last executing test programs:

3.709625554s ago: executing program 2 (id=3856):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4)

3.614470175s ago: executing program 2 (id=3859):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc3})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000006, 0x3032, r0, 0x0)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1f237e9856d4b833, 0x0, 0x0)
socket$inet6(0xa, 0x80000, 0x400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8431}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x881}, 0x8001)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008884}, 0x0)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000200)=r1)

3.431466021s ago: executing program 2 (id=3863):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xfe85}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0xa6}, {&(0x7f0000000240)=""/159, 0x9f}], 0xb}, 0x40002002)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x2, 0x12020, 0x0)

3.11857645s ago: executing program 2 (id=3870):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0)

2.988043415s ago: executing program 2 (id=3874):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a)
r7 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe], 0x0, [0x5, 0x4, 0x7ff, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)

2.866014311s ago: executing program 4 (id=3877):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3f}, 0x5f)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x3d, 0x4}})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r0, 0x4f806000)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
getsockopt$ax25_int(r3, 0x101, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r7=>0x0}, 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r9=>0x0}, 0x8)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r9, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r10, 0x0, 0x0}, 0x10)
ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000000)={0x1, 0x2, '\x00', 0x0, 0xfd})
close(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x4004050)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x200000000080, 0x200000000080, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)}, 0x78)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000080)=0x7, 0x4)

2.715546497s ago: executing program 1 (id=3879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async)

2.715026259s ago: executing program 0 (id=3880):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720a107d009500"/17], &(0x7f0000000480)='GPL\x00'}, 0x94)

2.636706709s ago: executing program 4 (id=3881):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0)

2.551115021s ago: executing program 1 (id=3883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x100}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44088}, 0x8000)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x80, 0x800)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000000) (async)
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x804) (async)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000400)={0x1, 0x1, 0x6, 0x80, @vifc_lcl_addr=@empty, @empty}, 0x10) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4f6ed07e}, @CTA_MARK_MASK={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x15) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580))
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x12c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3490}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffff891}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)) (async, rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000404}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x1412, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xdc, 0x1, 0xa, 0x3, 0x0, 0x0, {0x378f286b9a8ebb34, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "6e92af85155e259654e0258542df02fd66c9cb1b920ebbb827d6c899cd0376424b8a987ade451eed50de82808698c508d2b0b9f6ae7e4d140279eead3a40763920e66b60558e82cdfac9caeccd09d7126a5098acafbb7029e2e42edba1f53cf07d432c6ad4c542825ce68c6e4db5263a615336230661d012605102d36d1080f819d4140888c917226735d680ae7e069dba7dee992413bf860e2a9a14b4cb45ca973f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x2000) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000ac0)={<r5=>r4, 0x3ff, 0x80, 0x1})
r6 = openat$cgroup_ro(r5, &(0x7f0000000b00)='cpuacct.usage_all\x00', 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r5)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008011}, 0x8080) (async)
vmsplice(r0, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="d7333b165aa79973d1d2ff6b5dcf46c4a106af15ec4176f54189cfb2b44f9d485fa5b1b1916bff5d87823cfb0192ff65daad1f8688b98a847350a52b7cddc6d245635a1d4993898359067155959fb9fe3d9e126c2ce7450309dd75", 0x5b}, {&(0x7f0000000d40)="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", 0xff}, {&(0x7f0000000e40)="d2aaaf936545bb5a0b91a68d1a98345f641d642f0909cb05ee7e2c396c33a58ffe95805ef99a97b66695cee289fafa61510d5f7c932cea78aaf3335c5fd12cb143bb7bea9a6328f7c3879f6569e4cb65e83c97270617d94b8637cc235a14d31fa74642206e7db6f9098b868d71e8806d55c2e4243f3c744ee3302305c278211a98650210ef2a35662d15b827835a615b1ca59c9fbf54b3c8e731167697a4250f024780c21ed7237732c66fb6f72cf3fa3594679ff0eb60b6f0a76a", 0xbb}, {&(0x7f0000000f00)="0b962865f6f0a4f62abf1458f79ade2796a19710a87a8362184189df7a20e9df900354b95472e943569cd0a1804904bd9e5664c9f4e80583426124", 0x3b}], 0x4, 0x2) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000010c0)=0x5, 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$vsock_stream(r6, &(0x7f0000001100)={0x28, 0x0, 0x2711}, 0x10) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000001140)=0x4, 0x4) (rerun: 64)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001180)={<r9=>0x0, 0x3}, &(0x7f00000011c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000001200)={r9, 0x92}, &(0x7f0000001240)=0x8) (async, rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f0000001700)={&(0x7f0000001280), 0xc, &(0x7f00000016c0)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x21c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x46, 0x7, 0x1, 0x0, "642d445502896989c6c974a0eee71f27d21aa1d66b7ad03b0ddc86062699a271663fb2e45e50c08dc0927ecfecaf6f2d53866a3eb79adbef179f0fba185fdd0fe076"}, @NFTA_RULE_USERDATA={0x28, 0x7, 0x1, 0x0, "e02f7fd272bdfb7b3c16832a71c03e46710e1c15a29af874cf152687d748f370120910dd"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3c4}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) (rerun: 64)

2.514197916s ago: executing program 0 (id=3884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xeb}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa9}, @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4844) (fail_nth: 3)

2.507251079s ago: executing program 3 (id=3885):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r2 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000080000000000000000010000181200006c356de1e16e8d4c2c711cc141e44ed99f1f686e9642fcc1327751ac70f8ddca6e0f3f43a3745a6901c962735c99903d1531ab86ea3611bf681e74f0015f6f675f8df9b7fedae98aa65a82940c613e788c3c627e25de4e6becd5f4ab1510", @ANYRES32=r1, @ANYBLOB="0000000000000000dc9cfcff000000001831000003000000000000000000000085100000040000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xb, 0xa6, &(0x7f00000003c0)=""/166, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x10, 0xe0a6, 0x80000001}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000480)=[{0x1, 0x4, 0x0, 0x9}, {0x3, 0x1, 0xe, 0x5}, {0x2, 0x1, 0xb, 0xc}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x2, 0xc, 0xb}, {0x1, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x10, 0xa}, {0x3, 0x4, 0xb, 0x6}, {0x1, 0x1, 0xf, 0x7}], 0x10, 0x50000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x60, 0x9d, &(0x7f0000000640)="1285f47df98afd6ffd6a756e17edeb7c2101212c478bb219b122a354c97d9606f1b2072ed912c64374e0816dedae1a52703922ecfbd37990cab039efbaccf689b621929aadba9bdeeea7d03f9c4373ac9db1d5aa895e30c98398e77a2d9cd260", &(0x7f00000006c0)=""/157, 0x9d, 0x0, 0x21d, 0x11, &(0x7f0000003140)="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", &(0x7f0000000800)="e8c99073408f9fc401587b92f00d37eae5", 0xd, 0x0, 0xfffff800}, 0x50) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000f00)="5590794c34ad06e70f23eeb1bcba954e805d0b72dde0cf2e4c5b8152859d80dd4a59ebbedda6ef04a4ff52d34e61ff245ba96ef769cdd5bb351354ddf970045dc7a6f6c8c5d68801b8e55d7e71a37e623a0b54f9ccc7fbbdd6777090f2f63ce47d9d29c0481620fac741bc8633771846b04c0f87b8347ba84fe6cc3bb05ba9226feb51167d6d6fe20035aa6a5e89250114bf9f24", &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)="7924c587e2944d69c2a915c1d84e85014a45ffa1689769bf46d8de7d3db03f2f756a4684851eee270a5595975a8b804d3efb03fecab22f3764fd70225b7e21019c50c0f2a004797c4de22dc59812e327e8111c7c", &(0x7f0000002040)="d95b25a001f15fe7353d79b9b336c29a999298c32cd833b6eab079c378b3637d160c8909be0c927cb4d1e0b46e477cbd6573eba1fc928362c9ddc4b5bf51262d147fb2177c87f0d3d203fa7c3333227617ca34dae4a66a09782c03aa7284aa19c2c2dce60d60e4305c74528c3f620f5257ceea78450b0f5615c0bf5132181aaf0e99185995cd5026615da45f3b296ad1d805eeacee3eb8bd15cb6aa824eea49e827416abd11566d594dd2a449f8f9b8e68c5d91aae63dd89350a8577f9cd71dab30cc0e68ee7545522571b7e3e54d278b152f3e46253ea410d1376023522d10ff406043df8645df8609bfbb840ca3333c722a756fff6bbfd18f33f5fcc6e94de4d50777086b55113be30a2e499459f66c385512c31d41687507f26bb972fe68d9eb96ac13d510a05416e7ff0af83336116c4a7385e2a2082b1c798b03e5b93f61aedd1d18e6c863a34850770a5380b298ae951eafb4ced384a7d5256425347780da61bfc441a6d448d3be8ae2707da3b930ff789ecf56f071f0e300d218de36d5ec9accb4874576bd867465dd11063739acc76be499a724f7834ab065f6084143fd06ebc81aa73cb12f2c4daad81b64a954b3aed33d3cd4b33134fcec202c9a7e36191a1166b3955f9c5fc7bb4dd4b0e047354d60788ae9612a98a939685051e87390a27600ba2d00d49c4d1ac5891bc610b8471addb6493a2cafa84dd41def2d2ebfd7e7cefd010773db8c64260bcfea0f7663949d43b535e042f444c30af5fac9c63cf69e11346fdbac5ab40b51e0d98f34e021bc8d157443c727ebb62b36ac51334c993dc4c221f01878b5142d51044fd1b9669a150ae2246a2841b8b5ae584af8a52dc5b332376c336068d04ede10aa56948d478d057f406fe60628a84f0481c19b5967e7223d900c29f549d4b49e04a6aa85dccd721489d1c05aef83d77f24de3f2453a6d445373b0df3981d69cde74aa5362ebb3ebf7159c375f579b780d7131484d18032abf859f8e31d2552075cedad7ac25c14e15b9172f94ce8d59a81ccdeaa457ae0ff3b609c6bc0156dd2376e5f86518c8b89b78f2e9c050f7143177b6568713b0f870cd0f991379d046b8ac06abe25a78051afcb5b294b33b6f0a61def4209e2a5eab79826e981ea861b19f80c6225323215a73bcfbcd12c513149c31476679c032f33ff4b348ee957a8d6d6a33c04fda65155e6054fae6212360bc6ea14cbab40edec52b3bc9bbf21e6ad6dbbb27f3e383a29d7fce3673918b9a7567a699df7e11c674f7ade495eb9bb5ef5577dfb70123eb71b101fae8946637b11bf915e4060ca7500dc23dba21c7614438df3e3372b8c1a5caf23380fae442f970ef6dcf2f4026dfc4c43e3a932f8805fb1d3dbd1f2338f093c11c1540b3ea2199224c04919ab65b16e93ff84227261fdb168416a627449fbc6826401595ad923266a3d8e3dbab60529f6a769b8c5f6b65ea29545ee30bbf9cd29cdd20b3a8494d1c171baf72cb17786a8fe0c240e35f38e57ccf343c07360d19f39d3d309abbc7e1d1c524306a1e4569535fce261e980ede22ca0c63fcedc3d2f527e168668aece623905f51a2ce25a2b4b6e4c11ac7f5b776870e12120d09786c791a9ebacea6459c3b39e03e6848c08454812a7fe877826f6a36c24d39f2b2109700b1aee9b9e8542cda212473fc0244cff8d9635248859b6592295349d4294d989fa677ec97143b7156e97cf8ac58f72062058aab4145683e2724472440274ec32bdb4ca2ba929cafe1f823fb8fe85f675e20fe55caf6ef2326d937d360c5e17d7035750a112150f25afa9af57ff6eafdddf30958e6955256c4daf14897b2f706efa9fe90b4b2022d7f1e69ab4ecda4f2fe96818221f942d96ac42be2460d391c396a5cb04adc3c2bdf27f210fcc91a497b61a77fb42cf99a7dbfa95d0705b94b73ff9ed5ee95f2d2c37d310c87d74cc56d9a146c36ce409b967a4e5880b956f026ef23f9bb1555a0e5b98c947ca29714dacb3e3b95c999bf5d9354fb6316d2496795c6b12fdefc2f9c290142ec3ba1a6128d1e181d79382e91f08085c7f6e965f25995d2f4943f507470ef7e859ee43fb70a7d53a7be071ef5f986fbc6e2cb88acfc7af152db24e64fee983ed225bc3a5ee0cba11a9a4a9ed3cc6ad4fc8ad1f4ce95d2194fdfdbf530cd2944959e7f0345d279adea5055c3aa1c9f65e8b276e4e21fed7a4754648197eabab60cd5ec8a3578aefaadf26f2250b70ffc6c6ae2e5a5e9b81aa56dfed373212042cc86067b44608938c7cef2e35223c7af79230a2fdf29f4dae65805dd762920fbfc727c55d8d26b03c018ea50b5cf3dcdde23b46c7916e461884ee9f00e6291c7c210991830094f5bde38e489dcedef9aad6f40d4457587051c668ebdf0c8b29964b775a06f862ed49052a809939917c414e162830e78180aff400a977f33bfa6287cadcd260d218a896a1b4e63867ef8f6f117fede72d8239944fa41ff3361cfbb4a374db32ce5f174c1455ba99d278bf1e2bdbceb0dca848a6ec624c0f73f66d7405ac9cd31e81b9eea456d1f8317fe6ee3371eaabdbe10c126c2abac26154cbddfd3d8ea6dcb2fbfb0928ca6de0ffbdd5b991866811a688d4aa2501a74b39ee5ccd14106a43e8211949124acaaf58108ad0476b0b96b9b5a18c04ddded1847a56320e723e982db6f38aec9b76771b7aef3786bfed6621fb6c346696f1e7b8b9a8315b203fb99055bcb2754b43a45d8d5fb2dd3838dba99371b63c3b1cffdeb63c8b9bc36edf53c3216010c7d9a25ba9e1d03e9a00d5b1d6a82246c86c4a59e9b60a7d01d23e44fd840dca011ce8c405f7e6cd3bd4906dca0df0a0107ef1bfb9b8d06f2ca1cae6ded320457d4532ec5e58e949ee379dd15cf70f1e285aadf13c69288cf4a0a26e7fdc29c5714407d065dc0a54d236303dcafde3ab9de0e019c9c5222ef28271065cfc945b7a53321db2e896880d5645f1d0ae497e27a3f1de1219a95f7f831233403d7e8751d8448af29b6c0a0d7d8bd8d62ec8ac1f1d6ef8a2087b14a492a6756ecafdb6a697d5300fa1c4803071063ca2fd4ba45b4721e7e8d9b7eaee3add1101125e597217e1be8f57d68bb9bbb153e73599e9b76d57c115fdb7771340dc5826729feb6e7797f760e6df799e52bc7db9437f377369e96212c1a73dbbb0c111c3555d3da3bc49184c250cd20e601856d9dc230ea03a3954e50f9979cdd0ca5e5158569e7eef78ac96bdb624b675221cbd47cf0f51f87ec927c5b2f0324114e6d677879847c9c6ff4f5291697486215252807591c8bd4e6a5820a8ecc5a44ee8d46cb2d9d405d07f88eb3510061014ba9aac90a44eb0603dd2665d61badba56d3df503f4080a1ca0fc4de578104c2b6ada2c9fba86d5ceb20ef84808dd1bff35c78a75aa94509d45d6d57a65c07073b297cae5b88917fc910dfcef53270d240237ac1606024c36efcd926b3e430fe165e5bb476000bd51d01b4c7be6e5fda3d27d3047d4b466b5685bf6452282ba0a9209a2876dca3ffc124da2f551b83670636144300abdfa7564415a58671b21e2cc7df7bbf42f8b64f2c07d803d01b8007e038c517e525487c6a4a7dcc1a2998a5dc0078491bb6ece3ed91249899395d8e53e1d6886e8f44418bb07f44cf11802fb9ef8be50049223a0a559cf934ba2cb2ed6604a86beb17144624efde4b1661218e6d51cc348d5b58a28694a61b1d106e39dcae21df9819cce96bba04b9958ad02644d033c4ea5fb591a24caea18b2aaab46f3f2110e9ea6349e095d1a3f1d59ca33bb26038b747a670b09047cf83186d0bf2c16600bcb35bf899484eca96cff04a0711a4db9f42a48f966f1eac165332193644299485548447b7746795471d689f135dc66f2136f6760c71ae9b5292f695cf7693e059f6ffbb4122325c2ce631350bce88b51efe26e3df93546a1f832f3eedc512e1c1149f45a970939e8c31be7a3ad6618ebaa25adb46c1ef0128ef1a0d06ff2f30943563f25b89be7dc40038238bd54dbe0c25666ea5235b00dc229c640ec26520c4dba6fc5b22bddf353f994fb096efab0e8066643fbb8bbb58bb463614d638bb2c1724c37ee8e00e6e3fdb43b5cca3406685ac48449bbe29cbe3f8379fbd55af605954aabab8e3f604a050d2bcc85cade4d090e6536e612ce8df63e26e684fa195be3f34240191a9d0cfc117d5fc065107c090815e7063fb85eda3cf9b4651247d6a51696eedf0226fcc00d5e332ec96f1717474cb370239553b7ae0476d070c79f69464ceb3cdb5a38ebc73432aff245f2307df893655a32f6c09acf76b2ead788cfaff0a9378846835e28af264c51eb6df16530d68def379c958927eb822a7f91027193f98e91aa1d10fb5367cdbd22f555a3d22b0a441e5ca374c668c812d6662697c132c950d1f08ea7ce0cd055ed71307aed55ef3d95f3c20d214c87c14f48aebb1e20cd6b554fe9747af5df1eea70f04b6e81681196bfc93bd193d3a3285a7105dc8896ad0a9fa9de8c384bd9fd29b64a947b3ec9e23b68eb6d6643447c5f816b4d531ba778e0a6ed0343b9dddfcee61c5c8ca1daeb93f089ec5f6db9f6ad3a9fc3c632af8865513e7a0ce0b3c8432fbf3b51c8f7c4d198170150442d68154ba55099ddbf30ff1deb593a8a6be531f6744f4158251cd1099ae35a92bbcd8ba1ba127d800ec731fb711bd9c47cdf01d1c906f293f8fd89b4e18ce1bf84b723a26cdc875fd2511e1696cf0452843deef87338aee343cad9867df2bc95d34c92f119b60550dd1281700421bef419f2b8c46490f6896b4904e46d741f3aec7737659b11e68fd7f0b1eb65ba8755636b64e663272d10dffa46e0c9e46de8d86240b02603fa6944619a3201e9267fc4657eb15b680238947f3465fabab29a5827a7898bfcc059322debc063f4dc61042c82b5d557061ed1233d44082a66cf7caf421b2dfaea9d88bed9482be6a68374224171ced97fb8cf5dc7f8cb2a5f67e6c95d9ddb6ac9913931c9eeb3d3971b127a6113b0dc46bc9c4d372d44d1ee2493c7d92548c4686be52208f286eab3bfa327c693c7a128bd485d916ee52570fc0c43741868b7d5f4caf5cd971314abbb2e9bce7aff205caae53608bc2b0daf751a23a725455e658a4d7ca690baa0a2beebd57d10f9ad1b5f83c3d31c4f7ae499db92c268c50dd88edfee973d9393b071264a689ca6619fd5c764963b13514cb1d5047dd68a6ca5cebafd0b423421a21b1bddc7e482411e4e87a1051f086aa149563a9c06729e21630a84fddc33f79b1887c9682276d1ec0def35ffe8f1a07cada05cdb3dc3f6246164110cb1bf0df985b9fd9f9d89af630c2448881529cfca59bbce93574e47702cb36ef7967503662955007fa82256a9838364aab55c2a26db87720bdc6113f7ee357ce41430889bcc0452ade581d5763347792292ded6487db6505256579dd3c835bdbecfd8e21634b45f633353ca70cdc99c8dd4986358d92333e763cb98fe1bebe453f41555880b6a4c2a2b7486a69a971e76418405435e7c67773733773d2a16b5bf5438293f5178dd649b6fc7a1d17c59a388ca8543453849fcc5792db17236e58b2d0a27b3c0ffc40ce11f394fe99994738934f0c78567beced19a8791eb6109210930b76ecb3c0f0ef0a779179cbc1f796b405332878fbf3ef3346d61b3fe912155a38905e01905434e54f116f45bbb01d6962ce6d1e7faadc5918418a76dce7a89fe503f8ecf2a8ffebf5080049be7d4f251379dbe510c9a0ba4f2afdbb16f350", 0x4, r1}, 0x38) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000047, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x2b}, 0x28) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="2cc3c90af2a77941d095b07c38baf0912760e104dd7d1b07ab406317bbb9d995b940a4ebd0efe1298152888d9c3f42430c426f00206002fc28d23b3da5eaf959c79da0ae82a803705ba270c8dc2408cb11fa64672035d1d9d43f4fb6d5690d92d238477c3e13f2f1536f3f98031ead6720f02fa221a895686817febbbf8248eee649b05a911b26e0414209ba62aa0f41c63691be80190a35cd7f91526b7198a2f41ee632f585c660ed2348c3d90368627e743a594efc63e7b2a1aaa729bd28ac1740348270b358fc3412c7e213c9ebe5", 0xd0}, {&(0x7f0000000a80)="6fb664420fd3c6716b660b78668194a08924029bedcee92eced9b3b50eb0f387768b0437f31b58ec0b3fa69f4caaf85733f02b0b718229d5b0e51083cdf24cab6300", 0x42}, {&(0x7f0000000b00)="483feb6484b5326f736075425131390ec90baf1b6ae5f6ea3654c111255f61babe942c1568378f3111070d87ce48cad4c7a7c9e7d5524d757162dab397f20209b09466ba96ed0cd25c85324f4cbc9d15bb7433dbf3cc4cb3554103f5f25f50236047a45707b28806da69d687921d78f78af88c9c3dc6a46cad527af23fcf17d5ce88999b2845492008095ff981ec4f7817aeed1e9f97e2b4649f6e18dd8739c093eda24805be5242029d3ea8698d3f075b0d0bac708c318545a77d4ab31b39423346d2300187baed45367fa2fdb01b41eabd5117c6e9a085c8bf0c2dc58681c1cc1c551a4950b50947", 0xe9}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @rand_addr=0x64010101}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0x12, "8d05e84bc0d8353ceae9b0370ee25aa5"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0x98}, 0x44) (async)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003040)={0xe4, 0x2e, 0x300, 0x0, 0x25dfdbfc, "", [@generic="67dcbd07c630ef220c14e898569bc9ff7d2113fd74693160da689fa2859fcfe11ed4e9e2d5bba0f838b41a82f8e7b538447984012459a691311a8c6038a1bc3337162efdcf29bbca010fd2c47c4f67632fb4ed85c247587b824a489a9154b94ecf5dd4345cc6cc739e0b69d764061d0f6c4ebf5c5c8a6a84f91b62aa99ccde496e9424f84b38d6630352e39d7bfb35ad4cfc88eb5e725bf3425608425513a6e0e77c40e7007e78b535d0d0f00c458d1e85bd554c4dc44b6e03aeae486ebcdab0acfc1f166fd45f8483802afbfef3006bfc"]}, 0xe4}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)

2.409814854s ago: executing program 1 (id=3886):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c004e5b4ddd11ff1c39bf188b1b"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x14d6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000ff7f00c69d180000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0xf4, 0x64, &(0x7f00000006c0)=""/100, 0x40f00, 0x30, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r0, r0, r0, r0, r0, r0, r5, r0], &(0x7f0000000840)=[{0x4, 0x2, 0x10, 0xb}, {0x2, 0x1, 0x10, 0x5}], 0x10, 0x80}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000003480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x203}}, @prinfo={0x18}], 0x48}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r9=>0x0})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1000, '\x00', r9, r10, 0x2, 0x5, 0x2}, 0x50)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r11=>0x0, &(0x7f00000000c0)=0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095", @ANYRESOCT=r11], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r11, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e4ba6d0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
readv(r14, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.266770104s ago: executing program 0 (id=3887):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x9, &(0x7f00000000c0)=[{0x3, 0x2, 0xc, 0x5}, {0x5, 0xb5, 0x2, 0xc}, {0xc0, 0x4, 0x2, 0x5}, {0x6b11, 0x0, 0x27, 0x7}, {0x4, 0xd, 0x3, 0x4}, {0x4, 0x7, 0x2, 0x80000001}, {0x9, 0x8, 0x2, 0xffff}, {0x7, 0x3, 0x7, 0x7}, {0x0, 0x9, 0xb0, 0x3}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x600800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5fb, 0x36}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8080)
r2 = socket(0x3, 0x2, 0xfffffff4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x140, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x800, 0x3d}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc7}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x7, 0x0, @random="26ed01"}]}, @NL80211_ATTR_IE={0x96, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0xfd, 0x31, 0xa}}, @ht={0x2d, 0x1a, {0x20, 0x3, 0x1, 0x0, {0x5, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x1}}, @fast_bss_trans={0x37, 0x58, {0x7, 0x1, "cf90821cffb03644448d0e7edd5714ac", "655827aa09445ffe750672521ec2e45901f6fb00f9b76ca3c199fa4d289662d4", "80df15c273e812c996943aafa1db78f73454a8226c7657202ca4d4fe951751d9", [{0x1, 0x4, "c16ded31"}]}}, @link_id={0x65, 0x12, {@random="f12cfcda2e60", @device_b, @device_b}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x840}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x1c, 0x0, @random="29ef57d06ad83a2048415c0470578f0681ea0a5617e2ad70"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008090)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}})
socket$packet(0x11, 0x1, 0x300)

2.249423065s ago: executing program 4 (id=3888):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x22, 0x9, 0x7, 0xc, 0x4, 0x81})

2.012736212s ago: executing program 3 (id=3889):
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0)
syz_emit_ethernet(0xe1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)
socket$inet(0x2, 0x3, 0x8) (async)
setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x4) (async)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) (async)
syz_emit_ethernet(0xe1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) (async)

1.947599432s ago: executing program 1 (id=3890):
r0 = socket$igmp(0x2, 0x3, 0x2)
socket(0x26, 0x5, 0x80000000)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040)=0x4, 0xffffffbc)

1.946458856s ago: executing program 0 (id=3891):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)

1.941796436s ago: executing program 4 (id=3892):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x58f}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x58f}, 0x94) (async)

1.923027303s ago: executing program 3 (id=3893):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', <r1=>0x0, 0x7, 0x20, 0x6, 0x7fff, {{0x2a, 0x4, 0x0, 0x2, 0xa8, 0x65, 0x0, 0x1, 0x0, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x10, 0x5c, 0x0, 0x6, [0x4, 0xd, 0x7]}, @timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x612a}, {@local}]}, @rr={0x7, 0x17, 0x5f, [@loopback, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2]}, @generic={0x89, 0x8, "e1199e843af1"}, @ssrr={0x89, 0x13, 0x5b, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x13, 0xd8, [@local, @multicast2, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x6d, 0x3, 0xc, [{@multicast1, 0xc027}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @rr={0x7, 0xf, 0xad, [@rand_addr=0x64010100, @remote, @remote]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', <r3=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000480)={'tunl0\x00', <r4=>0x0, 0x700, 0x7800, 0x1b, 0x4, {{0x3a, 0x4, 0x1, 0x9, 0xe8, 0x65, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x17, 0x94, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x2e, [@remote, @remote, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010100, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xea, 0x1, 0x3, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0xb5f}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8001}, {@private=0xa010100, 0x88b}, {@local, 0x7}, {@local, 0x3800000}]}, @cipso={0x86, 0x4c, 0x1, [{0x7, 0x7, "57f2b6ac16"}, {0x1, 0xf, "f5c408450e8fcf7b431d024f33"}, {0x3, 0x12, "0e83fbdd5b4b891155b2e7e0d1abcd48"}, {0x5, 0xc, "ef86e51cb2c93f53c656"}, {0x1, 0x12, "48592578828f772a312c55925f1acc7f"}]}, @timestamp={0x44, 0x10, 0x41, 0x0, 0x8, [0x4, 0x5, 0x7]}]}}}}}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x3, 0x7, 0x5c4, 0x2c, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x40, 0x80, 0xe5, 0x101}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'erspan0\x00', &(0x7f00000009c0)={'gre0\x00', <r7=>0x0, 0x40, 0x40, 0x1, 0x4, {{0x11, 0x4, 0x0, 0x2d, 0x44, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x17, 0x3a, [@rand_addr=0x64010102, @local, @remote, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x3f}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x2, 0x5, "e7c6f3"}, {0x2, 0xd, "ea50fdb07eef8761cc9aea"}]}]}}}}}) (async)
r8 = socket(0x10, 0x3, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x6, 0x9, 0xc, 0xf, 0x1, 0xa, 0xf, 0x1, 0x10, 0x9, 0x3, 0xb, 0x8, 0x5, 0x0, 0xa], 0x1, [0x4, 0x8, 0x81, 0x5, 0x9, 0x40, 0x4, 0xf, 0x8000, 0x6, 0x3, 0x7, 0x0, 0x5, 0x9, 0x8], [0x2, 0x6df, 0x3, 0xf, 0x8001, 0x5, 0xeaa, 0x8, 0x20, 0x2, 0x1, 0x200, 0x3, 0x4, 0xfff9, 0x80]}}}}]}, 0x88}}, 0x0) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ac0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r13=>0x0}) (async)
r14 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r15=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r15, @ANYBLOB="00001700000000000c001a8008"], 0x2c}}, 0x0) (async)
r16 = socket$packet(0x11, 0x3, 0x300)
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r18, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800008005000300000000002900000000000000", @ANYRES32=r19, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac141400"], 0x38}}, 0x20000080)
sendto$packet(r16, &(0x7f0000000240)="352fa95d58f0", 0x6, 0x40, &(0x7f0000000200)={0x11, 0x8100, r19, 0x1, 0x9, 0x6, @local}, 0x14) (async)
r20 = socket(0x10, 0x3, 0x0)
r21 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r21, 0x8933, &(0x7f0000000000)={'team0\x00', <r22=>0x0})
sendmsg$nl_route(r20, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r22], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="50040000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff0f000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f40b000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400b70f000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000ba08000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r13, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="1c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r22, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001010000"], 0x450}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004040)

1.866841076s ago: executing program 1 (id=3894):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
sendmsg$sock(r4, &(0x7f00000004c0)={&(0x7f0000000180)=@generic={0x18, "6e7fceb344591b3415a3c9421be4e8313106601eaa16b7b9e527ebd48bc1367836985fbc2185cc033a32403ae6ab06809e759c8f137f81f12ece295721d434eb8be834e677d3c604149b141bf7790b009bf7eb769b902d8fe52e2dec317aa6f8f2dc0692cfab7ca6b3914debc602e9a9db0b4e4a6f2da102577c8b15a6af"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="e1f26c89cd65820e2ad11ca9313492c75de96c5035b5b1e106acd19a29517e56f28b21e35e0666771de19b33ff9f218e15ec0862ff4d22290828e05448a3ff58d2", 0x41}, {&(0x7f00000005c0)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0xd8}, 0x10)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0)

1.771338093s ago: executing program 4 (id=3895):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r1, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0b6dfc375da9788447f5fe4a2f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x857)
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb8847"], 0x72)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', <r6=>0x0, 0x80, 0x80, 0x800, 0x4, {{0xd, 0x4, 0x2, 0xe, 0x34, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x4c, 0x1, 0xa, [{@multicast2, 0x2ae4}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x9}]}]}}}}})
sendmsg$nl_route_sched_retired(r2, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000240)=@deltclass={0x860, 0x29, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x3}, {0xc, 0xffe0}, {0xf, 0xfff1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x40}}}, @c_cbq={{0x8}, {0x81c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x40, 0x4, 0x8, 0x4, 0x2, 0x3, 0x4a7e, 0x3, 0x477, 0x20, 0x6, 0x1, 0x5, 0x7fffffff, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8, 0x7fffffff, 0x1, 0x0, 0x8, 0x3ff, 0x6, 0x5, 0x6, 0x2, 0x1, 0x8, 0xda1, 0x2, 0x6, 0x10001, 0x6, 0x7584, 0x10000, 0x7, 0x4fc, 0x1, 0x915, 0x1, 0x7, 0x7562ff6c, 0x7fff, 0x1a, 0x9, 0x2, 0x4, 0x8, 0x4, 0xf5, 0x5, 0x7, 0xf, 0x200, 0x6, 0x200, 0x50, 0x4, 0xffff0000, 0x3, 0xfffffffc, 0x23a, 0x2c, 0x3, 0x1000, 0x7f, 0xb, 0x800, 0x1, 0x39, 0xfffffffd, 0x0, 0xe3c, 0x8001, 0xfa6, 0x9, 0x1, 0x5, 0x9, 0x358, 0x1, 0x2, 0x1, 0x9, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffff626d, 0x5, 0x2b2edef5, 0x1, 0x3, 0x9d0, 0x7, 0x40, 0x5, 0x9, 0xd7d, 0x9, 0x0, 0xc, 0x1, 0x80, 0x5, 0x302, 0x2, 0x2, 0xfe000, 0x9, 0x4, 0xffba, 0x6, 0x5, 0x2, 0x2, 0x9, 0x0, 0x81, 0x4, 0xffffffff, 0x809, 0x7f, 0x3ff, 0xfff, 0x9, 0x1, 0xe, 0x8, 0x7, 0x400, 0x5, 0xffc0, 0x4, 0x5, 0xfffffff5, 0x1, 0xffc000, 0xde, 0x9, 0x4, 0xfffffffe, 0x3, 0x5, 0xabdf, 0x81, 0x1, 0x800, 0x1e2, 0x80000000, 0x401, 0x5, 0x8, 0x8, 0xf, 0x8000, 0xd, 0xc, 0x4, 0x3, 0x3, 0xa, 0x9, 0x4, 0xbe79, 0x1, 0x5, 0x2, 0x0, 0x9, 0x9da8, 0x6, 0x4, 0x5, 0x3, 0x5, 0xfff, 0x3, 0x5, 0x8bf5, 0x800, 0x9, 0x6, 0x5, 0x1, 0xcb, 0x5, 0x8, 0x4, 0x9, 0x2, 0x2, 0x2, 0x8, 0x4, 0x3, 0x7, 0x10, 0x6, 0x7fff, 0xff6e, 0x7, 0x0, 0x8000, 0x3, 0xf, 0x5, 0x9, 0x7, 0x7, 0xbf4, 0x98, 0xa, 0xffc00000, 0x3ff, 0x9, 0xf, 0xfffffff7, 0x6, 0xfff, 0xf, 0x44887174, 0x1, 0x5, 0x850, 0x7, 0xffffa846, 0x3, 0x8, 0x3, 0x80000000, 0xa, 0x5, 0xa691, 0x8, 0x6, 0x8, 0x5, 0x7, 0x3, 0x64cce353, 0x1, 0x5, 0x8, 0x7, 0x800, 0xc, 0x7, 0x4, 0x2, 0x7, 0x1]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x2, 0x1, 0xe, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x40, 0x1000, 0x0, 0x2, 0xd, 0xfffffff3, 0x1000, 0x5, 0x9, 0x0, 0xa, 0x40, 0x10001, 0xe80, 0x4, 0x4, 0x9, 0xfffffffd, 0xa4ed, 0x7, 0x6, 0x4, 0x3ff, 0xc8, 0x3, 0x3, 0x1, 0x5, 0x0, 0x6, 0x8, 0x4, 0x2, 0x7, 0x3, 0x6, 0x6, 0x8, 0x69e, 0xa891, 0xffff, 0x0, 0x4000007, 0x6, 0x5, 0x9, 0xa06, 0x1, 0xf2e, 0x1, 0x6, 0x0, 0x1, 0x120, 0x0, 0x6, 0xffff, 0x0, 0x4, 0x3, 0x10001, 0x8, 0x9, 0x8, 0x0, 0x9, 0x9, 0x1, 0x10001, 0x1, 0x100, 0x80000001, 0x7ff, 0x0, 0x6, 0xf7f, 0x8, 0x9, 0x6683, 0x3d, 0xf0, 0x770, 0x7, 0x6, 0xda0, 0x401, 0xfffff7f5, 0x5, 0x0, 0x0, 0x1a, 0x5, 0x94, 0x600000, 0xfffffff3, 0x8031, 0x2, 0x8, 0x9, 0xc, 0xfffffff7, 0x2, 0x100, 0x7fff, 0xfffff43f, 0x8000, 0x4, 0x3, 0x5, 0x4, 0x8001, 0x4, 0x53, 0x3, 0x3, 0x59, 0x3, 0x5, 0x8, 0x81, 0xa, 0x6, 0xfffffff7, 0x9, 0x9, 0xc3, 0x2, 0x2, 0xffffffff, 0x400, 0x5, 0x80000000, 0x4, 0xf3, 0x10000, 0x3ff, 0x5, 0x4, 0x5, 0x9, 0xb3, 0xb22, 0x10000, 0xf49d, 0xf, 0xcd0d, 0x8, 0x800, 0x1, 0x2e, 0x4, 0xbc7, 0x2, 0x1, 0x8, 0x46b, 0x4, 0xcbd, 0x90000, 0x6, 0x7, 0x9, 0x8, 0x3, 0x6, 0x9, 0x7687a479, 0x5, 0xff, 0x5, 0xffffffff, 0x7, 0x7, 0x8, 0x2, 0x2, 0x80000000, 0x3, 0x401, 0x68, 0xfffffffc, 0x6, 0xc0000000, 0x61, 0x95, 0x7, 0x4, 0x9, 0x10, 0x8, 0x9, 0x1, 0xfffffff7, 0x315, 0x9, 0x2, 0x6, 0x7fffffff, 0x7fff, 0x5e6, 0x9, 0xffffff14, 0x4, 0x3ff, 0x10000, 0xf, 0x40, 0x5, 0x8, 0x9, 0x9, 0x2, 0x7, 0x5, 0x868, 0x200, 0xc5c, 0x7bf, 0x1, 0x1a, 0xffffffff, 0x6, 0x48, 0x6, 0x6, 0x3, 0x1, 0x0, 0x7, 0x40, 0x5, 0x6, 0x5, 0x4, 0x0, 0x8, 0x101, 0x2, 0xbd11, 0x9, 0x9, 0x9, 0x4, 0xcb0, 0xfffffffa, 0xc, 0x8, 0x81, 0xfffffff6, 0x4, 0x9, 0x7, 0x1000, 0x7, 0x3, 0x14]}]}}]}, 0x860}}, 0x0)

1.77095477s ago: executing program 3 (id=3896):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000000000000700000014000000000085001001000802e100"/40], 0x28}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.605724124s ago: executing program 0 (id=3897):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r5 = epoll_create1(0x0)
r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000480)={0xa}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000480)={0xa})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000)
getsockopt$netlink(r7, 0x10e, 0x5, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={<r9=>0x0, @in6={{0xa, 0x4e23, 0xbe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x200, 0x7}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={r9, 0x8, 0x1, [0x10]}, &(0x7f00000003c0)=0xa) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={r9, 0x8, 0x1, [0x10]}, &(0x7f00000003c0)=0xa)

178.588126ms ago: executing program 3 (id=3898):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540037b6e66b8524719e0000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500340012800b0001006272696467650000240002800c002300000000000000020106002700020000000a0014000180c20000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x810)

123.515506ms ago: executing program 2 (id=3899):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
socket$rxrpc(0x21, 0x2, 0x2)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001540)="4aac10b534a94fdb6587549d3f3bb8a480b1f2cb858b2fb9c711", 0x1a}], 0x1, &(0x7f0000002580)=ANY=[@ANYBLOB="d00000000000000011000000030000005d0b28ba8083a1c635359409d99c26457274edbe1aac090aecf8d119a939b3035efe553eacb71c576631c61d61714fd3e0c6ad21109683e5e4ddf3d69b042cc8659ff300b595ca105306610a3224cd2047248ec1406681ee0c37e4cbb317cd0f58e2904f2290481a8bdf96b3adcc97189dab2b44a46e2b7aed858d8cf1430942101f2d6076eda6cfe354b4357789243dd7c507b9ea4c334013b7a68c3b137ee2c3570cdcc5f203ec693b6cddad801a3e4aab097583fe0db391b2fc680b770000d0000000000000001701000002060000b02268540bb9df61c5ad37ef19c243a2839bc93758e9f622d7855ef61d0db79fbbd255503d21f465d58f8be9b292a5cc4266d937695a3f2ab20ad36bd95bb923645c8a2574eecabddbe31a0dda4e2c182f9bdb09f9ec509128177198ddcabeb5028c742dc7b3eac636430c9cfcbad46a81fc2344f2ebce80ab082f346baea48a7567337dd9e5b7e64162e0489f273bed0ba9b39537d426e14f639f0f7df069b4581bda35d62159f56929c3dce5a1e9af52c9e90967d759e505777e87d58240b259c9d5ad0000001010000000000000090100000b0000008b45a755e10f79223c902d61a7cfb621ab16e1587c09f8bd92224962785007be3708b17e514f72b4e7980f7162dbdf95148e4d5b89d2f0c93a3c706d7a78c00cc8e40ad1b41ad013935487675c727f09775a30a90a0c6a4c5f43cadbbc87b221597e44946b87ce051b0939dac4171afa6982a192dcea0c32f537950224a06c750110d9527feee99194231f186ae577e799b23da13e2f805a6bc43eb70b51b87dd0af957e19c085046f6ff610fbfb10131639187baa24b2ebe11c580314315bc59a0bea1862b7d98e81468fa9ae3e1a3ca3a174c3e93d3630147430bf57a27e2bf5bf9dc8410d0625a881f7d235c73139d1e2110394466e0d92d20f962581ae8457c8f54f9bc6f0debb2da4b343917a87cf79ec773835c4ae9ac5b56b386dd7700cf749216c33b084f8a6a12c25cf5de383290c9de78cbc4f6167b24ebc0de45418139b00ed3bce58d4b193eabe58cf307f1e28f9f4ebf0b974a50952f7738d041c4da670923364bd7f34ab2268340939d4e658d82681b808cecbc83c0022053e55a459376aa468a10c3f03b9d5f3203e77573ea4953c9f0cf9e92ed9f8cc87fa8263ea968b355157e0cabb5bc4c3f0734f2600d3a00e265a94fb59a8a3a0c85279f07081d506000000b487325ecd55bf2125305f072d74b4719c536af7da574ad87eab6eb039cf5e48850c0d8a155781b869ed657c2cd43c68b51df38d0932b335f52603ee63c71a15c2067a45c90b23eb8a45ce3552ac32419b7543da7f7f8530820e234c5f17131139d5335ba222308ce62c1f42c62819aebb8287cd0e7eafac6d3273754172c2c6e0ef88d1fcc03e1eedc1dc643f05b7f345e40636e5b15a7626730a096d0d2d4aa207b121ae94391afda6227a8af0f0dfc996237370f340428664a9289836a0a0de3c2b18dfb81acca300e30a5a6da2dd7cad7d329600e8228228f2be664f336081518b4b77d5ff54b30df4a2f581b19baaa577e377e449f293ba6b5b6e134164cdd61ec0bd9b32d41b834d6be21d449c8bb7acd3cb4256d0fb78af4ef1be09d890b4be506ec2f1fc1520ea9d30943b23863c185e429228304ee70625023043ac5ec618ef9e1c49ec4d70d127a04ea8366ec51aaca08ea62ed6a3a8850ee12e79d0442382f5bb2226a446f761828f2b8742f92cd5d9ce17f029af6e2d48ebd19ba58eb84efe485092bf70c7bae34e0594d67614097f811706133d5ca3551ec0e497f82798b06c80d3629eac40cd1ca7f3ff0e3f1ef91ea030641e12562a0ee99681f5bbf3d153766a4e234c36e4e79807532cf838fc33d12e67a4ed1fd8b3415371666cd601c77f074b7b1cdeaf1fc4d96ad349fed97cf24dfa249f2700b201e547cd0eacecb0b9304a6ce0ed1377e10c2d0ad641c6fbf0d62e53edf1d48329849f448da0f309baad0fa00eeceefdb7f20769ad8ad8694554e7abab1fee887505dfe101db4eb6e24e302188144b5cc43e060769b9b7f096395dcf46bc7604445dbea024e70160b0cc5f36aad5fac352cbcd3b3cfeda3f93a0d212f63131e1d8b1944f83422d5a8680dd8e2c9a018553c15e2a81fd64c89a50bbde14a26ca14ce172af50885f5c5adad2a717369d02e285ea0b58e12ee1c93369e24029aa875d8461d97e44bca51908c3ca7180ffe49cc1988ea9a6ae78f7dbfdf4f93b52bfef44082d2490a68637789d51875c3da57b56848aebdd6a67e01bf4f7931296eff41d9e2918f192ca7c6b417e9f2df23f94f4947924b318bf495822b5f9e1c894d6125d485e7661a6321d7723a0dc2b3cd6025f743b215e394493b52460d7bdf862db4ea0a19f241fab57c478c098a976099c7cf727a8c1921425c82655e9c5b2bcaa3b28d9baa1cf156a73ef2a5730ac440f849c94039ce3808b8babc0cb3ca9c0bcaf26c66c055eeeadaec6d5558bd467e3b42ecb4532b24dd188badeca9ecbb68ae8ff792a34d38db5fc5c6dbbd14345f46780907f0130a17d5dc8633a5c4249dae66d9b836870daf50842b05719d437ccb2aac450df6134d157c112c213bd54647c7cddaf3b84ef0ce47d75104166fc4be85e4be5753e7f5f104dbe0830a044279651a692d06a752039ed153343fb0e0773c938028714c0375e12d216974063e12a7961bcbb6bec41911ee9ca0f3038c43136fba0cad30c9ef378eb1fe377b7f3e00e9400fac80c8d918fa05225b81d01034e52a2846bedba03b1297ac8f4e2ea8a906e0999ee9ceb668f2245c0f305a99c0fac033f4014a20b66f8e405404c52fb73994cf6a34d2d166314052023546bdb9eaf3b72e43fef88fc7db8a4bbf6f0f8ff8b908439bab78b3fab7503fb9afc475e04be88f273b19cfdbc1d873079f0c96144e34acf6bdd7b3707f7da2e543f0c184f7335fdc05e38369d37d7f6626367b43017d898fa5193d8739007cc7eb38ffe7a4277d5d4abeaf91fe2b28d476efa38e6ab41cf19510728835b0b13252e33ee32d574999dde027a17bfbaa17f70e0f20ef4a8a11c8302d093d2fa3402fb70d3200f35b247e9368a593b89fe7540f156c6a227014baaf07bd428c55ecd3b7dcbebfe67dae3008424a2374119d5bb2b1c40e56c00d62e39a3df1bba5de87763ae4387c8e346bea06070ebda960562f2fb860da9715d8bc5ac432421dc42abc73795f7853a360252763bd2fe82ffa20c7d3dd35b1d3c04684995262ead5873e8208c4c22995e82dee0297028c0a5d6252019a58e9d5de6a1c755edc9cb3ffe8c5e64e0c6ca5af6893c0244a09aeb0466d28454d123aa6e250d8b280c3fda179232f962ca256a830b72a3125bbd5767b20828ae15048ad10757b4f026f781afef8bb8e8dbe24d761a6a62e09e54ed0c9ccf729b464e8fa621b3d13093f16d321aa442ed56dd7374451592a6904f987f774d825b9424be2c66ac9b9ba186495d9f3d3b3ce0a6615cf8ae8305c80986648d245ebc68ddfa1dee9a58e63250204985641ec7f92c3834410bb9765c1d3f13f0c46bfef2b425d8dd8a2a7f1b125a3798ed9b50e0b6105104b0cc279bd8cf22ba5b378fc091c8c891f3c8608b1b8403f15f1fc23e49d83fb591c35e1b1198e3035729263bbe84c4110026e9642d6a41e5d12358e5a33f694d99ac5b2d161e3a7225aa5b8413f8715a9d412368f506c7a2150ef6391112336ba2c530e40230d3161dc27d9b84ddf5c2b6e8a60df5ba9ec6b6c7b0a188b627cec4743b219fe74b10346e02b747c0c9ad21613d0ff293fa24eb43a79906adc7dcbeeaa927f655d5e64abc1a86512e074db9a599730e02287df28ffa3169cfa825868f4d28e9f4449685e97d0cf9f869857b0a8e18ee38b952c0fad25606bbfd9706591387b2c1003b9359c76916b03b05d4deb4ab5f18afe710d4a0b13a9e5c6237c6b47d90524c8d5f90c3522c6000cdd9d9918569144deda55a9f6aa3924ced342a0a7a61d7b01f31448cc2157711e394ad7dbc0389fb9146def20a827d242582ec008069905c3c6cdecdca432e051591bdcd376fc1e572071d2f95bb164ae8957040a567971244e0e96a1475157b7c01c9f4de3c7518f3a36ae517fa07bbd5ec271067b2cce0bfe05b554dfe6f57ef24b13e07619e73a9751435cd123e4906b06601d8faf7f9cda84014ca4475d2d568e7f6e8020de707dfad8640f0d43979f0cb0057ca76b431a6a0a4febb3ad600da77b545aa99e4cf4e6ec5605a7012d3e85ca9e206fbd489c55b4021e5acdcb06937ed04f5e4dba57e81afa4dc8af550977a6e0343df90fd6a6b68c470660509fed2673ac7eef28ac99c716ab48858af50dea29b0ccda2724c62c37c65c181e6451a5d5b9baa5c143ef93db9fb4ab81c9c0b0a9afc1779c0fd45d1a72f5a5baf50010712daa1294ad8bcbf83da9533b6e1b859a607927b41a996ddc05d83a83db0f6fb5b2a6b897163a228b3ecb5cb0d3f5fe406761f796f1dcaa6a49bbf19bcfcd68b3ed1f4b2b1e33841f88d67bdf19b7fdf54269b109953d09849c58498e748d4cef6dec19a0fdba07926dd77e0749b98cbf818d52405ca5d490b1de597f06297d8f612693c6af857412db5e3099a751698552df6aa183e50250c21231e3434256c9b760020c0cc6df447cead889b9b125ee45acaca2661990701d2e3d8aef531ed7c056c5c828c649cd294188c8b984cfb512f0b84777347a86a631d0ed4badff790d3c620626c1fb8c9376258874058a1101c9be6f06d05625469364f8dfb51b66ab3abfe8a949df60b458bbd9275047e9865272e88da9c0eebe3db620c8f733ec3bb547f219c48018152aa70dc68bb705c32db8abbb6f0643d2bfd9860bbbd1ce88f72b1bf4d10d42921c0e49ba8fc56f5ce2d311e90b0028527927d4eae69b74f160c0d17b78366545f106c2e578879368ef1067af946b4ef3c59f4e13e9077086e31c9c870af744313d8bb841772fe8bc2f2291cc64ea5409d0dd22e4cb31df9f4a19f1f2d741e384b6a29ce9b36fd67936fcdc900e13839bca083f18291fa61f141d2aad4e8d9f8d50c5dc979f5898d02cd4b0e11ffa948cafa8c6eb8f3ba9d03233163580d6b1966034e91a6eb13dbd2e538a702db76f0f63063c2fd8ca84fe6bdac409e751413c1be2e5d97f4f84064711da93fdf5f87e6086954fa4943a968f5fd6266724a9457b1f8254b06c3743b8bb3eb320e4a915dc6cc845fc46642d391b6f6c6170c068fefc8b5f3a96087e41a356bc55718ff0932af051eb704847c6f349cb00e3196f7780ada4f33dd1b5a485e070810bee1914db7ae9543c4d7084d1d2552e3a4a11862691c21f9a1a5076633412296ed28e7a0e793165310022d95b75aa3b0d08074a40c55074732a85afe6ead2c084395043bf3f0c5bde3bce45171a26a2cdc282d7fa9697a0716b09c151e8a4e8a133716479c081ef3f7de6cfcbf6052eb9b213024955a655f183c16068e7d9ba4bf9c952c1a230b44c826f9ab251b9dff38fdac681b53b2f30f4cfeafaed41d12b762bf1fa2fd791e7c22b70d7c17f6e55a66a6c636cd92d0f77ffed62d08612e6e510acf243fcdb66ae0820f4693e2c3e210b2c033eb3c28fcc99b5bd10e98d633a7ec7f5dce18471397d6711587222f0ac4fe93c74dfb29fc8f410fe4381b487459c48053a6e93b17b97d67d8d245cbcb1361b3eaffaf16966f48e4b6d996af167f2cc3195a815e249e3e6821f05d0b265fdaa7edf7683f75d0e7c83db4b1987ffeb19234bd588d6ec526a9add7657b1e4fa31cf27657191df32912a9f91ca1bbcd2fa878ef1e6a436fa47e53af0156f94400dfb74c7d6107d09af114325fddad8e4a4cebe3ffa6fc260e4552419a9598603cb5598e41448f3350c8465b190493a8cb7568fc8bebb0b0cfef3240cf7f04f9346af38ad771f4887f808772a1aed91403a9ea6730ebdd629865d97c9a071a822dddb55ce7d092e0d07940aa56df4f8a5f987edf2cdb9d10dd5d19ff6c2fca2ce851f07b785727721ebd797edc1d794e6d6789c4af629b4724fe75c17861cfcb0abda59eadacaf524431520ae08f5c29d92d3749c416586a00feda7cf0a2b5a56ff5880c04e1e608b974d4e748750a2f9189ac0cae6cc3f13f1b65edc3e32e7676bc6d84f036a8c90e84b0b6e7235cb09d5bca87ba1bf125414638fbddc142d33098c49ae9bf0f4bd6d8bf7646ee7fe1e5e772ce9f8d643465514bb7e22f5d223257a2f22b324f57247df27f4ade2b9d9c30a51f4c25017385c26bb087f52dc12875dfe204a19c4cc5ee7981cbe2b61a40d072117ece5061853ee1d95e3dd07800000000000000000000000400000026e2752059a4afaf4801c1a1b0f78b8cf694dea98eddfbf37aeb30d33b289cc08b31371223928a4b8b4e6a9af479de809ad56f6436831f15a3341b94a6e29a1e5106d6f0e7b3da9a2ffc7355178d32628ac535cdc3a00ee90c197472c0e0f4c5d20d7352244aa2253fd89e4d498f935af60a70d5098a38ffb49f0b80aca1202c7efceb3c46817adb6231fb7f2975f5ac8a1031454a418cb9a95e0216229090c080db42271a1edbc8a5f5bc69181b83216780d36d11bba595cdbfe019aa899a9eeaf7176e2a154af9834471af4e723792a52fd2bf1c10b0441c3008e02dcc1de3cf33984654ae2d78b2295e411ef687273a1d54f7357ec1f206a02d9f3237b7c057f5793dd586660496e01544d16c6115f0e6292f8b4186aa545f0e002e29639cfc79a460d3bab7a628"], 0x1228}}], 0x1, 0x20008899)

23.244516ms ago: executing program 0 (id=3900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x1ffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}]}}}]}, 0x40}}, 0x44)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delneigh={0x64, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, r5, 0x8, 0x1, 0x6}, [@NDA_NH_ID={0x8, 0xd, 0x9}, @NDA_FLAGS_EXT={0x8}, @NDA_FDB_EXT_ATTRS={0x28, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_VNI={0x8, 0x7, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0xc000)

22.276759ms ago: executing program 4 (id=3901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf}})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)

20.47674ms ago: executing program 3 (id=3902):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012020, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfff}, 0x8)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@loopback, @remote, <r3=>0x0}, &(0x7f0000000140)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

0s ago: executing program 1 (id=3903):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x8040)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}]}}]}, 0x54}}, 0x24004000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xf9a3d000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030529bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000030620000280012800a0001007678630000000000000000a3140001000000000096cd0c45886f9edbbdbbb0", @ANYRES64=r0, @ANYBLOB="4c4400000000000008001b0064076955", @ANYBLOB="881ea3feddc23f84092fa40f64b43f9fbaa59ea54966422251ba705f82b4ac670b8c61e10bf9d91de7200cd45732799164821e83e2187373ab8ec2f4bb2a59c97f4df59002c886f02b39acfc4ed86ebc5b5d91a1cd64d08e3fe13ff694e340dca4ca18136abc3c0e5cc0e56e6bc9cb925c91d164c4259d8462b2b10d639c536878c35ce194dbf1597a0f4379bd4b331cf5ebd899b8c78aabed0e1cd3037f7e2d2f43b4412665ed7993803f7931fc82d13a06fc3269"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

kernel console output (not intermixed with test programs):

  340.035199][T15912]  unevictable:768 dirty:98 writeback:0
[  340.035199][T15912]  slab_reclaimable:11592 slab_unreclaimable:132477
[  340.035199][T15912]  mapped:32082 shmem:4204 pagetables:1327
[  340.035199][T15912]  sec_pagetables:0 bounce:0
[  340.035199][T15912]  kernel_misc_reclaimable:0
[  340.035199][T15912]  free:1290109 free_pcp:13061 free_cma:0
[  340.038861][T15911] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  340.044575][T15912] Node 0 active_anon:32244kB inactive_anon:0kB active_file:12340kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128328kB dirty:392kB writeback:0kB shmem:15280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13820kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  340.129084][T15922] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  340.178798][T15912] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  340.375746][T15912] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  340.413265][T15912] lowmem_reserve[]: 0 2505 2505 2505 2505
[  340.422076][T15912] Node 0 DMA32 free:1253188kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32244kB inactive_anon:0kB active_file:12340kB inactive_file:159680kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:30304kB local_pcp:14240kB free_cma:0kB
[  340.457912][T15912] lowmem_reserve[]: 0 0 0 0 0
[  340.462859][T15912] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  340.515775][T15912] lowmem_reserve[]: 0 0 0 0 0
[  340.520553][T15912] Node 1 Normal free:3890376kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21460kB local_pcp:12816kB free_cma:0kB
[  340.586905][T15912] lowmem_reserve[]: 0 0 0 0 0
[  340.591676][T15912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  340.607862][T15935] syzkaller0: entered promiscuous mode
[  340.613446][T15935] syzkaller0: entered allmulticast mode
[  340.629793][T15912] Node 0 DMA32: 1015*4kB (U) 1686*8kB (U) 384*16kB (U) 858*32kB (UME) 761*64kB (UM) 546*128kB (UM) 342*256kB (UM) 220*512kB (UME) 146*1024kB (UME) 10*2048kB (UM) 174*4096kB (UM) = 1252620kB
[  340.668553][T15912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  340.680681][T15912] Node 1 Normal: 202*4kB (UE) 52*8kB (UME) 36*16kB (UME) 56*32kB (UME) 17*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890376kB
[  340.726066][T15912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  340.745821][T15912] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  340.758344][T15912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  340.770173][T15912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  340.784578][T15912] 46201 total pagecache pages
[  340.790688][T15912] 0 pages in swap cache
[  340.797597][T15912] Free swap  = 124996kB
[  340.801886][T15912] Total swap = 124996kB
[  340.842874][T15912] 2097051 pages RAM
[  340.858176][T15912] 0 pages HighMem/MovableOnly
[  340.862894][T15912] 424122 pages reserved
[  340.910101][T15912] 0 pages cma reserved
[  340.968484][T15952] netlink: 'syz.3.2827': attribute type 4 has an invalid length.
[  341.112570][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'.
[  341.165646][T15963] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2830'.
[  341.210777][T15964] vxcan2: entered allmulticast mode
[  341.328692][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'.
[  341.344288][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'.
[  341.448052][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'.
[  341.505805][T15987] sctp: [Deprecated]: syz.4.2839 (pid 15987) Use of int in max_burst socket option.
[  341.505805][T15987] Use struct sctp_assoc_value instead
[  341.672941][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'.
[  341.849141][T16003] bridge0: port 2(batadv2) entered blocking state
[  341.860555][T16003] bridge0: port 2(batadv2) entered disabled state
[  341.885947][T16003] batadv2: entered allmulticast mode
[  341.906257][T16003] batadv2: entered promiscuous mode
[  342.053996][T16016] xt_NFQUEUE: number of queues (16) out of range (got 65549)
[  342.345660][ T5958] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  342.354973][ T5958] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  342.358253][T16035] netlink: 'syz.4.2853': attribute type 10 has an invalid length.
[  342.457287][T16035] 8021q: adding VLAN 0 to HW filter on device team0
[  342.509378][T16035] bond0: (slave team0): Enslaving as an active interface with an up link
[  342.751148][T16057] netlink: 'syz.4.2858': attribute type 1 has an invalid length.
[  343.064134][T16070] ip6tnl0: Caught tx_queue_len zero misconfig
[  343.417231][T16085] bond13: option min_links: invalid value (18446744073709551614)
[  343.425256][T16085] bond13: option min_links: allowed values 0 - 2147483647
[  343.436245][T16085] bond13 (unregistering): Released all slaves
[  343.607040][T16096] tipc: Resetting bearer <eth:syzkaller0>
[  343.889923][T16117] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  343.921920][T16117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.174232][T16139] netlink: 'syz.3.2885': attribute type 5 has an invalid length.
[  344.215434][T16139] geneve3: entered promiscuous mode
[  344.220687][T16139] geneve3: entered allmulticast mode
[  344.257326][ T1341] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 256 - 0
[  344.266614][ T1341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  344.287206][ T1341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  344.340346][ T1341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  345.011093][T16184] netlink: 'syz.3.2895': attribute type 1 has an invalid length.
[  345.012826][T16185] atomic_op ffff88807b77e198 conn xmit_atomic 0000000000000000
[  345.067061][T16185] __nla_validate_parse: 10 callbacks suppressed
[  345.067081][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'.
[  345.091035][T16183] gtp0: left promiscuous mode
[  345.125302][T16183] bridge2: left promiscuous mode
[  345.140748][T16183] gretap1: left promiscuous mode
[  345.158206][T16183] veth3: left promiscuous mode
[  345.172162][T16183] veth5: left promiscuous mode
[  345.209715][T16183] bond8: left promiscuous mode
[  345.247488][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  345.520388][T16203] batman_adv: batadv0: Adding interface: vlan0
[  345.545853][T16203] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.603490][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.632684][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.674890][T16203] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  346.074160][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.087994][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.116506][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.130986][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.141324][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.164446][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.172361][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.180771][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.190363][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.205854][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.266523][T16240] : renamed from hsr0
[  346.524676][T16246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2911'.
[  346.610291][T16256] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2914'.
[  346.741947][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2916'.
[  346.743350][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2916'.
[  346.837806][ T5958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  346.932603][ T5958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  346.965248][T16274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2919'.
[  347.016256][T16229] chnl_net:caif_netlink_parms(): no params data found
[  347.075898][ T5958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  347.213050][ T5958] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  347.281216][T16229] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.294252][T16229] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.302719][T16229] bridge_slave_0: entered allmulticast mode
[  347.314020][T16229] bridge_slave_0: entered promiscuous mode
[  347.327987][T16229] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.336453][T16229] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.343742][T16229] bridge_slave_1: entered allmulticast mode
[  347.352300][T16229] bridge_slave_1: entered promiscuous mode
[  347.396035][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2925'.
[  347.423726][T16229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.466652][T16229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.548147][T16304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2928'.
[  347.630949][T16305] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  347.644505][T16305] bond0 (unregistering): Released all slaves
[  347.746517][T16229] team0: Port device team_slave_0 added
[  347.780488][T16229] team0: Port device team_slave_1 added
[  347.865026][T16320] sctp: [Deprecated]: syz.2.2932 (pid 16320) Use of int in max_burst socket option.
[  347.865026][T16320] Use struct sctp_assoc_value instead
[  348.028024][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'.
[  348.086535][ T5958] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface
[  348.288008][ T5149] Bluetooth: hci5: command tx timeout
[  348.620215][ T5958] bond5 (unregistering): (slave geneve2): Releasing backup interface
[  348.656792][ T5958] team0: Port device geneve0 removed
[  348.876312][ T5958] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.886675][ T5958] ` (unregistering): (slave bridge_slave_1): Releasing backup interface
[  348.896807][ T5958] ` (unregistering): Released all slaves
[  348.991505][ T5958] bond6 (unregistering): (slave bond0): Releasing backup interface
[  349.001417][ T5958] bond0 (unregistering): Released all slaves
[  349.099265][ T5958] bond1 (unregistering): Released all slaves
[  349.195517][ T5958] bond2 (unregistering): Released all slaves
[  349.288022][ T5958] bond3 (unregistering): (slave veth5): Releasing active interface
[  349.296788][ T5958] bond3 (unregistering): Released all slaves
[  349.388882][ T5958] bond4 (unregistering): Released all slaves
[  349.401832][ T5958] bond5 (unregistering): Released all slaves
[  349.501120][ T5958] bond6 (unregistering): Released all slaves
[  349.513763][T16229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.520992][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.547968][T16229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.563857][T16229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.571109][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.598233][T16229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.791242][T16349] nft_compat: unsupported protocol 0
[  349.862075][T16352] bond0: (slave gre0): Device is not bonding slave
[  349.868825][T16352] bond0: option active_slave: invalid value (gre0)
[  349.878364][T16352] bond0 (unregistering): Released all slaves
[  349.944972][T16357] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  349.948750][T16229] hsr_slave_0: entered promiscuous mode
[  349.953808][T16357] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  349.966271][T16229] hsr_slave_1: entered promiscuous mode
[  349.981664][T16229] debugfs: 'hsr0' already exists in 'hsr'
[  349.989474][T16229] Cannot create hsr debugfs directory
[  350.263237][T16375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.365322][ T5839] Bluetooth: hci5: command tx timeout
[  350.368351][T16380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.564485][T16392] __nla_validate_parse: 4 callbacks suppressed
[  350.564504][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'.
[  350.743487][T16394] netlink: 'syz.2.2951': attribute type 1 has an invalid length.
[  350.748937][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'.
[  350.779246][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'.
[  350.911080][T16229] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  350.935065][T16229] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  350.960056][T16229] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  351.012906][T16229] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  351.219322][T16229] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.266400][T16229] 8021q: adding VLAN 0 to HW filter on device team0
[  351.298227][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.305468][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.332532][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.339769][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.489047][T16229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.650398][T16229] veth0_vlan: entered promiscuous mode
[  351.679210][T16229] veth1_vlan: entered promiscuous mode
[  351.732535][T16229] veth0_macvtap: entered promiscuous mode
[  351.770584][T16229] veth1_macvtap: entered promiscuous mode
[  351.814119][T16229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.840092][T16229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.841743][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'.
[  351.857258][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.857524][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.942255][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.960754][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.979089][ T5958] tipc: Disabling bearer <eth:syzkaller0>
[  351.985951][ T5958] tipc: Disabling bearer <udp:syz2>
[  351.994087][ T5958] tipc: Left network mode
[  352.360232][ T6293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.379276][ T6293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.445716][ T5839] Bluetooth: hci5: command 0x040f tx timeout
[  352.475751][T16467] batadv_slave_0: entered promiscuous mode
[  352.497635][T16466] batadv_slave_0: left promiscuous mode
[  352.531650][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.550213][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.815552][T16474] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.835359][T16478] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  352.995565][ T5958] hsr_slave_0: left promiscuous mode
[  353.064275][ T5958] hsr_slave_1: left promiscuous mode
[  353.070883][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'.
[  353.185508][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'.
[  353.700529][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  353.713006][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  353.726797][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  353.737368][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  353.746854][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  353.853646][ T5958] team0 (unregistering): Port device team_slave_1 removed
[  353.894362][ T5958] team0 (unregistering): Port device team_slave_0 removed
[  354.126054][T16489] tipc: New replicast peer: 255.255.255.255
[  354.132609][T16489] tipc: Enabled bearer <udp:syz2>, priority 10
[  354.396380][T16508] netlink: 'syz.3.2983': attribute type 17 has an invalid length.
[  354.436784][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'.
[  354.459984][T16508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2983'.
[  354.524961][ T5839] Bluetooth: hci5: command 0x040f tx timeout
[  354.726664][ T5958] IPVS: stop unused estimator thread 0...
[  354.944019][T16534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'.
[  355.218981][T16544] openvswitch: netlink: Flow actions attr not present in new flow.
[  355.307207][T16503] chnl_net:caif_netlink_parms(): no params data found
[  355.341549][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2995'.
[  355.607399][T16503] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.614609][T16503] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.645215][T16503] bridge_slave_0: entered allmulticast mode
[  355.653689][T16503] bridge_slave_0: entered promiscuous mode
[  355.712062][T16503] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.726638][T16503] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.734060][T16503] bridge_slave_1: entered allmulticast mode
[  355.759708][T16503] bridge_slave_1: entered promiscuous mode
[  355.805233][ T5839] Bluetooth: hci2: command tx timeout
[  355.948604][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'.
[  355.981636][T16580] netlink: 'syz.0.3005': attribute type 1 has an invalid length.
[  356.018522][T16503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.076669][T16503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.277693][T16585] veth7: entered promiscuous mode
[  356.316636][T16585] bond5: (slave veth7): Enslaving as a backup interface with a down link
[  356.396458][T16503] team0: Port device team_slave_0 added
[  356.413101][T16503] team0: Port device team_slave_1 added
[  356.495985][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3009'.
[  356.516740][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'.
[  356.549870][T16503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.573583][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.585908][T16602] netlink: 'syz.2.3011': attribute type 1 has an invalid length.
[  356.602708][T16503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.620039][ T5839] Bluetooth: hci5: command 0x040f tx timeout
[  356.630433][T16503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.637537][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.664305][T16503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.722836][T16607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3013'.
[  356.737853][T16611] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3011'.
[  356.755825][T16610] netlink: 'syz.0.3013': attribute type 33 has an invalid length.
[  356.769763][T16610] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3013'.
[  356.830851][T16602] bond0: entered promiscuous mode
[  356.837467][T16602] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.979397][T16503] hsr_slave_0: entered promiscuous mode
[  357.002185][T16503] hsr_slave_1: entered promiscuous mode
[  357.026511][T16503] debugfs: 'hsr0' already exists in 'hsr'
[  357.050057][T16503] Cannot create hsr debugfs directory
[  357.426528][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'.
[  357.448483][T16633] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  357.460355][T16633] bond9 (unregistering): Released all slaves
[  357.561651][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'.
[  357.808514][T16652] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  357.840423][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'.
[  357.887421][ T5839] Bluetooth: hci2: command tx timeout
[  357.931236][T16659] set match dimension is over the limit!
[  358.114140][T16667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3031'.
[  358.223452][T16673] syzkaller0: entered promiscuous mode
[  358.235605][T16673] syzkaller0: entered allmulticast mode
[  358.290016][T16673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.348956][T16672] tipc: Resetting bearer <eth:syzkaller0>
[  358.391288][T16672] tipc: Disabling bearer <eth:syzkaller0>
[  358.498268][T16503] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  358.531026][T16503] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  358.575960][T16503] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  358.606926][T16503] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  358.617018][T16683] netlink: 'syz.2.3038': attribute type 2 has an invalid length.
[  358.843402][T16694] netlink: 'syz.1.3041': attribute type 1 has an invalid length.
[  358.894278][T16694] netlink: 'syz.1.3041': attribute type 2 has an invalid length.
[  359.011717][T16503] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.022342][T16700] xt_CT: You must specify a L4 protocol and not use inversions on it
[  359.128825][T16503] 8021q: adding VLAN 0 to HW filter on device team0
[  359.190104][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.197308][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.247823][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.255038][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.965004][ T5839] Bluetooth: hci2: command tx timeout
[  359.974139][T16752] syzkaller1: entered promiscuous mode
[  359.981847][T16752] syzkaller1: entered allmulticast mode
[  360.005709][T16752] netlink: 'syz.3.3053': attribute type 1 has an invalid length.
[  360.019940][T16752] netlink: 'syz.3.3053': attribute type 4 has an invalid length.
[  360.032949][T16503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.659622][T16787] veth15: entered allmulticast mode
[  360.899737][T16799] IPv6: sit2: Disabled Multicast RS
[  360.928492][T16799] sit2: entered allmulticast mode
[  360.970393][T16805] netlink: 'syz.3.3067': attribute type 11 has an invalid length.
[  360.988412][T16503] veth0_vlan: entered promiscuous mode
[  361.000026][T16803] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.016578][T16802] geneve2: entered promiscuous mode
[  361.172019][ T2972] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20133 - 0
[  361.202059][T16815] __nla_validate_parse: 12 callbacks suppressed
[  361.202079][T16815] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3071'.
[  361.204949][ T2972] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20133 - 0
[  361.227139][T16815] openvswitch: netlink: Flow key attr not present in new flow.
[  361.235109][ T2972] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20133 - 0
[  361.312512][T16503] veth1_vlan: entered promiscuous mode
[  361.343970][ T2972] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20133 - 0
[  361.394471][T16823] netlink: 'syz.2.3072': attribute type 1 has an invalid length.
[  361.408630][T16823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3072'.
[  361.618338][T16503] veth0_macvtap: entered promiscuous mode
[  361.651134][T16503] veth1_macvtap: entered promiscuous mode
[  361.713131][T16833] netlink: 'syz.0.3077': attribute type 4 has an invalid length.
[  361.721095][T16503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.792430][T16503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.815496][ T6293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.850602][ T6293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.872227][ T6293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.882522][ T6293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.044933][ T5839] Bluetooth: hci2: command tx timeout
[  362.642157][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'.
[  362.693501][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.718077][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.755869][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.773762][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  362.786774][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.791380][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3082'.
[  363.526876][T16896] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  363.646665][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3094'.
[  363.690304][T16900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3094'.
[  363.859668][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.880107][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.896166][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.908495][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.914694][ T6295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20133 - 0
[  363.927871][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.092993][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3102'.
[  364.129078][ T6295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20133 - 0
[  364.157766][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'.
[  364.200714][T16934] netlink: 'syz.2.3104': attribute type 10 has an invalid length.
[  364.215977][T16930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3103'.
[  364.290350][ T6295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20133 - 0
[  364.355049][T16943] netlink: 'syz.4.3106': attribute type 10 has an invalid length.
[  364.396974][T16934] team0: Port device dummy0 added
[  364.463119][ T6295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20133 - 0
[  364.562904][T16950] netlink: 'syz.3.3108': attribute type 11 has an invalid length.
[  364.868811][ T6295] batadv3: left allmulticast mode
[  364.877790][ T6295] batadv3: left promiscuous mode
[  364.894367][ T6295] bridge0: port 4(batadv3) entered disabled state
[  364.951461][ T6295] bridge_slave_1: left allmulticast mode
[  364.971406][ T6295] bridge_slave_1: left promiscuous mode
[  364.985598][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.015900][ T6295] bridge_slave_0: left allmulticast mode
[  365.021586][ T6295] bridge_slave_0: left promiscuous mode
[  365.030329][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.378993][ T6295] bridge0 (unregistering): left allmulticast mode
[  365.455563][ T6295] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  365.504366][ T6295] team0: Port device bridge2 removed
[  365.758779][ T6295] bond0 (unregistering): left promiscuous mode
[  365.765205][ T6295] bond_slave_0: left promiscuous mode
[  365.772040][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.782209][ T6295] bond0 (unregistering): Released all slaves
[  365.795823][ T6295] bond1 (unregistering): Released all slaves
[  365.906639][ T6295] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  365.916531][ T6295] bond2 (unregistering): Released all slaves
[  365.929539][ T6295] bond3 (unregistering): Released all slaves
[  365.942738][ T6295] bond4 (unregistering): Released all slaves
[  365.969133][ T5149] Bluetooth: hci0: command tx timeout
[  366.049340][ T6295] bond5 (unregistering): Released all slaves
[  366.061591][ T6295] bond6 (unregistering): Released all slaves
[  366.074146][ T6295] bond7 (unregistering): Released all slaves
[  366.168555][ T6295] bond8 (unregistering): Released all slaves
[  366.250306][T16976] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  366.366798][ T6295] : left promiscuous mode
[  366.527814][T16991] netlink: 'syz.3.3115': attribute type 8 has an invalid length.
[  366.576749][T16991] __nla_validate_parse: 4 callbacks suppressed
[  366.576766][T16991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3115'.
[  366.592492][ T6295] tipc: Disabling bearer <udp:syz0>
[  366.598240][T16995] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000
[  366.608906][ T6295] tipc: Left network mode
[  367.460382][T16912] chnl_net:caif_netlink_parms(): no params data found
[  367.705510][T17040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'.
[  367.908179][T16912] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.928228][T16912] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.945160][T16912] bridge_slave_0: entered allmulticast mode
[  367.957902][T16912] bridge_slave_0: entered promiscuous mode
[  367.981272][T16912] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.000454][T16912] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.012439][T16912] bridge_slave_1: entered allmulticast mode
[  368.038979][T16912] bridge_slave_1: entered promiscuous mode
[  368.045031][ T5149] Bluetooth: hci0: command tx timeout
[  368.228058][T16912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.297903][T16912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.698771][T16912] team0: Port device team_slave_0 added
[  368.728098][T16912] team0: Port device team_slave_1 added
[  368.797552][T17077] sctp: [Deprecated]: syz.4.3144 (pid 17077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.797552][T17077] Use struct sctp_sack_info instead
[  368.814201][ T6295] batadv0: left promiscuous mode
[  368.823893][ T6295] hsr_slave_0: left promiscuous mode
[  368.832231][T17081] sctp: [Deprecated]: syz.4.3144 (pid 17081) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.832231][T17081] Use struct sctp_sack_info instead
[  368.832266][ T6295] hsr_slave_1: left promiscuous mode
[  368.857063][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.929762][ T6295] team0 (unregistering): Port device batadv4 removed
[  369.053343][ T6295] pimreg3 (unregistering): left allmulticast mode
[  369.591060][ T6295] team0 (unregistering): Port device team_slave_1 removed
[  369.629653][ T6295] team0 (unregistering): Port device team_slave_0 removed
[  369.883263][T16912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.896170][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.922934][T16912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.952514][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'.
[  369.979169][T16912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.991933][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.026679][T16912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.064769][ T6293] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.075544][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'.
[  370.094599][ T6293] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.125530][ T5149] Bluetooth: hci0: command tx timeout
[  370.185407][ T6293] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.224983][ T6293] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.340271][T16912] hsr_slave_0: entered promiscuous mode
[  370.348188][T16912] hsr_slave_1: entered promiscuous mode
[  370.356403][T16912] debugfs: 'hsr0' already exists in 'hsr'
[  370.362429][T16912] Cannot create hsr debugfs directory
[  370.400451][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'.
[  370.487586][T17115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3152'.
[  370.528087][T17117] syzkaller1: entered promiscuous mode
[  370.536245][T17117] syzkaller1: entered allmulticast mode
[  370.543591][T17119] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3155'.
[  371.181007][T16912] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  371.232473][T16912] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  371.263986][T16912] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  371.284482][T16912] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  371.534184][T16912] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.648396][T16912] 8021q: adding VLAN 0 to HW filter on device team0
[  371.687609][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.694853][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.749947][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.757180][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.778893][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'.
[  371.802302][T17160] bridge_slave_1: left allmulticast mode
[  371.813821][T17160] bridge_slave_1: left promiscuous mode
[  371.821518][T17160] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.834525][T17160] bridge_slave_0: left allmulticast mode
[  371.852583][T17160] bridge_slave_0: left promiscuous mode
[  371.858850][T17160] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.899587][T17166] x_tables: ip_tables: icmp match: only valid for protocol 1
[  372.040319][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3170'.
[  372.083334][T17178] netlink: 'syz.2.3170': attribute type 7 has an invalid length.
[  372.121539][T17178] netlink: 'syz.2.3170': attribute type 8 has an invalid length.
[  372.163103][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3170'.
[  372.206053][ T5149] Bluetooth: hci0: command tx timeout
[  372.220356][T17178] 0ªî{X¹¦: entered promiscuous mode
[  372.228582][T17178] batadv_slave_1: entered promiscuous mode
[  372.238190][T17178] 0ªî{X¹¦: left promiscuous mode
[  372.253287][T17178] batadv_slave_1: left promiscuous mode
[  372.449507][T16912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.492209][T17196] syzkaller1: entered promiscuous mode
[  372.499552][T17196] syzkaller1: entered allmulticast mode
[  372.725060][T16912] veth0_vlan: entered promiscuous mode
[  372.761574][T16912] veth1_vlan: entered promiscuous mode
[  372.917068][T16912] veth0_macvtap: entered promiscuous mode
[  372.968367][T16912] veth1_macvtap: entered promiscuous mode
[  373.044495][T16912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.102920][T16912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.152943][ T6295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.194563][ T6295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.245605][ T6295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.264153][ T6295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.283326][T17239] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  373.468811][T17246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.496803][T17246] syzkaller0: mtu less than device minimum
[  373.504538][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.523253][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.603661][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.614690][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.709057][T17251] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  373.775243][T17251] vlan2: left promiscuous mode
[  373.780660][T17251] geneve1: left promiscuous mode
[  373.791160][T17251] xfrm1: left promiscuous mode
[  373.815674][T17251] bond4: left promiscuous mode
[  373.830755][T17251] ip6gre3: left promiscuous mode
[  373.871184][T17251] team1: left promiscuous mode
[  373.897820][T17251] veth7: left promiscuous mode
[  373.908248][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3194'.
[  373.919991][ T2972] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.940221][ T2972] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.977535][T17259] netlink: 'syz.4.3192': attribute type 3 has an invalid length.
[  374.046818][ T2972] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.077365][ T2972] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.100621][T17256] 8021q: VLANs not supported on ip_vti0
[  374.174564][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  374.225180][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  374.285781][T17269] netlink: 'syz.3.3197': attribute type 10 has an invalid length.
[  374.305639][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3197'.
[  374.356982][T17275] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3198'.
[  374.398580][T17274] A link change request failed with some changes committed already. Interface vetè0_virt_wifi may have been left with an inconsistent configuration, please check.
[  374.459466][T17281] netlink: 'syz.1.3199': attribute type 83 has an invalid length.
[  374.653699][T17288] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  374.906957][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3204'.
[  374.936291][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3203'.
[  375.155727][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  375.168226][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  375.179774][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  375.200413][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  375.211740][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  375.417354][T17322] openvswitch: netlink: Flow key attr not present in new flow.
[  375.907209][T17336] syzkaller0: entered promiscuous mode
[  375.912716][T17336] syzkaller0: entered allmulticast mode
[  376.136691][T17315] chnl_net:caif_netlink_parms(): no params data found
[  376.319065][T17366] FAULT_INJECTION: forcing a failure.
[  376.319065][T17366] name failslab, interval 1, probability 0, space 0, times 1
[  376.336122][T17366] CPU: 0 UID: 0 PID: 17366 Comm: syz.2.3222 Not tainted syzkaller #0 PREEMPT(full) 
[  376.336150][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  376.336166][T17366] Call Trace:
[  376.336174][T17366]  <TASK>
[  376.336182][T17366]  dump_stack_lvl+0x189/0x250
[  376.336216][T17366]  ? __pfx____ratelimit+0x10/0x10
[  376.336243][T17366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.336268][T17366]  ? __pfx__printk+0x10/0x10
[  376.336303][T17366]  ? __pfx___might_resched+0x10/0x10
[  376.336324][T17366]  ? fs_reclaim_acquire+0x7d/0x100
[  376.336359][T17366]  should_fail_ex+0x414/0x560
[  376.336393][T17366]  should_failslab+0xa8/0x100
[  376.336414][T17366]  kmem_cache_alloc_node_noprof+0x77/0x710
[  376.336442][T17366]  ? __alloc_skb+0x112/0x2d0
[  376.336459][T17366]  ? netlink_autobind+0xdb/0x300
[  376.336484][T17366]  __alloc_skb+0x112/0x2d0
[  376.336507][T17366]  netlink_sendmsg+0x5c6/0xb30
[  376.336536][T17366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.336559][T17366]  ? __lock_acquire+0xab9/0xd20
[  376.336576][T17366]  ? aa_sock_msg_perm+0xf1/0x1d0
[  376.336607][T17366]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  376.336626][T17366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.336648][T17366]  __sock_sendmsg+0x21c/0x270
[  376.336677][T17366]  ____sys_sendmsg+0x505/0x830
[  376.336704][T17366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  376.336735][T17366]  ? import_iovec+0x74/0xa0
[  376.336764][T17366]  ___sys_sendmsg+0x21f/0x2a0
[  376.336788][T17366]  ? __pfx____sys_sendmsg+0x10/0x10
[  376.336846][T17366]  ? __fget_files+0x2a/0x420
[  376.336864][T17366]  ? __fget_files+0x3a0/0x420
[  376.336893][T17366]  __x64_sys_sendmsg+0x19b/0x260
[  376.336918][T17366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  376.336950][T17366]  ? __pfx_ksys_write+0x10/0x10
[  376.336981][T17366]  ? do_syscall_64+0xbe/0xfa0
[  376.337012][T17366]  do_syscall_64+0xfa/0xfa0
[  376.337039][T17366]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.337066][T17366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.337085][T17366]  ? clear_bhb_loop+0x60/0xb0
[  376.337109][T17366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.337132][T17366] RIP: 0033:0x7fef7718f749
[  376.337149][T17366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.337167][T17366] RSP: 002b:00007fef78038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  376.337188][T17366] RAX: ffffffffffffffda RBX: 00007fef773e5fa0 RCX: 00007fef7718f749
[  376.337202][T17366] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  376.337215][T17366] RBP: 00007fef78038090 R08: 0000000000000000 R09: 0000000000000000
[  376.337227][T17366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.337238][T17366] R13: 00007fef773e6038 R14: 00007fef773e5fa0 R15: 00007fff3f8ef7a8
[  376.337272][T17366]  </TASK>
[  377.201944][T17315] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.209646][T17315] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.237096][T17315] bridge_slave_0: entered allmulticast mode
[  377.247564][ T5149] Bluetooth: hci1: command tx timeout
[  377.267061][T17315] bridge_slave_0: entered promiscuous mode
[  377.319026][T17315] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.337542][T17315] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.356689][T17315] bridge_slave_1: entered allmulticast mode
[  377.360461][T17398] netlink: 'syz.1.3229': attribute type 1 has an invalid length.
[  377.371074][T17398] netlink: 'syz.1.3229': attribute type 2 has an invalid length.
[  377.376660][T17315] bridge_slave_1: entered promiscuous mode
[  377.460407][T17402] __nla_validate_parse: 12 callbacks suppressed
[  377.460429][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3230'.
[  377.525608][T17315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.620947][T17315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.632385][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3230'.
[  377.657222][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3232'.
[  377.683419][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3230'.
[  377.779616][T17315] team0: Port device team_slave_0 added
[  377.796534][T17419] bond0: left promiscuous mode
[  377.846108][T17315] team0: Port device team_slave_1 added
[  378.048124][T17315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.058328][T17315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.062174][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'.
[  378.085827][T17315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.107237][T17315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.114206][T17315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.141884][T17315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.297993][T17315] hsr_slave_0: entered promiscuous mode
[  378.309452][T17315] hsr_slave_1: entered promiscuous mode
[  378.316322][T17315] debugfs: 'hsr0' already exists in 'hsr'
[  378.322711][T17315] Cannot create hsr debugfs directory
[  378.668282][T17427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  378.910956][T17461] FAULT_INJECTION: forcing a failure.
[  378.910956][T17461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.928334][T17461] CPU: 1 UID: 0 PID: 17461 Comm: syz.1.3244 Not tainted syzkaller #0 PREEMPT(full) 
[  378.928358][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  378.928370][T17461] Call Trace:
[  378.928378][T17461]  <TASK>
[  378.928386][T17461]  dump_stack_lvl+0x189/0x250
[  378.928417][T17461]  ? __pfx____ratelimit+0x10/0x10
[  378.928444][T17461]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.928468][T17461]  ? __pfx__printk+0x10/0x10
[  378.928486][T17461]  ? __might_fault+0xb0/0x130
[  378.928524][T17461]  should_fail_ex+0x414/0x560
[  378.928556][T17461]  _copy_from_iter+0x1de/0x1790
[  378.928584][T17461]  ? rcu_is_watching+0x15/0xb0
[  378.928610][T17461]  ? kmalloc_reserve+0xbd/0x290
[  378.928629][T17461]  ? __pfx__copy_from_iter+0x10/0x10
[  378.928653][T17461]  ? __build_skb_around+0x262/0x3f0
[  378.928675][T17461]  ? netlink_sendmsg+0x642/0xb30
[  378.928692][T17461]  ? skb_put+0x11b/0x210
[  378.928712][T17461]  netlink_sendmsg+0x6b2/0xb30
[  378.928740][T17461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.928763][T17461]  ? __lock_acquire+0xab9/0xd20
[  378.928779][T17461]  ? aa_sock_msg_perm+0xf1/0x1d0
[  378.928809][T17461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  378.928827][T17461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.928847][T17461]  __sock_sendmsg+0x21c/0x270
[  378.928877][T17461]  ____sys_sendmsg+0x505/0x830
[  378.928903][T17461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  378.928935][T17461]  ? import_iovec+0x74/0xa0
[  378.928961][T17461]  ___sys_sendmsg+0x21f/0x2a0
[  378.928986][T17461]  ? __pfx____sys_sendmsg+0x10/0x10
[  378.929044][T17461]  ? __fget_files+0x2a/0x420
[  378.929061][T17461]  ? __fget_files+0x3a0/0x420
[  378.929091][T17461]  __x64_sys_sendmsg+0x19b/0x260
[  378.929116][T17461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  378.929149][T17461]  ? __pfx_ksys_write+0x10/0x10
[  378.929181][T17461]  ? do_syscall_64+0xbe/0xfa0
[  378.929212][T17461]  do_syscall_64+0xfa/0xfa0
[  378.929249][T17461]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.929277][T17461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.929296][T17461]  ? clear_bhb_loop+0x60/0xb0
[  378.929320][T17461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.929339][T17461] RIP: 0033:0x7f9cc678f749
[  378.929356][T17461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.929373][T17461] RSP: 002b:00007f9cc75be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.929393][T17461] RAX: ffffffffffffffda RBX: 00007f9cc69e5fa0 RCX: 00007f9cc678f749
[  378.929407][T17461] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  378.929419][T17461] RBP: 00007f9cc75be090 R08: 0000000000000000 R09: 0000000000000000
[  378.929431][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.929442][T17461] R13: 00007f9cc69e6038 R14: 00007f9cc69e5fa0 R15: 00007fff964d7d98
[  378.929477][T17461]  </TASK>
[  378.943801][T17315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  379.075991][T17467] FAULT_INJECTION: forcing a failure.
[  379.075991][T17467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  379.244631][T17477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3247'.
[  379.255105][T17467] CPU: 1 UID: 0 PID: 17467 Comm: syz.2.3246 Not tainted syzkaller #0 PREEMPT(full) 
[  379.255131][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  379.255144][T17467] Call Trace:
[  379.255151][T17467]  <TASK>
[  379.255158][T17467]  dump_stack_lvl+0x189/0x250
[  379.255190][T17467]  ? __pfx____ratelimit+0x10/0x10
[  379.255217][T17467]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.255248][T17467]  ? __pfx__printk+0x10/0x10
[  379.255267][T17467]  ? __might_fault+0xb0/0x130
[  379.255305][T17467]  should_fail_ex+0x414/0x560
[  379.255338][T17467]  _copy_from_user+0x2d/0xb0
[  379.255364][T17467]  ___sys_sendmsg+0x158/0x2a0
[  379.255388][T17467]  ? __pfx____sys_sendmsg+0x10/0x10
[  379.255444][T17467]  ? __fget_files+0x2a/0x420
[  379.255462][T17467]  ? __fget_files+0x3a0/0x420
[  379.255490][T17467]  __x64_sys_sendmsg+0x19b/0x260
[  379.255514][T17467]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  379.255545][T17467]  ? __pfx_ksys_write+0x10/0x10
[  379.255575][T17467]  ? do_syscall_64+0xbe/0xfa0
[  379.255605][T17467]  do_syscall_64+0xfa/0xfa0
[  379.255631][T17467]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.255657][T17467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.255676][T17467]  ? clear_bhb_loop+0x60/0xb0
[  379.255698][T17467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.255717][T17467] RIP: 0033:0x7fef7718f749
[  379.255733][T17467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.255749][T17467] RSP: 002b:00007fef78038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  379.255770][T17467] RAX: ffffffffffffffda RBX: 00007fef773e5fa0 RCX: 00007fef7718f749
[  379.255785][T17467] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  379.255797][T17467] RBP: 00007fef78038090 R08: 0000000000000000 R09: 0000000000000000
[  379.255809][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.255820][T17467] R13: 00007fef773e6038 R14: 00007fef773e5fa0 R15: 00007fff3f8ef7a8
[  379.255852][T17467]  </TASK>
[  379.325646][ T5149] Bluetooth: hci1: command tx timeout
[  379.367730][T17480] netlink: 'syz.2.3248': attribute type 2 has an invalid length.
[  379.419360][T17472] 8021q: adding VLAN 0 to HW filter on device bond1
[  379.510530][T17315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  379.526208][T17315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  379.568640][T17315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  379.751710][T17315] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.797359][T17315] 8021q: adding VLAN 0 to HW filter on device team0
[  379.825811][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.831549][T17500] netlink: 'syz.3.3253': attribute type 8 has an invalid length.
[  379.833007][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.859912][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.867164][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.063870][T17509] FAULT_INJECTION: forcing a failure.
[  380.063870][T17509] name failslab, interval 1, probability 0, space 0, times 0
[  380.080901][T17509] CPU: 0 UID: 0 PID: 17509 Comm: syz.3.3256 Not tainted syzkaller #0 PREEMPT(full) 
[  380.080928][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  380.080939][T17509] Call Trace:
[  380.080948][T17509]  <TASK>
[  380.080955][T17509]  dump_stack_lvl+0x189/0x250
[  380.080986][T17509]  ? __pfx____ratelimit+0x10/0x10
[  380.081011][T17509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  380.081035][T17509]  ? __pfx__printk+0x10/0x10
[  380.081068][T17509]  ? __lock_acquire+0xab9/0xd20
[  380.081094][T17509]  should_fail_ex+0x414/0x560
[  380.081126][T17509]  should_failslab+0xa8/0x100
[  380.081146][T17509]  kmem_cache_alloc_noprof+0x74/0x6e0
[  380.081172][T17509]  ? skb_clone+0x212/0x3a0
[  380.081199][T17509]  skb_clone+0x212/0x3a0
[  380.081224][T17509]  __netlink_deliver_tap+0x404/0x850
[  380.081256][T17509]  ? netlink_deliver_tap+0x2e/0x1b0
[  380.081276][T17509]  netlink_deliver_tap+0x19c/0x1b0
[  380.081294][T17509]  netlink_unicast+0x7fa/0x9e0
[  380.081332][T17509]  ? __pfx_netlink_unicast+0x10/0x10
[  380.081358][T17509]  ? netlink_sendmsg+0x642/0xb30
[  380.081382][T17509]  netlink_sendmsg+0x805/0xb30
[  380.081410][T17509]  ? __pfx_netlink_sendmsg+0x10/0x10
[  380.081432][T17509]  ? aa_sock_msg_perm+0xf1/0x1d0
[  380.081461][T17509]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  380.081478][T17509]  ? __pfx_netlink_sendmsg+0x10/0x10
[  380.081496][T17509]  __sock_sendmsg+0x21c/0x270
[  380.081523][T17509]  ____sys_sendmsg+0x505/0x830
[  380.081547][T17509]  ? __pfx_____sys_sendmsg+0x10/0x10
[  380.081578][T17509]  ? import_iovec+0x74/0xa0
[  380.081603][T17509]  ___sys_sendmsg+0x21f/0x2a0
[  380.081626][T17509]  ? __pfx____sys_sendmsg+0x10/0x10
[  380.081685][T17509]  ? __fget_files+0x2a/0x420
[  380.081702][T17509]  ? __fget_files+0x3a0/0x420
[  380.081732][T17509]  __x64_sys_sendmsg+0x19b/0x260
[  380.081757][T17509]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  380.081788][T17509]  ? __pfx_ksys_write+0x10/0x10
[  380.081819][T17509]  ? do_syscall_64+0xbe/0xfa0
[  380.081848][T17509]  do_syscall_64+0xfa/0xfa0
[  380.081871][T17509]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.081901][T17509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.081918][T17509]  ? clear_bhb_loop+0x60/0xb0
[  380.081941][T17509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.081958][T17509] RIP: 0033:0x7f1df238f749
[  380.081976][T17509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.081992][T17509] RSP: 002b:00007f1df3143038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  380.082011][T17509] RAX: ffffffffffffffda RBX: 00007f1df25e5fa0 RCX: 00007f1df238f749
[  380.082025][T17509] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  380.082036][T17509] RBP: 00007f1df3143090 R08: 0000000000000000 R09: 0000000000000000
[  380.082055][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.082066][T17509] R13: 00007f1df25e6038 R14: 00007f1df25e5fa0 R15: 00007ffde9b48318
[  380.082100][T17509]  </TASK>
[  380.466018][T17515] Cannot find add_set index 1 as target
[  380.510754][T17315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.526194][T17516] FAULT_INJECTION: forcing a failure.
[  380.526194][T17516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.541143][T17516] CPU: 0 UID: 0 PID: 17516 Comm: syz.2.3257 Not tainted syzkaller #0 PREEMPT(full) 
[  380.541170][T17516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  380.541182][T17516] Call Trace:
[  380.541190][T17516]  <TASK>
[  380.541199][T17516]  dump_stack_lvl+0x189/0x250
[  380.541231][T17516]  ? __pfx____ratelimit+0x10/0x10
[  380.541258][T17516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  380.541285][T17516]  ? __pfx__printk+0x10/0x10
[  380.541320][T17516]  should_fail_ex+0x414/0x560
[  380.541355][T17516]  _copy_from_user+0x2d/0xb0
[  380.541381][T17516]  __copy_msghdr+0x3c5/0x5b0
[  380.541408][T17516]  ___sys_sendmsg+0x1a5/0x2a0
[  380.541432][T17516]  ? __pfx____sys_sendmsg+0x10/0x10
[  380.541492][T17516]  ? __fget_files+0x2a/0x420
[  380.541510][T17516]  ? __fget_files+0x3a0/0x420
[  380.541539][T17516]  __x64_sys_sendmsg+0x19b/0x260
[  380.541564][T17516]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  380.541596][T17516]  ? __pfx_ksys_write+0x10/0x10
[  380.541627][T17516]  ? do_syscall_64+0xbe/0xfa0
[  380.541659][T17516]  do_syscall_64+0xfa/0xfa0
[  380.541685][T17516]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.541712][T17516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.541732][T17516]  ? clear_bhb_loop+0x60/0xb0
[  380.541756][T17516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.541774][T17516] RIP: 0033:0x7fef7718f749
[  380.541792][T17516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.541809][T17516] RSP: 002b:00007fef78038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  380.541830][T17516] RAX: ffffffffffffffda RBX: 00007fef773e5fa0 RCX: 00007fef7718f749
[  380.541844][T17516] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  380.541857][T17516] RBP: 00007fef78038090 R08: 0000000000000000 R09: 0000000000000000
[  380.541869][T17516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.541881][T17516] R13: 00007fef773e6038 R14: 00007fef773e5fa0 R15: 00007fff3f8ef7a8
[  380.541915][T17516]  </TASK>
[  380.785097][T17315] veth0_vlan: entered promiscuous mode
[  380.831886][T17521] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  380.870027][T17315] veth1_vlan: entered promiscuous mode
[  380.886897][T17518] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  380.956534][T17315] veth0_macvtap: entered promiscuous mode
[  380.983145][T17315] veth1_macvtap: entered promiscuous mode
[  381.010056][T17315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.039743][T17315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.079780][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.110228][ T6289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.122960][ T6289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.147069][T17535] netlink: 'syz.4.3263': attribute type 1 has an invalid length.
[  381.263162][ T6289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.388995][T17549] FAULT_INJECTION: forcing a failure.
[  381.388995][T17549] name failslab, interval 1, probability 0, space 0, times 0
[  381.402983][T17549] CPU: 0 UID: 0 PID: 17549 Comm: syz.3.3267 Not tainted syzkaller #0 PREEMPT(full) 
[  381.403009][T17549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  381.403021][T17549] Call Trace:
[  381.403028][T17549]  <TASK>
[  381.403036][T17549]  dump_stack_lvl+0x189/0x250
[  381.403067][T17549]  ? __pfx____ratelimit+0x10/0x10
[  381.403093][T17549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.403119][T17549]  ? __pfx__printk+0x10/0x10
[  381.403146][T17549]  ? __pfx___might_resched+0x10/0x10
[  381.403166][T17549]  ? fs_reclaim_acquire+0x7d/0x100
[  381.403201][T17549]  should_fail_ex+0x414/0x560
[  381.403236][T17549]  should_failslab+0xa8/0x100
[  381.403258][T17549]  __kmalloc_noprof+0xcb/0x7f0
[  381.403285][T17549]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  381.403312][T17549]  ? __local_bh_enable_ip+0x12d/0x1c0
[  381.403339][T17549]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  381.403373][T17549]  genl_family_rcv_msg_doit+0xb8/0x300
[  381.403405][T17549]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  381.403436][T17549]  ? apparmor_capable+0x137/0x1b0
[  381.403460][T17549]  ? bpf_lsm_capable+0x9/0x20
[  381.403481][T17549]  ? security_capable+0x7e/0x2e0
[  381.403512][T17549]  genl_rcv_msg+0x60e/0x790
[  381.403542][T17549]  ? __pfx_genl_rcv_msg+0x10/0x10
[  381.403565][T17549]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  381.403587][T17549]  ? __pfx_nl80211_channel_switch+0x10/0x10
[  381.403607][T17549]  ? __pfx_nl80211_post_doit+0x10/0x10
[  381.403631][T17549]  ? __asan_memcpy+0x40/0x70
[  381.403656][T17549]  ? __pfx_ref_tracker_free+0x10/0x10
[  381.403685][T17549]  netlink_rcv_skb+0x208/0x470
[  381.403702][T17549]  ? __lock_acquire+0xab9/0xd20
[  381.403731][T17549]  ? __pfx_genl_rcv_msg+0x10/0x10
[  381.403758][T17549]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  381.403798][T17549]  ? down_read+0x1ad/0x2e0
[  381.403820][T17549]  genl_rcv+0x28/0x40
[  381.403843][T17549]  netlink_unicast+0x82f/0x9e0
[  381.403881][T17549]  ? __pfx_netlink_unicast+0x10/0x10
[  381.403912][T17549]  ? netlink_sendmsg+0x642/0xb30
[  381.403938][T17549]  netlink_sendmsg+0x805/0xb30
[  381.403967][T17549]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.403990][T17549]  ? __lock_acquire+0xab9/0xd20
[  381.404006][T17549]  ? aa_sock_msg_perm+0xf1/0x1d0
[  381.404037][T17549]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  381.404055][T17549]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.404077][T17549]  __sock_sendmsg+0x21c/0x270
[  381.404108][T17549]  ____sys_sendmsg+0x505/0x830
[  381.404136][T17549]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.404167][T17549]  ? import_iovec+0x74/0xa0
[  381.404193][T17549]  ___sys_sendmsg+0x21f/0x2a0
[  381.404215][T17549]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.404270][T17549]  ? __fget_files+0x2a/0x420
[  381.404287][T17549]  ? __fget_files+0x3a0/0x420
[  381.404313][T17549]  __x64_sys_sendmsg+0x19b/0x260
[  381.404336][T17549]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  381.404366][T17549]  ? __pfx_ksys_write+0x10/0x10
[  381.404395][T17549]  ? do_syscall_64+0xbe/0xfa0
[  381.404425][T17549]  do_syscall_64+0xfa/0xfa0
[  381.404449][T17549]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.404475][T17549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.404494][T17549]  ? clear_bhb_loop+0x60/0xb0
[  381.404516][T17549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.404534][T17549] RIP: 0033:0x7f1df238f749
[  381.404552][T17549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.404569][T17549] RSP: 002b:00007f1df3143038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.404590][T17549] RAX: ffffffffffffffda RBX: 00007f1df25e5fa0 RCX: 00007f1df238f749
[  381.404604][T17549] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  381.404617][T17549] RBP: 00007f1df3143090 R08: 0000000000000000 R09: 0000000000000000
[  381.404628][T17549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.404640][T17549] R13: 00007f1df25e6038 R14: 00007f1df25e5fa0 R15: 00007ffde9b48318
[  381.404676][T17549]  </TASK>
[  381.405663][ T5149] Bluetooth: hci1: command tx timeout
[  382.029310][T17565] FAULT_INJECTION: forcing a failure.
[  382.029310][T17565] name failslab, interval 1, probability 0, space 0, times 0
[  382.077098][T17565] CPU: 1 UID: 0 PID: 17565 Comm: syz.1.3271 Not tainted syzkaller #0 PREEMPT(full) 
[  382.077125][T17565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  382.077137][T17565] Call Trace:
[  382.077145][T17565]  <TASK>
[  382.077153][T17565]  dump_stack_lvl+0x189/0x250
[  382.077183][T17565]  ? __pfx____ratelimit+0x10/0x10
[  382.077208][T17565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.077233][T17565]  ? __pfx__printk+0x10/0x10
[  382.077264][T17565]  ? __pfx___might_resched+0x10/0x10
[  382.077284][T17565]  ? fs_reclaim_acquire+0x7d/0x100
[  382.077319][T17565]  should_fail_ex+0x414/0x560
[  382.077353][T17565]  should_failslab+0xa8/0x100
[  382.077376][T17565]  kmem_cache_alloc_node_noprof+0x77/0x710
[  382.077404][T17565]  ? __alloc_skb+0x112/0x2d0
[  382.077420][T17565]  ? netlink_autobind+0xdb/0x300
[  382.077447][T17565]  __alloc_skb+0x112/0x2d0
[  382.077471][T17565]  netlink_sendmsg+0x5c6/0xb30
[  382.077500][T17565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.077523][T17565]  ? __lock_acquire+0xab9/0xd20
[  382.077540][T17565]  ? aa_sock_msg_perm+0xf1/0x1d0
[  382.077579][T17565]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.077599][T17565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.077620][T17565]  __sock_sendmsg+0x21c/0x270
[  382.077652][T17565]  ____sys_sendmsg+0x505/0x830
[  382.077678][T17565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.077710][T17565]  ? import_iovec+0x74/0xa0
[  382.077740][T17565]  ___sys_sendmsg+0x21f/0x2a0
[  382.077764][T17565]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.077822][T17565]  ? __fget_files+0x2a/0x420
[  382.077839][T17565]  ? __fget_files+0x3a0/0x420
[  382.077870][T17565]  __x64_sys_sendmsg+0x19b/0x260
[  382.077896][T17565]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  382.077928][T17565]  ? __pfx_ksys_write+0x10/0x10
[  382.077959][T17565]  ? do_syscall_64+0xbe/0xfa0
[  382.077991][T17565]  do_syscall_64+0xfa/0xfa0
[  382.078018][T17565]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.078045][T17565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.078064][T17565]  ? clear_bhb_loop+0x60/0xb0
[  382.078088][T17565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.078106][T17565] RIP: 0033:0x7f9cc678f749
[  382.078124][T17565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.078142][T17565] RSP: 002b:00007f9cc759d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.078164][T17565] RAX: ffffffffffffffda RBX: 00007f9cc69e6090 RCX: 00007f9cc678f749
[  382.078179][T17565] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  382.078193][T17565] RBP: 00007f9cc759d090 R08: 0000000000000000 R09: 0000000000000000
[  382.078205][T17565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.078217][T17565] R13: 00007f9cc69e6128 R14: 00007f9cc69e6090 R15: 00007fff964d7d98
[  382.078249][T17565]  </TASK>
[  382.139107][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.175775][T17564] netlink: 'syz.3.3272': attribute type 83 has an invalid length.
[  382.178429][T17570] netlink: 'syz.2.3274': attribute type 9 has an invalid length.
[  382.374148][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.588878][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.603732][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.626260][T17583] FAULT_INJECTION: forcing a failure.
[  382.626260][T17583] name failslab, interval 1, probability 0, space 0, times 0
[  382.664103][T17583] CPU: 1 UID: 0 PID: 17583 Comm: syz.1.3278 Not tainted syzkaller #0 PREEMPT(full) 
[  382.664131][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  382.664143][T17583] Call Trace:
[  382.664150][T17583]  <TASK>
[  382.664158][T17583]  dump_stack_lvl+0x189/0x250
[  382.664189][T17583]  ? __pfx____ratelimit+0x10/0x10
[  382.664214][T17583]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.664237][T17583]  ? __pfx__printk+0x10/0x10
[  382.664258][T17583]  ? __pfx___might_resched+0x10/0x10
[  382.664281][T17583]  should_fail_ex+0x414/0x560
[  382.664314][T17583]  should_failslab+0xa8/0x100
[  382.664336][T17583]  kmem_cache_alloc_node_noprof+0x77/0x710
[  382.664362][T17583]  ? __alloc_skb+0x112/0x2d0
[  382.664387][T17583]  __alloc_skb+0x112/0x2d0
[  382.664409][T17583]  netlink_ack+0x146/0xa50
[  382.664425][T17583]  ? __pfx_genl_rcv_msg+0x10/0x10
[  382.664445][T17583]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  382.664465][T17583]  ? __pfx_nl80211_post_doit+0x10/0x10
[  382.664489][T17583]  ? __asan_memcpy+0x40/0x70
[  382.664512][T17583]  ? __pfx_ref_tracker_free+0x10/0x10
[  382.664540][T17583]  netlink_rcv_skb+0x28c/0x470
[  382.664557][T17583]  ? __lock_acquire+0xab9/0xd20
[  382.664587][T17583]  ? __pfx_genl_rcv_msg+0x10/0x10
[  382.664613][T17583]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  382.664653][T17583]  ? down_read+0x1ad/0x2e0
[  382.664675][T17583]  genl_rcv+0x28/0x40
[  382.664701][T17583]  netlink_unicast+0x82f/0x9e0
[  382.664735][T17583]  ? __pfx_netlink_unicast+0x10/0x10
[  382.664766][T17583]  ? netlink_sendmsg+0x642/0xb30
[  382.664791][T17583]  netlink_sendmsg+0x805/0xb30
[  382.664821][T17583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.664843][T17583]  ? __lock_acquire+0xab9/0xd20
[  382.664859][T17583]  ? aa_sock_msg_perm+0xf1/0x1d0
[  382.664890][T17583]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.664909][T17583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.664930][T17583]  __sock_sendmsg+0x21c/0x270
[  382.664959][T17583]  ____sys_sendmsg+0x505/0x830
[  382.664986][T17583]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.665016][T17583]  ? import_iovec+0x74/0xa0
[  382.665045][T17583]  ___sys_sendmsg+0x21f/0x2a0
[  382.665069][T17583]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.665130][T17583]  ? __fget_files+0x2a/0x420
[  382.665147][T17583]  ? __fget_files+0x3a0/0x420
[  382.665177][T17583]  __x64_sys_sendmsg+0x19b/0x260
[  382.665201][T17583]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  382.665234][T17583]  ? __pfx_ksys_write+0x10/0x10
[  382.665265][T17583]  ? do_syscall_64+0xbe/0xfa0
[  382.665297][T17583]  do_syscall_64+0xfa/0xfa0
[  382.665322][T17583]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.665349][T17583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.665369][T17583]  ? clear_bhb_loop+0x60/0xb0
[  382.665392][T17583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.665411][T17583] RIP: 0033:0x7f9cc678f749
[  382.665428][T17583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.665446][T17583] RSP: 002b:00007f9cc75be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.665466][T17583] RAX: ffffffffffffffda RBX: 00007f9cc69e5fa0 RCX: 00007f9cc678f749
[  382.665481][T17583] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  382.665493][T17583] RBP: 00007f9cc75be090 R08: 0000000000000000 R09: 0000000000000000
[  382.665506][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.665518][T17583] R13: 00007f9cc69e6038 R14: 00007f9cc69e5fa0 R15: 00007fff964d7d98
[  382.665551][T17583]  </TASK>
[  383.254351][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'.
[  383.289707][T17598] netlink: 'syz.0.3195': attribute type 5 has an invalid length.
[  383.313633][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3195'.
[  383.379939][T17598] geneve2: entered promiscuous mode
[  383.386052][T17598] geneve2: entered allmulticast mode
[  383.409412][ T2972] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  383.455127][ T2972] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  383.463796][ T2972] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  383.520028][ T2972] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  383.885165][ T5149] Bluetooth: hci1: command tx timeout
[  383.921382][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'.
[  383.957790][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'.
[  384.077775][T17634] netlink: 'syz.0.3293': attribute type 29 has an invalid length.
[  384.093719][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'.
[  384.196110][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  384.211501][T17643] FAULT_INJECTION: forcing a failure.
[  384.211501][T17643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.211719][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  384.227957][T17643] CPU: 1 UID: 0 PID: 17643 Comm: syz.1.3298 Not tainted syzkaller #0 PREEMPT(full) 
[  384.227983][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  384.227995][T17643] Call Trace:
[  384.228004][T17643]  <TASK>
[  384.228012][T17643]  dump_stack_lvl+0x189/0x250
[  384.228042][T17643]  ? __pfx____ratelimit+0x10/0x10
[  384.228069][T17643]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.228093][T17643]  ? __pfx__printk+0x10/0x10
[  384.228113][T17643]  ? __might_fault+0xb0/0x130
[  384.228151][T17643]  should_fail_ex+0x414/0x560
[  384.228184][T17643]  _copy_from_iter+0x1de/0x1790
[  384.228211][T17643]  ? rcu_is_watching+0x15/0xb0
[  384.228237][T17643]  ? kmalloc_reserve+0xbd/0x290
[  384.228256][T17643]  ? __pfx__copy_from_iter+0x10/0x10
[  384.228279][T17643]  ? __build_skb_around+0x262/0x3f0
[  384.228300][T17643]  ? netlink_sendmsg+0x642/0xb30
[  384.228318][T17643]  ? skb_put+0x11b/0x210
[  384.228339][T17643]  netlink_sendmsg+0x6b2/0xb30
[  384.228376][T17643]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.228404][T17643]  ? __lock_acquire+0xab9/0xd20
[  384.228421][T17643]  ? aa_sock_msg_perm+0xf1/0x1d0
[  384.228450][T17643]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  384.228469][T17643]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.228489][T17643]  __sock_sendmsg+0x21c/0x270
[  384.228518][T17643]  ____sys_sendmsg+0x505/0x830
[  384.228544][T17643]  ? __pfx_____sys_sendmsg+0x10/0x10
[  384.228575][T17643]  ? import_iovec+0x74/0xa0
[  384.228602][T17643]  ___sys_sendmsg+0x21f/0x2a0
[  384.228624][T17643]  ? __pfx____sys_sendmsg+0x10/0x10
[  384.228680][T17643]  ? __fget_files+0x2a/0x420
[  384.228697][T17643]  ? __fget_files+0x3a0/0x420
[  384.228724][T17643]  __x64_sys_sendmsg+0x19b/0x260
[  384.228748][T17643]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  384.228779][T17643]  ? __pfx_ksys_write+0x10/0x10
[  384.228814][T17643]  ? do_syscall_64+0xbe/0xfa0
[  384.228845][T17643]  do_syscall_64+0xfa/0xfa0
[  384.228871][T17643]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.228903][T17643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.228922][T17643]  ? clear_bhb_loop+0x60/0xb0
[  384.228951][T17643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.228970][T17643] RIP: 0033:0x7f9cc678f749
[  384.228988][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.229005][T17643] RSP: 002b:00007f9cc75be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  384.229026][T17643] RAX: ffffffffffffffda RBX: 00007f9cc69e5fa0 RCX: 00007f9cc678f749
[  384.229041][T17643] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  384.229055][T17643] RBP: 00007f9cc75be090 R08: 0000000000000000 R09: 0000000000000000
[  384.229067][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.229079][T17643] R13: 00007f9cc69e6038 R14: 00007f9cc69e5fa0 R15: 00007fff964d7d98
[  384.229113][T17643]  </TASK>
[  384.528820][T17641] veth3: entered promiscuous mode
[  384.535125][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  384.543923][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  384.552712][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  384.860960][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3301'.
[  384.880906][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3301'.
[  384.903467][T17662] geneve0: entered promiscuous mode
[  384.910701][T17662] geneve0: entered allmulticast mode
[  385.233228][T17681] xt_ipcomp: unknown flags 1D
[  385.243436][T17682] netlink: 'syz.4.3308': attribute type 1 has an invalid length.
[  385.319004][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'.
[  385.320393][T17687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3310'.
[  385.370666][ T6130] IPVS: starting estimator thread 0...
[  385.373070][T17688] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  385.376538][T17691] vcan0: tx drop: invalid da for name 0x0000000000008000
[  385.424200][T17687] bond2 (unregistering): Released all slaves
[  385.459396][T17688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3308'.
[  385.463305][T17686] bond1: Invalid ad_actor_system MAC address.
[  385.475751][T17686] bond1: option ad_actor_system: invalid value (1)
[  385.486502][T17692] IPVS: using max 25 ests per chain, 60000 per kthread
[  385.511210][T17686] bond1 (unregistering): Released all slaves
[  385.582984][T17682] veth3: entered promiscuous mode
[  385.595507][T17682] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  385.612189][T17694] syz.0.3311: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  385.630240][T17688] 8021q: adding VLAN 0 to HW filter on device bond1
[  385.639975][ T1341] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  385.645051][T17694] CPU: 1 UID: 0 PID: 17694 Comm: syz.0.3311 Not tainted syzkaller #0 PREEMPT(full) 
[  385.645078][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  385.645089][T17694] Call Trace:
[  385.645097][T17694]  <TASK>
[  385.645105][T17694]  dump_stack_lvl+0x189/0x250
[  385.645140][T17694]  ? __pfx_dump_stack_lvl+0x10/0x10
[  385.645167][T17694]  ? __pfx__printk+0x10/0x10
[  385.645188][T17694]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  385.645214][T17694]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  385.645243][T17694]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  385.645272][T17694]  warn_alloc+0x214/0x310
[  385.645301][T17694]  ? stack_depot_save_flags+0x40/0x860
[  385.645335][T17694]  ? __pfx_warn_alloc+0x10/0x10
[  385.645364][T17694]  ? kasan_save_track+0x3e/0x80
[  385.645389][T17694]  ? __kasan_kmalloc+0x93/0xb0
[  385.645416][T17694]  ? xsk_setsockopt+0x4dc/0x8d0
[  385.645439][T17694]  ? do_sock_setsockopt+0x17c/0x1b0
[  385.645456][T17694]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  385.645482][T17694]  ? do_syscall_64+0xfa/0xfa0
[  385.645507][T17694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.645536][T17694]  __vmalloc_node_range_noprof+0x125/0x12d0
[  385.645595][T17694]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  385.645626][T17694]  ? __kasan_kmalloc+0x93/0xb0
[  385.645660][T17694]  vmalloc_user_noprof+0xad/0xf0
[  385.645687][T17694]  ? xskq_create+0xbf/0x170
[  385.645713][T17694]  xskq_create+0xbf/0x170
[  385.645741][T17694]  xsk_init_queue+0xb0/0x110
[  385.645769][T17694]  xsk_setsockopt+0x4dc/0x8d0
[  385.645795][T17694]  ? __pfx_xsk_setsockopt+0x10/0x10
[  385.645822][T17694]  ? __pfx_aa_sk_perm+0x10/0x10
[  385.645854][T17694]  ? aa_sock_opt_perm+0xff/0x1b0
[  385.645885][T17694]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  385.645903][T17694]  ? __pfx_xsk_setsockopt+0x10/0x10
[  385.645928][T17694]  do_sock_setsockopt+0x17c/0x1b0
[  385.645952][T17694]  __x64_sys_setsockopt+0x13f/0x1b0
[  385.645978][T17694]  do_syscall_64+0xfa/0xfa0
[  385.646003][T17694]  ? lockdep_hardirqs_on+0x9c/0x150
[  385.646030][T17694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.646048][T17694]  ? clear_bhb_loop+0x60/0xb0
[  385.646071][T17694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.646089][T17694] RIP: 0033:0x7ffb4d58f749
[  385.646106][T17694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.646123][T17694] RSP: 002b:00007ffb4e36b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  385.646143][T17694] RAX: ffffffffffffffda RBX: 00007ffb4d7e6180 RCX: 00007ffb4d58f749
[  385.646157][T17694] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  385.646169][T17694] RBP: 00007ffb4d613f91 R08: 0000000000000004 R09: 0000000000000000
[  385.646180][T17694] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.646192][T17694] R13: 00007ffb4d7e6218 R14: 00007ffb4d7e6180 R15: 00007ffec882ccb8
[  385.646224][T17694]  </TASK>
[  385.646267][T17694] Mem-Info:
[  385.685671][T17691] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  385.699082][T17694] active_anon:5168 inactive_anon:0 isolated_anon:0
[  385.699082][T17694]  active_file:3150 inactive_file:39999 isolated_file:0
[  385.699082][T17694]  unevictable:768 dirty:139 writeback:0
[  385.699082][T17694]  slab_reclaimable:11943 slab_unreclaimable:113463
[  385.699082][T17694]  mapped:29236 shmem:1358 pagetables:1304
[  385.699082][T17694]  sec_pagetables:0 bounce:0
[  385.699082][T17694]  kernel_misc_reclaimable:0
[  385.699082][T17694]  free:1310489 free_pcp:13196 free_cma:0
[  385.817186][ T1341] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  385.873486][T17694] Node 0 active_anon:20572kB inactive_anon:0kB active_file:12600kB inactive_file:159796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117044kB dirty:556kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13868kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.895080][T17691] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  385.992604][T17694] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  386.057837][T17691] gretap1: entered promiscuous mode
[  386.067939][T17694] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.129033][T17691] gretap1: entered allmulticast mode
[  386.188154][T17694] lowmem_reserve[]: 0 2505 2505 2505 2505
[  386.194041][T17694] Node 0 DMA32 free:1335616kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20772kB inactive_anon:0kB active_file:12600kB inactive_file:159796kB unevictable:1536kB writepending:556kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:30732kB local_pcp:20444kB free_cma:0kB
[  386.229602][T17694] lowmem_reserve[]: 0 0 0 0 0
[  386.235806][T17694] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.269515][T17694] lowmem_reserve[]: 0 0 0 0 0
[  386.274366][T17694] Node 1 Normal free:3890376kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21560kB local_pcp:8736kB free_cma:0kB
[  386.327510][T17694] lowmem_reserve[]: 0 0 0 0 0
[  386.337983][T17694] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  386.351975][T17694] Node 0 DMA32: 546*4kB (ME) 411*8kB (UME) 205*16kB (ME) 89*32kB (ME) 63*64kB (ME) 360*128kB (UM) 499*256kB (UME) 283*512kB (UM) 171*1024kB (UME) 11*2048kB (UME) 196*4096kB (UM) = 1334800kB
[  386.391885][T17694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  386.404294][T17694] Node 1 Normal: 202*4kB (UE) 52*8kB (UME) 36*16kB (UME) 56*32kB (UME) 17*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890376kB
[  386.432506][T17694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  386.443587][T17694] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  386.457083][T17694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  386.469299][T17694] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  386.478945][T17694] 44506 total pagecache pages
[  386.502275][T17694] 0 pages in swap cache
[  386.507143][T17694] Free swap  = 124996kB
[  386.512484][T17694] Total swap = 124996kB
[  386.516742][T17694] 2097051 pages RAM
[  386.520565][T17694] 0 pages HighMem/MovableOnly
[  386.525780][T17694] 424122 pages reserved
[  386.529938][T17694] 0 pages cma reserved
[  386.582710][T17718] syzkaller0: entered promiscuous mode
[  386.605777][ T5149] Bluetooth: hci3: command tx timeout
[  386.624275][T17718] syzkaller0: entered allmulticast mode
[  386.674408][T17727] xt_hashlimit: overflow, rate too high: 0
[  386.902089][T17642] chnl_net:caif_netlink_parms(): no params data found
[  387.119556][T17741] 8021q: VLANs not supported on ipvlan1
[  387.374628][T17642] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.406404][T17642] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.416009][T17642] bridge_slave_0: entered allmulticast mode
[  387.423054][T17642] bridge_slave_0: entered promiscuous mode
[  387.522030][T17766] hsr_slave_0 (unregistering): left promiscuous mode
[  387.536257][T17642] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.544045][T17642] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.552305][T17642] bridge_slave_1: entered allmulticast mode
[  387.560948][T17642] bridge_slave_1: entered promiscuous mode
[  387.694633][T17642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.733760][T17642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.750744][T17796] bridge_slave_0: left allmulticast mode
[  387.756728][T17796] bridge_slave_0: left promiscuous mode
[  387.762443][T17796] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.772975][T17796] bridge_slave_1: left allmulticast mode
[  387.780985][T17796] bridge_slave_1: left promiscuous mode
[  387.787494][T17796] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.800224][T17796] bond0: (slave bond_slave_0): Releasing backup interface
[  387.817718][T17796] bond0: (slave bond_slave_1): Releasing backup interface
[  387.843591][T17796] team0: Port device team_slave_0 removed
[  387.860044][T17796] team0: Port device team_slave_1 removed
[  387.868269][T17796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.876310][T17796] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.885501][T17796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.893212][T17796] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.905018][T17796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  388.023884][T17642] team0: Port device team_slave_0 added
[  388.043082][T17642] team0: Port device team_slave_1 added
[  388.097058][T17805] netlink: 'syz.3.3337': attribute type 7 has an invalid length.
[  388.106103][T17805] netlink: 'syz.3.3337': attribute type 8 has an invalid length.
[  388.171622][T17642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.179583][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.207105][T17642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.221458][T17642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.233942][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.261264][T17642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.426960][T17642] hsr_slave_0: entered promiscuous mode
[  388.433831][T17642] hsr_slave_1: entered promiscuous mode
[  388.450373][T17642] debugfs: 'hsr0' already exists in 'hsr'
[  388.456835][T17642] Cannot create hsr debugfs directory
[  388.490676][T17829] __nla_validate_parse: 12 callbacks suppressed
[  388.490693][T17829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3345'.
[  388.672646][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'.
[  388.685149][ T5149] Bluetooth: hci3: command tx timeout
[  388.713047][T17842] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3349'.
[  388.737180][T17829] gtp0: entered promiscuous mode
[  388.742182][T17829] gtp0: entered allmulticast mode
[  388.750047][T17843] netlink: 'syz.3.3348': attribute type 29 has an invalid length.
[  388.779083][T17837] netlink: 'syz.3.3348': attribute type 29 has an invalid length.
[  388.829988][T17843] netlink: 'syz.3.3348': attribute type 29 has an invalid length.
[  388.867460][T17843] netlink: 'syz.3.3348': attribute type 29 has an invalid length.
[  389.093597][T17867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3354'.
[  389.111393][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'.
[  389.131231][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'.
[  389.147418][T17642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.219926][T17869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3357'.
[  389.309514][T17642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.387764][T17882] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3361'.
[  389.397252][T17882] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3361'.
[  389.466757][T17642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.592418][T17642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.799887][T17910] ip6gretap1: entered allmulticast mode
[  390.012264][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'.
[  390.034851][T17642] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  390.065559][T17642] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  390.109633][T17922] veth0_macvtap: left promiscuous mode
[  390.234494][T17642] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  390.271397][T17642] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  390.488338][T17958] netlink: 'syz.4.3381': attribute type 6 has an invalid length.
[  390.507523][T17958] netlink: 'syz.4.3381': attribute type 5 has an invalid length.
[  390.521445][T17642] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.568656][T17642] 8021q: adding VLAN 0 to HW filter on device team0
[  390.616181][T17790] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.623365][T17790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.657190][T17790] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.664478][T17790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.766151][ T5149] Bluetooth: hci3: command tx timeout
[  391.249480][T18004] netlink: 'syz.1.3395': attribute type 29 has an invalid length.
[  391.276851][T18004] netlink: 'syz.1.3395': attribute type 29 has an invalid length.
[  391.291892][T18006] netlink: 'syz.4.3396': attribute type 1 has an invalid length.
[  391.299867][T18006] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  391.403183][T17642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.517349][T17642] veth0_vlan: entered promiscuous mode
[  391.549470][T17642] veth1_vlan: entered promiscuous mode
[  391.628626][T17642] veth0_macvtap: entered promiscuous mode
[  391.642229][T18025] syzkaller0: entered promiscuous mode
[  391.650333][T18025] syzkaller0: entered allmulticast mode
[  391.682225][T17642] veth1_macvtap: entered promiscuous mode
[  391.751442][T18031] IPv6: addrconf: prefix option has invalid lifetime
[  392.026286][T18031] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.034045][T18031] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.181873][T18031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.203269][T18031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.495192][T18040] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  392.539870][  T134] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.607806][  T134] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  392.644560][  T134] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.668197][  T134] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  392.700451][T17642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.742222][  T134] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.764636][  T134] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  392.833188][  T134] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.843560][  T134] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  392.853061][ T5149] Bluetooth: hci3: command tx timeout
[  392.888017][T17642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.971173][ T6289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.987187][ T6297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.065668][ T6297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.099583][ T6297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.264393][T17790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.299054][T17790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.385621][T17788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.401939][T17788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.640885][T18082] __nla_validate_parse: 10 callbacks suppressed
[  393.640904][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'.
[  394.121837][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'.
[  394.160864][T18096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3420'.
[  394.170645][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'.
[  394.201258][T18096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3420'.
[  394.342220][T18102] validate_nla: 4 callbacks suppressed
[  394.342247][T18102] netlink: 'syz.3.3423': attribute type 1 has an invalid length.
[  394.400541][T18102] 8021q: adding VLAN 0 to HW filter on device bond2
[  394.420633][T18102] bond2: (slave veth0_to_bond): making interface the new active one
[  394.431116][T18102] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  394.591726][T18118] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  394.643329][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'.
[  394.676539][T18113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3427'.
[  394.738878][T18123] netlink: 'syz.0.3431': attribute type 19 has an invalid length.
[  394.905228][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'.
[  394.943578][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'.
[  395.141584][T18140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'.
[  395.303993][T18148] netlink: 'syz.2.3442': attribute type 1 has an invalid length.
[  395.315115][T18150] netlink: 'syz.2.3442': attribute type 1 has an invalid length.
[  395.446281][T18146] vcan0: tx drop: invalid da for name 0x0000000000008000
[  395.626991][T18160] netlink: 'syz.2.3446': attribute type 11 has an invalid length.
[  395.925734][T17788] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  395.935483][T17788] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  395.950531][T17788] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.972037][T17788] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.043659][T18176] netlink: 'syz.2.3451': attribute type 25 has an invalid length.
[  396.061444][T18176] netlink: 'syz.2.3451': attribute type 7 has an invalid length.
[  396.078546][T18176] netlink: 'syz.2.3451': attribute type 1 has an invalid length.
[  396.091275][T18176] netlink: 'syz.2.3451': attribute type 4 has an invalid length.
[  396.099426][T18176] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.332731][T18194] lo: entered promiscuous mode
[  396.363530][T18194] tunl0: entered promiscuous mode
[  396.397599][T18194] gre0: entered promiscuous mode
[  396.412221][T18194] gretap0: entered promiscuous mode
[  396.436669][T18194] erspan0: entered promiscuous mode
[  396.452460][T18194] ip_vti0: entered promiscuous mode
[  396.729492][T18218] team0: Device gtp0 is of different type
[  396.822853][T18222] ip6gre1: entered promiscuous mode
[  396.830384][T18222] ip6gre1: entered allmulticast mode
[  397.843458][T18266] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  397.987904][T18276] team0: Port device dummy0 added
[  398.002846][T18276] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  398.022182][T18276] team0: Failed to send options change via netlink (err -105)
[  398.030338][T18276] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  398.042284][T18276] team0: Port device dummy0 removed
[  398.058996][T18276] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  398.816909][ T9648] IPVS: starting estimator thread 0...
[  398.837497][T18313] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003
[  398.901215][T18316] __nla_validate_parse: 16 callbacks suppressed
[  398.901235][T18316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3491'.
[  398.945509][T18314] IPVS: using max 27 ests per chain, 64800 per kthread
[  399.043821][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3493'.
[  399.087614][T18057] Set syz1 is full, maxelem 65536 reached
[  399.635804][T18360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  399.734004][T18366] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3508'.
[  399.782007][T18371] validate_nla: 8 callbacks suppressed
[  399.782025][T18371] netlink: 'syz.4.3509': attribute type 2 has an invalid length.
[  399.805675][T18371] netlink: 'syz.4.3509': attribute type 2 has an invalid length.
[  399.828781][T18374] netlink: 'syz.2.3510': attribute type 13 has an invalid length.
[  399.837161][T18374] netlink: 'syz.2.3510': attribute type 17 has an invalid length.
[  399.841923][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3511'.
[  399.881534][T18377] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3512'.
[  399.900773][T18377] xt_policy: neither incoming nor outgoing policy selected
[  400.157611][T18374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  400.165550][T18390] Cannot find set identified by id 65534 to match
[  400.198512][T18381] netlink: 'syz.0.3511': attribute type 1 has an invalid length.
[  400.342653][T18394] syzkaller0: entered promiscuous mode
[  400.367731][T18394] syzkaller0: entered allmulticast mode
[  400.516880][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'.
[  400.528882][T18401] netlink: 'syz.3.3520': attribute type 10 has an invalid length.
[  400.555380][T18401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.565194][T18401] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  400.587616][T18403] netlink: 'syz.0.3521': attribute type 1 has an invalid length.
[  400.741158][T18416] Dead loop on virtual device ip6_vti0, fix it urgently!
[  400.792439][T18422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3527'.
[  400.889612][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'.
[  400.904076][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3528'.
[  401.040993][T18434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3531'.
[  401.141405][T18447] tipc: Started in network mode
[  401.147688][T18447] tipc: Node identity ac1414aa, cluster identity 4711
[  401.156214][T18447] tipc: Enabled bearer <udp:s>, priority 10
[  401.448183][T18469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.534051][T18474] netlink: 'syz.2.3541': attribute type 10 has an invalid length.
[  401.560817][T18474] bridge0: port 3(team0) entered blocking state
[  401.579310][T18474] bridge0: port 3(team0) entered disabled state
[  401.599992][T18474] team0: entered allmulticast mode
[  401.619977][T18474] team_slave_0: entered allmulticast mode
[  401.638744][T18474] team_slave_1: entered allmulticast mode
[  401.648118][T18474] team0: entered promiscuous mode
[  401.653586][T18474] team_slave_0: entered promiscuous mode
[  401.660040][T18474] team_slave_1: entered promiscuous mode
[  401.667981][T18474] bridge0: port 3(team0) entered blocking state
[  401.674422][T18474] bridge0: port 3(team0) entered forwarding state
[  402.052917][T18496] netlink: 'syz.3.3550': attribute type 1 has an invalid length.
[  402.189041][T18499] macvlan2: entered promiscuous mode
[  402.201240][T18499] macvlan2: entered allmulticast mode
[  402.216440][T18499] bond3: entered promiscuous mode
[  402.222385][T18499] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  402.240964][T18499] bond3: left promiscuous mode
[  402.378302][T12807] tipc: Node number set to 2886997162
[  402.567222][T18527] syzkaller0: entered promiscuous mode
[  402.592629][T18527] syzkaller0: entered allmulticast mode
[  402.915695][T18541] nbd: socks must be embedded in a SOCK_ITEM attr
[  403.074159][T18548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  403.098322][T18555] erspan0: entered promiscuous mode
[  403.103827][T18555] vlan2: entered promiscuous mode
[  403.197096][T18557] bond4: Unable to set up delay as MII monitoring is disabled
[  403.216416][T18557] bond4 (unregistering): Released all slaves
[  403.451275][T18588] dvmrp1: entered allmulticast mode
[  403.558202][T18595] batadv1: entered allmulticast mode
[  404.061771][T18602] __nla_validate_parse: 6 callbacks suppressed
[  404.061788][T18602] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3573'.
[  404.195703][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3576'.
[  404.248165][T18616] netlink: 'syz.4.3576': attribute type 1 has an invalid length.
[  404.331842][T18612] gretap1: entered promiscuous mode
[  404.410526][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'.
[  404.453177][T18630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3583'.
[  404.641584][T18637] tipc: Started in network mode
[  404.664675][T18637] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  404.672535][T18637] tipc: Enabled bearer <eth:ipvlan1>, priority 2
[  404.714326][T18647] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  404.974534][T18675] syzkaller0: entered promiscuous mode
[  404.989393][T18675] syzkaller0: entered allmulticast mode
[  405.056480][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3597'.
[  405.131571][T18684] xt_HMARK: proto mask must be zero with L3 mode
[  405.397622][T18704] bridge0: entered allmulticast mode
[  405.591325][T18715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3606'.
[  405.632963][T18715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3606'.
[  405.658892][T18720] netlink: 'syz.2.3607': attribute type 28 has an invalid length.
[  405.679318][T18720] netlink: 'syz.2.3607': attribute type 3 has an invalid length.
[  405.687659][T18720] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3607'.
[  405.785484][T12807] tipc: Node number set to 10136234
[  405.799898][T18729] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3609'.
[  405.833172][T18729] openvswitch: netlink: Flow actions attr not present in new flow.
[  405.881080][T18731] vlan2: entered allmulticast mode
[  406.030043][T18739] netlink: 'syz.1.3615': attribute type 1 has an invalid length.
[  406.066752][T18738] netlink: 'syz.4.3614': attribute type 32 has an invalid length.
[  406.084905][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'.
[  406.122893][T18739] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  406.137923][T18748] netlink: 'syz.0.3616': attribute type 11 has an invalid length.
[  406.146087][T18738] bond2: Setting coupled_control to off (0)
[  406.155932][T18752] IPVS: length: 139 != 24
[  406.365187][T18759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  406.607367][T18772] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  406.901359][T18788] tipc: Enabled bearer <ib:gretap0>, priority 10
[  406.935957][T18788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.943711][T18788] syzkaller0: entered promiscuous mode
[  406.949387][T18788] syzkaller0: entered allmulticast mode
[  406.969363][T18787] netlink: 'syz.2.3628': attribute type 1 has an invalid length.
[  406.978572][T18788] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  407.060310][T18786] tipc: Resetting bearer <eth:syzkaller0>
[  407.127443][T18786] tipc: Disabling bearer <eth:syzkaller0>
[  407.158979][T18797] syzkaller0: entered promiscuous mode
[  407.164518][T18797] syzkaller0: entered allmulticast mode
[  407.343529][T18802] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  407.392635][T18818] x_tables: unsorted underflow at hook 1
[  407.404652][T18810] team0: left allmulticast mode
[  407.410477][T18810] team_slave_0: left allmulticast mode
[  407.426980][T18810] team_slave_1: left allmulticast mode
[  407.436943][T18810] team0: left promiscuous mode
[  407.441764][T18810] team_slave_0: left promiscuous mode
[  407.456112][T18810] team_slave_1: left promiscuous mode
[  407.462085][T18810] bridge0: port 3(team0) entered disabled state
[  407.492569][T18810] bridge_slave_0: left promiscuous mode
[  407.506717][T18810] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.520826][T18810] bridge_slave_1: left allmulticast mode
[  407.527305][T18810] bridge_slave_1: left promiscuous mode
[  407.533074][T18810] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.562752][T18810] bond0: (slave bond_slave_0): Releasing backup interface
[  407.583594][T18810] bond0: (slave bond_slave_1): Releasing backup interface
[  407.605920][T18810] team0: Port device team_slave_0 removed
[  407.619475][T18810] team0: Port device team_slave_1 removed
[  407.626984][T18810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.636146][T18810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.648919][T18810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.660687][T18810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.673594][T18810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  407.710219][T18814] team0: Mode changed to "loadbalance"
[  407.737760][T18816] vlan2: entered allmulticast mode
[  408.285623][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.380344][T18872] Cannot find add_set index 0 as target
[  408.596193][T18881] bond1 (unregistering): Released all slaves
[  408.960295][T18907] Bluetooth: MGMT ver 1.23
[  409.026277][T18915] tipc: Resetting bearer <ib:gretap0>
[  409.310279][T18930] __nla_validate_parse: 11 callbacks suppressed
[  409.310301][T18930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3669'.
[  409.336946][T18935] atomic_op ffff888028809198 conn xmit_atomic 0000000000000000
[  409.480389][T18915] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.487937][T18915] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.652058][T18915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.668632][T18915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.928602][T18917] geneve2: entered promiscuous mode
[  409.933920][T18917] geneve2: entered allmulticast mode
[  409.965535][T17789] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.993668][T17789] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  410.074083][T17789] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.088085][T17789] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  410.098545][T17789] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.107702][T17789] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  410.150188][T18950] Cannot find set identified by id 1 to match
[  410.167501][T17789] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.189898][T17789] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  410.213895][T18953] netlink: 'syz.0.3673': attribute type 13 has an invalid length.
[  410.241557][T18948] syzkaller0: entered allmulticast mode
[  410.340176][T18959] veth1_macvtap: left promiscuous mode
[  410.349397][T18959] macsec0: entered allmulticast mode
[  426.124313][T18975] syzkaller0: entered promiscuous mode
[  426.131087][T18975] syzkaller0: entered allmulticast mode
[  426.365476][T18996] netlink: 'syz.2.3686': attribute type 2 has an invalid length.
[  426.373242][T18996] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3686'.
[  426.424181][T19000] netlink: 'syz.2.3686': attribute type 2 has an invalid length.
[  426.433443][T19000] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3686'.
[  426.852965][T19027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.891701][T19030] Cannot find add_set index 65532 as target
[  427.012291][T19040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3699'.
[  427.012291][T19039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3699'.
[  427.052456][T18977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.135615][T19050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3702'.
[  427.223524][T19053] netlink: 'syz.0.3704': attribute type 63 has an invalid length.
[  427.324574][T19062] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3706'.
[  427.341040][T19062] netlink: zone id is out of range
[  427.354841][T19062] netlink: zone id is out of range
[  427.360004][T19062] netlink: zone id is out of range
[  427.391132][T19062] netlink: zone id is out of range
[  427.405094][T19062] netlink: zone id is out of range
[  427.410262][T19062] netlink: del zone limit has 4 unknown bytes
[  427.530114][T19076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3712'.
[  427.549023][T19076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3712'.
[  427.634522][T19081] netlink: 544 bytes leftover after parsing attributes in process `syz.4.3713'.
[  427.778026][T19091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3714'.
[  428.254043][T19117] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  428.260997][T19117] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  428.357940][T19120] syzkaller0: entered promiscuous mode
[  428.363465][T19120] syzkaller0: entered allmulticast mode
[  428.395333][T19126] openvswitch: netlink: Flow actions attr not present in new flow.
[  428.476495][T19131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.535299][T19139] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000
[  428.740136][T19149] netlink: 'syz.4.3729': attribute type 10 has an invalid length.
[  428.775777][T19149] team0: Port device dummy0 added
[  429.204067][T19188] x_tables: duplicate underflow at hook 1
[  429.512156][T19210] netlink: 'syz.2.3749': attribute type 1 has an invalid length.
[  429.776369][T19216] erspan0: entered allmulticast mode
[  429.940674][T19228] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  430.198842][T19253] IPv6: Can't replace route, no match found
[  430.282556][T19259] x_tables: duplicate underflow at hook 1
[  430.310315][T19257] netlink: 'syz.4.3764': attribute type 1 has an invalid length.
[  430.631390][T19282] xt_time: invalid argument - start or stop time greater than 23:59:59
[  430.961556][T19295] xt_hashlimit: overflow, try lower: 3/0
[  431.230344][T19312] netlink: 'syz.4.3778': attribute type 4 has an invalid length.
[  431.277867][T19312] `: renamed from bond0 (while UP)
[  431.400017][T19324] __nla_validate_parse: 11 callbacks suppressed
[  431.400036][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'.
[  431.448922][T19331] netlink: 'syz.1.3783': attribute type 12 has an invalid length.
[  431.667571][T19343] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3788'.
[  431.730176][T19344] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3788'.
[  431.748837][T19343] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  432.023523][T19363] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3795'.
[  432.068560][T19368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3797'.
[  432.214315][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'.
[  432.463561][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3802'.
[  432.575653][T19391] netlink: 'syz.2.3803': attribute type 3 has an invalid length.
[  432.584075][T19391] netlink: 'syz.2.3803': attribute type 1 has an invalid length.
[  432.592291][T19391] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3803'.
[  432.695432][T19399] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3805'.
[  432.790755][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  433.170651][T19432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.213017][T19437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.432259][T19443] netlink: 'syz.3.3820': attribute type 5 has an invalid length.
[  433.546142][T19458] netlink: 'syz.2.3823': attribute type 1 has an invalid length.
[  434.129182][T19496] netlink: 'syz.3.3834': attribute type 12 has an invalid length.
[  434.193466][T19494] syzkaller0: entered promiscuous mode
[  434.220190][T19494] syzkaller0: entered allmulticast mode
[  434.281039][   T30] audit: type=1800 audit(1763833757.273:12): pid=19494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3832" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=655 res=0 errno=0
[  434.819402][T19543] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  434.830767][T19543] bond2 (unregistering): Released all slaves
[  434.913073][T19550] netlink: 'syz.1.3850': attribute type 1 has an invalid length.
[  434.948410][T19550] bond1: entered promiscuous mode
[  434.955002][T19550] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.988759][T19553] FAULT_INJECTION: forcing a failure.
[  434.988759][T19553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.005535][T19553] CPU: 1 UID: 0 PID: 19553 Comm: syz.0.3851 Not tainted syzkaller #0 PREEMPT(full) 
[  435.005562][T19553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  435.005574][T19553] Call Trace:
[  435.005581][T19553]  <TASK>
[  435.005589][T19553]  dump_stack_lvl+0x189/0x250
[  435.005619][T19553]  ? __pfx____ratelimit+0x10/0x10
[  435.005647][T19553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  435.005672][T19553]  ? __pfx__printk+0x10/0x10
[  435.005692][T19553]  ? __might_fault+0xb0/0x130
[  435.005732][T19553]  should_fail_ex+0x414/0x560
[  435.005767][T19553]  _copy_from_user+0x2d/0xb0
[  435.005793][T19553]  ___sys_sendmsg+0x158/0x2a0
[  435.005818][T19553]  ? __pfx____sys_sendmsg+0x10/0x10
[  435.005879][T19553]  ? __fget_files+0x2a/0x420
[  435.005896][T19553]  ? __fget_files+0x3a0/0x420
[  435.005933][T19553]  __x64_sys_sendmsg+0x19b/0x260
[  435.005957][T19553]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  435.005990][T19553]  ? __pfx_ksys_write+0x10/0x10
[  435.006021][T19553]  ? do_syscall_64+0xbe/0xfa0
[  435.006054][T19553]  do_syscall_64+0xfa/0xfa0
[  435.006080][T19553]  ? lockdep_hardirqs_on+0x9c/0x150
[  435.006106][T19553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.006125][T19553]  ? clear_bhb_loop+0x60/0xb0
[  435.006148][T19553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.006165][T19553] RIP: 0033:0x7ffb4d58f749
[  435.006183][T19553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.006200][T19553] RSP: 002b:00007ffb4e3ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  435.006220][T19553] RAX: ffffffffffffffda RBX: 00007ffb4d7e5fa0 RCX: 00007ffb4d58f749
[  435.006235][T19553] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  435.006247][T19553] RBP: 00007ffb4e3ad090 R08: 0000000000000000 R09: 0000000000000000
[  435.006258][T19553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.006269][T19553] R13: 00007ffb4d7e6038 R14: 00007ffb4d7e5fa0 R15: 00007ffec882ccb8
[  435.006301][T19553]  </TASK>
[  435.265069][T19556] bond1: (slave bridge3): making interface the new active one
[  435.272615][T19556] bridge3: entered promiscuous mode
[  435.284552][T19556] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  435.291740][T19558] netlink: 'syz.3.3855': attribute type 5 has an invalid length.
[  435.315433][T19560] netem: unknown loss type 0
[  435.320549][T19560] netem: change failed
[  435.754579][ T6289] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.781544][ T6289] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.793370][T19592] netlink: 'syz.2.3863': attribute type 29 has an invalid length.
[  435.808241][ T6289] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.819061][T19592] netlink: 'syz.2.3863': attribute type 29 has an invalid length.
[  435.829589][T19590] syzkaller1: entered promiscuous mode
[  435.836757][T19590] syzkaller1: entered allmulticast mode
[  435.843888][ T6289] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.379109][T19634] syzkaller0: tun_chr_ioctl cmd 1074025677
[  436.385157][T19634] syzkaller0: Linktype set failed because interface is up
[  436.410617][ T6289] syzkaller0: tun_net_xmit 76
[  436.415802][ T6289] syzkaller0: tun_net_xmit 48
[  436.436272][   T49] syzkaller0: tun_net_xmit 76
[  436.533456][T19631] validate_nla: 4 callbacks suppressed
[  436.533477][T19631] netlink: 'syz.2.3874': attribute type 13 has an invalid length.
[  436.561516][T19631] netlink: 'syz.2.3874': attribute type 17 has an invalid length.
[  436.597896][T19631] erspan0: left allmulticast mode
[  436.659219][T19658] FAULT_INJECTION: forcing a failure.
[  436.659219][T19658] name failslab, interval 1, probability 0, space 0, times 0
[  436.688022][T19631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.692041][T19658] CPU: 1 UID: 0 PID: 19658 Comm: syz.0.3884 Not tainted syzkaller #0 PREEMPT(full) 
[  436.692069][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  436.692081][T19658] Call Trace:
[  436.692089][T19658]  <TASK>
[  436.692098][T19658]  dump_stack_lvl+0x189/0x250
[  436.692128][T19658]  ? __pfx____ratelimit+0x10/0x10
[  436.692154][T19658]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.692180][T19658]  ? __pfx__printk+0x10/0x10
[  436.692204][T19658]  ? __pfx___might_resched+0x10/0x10
[  436.692225][T19658]  ? fs_reclaim_acquire+0x7d/0x100
[  436.692258][T19658]  should_fail_ex+0x414/0x560
[  436.692292][T19658]  should_failslab+0xa8/0x100
[  436.692313][T19658]  kmem_cache_alloc_node_noprof+0x77/0x710
[  436.692340][T19658]  ? __alloc_skb+0x112/0x2d0
[  436.692356][T19658]  ? netlink_autobind+0xdb/0x300
[  436.692379][T19658]  __alloc_skb+0x112/0x2d0
[  436.692401][T19658]  netlink_sendmsg+0x5c6/0xb30
[  436.692430][T19658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.692452][T19658]  ? __lock_acquire+0xab9/0xd20
[  436.692468][T19658]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.692499][T19658]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.692526][T19658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.692546][T19658]  __sock_sendmsg+0x21c/0x270
[  436.692575][T19658]  ____sys_sendmsg+0x505/0x830
[  436.692602][T19658]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.692632][T19658]  ? import_iovec+0x74/0xa0
[  436.692660][T19658]  ___sys_sendmsg+0x21f/0x2a0
[  436.692683][T19658]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.692742][T19658]  ? __fget_files+0x2a/0x420
[  436.692758][T19658]  ? __fget_files+0x3a0/0x420
[  436.692787][T19658]  __x64_sys_sendmsg+0x19b/0x260
[  436.692811][T19658]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  436.692842][T19658]  ? __pfx_ksys_write+0x10/0x10
[  436.692872][T19658]  ? do_syscall_64+0xbe/0xfa0
[  436.692903][T19658]  do_syscall_64+0xfa/0xfa0
[  436.692928][T19658]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.692955][T19658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.692973][T19658]  ? clear_bhb_loop+0x60/0xb0
[  436.692997][T19658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.693015][T19658] RIP: 0033:0x7ffb4d58f749
[  436.693033][T19658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.693049][T19658] RSP: 002b:00007ffb4e3ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.693073][T19658] RAX: ffffffffffffffda RBX: 00007ffb4d7e5fa0 RCX: 00007ffb4d58f749
[  436.693088][T19658] RDX: 0000000000004844 RSI: 0000200000000240 RDI: 0000000000000003
[  436.693101][T19658] RBP: 00007ffb4e3ad090 R08: 0000000000000000 R09: 0000000000000000
[  436.693112][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.693123][T19658] R13: 00007ffb4d7e6038 R14: 00007ffb4d7e5fa0 R15: 00007ffec882ccb8
[  436.693156][T19658]  </TASK>
[  437.275088][ T5914] syzkaller0: tun_net_xmit 76
[  437.328735][T19682] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  437.346516][ T5914] syzkaller0: tun_net_xmit 76
[  437.351788][T19682] bond2: option packets_per_slave: allowed values 0 - 65535
[  437.366000][T19682] bond2 (unregistering): Released all slaves
[  437.473169][T19705] __nla_validate_parse: 15 callbacks suppressed
[  437.473222][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'.
[  438.868726][T19700] netlink: 'syz.3.3896': attribute type 1 has an invalid length.
[  438.907000][T19705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.091666][T19717] 
[  439.094033][T19717] ======================================================
[  439.101130][T19717] WARNING: possible circular locking dependency detected
[  439.108155][T19717] syzkaller #0 Not tainted
[  439.112735][T19717] ------------------------------------------------------
[  439.119739][T19717] syz.2.3899/19717 is trying to acquire lock:
[  439.125796][T19717] ffffffff8f426a78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  439.135325][T19717] 
[  439.135325][T19717] but task is already holding lock:
[  439.142680][T19717] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  439.152254][T19717] 
[  439.152254][T19717] which lock already depends on the new lock.
[  439.152254][T19717] 
[  439.162650][T19717] 
[  439.162650][T19717] the existing dependency chain (in reverse order) is:
[  439.171652][T19717] 
[  439.171652][T19717] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  439.179641][T19717]        lock_acquire+0x120/0x360
[  439.184661][T19717]        _raw_spin_lock_bh+0x36/0x50
[  439.189943][T19717]        nr_rt_ioctl+0x390/0xd50
[  439.194981][T19717]        sock_do_ioctl+0xdc/0x300
[  439.200015][T19717]        sock_ioctl+0x576/0x790
[  439.204868][T19717]        __se_sys_ioctl+0xfc/0x170
[  439.209980][T19717]        do_syscall_64+0xfa/0xfa0
[  439.215177][T19717]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.221585][T19717] 
[  439.221585][T19717] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  439.229589][T19717]        lock_acquire+0x120/0x360
[  439.234618][T19717]        _raw_spin_lock_bh+0x36/0x50
[  439.239907][T19717]        nr_rt_ioctl+0x193/0xd50
[  439.244844][T19717]        sock_do_ioctl+0xdc/0x300
[  439.249875][T19717]        sock_ioctl+0x576/0x790
[  439.254836][T19717]        __se_sys_ioctl+0xfc/0x170
[  439.259958][T19717]        do_syscall_64+0xfa/0xfa0
[  439.264994][T19717]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.271420][T19717] 
[  439.271420][T19717] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  439.279247][T19717]        validate_chain+0xb9b/0x2140
[  439.284539][T19717]        __lock_acquire+0xab9/0xd20
[  439.289730][T19717]        lock_acquire+0x120/0x360
[  439.294751][T19717]        _raw_spin_lock_bh+0x36/0x50
[  439.300034][T19717]        nr_rt_device_down+0xa9/0x720
[  439.305408][T19717]        nr_device_event+0x137/0x150
[  439.310685][T19717]        notifier_call_chain+0x1b6/0x3e0
[  439.316405][T19717]        netif_close_many+0x29c/0x410
[  439.321867][T19717]        netif_close+0x158/0x210
[  439.326807][T19717]        dev_close+0x10a/0x220
[  439.331562][T19717]        bpq_device_event+0x377/0x6a0
[  439.336925][T19717]        notifier_call_chain+0x1b6/0x3e0
[  439.342551][T19717]        netif_close_many+0x29c/0x410
[  439.347929][T19717]        netif_close+0x158/0x210
[  439.352868][T19717]        dev_close+0x10a/0x220
[  439.357625][T19717]        bond_setup_by_slave+0x5f/0x3f0
[  439.363350][T19717]        bond_enslave+0x6ca/0x38a0
[  439.368481][T19717]        bond_do_ioctl+0x635/0x9b0
[  439.373588][T19717]        dev_ifsioc+0x90b/0xf00
[  439.378440][T19717]        dev_ioctl+0x7b4/0x1150
[  439.383291][T19717]        sock_do_ioctl+0x22c/0x300
[  439.388422][T19717]        sock_ioctl+0x576/0x790
[  439.393275][T19717]        __se_sys_ioctl+0xfc/0x170
[  439.398385][T19717]        do_syscall_64+0xfa/0xfa0
[  439.403418][T19717]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.409824][T19717] 
[  439.409824][T19717] other info that might help us debug this:
[  439.409824][T19717] 
[  439.420041][T19717] Chain exists of:
[  439.420041][T19717]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  439.420041][T19717] 
[  439.433858][T19717]  Possible unsafe locking scenario:
[  439.433858][T19717] 
[  439.441297][T19717]        CPU0                    CPU1
[  439.446651][T19717]        ----                    ----
[  439.452000][T19717]   lock(nr_neigh_list_lock);
[  439.456668][T19717]                                lock(&nr_node->node_lock);
[  439.463965][T19717]                                lock(nr_neigh_list_lock);
[  439.471155][T19717]   lock(nr_node_list_lock);
[  439.475740][T19717] 
[  439.475740][T19717]  *** DEADLOCK ***
[  439.475740][T19717] 
[  439.483907][T19717] 2 locks held by syz.2.3899/19717:
[  439.489285][T19717]  #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  439.498098][T19717]  #1: ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  439.508133][T19717] 
[  439.508133][T19717] stack backtrace:
[  439.514032][T19717] CPU: 1 UID: 0 PID: 19717 Comm: syz.2.3899 Not tainted syzkaller #0 PREEMPT(full) 
[  439.514054][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  439.514064][T19717] Call Trace:
[  439.514074][T19717]  <TASK>
[  439.514083][T19717]  dump_stack_lvl+0x189/0x250
[  439.514110][T19717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.514132][T19717]  ? __pfx__printk+0x10/0x10
[  439.514148][T19717]  ? print_lock_name+0xde/0x100
[  439.514166][T19717]  print_circular_bug+0x2ee/0x310
[  439.514188][T19717]  check_noncircular+0x134/0x160
[  439.514211][T19717]  validate_chain+0xb9b/0x2140
[  439.514233][T19717]  ? rt6_disable_ip+0x6b3/0x720
[  439.514262][T19717]  ? __lock_acquire+0xab9/0xd20
[  439.514278][T19717]  __lock_acquire+0xab9/0xd20
[  439.514297][T19717]  ? nr_rt_device_down+0xa9/0x720
[  439.514315][T19717]  lock_acquire+0x120/0x360
[  439.514330][T19717]  ? nr_rt_device_down+0xa9/0x720
[  439.514355][T19717]  ? nr_rt_device_down+0xa9/0x720
[  439.514374][T19717]  _raw_spin_lock_bh+0x36/0x50
[  439.514395][T19717]  ? nr_rt_device_down+0xa9/0x720
[  439.514414][T19717]  nr_rt_device_down+0xa9/0x720
[  439.514434][T19717]  ? do_raw_spin_unlock+0x122/0x240
[  439.514463][T19717]  nr_device_event+0x137/0x150
[  439.514481][T19717]  notifier_call_chain+0x1b6/0x3e0
[  439.514504][T19717]  netif_close_many+0x29c/0x410
[  439.514531][T19717]  ? __pfx_netif_close_many+0x10/0x10
[  439.514556][T19717]  ? bond_netdev_event+0x227/0xe80
[  439.514579][T19717]  netif_close+0x158/0x210
[  439.514602][T19717]  ? __pfx_netif_close+0x10/0x10
[  439.514626][T19717]  ? __pfx___neigh_ifdown+0x10/0x10
[  439.514647][T19717]  ? macsec_notify+0x104/0x660
[  439.514670][T19717]  dev_close+0x10a/0x220
[  439.514686][T19717]  bpq_device_event+0x377/0x6a0
[  439.514704][T19717]  notifier_call_chain+0x1b6/0x3e0
[  439.514727][T19717]  netif_close_many+0x29c/0x410
[  439.514753][T19717]  ? __pfx_netif_close_many+0x10/0x10
[  439.514780][T19717]  netif_close+0x158/0x210
[  439.514803][T19717]  ? __pfx_netif_close+0x10/0x10
[  439.514824][T19717]  ? do_raw_spin_lock+0x121/0x290
[  439.514847][T19717]  ? __local_bh_enable_ip+0x12d/0x1c0
[  439.514865][T19717]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.514889][T19717]  dev_close+0x10a/0x220
[  439.514905][T19717]  bond_setup_by_slave+0x5f/0x3f0
[  439.514931][T19717]  bond_enslave+0x6ca/0x38a0
[  439.514953][T19717]  ? unwind_get_return_address+0x4d/0x90
[  439.514979][T19717]  ? stack_trace_save+0x9c/0xe0
[  439.515000][T19717]  ? __pfx_stack_trace_save+0x10/0x10
[  439.515022][T19717]  ? stack_depot_save_flags+0x40/0x860
[  439.515047][T19717]  ? __pfx_bond_enslave+0x10/0x10
[  439.515074][T19717]  ? apparmor_capable+0x137/0x1b0
[  439.515092][T19717]  ? full_name_hash+0x92/0xe0
[  439.515111][T19717]  ? netdev_name_node_lookup+0xdf/0x120
[  439.515131][T19717]  bond_do_ioctl+0x635/0x9b0
[  439.515152][T19717]  ? __pfx_bond_do_ioctl+0x10/0x10
[  439.515168][T19717]  ? __mutex_lock+0x335/0x1350
[  439.515199][T19717]  ? full_name_hash+0x92/0xe0
[  439.515218][T19717]  ? netdev_name_node_lookup+0xdf/0x120
[  439.515239][T19717]  dev_ifsioc+0x90b/0xf00
[  439.515265][T19717]  ? dev_load+0x21/0x1f0
[  439.515288][T19717]  dev_ioctl+0x7b4/0x1150
[  439.515313][T19717]  sock_do_ioctl+0x22c/0x300
[  439.515336][T19717]  ? __pfx_sock_do_ioctl+0x10/0x10
[  439.515363][T19717]  sock_ioctl+0x576/0x790
[  439.515384][T19717]  ? __pfx_sock_ioctl+0x10/0x10
[  439.515405][T19717]  ? __fget_files+0x3a0/0x420
[  439.515419][T19717]  ? __fget_files+0x2a/0x420
[  439.515435][T19717]  ? bpf_lsm_file_ioctl+0x9/0x20
[  439.515458][T19717]  ? __pfx_sock_ioctl+0x10/0x10
[  439.515477][T19717]  __se_sys_ioctl+0xfc/0x170
[  439.515498][T19717]  do_syscall_64+0xfa/0xfa0
[  439.515522][T19717]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.515544][T19717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.515560][T19717]  ? clear_bhb_loop+0x60/0xb0
[  439.515578][T19717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.515593][T19717] RIP: 0033:0x7ff56b58f749
[  439.515609][T19717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.515623][T19717] RSP: 002b:00007ff56c4d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  439.515642][T19717] RAX: ffffffffffffffda RBX: 00007ff56b7e6090 RCX: 00007ff56b58f749
[  439.515654][T19717] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000007
[  439.515665][T19717] RBP: 00007ff56b613f91 R08: 0000000000000000 R09: 0000000000000000
[  439.515675][T19717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.515685][T19717] R13: 00007ff56b7e6128 R14: 00007ff56b7e6090 R15: 00007ffd770790e8
[  439.515705][T19717]  </TASK>
[  439.964489][T19717] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.977912][T19717] bond0: (slave rose0): Enslaving as an active interface with an up link
[  440.000294][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'.
[  440.009746][T19724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'.
[  440.044792][    C0] llc_conn_state_process: llc_conn_service failed