000000000
[  143.033256][ T8407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.033270][ T8407] R13: 0000000000000000 R14: 00007f6ebf9a5fa0 R15: 00007ffed2bb9028
[  143.033300][ T8407]  </TASK>
[  143.033402][ T8407] Mem-Info:
[  143.084893][ T8424] syz_tun: entered allmulticast mode
[  143.255677][ T8407] active_anon:7154 inactive_anon:0 isolated_anon:0
[  143.255677][ T8407]  active_file:1510 inactive_file:38326 isolated_file:0
[  143.255677][ T8407]  unevictable:768 dirty:80 writeback:0
[  143.255677][ T8407]  slab_reclaimable:10759 slab_unreclaimable:104866
[  143.255677][ T8407]  mapped:29469 shmem:1487 pagetables:785
[  143.255677][ T8407]  sec_pagetables:0 bounce:0
[  143.255677][ T8407]  kernel_misc_reclaimable:0
[  143.255677][ T8407]  free:1332762 free_pcp:925 free_cma:0
[  143.454052][ T8407] Node 0 active_anon:28716kB inactive_anon:0kB active_file:6040kB inactive_file:153228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117876kB dirty:320kB writeback:0kB shmem:4412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12092kB pagetables:3244kB sec_pagetables:0kB all_unreclaimable? no
[  143.515358][ T8407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  143.546030][ T8423] syz_tun: left allmulticast mode
[  143.573976][ T8407] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.642609][ T8448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.654461][ T8407] lowmem_reserve[]: 0 2490 2490 2490 2490
[  143.664950][ T8407] Node 0 DMA32 free:1411092kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28576kB inactive_anon:0kB active_file:6040kB inactive_file:152904kB unevictable:1536kB writepending:320kB present:3129332kB managed:2550096kB mlocked:0kB bounce:0kB free_pcp:3112kB local_pcp:1668kB free_cma:0kB
[  143.715509][ T8407] lowmem_reserve[]: 0 0 0 0 0
[  143.746223][ T8407] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.793492][ T8407] lowmem_reserve[]: 0 0 0 0 0
[  143.802053][ T8407] Node 1 Normal free:3904608kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:0kB free_cma:0kB
[  143.815874][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  143.841585][ T8407] lowmem_reserve[]:
[  143.856980][ T8448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.878357][ T8407]  0 0 0 0 0
[  143.881830][ T8407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  143.905240][ T8407] Node 0 DMA32: 86*4kB (UE) 79*8kB (UME) 285*16kB (UE) 33*32kB (UE) 143*64kB (UME) 82*128kB (UME) 40*256kB (UM) 24*512kB (UME) 19*1024kB (UM) 13*2048kB (UM) 320*4096kB (UM) = 1405568kB
[  143.926877][ T8407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  143.941807][ T8407] Node 1 Normal: 196*4kB (UE) 50*8kB (UME) 50*16kB (UME) 203*32kB (UME) 107*64kB (UME) 21*128kB (UME) 14*256kB (UM) 10*512kB (UME) 7*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3904608kB
[  143.997608][ T8407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  143.999171][ T8448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.009159][ T8407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.027566][ T8407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  144.037771][ T8407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.048891][ T8407] 43096 total pagecache pages
[  144.053804][ T8407] 0 pages in swap cache
[  144.058254][ T8407] Free swap  = 124996kB
[  144.062912][ T8407] Total swap = 124996kB
[  144.069244][ T8407] 2097051 pages RAM
[  144.075779][ T8407] 0 pages HighMem/MovableOnly
[  144.080620][ T8407] 427805 pages reserved
[  144.085060][ T8407] 0 pages cma reserved
[  144.144858][ T8448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.267589][ T8465] netlink: 'syz.1.690': attribute type 7 has an invalid length.
[  144.309846][ T8465] netlink: 'syz.1.690': attribute type 8 has an invalid length.
[  144.453544][ T8451] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  144.492400][ T8448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.525010][ T8476] x_tables: duplicate underflow at hook 1
[  144.568195][ T8448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.651233][ T8476] netlink: 'syz.3.696': attribute type 10 has an invalid length.
[  144.663017][ T8448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.776325][ T8476] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.802762][ T8448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.378441][ T8504] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82
[  145.513904][ T8510] __nla_validate_parse: 12 callbacks suppressed
[  145.513928][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  145.775282][ T8530] syzkaller1: entered promiscuous mode
[  145.795987][ T8530] syzkaller1: entered allmulticast mode
[  145.817136][ T8535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.714'.
[  145.888997][ T8537] netlink: 'syz.1.713': attribute type 10 has an invalid length.
[  145.941449][ T8544] syzkaller1: entered promiscuous mode
[  145.945397][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.713'.
[  145.953086][ T8544] syzkaller1: entered allmulticast mode
[  145.969957][ T8537] dummy0: entered promiscuous mode
[  145.977404][ T8537] bridge0: port 3(dummy0) entered blocking state
[  145.985023][ T8537] bridge0: port 3(dummy0) entered disabled state
[  145.992224][ T8537] dummy0: entered allmulticast mode
[  146.001424][ T8537] bridge0: port 3(dummy0) entered blocking state
[  146.007931][ T8537] bridge0: port 3(dummy0) entered forwarding state
[  146.073372][ T8550] tipc: Enabled bearer <eth:ip6_vti0>, priority 18
[  146.089624][ T8547] netlink: 'syz.2.719': attribute type 5 has an invalid length.
[  146.105787][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[  146.219845][ T8562] netlink: 'syz.1.723': attribute type 21 has an invalid length.
[  146.240608][ T8562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.723'.
[  146.331671][ T8564] netlink: 156 bytes leftover after parsing attributes in process `syz.0.721'.
[  146.429518][ T8570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'.
[  146.699450][ T8598] sctp: [Deprecated]: syz.1.731 (pid 8598) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.699450][ T8598] Use struct sctp_sack_info instead
[  146.799399][ T8601] Dead loop on virtual device ipvlan1, fix it urgently!
[  146.904306][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'.
[  146.930789][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'.
[  146.979456][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'.
[  147.119615][ T6033] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.210762][ T5915] tipc: Node number set to 11521
[  147.625924][ T8601] syz.0.736 (8601) used greatest stack depth: 8752 bytes left
[  150.925463][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.525432][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.885360][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  194.372126][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.378992][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  196.446771][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  196.450616][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  196.452878][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  204.617622][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  214.846180][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  247.645415][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  255.807230][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.813570][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  266.045421][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  286.115432][ T8644] netlink: 256 bytes leftover after parsing attributes in process `syz.1.747'.
[  286.138823][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'.
[  286.214458][ T8654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.236617][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'.
[  286.280101][ T8658] sctp: [Deprecated]: syz.0.751 (pid 8658) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.280101][ T8658] Use struct sctp_sack_info instead
[  286.299717][ T8661] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000
[  286.330444][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'.
[  286.340654][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'.
[  286.573203][ T8681] ip6erspan0: entered promiscuous mode
[  286.595823][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'.
[  286.729413][ T8692] netlink: 200 bytes leftover after parsing attributes in process `syz.0.760'.
[  286.868349][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'.
[  287.267775][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'.
[  287.303201][ T8719] delete_channel: no stack
[  287.318098][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'.
[  287.412434][ T8709] lo speed is unknown, defaulting to 1000
[  287.618193][ T8734] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  287.630857][ T8734] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  287.638810][ T8734] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  287.647304][ T8734] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  287.647398][ T8732] bond0: (slave bond_slave_0): Releasing backup interface
[  287.674432][ T8732] bond0: (slave bond_slave_1): Releasing backup interface
[  287.696236][ T8732] team0: Port device team_slave_0 removed
[  287.707966][ T8732] team0: Port device team_slave_1 removed
[  287.714332][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.722526][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.733751][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.742100][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.756020][ T8732] bond0: (slave wlan1): Releasing backup interface
[  287.855172][ T8737] vlan0: entered promiscuous mode
[  288.023641][ T8748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.422646][ T8762] x_tables: duplicate underflow at hook 1
[  288.921700][   T30] audit: type=1800 audit(1743374707.425:6): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.786" name="memory.events" dev="tmpfs" ino=728 res=0 errno=0
[  288.951536][   T30] audit: type=1804 audit(1743374707.455:7): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.786" name="memory.events" dev="tmpfs" ino=728 res=1 errno=0
[  289.032197][ T8790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.132618][ T8790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.205352][ T8805] netlink: 'syz.4.789': attribute type 2 has an invalid length.
[  289.222494][ T8805] netlink: 'syz.4.789': attribute type 9 has an invalid length.
[  289.252038][ T8790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.326265][ T8790] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.413893][ T8810] veth1_to_bond: entered allmulticast mode
[  289.422935][ T8810] Dead loop on virtual device ipvlan1, fix it urgently!
[  289.447275][ T8790] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.464555][ T8790] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.486707][ T8790] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.505890][ T8790] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.874386][ T8825] lo speed is unknown, defaulting to 1000
[  290.248031][ T8835] lo speed is unknown, defaulting to 1000
[  290.259180][ T8809] veth1_to_bond: left allmulticast mode
[  290.279430][ T8810] syz.0.791 (8810) used greatest stack depth: 6640 bytes left
[  290.473058][ T8858] sctp: [Deprecated]: syz.3.805 (pid 8858) Use of struct sctp_assoc_value in delayed_ack socket option.
[  290.473058][ T8858] Use struct sctp_sack_info instead
[  290.675525][ T8841] tun0: tun_chr_ioctl cmd 1074025673
[  290.756586][ T8865] netlink: 'syz.3.806': attribute type 1 has an invalid length.
[  290.764332][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.928490][ T8868] netlink: 'syz.1.807': attribute type 1 has an invalid length.
[  290.948374][ T8868] netlink: 'syz.1.807': attribute type 2 has an invalid length.
[  291.010520][ T8868] macvtap2: entered promiscuous mode
[  291.023811][ T8868] macvtap2: entered allmulticast mode
[  291.059616][ T8851] lo speed is unknown, defaulting to 1000
[  291.232872][ T8860] lo speed is unknown, defaulting to 1000
[  291.291495][ T8877] __nla_validate_parse: 15 callbacks suppressed
[  291.291517][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'.
[  291.618242][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'.
[  292.487488][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  293.100925][ T8956] netlink: 'syz.1.827': attribute type 21 has an invalid length.
[  293.132676][ T8958] netlink: 'syz.4.828': attribute type 1 has an invalid length.
[  293.166345][ T8960] netlink: 'syz.1.827': attribute type 21 has an invalid length.
[  293.194210][ T8958] bond4: entered promiscuous mode
[  293.207118][ T8958] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.236786][ T8960] netlink: 'syz.1.827': attribute type 21 has an invalid length.
[  293.436960][ T8958] tipc: Resetting bearer <eth:ip6_vti0>
[  293.456925][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'.
[  293.473252][ T8976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.831'.
[  293.491908][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.499478][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.588400][ T8958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.602177][ T8958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.614637][ T8958] batadv_slave_1: left promiscuous mode
[  293.676182][ T8958] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  293.684987][ T8958] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  293.694369][ T8958] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  293.703571][ T8958] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  293.730535][ T8958] syzkaller1: left promiscuous mode
[  293.736439][ T8958] syzkaller1: left allmulticast mode
[  293.754608][ T8958] bond4: left promiscuous mode
[  293.761859][ T8949] lo speed is unknown, defaulting to 1000
[  293.768161][ T8960] netlink: 'syz.1.827': attribute type 21 has an invalid length.
[  293.949917][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'.
[  293.975490][ T8986] netlink: 292 bytes leftover after parsing attributes in process `syz.4.835'.
[  294.109421][ T8993] netlink: 'syz.3.838': attribute type 1 has an invalid length.
[  294.153199][ T8996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.211741][ T8995] 8021q: adding VLAN 0 to HW filter on device bond3
[  294.225012][ T8995] bond2: (slave bond3): making interface the new active one
[  294.233445][ T8995] bond2: (slave bond3): Enslaving as an active interface with an up link
[  294.243472][ T8951] lo speed is unknown, defaulting to 1000
[  294.255953][ T8998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.909965][ T9025] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  295.069241][ T9033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.646982][ T9043] veth1_to_bond: entered allmulticast mode
[  297.659070][ T9052] lo: entered promiscuous mode
[  297.664283][ T9052] lo: left promiscuous mode
[  297.669240][ T9052] veth1_to_bond: left allmulticast mode
[  297.678793][ T9059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  297.782295][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'.
[  297.866806][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'.
[  297.933890][ T9088] netlink: 76 bytes leftover after parsing attributes in process `syz.3.863'.
[  298.114609][ T9097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  298.151622][ T9095] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  298.182298][ T9097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  298.225838][ T9097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  298.388482][ T9111] xt_CT: No such helper "snmp"
[  298.401918][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'.
[  298.713474][ T9141] netlink: 'syz.4.878': attribute type 1 has an invalid length.
[  299.063388][ T9161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.130798][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'.
[  299.640365][ T9197] netlink: 'syz.3.897': attribute type 10 has an invalid length.
[  299.649013][ T9197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.897'.
[  299.677205][ T9197] team0: Port device geneve0 added
[  299.950187][ T9205] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.898'.
[  300.314434][ T9221] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[  300.338027][ T9201] lo speed is unknown, defaulting to 1000
[  300.374868][ T9225] xt_TPROXY: Can be used only with -p tcp or -p udp
[  301.390539][ T9262] x_tables: duplicate underflow at hook 1
[  301.786613][ T9266] lo speed is unknown, defaulting to 1000
[  301.969561][ T9290] syz.3.920 uses old SIOCAX25GETINFO
[  302.249131][ T9271] lo speed is unknown, defaulting to 1000
[  302.454043][ T9276] 8021q: adding VLAN 0 to HW filter on device bond2
[  302.607045][ T9302] 8021q: adding VLAN 0 to HW filter on device bond2
[  302.614783][ T9302] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  302.626787][ T9302] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  302.658562][ T9324] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  302.686925][ T9322] 8021q: VLANs not supported on ip_vti0
[  302.696540][ T9301] lo speed is unknown, defaulting to 1000
[  302.899822][ T9326] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  303.134256][ T9311] lo speed is unknown, defaulting to 1000
[  303.321016][ T9316] lo speed is unknown, defaulting to 1000
[  303.522472][ T9341] __nla_validate_parse: 6 callbacks suppressed
[  303.522494][ T9341] netlink: 256 bytes leftover after parsing attributes in process `syz.3.933'.
[  304.094283][ T9351] netlink: 'syz.4.936': attribute type 10 has an invalid length.
[  304.104411][ T9351] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  304.136550][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'.
[  304.641529][ T9368] xt_hashlimit: size too large, truncated to 1048576
[  304.710345][ T9371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  304.751897][ T9368] xt_CT: You must specify a L4 protocol and not use inversions on it
[  304.782989][ T5883] lo speed is unknown, defaulting to 1000
[  304.797758][ T5883] lo speed is unknown, defaulting to 1000
[  304.797820][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'.
[  304.935017][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  304.946925][ T9380] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  306.068685][ T9438] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  306.122667][ T9426] lo speed is unknown, defaulting to 1000
[  306.174297][ T9440] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  306.331312][ T9444] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  306.669183][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'.
[  306.783399][ T9469] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  306.856794][ T9477] netlink: 'syz.2.971': attribute type 21 has an invalid length.
[  306.873570][ T9477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.971'.
[  306.920234][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'.
[  307.104375][ T9484] bond2: entered promiscuous mode
[  307.127560][ T9484] bond2: entered allmulticast mode
[  307.152744][ T9484] 8021q: adding VLAN 0 to HW filter on device bond2
[  307.224011][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'.
[  307.763706][ T9517] netlink: 'syz.4.982': attribute type 10 has an invalid length.
[  307.772404][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'.
[  307.785143][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'.
[  307.798814][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'.
[  307.810447][ T9517] dummy0: entered promiscuous mode
[  307.819283][ T9517] bridge0: port 3(dummy0) entered blocking state
[  307.826185][ T9517] bridge0: port 3(dummy0) entered disabled state
[  307.832793][ T9517] dummy0: entered allmulticast mode
[  308.274053][ T9539] netlink: 'syz.2.991': attribute type 11 has an invalid length.
[  308.369179][ T9518] lo speed is unknown, defaulting to 1000
[  308.381523][ T9546] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  308.436612][ T9549] bond0: (slave bridge0): Releasing backup interface
[  308.498135][ T9549] bond0: (slave team0): Releasing backup interface
[  308.515838][ T9549] dummy0: left allmulticast mode
[  308.521012][ T9549] bridge0: port 3(dummy0) entered disabled state
[  308.531078][ T9549] bridge_slave_0: left allmulticast mode
[  308.541971][ T9549] bridge_slave_0: left promiscuous mode
[  308.548493][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.562844][ T9549] bridge_slave_1: left allmulticast mode
[  308.570800][ T9549] bridge_slave_1: left promiscuous mode
[  308.581082][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.591432][ T9549] bond0: (slave bond_slave_0): Releasing backup interface
[  308.603097][ T9549] bond0: (slave bond_slave_1): Releasing backup interface
[  308.615775][ T9549] team0: Port device team_slave_0 removed
[  308.623743][ T9549] team0: Port device team_slave_1 removed
[  308.631080][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.643007][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.651890][ T9549] bond0: (slave wlan1): Releasing backup interface
[  308.664786][ T9549] bond2: (slave ip6gretap2): Releasing active interface
[  308.794700][ T9559] __nla_validate_parse: 10 callbacks suppressed
[  308.794720][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'.
[  308.839495][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'.
[  308.858604][ T9559] netlink: 'syz.2.996': attribute type 20 has an invalid length.
[  309.260596][ T9576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1001'.
[  309.292433][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'.
[  309.303315][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'.
[  309.345176][   T30] audit: type=1800 audit(1743374727.825:8): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1004" name="blkio.bfq.time_recursive" dev="tmpfs" ino=924 res=0 errno=0
[  309.400604][   T30] audit: type=1800 audit(1743374727.825:9): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1004" name="blkio.bfq.time_recursive" dev="tmpfs" ino=924 res=0 errno=0
[  309.432913][ T9588] netlink: 'syz.4.1005': attribute type 3 has an invalid length.
[  309.445890][ T9588] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1005'.
[  309.690462][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'.
[  309.716260][ T9599] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1010'.
[  309.740264][ T9604] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  310.349172][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1020'.
[  310.552436][ T9635] lo speed is unknown, defaulting to 1000
[  310.890476][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'.
[  311.456590][ T9686] netlink: 'syz.4.1031': attribute type 3 has an invalid length.
[  311.851202][ T9695] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  312.931567][ T9739] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.022440][ T9739] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.109803][ T9739] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.293721][ T9739] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.422458][ T9739] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.460965][ T9739] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.493588][ T9739] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.564676][ T9739] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.596927][ T9747] lo speed is unknown, defaulting to 1000
[  313.720075][ T9781] syzkaller1: entered promiscuous mode
[  313.745658][ T9781] syzkaller1: entered allmulticast mode
[  313.854775][ T9794] __nla_validate_parse: 5 callbacks suppressed
[  313.854795][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  313.870737][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'.
[  313.891736][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  314.085347][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'.
[  314.141828][ T9752] netlink: 'syz.4.1048': attribute type 8 has an invalid length.
[  314.165748][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  314.268471][ T9811] ipvlan2: entered promiscuous mode
[  314.298055][ T9811] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  314.324512][ T9811] team0: Device ipvlan2 is already an upper device of the team interface
[  314.427276][ T9822] netlink: 'syz.1.1068': attribute type 10 has an invalid length.
[  314.469112][ T9822] bridge0: port 3(dummy0) entered disabled state
[  314.482253][ T9822] dummy0: left allmulticast mode
[  314.536859][ T9822] dummy0: left promiscuous mode
[  314.583696][ T9822] bridge0: port 3(dummy0) entered disabled state
[  314.660727][ T9822] team0: Port device dummy0 added
[  314.712326][ T9830] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  314.862070][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'.
[  314.886397][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'.
[  314.908632][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'.
[  315.189526][ T9830] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  315.342310][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'.
[  315.356790][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'.
[  315.397089][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'.
[  315.460739][ T5843] block nbd0: Receive control failed (result -107)
[  315.495199][ T9846] nbd0: detected capacity change from 0 to 256
[  315.647774][ T9852] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  316.046950][ T9862] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  316.080217][ T9862] nbd: couldn't find a device at index 20
[  316.142956][ T9857] lo speed is unknown, defaulting to 1000
[  316.382514][ T9879] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  316.594830][ T9882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.773984][ T9895] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001
[  316.787741][ T9882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.830480][ T9895] vlan3: entered promiscuous mode
[  316.842051][ T9895] vlan3: entered allmulticast mode
[  316.852868][ T9895] hsr_slave_1: entered allmulticast mode
[  317.136653][ T9882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.222128][ T9905] netlink: 'syz.2.1093': attribute type 64 has an invalid length.
[  317.241470][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.259844][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.261360][ T9910] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  317.267174][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.349794][ T9905] bridge_slave_1 (unregistering): left allmulticast mode
[  317.369332][ T9905] bridge_slave_1 (unregistering): left promiscuous mode
[  317.385298][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.539577][ T9882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.699826][ T9882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.749117][ T9882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.794893][ T9882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.814282][ T9882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.879067][ T9919] netlink: 'syz.2.1097': attribute type 1 has an invalid length.
[  317.991672][ T9919] 8021q: adding VLAN 0 to HW filter on device bond4
[  318.046605][ T9921] bond4: (slave gretap2): making interface the new active one
[  318.078887][ T9921] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  318.798615][ T9967] x_tables: duplicate underflow at hook 1
[  318.826748][ T9966] x_tables: duplicate underflow at hook 2
[  318.832629][ T9966] x_tables: duplicate underflow at hook 2
[  319.051541][ T9981] netlink: 'syz.1.1112': attribute type 10 has an invalid length.
[  319.081320][ T9981] __nla_validate_parse: 7 callbacks suppressed
[  319.081342][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1112'.
[  319.220092][ T9981] team0: Port device geneve0 added
[  319.493199][T10003] netlink: 'syz.4.1118': attribute type 10 has an invalid length.
[  319.517219][T10003] team0: Cannot enslave team device to itself
[  319.603176][ T9986] lo speed is unknown, defaulting to 1000
[  319.634101][T10003] vlan2: entered promiscuous mode
[  319.658347][T10003] vlan0: entered promiscuous mode
[  319.677525][T10003] vlan2: entered allmulticast mode
[  319.696294][T10003] vlan0: entered allmulticast mode
[  319.710207][T10003] veth0_vlan: entered allmulticast mode
[  320.704678][T10047] pimreg0: tun_chr_ioctl cmd 1074025677
[  320.711341][T10047] pimreg0: linktype set to 65534
[  320.774794][T10043] lo speed is unknown, defaulting to 1000
[  321.329826][T10076] macvlan2: entered promiscuous mode
[  321.386878][T10076] bridge0: entered promiscuous mode
[  321.885316][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  322.092857][T10082] lo speed is unknown, defaulting to 1000
[  322.326339][T10094] netlink: 'syz.0.1139': attribute type 4 has an invalid length.
[  322.582183][T10098] netlink: 'syz.0.1140': attribute type 1 has an invalid length.
[  322.651390][T10098] netlink: 'syz.0.1140': attribute type 3 has an invalid length.
[  322.721878][T10098] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1140'.
[  322.724648][T10103] lo: entered promiscuous mode
[  322.744680][T10103] tunl0: entered promiscuous mode
[  322.750938][T10103] gre0: entered promiscuous mode
[  322.757290][T10103] gretap0: entered promiscuous mode
[  322.763798][T10103] ip_vti0: entered promiscuous mode
[  322.770042][T10103] ip6_vti0: entered promiscuous mode
[  322.786897][T10103] sit0: entered promiscuous mode
[  322.792973][T10103] ip6tnl0: entered promiscuous mode
[  322.799100][T10103] ip6gre0: entered promiscuous mode
[  322.805440][T10103] syz_tun: entered promiscuous mode
[  322.811227][T10103] ip6gretap0: entered promiscuous mode
[  322.817343][T10103] bridge0: entered promiscuous mode
[  322.836441][T10103] bond0: entered promiscuous mode
[  322.841560][T10103] bond_slave_0: entered promiscuous mode
[  322.857819][T10103] bond_slave_1: entered promiscuous mode
[  322.865790][T10103] team0: entered promiscuous mode
[  322.870917][T10103] team_slave_0: entered promiscuous mode
[  322.877014][T10103] team_slave_1: entered promiscuous mode
[  322.883311][T10103] dummy0: entered promiscuous mode
[  322.890914][T10103] geneve0: entered promiscuous mode
[  322.898543][T10103] nlmon0: entered promiscuous mode
[  322.925723][T10103] caif0: entered promiscuous mode
[  322.930977][T10103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.949780][ T5885] lo speed is unknown, defaulting to 1000
[  322.980535][ T5885] lo speed is unknown, defaulting to 1000
[  323.106482][T10113] syzkaller1: entered promiscuous mode
[  323.118727][T10113] syzkaller1: entered allmulticast mode
[  323.214842][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'.
[  323.379796][T10069] lo speed is unknown, defaulting to 1000
[  323.415542][T10121] x_tables: duplicate underflow at hook 2
[  323.436698][T10123] netlink: 'syz.0.1146': attribute type 4 has an invalid length.
[  323.468755][T10121] netlink: 'syz.3.1144': attribute type 29 has an invalid length.
[  323.515023][T10120] netlink: 'syz.3.1144': attribute type 29 has an invalid length.
[  323.542246][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  323.572124][T10120] netlink: 'syz.3.1144': attribute type 10 has an invalid length.
[  323.772933][T10124] syz_tun (unregistering): left promiscuous mode
[  323.839561][T10091] lo speed is unknown, defaulting to 1000
[  324.049947][T10084] lo speed is unknown, defaulting to 1000
[  324.323627][T10129] netlink: 'syz.0.1148': attribute type 1 has an invalid length.
[  324.664654][T10141] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6)
[  324.874522][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'.
[  325.691723][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.812707][T10169] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.821784][T10169] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.830600][T10169] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.839770][T10169] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.864827][T10169] veth3: left allmulticast mode
[  325.871635][T10169] veth5: left promiscuous mode
[  325.882670][T10169] bond3: left promiscuous mode
[  325.890834][T10169] bond3: left allmulticast mode
[  325.914226][T10169] ip6erspan0: left promiscuous mode
[  325.971608][T10172] bridge0: port 1(gretap0) entered blocking state
[  325.999550][T10172] bridge0: port 1(gretap0) entered disabled state
[  326.014743][T10172] gretap0: entered allmulticast mode
[  326.031031][T10172] gretap0: entered promiscuous mode
[  326.275608][T10186] lo speed is unknown, defaulting to 1000
[  326.346804][T10208] netlink: 'syz.3.1166': attribute type 2 has an invalid length.
[  326.354592][T10208] netlink: 'syz.3.1166': attribute type 2 has an invalid length.
[  326.438370][T10208] syzkaller1: entered promiscuous mode
[  326.444593][T10208] syzkaller1: entered allmulticast mode
[  326.522784][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'.
[  326.662311][T10212] wg1: left promiscuous mode
[  326.667490][T10212] wg1: left allmulticast mode
[  326.734353][T10212] vlan0: left promiscuous mode
[  326.752898][T10212] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.761603][T10212] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.771682][T10212] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.786393][T10212] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.799034][T10212] macvtap1: left promiscuous mode
[  326.804283][T10212] macvtap1: left allmulticast mode
[  326.812328][T10212] gretap1: left promiscuous mode
[  326.819549][T10212] gtp0: left promiscuous mode
[  326.826415][T10212] vlan2: left promiscuous mode
[  326.831301][T10212] hsr0: left promiscuous mode
[  326.840894][T10212] syzkaller1: left promiscuous mode
[  326.846466][T10212] syzkaller1: left allmulticast mode
[  327.156942][T10232] pimreg: entered allmulticast mode
[  327.237194][T10235] pimreg: left allmulticast mode
[  327.390874][T10241] x_tables: duplicate underflow at hook 1
[  327.522088][T10246] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1173'.
[  327.638452][T10254] netlink: 'syz.1.1176': attribute type 1 has an invalid length.
[  327.650107][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'.
[  327.757681][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[  327.766887][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[  328.287231][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'.
[  328.323993][T10299] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1189'.
[  328.347667][T10288] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  328.375528][T10288] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  328.509139][T10302] lo speed is unknown, defaulting to 1000
[  328.680426][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'.
[  328.710153][T10307] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  328.881884][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1190'.
[  328.899851][T10303] netlink: 'syz.2.1190': attribute type 4 has an invalid length.
[  329.031944][T10309] lo speed is unknown, defaulting to 1000
[  329.580006][T10353] vlan3: entered allmulticast mode
[  329.609240][T10353] batadv0: entered allmulticast mode
[  329.619046][T10360] ieee802154 phy0 wpan0: encryption failed: -22
[  329.674912][T10360] ieee802154 phy0 wpan0: encryption failed: -22
[  330.143835][T10388] __nla_validate_parse: 5 callbacks suppressed
[  330.143857][T10388] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1215'.
[  330.214796][T10393] sctp: [Deprecated]: syz.2.1216 (pid 10393) Use of int in maxseg socket option.
[  330.214796][T10393] Use struct sctp_assoc_value instead
[  330.266166][T10393] netlink: 'syz.2.1216': attribute type 12 has an invalid length.
[  330.281652][T10396] IPVS: Error connecting to the multicast addr
[  330.298535][ T5885] IPVS: starting estimator thread 0...
[  330.386803][T10398] IPVS: using max 27 ests per chain, 64800 per kthread
[  330.456690][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.490341][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.542739][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.574731][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.599838][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.633756][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.661654][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.681658][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.700784][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  330.955981][T10431] pim6reg1: entered promiscuous mode
[  330.961360][T10431] pim6reg1: entered allmulticast mode
[  330.988583][T10431] netlink: 'syz.4.1225': attribute type 2 has an invalid length.
[  331.022516][T10431] fþ²¹¥‰: entered promiscuous mode
[  331.065328][T10438] No such timeout policy "syz0"
[  331.423339][T10461] vlan2: entered allmulticast mode
[  331.430061][T10461] bond0: entered allmulticast mode
[  331.440981][T10461] bond_slave_0: entered allmulticast mode
[  331.447140][T10461] bond_slave_1: entered allmulticast mode
[  331.455256][T10461] bridge0: port 2(vlan2) entered blocking state
[  331.464678][T10461] bridge0: port 2(vlan2) entered disabled state
[  331.474231][T10461] vlan2: entered promiscuous mode
[  331.479650][T10461] bond0: entered promiscuous mode
[  331.484721][T10461] bond_slave_0: entered promiscuous mode
[  331.491195][T10461] bond_slave_1: entered promiscuous mode
[  331.501708][T10461] bridge0: port 2(vlan2) entered blocking state
[  331.508133][T10461] bridge0: port 2(vlan2) entered forwarding state
[  331.730227][T10485] lo: entered allmulticast mode
[  331.789264][T10477] lo: left allmulticast mode
[  332.002042][T10503] x_tables: duplicate underflow at hook 2
[  332.124539][T10510] netlink: 'syz.4.1249': attribute type 1 has an invalid length.
[  332.153032][T10510] netlink: 'syz.4.1249': attribute type 1 has an invalid length.
[  332.292217][T10516] team0: entered promiscuous mode
[  332.305871][T10516] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  332.324004][T10516] team0: left promiscuous mode
[  332.414013][T10517] netlink: 'syz.3.1245': attribute type 11 has an invalid length.
[  332.863598][T10506] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  333.261290][T10547] netlink: 'syz.1.1258': attribute type 178 has an invalid length.
[  333.631484][T10568] sit0: entered promiscuous mode
[  333.637576][T10568] netlink: 'syz.4.1264': attribute type 1 has an invalid length.
[  334.125289][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  334.163099][T10600] 8021q: adding VLAN 0 to HW filter on device bond4
[  334.201641][T10600] bridge0: port 3(bond4) entered blocking state
[  334.221198][T10600] bridge0: port 3(bond4) entered disabled state
[  334.227954][T10600] bond4: entered allmulticast mode
[  334.234900][T10600] bond4: entered promiscuous mode
[  334.243701][T10600] bridge0: port 3(bond4) entered blocking state
[  334.250102][T10600] bridge0: port 3(bond4) entered forwarding state
[  334.304746][   T13] bridge0: port 3(bond4) entered disabled state
[  334.648779][T10636] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  334.673698][T10636] bond5: entered promiscuous mode
[  334.679729][T10636] 8021q: adding VLAN 0 to HW filter on device bond5
[  334.694116][T10637] batadv1: entered promiscuous mode
[  334.699988][T10637] batadv1: entered allmulticast mode
[  334.707968][T10637] 8021q: adding VLAN 0 to HW filter on device batadv1
[  334.718962][T10637] bond5: (slave batadv1): making interface the new active one
[  334.729779][T10637] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  334.781219][T10641] xt_ecn: cannot match TCP bits for non-tcp packets
[  334.923642][T10654] netlink: 'syz.3.1287': attribute type 5 has an invalid length.
[  335.467998][T10675] __nla_validate_parse: 47 callbacks suppressed
[  335.468021][T10675] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1294'.
[  335.519195][T10649] lo speed is unknown, defaulting to 1000
[  335.666728][T10650] netlink: 'syz.0.1285': attribute type 6 has an invalid length.
[  335.773085][T10688] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1297'.
[  335.842920][T10692] lo: left promiscuous mode
[  335.851349][T10692] tunl0: left promiscuous mode
[  335.885487][T10692] gre0: left promiscuous mode
[  335.908892][T10692] gretap0: left promiscuous mode
[  335.921244][T10692] ip_vti0: left promiscuous mode
[  335.929257][T10692] ip6_vti0: left promiscuous mode
[  335.967332][ T8327] wlan1: Trigger new scan to find an IBSS to join
[  335.973992][T10692] sit0: left promiscuous mode
[  335.974157][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'.
[  336.022304][T10692] ip6tnl0: left promiscuous mode
[  336.036890][T10692] ip6gre0: left promiscuous mode
[  336.049303][T10692] syz_tun: left promiscuous mode
[  336.058218][T10692] ip6gretap0: left promiscuous mode
[  336.066886][T10692] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.074364][T10692] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.083568][T10692] bridge0: left promiscuous mode
[  336.099380][T10692] bond0: left promiscuous mode
[  336.104657][T10692] bond_slave_0: left promiscuous mode
[  336.121288][T10692] bond_slave_1: left promiscuous mode
[  336.160526][T10692] team0: left promiscuous mode
[  336.170887][T10692] team_slave_0: left promiscuous mode
[  336.178813][T10692] team_slave_1: left promiscuous mode
[  336.190092][T10692] geneve0: left promiscuous mode
[  336.200444][T10692] dummy0: left promiscuous mode
[  336.214403][T10692] nlmon0: left promiscuous mode
[  336.223837][T10692] caif0: left promiscuous mode
[  336.340148][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.354878][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.431462][T10692] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.443031][T10692] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.451616][T10707] IPVS: length: 78 != 8
[  336.456465][T10692] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.465362][T10692] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.496420][T10692] macvtap1: left promiscuous mode
[  336.501598][T10692] macvtap1: left allmulticast mode
[  336.518858][T10692] erspan0: left allmulticast mode
[  336.524605][T10692] macvtap2: left promiscuous mode
[  336.534192][T10692] macvtap2: left allmulticast mode
[  336.551522][T10692] bond2: left promiscuous mode
[  336.556738][T10692] bond2: left allmulticast mode
[  336.563577][T10692] vlan3: left allmulticast mode
[  336.569495][T10692] batadv0: left allmulticast mode
[  336.580195][   T10] lo speed is unknown, defaulting to 1000
[  336.672319][T10710] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1302'.
[  336.850374][T10714] netlink: 'syz.1.1302': attribute type 9 has an invalid length.
[  336.891498][T10677] lo speed is unknown, defaulting to 1000
[  337.046782][   T10] lo speed is unknown, defaulting to 1000
[  337.304464][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'.
[  337.353995][T10750] netlink: 'syz.1.1311': attribute type 4 has an invalid length.
[  337.434414][T10753] netlink: 'syz.1.1311': attribute type 11 has an invalid length.
[  337.444411][T10753] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1311'.
[  338.122590][T10765] ip6tnl2: entered promiscuous mode
[  338.310538][T10769] pim6reg: entered allmulticast mode
[  338.326893][T10769] pim6reg: left allmulticast mode
[  338.675786][T10782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.784657][T10786] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.174054][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'.
[  339.301788][T10791] netlink: 'syz.0.1325': attribute type 2 has an invalid length.
[  339.554450][T10790] hsr_slave_1 (unregistering): left promiscuous mode
[  339.582096][T10788] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1324'.
[  339.591718][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1324'.
[  339.639788][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1324'.
[  340.081735][T10805] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  340.092217][T10803] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.120423][T10803] 8021q: adding VLAN 0 to HW filter on device team0
[  340.131618][T10803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  340.168454][ T5843] block nbd1: Receive control failed (result -107)
[  340.189106][T10793] lo speed is unknown, defaulting to 1000
[  340.336878][T10809] netlink: 'syz.0.1330': attribute type 10 has an invalid length.
[  340.420614][T10809] team0: Device dummy0 failed to register rx_handler
[  340.440418][T10810] gretap0: left allmulticast mode
[  340.452791][T10810] gretap0: left promiscuous mode
[  340.463795][T10810] bridge0: port 1(gretap0) entered disabled state
[  340.509531][T10810] bond0: (slave bond_slave_0): Releasing backup interface
[  340.540196][T10810] bond0: (slave bond_slave_1): Releasing backup interface
[  340.563242][T10810] team0: Port device team_slave_0 removed
[  340.572240][T10810] team0: Port device team_slave_1 removed
[  340.585447][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.596729][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.620490][T10810] team0: Port device wlan1 removed
[  340.628525][T10810] bond1: (slave bond2): Releasing backup interface
[  340.683370][T10795] lo speed is unknown, defaulting to 1000
[  341.114256][T10813] lo speed is unknown, defaulting to 1000
[  341.304034][T10821] __nla_validate_parse: 6 callbacks suppressed
[  341.304056][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'.
[  341.694503][T10836] netlink: 'syz.4.1338': attribute type 10 has an invalid length.
[  341.708252][T10821] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.725476][T10836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1338'.
[  341.869024][T10829] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.916236][T10829] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  341.983045][T10829] bond4: (slave wireguard0): Error -95 calling set_mac_address
[  342.017579][T10836] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.027484][T10836] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.055234][T10836] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.063469][T10836] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.112358][T10836] team0: Port device geneve0 added
[  342.679809][T10850] lo speed is unknown, defaulting to 1000
[  342.708367][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'.
[  342.751888][T10863] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1346'.
[  343.296474][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'.
[  343.321728][T10878] netlink: 'syz.0.1342': attribute type 1 has an invalid length.
[  343.347463][T10878] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1342'.
[  343.457607][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1351'.
[  343.606760][T10877] lo speed is unknown, defaulting to 1000
[  343.685861][T10886] bridge0: port 4(gretap0) entered blocking state
[  343.692377][T10886] bridge0: port 4(gretap0) entered disabled state
[  343.725791][T10886] gretap0: entered allmulticast mode
[  343.732242][T10886] gretap0: entered promiscuous mode
[  343.931188][T10854] lo speed is unknown, defaulting to 1000
[  343.995619][T10894] openvswitch: netlink: Flow key attr not present in new flow.
[  344.490598][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'.
[  345.027495][T10928] syz_tun: entered allmulticast mode
[  345.043180][T10925] syz_tun: left allmulticast mode
[  345.176945][T10916] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  345.464904][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'.
[  345.501233][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'.
[  345.688536][T10948] lo speed is unknown, defaulting to 1000
[  346.099138][T10965] No such timeout policy "syz0"
[  346.748436][T10990] __nla_validate_parse: 1 callbacks suppressed
[  346.748461][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'.
[  346.838681][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'.
[  347.136084][T11020] ieee802154 phy0 wpan0: encryption failed: -22
[  347.209418][T11023] team0: No ports can be present during mode change
[  347.334970][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'.
[  347.663884][T11045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.699251][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'.
[  348.000067][T11069] sctp: [Deprecated]: syz.1.1401 (pid 11069) Use of int in max_burst socket option.
[  348.000067][T11069] Use struct sctp_assoc_value instead
[  348.169480][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'.
[  348.199232][T11085] openvswitch: netlink: Actions may not be safe on all matching packets
[  348.215641][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'.
[  348.235006][T11087] No such timeout policy "syz0"
[  348.254914][T11079] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1403'.
[  348.286346][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'.
[  348.296872][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'.
[  348.329687][T11087] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1403'.
[  348.348666][T11090] netlink: 'syz.1.1406': attribute type 29 has an invalid length.
[  348.398865][T11090] IPv6: sit1: Disabled Multicast RS
[  348.542173][T11086] netlink: 'syz.1.1406': attribute type 29 has an invalid length.
[  348.679501][T11111] geneve0: entered allmulticast mode
[  348.721761][T11118] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  349.010209][T11142] 0ªX¹¦À: renamed from caif0
[  349.038630][T11142] 0ªX¹¦À: entered allmulticast mode
[  349.048087][T11142] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  349.211284][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.281800][T11162] x_tables: duplicate underflow at hook 1
[  349.435672][T11169] netlink: 'syz.4.1429': attribute type 2 has an invalid length.
[  349.464870][T11169] netlink: 'syz.4.1429': attribute type 39 has an invalid length.
[  349.704068][T11179] lo speed is unknown, defaulting to 1000
[  350.008213][T11193] 
: renamed from bond0
[  350.186409][T11198] netlink: 'syz.1.1438': attribute type 10 has an invalid length.
[  350.257652][T11198] macvlan0: entered promiscuous mode
[  350.268297][T11198] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  350.389509][T11208] netlink: 'syz.0.1441': attribute type 3 has an invalid length.
[  350.537061][T11213] vlan0: entered promiscuous mode
[  350.626772][T11194] lo speed is unknown, defaulting to 1000
[  350.754185][T11221] bond5: entered promiscuous mode
[  350.762769][T11221] bond5: entered allmulticast mode
[  350.772589][T11221] 8021q: adding VLAN 0 to HW filter on device bond5
[  350.859961][T11221] netlink: 'syz.3.1444': attribute type 1 has an invalid length.
[  350.873412][T11184] x_tables: duplicate underflow at hook 2
[  350.937625][T11205] lo speed is unknown, defaulting to 1000
[  350.991857][T11229] batadv1: entered allmulticast mode
[  351.473417][T11239] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  351.524510][T11223] lo speed is unknown, defaulting to 1000
[  352.016208][T11257] __nla_validate_parse: 12 callbacks suppressed
[  352.016245][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'.
[  352.040743][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'.
[  352.052794][T11257] netlink: 'syz.4.1453': attribute type 1 has an invalid length.
[  352.072411][T11257] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1453'.
[  352.158349][ T5843] block nbd2: Receive control failed (result -107)
[  352.236516][T11261] syzkaller0: tun_chr_ioctl cmd 1074025677
[  352.267026][T11261] syzkaller0: linktype set to 512
[  352.297061][T11263] netlink: 'syz.2.1454': attribute type 10 has an invalid length.
[  352.427415][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'.
[  352.517581][T11263] netlink: 'syz.2.1454': attribute type 10 has an invalid length.
[  352.871798][T11283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1459'.
[  353.009428][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  353.028788][T11285] gretap1: entered promiscuous mode
[  353.034690][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'.
[  353.043922][T11292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'.
[  353.162152][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'.
[  353.648063][T11320] openvswitch: netlink: IP tunnel dst address not specified
[  353.658785][T11320] x_tables: duplicate underflow at hook 4
[  353.665331][T11321] validate_nla: 4 callbacks suppressed
[  353.665352][T11321] netlink: 'syz.3.1470': attribute type 1 has an invalid length.
[  353.689438][T11321] netlink: 'syz.3.1470': attribute type 10 has an invalid length.
[  353.692203][T11323] netlink: 'syz.2.1473': attribute type 7 has an invalid length.
[  353.699396][T11321] netlink: 'syz.3.1470': attribute type 4 has an invalid length.
[  353.740699][T11321] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1470'.
[  354.028579][T11346] openvswitch: netlink: Flow key attribute not present in set flow.
[  354.782994][T11384] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000
[  354.794671][T11378] gretap0: entered promiscuous mode
[  354.987900][T11389] netlink: 'syz.4.1492': attribute type 1 has an invalid length.
[  355.006537][ T8326] tipc: Subscription rejected, illegal request
[  355.159787][ T8326] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.215373][   T10] IPVS: starting estimator thread 0...
[  355.247369][ T8326] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.305229][T11403] IPVS: using max 32 ests per chain, 76800 per kthread
[  355.330643][T11408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.398362][ T8326] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.502714][ T8326] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.660293][ T8326] vlan2: left promiscuous mode
[  355.675295][ T8326] bond0: left promiscuous mode
[  355.683686][ T8326] bond_slave_0: left promiscuous mode
[  355.695508][ T8326] bond_slave_1: left promiscuous mode
[  355.708474][ T8326] bridge0: port 2(vlan2) entered disabled state
[  355.720750][ T8326] bridge_slave_0: left allmulticast mode
[  355.727822][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  355.738960][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  355.746143][ T8326] bridge_slave_0: left promiscuous mode
[  355.746395][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.765533][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  355.774051][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  355.783451][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  356.149326][ T8326] bond4 (unregistering): (slave gretap2): Releasing active interface
[  356.244580][T11435] netlink: 'syz.3.1506': attribute type 21 has an invalid length.
[  356.431330][T11444] xt_bpf: check failed: parse error
[  356.440190][T11444] netlink: 'syz.4.1508': attribute type 1 has an invalid length.
[  357.888419][ T5843] Bluetooth: hci1: command tx timeout
[  357.975591][ T8326] team0: Port device bond0 removed
[  357.990911][ T8326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.000300][ T8326] bond_slave_0: left allmulticast mode
[  358.008124][ T8326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  358.019727][ T8326] bond_slave_1: left allmulticast mode
[  358.026490][ T8326] bond0 (unregistering): Released all slaves
[  358.037225][ T8326] bond1 (unregistering): Released all slaves
[  358.139771][ T8326] bond2 (unregistering): Released all slaves
[  358.150685][ T8326] bond3 (unregistering): Released all slaves
[  358.244163][ T8326] bond4 (unregistering): Released all slaves
[  358.337662][ T8326] bond5 (unregistering): (slave batadv1): Releasing active interface
[  358.347714][ T8326] bond5 (unregistering): Released all slaves
[  358.370701][T11435] netlink: 'syz.3.1506': attribute type 4 has an invalid length.
[  358.383327][T11435] netlink: 'syz.3.1506': attribute type 3 has an invalid length.
[  358.391217][T11435] __nla_validate_parse: 11 callbacks suppressed
[  358.391233][T11435] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1506'.
[  358.431438][T11440] bond0: (slave macvlan0): Releasing backup interface
[  358.526633][T11448] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  358.565574][ T8326] Tq€: left promiscuous mode
[  358.718881][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'.
[  358.770156][ T8326] IPVS: stopping backup sync thread 9380 ...
[  358.876574][T11428] lo speed is unknown, defaulting to 1000
[  359.241590][T11480] syzkaller1: entered promiscuous mode
[  359.255201][T11480] syzkaller1: entered allmulticast mode
[  359.464221][T11428] chnl_net:caif_netlink_parms(): no params data found
[  359.688886][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'.
[  359.740569][T11496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1517'.
[  359.840709][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'.
[  359.967449][ T5843] Bluetooth: hci1: command tx timeout
[  360.180384][ T8326] batman_adv: batadv0: Interface deactivated: dummy0
[  360.205711][ T8326] batman_adv: batadv0: Removing interface: dummy0
[  360.236481][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.243964][ T8326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.278371][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.314580][ T8326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.325509][T11507] raw_sendmsg: syz.1.1522 forgot to set AF_INET. Fix it!
[  360.361132][ T8326] veth1_macvtap: left promiscuous mode
[  360.375405][ T8326] veth0_macvtap: left promiscuous mode
[  360.391266][ T8326] veth1_vlan: left promiscuous mode
[  360.401243][ T8326] veth0_vlan: left promiscuous mode
[  360.958704][ T8326] team0 (unregistering): Port device team_slave_1 removed
[  360.996657][ T8326] team0 (unregistering): Port device team_slave_0 removed
[  361.185223][ T8326] vxcan1 (unregistering): left allmulticast mode
[  361.282201][T11428] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.289529][T11428] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.297079][T11428] bridge_slave_0: entered allmulticast mode
[  361.304455][T11428] bridge_slave_0: entered promiscuous mode
[  361.321426][T11428] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.355515][T11428] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.366842][T11428] bridge_slave_1: entered allmulticast mode
[  361.384229][T11428] bridge_slave_1: entered promiscuous mode
[  361.464727][T11529] FAULT_INJECTION: forcing a failure.
[  361.464727][T11529] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  361.467871][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.488763][T11527] netlink: 'syz.0.1528': attribute type 4 has an invalid length.
[  361.505666][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.3.1527 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  361.505696][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  361.505723][T11529] Call Trace:
[  361.505729][T11529]  <TASK>
[  361.505737][T11529]  dump_stack_lvl+0x241/0x360
[  361.505780][T11529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.505803][T11529]  ? __pfx__printk+0x10/0x10
[  361.505833][T11529]  should_fail_ex+0x424/0x570
[  361.505860][T11529]  _copy_from_iter+0x211/0x1c70
[  361.505881][T11529]  ? __build_skb_around+0x247/0x3d0
[  361.505904][T11529]  ? __alloc_skb+0x298/0x480
[  361.505922][T11529]  ? __pfx__copy_from_iter+0x10/0x10
[  361.505942][T11529]  ? __pfx___alloc_skb+0x10/0x10
[  361.505962][T11529]  ? skb_put+0x114/0x1f0
[  361.505984][T11529]  netlink_sendmsg+0x73c/0xcd0
[  361.506009][T11529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.506028][T11529]  ? aa_sock_msg_perm+0x91/0x160
[  361.506055][T11529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.506071][T11529]  __sock_sendmsg+0x221/0x270
[  361.506089][T11529]  ____sys_sendmsg+0x523/0x860
[  361.506116][T11529]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.506136][T11529]  ? __fget_files+0x2a/0x420
[  361.506161][T11529]  ? __fget_files+0x2a/0x420
[  361.506189][T11529]  __sys_sendmsg+0x271/0x360
[  361.506214][T11529]  ? __pfx___sys_sendmsg+0x10/0x10
[  361.506268][T11529]  ? do_syscall_64+0xb6/0x230
[  361.506294][T11529]  do_syscall_64+0xf3/0x230
[  361.506318][T11529]  ? clear_bhb_loop+0x45/0xa0
[  361.506338][T11529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.506362][T11529] RIP: 0033:0x7f6ebf78d169
[  361.506381][T11529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.506396][T11529] RSP: 002b:00007f6ec0517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.506417][T11529] RAX: ffffffffffffffda RBX: 00007f6ebf9a5fa0 RCX: 00007f6ebf78d169
[  361.506429][T11529] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003
[  361.506440][T11529] RBP: 00007f6ec0517090 R08: 0000000000000000 R09: 0000000000000000
[  361.506451][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.506462][T11529] R13: 0000000000000000 R14: 00007f6ebf9a5fa0 R15: 00007ffed2bb9028
[  361.506484][T11529]  </TASK>
[  361.743361][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.887575][T11428] team0: Port device team_slave_0 added
[  361.896712][T11428] team0: Port device team_slave_1 added
[  361.925391][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.932400][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.958815][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.000137][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.014099][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.044787][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.061195][ T5843] Bluetooth: hci1: command tx timeout
[  362.135873][T11545] sock: sock_set_timeout: `syz.4.1535' (pid 11545) tries to set negative timeout
[  362.242710][T11428] hsr_slave_0: entered promiscuous mode
[  362.250018][T11428] hsr_slave_1: entered promiscuous mode
[  362.257533][T11428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.275543][T11428] Cannot create hsr debugfs directory
[  362.474171][T11556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1537'.
[  362.539685][T11556] netlink: 'syz.3.1537': attribute type 10 has an invalid length.
[  362.550396][T11561] FAULT_INJECTION: forcing a failure.
[  362.550396][T11561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.568151][T11561] CPU: 1 UID: 0 PID: 11561 Comm: syz.4.1539 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  362.568183][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  362.568196][T11561] Call Trace:
[  362.568204][T11561]  <TASK>
[  362.568212][T11561]  dump_stack_lvl+0x241/0x360
[  362.568248][T11561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.568276][T11561]  ? __pfx__printk+0x10/0x10
[  362.568304][T11561]  ? _copy_from_iter+0x1ad/0x1c70
[  362.568334][T11561]  should_fail_ex+0x424/0x570
[  362.568366][T11561]  _copy_from_iter+0x211/0x1c70
[  362.568393][T11561]  ? __build_skb_around+0x247/0x3d0
[  362.568422][T11561]  ? __alloc_skb+0x298/0x480
[  362.568445][T11561]  ? __pfx__copy_from_iter+0x10/0x10
[  362.568478][T11561]  ? __pfx___alloc_skb+0x10/0x10
[  362.568504][T11561]  ? skb_put+0x114/0x1f0
[  362.568532][T11561]  netlink_sendmsg+0x73c/0xcd0
[  362.568564][T11561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.568589][T11561]  ? aa_sock_msg_perm+0x91/0x160
[  362.568621][T11561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.568641][T11561]  __sock_sendmsg+0x221/0x270
[  362.568664][T11561]  ____sys_sendmsg+0x523/0x860
[  362.568699][T11561]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.568725][T11561]  ? __fget_files+0x2a/0x420
[  362.568756][T11561]  ? __fget_files+0x2a/0x420
[  362.568789][T11561]  __sys_sendmsg+0x271/0x360
[  362.568821][T11561]  ? __pfx___sys_sendmsg+0x10/0x10
[  362.568885][T11561]  ? do_syscall_64+0xb6/0x230
[  362.568916][T11561]  do_syscall_64+0xf3/0x230
[  362.568945][T11561]  ? clear_bhb_loop+0x45/0xa0
[  362.568969][T11561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.568989][T11561] RIP: 0033:0x7f9239f8d169
[  362.569006][T11561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.569024][T11561] RSP: 002b:00007f923ae0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.569047][T11561] RAX: ffffffffffffffda RBX: 00007f923a1a5fa0 RCX: 00007f9239f8d169
[  362.569062][T11561] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003
[  362.569075][T11561] RBP: 00007f923ae0e090 R08: 0000000000000000 R09: 0000000000000000
[  362.569088][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.569101][T11561] R13: 0000000000000000 R14: 00007f923a1a5fa0 R15: 00007ffd32df59e8
[  362.569128][T11561]  </TASK>
[  362.574314][T11556] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  362.907083][T11568] IPVS: length: 78 != 8
[  363.036782][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'.
[  363.084492][T11575] bond5: entered promiscuous mode
[  363.090354][T11575] 8021q: adding VLAN 0 to HW filter on device bond5
[  363.314609][T11575] bond5 (unregistering): Released all slaves
[  363.481566][T11602] netlink: 'syz.1.1549': attribute type 1 has an invalid length.
[  363.502147][T11602] netlink: 'syz.1.1549': attribute type 2 has an invalid length.
[  363.660054][T11428] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  363.685828][T11428] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  363.708323][T11428] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  363.727713][T11428] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  363.855370][T11428] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.882089][T11428] 8021q: adding VLAN 0 to HW filter on device team0
[  363.909403][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.916694][ T8311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.934015][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.941298][ T8335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.041064][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1556'.
[  364.056452][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1556'.
[  364.074611][T11626] netlink: 'syz.4.1556': attribute type 4 has an invalid length.
[  364.128543][ T5843] Bluetooth: hci1: command tx timeout
[  364.226157][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'.
[  364.317431][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.398381][T11642] netlink: 'syz.1.1560': attribute type 31 has an invalid length.
[  364.452060][T11428] veth0_vlan: entered promiscuous mode
[  364.460136][T11648] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1562'.
[  364.474545][T11648] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1562'.
[  364.484451][T11428] veth1_vlan: entered promiscuous mode
[  364.547264][T11428] veth0_macvtap: entered promiscuous mode
[  364.575011][T11428] veth1_macvtap: entered promiscuous mode
[  364.604355][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.607378][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'.
[  364.672227][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.695882][T11428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.705117][T11428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.713861][T11428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.735252][T11428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.875800][ T8337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.883770][ T8337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.946193][ T8322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.963251][ T8322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.060724][T11679] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1570'.
[  365.436264][T11684] lo speed is unknown, defaulting to 1000
[  365.823990][T11701] team0: No ports can be present during mode change
[  366.048963][T11712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'.
[  366.063185][T11714] openvswitch: netlink: Multiple metadata blocks provided
[  366.121544][T11714] tun0: tun_chr_ioctl cmd 1074025677
[  366.136400][T11714] tun0: linktype set to 804
[  366.246396][T11729] tap0: tun_chr_ioctl cmd 1074025677
[  366.252744][T11729] tap0: linktype set to 270
[  366.283325][T11731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  366.658359][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  366.667119][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  366.676069][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  366.687998][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  366.696462][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.779511][T11741] tun0: tun_chr_ioctl cmd 1074025677
[  366.787965][T11741] tun0: linktype set to 769
[  366.798233][T11741] tun0: tun_chr_ioctl cmd 1074025673
[  366.831971][T11738] lo speed is unknown, defaulting to 1000
[  367.053688][T11738] chnl_net:caif_netlink_parms(): no params data found
[  367.312194][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'.
[  367.356590][T11738] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.391198][T11738] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.429491][T11738] bridge_slave_0: entered allmulticast mode
[  367.484239][T11738] bridge_slave_0: entered promiscuous mode
[  367.544666][T11738] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.561706][T11738] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.569882][T11738] bridge_slave_1: entered allmulticast mode
[  367.577543][T11738] bridge_slave_1: entered promiscuous mode
[  367.643229][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'.
[  367.661623][T11773] netlink: 'syz.4.1591': attribute type 7 has an invalid length.
[  367.699878][T11738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.758118][T11738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.008565][T11738] team0: Port device team_slave_0 added
[  368.089800][T11738] team0: Port device team_slave_1 added
[  368.143695][T11792] netlink: 'syz.4.1595': attribute type 2 has an invalid length.
[  368.185573][T11738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.211845][T11738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.299928][T11738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.341626][T11738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.375188][T11738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.417054][T11738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.530810][T11808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  368.651080][T11738] hsr_slave_0: entered promiscuous mode
[  368.691982][T11738] hsr_slave_1: entered promiscuous mode
[  368.713469][T11738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.765415][ T5843] Bluetooth: hci1: command tx timeout
[  368.814284][T11738] Cannot create hsr debugfs directory
[  369.287960][T11738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.311012][T11822] SET target dimension over the limit!
[  369.456091][T11829] __nla_validate_parse: 3 callbacks suppressed
[  369.456112][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'.
[  369.488690][T11738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.518642][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'.
[  369.572914][T11738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.706409][T11738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.992716][T11835] lo speed is unknown, defaulting to 1000
[  370.114660][T11738] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  370.172854][T11738] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  370.281668][T11738] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  370.348721][T11738] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  370.397303][T11854] netlink: 'syz.4.1615': attribute type 29 has an invalid length.
[  370.435162][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'.
[  370.535295][T11864] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1618'.
[  370.610552][T11738] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.644976][T11738] 8021q: adding VLAN 0 to HW filter on device team0
[  370.681614][T11871] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.721184][T11871] team0: Port device bond0 added
[  370.752160][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.759393][ T8335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.778760][T11871] bridge0: port 1(team0) entered blocking state
[  370.790342][T11871] bridge0: port 1(team0) entered disabled state
[  370.797194][T11871] team0: entered allmulticast mode
[  370.802349][T11871] geneve0: entered allmulticast mode
[  370.808376][T11871] bond0: entered allmulticast mode
[  370.821087][T11871] team0: entered promiscuous mode
[  370.826456][T11871] geneve0: entered promiscuous mode
[  370.832809][T11871] bond0: entered promiscuous mode
[  370.846222][ T5843] Bluetooth: hci1: command tx timeout
[  370.869418][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.877009][ T8335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.033861][T11883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.069971][T11884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  371.220741][T11898] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1627'.
[  371.238557][T11901] Cannot find del_set index 2 as target
[  371.242866][T11738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.256360][T11901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1626'.
[  371.268300][T11903] Cannot find del_set index 2 as target
[  371.317884][T11738] veth0_vlan: entered promiscuous mode
[  371.353335][T11738] veth1_vlan: entered promiscuous mode
[  371.414886][T11738] veth0_macvtap: entered promiscuous mode
[  371.451888][T11738] veth1_macvtap: entered promiscuous mode
[  371.528147][T11738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.569279][T11738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.606408][T11738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.620865][T11738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.655316][T11738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.676807][T11738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.703617][T11738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.712835][T11738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.723056][T11738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.734591][T11738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.867796][T11931] netlink: 'syz.0.1634': attribute type 6 has an invalid length.
[  371.921316][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.937522][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.994159][T11935] netlink: 'syz.1.1635': attribute type 1 has an invalid length.
[  371.995734][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.014128][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'.
[  372.036045][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.128534][T11937] unsupported nlmsg_type 40
[  372.171361][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'.
[  372.447104][T11947] lo speed is unknown, defaulting to 1000
[  372.908450][T11969] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  373.035906][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'.
[  373.121496][T11975] netlink: 'syz.1.1646': attribute type 3 has an invalid length.
[  373.150074][T11979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'.
[  373.386321][T11988] bond5: entered promiscuous mode
[  373.395841][T11988] bond5: entered allmulticast mode
[  373.411625][T11989] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  373.419933][T11988] 8021q: adding VLAN 0 to HW filter on device bond5
[  373.696461][T12006] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  373.747023][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.757430][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.771737][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.803363][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.825353][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  374.123756][T12010] lo speed is unknown, defaulting to 1000
[  374.401250][T12031] lo speed is unknown, defaulting to 1000
[  374.528266][T12048] __nla_validate_parse: 1 callbacks suppressed
[  374.528288][T12048] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1665'.
[  374.693081][T12055] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1668'.
[  374.714198][T12010] chnl_net:caif_netlink_parms(): no params data found
[  374.878364][T12010] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.891189][T12010] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.900213][T12010] bridge_slave_0: entered allmulticast mode
[  374.908749][T12010] bridge_slave_0: entered promiscuous mode
[  374.909110][T12068] netlink: 'syz.4.1670': attribute type 1 has an invalid length.
[  374.922563][T12010] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.922694][T12010] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.943256][T12010] bridge_slave_1: entered allmulticast mode
[  374.950975][T12010] bridge_slave_1: entered promiscuous mode
[  374.981607][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.011828][T12068] bond5: entered promiscuous mode
[  375.017226][T12068] 8021q: adding VLAN 0 to HW filter on device bond5
[  375.026607][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.065726][T12010] team0: Port device team_slave_0 added
[  375.080112][T12010] team0: Port device team_slave_1 added
[  375.207359][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.229413][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.296470][T12087] netlink: 'syz.3.1675': attribute type 11 has an invalid length.
[  375.301053][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.304713][T12087] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1675'.
[  375.322271][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.332267][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.359405][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.408019][T12010] hsr_slave_0: entered promiscuous mode
[  375.415507][T12010] hsr_slave_1: entered promiscuous mode
[  375.447346][T12010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  375.460443][T12010] Cannot create hsr debugfs directory
[  375.710096][T12010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.823440][T12105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  375.885420][ T5843] Bluetooth: hci1: command tx timeout
[  375.887461][T12010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.831301][T12010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.973079][T12010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.984679][ T5843] Bluetooth: hci1: command tx timeout
[  378.093115][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1689'.
[  378.152349][T12142] can: request_module (can-proto-3) failed.
[  378.312787][T12010] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  378.335489][T12010] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  378.350630][T12010] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  378.362760][T12010] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  378.390326][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'.
[  378.401483][T12155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.421160][T12155] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1692'.
[  378.457890][T12010] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.474215][T12010] 8021q: adding VLAN 0 to HW filter on device team0
[  378.487077][T12156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.488153][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.504045][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.521395][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.528620][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.568445][T12155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.572063][T12010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  378.687651][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.721555][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.759982][T12010] veth0_vlan: entered promiscuous mode
[  378.777552][T12010] veth1_vlan: entered promiscuous mode
[  378.802552][T12010] veth0_macvtap: entered promiscuous mode
[  378.811358][T12010] veth1_macvtap: entered promiscuous mode
[  378.829986][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.855083][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.864950][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.880593][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.892148][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.916358][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.963285][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.973261][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.989196][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.003706][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.007039][T12167] xt_ecn: cannot match TCP bits for non-tcp packets
[  379.031845][T12166] netlink: 'syz.1.1695': attribute type 10 has an invalid length.
[  379.042072][T12010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.051781][T12010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.062030][T12010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.070917][T12010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.096507][T12166] veth1_macvtap: left promiscuous mode
[  379.115995][T12166] team0: Device veth1_macvtap failed to register rx_handler
[  379.158108][T12166] netlink: 'syz.1.1695': attribute type 1 has an invalid length.
[  379.194545][T12166] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1695'.
[  379.208269][T12169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1695'.
[  379.321885][ T8322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.344897][ T8322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.387138][ T8337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.416789][ T8337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.430031][T12181] ip6tnl2: entered promiscuous mode
[  379.595873][T12192] netlink: 'syz.4.1703': attribute type 8 has an invalid length.
[  379.780906][T12188] lo speed is unknown, defaulting to 1000
[  380.047730][ T5836] Bluetooth: hci1: command tx timeout
[  380.294196][T12203] lo speed is unknown, defaulting to 1000
[  380.600651][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'.
[  380.625581][T12228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  380.640944][T12228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  380.711162][T12232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'.
[  381.086886][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'.
[  381.120032][T12245] vlan3: entered promiscuous mode
[  381.128836][T12245] hsr0: entered promiscuous mode
[  381.159823][T12203] netlink: 'syz.1.1706': attribute type 12 has an invalid length.
[  381.168416][T12203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1706'.
[  381.371376][T12261] bond0: entered promiscuous mode
[  381.378406][T12261] batadv0: entered promiscuous mode
[  381.384614][T12261] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  381.401111][T12261] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  381.413638][T12261] 8021q: adding VLAN 0 to HW filter on device hsr2
[  381.429243][T12261] bond0: left promiscuous mode
[  381.445315][T12261] batadv0: left promiscuous mode
[  381.503805][T12263] vlan0: left promiscuous mode
[  381.509178][T12263] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  381.614435][T12266] lo: entered allmulticast mode
[  381.619911][T12266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.649506][T12266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.782017][T12275] batadv0: entered promiscuous mode
[  381.811450][T12275] batadv_slave_0: entered promiscuous mode
[  381.825569][T12275] batadv_slave_0: left promiscuous mode
[  381.852453][T12275] batadv0: left promiscuous mode
[  381.939632][T12283] openvswitch: netlink: Flow actions attr not present in new flow.
[  382.240541][T12294] lo speed is unknown, defaulting to 1000
[  418.375278][ T5915] ==================================================================
[  418.383745][ T5915] BUG: KASAN: slab-use-after-free in __mutex_lock+0x813/0x1000
[  418.391339][ T5915] Read of size 8 at addr ffff88804dd5d320 by task kworker/1:6/5915
[  418.399252][ T5915] 
[  418.401587][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: kworker/1:6 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  418.401608][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  418.401619][ T5915] Workqueue: events l2cap_chan_timeout
[  418.401640][ T5915] Call Trace:
[  418.401647][ T5915]  <TASK>
[  418.401654][ T5915]  dump_stack_lvl+0x241/0x360
[  418.401677][ T5915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.401696][ T5915]  ? __virt_addr_valid+0x183/0x530
[  418.401715][ T5915]  ? rcu_is_watching+0x15/0xb0
[  418.401731][ T5915]  ? __virt_addr_valid+0x183/0x530
[  418.401749][ T5915]  ? lock_release+0x4e/0x3e0
[  418.401772][ T5915]  ? __virt_addr_valid+0x183/0x530
[  418.401790][ T5915]  ? __virt_addr_valid+0x183/0x530
[  418.401809][ T5915]  print_report+0x16e/0x5b0
[  418.401829][ T5915]  ? __virt_addr_valid+0x183/0x530
[  418.401847][ T5915]  ? __virt_addr_valid+0x183/0x530
[  418.401864][ T5915]  ? __virt_addr_valid+0x45f/0x530
[  418.401882][ T5915]  ? __phys_addr+0xba/0x170
[  418.401900][ T5915]  ? __mutex_lock+0x813/0x1000
[  418.401921][ T5915]  kasan_report+0x143/0x180
[  418.401940][ T5915]  ? __mutex_lock+0x813/0x1000
[  418.401963][ T5915]  __mutex_lock+0x813/0x1000
[  418.401984][ T5915]  ? __mutex_lock+0x5ed/0x1000
[  418.402007][ T5915]  ? l2cap_chan_timeout+0x63/0x360
[  418.402022][ T5915]  ? __pfx___mutex_lock+0x10/0x10
[  418.402041][ T5915]  ? __lock_acquire+0xad5/0xd80
[  418.402069][ T5915]  l2cap_chan_timeout+0x63/0x360
[  418.402085][ T5915]  ? process_scheduled_works+0x9cb/0x18e0
[  418.402099][ T5915]  process_scheduled_works+0xac3/0x18e0
[  418.402124][ T5915]  ? __pfx_process_scheduled_works+0x10/0x10
[  418.402143][ T5915]  ? assign_work+0x367/0x3d0
[  418.402158][ T5915]  worker_thread+0x870/0xd30
[  418.402179][ T5915]  ? __kthread_parkme+0x169/0x1d0
[  418.402196][ T5915]  ? __pfx_worker_thread+0x10/0x10
[  418.402212][ T5915]  kthread+0x7a9/0x920
[  418.402231][ T5915]  ? __pfx_worker_thread+0x10/0x10
[  418.402246][ T5915]  ? __pfx_kthread+0x10/0x10
[  418.402263][ T5915]  ? __pfx_kthread+0x10/0x10
[  418.402280][ T5915]  ? __pfx_kthread+0x10/0x10
[  418.402300][ T5915]  ? __pfx_kthread+0x10/0x10
[  418.402317][ T5915]  ? _raw_spin_unlock_irq+0x23/0x50
[  418.402334][ T5915]  ? lockdep_hardirqs_on+0x9d/0x150
[  418.402353][ T5915]  ? __pfx_kthread+0x10/0x10
[  418.402372][ T5915]  ret_from_fork+0x4b/0x80
[  418.402386][ T5915]  ? __pfx_kthread+0x10/0x10
[  418.402405][ T5915]  ret_from_fork_asm+0x1a/0x30
[  418.402423][ T5915]  </TASK>
[  418.402429][ T5915] 
[  418.641668][ T5915] Allocated by task 12135:
[  418.646095][ T5915]  kasan_save_track+0x3f/0x80
[  418.650793][ T5915]  __kasan_kmalloc+0x9d/0xb0
[  418.655393][ T5915]  __kmalloc_cache_noprof+0x236/0x370
[  418.660779][ T5915]  l2cap_conn_add+0xa9/0x8e0
[  418.665386][ T5915]  l2cap_chan_connect+0x627/0xea0
[  418.670416][ T5915]  l2cap_sock_connect+0x622/0x950
[  418.675551][ T5915]  kernel_connect+0x11b/0x190
[  418.680247][ T5915]  rfcomm_dlc_open+0xad9/0x10d0
[  418.685104][ T5915]  rfcomm_sock_connect+0x305/0x610
[  418.690227][ T5915]  __sys_connect+0x28c/0x2d0
[  418.694829][ T5915]  __x64_sys_connect+0x7a/0x90
[  418.699595][ T5915]  do_syscall_64+0xf3/0x230
[  418.704108][ T5915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.710001][ T5915] 
[  418.712323][ T5915] Freed by task 12010:
[  418.716389][ T5915]  kasan_save_track+0x3f/0x80
[  418.721071][ T5915]  kasan_save_free_info+0x40/0x50
[  418.726098][ T5915]  __kasan_slab_free+0x59/0x70
[  418.730867][ T5915]  kfree+0x198/0x430
[  418.734777][ T5915]  hci_conn_hash_flush+0xff/0x240
[  418.739806][ T5915]  hci_dev_close_sync+0xa8d/0x1260
[  418.744926][ T5915]  hci_unregister_dev+0x20b/0x510
[  418.749956][ T5915]  vhci_release+0x80/0xd0
[  418.754720][ T5915]  __fput+0x3e9/0x9f0
[  418.758709][ T5915]  task_work_run+0x251/0x310
[  418.763312][ T5915]  do_exit+0xa2a/0x2940
[  418.767489][ T5915]  do_group_exit+0x207/0x2c0
[  418.772097][ T5915]  __x64_sys_exit_group+0x3f/0x40
[  418.777147][ T5915]  x64_sys_call+0x26c3/0x26d0
[  418.781836][ T5915]  do_syscall_64+0xf3/0x230
[  418.786356][ T5915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.792276][ T5915] 
[  418.794614][ T5915] The buggy address belongs to the object at ffff88804dd5d000
[  418.794614][ T5915]  which belongs to the cache kmalloc-1k of size 1024
[  418.808769][ T5915] The buggy address is located 800 bytes inside of
[  418.808769][ T5915]  freed 1024-byte region [ffff88804dd5d000, ffff88804dd5d400)
[  418.822675][ T5915] 
[  418.825003][ T5915] The buggy address belongs to the physical page:
[  418.831431][ T5915] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4dd58
[  418.840196][ T5915] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  418.848704][ T5915] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  418.856257][ T5915] page_type: f5(slab)
[  418.860247][ T5915] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[  418.868846][ T5915] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  418.877436][ T5915] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[  418.886110][ T5915] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  418.894786][ T5915] head: 00fff00000000003 ffffea0001375601 ffffffffffffffff 0000000000000000
[  418.903455][ T5915] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  418.912125][ T5915] page dumped because: kasan: bad access detected
[  418.918545][ T5915] page_owner tracks the page as allocated
[  418.924254][ T5915] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8326, tgid 8326 (kworker/u8:22), ts 275885836396, free_ts 24616430724
[  418.943710][ T5915]  post_alloc_hook+0x1f4/0x240
[  418.948510][ T5915]  get_page_from_freelist+0x3695/0x37e0
[  418.954082][ T5915]  __alloc_frozen_pages_noprof+0x2c5/0x7b0
[  418.959912][ T5915]  alloc_pages_mpol+0x339/0x690
[  418.964777][ T5915]  allocate_slab+0x8f/0x3a0
[  418.969286][ T5915]  ___slab_alloc+0xc3b/0x1500
[  418.973978][ T5915]  __slab_alloc+0x58/0xa0
[  418.978338][ T5915]  __kmalloc_noprof+0x2ea/0x4d0
[  418.983218][ T5915]  ieee802_11_parse_elems_full+0x16d/0x2f10
[  418.989225][ T5915]  ieee80211_inform_bss+0x166/0x10e0
[  418.994532][ T5915]  cfg80211_inform_single_bss_data+0xf5f/0x1ed0
[  419.000788][ T5915]  cfg80211_inform_bss_data+0x3c5/0x5860
[  419.006432][ T5915]  cfg80211_inform_bss_frame_data+0x3c5/0x720
[  419.012509][ T5915]  ieee80211_bss_info_update+0x8ac/0xbc0
[  419.018144][ T5915]  ieee80211_ibss_rx_queued_mgmt+0x19ce/0x2e20
[  419.024306][ T5915]  ieee80211_iface_work+0x933/0x1100
[  419.029602][ T5915] page last free pid 1 tgid 1 stack trace:
[  419.035404][ T5915]  free_frozen_pages+0xe16/0x10f0
[  419.040517][ T5915]  free_contig_range+0x152/0x430
[  419.045497][ T5915]  destroy_args+0x94/0x4b0
[  419.049920][ T5915]  debug_vm_pgtable+0x555/0x590
[  419.054770][ T5915]  do_one_initcall+0x24a/0x940
[  419.059540][ T5915]  do_initcall_level+0x157/0x210
[  419.064503][ T5915]  do_initcalls+0x71/0xd0
[  419.068830][ T5915]  kernel_init_freeable+0x432/0x5d0
[  419.074050][ T5915]  kernel_init+0x1d/0x2b0
[  419.078427][ T5915]  ret_from_fork+0x4b/0x80
[  419.082847][ T5915]  ret_from_fork_asm+0x1a/0x30
[  419.087612][ T5915] 
[  419.089931][ T5915] Memory state around the buggy address:
[  419.095555][ T5915]  ffff88804dd5d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.103611][ T5915]  ffff88804dd5d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.111672][ T5915] >ffff88804dd5d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.119729][ T5915]                                ^
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  419.124831][ T5915]  ffff88804dd5d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.132890][ T5915]  ffff88804dd5d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.140948][ T5915] ==================================================================
[  419.150621][ T5915] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  419.157854][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: kworker/1:6 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  419.169593][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  419.179763][ T5915] Workqueue: events l2cap_chan_timeout
[  419.185255][ T5915] Call Trace:
[  419.188546][ T5915]  <TASK>
[  419.191491][ T5915]  dump_stack_lvl+0x241/0x360
[  419.196196][ T5915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.201416][ T5915]  ? __pfx__printk+0x10/0x10
[  419.206039][ T5915]  ? vscnprintf+0x5d/0x90
[  419.210399][ T5915]  panic+0x349/0x880
[  419.214327][ T5915]  ? check_panic_on_warn+0x21/0xb0
[  419.219467][ T5915]  ? __pfx_panic+0x10/0x10
[  419.223913][ T5915]  ? _raw_spin_unlock_irqrestore+0xd9/0x140
[  419.229834][ T5915]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  419.235754][ T5915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  419.242113][ T5915]  ? print_report+0x519/0x5b0
[  419.246805][ T5915]  check_panic_on_warn+0x86/0xb0
[  419.251839][ T5915]  ? __mutex_lock+0x813/0x1000
[  419.256615][ T5915]  end_report+0x77/0x160
[  419.260867][ T5915]  kasan_report+0x154/0x180
[  419.265382][ T5915]  ? __mutex_lock+0x813/0x1000
[  419.270185][ T5915]  __mutex_lock+0x813/0x1000
[  419.274786][ T5915]  ? __mutex_lock+0x5ed/0x1000
[  419.279665][ T5915]  ? l2cap_chan_timeout+0x63/0x360
[  419.284804][ T5915]  ? __pfx___mutex_lock+0x10/0x10
[  419.289856][ T5915]  ? __lock_acquire+0xad5/0xd80
[  419.294761][ T5915]  l2cap_chan_timeout+0x63/0x360
[  419.299711][ T5915]  ? process_scheduled_works+0x9cb/0x18e0
[  419.305457][ T5915]  process_scheduled_works+0xac3/0x18e0
[  419.311029][ T5915]  ? __pfx_process_scheduled_works+0x10/0x10
[  419.317032][ T5915]  ? assign_work+0x367/0x3d0
[  419.321645][ T5915]  worker_thread+0x870/0xd30
[  419.326252][ T5915]  ? __kthread_parkme+0x169/0x1d0
[  419.331292][ T5915]  ? __pfx_worker_thread+0x10/0x10
[  419.336417][ T5915]  kthread+0x7a9/0x920
[  419.340507][ T5915]  ? __pfx_worker_thread+0x10/0x10
[  419.345629][ T5915]  ? __pfx_kthread+0x10/0x10
[  419.350318][ T5915]  ? __pfx_kthread+0x10/0x10
[  419.354919][ T5915]  ? __pfx_kthread+0x10/0x10
[  419.359521][ T5915]  ? __pfx_kthread+0x10/0x10
[  419.364122][ T5915]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.369326][ T5915]  ? lockdep_hardirqs_on+0x9d/0x150
[  419.374531][ T5915]  ? __pfx_kthread+0x10/0x10
[  419.379130][ T5915]  ret_from_fork+0x4b/0x80
[  419.383547][ T5915]  ? __pfx_kthread+0x10/0x10
[  419.388142][ T5915]  ret_from_fork_asm+0x1a/0x30
[  419.392913][ T5915]  </TASK>
[  419.396188][ T5915] Kernel Offset: disabled
[  419.400516][ T5915] Rebooting in 86400 seconds..