last executing test programs:

4m4.200027033s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x80007)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r2})
r5 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000002d6605b7c6d8c418fb8de3c3dfe076dcb7ab5200000000007912b000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x169, 0x0, &(0x7f00000002c0)="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", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r15 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r3})

3m48.97248081s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x80007)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r2})
r5 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000002d6605b7c6d8c418fb8de3c3dfe076dcb7ab5200000000007912b000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x169, 0x0, &(0x7f00000002c0)="f68d1a07516464f30000dede39d1b4dc4148c21df3ed6d696152e6de5e46bebfb5086190c2b5f36610d9a1a993e07cd4b82b6cd996e413bb5addd9ed8a835d6af1c26c7270d6cde2a1bceb6c27f9d5326066c71156d97882943ba58068891cacd86e400000000000000045d915e049b99563b264672f324709227cbd8a9f58dc5db6efb578d40d8ebe0ec21afb95dedeed9c9e6f487afeff2ce271bb60ebe2d370bd5a43df458e37b6852aa9cfa24eb43043709146f0f1e1e3b5cbc483a2673f24b71641e06bc4b38a2284f39870d69f099e24a799c3fac16fd87e6aa53ad9f1bf38224e56f5830667523e7550519bcfc562fe45c177b75259bb21c4ab05aa8317f3747c06278dc4b3645d48f321c751f13ec9efbb03f71a9c359143837221842e20933ebdaf3fe58a90b9b9daa6b46d7df9bcbdfac204156f470453e3ec7d143611dbc11103b00a5e3d838e3a6582dd0091371d530346dbb4ead2e2d33c76534fe94cfb14b3cdbbea", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r15 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r3})

3m34.836601625s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x80007)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r2})
r5 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000002d6605b7c6d8c418fb8de3c3dfe076dcb7ab5200000000007912b000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x169, 0x0, &(0x7f00000002c0)="f68d1a07516464f30000dede39d1b4dc4148c21df3ed6d696152e6de5e46bebfb5086190c2b5f36610d9a1a993e07cd4b82b6cd996e413bb5addd9ed8a835d6af1c26c7270d6cde2a1bceb6c27f9d5326066c71156d97882943ba58068891cacd86e400000000000000045d915e049b99563b264672f324709227cbd8a9f58dc5db6efb578d40d8ebe0ec21afb95dedeed9c9e6f487afeff2ce271bb60ebe2d370bd5a43df458e37b6852aa9cfa24eb43043709146f0f1e1e3b5cbc483a2673f24b71641e06bc4b38a2284f39870d69f099e24a799c3fac16fd87e6aa53ad9f1bf38224e56f5830667523e7550519bcfc562fe45c177b75259bb21c4ab05aa8317f3747c06278dc4b3645d48f321c751f13ec9efbb03f71a9c359143837221842e20933ebdaf3fe58a90b9b9daa6b46d7df9bcbdfac204156f470453e3ec7d143611dbc11103b00a5e3d838e3a6582dd0091371d530346dbb4ead2e2d33c76534fe94cfb14b3cdbbea", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r15 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r3})

3m23.311616531s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x80007)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r2})
r5 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000002d6605b7c6d8c418fb8de3c3dfe076dcb7ab5200000000007912b000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x169, 0x0, &(0x7f00000002c0)="f68d1a07516464f30000dede39d1b4dc4148c21df3ed6d696152e6de5e46bebfb5086190c2b5f36610d9a1a993e07cd4b82b6cd996e413bb5addd9ed8a835d6af1c26c7270d6cde2a1bceb6c27f9d5326066c71156d97882943ba58068891cacd86e400000000000000045d915e049b99563b264672f324709227cbd8a9f58dc5db6efb578d40d8ebe0ec21afb95dedeed9c9e6f487afeff2ce271bb60ebe2d370bd5a43df458e37b6852aa9cfa24eb43043709146f0f1e1e3b5cbc483a2673f24b71641e06bc4b38a2284f39870d69f099e24a799c3fac16fd87e6aa53ad9f1bf38224e56f5830667523e7550519bcfc562fe45c177b75259bb21c4ab05aa8317f3747c06278dc4b3645d48f321c751f13ec9efbb03f71a9c359143837221842e20933ebdaf3fe58a90b9b9daa6b46d7df9bcbdfac204156f470453e3ec7d143611dbc11103b00a5e3d838e3a6582dd0091371d530346dbb4ead2e2d33c76534fe94cfb14b3cdbbea", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r15 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r3})

3m11.760292726s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x80007)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r2})
r5 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000002d6605b7c6d8c418fb8de3c3dfe076dcb7ab5200000000007912b000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x169, 0x0, &(0x7f00000002c0)="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", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r15 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r3})

2m58.171123677s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x80007)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r2})
r5 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000002d6605b7c6d8c418fb8de3c3dfe076dcb7ab5200000000007912b000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0x1eb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x169, 0x0, &(0x7f00000002c0)="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", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r15 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r3})

2m54.71753003s ago: executing program 1 (id=889):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20000014})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x14, r4, 0x926fdb2c68a18847, 0x70bd29, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x40044840) (async)
sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x14, r4, 0x926fdb2c68a18847, 0x70bd29, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x40044840)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001})

2m54.626336238s ago: executing program 1 (id=891):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x100000000000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="380200002100390d0000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000004e22000000030000020000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c000400fdff4e234e200000fe8000000000000000000000000000aa50001100ac1e0001000000000000000000000000fe8000000000000000000000000000bb0a010101000000000000000000000000000000000000000000000000000000006c020000000000000a000a00e400060020010000000000000000000000000001fe8000000000000000000000000000184e2200054e220007020080002f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000001000000000000000000000000000004d3ff000000ac1414430000000000030000000000000000000000000000080000000000000007000000000000007d000000000000000400000000000000070000000000000000040000000000000900000000000000000000000000000010bd1a62000000000000000000000000080000000000000008000000ff0f0000040000002dbd7000000000000200020528000000000000008b0013"], 0x238}}, 0x0) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r4=>0xffffffffffffffff}) (rerun: 64)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x3}, 0x1}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001e000100020000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000400"], 0x20}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) (async, rerun: 32)
recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/96, 0x60}, {&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000540)=""/249, 0xf9}], 0x8}, 0x80000000}], 0x4, 0x20, 0x0) (async, rerun: 32)
read(0xffffffffffffffff, &(0x7f0000000640)=""/218, 0xda) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0xffff, 0x4, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000a40)="e0856497ba6cf0f21a0000000010", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
getsockname(r4, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000000c0)={r5, r7}) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) (async)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)=@delsa={0x28, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {@in=@rand_addr=0x64010100, 0x4d3, 0xa, 0x32}}, 0x28}}, 0x4000)

2m54.388761743s ago: executing program 1 (id=894):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000940)=[@in6={0xa, 0x4e20, 0x68, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e32, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @loopback}], 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r6 = accept4(r5, 0x0, 0x0, 0x800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, 0x0, &(0x7f0000000100))
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES8=r0, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xf1f, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x93f}]}, 0x38}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000002dc0)={0x0, 0xfffffffffffffd27, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffe0}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44044)
r9 = socket(0x10, 0x3, 0x0)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r10, 0x118, 0x1, &(0x7f0000000180)=0x27a, 0x4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000cc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0xaf6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2004c891}, 0x20040811)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002a40)={<r11=>0x0, @loopback, @loopback}, 0x0)
sendmmsg$inet(r0, &(0x7f0000002c00)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="25e83a637602dbdd2ab8610da87d2e562cd6bedd13ddaaa21bc887b85ea53d0a950eb895b62a614c4b105dfd577b26ee9d9884c6dd6e1183386ff70f59f7f47581d7d0a38f7a0e83dab2f8832ff4bb1b919bc688d21fc3e7ecc86a6ba68449b6470812ec76f65ca1aaeae2b232a119614a3aad8217aae162f62cff9491d84de3ec4824433dc12276e21b020a91f768771ede95e619504c433a45abaa56a96e86f9557fd374fbcf87a7", 0xa9}, {&(0x7f0000000440)="6c2b3308780d705842496527f736cb18b94de44253bf51b7e6df739e4a42a65d3d231dea5de683e7dbe9543a3acd10672c1f2b718038895408fac5912be15aee544f698e76afaaf8bdf27cef0e31cc44f87ddac5a564a7cdf0c37c81a0032f0d0d1715d33c5cc3ee909e92e249007c8c7f2b401d1f228c0a335fff03dfbfc0a4f85850d7f57b54efe8d35a69894f9b735d786a2325879b422e7d6a8ffdba44128250ad6854291d98", 0xa8}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="7ec55b5020ab6674ea93b6efc516fc", 0xf}, {&(0x7f0000000d00)="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", 0xff}, {&(0x7f0000000680)="ae1d02e19bd9314f738cf36a36de3850ee4a4bbfed39a991e3f633902c9eef56f1c3917a7d38a03a59d502a212d53e884f8587c8da55ded20b4b9606ba68985cc4f6a981c696f4dc45bc3692622991b22cddb75fce7a05d1cfa9585fe9656be7ceed3fc1da5da67a553cddcd", 0x6c}, {&(0x7f0000000700)="d4b00c78dd2e60c3b577cfce52e6b824021637ad7136897bf190a510338c9de1367e97a0d1954d8b2a3acbc0daf924bfaa20f674145d480299a9807cb5f3a1b2109e572e151893c6", 0x48}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="110000000000000000000000010000000500000000000000340000000000000000000000070000008609ab2daa87c8b9e894040100890fa9ac1414bbe00000020a010102019404010000000000000000140000000000fd000000000001000000fbffffff00000000140000000000000000000000020000000200000000000000140000000000000000000000070000004404adc3000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e000000200000000140000000000000000000000010000000700000000000000"], 0xd0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000010c0)="779915732f6e1429aa164991a38ad638bbb3b8c87a4227571c84c67de98558e941022a71f92f0c0a6380c009cd73eba1c3477fb9bdf416c8105f5bb1b75520ca2ca1b8ff5c85f7076b83e04d1e05de8e85d503e5648f58257ffa4d7d0c8a7dab3f9b7fe02ddc1e0e49b71e73653f349c42f23d513f2a3f57006ba5ee46d80000000000000047bc383362deb7073a2e2760b55c281d7f2228190e326423d782128d", 0xa1}, {&(0x7f0000001180)="5d4725b8aba03e19dc0a1c802fd8926105249258ec294a30718c960f875e34cc93b6ba633f62b8f52ec7464e6f30c8dfdf83a4aba9dec9ac282549d710f32191f59e6b067c812fc03c4f18dc6f9a1b766c4babd7d26062", 0x57}, {&(0x7f0000001200)}], 0x3, &(0x7f0000001400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="9833ffc319197cce5d1b5ea20f757372a4f918448c29e64b9965f89b591f598680397bde310e86f00a11425ea485391f014663d028", 0x35}, {&(0x7f0000001540)="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", 0xfa}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="11000000000000000000000001000000090000000000000011000000000000000000000001000000fc0000000000000011000000000000000000000001000000fa0000000000000058000000000000000000000007000000070b3aac1414bb000000008602830b5ee0000002e000000144242761e000000100000009ac1414bb0000000e7f0000010000000dac1414160000000600860b00000003020207036a1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="6401010000000000000000001c000000000000000000003b18960709", @ANYRES32=0x0, @ANYBLOB="ac14143be000000200000000140000000000000000000000020000000600000000000000"], 0xf8}}, {{&(0x7f0000001980)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000028c0)="907d370eb5d20be88e641757bbc5bb773177287be0e58e01ce60597833afaf1d9a1e9025bd27fe4f113222fdd8a2108b6024235798f426f2a68a894261d1bda7e7493a3ea74aee46b5f95ae693443b96fa55324e20de5d91bb8a1fac3fa843218ef623cf471de293a4006025b40a9bc5de9dcc7ef5e7f0e9cc903a68848d725db0211d790502afe9f6df", 0x8a}, {&(0x7f0000002980)="1664a685c370d4bc5fb9a7607f14785df0533ccf383ed97ca80a61ccfd9c2909bb0ed868df8b0088e0888d5cb193ab76271f40ec15c7a947f7f88448fc8700d9b6edd2d0ee82f785468c76042d0d3daef30553b14a1bdfa7908d590a3141902441e0f7a87f30cc78ff714efa53ccbe4e4e18e3be5f6ffc93a8b0736f49eb1d2636", 0x81}], 0x2, &(0x7f0000002ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x78, 0x0, 0x7, {[@generic={0x44, 0xb, "48b6b07c1052a44fbd"}, @timestamp_addr={0x44, 0x2c, 0xb3, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@broadcast, 0xff}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010101, 0x52}]}, @ssrr={0x89, 0x23, 0xfa, [@multicast2, @rand_addr=0x64010102, @remote, @local, @remote, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xb3, 0x3, 0x9, [{@broadcast, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x92}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x128}}], 0x6, 0x40)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94)

2m54.359575524s ago: executing program 0 (id=896):
close(0xffffffffffffffff)

2m54.193364287s ago: executing program 0 (id=897):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0), 0x0, 0x20000040)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xc18da000)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00', 0x6bf1c2d5adba8432})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
write(r3, &(0x7f00000000c0)="510003000000", 0x6)
r5 = socket$kcm(0x2, 0x8, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8) (async)
listen(0xffffffffffffffff, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100)='FROZEN\x00', 0x7)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) (async)
setsockopt(r7, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044ea798fa712ba4216e80c8c72337f678"], 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

2m53.424162996s ago: executing program 1 (id=903):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'ip6_vti0\x00'}}, 0x1e) (async)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'ip6_vti0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x84, @broadcast, 'ip6_vti0\x00'}}) (async)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x84, @broadcast, 'ip6_vti0\x00'}})
syz_emit_ethernet(0x82, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$igmp(0x2, 0x3, 0x2)
accept4(r1, 0x0, &(0x7f0000000080), 0x80800) (async)
accept4(r1, 0x0, &(0x7f0000000080), 0x80800)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000100)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000f92e2100000000006020207b1af8ff00000000bfa100000000000007ebcd0bbeffedffb702000003000000b70300000000ecff850000000400000018110000357042e64f2ed2bfea3ab9f54e922df44933a15538cdea197cf4850ec8927f", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000f92e2100000000006020207b1af8ff00000000bfa100000000000007ebcd0bbeffedffb702000003000000b70300000000ecff850000000400000018110000357042e64f2ed2bfea3ab9f54e922df44933a15538cdea197cf4850ec8927f", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2m53.137390565s ago: executing program 1 (id=907):
socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000e00)={'syz_tun\x00', &(0x7f0000000d80)=@ethtool_coalesce={0xf, 0x800, 0xfc, 0x81, 0x8, 0x4e53, 0x8, 0x7, 0x4, 0xbd, 0x80, 0x483, 0x40, 0x2, 0x0, 0x5, 0xfffffff8, 0x8000, 0xedef, 0x775, 0x1, 0x1, 0xf}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/136, 0x88}, {&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000002c0)=""/133, 0x85}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000740)=""/159, 0x9f}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000480)=""/127, 0x7f}], 0x7, &(0x7f0000000880)=""/227, 0xe3}, 0x7}, {{&(0x7f0000000980)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000000a00)=""/17, 0x11}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000000b00)=""/12, 0xc}, {&(0x7f0000000b40)=""/136, 0x88}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/149, 0x95}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/52, 0x34}, {&(0x7f0000003e40)=""/251, 0xfb}, {&(0x7f0000000d00)=""/62, 0x3e}], 0xa}, 0x8}], 0x3, 0x2, &(0x7f0000000d40)={0x77359400})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m53.101360634s ago: executing program 2 (id=908):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002b80)={0x2, 'wlan1\x00'}, 0x18)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f0000000200)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)='{|:::*\xea\x00'}, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close(r2)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', 0x0})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3400c041)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0x0, 0x0})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000180)=0x2)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200010600000000a1dd3f6e0c000024"], 0x1c}], 0x1}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r7 = accept(r6, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000840)="0f8d", 0x2, 0x40858, 0x0, 0x0)
close(r3)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m52.935148576s ago: executing program 2 (id=911):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x500) (async)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x1ffc, @dev={0xfe, 0x80, '\x00', 0xd}, 0xfdf}, 0x1c) (async, rerun: 64)
sendmmsg$unix(r4, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) (async, rerun: 64)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002e92c4bb800"/24], 0x48}, 0x300}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYRES64=r6, @ANYBLOB="28ef8d739c88eaf8b6c28c9245b725102b368b1856b8607452360dcd43ca0673f2b03f4c56272b54a4a2f5aa7c287b00c45d50411960fb94a424e9fbc97b4518b5ed0bc7e99229ff6efc9254d24773cc404b56cffb3b8d74b36a5b1d6ab4da91e1b289ef180fac7d8d074d39a9ef8b03a24b3e26ca0f7668a3df1a26dd1f1ad78fcc08f310fe5f4e9e396ea91720fe05dddf6381468b7d27b2f5b942fef6da21c97b8c01808280230cd68c870385cb77bc4de75b3b523cabe9d093cf59b5dd9fe35973755e2ff0d1af1810b82c6ba38b2a238df9"], 0x44}, 0x1, 0x0, 0x0, 0x44880}, 0x2000c880) (async, rerun: 64)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r7, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) (async, rerun: 64)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (rerun: 64)
r9 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r8, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r10 = socket(0x40000000002, 0x3, 0x80000000002)
sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) (async)
ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'})

2m52.809970476s ago: executing program 2 (id=913):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000cc0)={{0x2, 0x4e24, @empty}, {0x6, @remote}, 0x5c, {0x2, 0x4e23, @empty}, 'lo\x00'})
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0))

2m52.581785409s ago: executing program 2 (id=915):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080)

2m52.456929758s ago: executing program 0 (id=916):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xb000201e})
bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x101, 0x6a, 0x96, 0x1, 0x7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x72, 0xcc, &(0x7f0000000100)="501b7ccc902fe73d375dee28ada758a4719f62b43486848d61c157413135689597b3ad0144827d72c7ec1c0264f6fadd06e9d733024c17a290cee10babef06fa00c9474032b20bdcdcfbcaf6b0863b7e0596b50751d5ac5357393cfb3a2f8d81b7a7d9d4c77b392880020fc50966aa2a8156", &(0x7f0000000180)=""/204, 0x80000001, 0x0, 0x24, 0xc4, &(0x7f0000000280)="48f603c1c5a740fae1c06b7b0254f8f75cdbe57d5c771f810fa02e13a2cacb4e7794c9d8", &(0x7f00000002c0)="57da596df923918dc8f24a823b439945d00e7bc03ae16ff1fdbe0c7bb1827493dd2e7f6594f22929b87d4aba34ad2848a6c15cb8bf29271cec3f87af2c45cf57ca9568c16ecc4b76ededfbf2a16f294ba66b935c6b54c07c72827c53f6150f21d72a78fdbaa990e8829b2c9350dfc46fa61251b83680f9b3ec4781f8059054b5040fe05bfd80ff627ff87017c9f5e492bd9861c16a66cd6e4c3b00cff7dc48c4fac42482ee9d8af5a9ca2c3cae71ff2d716ebd979edd2ac4eaf7acf9038b4fb7ef6af047", 0x3, 0x0, 0x5f8}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getaddrlabel={0x38, 0x4a, 0x300, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x18, 0x0, 0x0, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x4008801)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x0, 0xb3, 0xb, 0x2, @loopback, @remote, 0x80, 0x700, 0x8, 0xf}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', <r7=>0x0, 0x2f, 0x0, 0xff, 0xfffffffa, 0x27, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x7, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'sit0\x00', <r8=>0x0, 0x7800, 0x7800, 0xd6cb, 0x1, {{0x9, 0x4, 0x2, 0xf, 0x24, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@generic={0x44, 0xe, "6a6ca3962e570cab7b809860"}]}}}}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x174, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd51d}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.),\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
sendto$inet6(r0, &(0x7f0000000b40)="75609180eb7d5ea5abc100dd102fb298c243cfe1d3adf103f0708bfe509c19ee8029efbcf0bb934a6b05f543b3c9ea688df2ec840ae38cf952f276418a0818261785ce5c024dbd053fb8fe302cdaac98dda7fd7d14e3a32f1fad8b113c66da81f413a34c", 0x64, 0x801, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r9)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xc4, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x90, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x558}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc01}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r2)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000010c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x230, r11, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_REG_RULES={0x170, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd8a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff0000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20c0}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x35}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x86}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x9c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2e}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008020)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x30}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xe0, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3e5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
write$cgroup_int(r0, &(0x7f0000001580)=0x100000000, 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000015c0)={'wlan1\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r0, 0x0, 0x72, 0xb1, &(0x7f0000001600)="5ee1ac27119c9cd9342b35d9dd8702a682336cb781809a47a1771e6a1134e6a3e42234e5687c24a4420b10f5a376dc945c97493a6a3d9368b063e51ffc95565af1018ced6ec12718e888791b68ccb3dc608d6e35611eaa0e16fd01b0c1006c039aac47d4f49906c08e582bc10b0543127d43", &(0x7f0000001680)=""/177, 0xa79, 0x0, 0x18, 0xe8, &(0x7f0000001740)="316594f7378c5cd8639e7184143f40e95f1c48ec74cf0e3e", &(0x7f0000001780)="5e28e61d48b72a89bd4f2a2fcd4f555c69bb6712e58262c8b4b463199eba77de7b9b4218533391bf2ab85f6eef15edd42e98d414f2f27232ba01d258a0c1147e60f0f485c90c2c4549661f744d63f39f8a3487c4bf46964da05f17a5161fe280571567b5115da0b42a0808e341986466ebaf43f40193d21c4191c484cc70c0c787aa33765a88b1d7bb65ad9cc00bfe4fe28caffa68598a13b90f40e0c45a13ca1f8a5c735970a70a29bbb19ae941459eddbf274c0ec86d906501016038013d356c639e55a84a409f4aa9bcf448072d4eaf37dd2c0cd7077fd2157c52fe010c518e734442ce954a58", 0x0, 0x0, 0x8}, 0x50)
openat$cgroup_ro(r0, &(0x7f0000001900)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r11, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x24e1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040004}, 0x44805)

2m52.393558528s ago: executing program 4 (id=917):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe64, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200130003"], 0x70}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYRESHEX=r2], 0x4c}}, 0x10)

2m52.372697066s ago: executing program 2 (id=918):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)

2m52.23349843s ago: executing program 1 (id=919):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0x13c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff4ee}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1875}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4009}, 0x20004000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', <r7=>0x0, 0x7800, 0x20, 0x0, 0xc9, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x7, 0xf, "6fba778072de2737d5e1ba2773"}, {0x1, 0xd, "687971549356a2438e7bd8"}]}]}}}}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f00000002c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)="e5", 0x1}], 0x1}, 0x0)
sendmsg$inet(r11, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000380)="a7", 0x1}], 0x1}, 0x0)
sendmsg$kcm(r11, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r10, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0)

2m52.230316276s ago: executing program 4 (id=920):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4, 0x0, 0x300}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='tlb_flush\x00', r0}, 0x10)

2m52.069329518s ago: executing program 2 (id=921):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e20, @loopback}})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
unshare(0x26020480)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x4, 0x5a8b, 0x578, 0xd, 0x44, 0xffff, 0x8, 0xfff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80010}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x0, 0x1}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x11a, 0x1f, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="020000000012800b00010062726964676500000c0002800800050000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendto$inet(r7, &(0x7f0000000240)="d13a8b6d57742be17ba11dbb9c407b2e8fb1f8e18c64b3e06f0267d15791090c9c4efbb1aa8b8b9e91ba9e145685849408cfd83d1677c7ca5a24d15a39ddfd43", 0x40, 0x104, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

2m52.068411731s ago: executing program 0 (id=922):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x9, 0x40, 0x63, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0xc5, 0x0, 0x4000, {[@window={0x9, 0x3}, @sack={0x5, 0x12, [0x8d6, 0x61, 0xb807, 0xffff]}]}}}}}}, 0x4e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendto$packet(r5, 0x0, 0x0, 0x5, 0x0, 0x0)
unshare(0x62040200)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
unshare(0x28000000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x114, r7, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0xde, 0x2a, [@mesh_chsw={0x76, 0x6, {0x58, 0x8, 0x38, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x9, 0x80, @device_a, 0x3, 0x4, 0x8}}, @fast_bss_trans={0x37, 0xb9, {0xa, 0x5, "4c0198de4e892f8e8f15ec22036308ac", "85b03bb28fd65e4251bb5963876eb2e1f3381ee649a6e1a9f35c2a3721e6162e", "12e0caee933079adeeefd964bc8417da9cac004a98130f14bc60521c09ab268f", [{0x3, 0x1c, "15afcac03a4c6809f2c9316671fd0f7d601252fbc7bf72d537d3a15b"}, {0x2, 0x18, "11ddb2bc5bb059f29547234333104f70630ea18b4cac0626"}, {0x3, 0x3, "7e47ac"}, {0x2, 0xf, "d506b6cb8b33f203854d7f914975d0"}, {0x1, 0x17, "64966153528575e7af45d81bd7e234973f4683a6961369"}]}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4, 0x0, 0x8}, 0x18)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x7e5, 0x4000067}, 0x2c)

2m52.067030121s ago: executing program 4 (id=923):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80ad}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0)

2m51.979811709s ago: executing program 4 (id=924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
getsockname(r1, &(0x7f0000000280)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0xb0)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@deltfilter={0x3c, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xf, 0xb}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x80000000010000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

2m51.850263105s ago: executing program 4 (id=925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)='GPL\x00', 0x6, 0xf, &(0x7f0000000500)=""/15, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe30, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0xfffe}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0xff, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x215, 0x20601}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0xba01}, 0x0)

2m51.437454433s ago: executing program 0 (id=926):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069b0070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "7a4f896dbdf87988", "b47509f1d50df9566f529796a1f4b791", "ce5a24fd", "b47e119feb7959eb"}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfffffffe}, 0x2d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069b0070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
socket(0x1e, 0x4, 0x0) (async)
setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4) (async)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "7a4f896dbdf87988", "b47509f1d50df9566f529796a1f4b791", "ce5a24fd", "b47e119feb7959eb"}, 0x28) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfffffffe}, 0x2d) (async)

2m51.432753645s ago: executing program 0 (id=927):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd2d14efbcb72b976, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl(0xffffffffffffffff, 0x8b2a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r4, &(0x7f0000000200), 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmmsg(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000480)="e02a5d32f5", 0x5}], 0x2}}], 0x1, 0x40)
sendmmsg$sock(r5, 0x0, 0x0, 0x8080)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r8, 0x2180}, {r2, 0x2}, {r7, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, 0x0, &(0x7f0000000480)={[0x8]}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x28}}, 0x0)

2m42.872446303s ago: executing program 4 (id=928):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) (async)
listen(r0, 0x0) (async)
r1 = getpid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) (async, rerun: 64)
shutdown(r0, 0x0) (async, rerun: 64)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @null, 0x0, [@default, @bcast, @netrom, @rose, @null]}, &(0x7f0000000040)=0x40, 0x100000)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e23, @empty}})
unshare(0x10000c00)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e00010029bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x2000c000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 64)
socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @empty}], 0x20) (rerun: 64)

2m31.291805487s ago: executing program 32 (id=919):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0x13c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff4ee}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1875}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4009}, 0x20004000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', <r7=>0x0, 0x7800, 0x20, 0x0, 0xc9, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x7, 0xf, "6fba778072de2737d5e1ba2773"}, {0x1, 0xd, "687971549356a2438e7bd8"}]}]}}}}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f00000002c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)="e5", 0x1}], 0x1}, 0x0)
sendmsg$inet(r11, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000380)="a7", 0x1}], 0x1}, 0x0)
sendmsg$kcm(r11, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r10, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0)

0s ago: executing program 33 (id=921):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e20, @loopback}})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
unshare(0x26020480)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x4, 0x5a8b, 0x578, 0xd, 0x44, 0xffff, 0x8, 0xfff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80010}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x0, 0x1}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x11a, 0x1f, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="020000000012800b00010062726964676500000c0002800800050000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendto$inet(r7, &(0x7f0000000240)="d13a8b6d57742be17ba11dbb9c407b2e8fb1f8e18c64b3e06f0267d15791090c9c4efbb1aa8b8b9e91ba9e145685849408cfd83d1677c7ca5a24d15a39ddfd43", 0x40, 0x104, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

 1 has an invalid length.
[  214.046300][ T5864] Bluetooth: hci1: command 0x041b tx timeout
[  214.058661][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[  214.067607][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.094018][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[  214.103605][ T6462] netlink: 'syz.1.129': attribute type 13 has an invalid length.
[  214.111537][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.181442][ T6465] bond1: entered promiscuous mode
[  214.191270][ T6465] 8021q: adding VLAN 0 to HW filter on device bond1
[  214.219590][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv1
[  214.234963][ T6466] bond1: (slave batadv1): making interface the new active one
[  214.243039][ T6466] batadv1: entered promiscuous mode
[  214.250452][ T6466] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  214.292115][ T6462] netlink: 'syz.1.129': attribute type 13 has an invalid length.
[  214.292761][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.328849][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.397739][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.634228][ T6489] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  214.711487][ T6462] netlink: 'syz.1.129': attribute type 13 has an invalid length.
[  214.900113][ T6284] hsr_slave_0: entered promiscuous mode
[  214.936290][ T6284] hsr_slave_1: entered promiscuous mode
[  214.954577][ T6284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.972019][ T6284] Cannot create hsr debugfs directory
[  215.020193][ T6504] __nla_validate_parse: 6 callbacks suppressed
[  215.020211][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'.
[  215.343653][ T6520] bridge_slave_0: left allmulticast mode
[  215.377908][ T6520] bridge_slave_0: left promiscuous mode
[  215.383766][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.427510][ T6520] bridge_slave_1: left allmulticast mode
[  215.437451][ T6520] bridge_slave_1: left promiscuous mode
[  215.453868][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.478889][ T6520] bond0: (slave bond_slave_0): Releasing backup interface
[  215.507843][ T6520] bond0: (slave bond_slave_1): Releasing backup interface
[  215.543631][ T6520] team0: Port device team_slave_0 removed
[  215.561195][ T6520] team0: Port device team_slave_1 removed
[  215.567736][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.575171][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.584381][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.592706][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.613283][ T6505] syzkaller0: entered promiscuous mode
[  215.623525][ T6505] syzkaller0: entered allmulticast mode
[  215.735277][ T6531] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  215.750380][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.759609][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.023738][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'.
[  216.042558][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[  216.064495][ T6546] ip6tnl1: entered promiscuous mode
[  216.102406][ T6546] ip6tnl1: entered allmulticast mode
[  216.126719][ T5864] Bluetooth: hci1: command 0x041b tx timeout
[  216.187833][ T6548] xt_CT: No such helper "snmp"
[  216.229525][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'.
[  216.239962][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'.
[  216.723699][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'.
[  217.758091][ T6613] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  217.797669][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'.
[  218.158518][ T6284] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  218.205604][ T5864] Bluetooth: hci1: command 0x041b tx timeout
[  218.232887][ T6630] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.165'.
[  218.268149][ T6284] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  218.333817][ T6284] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  218.399399][ T6646] Cannot find set identified by id 2 to match
[  218.498179][ T6641] xt_CT: No such helper "pptp"
[  218.537805][ T6651] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  218.685279][ T6284] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  218.944208][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[  219.062564][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.151564][ T6284] 8021q: adding VLAN 0 to HW filter on device team0
[  219.188003][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.195237][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.280364][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.287592][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.414845][ T6685] netlink: 'syz.0.178': attribute type 10 has an invalid length.
[  219.447614][ T6685] team0: Device ipvlan1 failed to register rx_handler
[  219.661102][ T6691] syz.0.180 uses old SIOCAX25GETINFO
[  219.689562][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'.
[  219.928928][ T6693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.138220][ T6693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.214552][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.232596][ T6708] __nla_validate_parse: 2 callbacks suppressed
[  220.232614][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'.
[  220.344993][ T6693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.577543][ T6693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.911802][ T6284] veth0_vlan: entered promiscuous mode
[  220.981862][ T6693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.022722][ T6693] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.045302][ T6284] veth1_vlan: entered promiscuous mode
[  221.091724][ T6693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.163100][ T6693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.265345][ T6284] veth0_macvtap: entered promiscuous mode
[  221.310642][ T6284] veth1_macvtap: entered promiscuous mode
[  221.421005][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.478921][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.508480][ T6284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.527516][ T6284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.561415][ T6284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.588627][ T6284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.694683][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'.
[  221.727617][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.196'.
[  221.740330][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'.
[  221.843866][ T6779] netlink: 'syz.2.197': attribute type 11 has an invalid length.
[  221.912695][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.197'.
[  221.967726][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.981549][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.062620][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.100163][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.049713][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.290019][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.525376][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.703675][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.808684][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'.
[  224.297065][ T6846] netlink: 'syz.2.212': attribute type 27 has an invalid length.
[  224.355941][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  224.372392][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  224.395333][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  224.404237][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  224.415716][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  224.442313][ T6846] Äðüm¿3È¡$“: left allmulticast mode
[  224.497585][ T6846] ip_vti0: left promiscuous mode
[  224.543435][ T6846] ip_vti0: left allmulticast mode
[  224.630309][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'.
[  224.923491][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.940437][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.976286][ T6865] block nbd0: server does not support multiple connections per device.
[  225.019478][ T6865] block nbd0: shutting down sockets
[  225.198120][ T6846] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.207992][ T6846] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.216944][ T6846] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.229274][ T6846] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.240697][ T6872] FAULT_INJECTION: forcing a failure.
[  225.240697][ T6872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.256115][ T6846] geneve2: left promiscuous mode
[  225.256541][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.0.215 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  225.256563][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  225.256573][ T6872] Call Trace:
[  225.256580][ T6872]  <TASK>
[  225.256587][ T6872]  dump_stack_lvl+0x189/0x250
[  225.256615][ T6872]  ? __lock_acquire+0xaac/0xd20
[  225.256641][ T6872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.256664][ T6872]  ? __pfx__printk+0x10/0x10
[  225.256682][ T6872]  ? __might_fault+0xb0/0x130
[  225.256716][ T6872]  should_fail_ex+0x414/0x560
[  225.256740][ T6872]  _copy_from_iter+0x1db/0x15a0
[  225.256775][ T6872]  ? __pfx__copy_from_iter+0x10/0x10
[  225.256799][ T6872]  ? rcu_is_watching+0x15/0xb0
[  225.256817][ T6872]  ? trace_kmalloc+0x1f/0xd0
[  225.256837][ T6872]  ? kernfs_fop_write_iter+0x158/0x4f0
[  225.256861][ T6872]  kernfs_fop_write_iter+0x19f/0x4f0
[  225.256888][ T6872]  vfs_write+0x548/0xa90
[  225.256914][ T6872]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  225.256934][ T6872]  ? __pfx_vfs_write+0x10/0x10
[  225.256965][ T6872]  ? __fget_files+0x2a/0x420
[  225.256996][ T6872]  ksys_write+0x145/0x250
[  225.257015][ T6872]  ? rcu_is_watching+0x15/0xb0
[  225.257031][ T6872]  ? __pfx_ksys_write+0x10/0x10
[  225.257062][ T6872]  ? do_syscall_64+0xba/0x210
[  225.257087][ T6872]  do_syscall_64+0xf6/0x210
[  225.257107][ T6872]  ? clear_bhb_loop+0x60/0xb0
[  225.257128][ T6872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.257144][ T6872] RIP: 0033:0x7f7f80d8e969
[  225.257160][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.257174][ T6872] RSP: 002b:00007f7f81c9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  225.257192][ T6872] RAX: ffffffffffffffda RBX: 00007f7f80fb5fa0 RCX: 00007f7f80d8e969
[  225.257204][ T6872] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000005
[  225.257214][ T6872] RBP: 00007f7f81c9a090 R08: 0000000000000000 R09: 0000000000000000
[  225.257224][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.257234][ T6872] R13: 0000000000000000 R14: 00007f7f80fb5fa0 R15: 00007ffdc1cdc778
[  225.257263][ T6872]  </TASK>
[  225.498401][ T6846] geneve2: left allmulticast mode
[  225.856743][   T36] bridge_slave_1: left allmulticast mode
[  225.868339][   T36] bridge_slave_1: left promiscuous mode
[  225.902451][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.951860][   T36] bridge_slave_0: left allmulticast mode
[  225.983598][   T36] bridge_slave_0: left promiscuous mode
[  225.993978][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.528288][ T5864] Bluetooth: hci1: command tx timeout
[  226.612669][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.624914][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.640262][   T36] bond0 (unregistering): Released all slaves
[  226.792274][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[  226.917801][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[  226.937612][ T6917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.220'.
[  227.369351][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[  227.407562][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[  227.446499][   T36] hsr_slave_0: left promiscuous mode
[  227.462914][   T36] hsr_slave_1: left promiscuous mode
[  227.476273][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.483738][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.495640][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.503096][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.543751][   T36] veth1_macvtap: left promiscuous mode
[  227.568485][   T36] veth0_macvtap: left promiscuous mode
[  227.574292][   T36] veth1_vlan: left promiscuous mode
[  227.584354][   T36] veth0_vlan: left promiscuous mode
[  227.662216][ T6951] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  227.662514][  T844] IPVS: starting estimator thread 0...
[  227.693998][ T6951] netlink: 'syz.1.224': attribute type 5 has an invalid length.
[  227.776441][ T6955] IPVS: using max 29 ests per chain, 69600 per kthread
[  228.480247][   T36] team0 (unregistering): Port device team_slave_1 removed
[  228.520901][   T36] team0 (unregistering): Port device team_slave_0 removed
[  228.606669][ T5864] Bluetooth: hci1: command tx timeout
[  229.089736][ T6951] ip6erspan0: entered allmulticast mode
[  229.470619][ T6848] chnl_net:caif_netlink_parms(): no params data found
[  229.903557][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.939444][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.971951][ T6848] bridge_slave_0: entered allmulticast mode
[  230.004899][ T6848] bridge_slave_0: entered promiscuous mode
[  230.049332][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.077104][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.098405][ T6848] bridge_slave_1: entered allmulticast mode
[  230.117412][ T6848] bridge_slave_1: entered promiscuous mode
[  230.310804][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.357773][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.685560][ T5864] Bluetooth: hci1: command tx timeout
[  231.744109][ T7023] syz.1.239: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  231.764987][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.1.239 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  231.765012][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  231.765022][ T7023] Call Trace:
[  231.765029][ T7023]  <TASK>
[  231.765037][ T7023]  dump_stack_lvl+0x189/0x250
[  231.765071][ T7023]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.765097][ T7023]  ? __pfx__printk+0x10/0x10
[  231.765117][ T7023]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  231.765137][ T7023]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  231.765159][ T7023]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  231.765182][ T7023]  warn_alloc+0x214/0x310
[  231.765215][ T7023]  ? __pfx_warn_alloc+0x10/0x10
[  231.765259][ T7023]  ? __get_vm_area_node+0x28f/0x300
[  231.765293][ T7023]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[  231.765320][ T7023]  ? __asan_memset+0x22/0x50
[  231.765343][ T7023]  ? __x64_sys_sendmsg+0x19b/0x260
[  231.765392][ T7023]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  231.765415][ T7023]  ? __kasan_kmalloc_large+0x1a/0xa0
[  231.765440][ T7023]  ? rcu_is_watching+0x15/0xb0
[  231.765459][ T7023]  ? veth_dev_init+0x363/0x570
[  231.765481][ T7023]  ? veth_dev_init+0x363/0x570
[  231.765500][ T7023]  __kvmalloc_node_noprof+0x3a0/0x5e0
[  231.765524][ T7023]  ? veth_dev_init+0x363/0x570
[  231.765556][ T7023]  veth_dev_init+0x363/0x570
[  231.765586][ T7023]  register_netdevice+0x6bf/0x1ae0
[  231.765617][ T7023]  ? snprintf+0xda/0x120
[  231.765646][ T7023]  ? __pfx_register_netdevice+0x10/0x10
[  231.765664][ T7023]  ? __pfx_snprintf+0x10/0x10
[  231.765690][ T7023]  ? __asan_memset+0x22/0x50
[  231.765709][ T7023]  ? dev_addr_mod+0x2ce/0x3d0
[  231.765742][ T7023]  veth_newlink+0x5cc/0xa50
[  231.765767][ T7023]  ? __pfx_veth_newlink+0x10/0x10
[  231.765789][ T7023]  ? percpu_ref_get_many+0x19/0x140
[  231.765889][ T7023]  ? validate_linkmsg+0x765/0x950
[  231.765920][ T7023]  ? __pfx_veth_newlink+0x10/0x10
[  231.765944][ T7023]  rtnl_newlink_create+0x310/0xb00
[  231.765975][ T7023]  ? __mutex_lock+0x51b/0xe80
[  231.766002][ T7023]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  231.766023][ T7023]  ? rtnl_newlink+0x8db/0x1c70
[  231.766048][ T7023]  ? __pfx___mutex_lock+0x10/0x10
[  231.766080][ T7023]  ? ns_capable+0x8a/0xf0
[  231.766104][ T7023]  rtnl_newlink+0x16d6/0x1c70
[  231.766128][ T7023]  ? __kasan_slab_free+0x62/0x70
[  231.766163][ T7023]  ? __pfx_rtnl_newlink+0x10/0x10
[  231.766277][ T7023]  ? aa_get_newest_label+0xf7/0x5d0
[  231.766303][ T7023]  ? __lock_acquire+0xaac/0xd20
[  231.766356][ T7023]  ? __pfx_rtnl_newlink+0x10/0x10
[  231.766377][ T7023]  rtnetlink_rcv_msg+0x7cf/0xb70
[  231.766403][ T7023]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  231.766424][ T7023]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  231.766451][ T7023]  ? ref_tracker_free+0x63a/0x7d0
[  231.766470][ T7023]  ? __copy_skb_header+0xa7/0x550
[  231.766503][ T7023]  netlink_rcv_skb+0x219/0x490
[  231.766528][ T7023]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  231.766548][ T7023]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  231.766590][ T7023]  ? netlink_deliver_tap+0x2e/0x1b0
[  231.766608][ T7023]  ? netlink_deliver_tap+0x2e/0x1b0
[  231.766632][ T7023]  netlink_unicast+0x75b/0x8d0
[  231.766662][ T7023]  netlink_sendmsg+0x805/0xb30
[  231.766695][ T7023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.766718][ T7023]  ? aa_sock_msg_perm+0x94/0x160
[  231.766740][ T7023]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  231.766758][ T7023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.766783][ T7023]  __sock_sendmsg+0x21c/0x270
[  231.766803][ T7023]  ____sys_sendmsg+0x505/0x830
[  231.766831][ T7023]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.766866][ T7023]  ? import_iovec+0x74/0xa0
[  231.766896][ T7023]  ___sys_sendmsg+0x21f/0x2a0
[  231.766925][ T7023]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.766994][ T7023]  ? __fget_files+0x2a/0x420
[  231.767014][ T7023]  ? __fget_files+0x3a0/0x420
[  231.767046][ T7023]  __x64_sys_sendmsg+0x19b/0x260
[  231.767074][ T7023]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.767118][ T7023]  ? do_syscall_64+0xba/0x210
[  231.767143][ T7023]  do_syscall_64+0xf6/0x210
[  231.767163][ T7023]  ? asm_sysvec_call_function_single+0x1a/0x20
[  231.767182][ T7023]  ? clear_bhb_loop+0x60/0xb0
[  231.767204][ T7023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.767221][ T7023] RIP: 0033:0x7f79a478e969
[  231.767250][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.767265][ T7023] RSP: 002b:00007f79a5540038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.767284][ T7023] RAX: ffffffffffffffda RBX: 00007f79a49b5fa0 RCX: 00007f79a478e969
[  231.767298][ T7023] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003
[  231.767309][ T7023] RBP: 00007f79a4810ab1 R08: 0000000000000000 R09: 0000000000000000
[  231.767320][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.767331][ T7023] R13: 0000000000000000 R14: 00007f79a49b5fa0 R15: 00007ffef73b62d8
[  231.767362][ T7023]  </TASK>
[  232.244123][ T7023] Mem-Info:
[  232.249731][ T7023] active_anon:6931 inactive_anon:0 isolated_anon:0
[  232.249731][ T7023]  active_file:1506 inactive_file:39849 isolated_file:0
[  232.249731][ T7023]  unevictable:768 dirty:128 writeback:0
[  232.249731][ T7023]  slab_reclaimable:10208 slab_unreclaimable:99854
[  232.249731][ T7023]  mapped:30393 shmem:1371 pagetables:898
[  232.249731][ T7023]  sec_pagetables:0 bounce:0
[  232.249731][ T7023]  kernel_misc_reclaimable:0
[  232.249731][ T7023]  free:1340082 free_pcp:130 free_cma:0
[  232.295213][ T7023] Node 0 active_anon:27724kB inactive_anon:0kB active_file:6024kB inactive_file:159192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121572kB dirty:508kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10896kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.328747][ T7023] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.362337][ T7023] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.390514][ T7023] lowmem_reserve[]: 0 2503 2504 2504 2504
[  232.396634][ T7023] Node 0 DMA32 free:1436668kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:27716kB inactive_anon:0kB active_file:6024kB inactive_file:159100kB unevictable:1536kB writepending:504kB present:3129332kB managed:2563988kB mlocked:0kB bounce:0kB free_pcp:328kB local_pcp:236kB free_cma:0kB
[  232.427329][ T7023] lowmem_reserve[]: 0 0 0 0 0
[  232.432090][ T7023] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  232.460935][ T7023] lowmem_reserve[]: 0 0 0 0 0
[  232.467662][ T7023] Node 1 Normal free:3909128kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.497110][ T7023] lowmem_reserve[]: 0 0 0 0 0
[  232.501864][ T7023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  232.514551][ T7023] Node 0 DMA32: 134*4kB (UME) 213*8kB (UME) 182*16kB (UME) 164*32kB (UME) 87*64kB (UME) 24*128kB (UME) 9*256kB (UM) 8*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 342*4096kB (UM) = 1436512kB
[  232.533268][ T7023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  232.544788][ T7023] Node 1 Normal: 194*4kB (UME) 48*8kB (UME) 41*16kB (UME) 203*32kB (UME) 97*64kB (UME) 27*128kB (UME) 20*256kB (UME) 10*512kB (UM) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3909176kB
[  232.564699][ T7023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  232.574346][ T7023] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.583776][ T7023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  232.593590][ T7023] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.603447][ T7023] 42724 total pagecache pages
[  232.608767][ T7023] 0 pages in swap cache
[  232.612930][ T7023] Free swap  = 124996kB
[  232.617798][ T7023] Total swap = 124996kB
[  232.622040][ T7023] 2097051 pages RAM
[  232.626113][ T7023] 0 pages HighMem/MovableOnly
[  232.630792][ T7023] 424396 pages reserved
[  232.634926][ T7023] 0 pages cma reserved
[  232.765592][ T5864] Bluetooth: hci1: command tx timeout
[  233.800469][ T7025] lo: entered allmulticast mode
[  233.809657][ T6848] team0: Port device team_slave_0 added
[  233.821602][ T7025] lo: left allmulticast mode
[  233.949452][ T6848] team0: Port device team_slave_1 added
[  234.140882][ T7058] xt_ipcomp: unknown flags F7
[  234.150023][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[  234.176824][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.190504][ T7062] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[  234.200009][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.226469][ T7062] netlink: 184 bytes leftover after parsing attributes in process `syz.0.246'.
[  234.226515][ T7062] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[  234.254956][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.273991][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.281217][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.310315][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.325052][ T7066] netlink: 'syz.0.246': attribute type 26 has an invalid length.
[  234.333909][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'.
[  234.517474][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'.
[  234.527830][ T6848] hsr_slave_0: entered promiscuous mode
[  234.534998][ T6848] hsr_slave_1: entered promiscuous mode
[  234.551356][ T6848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.571205][ T6848] Cannot create hsr debugfs directory
[  234.750640][ T7081] netlink: 'syz.0.249': attribute type 9 has an invalid length.
[  234.790063][ T7082] netlink: 'syz.4.250': attribute type 1 has an invalid length.
[  234.907752][ T7082] 8021q: adding VLAN 0 to HW filter on device bond1
[  234.984685][ T7095] delete_channel: no stack
[  235.000544][ T7083] bond1: (slave geneve1): making interface the new active one
[  235.030562][ T7083] bond1: (slave geneve1): Enslaving as an active interface with an up link
[  235.409513][ T7110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.256'.
[  235.454496][ T7111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.255'.
[  235.496160][ T7114] ip6tnl1: entered promiscuous mode
[  235.502383][ T7114] ip6tnl1: entered allmulticast mode
[  235.556866][ T7111] ªªªªªª: renamed from lo (while UP)
[  236.410394][ T7147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.498312][ T7147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.611942][ T7147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.673627][ T6848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  236.753129][ T7147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.812369][ T6848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  236.961059][ T6848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  236.990514][ T6848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  237.126407][ T7175] netlink: 72 bytes leftover after parsing attributes in process `syz.0.267'.
[  237.153650][ T7147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.251724][ T7182] Driver unsupported XDP return value 0 on prog  (id 101) dev N/A, expect packet loss!
[  237.288484][ T7147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.394203][ T7147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.454384][ T7189] netlink: 'syz.0.270': attribute type 8 has an invalid length.
[  237.463044][ T7147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.586074][ T7146] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.718151][ T7146] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.739337][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[  237.880907][ T7146] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.941860][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.984667][ T7146] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.053847][ T7213] netlink: 'syz.4.275': attribute type 4 has an invalid length.
[  238.102834][ T7213] netlink: 'syz.4.275': attribute type 4 has an invalid length.
[  238.116394][ T6848] 8021q: adding VLAN 0 to HW filter on device team0
[  238.152614][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.159842][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.193870][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'.
[  238.219827][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.227085][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.495001][ T7222] syzkaller0: entered promiscuous mode
[  238.503034][ T7222] syzkaller0: entered allmulticast mode
[  238.760108][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.279'.
[  240.011431][ T7244] syzkaller0: entered promiscuous mode
[  240.047778][ T7244] syzkaller0: entered allmulticast mode
[  240.177259][ T7263] netlink: 'syz.4.284': attribute type 29 has an invalid length.
[  240.544579][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.286'.
[  241.287377][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.330695][ T7146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.423711][ T7146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.426794][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[  241.463684][ T7146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.474756][ T7272] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  241.483941][ T7272] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  241.540451][ T7146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.659315][ T7278] netlink: 64 bytes leftover after parsing attributes in process `syz.2.290'.
[  241.693703][ T6848] veth0_vlan: entered promiscuous mode
[  241.748727][ T6848] veth1_vlan: entered promiscuous mode
[  241.834647][ T6848] veth0_macvtap: entered promiscuous mode
[  241.845208][ T6848] veth1_macvtap: entered promiscuous mode
[  241.887356][ T7292] Bluetooth: MGMT ver 1.23
[  241.890920][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[  241.905167][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.919320][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.939613][ T6848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.948874][ T6848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.952289][ T7291] xt_CT: No such helper "pptp"
[  241.958968][ T6848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.986137][ T6848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.191764][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.220060][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.258704][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.264111][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.284624][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.312417][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.066367][ T7312] xt_CT: No such helper "snmp"
[  243.238900][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'.
[  243.244220][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.296158][ T7321] netlink: 248 bytes leftover after parsing attributes in process `syz.1.301'.
[  243.442404][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.464707][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'.
[  243.582900][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.778157][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.895830][ T7319] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.903228][ T7319] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  243.939002][ T7319] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  244.070075][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.292897][ T7341] IPVS: Error connecting to the multicast addr
[  244.311522][ T7342] syzkaller0: entered allmulticast mode
[  244.358066][ T7342] syzkaller0 (unregistering): left allmulticast mode
[  244.560137][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.578430][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.602487][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.622103][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.630505][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.761064][ T7358] trusted_key: syz.0.308 sent an empty control message without MSG_MORE.
[  244.825972][   T12] bridge_slave_1: left allmulticast mode
[  244.868284][   T12] bridge_slave_1: left promiscuous mode
[  244.891094][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.963438][   T12] bridge_slave_0: left allmulticast mode
[  244.985596][   T12] bridge_slave_0: left promiscuous mode
[  245.013900][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.950252][ T7392] netlink: 'syz.2.315': attribute type 11 has an invalid length.
[  246.006800][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.022837][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.034659][   T12] bond0 (unregistering): Released all slaves
[  246.412368][ T7406] !
: renamed from dummy0
[  246.491268][ T7403] syzkaller1: entered promiscuous mode
[  246.516987][ T7403] syzkaller1: entered allmulticast mode
[  246.687416][ T5858] Bluetooth: hci1: command tx timeout
[  246.875042][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'.
[  246.918424][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'.
[  246.953649][ T7428] netlink: 'syz.0.322': attribute type 4 has an invalid length.
[  246.995576][ T7428] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.322'.
[  247.026400][ T7416] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  247.228414][   T12] hsr_slave_0: left promiscuous mode
[  247.281538][   T12] hsr_slave_1: left promiscuous mode
[  247.301246][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.327357][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.351705][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.373352][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.438723][   T12] veth1_macvtap: left promiscuous mode
[  247.446451][   T12] veth0_macvtap: left promiscuous mode
[  247.453324][   T12] veth1_vlan: left promiscuous mode
[  247.461100][   T12] veth0_vlan: left promiscuous mode
[  248.102388][   T12] team0 (unregistering): Port device team_slave_1 removed
[  248.141979][   T12] team0 (unregistering): Port device team_slave_0 removed
[  248.664662][ T7466] netlink: 256 bytes leftover after parsing attributes in process `syz.4.330'.
[  248.717025][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'.
[  248.737933][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[  248.751051][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'.
[  248.765554][ T5858] Bluetooth: hci1: command tx timeout
[  248.775717][ T7471] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.333'.
[  248.785184][ T7471] netlink: 21916 bytes leftover after parsing attributes in process `syz.1.333'.
[  248.832470][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'.
[  248.920107][ T7471] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.985363][ T7346] chnl_net:caif_netlink_parms(): no params data found
[  249.034820][ T7479] pim6reg: entered allmulticast mode
[  249.070686][ T7471] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.182511][ T7479] pim6reg: left allmulticast mode
[  249.232341][ T7471] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.257142][ T7490] !
: renamed from dummy0 (while UP)
[  249.326130][ T5858] Bluetooth: hci0: command tx timeout
[  249.509513][ T7471] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.747523][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.766002][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.814014][ T7346] bridge_slave_0: entered allmulticast mode
[  249.823137][ T7346] bridge_slave_0: entered promiscuous mode
[  250.172510][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.189761][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.229644][ T7346] bridge_slave_1: entered allmulticast mode
[  250.261614][ T7346] bridge_slave_1: entered promiscuous mode
[  250.408650][ T7527] netlink: 'syz.4.346': attribute type 23 has an invalid length.
[  250.493864][ T7471] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.542967][ T7471] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.691698][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.783066][ T7471] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.795251][ T7533] netlink: 'syz.4.347': attribute type 7 has an invalid length.
[  250.830965][ T7471] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.845562][ T5858] Bluetooth: hci1: command tx timeout
[  250.854375][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.065240][ T7346] team0: Port device team_slave_0 added
[  251.224942][ T7346] team0: Port device team_slave_1 added
[  251.470964][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.500441][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.579824][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.607704][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.614695][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.695454][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.958685][ T7346] hsr_slave_0: entered promiscuous mode
[  251.991702][ T7346] hsr_slave_1: entered promiscuous mode
[  252.018305][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.051808][ T7346] Cannot create hsr debugfs directory
[  252.200387][ T7579] __nla_validate_parse: 5 callbacks suppressed
[  252.200405][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'.
[  252.564950][ T7595] netlink: 'syz.0.359': attribute type 29 has an invalid length.
[  252.813628][ T7600] macvlan2: entered promiscuous mode
[  252.826761][ T7600] macvlan2: entered allmulticast mode
[  252.926828][ T5858] Bluetooth: hci1: command tx timeout
[  252.982899][ T7606] FAULT_INJECTION: forcing a failure.
[  252.982899][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.031766][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.4.364 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  253.031792][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  253.031815][ T7606] Call Trace:
[  253.031827][ T7606]  <TASK>
[  253.031835][ T7606]  dump_stack_lvl+0x189/0x250
[  253.031863][ T7606]  ? __lock_acquire+0xaac/0xd20
[  253.031890][ T7606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.031919][ T7606]  ? __pfx__printk+0x10/0x10
[  253.031937][ T7606]  ? __might_fault+0xb0/0x130
[  253.031971][ T7606]  should_fail_ex+0x414/0x560
[  253.031996][ T7606]  _copy_from_iter+0x1db/0x15a0
[  253.032026][ T7606]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  253.032045][ T7606]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  253.032066][ T7606]  ? __pfx__copy_from_iter+0x10/0x10
[  253.032089][ T7606]  ? __build_skb_around+0x257/0x3e0
[  253.032115][ T7606]  ? netlink_sendmsg+0x642/0xb30
[  253.032136][ T7606]  ? skb_put+0x11b/0x210
[  253.032162][ T7606]  netlink_sendmsg+0x6b2/0xb30
[  253.032195][ T7606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.032221][ T7606]  ? aa_sock_msg_perm+0x94/0x160
[  253.032244][ T7606]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  253.032264][ T7606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.032287][ T7606]  __sock_sendmsg+0x21c/0x270
[  253.032310][ T7606]  ____sys_sendmsg+0x505/0x830
[  253.032339][ T7606]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.032372][ T7606]  ? import_iovec+0x74/0xa0
[  253.032399][ T7606]  ___sys_sendmsg+0x21f/0x2a0
[  253.032425][ T7606]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.032483][ T7606]  ? __fget_files+0x2a/0x420
[  253.032504][ T7606]  ? __fget_files+0x3a0/0x420
[  253.032537][ T7606]  __x64_sys_sendmsg+0x19b/0x260
[  253.032562][ T7606]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  253.032599][ T7606]  ? do_syscall_64+0xba/0x210
[  253.032623][ T7606]  do_syscall_64+0xf6/0x210
[  253.032643][ T7606]  ? clear_bhb_loop+0x60/0xb0
[  253.032665][ T7606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.032681][ T7606] RIP: 0033:0x7fba4d18e969
[  253.032698][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.032712][ T7606] RSP: 002b:00007fba4df97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.032731][ T7606] RAX: ffffffffffffffda RBX: 00007fba4d3b5fa0 RCX: 00007fba4d18e969
[  253.032744][ T7606] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007
[  253.032754][ T7606] RBP: 00007fba4df97090 R08: 0000000000000000 R09: 0000000000000000
[  253.032764][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.032773][ T7606] R13: 0000000000000000 R14: 00007fba4d3b5fa0 R15: 00007ffccfa65548
[  253.032799][ T7606]  </TASK>
[  253.416525][ T7615] netlink: 248 bytes leftover after parsing attributes in process `syz.4.366'.
[  253.671360][ T7630] pimreg: entered allmulticast mode
[  253.680609][ T7630] pimreg: left allmulticast mode
[  253.900857][ T7639] !
: renamed from dummy0 (while UP)
[  253.969854][ T7346] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  254.012266][ T7346] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  254.043268][ T7646] bridge3: entered allmulticast mode
[  254.080335][ T7346] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  254.146615][ T7346] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  254.568714][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.653105][ T7346] 8021q: adding VLAN 0 to HW filter on device team0
[  254.697232][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.704408][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.778950][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.786174][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.896942][ T7681] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  255.073174][ T7683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.376'.
[  255.088245][ T7689] netlink: 'syz.4.378': attribute type 29 has an invalid length.
[  255.461815][ T7706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'.
[  255.733523][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.768968][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'.
[  255.797157][ T7718] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  256.208161][ T7740] netlink: 17 bytes leftover after parsing attributes in process `syz.1.389'.
[  256.248314][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.429412][ T7346] veth0_vlan: entered promiscuous mode
[  256.471122][ T7346] veth1_vlan: entered promiscuous mode
[  256.545209][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[  256.561566][ T7346] veth0_macvtap: entered promiscuous mode
[  256.621427][ T7346] veth1_macvtap: entered promiscuous mode
[  256.948480][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'.
[  257.838540][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.999905][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.031590][ T7791] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  258.141383][ T7346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.195443][ T7346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.204204][ T7346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.230743][ T7805] sctp: [Deprecated]: syz.4.402 (pid 7805) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.230743][ T7805] Use struct sctp_sack_info instead
[  258.271454][ T7346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.350777][ T7807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.403'.
[  258.618391][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.641768][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.684430][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.694021][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.986524][ T7844] pim6reg1: entered promiscuous mode
[  258.991878][ T7844] pim6reg1: entered allmulticast mode
[  258.998481][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[  259.481992][   T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.652655][   T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.809441][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.024197][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.333600][   T53] bridge_slave_1: left allmulticast mode
[  260.355518][   T53] bridge_slave_1: left promiscuous mode
[  260.389461][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.498630][   T53] bridge_slave_0: left allmulticast mode
[  260.504344][   T53] bridge_slave_0: left promiscuous mode
[  260.548325][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.011179][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  261.036292][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  261.051323][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  261.061856][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  261.070099][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  261.169640][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.180685][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.191040][   T53] bond0 (unregistering): Released all slaves
[  261.206145][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'.
[  261.215042][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'.
[  261.429151][ T7923] netlink: 'syz.1.423': attribute type 6 has an invalid length.
[  261.591391][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'.
[  261.609007][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[  261.620062][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[  262.313749][   T53] hsr_slave_0: left promiscuous mode
[  262.336016][   T53] hsr_slave_1: left promiscuous mode
[  262.354756][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.368498][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.380542][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.398856][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.452381][   T53] veth1_macvtap: left promiscuous mode
[  262.461097][   T53] veth0_macvtap: left promiscuous mode
[  262.467458][   T53] veth1_vlan: left promiscuous mode
[  262.472877][   T53] veth0_vlan: left promiscuous mode
[  262.926167][   T53] team0 (unregistering): Port device team_slave_1 removed
[  262.961720][   T53] team0 (unregistering): Port device team_slave_0 removed
[  263.166448][ T5858] Bluetooth: hci1: command tx timeout
[  263.523979][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'.
[  263.584679][ T7986] xt_bpf: check failed: parse error
[  263.795215][ T7912] chnl_net:caif_netlink_parms(): no params data found
[  263.819466][ T8002] netlink: 60 bytes leftover after parsing attributes in process `syz.0.435'.
[  263.828950][ T8002] netlink: 37 bytes leftover after parsing attributes in process `syz.0.435'.
[  263.841376][ T8002] netlink: 37 bytes leftover after parsing attributes in process `syz.0.435'.
[  264.168873][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.438'.
[  264.259594][ T8026] netlink: 'syz.0.436': attribute type 10 has an invalid length.
[  264.342377][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.352959][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.367130][ T7912] bridge_slave_0: entered allmulticast mode
[  264.392204][ T7912] bridge_slave_0: entered promiscuous mode
[  264.469744][ T8026] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  264.555167][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.571639][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.581201][ T7912] bridge_slave_1: entered allmulticast mode
[  264.594349][ T7912] bridge_slave_1: entered promiscuous mode
[  264.706867][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'.
[  264.837445][ T8038] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  264.938521][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'.
[  265.134321][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.238693][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.255498][ T5858] Bluetooth: hci1: command tx timeout
[  265.342522][ T8069] x_tables: duplicate underflow at hook 1
[  265.392099][ T8063] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.641338][ T7912] team0: Port device team_slave_0 added
[  265.692852][ T7912] team0: Port device team_slave_1 added
[  265.717235][ T8078] batadv_slave_1: entered promiscuous mode
[  265.740357][ T8075] batadv_slave_1: left promiscuous mode
[  265.775505][ T8063] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.830304][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.838423][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.865178][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.905708][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.925951][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.952775][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.024915][ T8063] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.271704][ T8063] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.324208][ T7912] hsr_slave_0: entered promiscuous mode
[  266.370294][ T7912] hsr_slave_1: entered promiscuous mode
[  266.404259][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.425454][ T7912] Cannot create hsr debugfs directory
[  266.479755][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'.
[  266.841754][ T8063] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.903112][ T8106] netlink: 'syz.0.452': attribute type 16 has an invalid length.
[  266.932241][ T8106] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.452'.
[  266.963425][ T8063] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.980668][ T8063] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.071084][ T8063] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.101118][ T8106] syzkaller0: entered promiscuous mode
[  267.110552][ T8106] syzkaller0: entered allmulticast mode
[  267.199861][ T8106] bond0: (slave vlan2): Opening slave failed
[  267.278157][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[  267.325837][ T5858] Bluetooth: hci1: command tx timeout
[  267.436472][ T8112] netlink: 'syz.1.453': attribute type 2 has an invalid length.
[  267.970879][ T5858] block nbd0: Receive control failed (result -107)
[  268.010959][ T8149] nbd0: detected capacity change from 0 to 32
[  268.068078][ T7043] block nbd0: Dead connection, failed to find a fallback
[  268.093289][ T7043] block nbd0: shutting down sockets
[  268.123065][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.189921][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.224622][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.270952][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.304663][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.355564][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.415164][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.439384][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.476731][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.517793][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.540585][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.567226][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.607546][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.639592][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.658047][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.677890][ T8183] raw_sendmsg: syz.4.467 forgot to set AF_INET. Fix it!
[  268.692142][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.705818][ T7043] ldm_validate_partition_table(): Disk read failed.
[  268.715090][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.725942][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.733960][ T7043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.749338][ T7043] Buffer I/O error on dev nbd0, logical block 0, async page read
[  268.758048][ T7043] Dev nbd0: unable to read RDB block 0
[  268.764477][ T7043]  nbd0: unable to read partition table
[  268.783686][ T7043] ldm_validate_partition_table(): Disk read failed.
[  268.791311][ T7043] Dev nbd0: unable to read RDB block 0
[  268.798392][ T7043]  nbd0: unable to read partition table
[  268.842614][ T8180] tipc: Started in network mode
[  268.851844][ T8180] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  268.861950][ T8180] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  268.887758][ T8180] tipc: Enabled bearer <udp:syz1>, priority 10
[  268.906837][ T7912] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  268.935464][ T8185] __nla_validate_parse: 7 callbacks suppressed
[  268.935483][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'.
[  268.957438][ T8185] netlink: 15 bytes leftover after parsing attributes in process `syz.4.467'.
[  268.970870][ T8185] netlink: 15 bytes leftover after parsing attributes in process `syz.4.467'.
[  268.990998][ T7912] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  269.045038][ T7912] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  269.059187][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'.
[  269.084612][ T7912] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  269.103791][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  269.405629][ T5858] Bluetooth: hci1: command tx timeout
[  269.474575][ T8216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.644254][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.006477][   T47] tipc: Node number set to 1
[  270.072909][ T7912] 8021q: adding VLAN 0 to HW filter on device team0
[  270.180838][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.188059][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.251825][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.259072][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.324788][ T8254] netlink: 68 bytes leftover after parsing attributes in process `syz.2.487'.
[  270.365730][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'.
[  270.905080][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'.
[  271.450628][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[  271.668625][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.707394][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'.
[  272.196087][ T7912] veth0_vlan: entered promiscuous mode
[  272.307916][ T7912] veth1_vlan: entered promiscuous mode
[  272.376375][ T7912] veth0_macvtap: entered promiscuous mode
[  272.395117][ T7912] veth1_macvtap: entered promiscuous mode
[  272.598195][ T8332] sctp: [Deprecated]: syz.4.501 (pid 8332) Use of int in max_burst socket option deprecated.
[  272.598195][ T8332] Use struct sctp_assoc_value instead
[  272.916979][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.943338][ T8344] xt_ecn: cannot match TCP bits for non-tcp packets
[  272.983117][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.021166][ T7912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.046561][ T7912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.078265][ T7912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.092642][ T7912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.433620][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.460155][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.549956][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.575209][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.129276][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.226235][ T8365] netlink: zone id is out of range
[  275.269842][ T8365] netlink: zone id is out of range
[  275.325904][ T8365] netlink: zone id is out of range
[  275.349239][ T8365] netlink: zone id is out of range
[  275.409295][ T8365] netlink: zone id is out of range
[  275.470260][ T8365] netlink: zone id is out of range
[  275.480037][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.500099][ T8365] netlink: zone id is out of range
[  275.518590][ T8365] netlink: zone id is out of range
[  275.566181][ T8365] netlink: zone id is out of range
[  275.581275][ T8365] netlink: zone id is out of range
[  275.689179][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.832228][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.071588][   T12] bridge_slave_1: left allmulticast mode
[  276.080077][   T12] bridge_slave_1: left promiscuous mode
[  276.089167][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.102023][   T12] bridge_slave_0: left allmulticast mode
[  276.127372][   T12] bridge_slave_0: left promiscuous mode
[  276.145757][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.206106][ T8408] __nla_validate_parse: 1 callbacks suppressed
[  276.206124][ T8408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.514'.
[  276.309914][ T8410] xt_hashlimit: size too large, truncated to 1048576
[  276.317059][ T8410] xt_hashlimit: max too large, truncated to 1048576
[  276.802192][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  276.828541][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  276.844365][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  276.863526][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  276.882252][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  277.096356][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.114861][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.145086][   T12] bond0 (unregistering): Released all slaves
[  277.272898][ T8420] ip6gre1: entered promiscuous mode
[  277.593199][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'.
[  277.739430][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.519'.
[  277.813004][ T8434] can: request_module (can-proto-3) failed.
[  277.930278][   T12] hsr_slave_0: left promiscuous mode
[  277.952505][   T12] hsr_slave_1: left promiscuous mode
[  277.971322][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.989215][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.009804][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.037900][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.114426][   T12] veth1_macvtap: left promiscuous mode
[  278.132894][   T12] veth0_macvtap: left promiscuous mode
[  278.151196][   T12] veth1_vlan: left promiscuous mode
[  278.162598][   T12] veth0_vlan: left promiscuous mode
[  278.925786][ T5858] Bluetooth: hci1: command tx timeout
[  279.016965][   T12] team0 (unregistering): Port device team_slave_1 removed
[  279.060877][   T12] team0 (unregistering): Port device team_slave_0 removed
[  279.631379][ T8470] vlan2: entered promiscuous mode
[  279.641571][ T8470] batadv0: entered promiscuous mode
[  279.734362][ T8472] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  279.809549][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[  280.050510][ T8417] chnl_net:caif_netlink_parms(): no params data found
[  280.181642][ T8477] batadv_slave_0: entered promiscuous mode
[  280.255110][ T8477] batadv_slave_0: left promiscuous mode
[  280.800020][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.828142][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.844508][ T8417] bridge_slave_0: entered allmulticast mode
[  280.862169][ T8417] bridge_slave_0: entered promiscuous mode
[  280.880002][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.916150][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.947979][ T8417] bridge_slave_1: entered allmulticast mode
[  280.971707][ T8417] bridge_slave_1: entered promiscuous mode
[  281.006225][ T5858] Bluetooth: hci1: command 0x041b tx timeout
[  281.043016][ T8533] netlink: 165 bytes leftover after parsing attributes in process `syz.4.536'.
[  281.113879][ T8533] netlink: 'syz.4.536': attribute type 10 has an invalid length.
[  281.192424][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.243593][ T8533] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  281.268919][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.270401][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'.
[  281.358523][ T8547] xt_hashlimit: size too large, truncated to 1048576
[  281.712924][ T8417] team0: Port device team_slave_0 added
[  281.799403][ T8417] team0: Port device team_slave_1 added
[  281.927067][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.934064][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.967580][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.017492][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.024492][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.110637][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.126492][ T8572] netlink: 'syz.4.548': attribute type 11 has an invalid length.
[  282.155541][ T8572] netlink: 228 bytes leftover after parsing attributes in process `syz.4.548'.
[  282.187648][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'.
[  282.461657][ T8582] netlink: 'syz.0.550': attribute type 29 has an invalid length.
[  282.540986][ T8417] hsr_slave_0: entered promiscuous mode
[  282.579279][ T8417] hsr_slave_1: entered promiscuous mode
[  282.599951][ T8417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.635818][ T8417] Cannot create hsr debugfs directory
[  283.086050][ T5864] Bluetooth: hci1: command 0x041b tx timeout
[  283.659041][ T5199] udevd[5199]: worker [7043] terminated by signal 33 (Unknown signal 33)
[  283.685325][ T5199] udevd[5199]: worker [7043] failed while handling '/devices/virtual/block/loop4'
[  283.705933][ T8638] xt_CT: No such helper "pptp"
[  284.005026][ T8650] netlink: 'syz.1.567': attribute type 11 has an invalid length.
[  284.057154][ T8653] delete_channel: no stack
[  284.081890][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'.
[  284.166587][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'.
[  284.360505][ T8658] bridge0: entered promiscuous mode
[  284.371035][ T8658] macvlan2: entered promiscuous mode
[  284.413625][ T8668] IPVS: set_ctl: invalid protocol: 137 172.20.20.14:20000
[  284.663557][ T8417] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  284.745625][ T8671] netlink: 2 bytes leftover after parsing attributes in process `syz.4.573'.
[  284.855864][ T8677] set match dimension is over the limit!
[  284.914965][ T8417] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  284.933011][ T8671] batadv_slave_1: entered promiscuous mode
[  284.942607][ T8417] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  284.964994][ T8417] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  285.038740][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.575'.
[  285.128895][ T8684] ip6t_srh: unknown srh invflags 4000
[  285.166579][ T5864] Bluetooth: hci1: command 0x041b tx timeout
[  285.191439][ T8417] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.274801][ T8417] 8021q: adding VLAN 0 to HW filter on device team0
[  285.358156][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.365412][ T7945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.421563][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.428802][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.930681][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  286.237394][ T8417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.427724][ T8417] veth0_vlan: entered promiscuous mode
[  286.492179][ T8417] veth1_vlan: entered promiscuous mode
[  286.680988][ T8417] veth0_macvtap: entered promiscuous mode
[  286.754797][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'.
[  286.872820][ T8417] veth1_macvtap: entered promiscuous mode
[  286.932276][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.958971][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.985134][ T8417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.014240][ T8417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.042251][ T8417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.057848][ T8417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.224112][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.244369][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.252081][ T5864] Bluetooth: hci1: command 0x041b tx timeout
[  287.309761][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.317977][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.536683][ T8766] ip6tnl1: entered promiscuous mode
[  287.563831][ T8766] ip6tnl1: entered allmulticast mode
[  287.593371][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'.
[  287.621472][ T8775] netlink: 268 bytes leftover after parsing attributes in process `syz.0.597'.
[  287.661987][ T8775] unsupported nla_type 65024
[  287.670976][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.596'.
[  287.908767][ T8784] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003
[  287.909614][ T8783] netpci0: tun_chr_ioctl cmd 1074025672
[  287.921509][ T8784] IPVS: set_ctl: invalid protocol: 65402 0.0.0.0:20004
[  287.929396][ T8783] netpci0: ignored: set checksum disabled
[  287.960781][ T8783] netpci0: tun_chr_ioctl cmd 1074812117
[  288.268550][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'.
[  288.280246][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'.
[  288.792401][ T7943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.464704][ T7943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.561664][ T7943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.641193][ T7943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.750224][ T7943] bridge_slave_1: left allmulticast mode
[  289.757606][ T7943] bridge_slave_1: left promiscuous mode
[  289.763398][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.772642][ T7943] bridge_slave_0: left allmulticast mode
[  289.778572][ T7943] bridge_slave_0: left promiscuous mode
[  289.784258][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.080320][ T7943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.091401][ T7943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.103062][ T7943] bond0 (unregistering): Released all slaves
[  290.233703][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'.
[  290.546964][ T8837] xt_hashlimit: size too large, truncated to 1048576
[  290.659932][ T8841] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  290.863078][ T8841] net_ratelimit: 394 callbacks suppressed
[  290.863097][ T8841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.902178][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  290.911450][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  290.925225][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  290.935999][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  290.943817][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  290.994572][ T7943] hsr_slave_0: left promiscuous mode
[  291.019435][ T7943] hsr_slave_1: left promiscuous mode
[  291.027030][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.034487][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.067735][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.075399][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.136726][ T7943] veth1_macvtap: left promiscuous mode
[  291.142323][ T7943] veth0_macvtap: left promiscuous mode
[  291.159297][ T7943] veth1_vlan: left promiscuous mode
[  291.182494][ T7943] veth0_vlan: left promiscuous mode
[  291.263779][ T8854] netlink: 68 bytes leftover after parsing attributes in process `syz.0.617'.
[  291.285020][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  291.804917][ T7943] team0 (unregistering): Port device team_slave_1 removed
[  291.848289][ T7943] team0 (unregistering): Port device team_slave_0 removed
[  292.770636][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'.
[  292.789192][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'.
[  292.940111][ T8847] chnl_net:caif_netlink_parms(): no params data found
[  293.005619][ T5864] Bluetooth: hci1: command tx timeout
[  293.121966][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'.
[  293.159726][ T8906] netlink: 'syz.4.628': attribute type 3 has an invalid length.
[  293.178656][ T8906] netlink: 224 bytes leftover after parsing attributes in process `syz.4.628'.
[  293.312751][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.321384][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.328965][ T8847] bridge_slave_0: entered allmulticast mode
[  293.347514][ T8847] bridge_slave_0: entered promiscuous mode
[  293.361494][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.369685][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.382297][ T8847] bridge_slave_1: entered allmulticast mode
[  293.391059][ T8847] bridge_slave_1: entered promiscuous mode
[  293.559393][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.578918][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.629327][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.674960][ T8923] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.730869][ T8847] team0: Port device team_slave_0 added
[  293.741770][ T8847] team0: Port device team_slave_1 added
[  293.806958][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.814138][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.843269][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.856765][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.863809][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.892558][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.929094][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[  294.236293][ T8847] hsr_slave_0: entered promiscuous mode
[  294.243201][ T8847] hsr_slave_1: entered promiscuous mode
[  294.250208][ T8847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.257974][ T8847] Cannot create hsr debugfs directory
[  294.953813][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'.
[  295.086454][ T5864] Bluetooth: hci1: command tx timeout
[  295.123984][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.643'.
[  295.140312][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'.
[  295.236695][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz.4.643'.
[  295.255464][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz.4.643'.
[  295.430821][ T8978] netlink: 'syz.4.646': attribute type 10 has an invalid length.
[  295.517092][ T8983] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  295.720699][ T8847] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  295.784790][ T8847] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  295.819869][ T8847] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  295.834430][ T9004] xt_l2tp: missing protocol rule (udp|l2tpip)
[  295.864979][ T8847] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  296.197561][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.261165][ T8847] 8021q: adding VLAN 0 to HW filter on device team0
[  296.321018][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.328281][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.371993][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.379232][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.506731][ T8847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.133499][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.165933][ T5864] Bluetooth: hci1: command tx timeout
[  297.641331][ T9062] team0 (unregistering): Port device team_slave_0 removed
[  297.660089][ T9062] team0 (unregistering): Port device team_slave_1 removed
[  297.746433][ T9079] netlink: 'syz.4.669': attribute type 2 has an invalid length.
[  297.769411][ T9064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.823779][ T8847] veth0_vlan: entered promiscuous mode
[  297.879399][ T8847] veth1_vlan: entered promiscuous mode
[  297.914016][ T9081] __nla_validate_parse: 2 callbacks suppressed
[  297.914035][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'.
[  297.949267][ T9064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.956442][ T9081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'.
[  297.987758][ T9081] netlink: 'syz.1.671': attribute type 9 has an invalid length.
[  298.121404][ T9064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.232669][ T8847] veth0_macvtap: entered promiscuous mode
[  298.234016][ T9089] tipc: Can't bind to reserved service type 3
[  298.349508][ T9064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.461903][ T8847] veth1_macvtap: entered promiscuous mode
[  298.502517][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.562979][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.616357][ T8847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.647610][ T8847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.666779][ T8847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.681112][ T8847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.693207][ T9096] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  298.732197][ T9064] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.784965][ T9064] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.851407][ T9064] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.892290][ T9064] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.182303][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.199112][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.249764][ T5864] Bluetooth: hci1: command tx timeout
[  299.343521][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.344041][ T9119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.681'.
[  299.395442][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.620665][ T9121] can: request_module (can-proto-0) failed.
[  299.756498][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'.
[  299.793977][ T9134] netlink: 'syz.2.685': attribute type 3 has an invalid length.
[  299.802769][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'.
[  299.947962][ T9139] netlink: 'syz.4.687': attribute type 1 has an invalid length.
[  299.968946][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.687'.
[  300.069301][ T3428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.212349][ T3428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.293701][ T3428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.362447][ T3428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.513951][ T3428] bridge_slave_1: left allmulticast mode
[  300.521098][ T3428] bridge_slave_1: left promiscuous mode
[  300.529473][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.540403][ T3428] bridge_slave_0: left allmulticast mode
[  300.547040][ T3428] bridge_slave_0: left promiscuous mode
[  300.552749][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.829257][ T9144] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  300.890015][ T3428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.903828][ T3428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.917383][ T3428] bond0 (unregistering): Released all slaves
[  301.176943][   T24] IPVS: starting estimator thread 0...
[  301.275560][ T9160] IPVS: using max 33 ests per chain, 79200 per kthread
[  301.397741][ T9166] sctp: [Deprecated]: syz.4.694 (pid 9166) Use of int in max_burst socket option.
[  301.397741][ T9166] Use struct sctp_assoc_value instead
[  301.513304][ T3428] hsr_slave_0: left promiscuous mode
[  301.537386][ T3428] hsr_slave_1: left promiscuous mode
[  301.552580][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.576498][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.602539][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.625299][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.648320][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.658030][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.668709][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.687080][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.695156][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.777786][ T3428] veth1_macvtap: left promiscuous mode
[  301.783553][ T3428] veth0_macvtap: left promiscuous mode
[  301.789935][ T3428] veth1_vlan: left promiscuous mode
[  301.798606][ T3428] veth0_vlan: left promiscuous mode
[  302.396022][ T3428] team0 (unregistering): Port device team_slave_1 removed
[  302.432569][ T3428] team0 (unregistering): Port device team_slave_0 removed
[  303.173141][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'.
[  303.242070][ T9195] !
: entered promiscuous mode
[  303.265974][ T9195] macvtap1: entered promiscuous mode
[  303.271504][ T9195] macvtap1: entered allmulticast mode
[  303.310450][ T9195] !
: entered allmulticast mode
[  303.360567][ T9192] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  303.488946][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.704'.
[  303.521309][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  303.533962][ T9210] netlink: 31 bytes leftover after parsing attributes in process `syz.1.704'.
[  303.550960][ T9210] netlink: 'syz.1.704': attribute type 3 has an invalid length.
[  303.562127][ T9210] netlink: 'syz.1.704': attribute type 2 has an invalid length.
[  303.573817][ T9210] netlink: 31 bytes leftover after parsing attributes in process `syz.1.704'.
[  303.715321][ T9172] chnl_net:caif_netlink_parms(): no params data found
[  303.725802][ T5858] Bluetooth: hci1: command tx timeout
[  304.415059][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'.
[  304.437092][   T30] audit: type=1800 audit(1747460752.996:4): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.712" name="memory.events" dev="tmpfs" ino=976 res=0 errno=0
[  304.459578][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.478322][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.489777][ T9172] bridge_slave_0: entered allmulticast mode
[  304.499770][   T30] audit: type=1804 audit(1747460752.996:5): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.712" name="/newroot/186/memory.events" dev="tmpfs" ino=976 res=1 errno=0
[  304.533612][ T9172] bridge_slave_0: entered promiscuous mode
[  304.591593][ T9262] hsr0: entered promiscuous mode
[  304.627565][ T9262] macvtap1: entered promiscuous mode
[  304.633124][ T9262] macvtap1: entered allmulticast mode
[  304.654998][ T9262] hsr0: entered allmulticast mode
[  304.671450][ T9262] hsr_slave_0: entered allmulticast mode
[  304.683202][ T9262] hsr_slave_1: entered allmulticast mode
[  304.693425][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.711839][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.726109][ T9172] bridge_slave_1: entered allmulticast mode
[  304.740543][ T9172] bridge_slave_1: entered promiscuous mode
[  304.877931][ T9172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.912232][ T9283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.718'.
[  304.924814][ T9172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.955608][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'.
[  304.967224][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.976240][ T9283] batadv_slave_0: entered promiscuous mode
[  304.982091][ T9283] batadv_slave_0: entered allmulticast mode
[  305.005576][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.163254][ T9172] team0: Port device team_slave_0 added
[  305.180079][ T9172] team0: Port device team_slave_1 added
[  305.215722][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[  305.235007][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[  305.259608][ T9172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.271475][ T9172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.320483][ T9172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.342953][ T9303] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.352298][ T9303] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.361684][ T9303] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.370727][ T9303] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.390751][ T9172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.419239][ T9172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.456698][ T9172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.693502][ T9172] hsr_slave_0: entered promiscuous mode
[  305.722962][ T9172] hsr_slave_1: entered promiscuous mode
[  305.743077][ T9172] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.761205][ T9172] Cannot create hsr debugfs directory
[  305.805860][ T5858] Bluetooth: hci1: command tx timeout
[  306.025115][ T9341] delete_channel: no stack
[  306.142844][ T9343] : entered promiscuous mode
[  306.283860][ T9351] xt_l2tp: missing protocol rule (udp|l2tpip)
[  306.421769][ T9358] xt_hashlimit: overflow, rate too high: 0
[  306.438381][ T9358] x_tables: duplicate underflow at hook 2
[  306.566086][ T9360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  306.679669][ T9362] bond0: (slave bond_slave_0): Releasing backup interface
[  306.694247][ T9370] netlink: 'syz.0.737': attribute type 10 has an invalid length.
[  306.722039][ T9362] bond0: (slave bond_slave_1): Releasing backup interface
[  306.737805][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.756069][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.772775][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.782372][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.807781][ T9362] bond0: (slave wlan1): Releasing backup interface
[  306.847825][ T9377] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  306.861297][ T9362] bond1: (slave batadv1): Releasing backup interface
[  306.868330][ T9362] batadv1: left promiscuous mode
[  306.976585][ T9370] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  307.024324][ T9380] netlink: 'syz.1.742': attribute type 32 has an invalid length.
[  307.201967][ T9172] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  307.350279][ T9384] veth1: entered allmulticast mode
[  307.362848][ T9384] bridge0: port 3(veth1) entered blocking state
[  307.390511][ T9384] bridge0: port 3(veth1) entered disabled state
[  307.423297][ T9384] veth1: entered promiscuous mode
[  307.433906][ T9172] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  307.479255][ T9385] bridge0: port 3(veth1) entered blocking state
[  307.485724][ T9385] bridge0: port 3(veth1) entered forwarding state
[  307.504275][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.519071][ T9385] 8021q: adding VLAN 0 to HW filter on device team0
[  307.575917][ T9385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  307.616135][ T3428] bridge0: port 3(veth1) entered disabled state
[  307.632505][ T9172] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  307.651655][ T9172] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  307.886219][ T5858] Bluetooth: hci1: command tx timeout
[  307.893053][ T9172] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.950566][ T9172] 8021q: adding VLAN 0 to HW filter on device team0
[  307.972219][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.979436][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.061876][ T9418] netlink: 'syz.2.752': attribute type 1 has an invalid length.
[  308.088191][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.095422][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.121510][ T9418] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  308.413564][ T9172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  308.433217][ T9172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.324340][ T9172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.375283][ T9465] xt_hashlimit: max too large, truncated to 1048576
[  309.468041][ T9172] veth0_vlan: entered promiscuous mode
[  309.511839][ T9172] veth1_vlan: entered promiscuous mode
[  309.628075][ T9172] veth0_macvtap: entered promiscuous mode
[  309.667956][ T9172] veth1_macvtap: entered promiscuous mode
[  309.743315][ T9482] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[  309.753317][ T9172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.863895][ T9172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.896374][ T9172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.911881][ T9172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.926564][ T9172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.935772][ T9172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.966898][ T5858] Bluetooth: hci1: command tx timeout
[  310.047655][ T9491] warn_alloc: 1 callbacks suppressed
[  310.047673][ T9491] syz.0.770: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  310.085861][ T9491] ,cpuset=/,mems_allowed=0-1
[  310.091062][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.0.770 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  310.091087][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.091100][ T9491] Call Trace:
[  310.091108][ T9491]  <TASK>
[  310.091116][ T9491]  dump_stack_lvl+0x189/0x250
[  310.091150][ T9491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.091176][ T9491]  ? __pfx__printk+0x10/0x10
[  310.091195][ T9491]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.091216][ T9491]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.091238][ T9491]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  310.091262][ T9491]  warn_alloc+0x214/0x310
[  310.091296][ T9491]  ? __pfx_warn_alloc+0x10/0x10
[  310.091321][ T9491]  ? kasan_save_track+0x4f/0x80
[  310.091341][ T9491]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  310.091362][ T9491]  ? xskq_create+0x56/0x170
[  310.091382][ T9491]  ? __x64_sys_setsockopt+0x18b/0x220
[  310.091404][ T9491]  ? do_syscall_64+0xf6/0x210
[  310.091422][ T9491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.091453][ T9491]  __vmalloc_node_range_noprof+0x125/0x12c0
[  310.091514][ T9491]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.091545][ T9491]  ? __kasan_kmalloc+0x93/0xb0
[  310.091573][ T9491]  vmalloc_user_noprof+0x74/0x80
[  310.091598][ T9491]  ? xskq_create+0xbf/0x170
[  310.091613][ T9491]  xskq_create+0xbf/0x170
[  310.091633][ T9491]  xsk_init_queue+0xb0/0x110
[  310.091662][ T9491]  xsk_setsockopt+0x43f/0x710
[  310.091682][ T9491]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.091712][ T9491]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  310.091733][ T9491]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.091752][ T9491]  do_sock_setsockopt+0x257/0x3e0
[  310.091781][ T9491]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  310.091803][ T9491]  ? __fget_files+0x2a/0x420
[  310.091835][ T9491]  ? __fget_files+0x3a0/0x420
[  310.091856][ T9491]  ? __fget_files+0x2a/0x420
[  310.091886][ T9491]  __x64_sys_setsockopt+0x18b/0x220
[  310.091918][ T9491]  do_syscall_64+0xf6/0x210
[  310.091939][ T9491]  ? clear_bhb_loop+0x60/0xb0
[  310.091962][ T9491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.091980][ T9491] RIP: 0033:0x7f7f80d8e969
[  310.091997][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.092014][ T9491] RSP: 002b:00007f7f81c9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  310.092034][ T9491] RAX: ffffffffffffffda RBX: 00007f7f80fb5fa0 RCX: 00007f7f80d8e969
[  310.092047][ T9491] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  310.092057][ T9491] RBP: 00007f7f80e10ab1 R08: 0000000000000004 R09: 0000000000000000
[  310.092068][ T9491] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.092078][ T9491] R13: 0000000000000000 R14: 00007f7f80fb5fa0 R15: 00007ffdc1cdc778
[  310.092111][ T9491]  </TASK>
[  310.092303][ T9491] Mem-Info:
[  310.208481][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.236549][ T9491] active_anon:9422 inactive_anon:0 isolated_anon:0
[  310.236549][ T9491]  active_file:1505 inactive_file:39892 isolated_file:0
[  310.236549][ T9491]  unevictable:768 dirty:202 writeback:0
[  310.236549][ T9491]  slab_reclaimable:10845 slab_unreclaimable:103772
[  310.236549][ T9491]  mapped:29307 shmem:2980 pagetables:762
[  310.236549][ T9491]  sec_pagetables:0 bounce:0
[  310.236549][ T9491]  kernel_misc_reclaimable:0
[  310.236549][ T9491]  free:1332698 free_pcp:381 free_cma:0
[  310.322441][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.366504][ T9491] Node 0 active_anon:39488kB inactive_anon:0kB active_file:6020kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117228kB dirty:804kB writeback:0kB shmem:12084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11160kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  310.515849][ T9491] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  310.577301][ T9491] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.625869][ T9491] lowmem_reserve[]: 0 2503 2504 2504 2504
[  310.631822][ T9491] Node 0 DMA32 free:1404660kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:39280kB inactive_anon:0kB active_file:6020kB inactive_file:159272kB unevictable:1536kB writepending:800kB present:3129332kB managed:2563988kB mlocked:0kB bounce:0kB free_pcp:1692kB local_pcp:148kB free_cma:0kB
[  310.672846][ T9491] lowmem_reserve[]: 0 0 0 0 0
[  310.680426][ T9491] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  310.713648][ T9491] lowmem_reserve[]: 0 0 0 0 0
[  310.720970][ T9491] Node 1 Normal free:3909540kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.734898][ T9503] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  310.807984][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.831157][ T9491] lowmem_reserve[]: 0 0 0 0 0
[  310.841324][ T9503] openvswitch: netlink: Flow actions attr not present in new flow.
[  310.841421][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.855732][ T9491] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  310.906555][ T9491] Node 0 DMA32: 126*4kB (UM) 55*8kB (UME) 25*16kB (UME) 63*32kB (UME) 245*64kB (UME) 57*128kB (UM) 34*256kB (UM) 22*512kB (UME) 18*1024kB (UME) 6*2048kB (UM) 324*4096kB (UME) = 1404128kB
[  310.958074][ T9491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  310.978473][ T9491] Node 1 Normal: 197*4kB (UME) 48*8kB (UME) 41*16kB (UME) 202*32kB (UME) 97*64kB (UME) 28*128kB (UME) 19*256kB (UME) 11*512kB (UM) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3909540kB
[  311.016876][ T9491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.048886][ T9491] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.072936][ T9491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.084002][ T9491] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.107896][ T9491] 42771 total pagecache pages
[  311.112884][ T9491] 0 pages in swap cache
[  311.122417][ T9491] Free swap  = 124996kB
[  311.128110][ T9511] __nla_validate_parse: 9 callbacks suppressed
[  311.128126][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'.
[  311.129211][ T9491] Total swap = 124996kB
[  311.150046][ T9491] 2097051 pages RAM
[  311.153885][ T9491] 0 pages HighMem/MovableOnly
[  311.185276][ T9513] No such timeout policy "syz0"
[  311.195076][ T9491] 424396 pages reserved
[  311.201205][ T9491] 0 pages cma reserved
[  311.494247][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'.
[  311.515803][ T9526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'.
[  311.557776][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'.
[  311.762300][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'.
[  311.806649][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'.
[  311.831077][ T3469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.995721][ T3469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.105323][ T3469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.197504][ T3469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.444573][ T3469] bridge_slave_1: left allmulticast mode
[  312.452764][ T3469] bridge_slave_1: left promiscuous mode
[  312.458658][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.470435][ T3469] bridge_slave_0: left allmulticast mode
[  312.476485][ T3469] bridge_slave_0: left promiscuous mode
[  312.482278][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.616429][ T5858] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  312.802833][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.813669][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.823875][ T3469] bond0 (unregistering): Released all slaves
[  313.203055][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'.
[  313.244191][ T9572] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  313.303312][ T9572] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  313.504292][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[  313.691813][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.706768][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.716153][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.724772][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.736406][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.900933][ T9583] smc: net device bond0 applied user defined pnetid SYZ0
[  313.952404][ T9583] smc: net device bond0 erased user defined pnetid SYZ0
[  314.128903][ T5858] Bluetooth: hci3: command 0x0406 tx timeout
[  314.134984][ T5858] Bluetooth: hci4: command 0x0406 tx timeout
[  314.142762][ T5140] Bluetooth: hci2: command 0x0406 tx timeout
[  314.189727][ T3469] hsr_slave_0: left promiscuous mode
[  314.208367][ T3469] hsr_slave_1: left promiscuous mode
[  314.214688][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.223695][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.247007][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.254702][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.293044][ T3469] veth1_macvtap: left promiscuous mode
[  314.298952][ T3469] veth0_macvtap: left promiscuous mode
[  314.304698][ T3469] veth1_vlan: left promiscuous mode
[  314.311418][ T3469] veth0_vlan: left promiscuous mode
[  314.398990][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[  314.437037][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'.
[  314.708520][ T7360] udevd[7360]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  314.937141][ T3469] team0 (unregistering): Port device team_slave_1 removed
[  314.973330][ T3469] team0 (unregistering): Port device team_slave_0 removed
[  315.807661][   T55] Bluetooth: hci1: command tx timeout
[  315.964161][ T9585] chnl_net:caif_netlink_parms(): no params data found
[  316.456274][ T9626] netlink: 'syz.1.801': attribute type 4 has an invalid length.
[  316.508549][ T9627] netlink: 'syz.1.801': attribute type 4 has an invalid length.
[  316.593413][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.616918][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.624586][ T9585] bridge_slave_0: entered allmulticast mode
[  316.662072][ T9585] bridge_slave_0: entered promiscuous mode
[  316.701025][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.725261][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.746377][ T9585] bridge_slave_1: entered allmulticast mode
[  316.773323][ T9585] bridge_slave_1: entered promiscuous mode
[  317.178420][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.184634][ T9637] wireguard0: entered promiscuous mode
[  317.193176][ T9637] wireguard0: entered allmulticast mode
[  317.288020][ T9585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.309193][ T9585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.324350][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'.
[  317.520064][ T9585] team0: Port device team_slave_0 added
[  317.590227][ T9652] netlink: 'syz.2.809': attribute type 12 has an invalid length.
[  317.599960][ T9652] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.809'.
[  317.619567][ T9585] team0: Port device team_slave_1 added
[  317.857235][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.880423][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.915866][   T55] Bluetooth: hci1: command tx timeout
[  317.941848][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.012714][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.035736][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.120696][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.409402][ T9669] netlink: 13144 bytes leftover after parsing attributes in process `syz.1.811'.
[  318.504976][ T9585] hsr_slave_0: entered promiscuous mode
[  318.531866][ T9585] hsr_slave_1: entered promiscuous mode
[  318.553396][ T9585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.573034][ T9585] Cannot create hsr debugfs directory
[  318.991478][ T9693] bond_slave_1: entered promiscuous mode
[  319.012037][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'.
[  319.084660][ T9696] bond1: entered promiscuous mode
[  319.103318][ T9696] 8021q: adding VLAN 0 to HW filter on device bond1
[  319.117813][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'.
[  319.126899][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'.
[  319.164539][ T9693] bond_slave_1 (unregistering): left promiscuous mode
[  319.763084][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'.
[  319.778928][  T978] hid-generic 0005:046D:0A0E.0002: unknown main item tag 0x0
[  319.781239][ T9715] caif0: Master is either lo or non-ether device
[  319.819834][  T978] hid-generic 0005:046D:0A0E.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[  319.966041][   T55] Bluetooth: hci1: command tx timeout
[  320.110816][ T9730] wireguard0: entered promiscuous mode
[  320.123737][ T9730] wireguard0: entered allmulticast mode
[  320.130108][ T9730] team0: Device wireguard0 is of different type
[  320.184500][ T9737] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.270270][ T9737] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.287286][ T9585] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  320.309782][ T9585] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  320.341552][ T9585] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  320.364120][ T9742] veth1_to_bond: entered allmulticast mode
[  320.371886][ T9585] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  320.407215][ T9737] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.530666][ T9737] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.539933][ T9747] netlink: 277 bytes leftover after parsing attributes in process `syz.4.839'.
[  320.562606][ T9749] netlink: 277 bytes leftover after parsing attributes in process `syz.4.839'.
[  320.593406][ T9741] veth1_to_bond: left allmulticast mode
[  320.781518][ T9737] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.834786][ T9737] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.882902][ T9758] netlink: 830 bytes leftover after parsing attributes in process `syz.1.841'.
[  320.910064][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.933501][ T9765] netlink: 'syz.2.844': attribute type 4 has an invalid length.
[  320.981484][ T9737] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.039484][ T9737] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.076286][ T9585] 8021q: adding VLAN 0 to HW filter on device team0
[  321.113799][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.121038][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.187316][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.194523][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.263260][ T9775] openvswitch: netlink: Message has 20 unknown bytes.
[  321.277406][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.425244][ T9784] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  321.882378][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.049832][   T55] Bluetooth: hci1: command tx timeout
[  322.128706][ T9585] veth0_vlan: entered promiscuous mode
[  322.542596][ T9585] veth1_vlan: entered promiscuous mode
[  323.479009][ T9585] veth0_macvtap: entered promiscuous mode
[  323.552646][ T9849] __nla_validate_parse: 3 callbacks suppressed
[  323.552663][ T9849] netlink: 232 bytes leftover after parsing attributes in process `syz.4.859'.
[  323.590788][ T9585] veth1_macvtap: entered promiscuous mode
[  323.598144][ T9861] xt_hashlimit: max too large, truncated to 1048576
[  323.623028][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  323.723535][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'.
[  323.751136][ T9869] openvswitch: netlink: Actions may not be safe on all matching packets
[  323.771421][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'.
[  323.858216][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.959251][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.988701][ T9585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.046497][ T9585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.069389][ T9585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.086981][ T9585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.122487][ T9877] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.220596][ T9877] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.301517][ T9877] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.518857][ T9877] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.553868][ T9887] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  324.556323][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'.
[  324.574432][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'.
[  324.599698][ T9890] veth0: entered promiscuous mode
[  324.614368][ T9890] veth0: left promiscuous mode
[  324.724179][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'.
[  324.736377][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.755728][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.831359][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.852703][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.886083][ T9877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.909129][ T9877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.919051][ T9898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.874'.
[  324.953463][ T9877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.044548][ T9877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.401493][ T9252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.493260][ T9252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.570111][ T9252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.629638][ T9252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.810466][ T9252] bridge_slave_1: left allmulticast mode
[  325.818542][ T9252] bridge_slave_1: left promiscuous mode
[  325.824346][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.834481][ T9252] bridge_slave_0: left allmulticast mode
[  325.842811][ T9252] bridge_slave_0: left promiscuous mode
[  325.849398][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.134688][ T9252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.149554][ T9252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.159812][ T9252] bond0 (unregistering): Released all slaves
[  326.365278][ T9252] hsr_slave_0: left promiscuous mode
[  326.373854][ T9252] hsr_slave_1: left promiscuous mode
[  326.379848][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.387617][ T9252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.395782][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.403189][ T9252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.426237][ T9252] veth1_macvtap: left promiscuous mode
[  326.431809][ T9252] veth0_macvtap: left promiscuous mode
[  326.437774][ T9252] veth1_vlan: left promiscuous mode
[  326.443075][ T9252] veth0_vlan: left promiscuous mode
[  326.568414][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'.
[  326.716396][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'.
[  327.062950][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.073539][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.092335][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.109558][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.132897][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.243118][ T9252] team0 (unregistering): Port device team_slave_1 removed
[  327.284897][ T9252] team0 (unregistering): Port device team_slave_0 removed
[  327.989096][ T9928] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  328.590041][ T9924] chnl_net:caif_netlink_parms(): no params data found
[  328.825256][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.834038][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.851447][ T9924] bridge_slave_0: entered allmulticast mode
[  328.863887][ T9924] bridge_slave_0: entered promiscuous mode
[  328.879815][ T9969] __nla_validate_parse: 1 callbacks suppressed
[  328.879832][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'.
[  328.897349][ T9968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.892'.
[  328.907600][ T9968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.892'.
[  328.919630][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.931009][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'.
[  328.931033][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.947336][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'.
[  328.949146][ T9924] bridge_slave_1: entered allmulticast mode
[  328.963917][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'.
[  328.989916][ T9924] bridge_slave_1: entered promiscuous mode
[  329.134091][ T9924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.152201][ T9924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.192304][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.894'.
[  329.217646][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.895'.
[  329.246116][ T5871] Bluetooth: hci1: command tx timeout
[  329.262029][ T9924] team0: Port device team_slave_0 added
[  329.294198][ T9924] team0: Port device team_slave_1 added
[  329.460382][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.475406][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.515864][ T9924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.551408][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.583405][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.705779][ T9924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.708233][ T9996] netlink: 248 bytes leftover after parsing attributes in process `syz.0.897'.
[  329.746750][T10001] veth1_to_team: entered promiscuous mode
[  329.764369][T10001] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  329.791365][T10004] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  329.877559][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'.
[  330.052849][ T9924] hsr_slave_0: entered promiscuous mode
[  330.076561][ T9924] hsr_slave_1: entered promiscuous mode
[  330.093177][ T9924] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.110070][ T9924] Cannot create hsr debugfs directory
[  330.120210][T10019] netlink: 'syz.1.903': attribute type 4 has an invalid length.
[  330.509788][T10039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.148836][T10066] netlink: 'syz.2.918': attribute type 7 has an invalid length.
[  331.170151][T10066] netlink: 'syz.2.918': attribute type 8 has an invalid length.
[  331.272666][ T9924] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  331.323799][ T9924] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  331.331013][ T5871] Bluetooth: hci1: command tx timeout
[  331.347461][ T9924] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  331.373629][ T9924] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  331.545793][T10084] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  331.547968][T10071] syzkaller0: entered promiscuous mode
[  331.603067][T10071] syzkaller0: entered allmulticast mode
[  331.705986][T10079] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  331.817715][T10095] ipvlan2: entered allmulticast mode
[  331.823077][T10095] macsec0: entered allmulticast mode
[  331.829290][T10095] veth1_macvtap: entered allmulticast mode
[  331.939229][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.550791][ T5871] Bluetooth: hci1: command tx timeout
[  335.435353][    C1] sched: DL replenish lagged too much
[  335.651236][   T55] Bluetooth: hci1: command tx timeout
[  379.225565][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.146155][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  452.628022][ T5871] Bluetooth: hci1: command 0x0406 tx timeout
[  501.585363][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  504.045363][   T31] INFO: task kworker/u8:1:13 blocked for more than 154 seconds.
[  504.053066][   T31]       Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0
[  504.125372][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  504.134108][   T31] task:kworker/u8:1    state:D stack:23336 pid:13    tgid:13    ppid:2      task_flags:0x4208160 flags:0x00004000
[  504.235567][   T31] Workqueue: ipv6_addrconf addrconf_dad_work
[  504.241655][   T31] Call Trace:
[  504.244954][   T31]  <TASK>
[  504.285401][   T31]  __schedule+0x16e2/0x4cd0
[  504.289970][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  504.345464][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  504.351435][   T31]  ? __lock_acquire+0xaac/0xd20
[  504.396033][   T31]  ? schedule+0x165/0x360
[  504.400436][   T31]  ? __pfx___schedule+0x10/0x10
[  504.435573][   T31]  ? schedule+0x91/0x360
[  504.439896][   T31]  schedule+0x165/0x360
[  504.444076][   T31]  schedule_preempt_disabled+0x13/0x30
[  504.495344][   T31]  __mutex_lock+0x724/0xe80
[  504.499920][   T31]  ? __mutex_lock+0x51b/0xe80
[  504.504635][   T31]  ? addrconf_dad_work+0x112/0x14b0
[  504.571305][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  504.601082][   T31]  ? do_raw_spin_lock+0x121/0x290
[  504.625674][   T31]  ? look_up_lock_class+0x74/0x170
[  504.631171][   T31]  addrconf_dad_work+0x112/0x14b0
[  504.676254][   T31]  ? __lock_acquire+0xaac/0xd20
[  504.681188][   T31]  ? __pfx_addrconf_dad_work+0x10/0x10
[  504.721077][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  504.755402][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  504.760676][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  504.810729][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  504.831317][   T31]  process_scheduled_works+0xade/0x17a0
[  504.865696][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  504.871772][   T31]  worker_thread+0x8a0/0xda0
[  504.915418][   T31]  kthread+0x711/0x8a0
[  504.919562][   T31]  ? __pfx_worker_thread+0x10/0x10
[  504.924689][   T31]  ? __pfx_kthread+0x10/0x10
[  504.995439][   T31]  ? __pfx_kthread+0x10/0x10
[  505.000114][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.035364][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.040997][   T31]  ? __pfx_kthread+0x10/0x10
[  505.066979][   T31]  ret_from_fork+0x4b/0x80
[  505.071460][   T31]  ? __pfx_kthread+0x10/0x10
[  505.095368][   T31]  ret_from_fork_asm+0x1a/0x30
[  505.100207][   T31]  </TASK>
[  505.103291][   T31] INFO: task kworker/u8:3:53 blocked for more than 155 seconds.
[  505.175425][   T31]       Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0
[  505.183115][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  505.245330][   T31] task:kworker/u8:3    state:D stack:21416 pid:53    tgid:53    ppid:2      task_flags:0x4208160 flags:0x00004000
[  505.305491][   T31] Workqueue: netns cleanup_net
[  505.310339][   T31] Call Trace:
[  505.313627][   T31]  <TASK>
[  505.345574][   T31]  __schedule+0x16e2/0x4cd0
[  505.350161][   T31]  ? arch_stack_walk+0x11c/0x150
[  505.355135][   T31]  ? __lock_acquire+0xaac/0xd20
[  505.405652][   T31]  ? schedule+0x165/0x360
[  505.410054][   T31]  ? __pfx___schedule+0x10/0x10
[  505.414945][   T31]  ? schedule+0x91/0x360
[  505.451371][   T31]  schedule+0x165/0x360
[  505.491136][   T31]  schedule_preempt_disabled+0x13/0x30
[  505.497013][   T31]  __mutex_lock+0x724/0xe80
[  505.501545][   T31]  ? __mutex_lock+0x51b/0xe80
[  505.535441][   T31]  ? cfg80211_pernet_exit+0x19/0x140
[  505.540811][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  505.601473][   T31]  ? __pfx___might_resched+0x10/0x10
[  505.625625][   T31]  ? net_generic+0x1e/0x240
[  505.630202][   T31]  ? idr_destroy+0x218/0x290
[  505.634812][   T31]  cfg80211_pernet_exit+0x19/0x140
[  505.675514][   T31]  ops_undo_list+0x497/0x990
[  505.680179][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  505.715767][   T31]  cleanup_net+0x4c5/0x8a0
[  505.720259][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  505.725219][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.752830][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  505.776616][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  505.785357][   T31]  process_scheduled_works+0xade/0x17a0
[  505.790983][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.840752][   T31]  worker_thread+0x8a0/0xda0
[  505.855516][   T31]  kthread+0x711/0x8a0
[  505.859654][   T31]  ? __pfx_worker_thread+0x10/0x10
[  505.864787][   T31]  ? __pfx_kthread+0x10/0x10
[  505.915343][   T31]  ? __pfx_kthread+0x10/0x10
[  505.920013][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.925229][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  506.002958][   T31]  ? __pfx_kthread+0x10/0x10
[  506.007967][   T31]  ret_from_fork+0x4b/0x80
[  506.012421][   T31]  ? __pfx_kthread+0x10/0x10
[  506.055783][   T31]  ret_from_fork_asm+0x1a/0x30
[  506.060907][   T31]  </TASK>
[  506.064080][   T31] INFO: task kworker/u8:6:3428 blocked for more than 156 seconds.
[  506.115599][   T31]       Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0
[  506.123284][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  506.181991][   T31] task:kworker/u8:6    state:D stack:23320 pid:3428  tgid:3428  ppid:2      task_flags:0x4208160 flags:0x00004000
[  506.245624][   T31] Workqueue: events_unbound linkwatch_event
[  506.251603][   T31] Call Trace:
[  506.254891][   T31]  <TASK>
[  506.295579][   T31]  __schedule+0x16e2/0x4cd0
[  506.300170][   T31]  ? kvm_sched_clock_read+0x11/0x20
[  506.337286][   T31]  ? __lock_acquire+0xaac/0xd20
[  506.342209][   T31]  ? schedule+0x165/0x360
[  506.385747][   T31]  ? __pfx___schedule+0x10/0x10
[  506.390684][   T31]  ? schedule+0x91/0x360
[  506.394948][   T31]  schedule+0x165/0x360
[  506.483384][   T31]  schedule_preempt_disabled+0x13/0x30
[  506.490906][   T31]  __mutex_lock+0x724/0xe80
[  506.531024][   T31]  ? __mutex_lock+0x51b/0xe80
[  506.541591][   T31]  ? linkwatch_event+0xe/0x60
[  506.565658][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  506.570767][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  506.615314][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  506.621105][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[  506.665644][   T31]  linkwatch_event+0xe/0x60
[  506.670214][   T31]  process_scheduled_works+0xade/0x17a0
[  506.707248][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  506.713316][   T31]  worker_thread+0x8a0/0xda0
[  506.755507][   T31]  kthread+0x711/0x8a0
[  506.759665][   T31]  ? __pfx_worker_thread+0x10/0x10
[  506.764793][   T31]  ? __pfx_kthread+0x10/0x10
[  506.816205][   T31]  ? __pfx_kthread+0x10/0x10
[  506.820879][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  506.865752][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  506.871025][   T31]  ? __pfx_kthread+0x10/0x10
[  506.901522][   T31]  ret_from_fork+0x4b/0x80
[  506.925307][   T31]  ? __pfx_kthread+0x10/0x10
[  506.929971][   T31]  ret_from_fork_asm+0x1a/0x30
[  506.934776][   T31]  </TASK>
[  506.981988][   T31] INFO: task syz-executor:9924 blocked for more than 157 seconds.
[  507.025711][   T31]       Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0
[  507.033401][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  507.113227][   T31] task:syz-executor    state:D stack:19808 pid:9924  tgid:9924  ppid:9902   task_flags:0x400140 flags:0x00000000
[  507.175334][   T31] Call Trace:
[  507.178668][   T31]  <TASK>
[  507.181612][   T31]  __schedule+0x16e2/0x4cd0
[  507.235370][   T31]  ? __lock_acquire+0xaac/0xd20
[  507.240310][   T31]  ? schedule+0x165/0x360
[  507.244662][   T31]  ? __pfx___schedule+0x10/0x10
[  507.315456][   T31]  ? schedule+0x91/0x360
[  507.319764][   T31]  schedule+0x165/0x360
[  507.323944][   T31]  schedule_preempt_disabled+0x13/0x30
[  507.405412][   T31]  __mutex_lock+0x724/0xe80
[  507.409996][   T31]  ? __mutex_lock+0x51b/0xe80
[  507.414701][   T31]  ? inet6_rtm_newaddr+0x5b7/0xd20
[  507.493578][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  507.525407][   T31]  ? nla_memcmp+0x62/0x90
[  507.529817][   T31]  inet6_rtm_newaddr+0x5b7/0xd20
[  507.534785][   T31]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  507.625372][   T31]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  507.630907][   T31]  rtnetlink_rcv_msg+0x7cf/0xb70
[  507.676778][   T31]  ? kasan_save_track+0x4f/0x80
[  507.681708][   T31]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  507.725445][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  507.730978][   T31]  ? __lock_acquire+0xaac/0xd20
[  507.769515][   T31]  netlink_rcv_skb+0x219/0x490
[  507.774353][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  507.805411][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  507.810788][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  507.855768][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  507.861049][   T31]  netlink_unicast+0x75b/0x8d0
[  507.915577][   T31]  netlink_sendmsg+0x805/0xb30
[  507.920439][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.975604][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  507.980619][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  508.035550][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.040912][   T31]  __sock_sendmsg+0x21c/0x270
[  508.085457][   T31]  __sys_sendto+0x3bd/0x520
[  508.090034][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  508.095099][   T31]  ? fput_close_sync+0x119/0x200
[  508.185431][   T31]  ? dnotify_flush+0x1db/0x5e0
[  508.190275][   T31]  ? __pfx_fput_close_sync+0x10/0x10
[  508.245342][   T31]  __x64_sys_sendto+0xde/0x100
[  508.250194][   T31]  do_syscall_64+0xf6/0x210
[  508.254722][   T31]  ? clear_bhb_loop+0x60/0xb0
[  508.305413][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.311376][   T31] RIP: 0033:0x7f97f81907fc
[  508.355701][   T31] RSP: 002b:00007ffee9906ae0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  508.364189][   T31] RAX: ffffffffffffffda RBX: 00007f97f8ee4620 RCX: 00007f97f81907fc
[  508.455378][   T31] RDX: 0000000000000040 RSI: 00007f97f8ee4670 RDI: 0000000000000003
[  508.463415][   T31] RBP: 0000000000000000 R08: 00007ffee9906b34 R09: 000000000000000c
[  508.515419][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  508.523884][   T31] R13: 0000000000000000 R14: 00007f97f8ee4670 R15: 0000000000000000
[  508.615385][   T31]  </TASK>
[  508.618529][   T31] INFO: task syz.1.919:10070 blocked for more than 158 seconds.
[  508.666075][   T31]       Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0
[  508.673765][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.752179][   T31] task:syz.1.919       state:D stack:24280 pid:10070 tgid:10070 ppid:5862   task_flags:0x400040 flags:0x00004004
[  508.815683][   T31] Call Trace:
[  508.819021][   T31]  <TASK>
[  508.821967][   T31]  __schedule+0x16e2/0x4cd0
[  508.855480][   T31]  ? stack_trace_save+0x9c/0xe0
[  508.860409][   T31]  ? __lock_acquire+0xaac/0xd20
[  508.906543][   T31]  ? schedule+0x165/0x360
[  508.910953][   T31]  ? __pfx___schedule+0x10/0x10
[  508.955672][   T31]  ? schedule+0x91/0x360
[  508.959993][   T31]  schedule+0x165/0x360
[  508.964168][   T31]  schedule_preempt_disabled+0x13/0x30
[  509.015628][   T31]  __mutex_lock+0x724/0xe80
[  509.020196][   T31]  ? __mutex_lock+0x51b/0xe80
[  509.024898][   T31]  ? tun_chr_close+0x3e/0x1c0
[  509.085878][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  509.091270][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  509.125627][   T31]  tun_chr_close+0x3e/0x1c0
[  509.130217][   T31]  __fput+0x44c/0xa70
[  509.134545][   T31]  task_work_run+0x1d4/0x260
[  509.165422][   T31]  ? __pfx_task_work_run+0x10/0x10
[  509.170627][   T31]  resume_user_mode_work+0x5e/0x80
[  509.235419][   T31]  syscall_exit_to_user_mode+0x9a/0x120
[  509.241043][   T31]  do_syscall_64+0x103/0x210
[  509.305413][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  509.311646][   T31]  ? clear_bhb_loop+0x60/0xb0
[  509.356631][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.362596][   T31] RIP: 0033:0x7f79a478e969
[  509.415393][   T31] RSP: 002b:00007ffef73b6438 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  509.423880][   T31] RAX: 0000000000000000 RBX: 00007f79a49b7ba0 RCX: 00007f79a478e969
[  509.477020][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  509.485061][   T31] RBP: 00007f79a49b7ba0 R08: 0000000000000184 R09: 00000017f73b672f
[  509.581264][   T31] R10: 00007f79a49b7ac0 R11: 0000000000000246 R12: 0000000000051122
[  509.615297][   T31] R13: 00007f79a49b5fa0 R14: ffffffffffffffff R15: 00007ffef73b6550
[  509.623353][   T31]  </TASK>
[  509.676239][   T31] INFO: task syz.2.921:10083 blocked for more than 159 seconds.
[  509.684018][   T31]       Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0
[  509.765768][   T31]       Blocked by coredump.
[  509.770410][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  509.825698][   T31] task:syz.2.921       state:D stack:25312 pid:10083 tgid:10076 ppid:5859   task_flags:0x40054c flags:0x00004002
[  509.875417][   T31] Call Trace:
[  509.878758][   T31]  <TASK>
[  509.881705][   T31]  __schedule+0x16e2/0x4cd0
[  509.922641][   T31]  ? stack_trace_save+0x9c/0xe0
[  509.935315][   T31]  ? __lock_acquire+0xaac/0xd20
[  509.940244][   T31]  ? schedule+0x165/0x360
[  509.944605][   T31]  ? __pfx___schedule+0x10/0x10
[  509.975576][   T31]  ? schedule+0x91/0x360
[  509.979890][   T31]  schedule+0x165/0x360
[  509.984062][   T31]  schedule_preempt_disabled+0x13/0x30
[  510.023352][   T31]  __mutex_lock+0x724/0xe80
[  510.035666][   T31]  ? __mutex_lock+0x51b/0xe80
[  510.040408][   T31]  ? tun_chr_close+0x3e/0x1c0
[  510.045111][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  510.080778][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  510.105415][   T31]  tun_chr_close+0x3e/0x1c0
[  510.110004][   T31]  __fput+0x44c/0xa70
[  510.114008][   T31]  task_work_run+0x1d4/0x260
[  510.145932][   T31]  ? __pfx_task_work_run+0x10/0x10
[  510.151188][   T31]  ? kmem_cache_free+0x192/0x3f0
[  510.160176][   T31]  do_exit+0x8d6/0x2550
[  510.164403][   T31]  ? do_raw_spin_lock+0x121/0x290
[  510.169898][   T31]  ? __pfx_do_exit+0x10/0x10
[  510.174552][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  510.180956][   T31]  do_group_exit+0x21c/0x2d0
[  510.186199][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.191517][   T31]  get_signal+0x125e/0x1310
[  510.196554][   T31]  arch_do_signal_or_restart+0x95/0x780
[  510.202227][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  510.208996][   T31]  ? local_irq_enable_exit_to_user+0x5/0x10
[  510.223558][   T31]  syscall_exit_to_user_mode+0x8b/0x120
[  510.229686][   T31]  do_syscall_64+0x103/0x210
[  510.234313][   T31]  ? clear_bhb_loop+0x60/0xb0
[  510.239459][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.245968][   T31] RIP: 0033:0x7f24a498e969
[  510.250406][   T31] RSP: 002b:00007f24a57e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  510.265376][   T31] RAX: 000000000000fd58 RBX: 00007f24a4bb6080 RCX: 00007f24a498e969
[  510.293861][   T31] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003
[  510.315398][   T31] RBP: 00007f24a4a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  510.323431][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.345389][   T31] R13: 0000000000000000 R14: 00007f24a4bb6080 R15: 00007ffee5b97948
[  510.365852][   T31]  </TASK>
[  510.375476][   T31] 
[  510.375476][   T31] Showing all locks held in the system:
[  510.383235][   T31] 1 lock held by pool_workqueue_/3:
[  510.415340][   T31]  #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  510.455559][   T31] 3 locks held by kworker/u8:1/13:
[  510.460714][   T31]  #0: ffff888030026948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  510.505385][   T31]  #1: ffffc90000127c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  510.545648][   T31]  #2: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  510.555232][   T31] 1 lock held by khungtaskd/31:
[  510.580759][   T31]  #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  510.625363][   T31] 4 locks held by kworker/u8:3/53:
[  510.630521][   T31]  #0: ffff88801aefe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  510.665743][   T31]  #1: ffffc90000be7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  510.705415][   T31]  #2: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0
[  510.714824][   T31]  #3: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x140
[  510.765458][   T31] 3 locks held by kworker/u8:6/3428:
[  510.771204][   T31]  #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  510.815581][   T31]  #1: ffffc9000c5a7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  510.842974][   T31]  #2: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  510.865674][   T31] 3 locks held by udevd/5199:
[  510.870550][   T31] 2 locks held by getty/5593:
[  510.870937][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  510.883711][   T31]  #0: ffff888034aaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  510.905785][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  510.914518][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  510.926364][   T31]  #1: ffffc90002fee2f0
[  510.926386][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  510.930556][   T31]  (&ldata->atomic_read_lock
[  510.951420][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  511.005748][   T31] ){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  511.022354][   T31] 2 locks held by syz-executor/5853:
[  511.030391][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  511.039691][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  511.047597][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
SYZFAIL: failed to send rpc
fd=3 want=352 sent=0 n=-1 (errno 32: Broken pipe)
[  511.056815][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  511.064433][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  511.065779][   T31] 1 lock held by syz-executor/5859:
[  511.135372][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  511.144756][   T31] 2 locks held by syz-executor/5861:
[  511.151306][ T5871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  511.161035][ T5871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  511.175856][ T5871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  511.191493][ T5871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  511.211568][ T5871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  511.263087][   T31]  #0: ffff8880b883b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  511.310868][   T31]  #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0
[  511.345599][   T31] 3 locks held by kworker/0:7/9498:
[  511.350857][   T31]  #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  511.384158][ T5871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  511.394288][ T5871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  511.400996][   T31]  #1: ffffc900036f7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  511.421383][ T5871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  511.425419][   T31]  #2: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  511.430308][ T5871] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  511.455156][ T5871] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  511.455390][   T31] 3 locks held by kworker/0:8/9499:
[  511.475639][   T31]  #0: ffff88801a081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  511.525502][   T31]  #1: ffffc90003637c60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  511.540953][   T31]  #2: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  511.550945][   T31] 1 lock held by syz-executor/9924:
[  511.556285][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20
[  511.566140][   T31] 1 lock held by syz.1.919/10070:
[  511.571185][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  511.580298][   T31] 1 lock held by syz.2.921/10083:
[  511.585716][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  511.595169][   T31] 1 lock held by syz.0.927/10103:
[  511.603088][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  511.613940][   T31] 1 lock held by syz.4.928/10116:
[  511.619074][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  511.631441][   T31] 2 locks held by syz.4.928/10117:
[  511.636684][   T31]  #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590
[  511.651577][   T31]  #1: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  511.663831][   T31] 1 lock held by syz-executor/10119:
[  511.675358][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  511.684829][   T31] 1 lock held by syz-executor/10122:
[  511.691125][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  511.707316][   T31] 1 lock held by syz-executor/10124:
[  511.716735][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  511.729623][   T31] 1 lock held by syz-executor/10126:
[  511.734937][   T31]  #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  511.744726][   T31] 
[  511.747481][   T31] =============================================
[  511.747481][   T31] 
[  511.769105][   T31] NMI backtrace for cpu 1
[  511.769129][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  511.769175][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.769197][   T31] Call Trace:
[  511.769211][   T31]  <TASK>
[  511.769227][   T31]  dump_stack_lvl+0x189/0x250
[  511.769280][   T31]  ? __wake_up_klogd+0xd9/0x110
[  511.769304][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  511.769326][   T31]  ? __pfx__printk+0x10/0x10
[  511.769357][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  511.769385][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  511.769406][   T31]  ? _printk+0xcf/0x120
[  511.769429][   T31]  ? __pfx__printk+0x10/0x10
[  511.769447][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  511.769467][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  511.769495][   T31]  watchdog+0xfee/0x1030
[  511.769519][   T31]  ? watchdog+0x1de/0x1030
[  511.769547][   T31]  kthread+0x711/0x8a0
[  511.769571][   T31]  ? __pfx_watchdog+0x10/0x10
[  511.769590][   T31]  ? __pfx_kthread+0x10/0x10
[  511.769609][   T31]  ? __pfx_kthread+0x10/0x10
[  511.769627][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  511.769643][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  511.769663][   T31]  ? __pfx_kthread+0x10/0x10
[  511.769681][   T31]  ret_from_fork+0x4b/0x80
[  511.769699][   T31]  ? __pfx_kthread+0x10/0x10
[  511.769718][   T31]  ret_from_fork_asm+0x1a/0x30
[  511.769750][   T31]  </TASK>
[  511.769757][   T31] Sending NMI from CPU 1 to CPUs 0:
[  511.918911][    C0] NMI backtrace for cpu 0
[  511.918928][    C0] CPU: 0 UID: 0 PID: 3469 Comm: kworker/u8:7 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  511.918946][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.918957][    C0] Workqueue: bat_events batadv_nc_worker
[  511.918978][    C0] RIP: 0010:rcu_is_watching+0x10/0xb0
[  511.918995][    C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a0 86 cf 10 <e8> fb 27 b1 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df
[  511.919009][    C0] RSP: 0018:ffffc9000c737aa0 EFLAGS: 00000282
[  511.919022][    C0] RAX: ffffffff8b26086f RBX: 0000000000000001 RCX: 0000000000000000
[  511.919033][    C0] RDX: ffff88803104bc00 RSI: 0000000000000001 RDI: 0000000000000000
[  511.919043][    C0] RBP: fffffffffffffe38 R08: 0000000000000000 R09: 0000000000000000
[  511.919053][    C0] R10: 0000000000000000 R11: ffffffff8b260742 R12: dffffc0000000000
[  511.919064][    C0] R13: ffffffff8b260742 R14: ffff8880333b4d80 R15: 000000000000009b
[  511.919081][    C0] FS:  0000000000000000(0000) GS:ffff8881260b6000(0000) knlGS:0000000000000000
[  511.919094][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  511.919105][    C0] CR2: 00007ffd71f52f90 CR3: 00000000227cc000 CR4: 00000000003526f0
[  511.919119][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  511.919128][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  511.919138][    C0] Call Trace:
[  511.919144][    C0]  <TASK>
[  511.919152][    C0]  batadv_nc_worker+0x208/0x610
[  511.919169][    C0]  ? process_scheduled_works+0x9ec/0x17a0
[  511.919186][    C0]  process_scheduled_works+0xade/0x17a0
[  511.919215][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  511.919239][    C0]  worker_thread+0x8a0/0xda0
[  511.919255][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.919275][    C0]  ? __kthread_parkme+0x7b/0x200
[  511.919296][    C0]  kthread+0x711/0x8a0
[  511.919315][    C0]  ? __pfx_worker_thread+0x10/0x10
[  511.919329][    C0]  ? __pfx_kthread+0x10/0x10
[  511.919347][    C0]  ? __pfx_kthread+0x10/0x10
[  511.919363][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  511.919377][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  511.919394][    C0]  ? __pfx_kthread+0x10/0x10
[  511.919410][    C0]  ret_from_fork+0x4b/0x80
[  511.919426][    C0]  ? __pfx_kthread+0x10/0x10
[  511.919444][    C0]  ret_from_fork_asm+0x1a/0x30
[  511.919466][    C0]  </TASK>
[  511.920152][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  512.163126][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) 
[  512.175098][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  512.185149][   T31] Call Trace:
[  512.188425][   T31]  <TASK>
[  512.191355][   T31]  dump_stack_lvl+0x99/0x250
[  512.195955][   T31]  ? __asan_memcpy+0x40/0x70
[  512.200538][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  512.205735][   T31]  ? __pfx__printk+0x10/0x10
[  512.210330][   T31]  panic+0x2db/0x790
[  512.214226][   T31]  ? __pfx_panic+0x10/0x10
[  512.218645][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  512.224449][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  512.229820][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  512.235983][   T31]  watchdog+0x102d/0x1030
[  512.240319][   T31]  ? watchdog+0x1de/0x1030
[  512.244738][   T31]  kthread+0x711/0x8a0
[  512.248804][   T31]  ? __pfx_watchdog+0x10/0x10
[  512.253478][   T31]  ? __pfx_kthread+0x10/0x10
[  512.258065][   T31]  ? __pfx_kthread+0x10/0x10
[  512.262653][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  512.267845][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  512.273038][   T31]  ? __pfx_kthread+0x10/0x10
[  512.277619][   T31]  ret_from_fork+0x4b/0x80
[  512.282028][   T31]  ? __pfx_kthread+0x10/0x10
[  512.286613][   T31]  ret_from_fork_asm+0x1a/0x30
[  512.291381][   T31]  </TASK>
[  512.294639][   T31] Kernel Offset: disabled
[  512.298955][   T31] Rebooting in 86400 seconds..