last executing test programs:

1m5.973635505s ago: executing program 3 (id=3798):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)

51.984657953s ago: executing program 3 (id=3798):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)

40.23395535s ago: executing program 3 (id=3798):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)

29.280132917s ago: executing program 3 (id=3798):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)

17.3597191s ago: executing program 3 (id=3798):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)

4.638345778s ago: executing program 0 (id=5507):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x2004, 0x2, {0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x100}}}, 0x3a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001000100aaaaaaaaaa0000000000000000000000000000000000c6c95a4c846d0f64fd9e92dc7bc92bdb7c1eb994ce27abcfd9773d51b1cf943703bdca891fabd7fdde7f2b4b89cb41bea82a4c0b5af5a7b1787a1a8b2f5c2cb58c30fc4ec07b8477bc5cadea29513dff192dc2c429b2d17d3b4d824efcddbfebb841f519cb79a64998f63fcf6ca2e334f11cafe7b2ccbe31aec1204262349dd86a8bbc8d5a510ae4d31a48efc6112ee75061391aceabdd41dabc03d4584c37"], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0xa9)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100026bd7000fedbdf2505000000050021000000000006000100050000000c000f00968a00000000000008000b00040000000500140001020000"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x4000011)
bind$802154_dgram(r5, &(0x7f0000000300), 0x14)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000000000000000dba4eb186a07b70a0b04000000000000000002000000200004801c0001800900010068617368000000000c00028008000140000000000900020073797a3200000000140000001100010000000000000000000000000a24a9f9b7416dd9425b5b9f00"/128], 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0)
close(r6)
ioctl(r6, 0x8b2a, &(0x7f0000000040))
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000002080004400000000f08000140000000001c000580090001006d657461000000000c000280080002402000000d0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x1}}, 0xe8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

4.485867254s ago: executing program 3 (id=3798):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24)

4.381089512s ago: executing program 4 (id=5510):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, &(0x7f0000000000), &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x17, 0xf6, &(0x7f0000000040)="8430135ef3f4fa49785d98e4f5e436e275745a65ee8ee8", &(0x7f0000000080)=""/246, 0x5a, 0x0, 0xa, 0x8c, &(0x7f0000000180)="0e1d3bdc229c51222949", &(0x7f0000000280)="069e057f596a52af32feb966d276a91dc922f53cf1b5f3c7da3765173faac4f7560fc11fb984bc922815299811f6245a2497a5481eaa1867d04c137bbce4e270463ec50325487facbd0acf33f77e9ed8fa1789f22a349e3493d592e35aa8c9f13e57697f085af1495958e4cb440d0b117b9f183e37f881c1b95c11eecd0f533734519680ea6d49dd4f11766f", 0x5, 0x0, 0xfffff9f9}, 0x50)

2.6657056s ago: executing program 0 (id=5511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4)

2.665416215s ago: executing program 1 (id=5512):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
write(r0, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000ffef00", 0x24)

2.665234425s ago: executing program 2 (id=5513):
accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f086dd1bff88a800f08100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)

2.662493964s ago: executing program 4 (id=5514):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x34004811)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x404, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
recvmmsg(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000002580)}, 0x4}], 0x1, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000300)=0x2000000000000000, 0x8)
connect$vsock_stream(r4, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0))
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0)
pipe(&(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x1f}, @union={0x0, 0x1555566a, 0x0, 0x5, 0x1, 0x4, [{0x0, 0x1}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

2.4659628s ago: executing program 1 (id=5515):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@initdev}, &(0x7f0000000080)=0x14)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe1d1}}]}]}}]}, 0x48}}, 0x0)
ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030100000000fd00921b0909fe818659eda7104bdb81f8bc3d0dbe22eb802a81fdbe12c39a17cf3d542630b2df315ec25f0a6ff8aac0b02c75bfcde9c2beb20a5be16e41283e7f04a63d0fc08b57aefcea4a8bbf4327", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280070001006d616373656300000c000280000001000000004007000000"], 0x3c}}, 0x0)
socket(0xb, 0xa, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006800090300000062260000000a0000000000000004000400"], 0x1c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT=r7, @ANYRESOCT=r4, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x24008881}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="769b9640817a7e33a6dce9757d6ef6d3edf8be01c0cb023c82d55ecb78fd311b42d8a0cd25756bd29403b857ef59de2ecf66800908f1d7988a0ef18305077f923bbf935e5eab0f8d33b9c854ff668bcf06d83fcc73a040417f1afa38ee13cca1d6d546caac2c9d67b3db5db4d1ac23e12381e8da2c14feb9ea2a79b54b5cc71d48cfc6633281fe41d5a15b340e47b0db12f6696e9021b0b7c57eb7a0990d4579b5f9c5fa5337e403b5c8634644a96c9ab10e58ce26268e7e04ab18e85ec039e9974e0703d31a02c8cf908c85a63e7c88566111a8994c4dabdeccc8b08542ebe06e40293466", @ANYRES32, @ANYBLOB="0000000000000000000000000000a7e73fe60000000000000000beb4"], 0x48)
ioctl$int_in(r9, 0x5452, &(0x7f0000000080)=0x1)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES32=r11, @ANYBLOB="05e2ff9299f2a532a4d654b30e2a189c8c1998cf05cc8a0c4bf85787", @ANYRES8=r0, @ANYRESOCT=r7], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20)
sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r12 = gettid()
ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000100)=r12)
socket$rds(0x15, 0x5, 0x0)

2.465758262s ago: executing program 2 (id=5516):
getpid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}, 0x1, 0x6000000000000000}, 0x0)

2.465354031s ago: executing program 0 (id=5517):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="00030000", @ANYRES16=0x0, @ANYBLOB="0500040000000b0000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00340001010101010100001e00940000200ccf7b0000000000000400f90001000000000805000000020000"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000080))
r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc11000012000102000000000000000000000000bf401db100"/56, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f50401", @ANYRESDEC], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe]}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r5)
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r14, 0x6, 0x18, 0x0, &(0x7f0000000800))

2.295858018s ago: executing program 2 (id=5518):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$inet6(0xa, 0x3, 0x7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x10, @loopback={0xe0ff}, 0x8}, 0x1c)

2.109406875s ago: executing program 2 (id=5519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x15000000}}}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0)

1.62598586s ago: executing program 4 (id=5520):
r0 = socket$inet6(0xa, 0x3, 0x2c)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r1, 0x131dd000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.540143832s ago: executing program 1 (id=5521):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r1=>0x0}, &(0x7f0000000080)=0x8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000003b80))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r1, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)

1.465978243s ago: executing program 0 (id=5522):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000a6ff07"], 0x18}], 0x1}, 0x0)

1.317509799s ago: executing program 4 (id=5523):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00'}, 0x18)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000200)=""/251, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x4, 0x200}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r2, r3, r4, r5, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x3, 0x6, 0x5}, {0x1, 0x2, 0x0, 0x1}], 0x10, 0x1ff, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x9, 0x7c, 0x3, 0x50, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x10, 0x0, 0xfffffff4}})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7e, 0x0, 0x0, 0x0, 0xb}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000b00)='GPL\x00', 0x6, 0x15, &(0x7f0000000b40)=""/21, 0x41000, 0x3a, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000b80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x9, 0x86, 0xfffffffc}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000c00)=[r3, r1], &(0x7f0000000c40)=[{0x5, 0x1, 0x7, 0x9}, {0x4, 0x3, 0x3, 0x9}, {0x1, 0x2, 0x0, 0xb}, {0x0, 0x2, 0x8, 0x2}, {0x4, 0x5, 0x7, 0xa}, {0x4, 0x3, 0x1, 0xc}, {0x3, 0x1, 0x0, 0x7}], 0x10, 0x8, @void, @value}, 0x94)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x24, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @jmp={0x5, 0x1, 0x6, 0x1, 0x6, 0x100, 0xfffffffffffffffc}, @generic={0xa, 0x1, 0x6, 0x212, 0x200}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x62}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x505b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa69071b99ccf2175}, {0x85, 0x0, 0x0, 0x10a}}}, &(0x7f0000000800)='GPL\x00', 0x2, 0xfd, &(0x7f0000000840)=""/253, 0x40f00, 0xf, '\x00', r6, 0x18, r2, 0x8, &(0x7f0000000a00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x4, 0x8, 0xfffffffd}, 0x10, 0x2c800, r7, 0x1, &(0x7f0000000d80)=[r1, r0], &(0x7f0000000dc0)=[{0x1, 0x2, 0x5, 0x2}], 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ec0)={r8, r0}, 0xc)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000f00)=""/217, 0xd9, 0x0, &(0x7f0000001000), 0x12)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x33}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xa0}, 0x20000010)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_ext={0x1c, 0x1, &(0x7f00000011c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000001200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', r6, 0x0, r2, 0x8, &(0x7f0000001240)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x1, 0x2, 0x5}, 0x10, 0x25c2b, r7, 0x0, &(0x7f00000012c0)=[r3], 0x0, 0x10, 0xd6f, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={r3, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@bloom_filter={0x1e, 0x1, 0x6, 0x0, 0x10, r0, 0xfff, '\x00', r6, r2, 0x1, 0x4, 0x2, 0x1, @void, @value, @void, @value}, 0x50)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x26, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ldst={0x0, 0x0, 0x6, 0x6, 0x1, 0x36, 0xfffffffffffffff0}]}, &(0x7f00000015c0)='GPL\x00', 0x10000, 0x4d, &(0x7f0000001600)=""/77, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x1, 0x7f, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001700)=[{0x5, 0x3, 0x3, 0x4}, {0x1, 0x2, 0x8, 0x9}, {0x3, 0x2, 0xb, 0x6}, {0x0, 0x4, 0x3, 0xd}], 0x10, 0xe6437af, @void, @value}, 0x94)
bpf$LINK_DETACH(0x22, &(0x7f0000001800), 0x4)
r13 = socket$netlink(0x10, 0x3, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ac0)={r2, 0x0, 0xaf, 0xfe, &(0x7f0000001840)="fc3a6282c56b0a18778a6ec1fce7179067f45dc3e01694f42690068a0f128d0d50c397ac240374230f5cab739e4d1a5d1f14a434e585cfc581ebdef5b28217d4daa4e19a58f4285378c1e1512ce4663332c42e6b9b629d1d5abe317a811d269db783a533a97a3f102500468cf944a8e5febf620580b54b0fb007c5e7bf6a459642f867220511f264fc59263a2cfbc8e1305c02b069e13d3ccfa35b814064133f0abcb96fde9279e42ffc18d6a9bed0", &(0x7f0000001900)=""/254, 0x80000001, 0x0, 0xa2, 0x1000, &(0x7f0000001a00)="8b6b7fff5886ce05401c4e27146350e89f9f8a21e94f9faa58c7c1f04ce99160541d4c0302dd682f8c4b9edec95b8577388f249d8734ec84e1e94d18c51a0e2e7dd299cbcc7ac1fc6d3d2895e6b952fdc6ff3b79d414fad93d06b6db3fb992171571e396b4e55708336ab487555258a7dbc463802ea1431457d40fdb1d4d75fd11b728f553ffa9779a2bb4f359c89885ec205b337394cfadae22e5917cd9586e6540", &(0x7f0000001ac0)="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", 0x4, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r13, &(0x7f0000002c40)={&(0x7f0000002b40), 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)=@migrate={0x80, 0x21, 0x400, 0x70bd2d, 0x25dfdbfc, {{@in6=@loopback, @in=@multicast1, 0x4e22, 0x5, 0x4e20, 0x21d, 0xa, 0x30, 0x80, 0x1, r6}, 0x6e6bbf, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffffc}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@broadcast, 0x2, 0x7, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4050}, 0x800)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000002dc0)=0xe8)
sendmsg$nl_xfrm(r13, &(0x7f0000006100)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000060c0)={&(0x7f0000002e00)=@delsa={0x3288, 0x11, 0x300, 0x70bd26, 0x25dfdbfb, {@in=@broadcast, 0x4d5, 0xa, 0x3c}, [@algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @extra_flags={0x8, 0x18, 0x5}, @algo_auth_trunc={0x104c, 0x14, {{'wp384-generic\x00'}, 0x8000, 0xc0, "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"}}, @algo_auth_trunc={0x6c, 0x14, {{'sha3-384-ce\x00'}, 0x100, 0x0, "942f0dc757cea996a838819c83a38b544087f99542a302629f8e91d89fca925b"}}, @algo_aead={0x104c, 0x12, {{'ccm(aes)\x00'}, 0x8000, 0x80, "bb22bea0b86c2133fbdd8e28067075e015f5b4e228f74374df094e3c8bd87bff3c68bec6cbc5796f92b1c2545b07c3a39bff2077748deafdb7a648326244dfb2e5f1d4a0692c0d0eb138ecccef9f8a575058098caff4d37d32acfa23ac33a6f848988ba3059a9b8804ee4eff3cc1a5c48f4de5f7717ceea4bc4450cbad70308151ca3e256fd2173303fe14442e11d0327ca7488ddd0f271529356b2f6beb5e65b411ea26ca1055e265912dc934f9c7860b6e7421e4c204fbbfc66741cd36e1d385c5b3c57d32d134cfbc8492f2b50793750534249533529d2ab7ca67ed7e5421d310d6820d5c0e582fb5484583c9e46ae29c8e71fcb545592bd7d4a1a1d67fe9eb7d38939de365859bfaf47e6455bfa0e8e9375eb2573e9d5e002f43f874462a20e1698b4d950645659eaaf7ad71df83a6d92209c982947517d81f67873073c9e81eb983a1b674056f46a2d979728f4dcf87ed686b47b0bd97cfe6541408fc2e492751c8e0f569e27cd8bce95c2afc3dec6301a50a64c7f07857df46d91dbbd85789e22a2fedd0f8c6cbfc5ed758a5ee2664bcff2eebdf85530ef03af13a76aeba4adce1d35b75967114ab1a0762c8776ebd622ca6245bd650f1e8b84000fc3b55d5283ec8575e4baf2c7dfe00832abbb19049511510c1562d4f85820018c93dbb6896c94b7e5cd03959d24ef0aaafb4ab4f8cd5212a53e7503381266a06e18b368068555d30c6506359308af641229da8cb2b899cd99536f6be8093b273c112708e49c4bc2ffb206d11f7af63d96f4cfe8901febb5b5c5e140e35522f2f0d6226322d6391c218d6191a3bbff6180812947b7abc18c8545b410e863f12b07e4a6f8d27a5d48d7bab9b26f8edc489e81224fe097abf236948ebca1448c2d82939a6aa29cd6a83d359a13bac3a4e9dc157d8770156b819eb889f0efe5fa2b60b8adffb04252c3cf990be40dadfda7c92c707c4d78cd6a6d8a7436c38584dae5a1110fa6068c641ac5fc49ff02479e5c48c883acc99bab7fb1a9000f82a6e31057c86efb6b9232c44c5554293b493d04a46e504f674d973938505a4883e394e0f63c5967656e5760db9797dfdb620328decfaaaa14d17622c8617ca9afdc0d815a8635c90a8bb6e0e64f27a517248ba073617a4b3dff80fcd25d83879e42eb7fb425dd50b0f5ac9b38c135c54b91b1499f0ffb5a42a19d61b44adedbcdc957502f490cd0f179f7e4ef056368ceb95d1506634a6ebdafc132ad9acca69f1610ab409f38e8a5710c668cee796c1c2b9a15cd013c9b4f24ffff9eb32c0a3336ac167aa7591fba20c2d1e5bce41e777d23103da12cc63706ddcfa9160a494efe8d6abdcee598cb7813f895580005595824aec4674119f6acc8d3225b7a3e6ca4235bd1c156a65fb878bafc2e68c5ecf82141f2ce142eee5a403b298d4457d85ef0a7f0491c2e5cad04e09059ab1be90a102c57e2027c21c7a414d5daa62363eb71c6de2c122e96aa476aedcb295c99b81eb94c638acada5b97dc53bb478fc518a12f8c29fae6eff5e55df067eaa86698fdd6ba692e9aa2c3aaeb004c09582bfbffc9fcf70670a015bdf277f9ddd77b31eb813aabfbb56acf134b444aed6c93f5f56e4c1f57d6ba80af83398eba37acccad157b292f58c45b26d247cdd1de8f1f1c6048302412c45b567d612056d80994c72d4fb26f04d146b618860695581fa28507c7368397238fee88895b758915979d0e8cfdaf8d34bdaeb8874209448176dac8392f19edf0aeea0e7d36064dd3467038c969417c11d1573134ed0e4eb01868e9eff27e5681a219e9470d9af25570281d186c8684fbb70a9f64d71d3090c3efc13d5788190885e27a011fc9b86af237ba9f61d8ebca3219f913edcaabf38cc87681ab6ef65d1d2fe421b7e482d9022d559ddc695224872f1dbe5aa07e9c0b89e41303c084090a347682a81be4ba2f14de9997a12b4226387663f4937db388b346076075064111aff99a7beff4912f9668dfc65a85d64b7d71d0bd16488a884c613b5889d05e70e66fa37d832d604058ab60338a66b451cd1ac84ffc24a150e4e6764c83508ed92ba51de96f64017cc78b6b01a53146f4b29c134602149f3642dd9dc5d644fe31243b96f0ae25601b8c97d975ba5912e0ae78b1994049748f5cfae01278fbace4b34cee290b85cbe338a68b0cc8a56d5f71c2ff4156e9e0d2ead5dc0e0541fd0faf9fe764dc7688c562a4388e718ec5c15904d58b5e366c9e5e198be618289432fd16277cb3b7a424cecb3495da4d50ad584971661fbcd1d9ba1daeaa0ac5ff3977cf7759669988ac37d1c6158fe24bbd1f0a5138cb8fc03bf5f2faabb637c5898126318d412d35d241ffb9922b5f51e8ee03b4e20bb50d324f1292daad4a8bbb997dd9cb658ce1785f06ca69f33ca4096bf6bbacc5bf19601a45a276a42a8c62543504962777569ce22f926201ee2fa2146feffb560359f6db03aab2e86fc1e677fc1acd8daee14c4bce06bd2eaaa025036c0978df3d348c7bc4d7fd888eb4696e0f99187149de4bbcacad4f275a4252fd394383711b3840eaffdd0ea3fc254bd7fb1e74da7c717de177d38b8b3a0fabc826e1e0b95dfd639dabd3426c622dafcfc64aebc9317cdcd71772cd623a09fb74220325cb73c00d0eaecda2fc5bff6a969f470c68652cf9e6d28a252f068d09c8ec96949a076d687d75395e3e88783e37202a2ae1368207e68564c3877079ef82a503fc3944aa0e48c3ab1898887c71dd1fbb9964e4b72a97dcff0c3cd1d1aad947c88a4a01886b6c620a9aee0c36e87feeaed7918fee3e3ea3ed4391f650c4e8c829a813eb0009d2e9801768530fdf9bbeebdfffe722e06fbac9f548beab4f5858b9311608272dad8716809d8d2b8694a6e99c963f7d9d27ec0852644ce07174264f953d12aac33222e9309fb6236e080b22b2f78287ffdc4601824feae0e7d7fb41208969a2b45b7f4db9d0897b23d76f27900619698a0b67119dab8f52cc28716f8b254db0d9d7b739fbc90f1ebd38624b0ebb975708b389bb965859bb713d85e0ade6494817dfc2d08f772c163ca9a041630b12ccc01ca5f3badcf459d1330cbb78514dd4d021727b7cfc2bb36705aa21b7b3ed6978d98d597565e935c4cb4e85cb4646be6148367709c23c0b497a40a13f23c2adb04d32879a7d39b955e2c1176a5751bbe431295fa38b677fe1eb1a557ac549bd52098c7bbb66ca3bfdd35090e7850d297202f285774fc46a34bd32142ebdf780862477e119bd3186878d4053bf4bbf9f87e2da52ac8cf0bf44b678cc671c83af8ce2c484fb1ecf5847dde80678c6418963037708e9e201d158d3f2b8cecf6ab5ee72523c7c6470ae7e9fe0d7f6dd4aa5e55ed364aa2c6fe8c0dbc199d0d4f3996d7674f651461b620bf68be5cc29e3d831f880985f828da5836c5c0abb1a57c7298fb34e6bb986c7de539b90fac108866a7bfff8602cfa9429977de874b9ce2aabe7a44feda70617379908dfed3b73fa7817973055d16553cc54125aee207330a543c25ba6005f35c43610d53b46813b2b257680b622e567f0761cfc08a0d969a26995fcd723f5570286ff168ebf7f580615a4a51443d34c090d8ee9f5cc4c37b14ef1feb249117f337c85bc6e204652ece83f02df15f41a06762c27e53f29edce3bc01de492ddb5980ce010d0521c9d826662dbfd4e2e9ef3f6c9c7f65fe931e92ddd7c51988d5139a19d33ced6f698536598d2c9f980074325797d7e364ad7cdc15735c8f70ce16cf71b56c6e37fc6cb906fa5961769796a17294edd5eb1d3b487fa02d84a63758d7ebd7c8414bd1c1298cd6d2ee534aaaf3d8b2ba7142a8281c19d8da3ef8fc6bcab07090dc26aa7f263119008ecb5c35f99d4178b74827cae01d32d88af8cd6815234b03127788b10682451d2c2168bef747773e05e135157c129315dba8cc6aafd21954d5675b99b14e502f902d76c5cbca8b6ca7c18e821837f2a0afd79a80757934a303c8abd7fe7c5fbc0fe546ae9841dc4d020de06a01f7fd98008df4a0cd78d967f46fb0e1ef78b73a95c12cfa0b2525ae62a0f6e971ee22e42c77a1c624497a15cf3795b34dbb344cc2602b20e6bc5bbe1c6577cbccb56b2900b801784838928b92dc5d2ca982403b2c9a65197e5c382734a930ca980256ac4556fa157522d92052ed824e72b80e3f4ea2bcc4980377c4bfeca9b9e64d539c19f93b34a901581f8e1ba0fd1552647aa03c850927e34d7de015bd81e775972e6145ec1b9eb7fa0316f5cc4753e9a32a016450042dd5cffca98fe921ac3b6801b5999e4ef7b057244f8d47dcd47c9895e585ea65e18e5a64f0b7121913f64c2b9ff2a1ef5558c95e24e76910fb8c3c4fb6041360c19a2717ab37d2ff142436bfc102418910a69590b616bf93c26a025fc6570cfc029c3963758b0ad77b4e462979ea315469fc8e10a657215844bb4066226038329e13e8d7d992b3aaa26ca759ddd95362e941823dc28194464fbce25d88425868db0bb7e67e31b941e8ab60896907f4e5e7806a3e48fe825731c6c12a8e2e453a8112a13f1ee60b142b4a7e27c723b556dd6b4064332872e0127479f3351a6d6d8b40d83b843c987d1289aff3eb6e53547bdd4fbcb5dd827688e1cff8a5f9db8e8d32a5cfef343014c7f41727d138bd28ef049e10477b5013ad820d575400449226aa6bc866f7b563f5ad56d68ee2f0b416511e378b9a37384b2df6dbf7fb289a8d97d081a64cb1492e2e65c748846c29840c9e3a8e33e9d981594263e129c138d188e59a71eb2b3ca55580de0892c2bccf1bf00ecbd024bc26cb7ed757efaffc1ff46936d235d93a90375cef3dbce1aeabd3b7ec9f856ab1270229b63e2488eca4c58f854aa3ec963d4c54e3eb7de226e1b472ac552f13a8b99fe5f54b9602ff0b0c2fccde3fe8f44653aaeda230f56a83fc277177b49959cf5f964087f2449b1339295ccaaaf43f957e9e79ab3692b6a61ecb6a17e26842ff52c5db8e5088d1b1b4048466e5a71b78de8e154f9f0f51b06752f7bd7182a3ccd53365ca8dfd552c66c85dfdf1343760011f27508f34ed937ecafae407f5cbb55a27f71313eb189764cfff4d481c1eaee25b5820e417c651879ae77672930532d158662c99889afe530948c978549514ea5af7fd8077b8e928ac3428b8c800b83eeb6563f2f8a34a2a80e1c6ddea38b273f71dc9f8de0555e8528d1d3b46d5c6cc8713f4511ca348d3eb622472857ed65ec1eab97fae98923955459c0936ae0040ac1b3af77ae5c21a18e8375f078ef700c95fe07dea6bfc991dd524ff982daf86b9cc4edb63947d6cd301042a5f3cc677b9741adb552ddd9576ecde5ef044fc78db27bc049e6ec15d044a9cd02351ee60dc2ee382366f511bf24d82e93cd9e13a091d4494da906352a771ddc985aeed4bfdfa897fe3dbc06ccbfc8670d247acd9f55441befdc02d6bb94e377d840854654d1366676867f6e62184dccfbfa5007ddb0052fc72a5f8f657891ba7875bf949f92a9fe9c1789f9d6450c41a8b02182241aef841129e6255f1122cde1bbead0f15794754a60ff569620b7cfd163565a84fef19f2926c9c2569f9d9ce8474032b93cf97617aa0b0e70d7a950d4b06d818c1a2147ab87f2077d4c731c846db03801eb4aefcb34901b328e4b95c1b2d5a75d7204f8f7a095f65cfef0bfe3a28640c75f7892f890f67345973866edc863eef2df798a3c7f9f36c1bc08fcaf42e91515bc6a49f2b802334095a79af79ddf1d45628"}}, @policy_type={0xa, 0x10, {0x7f784280c6948557}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x2, 0x4e24, 0x2, 0xa, 0x20, 0x40, 0x4, r6, r14}, {@in=@broadcast, 0x4d3, 0x33}, @in6=@local, {0x2, 0x5, 0x8001, 0x8, 0x5, 0x1ff, 0x8000, 0x9}, {0x4d1d, 0x7, 0x4, 0x5}, {0xac1, 0x200, 0xffffffff}, 0x70bd25, 0x3500, 0xa, 0x1, 0x9a, 0xc0}}]}, 0x3288}, 0x1, 0x0, 0x0, 0x8000}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006480)={0x11, 0x25, &(0x7f0000006140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000006280)='syzkaller\x00', 0x0, 0xc8, &(0x7f00000062c0)=""/200, 0x41100, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000063c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000006400)=[0xffffffffffffffff, r1, r10, r10, r0, r10, r2, r1, r11], &(0x7f0000006440)=[{0x3, 0x5, 0x5, 0x4}, {0x1, 0x1, 0xb, 0x1}, {0x3, 0x2, 0x8, 0x4}], 0x10, 0x3ff, @void, @value}, 0x94)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000006600)={&(0x7f0000006540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000065c0)={&(0x7f0000006580)={0x2c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x840)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006640))
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000006680)={r2, r12, 0x0, r9}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000006840)={&(0x7f00000066c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006700)="0e9ac33370dc0637b1e27932a34fea7957f4b25aefab63d897b5b3de0b42e7b9e9278878e2a38848a1ba1e24d8f0f2b2e035d885837038165e162ce9dc348f6ad1263533c044a2884cf73d608c119eb57106bd5a5fb7736129b1fbee", 0x5c}, {&(0x7f0000006780)="b30fc1acde3aa2dfc8001c66f7eaa321b5d1145804551e17bfc833a3bc2e5ca7ba294141a4fcdfaf9a5a4a0218c007bd619c9fe8b95344c6a77c8d5b2838bd5159addcdda76bdc99b6963f3c130de72723ea46d946e6712166928c602d4130ec8159155a248eeb1d3dcdc3982384a43733", 0x71}], 0x2}, 0x400c010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006b80)={r9, 0x0, 0x45, 0x95, &(0x7f0000006880)="ddb93e05eb1436dae466fba328c90a0955e02b98bd1ee9d48be4e77bcad7b393489dba512c1a3f2b26ea9f4c8be50610a553657ab637cba271b4ebcefa9b9355762ceb31e9", &(0x7f0000006900)=""/149, 0x200000, 0x0, 0xfb, 0x85, &(0x7f00000069c0)="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", &(0x7f0000006ac0)="5b158d5c7c35e27efc5c1ad537100bd27dd8da263688d1afcf1c4a97097abf99b9a5d71c703ae3eb1e6eeb9215216f1bf9b37712c78cd12e9b771e2db30f9c35666efa5b1a63dc767d151f9fc0052cd025795222f79d9c966836060cd330acf037e494ddf2479af7b4232c01df7b08c08a5779c1b7b92545674cff9dd55905701489ffd12b", 0x2, 0x0, 0x80}, 0x50)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000006c00)=@dstopts={0x5e}, 0x8)

1.282670846s ago: executing program 1 (id=5524):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r0, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x26, &(0x7f00000012c0)=[{}], 0x8, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x24000000)
readv(r7, &(0x7f000000a400)=[{&(0x7f000000a300)=""/199, 0xc7}], 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001540)={'ip_vti0\x00', &(0x7f0000001500)={'tunl0\x00', <r8=>0x0, 0x80, 0x700, 0x5, 0x33, {{0x6, 0x4, 0x3, 0x28, 0x18, 0x64, 0x0, 0x40, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@noop]}}}}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000380))
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x98, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x44, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r0, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x26, &(0x7f00000012c0)=[{}], 0x8, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x24000000) (async)
readv(r7, &(0x7f000000a400)=[{&(0x7f000000a300)=""/199, 0xc7}], 0x1) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2000) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001540)={'ip_vti0\x00', &(0x7f0000001500)={'tunl0\x00', 0x0, 0x80, 0x700, 0x5, 0x33, {{0x6, 0x4, 0x3, 0x28, 0x18, 0x64, 0x0, 0x40, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@noop]}}}}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000380)) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x98, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x44, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) (async)

1.15766236s ago: executing program 4 (id=5525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000010000104000000000000000000810000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.005757014s ago: executing program 1 (id=5526):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x0, 0xfffeffff}})
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000000100005200000008000300", @ANYRES32=r4, @ANYBLOB="060048005a00000005008900030100000800cb0008008e00050088"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x0, 0xfffeffff}}) (async)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000000100005200000008000300", @ANYRES32=r4, @ANYBLOB="060048005a00000005008900030100000800cb0008008e00050088"], 0x4c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) (async)

305.240073ms ago: executing program 2 (id=5527):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x77, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe9f, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}]}}]}, 0x45c}}, 0x0)

264.531904ms ago: executing program 0 (id=5528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r2=>0x0, 0x0, 0x0, 0x4, 0x4482, 0x2, @local, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x8, 0x1ff, 0x7f}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x194, 0x24, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xd, 0x7}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x2, 0xbb}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7f, 0x3, 0x2, 0x1, 0x6, 0x6, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}, {{0x1c, 0x1, {0x7, 0xca, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0xe, 0x3}}, {0xa, 0x2, [0x3, 0x7f, 0x5]}}, {{0x1c, 0x1, {0x5b, 0x4, 0x772b, 0x4, 0x0, 0x3, 0x9, 0x5}}, {0xe, 0x2, [0xfffe, 0x7, 0x800, 0x5, 0x9]}}]}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x81, 0x6, 0x8, 0x2, 0x59e, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x1, 0x4, 0x6]}}, {{0x1c, 0x1, {0x0, 0x0, 0x8, 0x3, 0x0, 0x7, 0x4, 0x5}}, {0xe, 0x2, [0x8f, 0x6, 0x100, 0x5a48, 0x41]}}, {{0x1c, 0x1, {0x1, 0x4, 0x2, 0x5, 0x0, 0x5, 0x9b, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x9, 0x9f, 0x5, 0x3a31, 0x2, 0x4, 0x3, 0x7}}, {0x12, 0x2, [0xb80, 0x10, 0x40, 0x4, 0x5, 0x9, 0xe]}}, {{0x1c, 0x1, {0x9, 0x40, 0xa, 0xb, 0x0, 0x2cc8, 0x9, 0x7}}, {0x12, 0x2, [0xdf, 0xd4, 0xafb, 0x8, 0xc373, 0xc, 0x2]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000040)="10208100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4a0c0}, 0x4000)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f0000000440))
getsockopt(r5, 0x3, 0x3, &(0x7f0000000780)=""/4096, &(0x7f0000000300)=0x1000)
socket$xdp(0x2c, 0x3, 0x0)

102.015162ms ago: executing program 1 (id=5529):
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060021000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x840)

98.866846ms ago: executing program 4 (id=5530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0xfffffffffffffdba, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x24000050)
sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x32, 0x100, 0x0, 0x25dfdbfb, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r11, 0x29, 0x41, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)=0x28)
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES8=r11, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

46.253745ms ago: executing program 0 (id=5531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r1, 0x89e1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000210c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7})
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', <r5=>0x0, 0x7800, 0x700, 0x6, 0x3, {{0x8, 0x4, 0x0, 0x1f, 0x20, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xf1, 0x0, 0x7, [0x3]}, @end]}}}}})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_getroute={0x5c, 0x1a, 0x0, 0x70bd25, 0x25dfdbfd, {0xa, 0x80, 0x80, 0x1f, 0xfd, 0x0, 0xc8, 0xa, 0x1200}, [@RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_IIF={0x8, 0x3, r5}, @RTA_OIF={0x8}, @RTA_UID={0x8}, @RTA_EXPIRES={0x8, 0x17, 0x9b31}, @RTA_PRIORITY={0x8, 0x6, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20)

0s ago: executing program 2 (id=5532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000030601880000000000000000070000090900020073797a30000000000500010007"], 0x40}, 0x1, 0x0, 0x400000000000000, 0x4081}, 0x0)

kernel console output (not intermixed with test programs):

8671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.873449][T20219] 8021q: adding VLAN 0 to HW filter on device bond34
[  439.904954][T18671] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.912144][T18671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.951021][T20224] 8021q: adding VLAN 0 to HW filter on device bond34
[  439.967629][T20224] bond34: (slave vxcan7): The slave device specified does not support setting the MAC address
[  439.984626][T20224] bond34: (slave vxcan7): Error -95 calling set_mac_address
[  440.033350][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.038389][T20225] syzkaller1: entered promiscuous mode
[  440.045687][T20225] syzkaller1: entered allmulticast mode
[  440.073457][T20231] veth69: entered promiscuous mode
[  440.083670][T20231] bond34: (slave veth69): Enslaving as an active interface with an up link
[  440.102048][T20219] 8021q: adding VLAN 0 to HW filter on device bond34
[  440.563182][T20260] geneve2: entered promiscuous mode
[  440.857551][T19876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.964301][T20280] __nla_validate_parse: 2 callbacks suppressed
[  440.964319][T20280] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4505'.
[  441.037267][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4506'.
[  441.043566][T20280] 0ªÃøÂFNð¡: renamed from bond_slave_0
[  441.094483][T20280] 0ªÃøÂFNð¡: entered allmulticast mode
[  441.114977][T19876] veth0_vlan: entered promiscuous mode
[  441.206390][T20300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4506'.
[  441.263507][ T3500] bond39: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  441.301450][ T3500] bond39: (slave veth0_to_bond): making interface the new active one
[  441.337289][ T3500] veth0_to_bond: entered promiscuous mode
[  441.348771][ T3500] bond39: active interface up!
[  441.381595][T20287] 8021q: adding VLAN 0 to HW filter on device bond29
[  441.461089][T20294] veth47: entered promiscuous mode
[  441.479999][T20294] bond29: (slave veth47): Enslaving as an active interface with an up link
[  441.613030][T19876] veth1_vlan: entered promiscuous mode
[  441.832962][T19876] veth0_macvtap: entered promiscuous mode
[  441.900361][T19876] veth1_macvtap: entered promiscuous mode
[  442.000433][T19876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.067108][T19876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.098667][T19876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.153738][T19876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.171710][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'.
[  442.191143][T19876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.210963][T19876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.314746][T20347] 8021q: adding VLAN 0 to HW filter on device bond35
[  442.349772][T20352] vlan2: entered promiscuous mode
[  442.371747][T20347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4525'.
[  442.378958][T20352] bridge0: entered promiscuous mode
[  442.494153][T20354] 8021q: adding VLAN 0 to HW filter on device bond35
[  442.519408][T20354] bond35: (slave vxcan3): The slave device specified does not support setting the MAC address
[  442.559471][T20354] bond35: (slave vxcan3): Error -95 calling set_mac_address
[  442.687841][T20360] veth67: entered promiscuous mode
[  442.703297][T20360] bond35: (slave veth67): Enslaving as an active interface with an up link
[  442.850318][T20378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4529'.
[  442.929683][T20375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4529'.
[  443.042831][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.075848][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.098856][T20383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4531'.
[  443.160139][T20386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4532'.
[  443.165676][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.182510][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.380532][T20401] FAULT_INJECTION: forcing a failure.
[  443.380532][T20401] name failslab, interval 1, probability 0, space 0, times 0
[  443.428598][T20401] CPU: 0 UID: 0 PID: 20401 Comm: syz.2.4535 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  443.428624][T20401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  443.428634][T20401] Call Trace:
[  443.428642][T20401]  <TASK>
[  443.428650][T20401]  dump_stack_lvl+0x189/0x250
[  443.428681][T20401]  ? __pfx_dump_stack_lvl+0x10/0x10
[  443.428704][T20401]  ? __pfx__printk+0x10/0x10
[  443.428727][T20401]  ? __pfx___might_resched+0x10/0x10
[  443.428743][T20401]  ? fs_reclaim_acquire+0x7d/0x100
[  443.428769][T20401]  should_fail_ex+0x414/0x560
[  443.428792][T20401]  should_failslab+0xa8/0x100
[  443.428814][T20401]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  443.428835][T20401]  ? __alloc_skb+0x112/0x2d0
[  443.428858][T20401]  __alloc_skb+0x112/0x2d0
[  443.428881][T20401]  netlink_ack+0x146/0xa50
[  443.428897][T20401]  ? __pfx_genl_rcv_msg+0x10/0x10
[  443.428935][T20401]  netlink_rcv_skb+0x2a0/0x490
[  443.428954][T20401]  ? __pfx_genl_rcv_msg+0x10/0x10
[  443.428975][T20401]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  443.429016][T20401]  ? down_read+0x1ad/0x2e0
[  443.429046][T20401]  genl_rcv+0x28/0x40
[  443.429065][T20401]  netlink_unicast+0x758/0x8d0
[  443.429093][T20401]  netlink_sendmsg+0x805/0xb30
[  443.429120][T20401]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.429142][T20401]  ? aa_sock_msg_perm+0x94/0x160
[  443.429160][T20401]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  443.429182][T20401]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.429201][T20401]  __sock_sendmsg+0x219/0x270
[  443.429227][T20401]  ____sys_sendmsg+0x505/0x830
[  443.429253][T20401]  ? __pfx_____sys_sendmsg+0x10/0x10
[  443.429283][T20401]  ? import_iovec+0x74/0xa0
[  443.429307][T20401]  ___sys_sendmsg+0x21f/0x2a0
[  443.429330][T20401]  ? __pfx____sys_sendmsg+0x10/0x10
[  443.429384][T20401]  ? __fget_files+0x2a/0x420
[  443.429408][T20401]  ? __fget_files+0x3a0/0x420
[  443.429437][T20401]  __x64_sys_sendmsg+0x19b/0x260
[  443.429458][T20401]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  443.429497][T20401]  ? do_syscall_64+0xba/0x210
[  443.429521][T20401]  do_syscall_64+0xf6/0x210
[  443.429541][T20401]  ? clear_bhb_loop+0x45/0xa0
[  443.429561][T20401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.429576][T20401] RIP: 0033:0x7f91cbb8e969
[  443.429592][T20401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.429606][T20401] RSP: 002b:00007f91cc9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.429624][T20401] RAX: ffffffffffffffda RBX: 00007f91cbdb6080 RCX: 00007f91cbb8e969
[  443.429636][T20401] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000004
[  443.429645][T20401] RBP: 00007f91cc9d5090 R08: 0000000000000000 R09: 0000000000000000
[  443.429661][T20401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.429671][T20401] R13: 0000000000000001 R14: 00007f91cbdb6080 R15: 00007fffe8572488
[  443.429698][T20401]  </TASK>
[  443.760843][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4539'.
[  443.948476][T20406] 8021q: adding VLAN 0 to HW filter on device bond30
[  443.958344][T20421] x_tables: duplicate underflow at hook 2
[  444.272070][T20414] 8021q: adding VLAN 0 to HW filter on device bond30
[  444.284132][T20414] bond30: (slave vxcan5): The slave device specified does not support setting the MAC address
[  444.302000][T20414] bond30: (slave vxcan5): Error -95 calling set_mac_address
[  444.363054][T20420] veth49: entered promiscuous mode
[  444.374619][T20420] bond30: (slave veth49): Enslaving as an active interface with an up link
[  444.563529][ T3500] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.684886][ T3500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.041819][ T3500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.104815][ T3500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.435295][ T3500] bridge_slave_1: left allmulticast mode
[  445.440983][ T3500] bridge_slave_1: left promiscuous mode
[  445.485304][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.529498][ T3500] bridge_slave_0: left allmulticast mode
[  445.553045][ T3500] bridge_slave_0: left promiscuous mode
[  445.565828][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.019130][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  446.028557][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  446.038513][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  446.049159][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  446.056909][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  446.319342][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.332481][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.344059][ T3500] bond0 (unregistering): Released all slaves
[  446.523049][T20491] netlink: 'syz.2.4549': attribute type 3 has an invalid length.
[  446.563323][T20481] C speed is unknown, defaulting to 1000
[  446.662981][T20503] __nla_validate_parse: 3 callbacks suppressed
[  446.662999][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4553'.
[  446.716817][T20506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4554'.
[  446.743265][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'.
[  446.832707][T20512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4556'.
[  446.889612][T20512] 8021q: adding VLAN 0 to HW filter on device bond36
[  446.958555][T20518] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4555'.
[  447.057183][T20509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4555'.
[  447.071415][T20528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4559'.
[  447.152587][T20514] 8021q: adding VLAN 0 to HW filter on device bond36
[  447.164120][T20514] bond36: (slave vxcan3): The slave device specified does not support setting the MAC address
[  447.181440][T20514] bond36: (slave vxcan3): Error -95 calling set_mac_address
[  447.259274][T20512] veth69: entered promiscuous mode
[  447.272493][T20512] bond36: (slave veth69): Enslaving as an active interface with an up link
[  447.284612][T20519] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4558'.
[  447.492685][T20539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4561'.
[  447.664187][T20549] xt_limit: Overflow, try lower: 2147483649/128
[  447.681769][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'.
[  447.699422][T20550] FAULT_INJECTION: forcing a failure.
[  447.699422][T20550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.748130][T20550] CPU: 0 UID: 0 PID: 20550 Comm: syz.1.4566 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  447.748154][T20550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  447.748164][T20550] Call Trace:
[  447.748171][T20550]  <TASK>
[  447.748179][T20550]  dump_stack_lvl+0x189/0x250
[  447.748204][T20550]  ? __lock_acquire+0xaac/0xd20
[  447.748228][T20550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.748249][T20550]  ? __pfx__printk+0x10/0x10
[  447.748266][T20550]  ? __might_fault+0xb0/0x130
[  447.748297][T20550]  should_fail_ex+0x414/0x560
[  447.748319][T20550]  _copy_from_iter+0x1db/0x15a0
[  447.748346][T20550]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  447.748364][T20550]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  447.748385][T20550]  ? __pfx__copy_from_iter+0x10/0x10
[  447.748405][T20550]  ? __build_skb_around+0x257/0x3e0
[  447.748429][T20550]  ? netlink_sendmsg+0x642/0xb30
[  447.748445][T20550]  ? skb_put+0x11b/0x210
[  447.748467][T20550]  netlink_sendmsg+0x6b2/0xb30
[  447.748494][T20550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.748523][T20550]  ? aa_sock_msg_perm+0x94/0x160
[  447.748542][T20550]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.748561][T20550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.748580][T20550]  __sock_sendmsg+0x219/0x270
[  447.748600][T20550]  ____sys_sendmsg+0x505/0x830
[  447.748626][T20550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.748655][T20550]  ? import_iovec+0x74/0xa0
[  447.748679][T20550]  ___sys_sendmsg+0x21f/0x2a0
[  447.748702][T20550]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.748756][T20550]  ? __fget_files+0x2a/0x420
[  447.748775][T20550]  ? __fget_files+0x3a0/0x420
[  447.748801][T20550]  __x64_sys_sendmsg+0x19b/0x260
[  447.748821][T20550]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.748853][T20550]  ? do_syscall_64+0xba/0x210
[  447.748875][T20550]  do_syscall_64+0xf6/0x210
[  447.748894][T20550]  ? clear_bhb_loop+0x45/0xa0
[  447.748914][T20550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.748931][T20550] RIP: 0033:0x7fb0a1f8e969
[  447.748946][T20550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.748961][T20550] RSP: 002b:00007fb0a2dda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.748981][T20550] RAX: ffffffffffffffda RBX: 00007fb0a21b5fa0 RCX: 00007fb0a1f8e969
[  447.748994][T20550] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  447.749006][T20550] RBP: 00007fb0a2dda090 R08: 0000000000000000 R09: 0000000000000000
[  447.749017][T20550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.749028][T20550] R13: 0000000000000000 R14: 00007fb0a21b5fa0 R15: 00007fff6a652388
[  447.749056][T20550]  </TASK>
[  448.106741][ T5836] Bluetooth: hci4: command tx timeout
[  448.229003][T20566] 8021q: adding VLAN 0 to HW filter on device bond40
[  448.261907][T20570] 8021q: adding VLAN 0 to HW filter on device bond40
[  448.269248][T20570] bond40: (slave vxcan5): The slave device specified does not support setting the MAC address
[  448.281182][T20570] bond40: (slave vxcan5): Error -95 calling set_mac_address
[  448.332313][T20574] veth69: entered promiscuous mode
[  448.342734][T20574] bond40: (slave veth69): Enslaving as an active interface with an up link
[  448.399193][ T3500] hsr_slave_0: left promiscuous mode
[  448.414412][ T3500] hsr_slave_1: left promiscuous mode
[  448.424292][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.433214][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.441372][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.449151][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.494146][ T3500] veth1_macvtap: left promiscuous mode
[  448.507856][ T3500] veth0_macvtap: left promiscuous mode
[  448.513745][ T3500] veth1_vlan: left promiscuous mode
[  448.521254][ T3500] veth0_vlan: left promiscuous mode
[  448.933418][ T3500] team0 (unregistering): Port device team_slave_1 removed
[  448.971632][ T3500] team0 (unregistering): Port device team_slave_0 removed
[  449.452644][T20481] chnl_net:caif_netlink_parms(): no params data found
[  450.050922][T20481] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.097685][T20481] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.117732][T20481] bridge_slave_0: entered allmulticast mode
[  450.140331][T20481] bridge_slave_0: entered promiscuous mode
[  450.176121][T20481] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.185787][ T5836] Bluetooth: hci4: command tx timeout
[  450.223655][T20481] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.264770][T20481] bridge_slave_1: entered allmulticast mode
[  450.301166][T20481] bridge_slave_1: entered promiscuous mode
[  450.347659][T20653] FAULT_INJECTION: forcing a failure.
[  450.347659][T20653] name failslab, interval 1, probability 0, space 0, times 0
[  450.396026][T20653] CPU: 0 UID: 0 PID: 20653 Comm: syz.2.4591 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  450.396051][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  450.396061][T20653] Call Trace:
[  450.396068][T20653]  <TASK>
[  450.396077][T20653]  dump_stack_lvl+0x189/0x250
[  450.396106][T20653]  ? __pfx_dump_stack_lvl+0x10/0x10
[  450.396127][T20653]  ? __pfx__printk+0x10/0x10
[  450.396150][T20653]  ? __pfx___might_resched+0x10/0x10
[  450.396166][T20653]  ? fs_reclaim_acquire+0x7d/0x100
[  450.396193][T20653]  should_fail_ex+0x414/0x560
[  450.396216][T20653]  should_failslab+0xa8/0x100
[  450.396239][T20653]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  450.396260][T20653]  ? __alloc_skb+0x112/0x2d0
[  450.396283][T20653]  __alloc_skb+0x112/0x2d0
[  450.396306][T20653]  netlink_ack+0x146/0xa50
[  450.396323][T20653]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.396342][T20653]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  450.396360][T20653]  ? __pfx_nl802154_post_doit+0x10/0x10
[  450.396399][T20653]  netlink_rcv_skb+0x2a0/0x490
[  450.396418][T20653]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.396441][T20653]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.396484][T20653]  ? down_read+0x1ad/0x2e0
[  450.396508][T20653]  genl_rcv+0x28/0x40
[  450.396526][T20653]  netlink_unicast+0x758/0x8d0
[  450.396555][T20653]  netlink_sendmsg+0x805/0xb30
[  450.396584][T20653]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.396606][T20653]  ? aa_sock_msg_perm+0x94/0x160
[  450.396627][T20653]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.396645][T20653]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.396664][T20653]  __sock_sendmsg+0x219/0x270
[  450.396685][T20653]  ____sys_sendmsg+0x505/0x830
[  450.396711][T20653]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.396743][T20653]  ? import_iovec+0x74/0xa0
[  450.396768][T20653]  ___sys_sendmsg+0x21f/0x2a0
[  450.396792][T20653]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.396851][T20653]  ? __fget_files+0x2a/0x420
[  450.396870][T20653]  ? __fget_files+0x3a0/0x420
[  450.396901][T20653]  __x64_sys_sendmsg+0x19b/0x260
[  450.396925][T20653]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.396964][T20653]  ? do_syscall_64+0xba/0x210
[  450.396987][T20653]  do_syscall_64+0xf6/0x210
[  450.397007][T20653]  ? clear_bhb_loop+0x45/0xa0
[  450.397033][T20653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.397049][T20653] RIP: 0033:0x7f91cbb8e969
[  450.397065][T20653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.397080][T20653] RSP: 002b:00007f91cc9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.397098][T20653] RAX: ffffffffffffffda RBX: 00007f91cbdb5fa0 RCX: 00007f91cbb8e969
[  450.397112][T20653] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  450.397123][T20653] RBP: 00007f91cc9f6090 R08: 0000000000000000 R09: 0000000000000000
[  450.397134][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.397145][T20653] R13: 0000000000000000 R14: 00007f91cbdb5fa0 R15: 00007fffe8572488
[  450.397175][T20653]  </TASK>
[  450.788426][T20481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.800835][T20481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.894309][T20481] team0: Port device team_slave_0 added
[  450.903726][T20481] team0: Port device team_slave_1 added
[  451.056881][T20675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  451.096017][T20481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.104606][T20481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.164992][T20481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.182402][T20481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.191960][T20481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.230694][T20481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.293917][T20683] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  451.507436][T20481] hsr_slave_0: entered promiscuous mode
[  451.514141][T20481] hsr_slave_1: entered promiscuous mode
[  451.927044][T20725] __nla_validate_parse: 11 callbacks suppressed
[  451.927063][T20725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4616'.
[  451.990990][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4616'.
[  452.175611][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4620'.
[  452.265238][ T5836] Bluetooth: hci4: command tx timeout
[  452.307635][T20745] netlink: 'syz.0.4626': attribute type 1 has an invalid length.
[  452.530288][T20756] veth71: entered promiscuous mode
[  452.563758][T20758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4627'.
[  453.101557][   T53] veth0_to_bond: left promiscuous mode
[  453.159477][T20788] C speed is unknown, defaulting to 1000
[  453.331277][T20481] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  453.351534][T20802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4641'.
[  453.356833][T20481] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  453.395915][T20481] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  453.419070][T20481] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  453.543317][T20808] netlink: 'syz.2.4643': attribute type 1 has an invalid length.
[  453.642801][T20811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4644'.
[  453.729949][T20808] veth71: entered promiscuous mode
[  453.744140][T20808] bond41: (slave veth71): Enslaving as a backup interface with a down link
[  454.141436][T20481] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.217222][T20481] 8021q: adding VLAN 0 to HW filter on device team0
[  454.253343][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.260517][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.326834][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.334039][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.345862][ T5836] Bluetooth: hci4: command tx timeout
[  454.698145][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4654'.
[  454.758351][T20860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4656'.
[  454.798083][T20860] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  455.057523][T20875] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4659'.
[  455.108842][T20481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.254789][T20481] veth0_vlan: entered promiscuous mode
[  455.354759][T20481] veth1_vlan: entered promiscuous mode
[  455.520481][T20481] veth0_macvtap: entered promiscuous mode
[  455.552730][T20481] veth1_macvtap: entered promiscuous mode
[  455.593206][T20892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4664'.
[  455.625895][T20481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.645004][T20481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.666253][T20481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.684346][T20481] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.710205][T20481] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.735179][T20481] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.784379][T20898] netlink: 'syz.1.4666': attribute type 1 has an invalid length.
[  455.844375][T20900] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  455.988371][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.012840][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.082029][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.107676][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.253340][T20914] netlink: 'syz.1.4672': attribute type 1 has an invalid length.
[  456.461222][T20927] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  456.486789][T20922] veth71: entered promiscuous mode
[  456.504729][T20922] bond37: (slave veth71): Enslaving as a backup interface with a down link
[  456.926946][T20956] netlink: 'syz.1.4682': attribute type 3 has an invalid length.
[  457.021424][T20956] vlan3: entered allmulticast mode
[  457.045181][T20956] gretap0: entered allmulticast mode
[  457.165576][ T3534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.287258][ T3534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.513482][ T3534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.574604][ T3534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.927769][ T3534] bridge_slave_1: left allmulticast mode
[  457.933464][ T3534] bridge_slave_1: left promiscuous mode
[  457.940322][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.951948][ T3534] bridge_slave_0: left allmulticast mode
[  457.958220][ T3534] bridge_slave_0: left promiscuous mode
[  457.965623][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.124969][T20988] __nla_validate_parse: 2 callbacks suppressed
[  458.124986][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4686'.
[  458.195604][T20996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4684'.
[  458.247154][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'.
[  458.649760][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  458.660590][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  458.684074][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  458.704930][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  458.719856][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  458.823303][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.843453][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.861484][ T3534] bond0 (unregistering): Released all slaves
[  458.937275][T20994] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  459.263364][T21035] FAULT_INJECTION: forcing a failure.
[  459.263364][T21035] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.297652][T21035] CPU: 0 UID: 0 PID: 21035 Comm: syz.4.4692 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  459.297677][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  459.297688][T21035] Call Trace:
[  459.297695][T21035]  <TASK>
[  459.297703][T21035]  dump_stack_lvl+0x189/0x250
[  459.297728][T21035]  ? __lock_acquire+0xaac/0xd20
[  459.297750][T21035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.297772][T21035]  ? __pfx__printk+0x10/0x10
[  459.297789][T21035]  ? __might_fault+0xb0/0x130
[  459.297817][T21035]  should_fail_ex+0x414/0x560
[  459.297839][T21035]  _copy_from_user+0x2d/0xb0
[  459.297861][T21035]  do_ip_setsockopt+0x3c0/0x2d00
[  459.297891][T21035]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  459.297910][T21035]  ? __lock_acquire+0xaac/0xd20
[  459.297940][T21035]  ? __local_bh_enable_ip+0x12d/0x1c0
[  459.297963][T21035]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.297984][T21035]  ? __local_bh_enable_ip+0x12d/0x1c0
[  459.298006][T21035]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  459.298033][T21035]  ip_setsockopt+0x66/0x110
[  459.298059][T21035]  mptcp_setsockopt+0xec4/0x3460
[  459.298089][T21035]  ? aa_sk_perm+0x81e/0x950
[  459.298105][T21035]  ? __pfx_mptcp_setsockopt+0x10/0x10
[  459.298138][T21035]  ? __pfx_aa_sk_perm+0x10/0x10
[  459.298161][T21035]  ? aa_sock_opt_perm+0x74/0x110
[  459.298179][T21035]  ? sock_common_setsockopt+0x36/0xc0
[  459.298198][T21035]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  459.298218][T21035]  do_sock_setsockopt+0x257/0x3e0
[  459.298241][T21035]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  459.298258][T21035]  ? __fget_files+0x2a/0x420
[  459.298282][T21035]  ? __fget_files+0x3a0/0x420
[  459.298300][T21035]  ? __fget_files+0x2a/0x420
[  459.298327][T21035]  __x64_sys_setsockopt+0x18b/0x220
[  459.298352][T21035]  do_syscall_64+0xf6/0x210
[  459.298371][T21035]  ? clear_bhb_loop+0x45/0xa0
[  459.298389][T21035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.298404][T21035] RIP: 0033:0x7fc73638e969
[  459.298419][T21035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.298433][T21035] RSP: 002b:00007fc73727c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  459.298451][T21035] RAX: ffffffffffffffda RBX: 00007fc7365b5fa0 RCX: 00007fc73638e969
[  459.298464][T21035] RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000003
[  459.298475][T21035] RBP: 00007fc73727c090 R08: 0000000000000004 R09: 0000000000000000
[  459.298486][T21035] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.298497][T21035] R13: 0000000000000000 R14: 00007fc7365b5fa0 R15: 00007fff2b86a0b8
[  459.298525][T21035]  </TASK>
[  459.584390][T21015] C speed is unknown, defaulting to 1000
[  459.753047][T21044] netlink: 'syz.4.4694': attribute type 3 has an invalid length.
[  460.228102][T21054] xt_CT: No such helper "pptp"
[  460.424505][T21074] netlink: 'syz.4.4703': attribute type 1 has an invalid length.
[  460.517810][T21074] netlink: 'syz.4.4703': attribute type 1 has an invalid length.
[  460.616149][T21074] netlink: 'syz.4.4703': attribute type 1 has an invalid length.
[  460.634146][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4705'.
[  460.688306][T21074] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4703'.
[  460.744463][T21085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4703'.
[  460.825856][ T5836] Bluetooth: hci4: command tx timeout
[  460.862340][ T3534] hsr_slave_0: left promiscuous mode
[  460.928193][ T3534] hsr_slave_1: left promiscuous mode
[  460.934341][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.975236][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.006201][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.020045][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.114344][ T3534] veth1_macvtap: left promiscuous mode
[  461.138943][ T3534] veth0_macvtap: left promiscuous mode
[  461.160127][ T3534] veth1_vlan: left promiscuous mode
[  461.168035][ T3534] veth0_vlan: left promiscuous mode
[  461.695546][ T3534] team0 (unregistering): Port device team_slave_1 removed
[  461.736388][ T3534] team0 (unregistering): Port device team_slave_0 removed
[  462.214056][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4711'.
[  462.394194][T21129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4711'.
[  462.795344][T21110] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  462.804247][T21110] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  462.815769][T21110] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  462.831268][T21110] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  462.905508][ T5836] Bluetooth: hci4: command tx timeout
[  462.935153][T21110] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.944463][T21110] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.953631][T21110] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.962552][T21110] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.983794][T21110] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  462.992830][T21110] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  463.001984][T21110] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  463.013392][T21110] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  463.180976][T21120] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR
[  463.358538][T21126] veth73: entered promiscuous mode
[  463.419267][T21143] netlink: 'syz.4.4716': attribute type 1 has an invalid length.
[  463.650350][T21143] veth51: entered promiscuous mode
[  463.689397][T21143] bond31: (slave veth51): Enslaving as a backup interface with a down link
[  463.707381][T21160] netlink: 'syz.2.4720': attribute type 3 has an invalid length.
[  464.043344][T21171] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.052072][T21171] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.060560][T21171] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.066965][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'.
[  464.069196][T21171] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.191217][T21171] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20003 - 0
[  464.200066][T21171] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20003 - 0
[  464.210263][T21171] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20003 - 0
[  464.218902][T21171] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20003 - 0
[  464.420576][T21177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4725'.
[  464.449201][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4726'.
[  464.548074][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'.
[  464.548122][T21193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4729'.
[  464.576236][T21015] chnl_net:caif_netlink_parms(): no params data found
[  464.601005][T21193] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  464.657059][T21191] 8021q: adding VLAN 0 to HW filter on device bond36
[  464.733900][T21204] netlink: 'syz.4.4733': attribute type 1 has an invalid length.
[  464.754503][T21200] 8021q: adding VLAN 0 to HW filter on device bond36
[  464.761874][T21200] bond36: (slave vxcan7): The slave device specified does not support setting the MAC address
[  464.776407][T21205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4728'.
[  464.777176][T21200] bond36: (slave vxcan7): Error -95 calling set_mac_address
[  464.844568][T21191] veth71: entered promiscuous mode
[  464.868035][T21191] bond36: (slave veth71): Enslaving as an active interface with an up link
[  464.986485][ T5836] Bluetooth: hci4: command tx timeout
[  465.068563][T21207] veth53: entered promiscuous mode
[  465.102543][T21207] bond33: (slave veth53): Enslaving as a backup interface with a down link
[  465.430314][T21245] FAULT_INJECTION: forcing a failure.
[  465.430314][T21245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.446279][T21245] CPU: 1 UID: 0 PID: 21245 Comm: syz.1.4742 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  465.446305][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  465.446315][T21245] Call Trace:
[  465.446323][T21245]  <TASK>
[  465.446331][T21245]  dump_stack_lvl+0x189/0x250
[  465.446359][T21245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  465.446381][T21245]  ? __pfx__printk+0x10/0x10
[  465.446411][T21245]  should_fail_ex+0x414/0x560
[  465.446433][T21245]  _copy_to_user+0x31/0xb0
[  465.446458][T21245]  simple_read_from_buffer+0xe1/0x170
[  465.446483][T21245]  proc_fail_nth_read+0x1df/0x250
[  465.446508][T21245]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  465.446532][T21245]  ? rw_verify_area+0x258/0x650
[  465.446550][T21245]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  465.446573][T21245]  vfs_read+0x1fd/0x980
[  465.446598][T21245]  ? __pfx___mutex_lock+0x10/0x10
[  465.446625][T21245]  ? __pfx_vfs_read+0x10/0x10
[  465.446645][T21245]  ? __fget_files+0x2a/0x420
[  465.446670][T21245]  ? __fget_files+0x3a0/0x420
[  465.446688][T21245]  ? __fget_files+0x2a/0x420
[  465.446717][T21245]  ksys_read+0x145/0x250
[  465.446738][T21245]  ? __pfx_ksys_read+0x10/0x10
[  465.446760][T21245]  ? do_syscall_64+0xba/0x210
[  465.446784][T21245]  do_syscall_64+0xf6/0x210
[  465.446804][T21245]  ? clear_bhb_loop+0x45/0xa0
[  465.446826][T21245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.446842][T21245] RIP: 0033:0x7fb0a1f8d37c
[  465.446857][T21245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  465.446872][T21245] RSP: 002b:00007fb0a2dda030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  465.446890][T21245] RAX: ffffffffffffffda RBX: 00007fb0a21b5fa0 RCX: 00007fb0a1f8d37c
[  465.446903][T21245] RDX: 000000000000000f RSI: 00007fb0a2dda0a0 RDI: 0000000000000004
[  465.446914][T21245] RBP: 00007fb0a2dda090 R08: 0000000000000000 R09: 0000000000000000
[  465.446926][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.446937][T21245] R13: 0000000000000000 R14: 00007fb0a21b5fa0 R15: 00007fff6a652388
[  465.446966][T21245]  </TASK>
[  465.490876][T21248] netlink: 'syz.4.4743': attribute type 3 has an invalid length.
[  465.741414][T21015] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.764247][T21015] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.785674][T21015] bridge_slave_0: entered allmulticast mode
[  465.793730][T21015] bridge_slave_0: entered promiscuous mode
[  465.843514][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4745'.
[  465.854996][T21015] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.868763][T21015] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.885678][T21015] bridge_slave_1: entered allmulticast mode
[  465.893510][T21015] bridge_slave_1: entered promiscuous mode
[  465.926592][T21263] netlink: 'syz.0.4749': attribute type 1 has an invalid length.
[  465.952750][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4747'.
[  466.110946][T21268] 8021q: adding VLAN 0 to HW filter on device bond38
[  466.152563][T21015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.158441][T21268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4747'.
[  466.177620][T21015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.215555][T21275] 8021q: adding VLAN 0 to HW filter on device bond38
[  466.223002][T21275] bond38: (slave vxcan1): The slave device specified does not support setting the MAC address
[  466.235221][T21275] bond38: (slave vxcan1): Error -95 calling set_mac_address
[  466.329180][T21263] veth73: entered promiscuous mode
[  466.344410][T21263] bond37: (slave veth73): Enslaving as a backup interface with a down link
[  466.369330][T21285] ipt_ECN: cannot use operation on non-tcp rule
[  466.383074][T21281] veth73: entered promiscuous mode
[  466.399988][T21281] bond38: (slave veth73): Enslaving as an active interface with an up link
[  466.541533][T21015] team0: Port device team_slave_0 added
[  466.591210][T21015] team0: Port device team_slave_1 added
[  466.644435][T21289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4752'.
[  466.683202][T21307] netlink: 'syz.1.4756': attribute type 3 has an invalid length.
[  466.707376][T21015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.724456][T21015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.771476][T21015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.801103][T21015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.813051][T21015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.862268][T21015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.970225][T21015] hsr_slave_0: entered promiscuous mode
[  466.982012][T21015] hsr_slave_1: entered promiscuous mode
[  467.065599][ T5836] Bluetooth: hci4: command tx timeout
[  467.204299][T21329] 8021q: adding VLAN 0 to HW filter on device bond42
[  467.307753][T21329] 8021q: adding VLAN 0 to HW filter on device bond42
[  467.315528][T21329] bond42: (slave vxcan5): The slave device specified does not support setting the MAC address
[  467.331992][T21329] bond42: (slave vxcan5): Error -95 calling set_mac_address
[  467.549176][   T99] block nbd0: Possible stuck request ffff888024a17000: control (read@0,4096B). Runtime 270 seconds
[  468.203032][T21334] veth73: entered promiscuous mode
[  468.227736][T21334] bond42: (slave veth73): Enslaving as an active interface with an up link
[  468.730309][T21015] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  468.744664][T21015] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  468.794747][T21015] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  468.822384][T21015] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  469.028263][T21404] 8021q: adding VLAN 0 to HW filter on device bond34
[  469.098037][T21418] __nla_validate_parse: 7 callbacks suppressed
[  469.098054][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4786'.
[  469.128713][T21410] 8021q: adding VLAN 0 to HW filter on device bond34
[  469.144296][T21410] bond34: (slave vxcan5): The slave device specified does not support setting the MAC address
[  469.164962][ T5836] Bluetooth: hci4: command tx timeout
[  469.170632][T21419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4784'.
[  469.180382][T21410] bond34: (slave vxcan5): Error -95 calling set_mac_address
[  469.286448][T21424] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4788'.
[  469.296653][T21404] veth55: entered promiscuous mode
[  469.304824][T21404] bond34: (slave veth55): Enslaving as an active interface with an up link
[  469.434870][T21015] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.529041][T21015] 8021q: adding VLAN 0 to HW filter on device team0
[  469.598882][T21434] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  469.628064][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.635264][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.671146][T21439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4794'.
[  469.681759][T21437] syzkaller1: entered promiscuous mode
[  469.692590][T21437] syzkaller1: entered allmulticast mode
[  469.760685][T21441] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  469.819988][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.827374][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.946109][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4798'.
[  469.958224][T21453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4797'.
[  470.030045][T21015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  470.041184][T21015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  470.393956][T21476] netlink: 'syz.1.4805': attribute type 1 has an invalid length.
[  470.541612][T21476] veth75: entered promiscuous mode
[  470.551195][T21476] bond39: (slave veth75): Enslaving as a backup interface with a down link
[  470.652752][T21015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.884676][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4812'.
[  470.890061][T21015] veth0_vlan: entered promiscuous mode
[  470.960195][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4813'.
[  470.970674][T21015] veth1_vlan: entered promiscuous mode
[  471.003801][T21015] veth0_macvtap: entered promiscuous mode
[  471.041669][T21015] veth1_macvtap: entered promiscuous mode
[  471.068839][T21514] netlink: 'syz.4.4814': attribute type 3 has an invalid length.
[  471.179833][T21015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.249242][T21015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.277791][T21015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.321067][T21015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.326464][T21519] xt_CT: No such helper "pptp"
[  471.350043][T21015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.361102][T21015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.523301][T21530] netlink: 'syz.4.4821': attribute type 1 has an invalid length.
[  471.587885][T21528] xt_CT: No such helper "snmp_trap"
[  471.735831][T21530] veth57: entered promiscuous mode
[  471.744827][T21530] bond35: (slave veth57): Enslaving as a backup interface with a down link
[  471.764692][T21545] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  471.778373][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4824'.
[  471.892871][T21553] Bluetooth: MGMT ver 1.23
[  471.918037][T21555] FAULT_INJECTION: forcing a failure.
[  471.918037][T21555] name failslab, interval 1, probability 0, space 0, times 0
[  471.926587][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.964012][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.004857][T21555] CPU: 1 UID: 0 PID: 21555 Comm: syz.4.4828 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  472.004881][T21555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  472.004891][T21555] Call Trace:
[  472.004898][T21555]  <TASK>
[  472.004908][T21555]  dump_stack_lvl+0x189/0x250
[  472.004937][T21555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  472.004959][T21555]  ? __pfx__printk+0x10/0x10
[  472.004982][T21555]  ? __pfx___might_resched+0x10/0x10
[  472.004997][T21555]  ? fs_reclaim_acquire+0x7d/0x100
[  472.005026][T21555]  should_fail_ex+0x414/0x560
[  472.005046][T21555]  should_failslab+0xa8/0x100
[  472.005067][T21555]  __kmalloc_cache_noprof+0x70/0x3d0
[  472.005086][T21555]  ? rtnl_newlink+0xed/0x1c70
[  472.005107][T21555]  rtnl_newlink+0xed/0x1c70
[  472.005136][T21555]  ? __pfx_rtnl_newlink+0x10/0x10
[  472.005154][T21555]  ? is_bpf_text_address+0x26/0x2b0
[  472.005181][T21555]  ? is_bpf_text_address+0x292/0x2b0
[  472.005205][T21555]  ? __lock_acquire+0xaac/0xd20
[  472.005237][T21555]  ? __lock_acquire+0xaac/0xd20
[  472.005275][T21555]  ? is_bpf_text_address+0x26/0x2b0
[  472.005300][T21555]  ? is_bpf_text_address+0x292/0x2b0
[  472.005318][T21555]  ? is_bpf_text_address+0x26/0x2b0
[  472.005345][T21555]  ? aa_get_newest_label+0xf7/0x5d0
[  472.005365][T21555]  ? __lock_acquire+0xaac/0xd20
[  472.005408][T21555]  ? __pfx_rtnl_newlink+0x10/0x10
[  472.005425][T21555]  rtnetlink_rcv_msg+0x7cc/0xb70
[  472.005441][T21555]  ? kasan_save_track+0x4f/0x80
[  472.005461][T21555]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  472.005476][T21555]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  472.005494][T21555]  ? __lock_acquire+0xaac/0xd20
[  472.005526][T21555]  netlink_rcv_skb+0x219/0x490
[  472.005545][T21555]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  472.005564][T21555]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  472.005600][T21555]  ? netlink_deliver_tap+0x2e/0x1b0
[  472.005617][T21555]  ? netlink_deliver_tap+0x2e/0x1b0
[  472.005640][T21555]  netlink_unicast+0x758/0x8d0
[  472.005667][T21555]  netlink_sendmsg+0x805/0xb30
[  472.005694][T21555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.005715][T21555]  ? aa_sock_msg_perm+0x94/0x160
[  472.005734][T21555]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  472.005752][T21555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.005771][T21555]  __sock_sendmsg+0x219/0x270
[  472.005791][T21555]  ____sys_sendmsg+0x505/0x830
[  472.005817][T21555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  472.005852][T21555]  ? import_iovec+0x74/0xa0
[  472.005876][T21555]  ___sys_sendmsg+0x21f/0x2a0
[  472.005899][T21555]  ? __pfx____sys_sendmsg+0x10/0x10
[  472.005954][T21555]  ? __fget_files+0x2a/0x420
[  472.005974][T21555]  ? __fget_files+0x3a0/0x420
[  472.006004][T21555]  __x64_sys_sendmsg+0x19b/0x260
[  472.006026][T21555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  472.006064][T21555]  ? do_syscall_64+0xba/0x210
[  472.006087][T21555]  do_syscall_64+0xf6/0x210
[  472.006107][T21555]  ? clear_bhb_loop+0x45/0xa0
[  472.006128][T21555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.006144][T21555] RIP: 0033:0x7fc73638e969
[  472.006160][T21555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.006175][T21555] RSP: 002b:00007fc73727c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.006195][T21555] RAX: ffffffffffffffda RBX: 00007fc7365b5fa0 RCX: 00007fc73638e969
[  472.006208][T21555] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  472.006219][T21555] RBP: 00007fc73727c090 R08: 0000000000000000 R09: 0000000000000000
[  472.006230][T21555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.006241][T21555] R13: 0000000000000000 R14: 00007fc7365b5fa0 R15: 00007fff2b86a0b8
[  472.006269][T21555]  </TASK>
[  472.062158][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.506354][T21575] netlink: 'syz.4.4834': attribute type 7 has an invalid length.
[  472.514272][T21575] netlink: 15 bytes leftover after parsing attributes in process `syz.4.4834'.
[  472.562556][T21575] netlink: 'syz.4.4834': attribute type 7 has an invalid length.
[  472.704396][T21587] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.720103][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.732795][T21587] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  472.756723][T21587] bond0: (slave vcan0): Error -95 calling set_mac_address
[  473.110481][T21611] openvswitch: netlink: Flow key attr not present in new flow.
[  473.464090][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.691441][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.770810][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.869437][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.049265][ T3467] bridge_slave_1: left allmulticast mode
[  474.054957][ T3467] bridge_slave_1: left promiscuous mode
[  474.061845][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.072229][ T3467] bridge_slave_0: left allmulticast mode
[  474.078604][ T3467] bridge_slave_0: left promiscuous mode
[  474.084381][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.439261][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.501861][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.563748][ T3467] bond0 (unregistering): Released all slaves
[  474.603469][T21651] netlink: 'syz.0.4850': attribute type 11 has an invalid length.
[  474.616614][T21651] __nla_validate_parse: 4 callbacks suppressed
[  474.616630][T21651] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4850'.
[  475.030408][T21678] netlink: 'syz.1.4860': attribute type 1 has an invalid length.
[  475.090045][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  475.112419][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  475.124303][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  475.137208][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  475.156430][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.224576][T21694] netlink: 'syz.2.4863': attribute type 3 has an invalid length.
[  475.238388][T21692] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  475.268680][T21688] veth77: entered promiscuous mode
[  475.284551][T21688] bond40: (slave veth77): Enslaving as a backup interface with a down link
[  475.425358][T21683] C speed is unknown, defaulting to 1000
[  475.468319][T21702] netlink: 'syz.4.4867': attribute type 3 has an invalid length.
[  475.479715][T21704] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  475.492628][T21702] netlink: 'syz.4.4867': attribute type 1 has an invalid length.
[  475.700338][T21712] netlink: 'syz.4.4871': attribute type 1 has an invalid length.
[  475.845539][ T3467] hsr_slave_0: left promiscuous mode
[  475.861288][ T3467] hsr_slave_1: left promiscuous mode
[  475.878911][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.908817][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.946540][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.954014][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.015720][T21724] netlink: 'syz.4.4874': attribute type 12 has an invalid length.
[  476.102097][ T3467] veth1_macvtap: left promiscuous mode
[  476.121947][T21730] Unsupported ieee802154 address type: 0
[  476.132247][T21730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'.
[  476.160765][ T3467] veth0_macvtap: left promiscuous mode
[  476.176248][ T3467] veth1_vlan: left promiscuous mode
[  476.188086][T21736] netlink: 'syz.4.4874': attribute type 10 has an invalid length.
[  476.196202][ T3467] veth0_vlan: left promiscuous mode
[  476.324234][T21742] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4879'.
[  476.363940][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4878'.
[  476.820860][ T3467] team0 (unregistering): Port device team_slave_1 removed
[  476.871827][ T3467] team0 (unregistering): Port device team_slave_0 removed
[  477.052594][T21755] FAULT_INJECTION: forcing a failure.
[  477.052594][T21755] name failslab, interval 1, probability 0, space 0, times 0
[  477.079234][T21755] CPU: 1 UID: 0 PID: 21755 Comm: syz.1.4881 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  477.079285][T21755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  477.079301][T21755] Call Trace:
[  477.079308][T21755]  <TASK>
[  477.079316][T21755]  dump_stack_lvl+0x189/0x250
[  477.079346][T21755]  ? __pfx_dump_stack_lvl+0x10/0x10
[  477.079368][T21755]  ? __pfx__printk+0x10/0x10
[  477.079387][T21755]  ? __pfx___might_resched+0x10/0x10
[  477.079403][T21755]  ? fs_reclaim_acquire+0x7d/0x100
[  477.079430][T21755]  should_fail_ex+0x414/0x560
[  477.079451][T21755]  should_failslab+0xa8/0x100
[  477.079473][T21755]  __kmalloc_cache_noprof+0x70/0x3d0
[  477.079492][T21755]  ? alloc_pipe_info+0xe9/0x4d0
[  477.079515][T21755]  alloc_pipe_info+0xe9/0x4d0
[  477.079536][T21755]  splice_direct_to_actor+0xa5d/0xcc0
[  477.079558][T21755]  ? aa_file_perm+0x11f/0xed0
[  477.079577][T21755]  ? aa_file_perm+0x3e7/0xed0
[  477.079607][T21755]  ? __lock_acquire+0xaac/0xd20
[  477.079626][T21755]  ? __pfx_direct_splice_actor+0x10/0x10
[  477.079645][T21755]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  477.079665][T21755]  ? __pfx_aa_file_perm+0x10/0x10
[  477.079691][T21755]  do_splice_direct+0x181/0x270
[  477.079713][T21755]  ? __pfx_do_splice_direct+0x10/0x10
[  477.079733][T21755]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  477.079755][T21755]  ? bpf_lsm_file_permission+0x9/0x20
[  477.079774][T21755]  ? security_file_permission+0x75/0x290
[  477.079798][T21755]  ? rw_verify_area+0x258/0x650
[  477.079820][T21755]  do_sendfile+0x4da/0x7d0
[  477.079841][T21755]  ? __pfx_vfs_write+0x10/0x10
[  477.079865][T21755]  ? __pfx_do_sendfile+0x10/0x10
[  477.079886][T21755]  ? __fget_files+0x3a0/0x420
[  477.079917][T21755]  __se_sys_sendfile64+0x13e/0x190
[  477.079941][T21755]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  477.079966][T21755]  ? do_syscall_64+0xba/0x210
[  477.079990][T21755]  do_syscall_64+0xf6/0x210
[  477.080010][T21755]  ? clear_bhb_loop+0x45/0xa0
[  477.080031][T21755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.080052][T21755] RIP: 0033:0x7fb0a1f8e969
[  477.080068][T21755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.080083][T21755] RSP: 002b:00007fb0a2db9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  477.080101][T21755] RAX: ffffffffffffffda RBX: 00007fb0a21b6080 RCX: 00007fb0a1f8e969
[  477.080114][T21755] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  477.080125][T21755] RBP: 00007fb0a2db9090 R08: 0000000000000000 R09: 0000000000000000
[  477.080136][T21755] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000001
[  477.080147][T21755] R13: 0000000000000001 R14: 00007fb0a21b6080 R15: 00007fff6a652388
[  477.080175][T21755]  </TASK>
[  477.356104][ T5836] Bluetooth: hci4: command tx timeout
[  477.680584][T21736] team0: Device ipvlan1 failed to register rx_handler
[  477.944272][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4884'.
[  478.101192][T21769] 8021q: adding VLAN 0 to HW filter on device bond36
[  478.156562][T21775] 8021q: adding VLAN 0 to HW filter on device bond36
[  478.183229][T21775] bond36: (slave vxcan5): The slave device specified does not support setting the MAC address
[  478.220893][T21775] bond36: (slave vxcan5): Error -95 calling set_mac_address
[  478.302466][T21783] veth59: entered promiscuous mode
[  478.313100][T21783] bond36: (slave veth59): Enslaving as an active interface with an up link
[  478.679852][T21683] chnl_net:caif_netlink_parms(): no params data found
[  478.951002][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4894'.
[  478.987876][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'.
[  478.997220][T21683] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.004355][T21683] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.055573][T21683] bridge_slave_0: entered allmulticast mode
[  479.063865][T21683] bridge_slave_0: entered promiscuous mode
[  479.097842][T21823] netlink: 'syz.4.4896': attribute type 5 has an invalid length.
[  479.110700][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4894'.
[  479.239077][T21816] 8021q: adding VLAN 0 to HW filter on device bond38
[  479.369834][T21821] veth75: entered promiscuous mode
[  479.385537][ T5836] Bluetooth: hci4: command tx timeout
[  479.392401][T21683] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.401074][T21683] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.409133][T21683] bridge_slave_1: entered allmulticast mode
[  479.417506][T21683] bridge_slave_1: entered promiscuous mode
[  479.523723][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4899'.
[  479.633443][T21837] 8021q: adding VLAN 0 to HW filter on device bond43
[  479.648066][T21683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.716661][T21841] FAULT_INJECTION: forcing a failure.
[  479.716661][T21841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.797581][T21841] CPU: 1 UID: 0 PID: 21841 Comm: syz.2.4899 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  479.797607][T21841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  479.797618][T21841] Call Trace:
[  479.797625][T21841]  <TASK>
[  479.797634][T21841]  dump_stack_lvl+0x189/0x250
[  479.797659][T21841]  ? __lock_acquire+0xaac/0xd20
[  479.797684][T21841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.797705][T21841]  ? __pfx__printk+0x10/0x10
[  479.797722][T21841]  ? __might_fault+0xb0/0x130
[  479.797753][T21841]  should_fail_ex+0x414/0x560
[  479.797775][T21841]  _copy_from_iter+0x1db/0x15a0
[  479.797802][T21841]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  479.797820][T21841]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  479.797841][T21841]  ? __pfx__copy_from_iter+0x10/0x10
[  479.797863][T21841]  ? __build_skb_around+0x257/0x3e0
[  479.797886][T21841]  ? netlink_sendmsg+0x642/0xb30
[  479.797902][T21841]  ? skb_put+0x11b/0x210
[  479.797925][T21841]  netlink_sendmsg+0x6b2/0xb30
[  479.797953][T21841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.797979][T21841]  ? aa_sock_msg_perm+0x94/0x160
[  479.798000][T21841]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.798018][T21841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.798037][T21841]  __sock_sendmsg+0x219/0x270
[  479.798057][T21841]  ____sys_sendmsg+0x505/0x830
[  479.798083][T21841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.798112][T21841]  ? import_iovec+0x74/0xa0
[  479.798136][T21841]  ___sys_sendmsg+0x21f/0x2a0
[  479.798159][T21841]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.798214][T21841]  ? __fget_files+0x2a/0x420
[  479.798233][T21841]  ? __fget_files+0x3a0/0x420
[  479.798263][T21841]  __x64_sys_sendmsg+0x19b/0x260
[  479.798286][T21841]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.798323][T21841]  ? do_syscall_64+0xba/0x210
[  479.798347][T21841]  do_syscall_64+0xf6/0x210
[  479.798367][T21841]  ? clear_bhb_loop+0x45/0xa0
[  479.798387][T21841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.798403][T21841] RIP: 0033:0x7f91cbb8e969
[  479.798418][T21841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.798432][T21841] RSP: 002b:00007f91cc9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.798452][T21841] RAX: ffffffffffffffda RBX: 00007f91cbdb6080 RCX: 00007f91cbb8e969
[  479.798465][T21841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  479.798476][T21841] RBP: 00007f91cc9d5090 R08: 0000000000000000 R09: 0000000000000000
[  479.798487][T21841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.798498][T21841] R13: 0000000000000000 R14: 00007f91cbdb6080 R15: 00007fffe8572488
[  479.798526][T21841]  </TASK>
[  479.800676][T21837] veth75: entered promiscuous mode
[  479.979468][T21861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'.
[  480.077262][T21837] bond43: (slave veth75): Enslaving as an active interface with an up link
[  480.110546][T21683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.341665][T21683] team0: Port device team_slave_0 added
[  480.365657][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'.
[  480.380230][T21683] team0: Port device team_slave_1 added
[  480.589491][T21683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.596728][T21683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.655100][T21683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.677192][T21683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.697082][T21683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.795100][T21683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.084315][T21902] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4912'.
[  481.466587][ T5836] Bluetooth: hci4: command tx timeout
[  481.919146][T21683] hsr_slave_0: entered promiscuous mode
[  481.932391][T21683] hsr_slave_1: entered promiscuous mode
[  481.950516][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4918'.
[  481.984337][T21915] netlink: 'syz.1.4916': attribute type 3 has an invalid length.
[  482.095204][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4920'.
[  482.158490][T21926] netlink: 'syz.2.4922': attribute type 7 has an invalid length.
[  482.183458][T21919] 8021q: adding VLAN 0 to HW filter on device bond37
[  482.281107][T21936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4920'.
[  482.321877][T21925] 8021q: adding VLAN 0 to HW filter on device bond37
[  482.351750][T21925] bond37: (slave vxcan5): The slave device specified does not support setting the MAC address
[  482.379411][T21925] bond37: (slave vxcan5): Error -95 calling set_mac_address
[  482.429847][T21926] : entered promiscuous mode
[  482.470220][T21931] IPv6: sit3: Disabled Multicast RS
[  482.485886][T21931] sit3: entered allmulticast mode
[  482.579390][T21919] veth61: entered promiscuous mode
[  482.608821][T21919] bond37: (slave veth61): Enslaving as an active interface with an up link
[  482.628213][T21934] IPv6: sit3: Disabled Multicast RS
[  482.634688][T21934] sit3: entered allmulticast mode
[  482.671962][T21957] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4928'.
[  482.683049][T21936] 8021q: adding VLAN 0 to HW filter on device bond37
[  482.860988][T21962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4929'.
[  482.886458][T21962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4929'.
[  482.962208][T21962] gretap0: entered promiscuous mode
[  482.983172][T21962] gretap0: left promiscuous mode
[  483.173318][T21977] xt_TCPMSS: Only works on TCP SYN packets
[  483.223009][T21981] netlink: 'syz.2.4933': attribute type 1 has an invalid length.
[  483.242281][T21981] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4933'.
[  483.256765][T21981] netlink: 'syz.2.4933': attribute type 1 has an invalid length.
[  483.546227][ T5836] Bluetooth: hci4: command tx timeout
[  483.751173][T21683] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  483.787929][T21683] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  483.828697][T21683] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  483.886823][T21683] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  484.026266][T22019] netlink: 'syz.0.4949': attribute type 1 has an invalid length.
[  484.223376][T21683] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.294253][T21683] 8021q: adding VLAN 0 to HW filter on device team0
[  484.353165][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.360480][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.406000][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.413188][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.652771][T22056] netlink: 'syz.2.4962': attribute type 21 has an invalid length.
[  484.927168][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  485.063533][T21683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.084319][T22078] nbd: must specify an index to disconnect
[  485.113897][T22079] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20003
[  485.193131][T21683] veth0_vlan: entered promiscuous mode
[  485.222006][T21683] veth1_vlan: entered promiscuous mode
[  485.291294][T21683] veth0_macvtap: entered promiscuous mode
[  485.319594][T21683] veth1_macvtap: entered promiscuous mode
[  485.368212][T21683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.408359][T21683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.428571][T21683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.445255][T21683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.464209][T21683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.484441][T21683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.079781][T22108] __nla_validate_parse: 5 callbacks suppressed
[  486.079797][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'.
[  486.295813][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.303668][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.304162][T22123] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4980'.
[  486.352337][T22123] gretap0: entered promiscuous mode
[  486.381290][T22130] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4979'.
[  486.442180][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4981'.
[  486.454123][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.477660][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.546225][T22135] netlink: 'syz.0.4982': attribute type 1 has an invalid length.
[  486.569617][T22139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4981'.
[  486.582790][T22128] veth79: entered promiscuous mode
[  486.717426][T22142] veth77: entered promiscuous mode
[  486.764180][T22142] bond39: (slave veth77): Enslaving as a backup interface with a down link
[  486.868565][T22151] netlink: 'syz.1.4985': attribute type 3 has an invalid length.
[  487.001967][T22159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4987'.
[  487.013790][T22158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4988'.
[  487.041226][T22164] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4990'.
[  488.054493][ T3578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.170215][ T3578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.352685][ T3578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.606156][ T3578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.805435][T22206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4994'.
[  488.809633][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4992'.
[  489.026746][T22215] batadv_slave_1: entered promiscuous mode
[  489.042823][T22215] batadv_slave_1: entered allmulticast mode
[  489.130936][ T3578] bridge_slave_1: left allmulticast mode
[  489.159973][ T3578] bridge_slave_1: left promiscuous mode
[  489.184727][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.251714][ T3578] bridge_slave_0: left allmulticast mode
[  489.266396][ T3578] bridge_slave_0: left promiscuous mode
[  489.278721][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.679737][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  489.692433][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  489.707568][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  489.728689][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  489.739935][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  490.220292][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.232140][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.243290][ T3578] bond0 (unregistering): Released all slaves
[  490.440176][T22250] C speed is unknown, defaulting to 1000
[  490.462115][ T5905] hid-generic 0005:0C45:0058.0004: item fetching failed at offset 0/1
[  490.496140][ T5905] hid-generic 0005:0C45:0058.0004: probe with driver hid-generic failed with error -22
[  491.450699][T22330] __nla_validate_parse: 3 callbacks suppressed
[  491.450717][T22330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5024'.
[  491.563501][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5026'.
[  491.598138][ T3578] hsr_slave_0: left promiscuous mode
[  491.604442][ T3578] hsr_slave_1: left promiscuous mode
[  491.614004][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.623275][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.632747][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.641750][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.673329][ T3578] veth1_macvtap: left promiscuous mode
[  491.678929][ T3578] veth0_macvtap: left promiscuous mode
[  491.684482][ T3578] veth1_vlan: left promiscuous mode
[  491.689921][ T3578] veth0_vlan: left promiscuous mode
[  491.786180][ T5846] Bluetooth: hci4: command tx timeout
[  492.174910][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  492.215228][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  492.697372][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'.
[  492.725577][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'.
[  492.734620][T22352] netlink: 'syz.1.5029': attribute type 14 has an invalid length.
[  492.743317][T22250] chnl_net:caif_netlink_parms(): no params data found
[  492.868115][T22361] rdma_op ffff888061d0f1f0 conn xmit_rdma 0000000000000000
[  492.898954][T22361] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5031'.
[  493.255852][T22379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5036'.
[  493.285993][T22376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5037'.
[  493.298404][T22250] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.317206][T22250] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.324996][T22250] bridge_slave_0: entered allmulticast mode
[  493.338093][T22250] bridge_slave_0: entered promiscuous mode
[  493.350130][T22250] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.359841][T22250] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.370913][T22250] bridge_slave_1: entered allmulticast mode
[  493.381469][T22250] bridge_slave_1: entered promiscuous mode
[  493.448359][T22392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5040'.
[  493.476126][T22250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.523071][T22250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.670394][T22250] team0: Port device team_slave_0 added
[  493.691605][T22250] team0: Port device team_slave_1 added
[  493.753899][T22250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.761409][T22402] xt_CT: No such helper "pptp"
[  493.768462][T22250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.819672][T22250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.848908][T22250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.863413][T22250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.892112][ T5846] Bluetooth: hci4: command tx timeout
[  493.898241][T22250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.993330][T22250] hsr_slave_0: entered promiscuous mode
[  494.000436][T22250] hsr_slave_1: entered promiscuous mode
[  494.033657][T22415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5046'.
[  494.052429][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5046'.
[  494.224685][T22417] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.236392][T22417] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.313850][T22428] netlink: 'syz.2.5051': attribute type 4 has an invalid length.
[  494.382585][T22417] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.393213][T22417] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.477165][T22417] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.496614][T22417] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.522027][T22437] pimreg: entered allmulticast mode
[  494.527802][T22437] pimreg: left allmulticast mode
[  494.593249][T22442] netlink: 'syz.1.5055': attribute type 9 has an invalid length.
[  494.612865][T22417] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.643069][T22417] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.803400][T22417] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  494.820383][T22417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.839490][T22449] batadv1: entered promiscuous mode
[  494.886729][T22417] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  494.895719][T22417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.950292][T22417] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  495.008469][T22417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.034736][T22417] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  495.078227][T22417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.095976][T22460] netlink: 'syz.1.5063': attribute type 1 has an invalid length.
[  495.240795][T22460] 8021q: adding VLAN 0 to HW filter on device bond41
[  495.325738][T22476] netlink: 'syz.2.5070': attribute type 1 has an invalid length.
[  495.358481][T22464] 8021q: adding VLAN 0 to HW filter on device bond41
[  495.365750][T22464] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  495.378279][T22464] bond41: (slave vxcan1): Error -95 calling set_mac_address
[  495.458502][T22460] veth81: entered promiscuous mode
[  495.473211][T22460] bond41: (slave veth81): Enslaving as an active interface with a down link
[  495.521975][T22479] vlan3: entered allmulticast mode
[  495.528150][T22479] bond41: entered allmulticast mode
[  495.568799][T22485] veth77: entered promiscuous mode
[  495.578077][T22485] bond44: (slave veth77): Enslaving as a backup interface with a down link
[  495.642986][T22250] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  495.687943][T22492] netlink: 'syz.0.5072': attribute type 3 has an invalid length.
[  495.713416][T22250] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  495.761621][T22250] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  495.791818][T22250] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  495.912276][T22508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.946491][ T5846] Bluetooth: hci4: command tx timeout
[  496.001761][T22250] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.049486][T22250] 8021q: adding VLAN 0 to HW filter on device team0
[  496.093816][T21118] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.101028][T21118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.159967][T21118] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.167217][T21118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.267223][T22526] netlink: 'syz.2.5085': attribute type 1 has an invalid length.
[  496.330492][T22250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  496.471454][T22526] veth79: entered promiscuous mode
[  496.493831][T22526] bond45: (slave veth79): Enslaving as a backup interface with a down link
[  496.523529][T22541] netlink: 'syz.0.5088': attribute type 3 has an invalid length.
[  496.536582][T22536] xt_CT: No such helper "pptp"
[  496.793397][T22250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.815816][T22552] __nla_validate_parse: 6 callbacks suppressed
[  496.815833][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5091'.
[  496.834382][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5091'.
[  496.958645][T22250] veth0_vlan: entered promiscuous mode
[  497.008548][T22250] veth1_vlan: entered promiscuous mode
[  497.084676][T22567] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5097'.
[  497.116177][T22250] veth0_macvtap: entered promiscuous mode
[  497.131086][T22250] veth1_macvtap: entered promiscuous mode
[  497.288870][T22250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.324685][T22250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.369956][T22250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.391888][T22250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.411707][T22250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.421119][T22250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.589200][T22593] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5106'.
[  497.626418][   T99] block nbd0: Possible stuck request ffff888024a17000: control (read@0,4096B). Runtime 300 seconds
[  497.647884][T22597] netlink: 'syz.1.5105': attribute type 1 has an invalid length.
[  497.760517][T22597] veth83: entered promiscuous mode
[  497.769484][T22597] bond42: (slave veth83): Enslaving as a backup interface with a down link
[  497.860115][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.902087][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.979342][T18671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.998760][T18671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.025629][ T5846] Bluetooth: hci4: command tx timeout
[  498.087558][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5114'.
[  498.141008][T22617] 8021q: adding VLAN 0 to HW filter on device bond40
[  498.250858][T22619] 8021q: adding VLAN 0 to HW filter on device bond40
[  498.259019][T22619] bond40: (slave vxcan7): The slave device specified does not support setting the MAC address
[  498.274819][T22624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5114'.
[  498.285383][T22619] bond40: (slave vxcan7): Error -95 calling set_mac_address
[  498.342503][T22617] veth85: entered promiscuous mode
[  498.356361][T22617] bond40: (slave veth85): Enslaving as an active interface with an up link
[  498.367854][T22624] 8021q: adding VLAN 0 to HW filter on device bond40
[  498.467644][T22631] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5118'.
[  498.535759][T22633] openvswitch: netlink: Multiple metadata blocks provided
[  498.609386][T22637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5121'.
[  498.983333][T22658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5129'.
[  499.010161][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5129'.
[  499.182015][T18671] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.668314][T18671] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.733589][T18671] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.804328][T18671] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.971230][T18671] bridge_slave_1: left allmulticast mode
[  499.977902][T18671] bridge_slave_1: left promiscuous mode
[  499.983666][T18671] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.999481][T18671] bridge_slave_0: left allmulticast mode
[  500.006668][T18671] bridge_slave_0: left promiscuous mode
[  500.013381][T18671] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.430130][T22703] openvswitch: netlink: Duplicate key (type 0).
[  500.496237][T22707] xt_CT: No such helper "pptp"
[  500.567875][T18671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.593155][T18671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.610335][T18671] bond0 (unregistering): Released all slaves
[  500.909616][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  500.922002][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  500.931705][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  500.942351][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  500.950681][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  501.030872][T22723] C speed is unknown, defaulting to 1000
[  501.278465][T22740] netlink: 'syz.0.5144': attribute type 28 has an invalid length.
[  501.315444][T22740] netlink: 'syz.0.5144': attribute type 3 has an invalid length.
[  501.473578][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.973213][T18671] hsr_slave_0: left promiscuous mode
[  501.994568][T18671] hsr_slave_1: left promiscuous mode
[  502.006254][T18671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.013742][T18671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.022473][T18671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.045494][T18671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.135127][T18671] veth1_macvtap: left promiscuous mode
[  502.152477][T18671] veth0_macvtap: left promiscuous mode
[  502.169234][T18671] veth1_vlan: left promiscuous mode
[  502.189581][T18671] veth0_vlan: left promiscuous mode
[  502.703836][T18671] team0 (unregistering): Port device team_slave_1 removed
[  502.742444][T18671] team0 (unregistering): Port device team_slave_0 removed
[  502.985407][ T5846] Bluetooth: hci4: command tx timeout
[  503.233324][T22797] __nla_validate_parse: 13 callbacks suppressed
[  503.233345][T22797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5157'.
[  503.350803][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5157'.
[  503.440708][T22805] xt_CT: No such helper "pptp"
[  503.491492][T22723] chnl_net:caif_netlink_parms(): no params data found
[  503.661410][T22820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5163'.
[  503.964257][T22723] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.973780][T22837] netlink: 'syz.4.5171': attribute type 1 has an invalid length.
[  503.975197][T22723] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.999689][T22723] bridge_slave_0: entered allmulticast mode
[  504.023351][T22723] bridge_slave_0: entered promiscuous mode
[  504.060704][T22842] netlink: 'syz.0.5170': attribute type 3 has an invalid length.
[  504.088655][T22723] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.096085][T22723] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.103481][T22723] bridge_slave_1: entered allmulticast mode
[  504.119898][T22723] bridge_slave_1: entered promiscuous mode
[  504.134282][T22851] Cannot find set identified by id 752 to match
[  504.221779][T22837] veth65: entered promiscuous mode
[  504.242736][T22837] bond38: (slave veth65): Enslaving as a backup interface with a down link
[  504.274339][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'.
[  504.317744][T22723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.403719][T22723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.612544][T22723] team0: Port device team_slave_0 added
[  504.632322][T22723] team0: Port device team_slave_1 added
[  504.641761][T22885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5180'.
[  504.656621][T22875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5179'.
[  504.723983][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5181'.
[  504.834402][T22723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.843746][T22878] can: request_module (can-proto-0) failed.
[  504.854668][T22723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.934362][T22723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.984237][T22888] 8021q: adding VLAN 0 to HW filter on device bond43
[  504.991808][T22903] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5184'.
[  504.997918][T22892] netlink: 'syz.1.5181': attribute type 12 has an invalid length.
[  505.009453][T22892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5181'.
[  505.022159][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5181'.
[  505.044885][T22893] 8021q: adding VLAN 0 to HW filter on device bond43
[  505.053549][T22893] bond43: (slave vxcan1): The slave device specified does not support setting the MAC address
[  505.065125][ T5846] Bluetooth: hci4: command tx timeout
[  505.070269][T22893] bond43: (slave vxcan1): Error -95 calling set_mac_address
[  505.165699][T22723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.172821][T22723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.199198][T22723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.224781][T22897] veth85: entered promiscuous mode
[  505.233223][T22897] bond43: (slave veth85): Enslaving as an active interface with an up link
[  505.428014][T22723] hsr_slave_0: entered promiscuous mode
[  505.434718][T22723] hsr_slave_1: entered promiscuous mode
[  506.356654][T22931] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  506.433196][T22966] rdma_op ffff88807e41a1f0 conn xmit_rdma 0000000000000000
[  506.443652][T22964] 8021q: adding VLAN 0 to HW filter on device bond46
[  506.481647][T22723] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  506.560756][T22964] 8021q: adding VLAN 0 to HW filter on device bond46
[  506.574447][T22964] bond46: (slave vxcan5): The slave device specified does not support setting the MAC address
[  506.606507][T22964] bond46: (slave vxcan5): Error -95 calling set_mac_address
[  506.690581][T22723] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  506.728714][T22723] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  506.781329][T22968] veth83: entered promiscuous mode
[  506.789069][T22968] bond46: (slave veth83): Enslaving as an active interface with an up link
[  506.822334][T22971] 8021q: adding VLAN 0 to HW filter on device bond46
[  506.837842][T22723] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  507.146090][ T5846] Bluetooth: hci4: command tx timeout
[  507.156291][T22723] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.183321][T22723] 8021q: adding VLAN 0 to HW filter on device team0
[  507.334817][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.342013][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.424113][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.431314][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.300327][T22723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.373932][T23070] __nla_validate_parse: 8 callbacks suppressed
[  508.373949][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5228'.
[  508.414532][T22723] veth0_vlan: entered promiscuous mode
[  508.455640][T22723] veth1_vlan: entered promiscuous mode
[  508.490006][T23072] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  508.641597][T22723] veth0_macvtap: entered promiscuous mode
[  508.709921][T23094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5232'.
[  508.718283][T22723] veth1_macvtap: entered promiscuous mode
[  508.791067][T22723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.842205][T22723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.871257][T22723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.892496][T22723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.910859][T22723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.919948][T22723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.146031][T23109] netlink: 'syz.0.5241': attribute type 1 has an invalid length.
[  509.229585][ T5846] Bluetooth: hci4: command tx timeout
[  509.267179][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.303242][T18671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.328301][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.348593][T18671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.395755][T23109] veth91: entered promiscuous mode
[  509.415864][T23109] bond41: (slave veth91): Enslaving as a backup interface with a down link
[  509.574825][T23135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5248'.
[  510.202630][T23172] netlink: 'syz.4.5256': attribute type 1 has an invalid length.
[  510.218099][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.316736][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.621064][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.771906][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.996179][ T3467] bridge_slave_1: left allmulticast mode
[  511.001860][ T3467] bridge_slave_1: left promiscuous mode
[  511.012897][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.022578][ T3467] bridge_slave_0: left allmulticast mode
[  511.028571][ T3467] bridge_slave_0: left promiscuous mode
[  511.034245][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.317141][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.329821][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.340403][ T3467] bond0 (unregistering): Released all slaves
[  511.788385][T23197] netlink: 'syz.2.5262': attribute type 1 has an invalid length.
[  511.824982][T23197] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5262'.
[  511.875530][T23197] netlink: 'syz.2.5262': attribute type 1 has an invalid length.
[  512.192389][   T30] audit: type=1800 audit(1746818182.216:4): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5269" name="memory.events" dev="tmpfs" ino=6041 res=0 errno=0
[  512.254356][   T30] audit: type=1804 audit(1746818182.226:5): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5269" name="/newroot/1186/memory.events" dev="tmpfs" ino=6041 res=1 errno=0
[  512.292249][T23224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5270'.
[  512.384051][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  512.395292][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  512.403047][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  512.413711][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  512.432502][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  512.526217][T23231] syzkaller1: entered promiscuous mode
[  512.532250][T23231] syzkaller1: entered allmulticast mode
[  512.539408][T23232] xt_recent: Unsupported userspace flags (00000061)
[  512.587686][T23225] C speed is unknown, defaulting to 1000
[  512.599995][T23236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5274'.
[  512.642384][T23236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5274'.
[  512.870930][ T3467] hsr_slave_0: left promiscuous mode
[  512.931605][ T3467] hsr_slave_1: left promiscuous mode
[  512.953983][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.982235][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.034713][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.085669][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.210819][ T3467] veth1_macvtap: left promiscuous mode
[  513.219342][ T3467] veth0_macvtap: left promiscuous mode
[  513.228704][ T3467] veth1_vlan: left promiscuous mode
[  513.234102][ T3467] veth0_vlan: left promiscuous mode
[  513.679464][ T3467] team0 (unregistering): Port device team_slave_1 removed
[  513.716408][ T3467] team0 (unregistering): Port device team_slave_0 removed
[  514.507516][ T5846] Bluetooth: hci4: command tx timeout
[  514.792952][T23307] netlink: 'syz.4.5290': attribute type 4 has an invalid length.
[  514.843913][T23310] netlink: 'syz.4.5290': attribute type 4 has an invalid length.
[  514.872411][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5292'.
[  514.893628][T23225] chnl_net:caif_netlink_parms(): no params data found
[  515.231841][T23225] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.272482][T23225] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.310136][T23225] bridge_slave_0: entered allmulticast mode
[  515.337776][T23225] bridge_slave_0: entered promiscuous mode
[  515.356686][T23225] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.371249][T23225] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.378906][T23225] bridge_slave_1: entered allmulticast mode
[  515.399639][T23225] bridge_slave_1: entered promiscuous mode
[  515.581349][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'.
[  515.621221][T23225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.644998][T23225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.742892][T23225] team0: Port device team_slave_0 added
[  515.752079][T23225] team0: Port device team_slave_1 added
[  515.819538][T23225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.827012][T23225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.853892][T23225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.868736][T23225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.884251][T23225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.911137][T23225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.933712][T23368] bond14: (slave ip6gretap1): Releasing backup interface
[  515.948697][T23368] bond14: (slave ip6gretap1): the permanent HWaddr of slave - aa:64:44:c0:31:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  515.966857][T23372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5307'.
[  515.984469][T23368] bond14: (slave veth29): Releasing backup interface
[  515.996934][T23368] bond16: (slave veth35): Releasing backup interface
[  516.008144][T23368] bond0: (slave veth41): Releasing backup interface
[  516.018315][T23368] bond18: (slave veth43): Releasing backup interface
[  516.031162][T23368] bond19: (slave veth45): Releasing backup interface
[  516.041497][T23368] bond20: (slave veth47): Releasing backup interface
[  516.052783][T23368] bond22: (slave veth51): Releasing backup interface
[  516.062989][T23368] bond24: (slave veth53): Releasing backup interface
[  516.074180][T23368] bond25: (slave veth55): Releasing backup interface
[  516.084693][T23368] bond28: (slave veth57): Releasing backup interface
[  516.095232][T23368] bond29: (slave veth59): Releasing backup interface
[  516.104478][T23368] bond30: (slave veth61): Releasing backup interface
[  516.114415][T23368] bond31: (slave veth63): Releasing backup interface
[  516.124157][T23368] bond32: (slave veth65): Releasing backup interface
[  516.134256][T23368] bond33: (slave veth67): Releasing backup interface
[  516.145468][T23368] bond34: (slave veth69): Releasing backup interface
[  516.160784][T23368] bond36: (slave veth71): Releasing backup interface
[  516.172324][T23368] bond37: (slave veth73): Releasing backup interface
[  516.182333][T23368] bond39: (slave veth77): Releasing backup interface
[  516.193147][T23368] bond40: (slave veth85): Releasing backup interface
[  516.203798][T23368] bond41: (slave veth91): Releasing backup interface
[  516.288228][T23375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5308'.
[  516.313157][T23225] hsr_slave_0: entered promiscuous mode
[  516.323071][T23225] hsr_slave_1: entered promiscuous mode
[  516.586660][ T5846] Bluetooth: hci4: command tx timeout
[  516.897904][T23405] xt_CT: You must specify a L4 protocol and not use inversions on it
[  517.054468][T23408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.200013][T23415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5320'.
[  517.422428][T23430] netlink: 'syz.4.5323': attribute type 29 has an invalid length.
[  517.544550][T23439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5325'.
[  517.596473][T23441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5326'.
[  517.731199][T23225] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  517.765688][T23225] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  517.783612][T23225] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  517.808853][T23225] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  517.974901][T23450] xt_CT: No such helper "pptp"
[  518.060443][T23225] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.092770][T23460] FAULT_INJECTION: forcing a failure.
[  518.092770][T23460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.122273][T23460] CPU: 0 UID: 0 PID: 23460 Comm: syz.4.5331 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  518.122297][T23460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  518.122308][T23460] Call Trace:
[  518.122315][T23460]  <TASK>
[  518.122323][T23460]  dump_stack_lvl+0x189/0x250
[  518.122352][T23460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.122373][T23460]  ? __pfx__printk+0x10/0x10
[  518.122401][T23460]  should_fail_ex+0x414/0x560
[  518.122417][T23460]  _copy_from_user+0x2d/0xb0
[  518.122434][T23460]  bpf_test_init+0xf8/0x170
[  518.122452][T23460]  bpf_prog_test_run_skb+0x1e9/0x1560
[  518.122467][T23460]  ? __fget_files+0x2a/0x420
[  518.122488][T23460]  ? __fget_files+0x2a/0x420
[  518.122511][T23460]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  518.122528][T23460]  bpf_prog_test_run+0x2a9/0x340
[  518.122552][T23460]  __sys_bpf+0x4a4/0x860
[  518.122571][T23460]  ? __pfx___sys_bpf+0x10/0x10
[  518.122600][T23460]  ? ksys_write+0x1f0/0x250
[  518.122615][T23460]  ? rcu_is_watching+0x15/0xb0
[  518.122646][T23460]  __x64_sys_bpf+0x7c/0x90
[  518.122664][T23460]  do_syscall_64+0xf6/0x210
[  518.122684][T23460]  ? clear_bhb_loop+0x45/0xa0
[  518.122702][T23460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.122717][T23460] RIP: 0033:0x7fc73638e969
[  518.122734][T23460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.122747][T23460] RSP: 002b:00007fc73727c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  518.122765][T23460] RAX: ffffffffffffffda RBX: 00007fc7365b5fa0 RCX: 00007fc73638e969
[  518.122778][T23460] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  518.122788][T23460] RBP: 00007fc73727c090 R08: 0000000000000000 R09: 0000000000000000
[  518.122798][T23460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.122807][T23460] R13: 0000000000000000 R14: 00007fc7365b5fa0 R15: 00007fff2b86a0b8
[  518.122831][T23460]  </TASK>
[  518.143571][T23225] 8021q: adding VLAN 0 to HW filter on device team0
[  518.341856][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.349037][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.368360][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.375538][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.583463][T23225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  518.596712][T23477] netlink: 'syz.0.5336': attribute type 4 has an invalid length.
[  518.652379][T23486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5339'.
[  518.665851][ T5846] Bluetooth: hci4: command tx timeout
[  518.703121][T23487] netlink: 'syz.0.5336': attribute type 1 has an invalid length.
[  519.153762][T23508] FAULT_INJECTION: forcing a failure.
[  519.153762][T23508] name failslab, interval 1, probability 0, space 0, times 0
[  519.160879][T23225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.192520][T23508] CPU: 0 UID: 0 PID: 23508 Comm: syz.1.5344 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  519.192544][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  519.192556][T23508] Call Trace:
[  519.192563][T23508]  <TASK>
[  519.192571][T23508]  dump_stack_lvl+0x189/0x250
[  519.192601][T23508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.192623][T23508]  ? __pfx__printk+0x10/0x10
[  519.192646][T23508]  ? __pfx___might_resched+0x10/0x10
[  519.192667][T23508]  should_fail_ex+0x414/0x560
[  519.192689][T23508]  should_failslab+0xa8/0x100
[  519.192711][T23508]  __kmalloc_noprof+0xcb/0x4f0
[  519.192731][T23508]  ? sk_prot_alloc+0xe7/0x220
[  519.192754][T23508]  sk_prot_alloc+0xe7/0x220
[  519.192771][T23508]  ? sk_alloc+0x24/0x370
[  519.192792][T23508]  sk_alloc+0x3a/0x370
[  519.192810][T23508]  ? bpf_ctx_init+0x167/0x1d0
[  519.192831][T23508]  bpf_prog_test_run_skb+0x2ed/0x1560
[  519.192848][T23508]  ? __fget_files+0x2a/0x420
[  519.192883][T23508]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  519.192902][T23508]  bpf_prog_test_run+0x2a9/0x340
[  519.192927][T23508]  __sys_bpf+0x4a4/0x860
[  519.192950][T23508]  ? __pfx___sys_bpf+0x10/0x10
[  519.192982][T23508]  ? ksys_write+0x1f0/0x250
[  519.192999][T23508]  ? rcu_is_watching+0x15/0xb0
[  519.193032][T23508]  __x64_sys_bpf+0x7c/0x90
[  519.193050][T23508]  do_syscall_64+0xf6/0x210
[  519.193072][T23508]  ? clear_bhb_loop+0x45/0xa0
[  519.193092][T23508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.193108][T23508] RIP: 0033:0x7fb0a1f8e969
[  519.193123][T23508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.193144][T23508] RSP: 002b:00007fb0a2dda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  519.193162][T23508] RAX: ffffffffffffffda RBX: 00007fb0a21b5fa0 RCX: 00007fb0a1f8e969
[  519.193175][T23508] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  519.193187][T23508] RBP: 00007fb0a2dda090 R08: 0000000000000000 R09: 0000000000000000
[  519.193198][T23508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.193208][T23508] R13: 0000000000000000 R14: 00007fb0a21b5fa0 R15: 00007fff6a652388
[  519.193238][T23508]  </TASK>
[  519.251552][T23225] veth0_vlan: entered promiscuous mode
[  519.478877][T23225] veth1_vlan: entered promiscuous mode
[  519.583205][T23512] netlink: 'syz.2.5346': attribute type 4 has an invalid length.
[  519.666533][T23515] 8021q: adding VLAN 0 to HW filter on device bond42
[  519.675800][T23515] bond0: (slave bond42): Enslaving as a backup interface with a down link
[  519.734225][T23225] veth0_macvtap: entered promiscuous mode
[  519.795467][T23521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  519.813355][T23225] veth1_macvtap: entered promiscuous mode
[  519.894444][T23225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.073829][T23225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.090948][T23225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.100417][T23225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.110869][T23225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.120825][T23225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.345846][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.384290][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.456723][T23561] netlink: 'syz.4.5356': attribute type 3 has an invalid length.
[  520.471938][T23560] netlink: 'syz.2.5357': attribute type 1 has an invalid length.
[  520.475114][T23554] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5354'.
[  520.502120][T18671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.557372][T18671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.768835][ T5846] Bluetooth: hci4: command tx timeout
[  520.830673][T23568] veth85: entered promiscuous mode
[  520.841182][T23568] bond47: (slave veth85): Enslaving as a backup interface with a down link
[  521.222310][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5368'.
[  521.315340][ T5905] IPVS: starting estimator thread 0...
[  521.344307][T23616] netlink: 'syz.0.5370': attribute type 3 has an invalid length.
[  521.345277][T23618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5367'.
[  521.419695][T23615] IPVS: using max 30 ests per chain, 72000 per kthread
[  521.446984][T23622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5371'.
[  521.837597][T23641] bond0: entered promiscuous mode
[  521.858310][T23641] bond42: entered promiscuous mode
[  521.883943][T23641] bond0: entered allmulticast mode
[  521.911209][T23641] bond42: entered allmulticast mode
[  521.927938][T23641] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.073378][T18671] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.463843][T18671] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.544282][T18671] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.632816][T18671] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.802668][T18671] bridge_slave_1: left allmulticast mode
[  522.812053][T18671] bridge_slave_1: left promiscuous mode
[  522.819874][T18671] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.833811][T18671] bridge_slave_0: left allmulticast mode
[  522.840686][T18671] bridge_slave_0: left promiscuous mode
[  522.850975][T18671] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.353783][T18671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.364882][T18671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.378021][T18671] bond0 (unregistering): Released all slaves
[  524.416735][T23732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5383'.
[  524.481872][T23733] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5384'.
[  524.728771][T18671] hsr_slave_0: left promiscuous mode
[  524.739456][T18671] hsr_slave_1: left promiscuous mode
[  524.764619][T18671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.785179][T18671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.813319][T23751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  524.826152][T23751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  524.836615][T18671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.844080][T18671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.856252][T23751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  524.868670][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  524.880701][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  524.957995][T23757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5390'.
[  524.983467][T23757] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  525.018684][T18671] veth1_macvtap: left promiscuous mode
[  525.036706][T18671] veth0_macvtap: left promiscuous mode
[  525.042384][T18671] veth1_vlan: left promiscuous mode
[  525.054021][T18671] veth0_vlan: left promiscuous mode
[  525.240897][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5392'.
[  525.296626][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5392'.
[  525.597338][T18671] team0 (unregistering): Port device team_slave_1 removed
[  525.639981][T18671] team0 (unregistering): Port device team_slave_0 removed
[  526.094323][T23777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5395'.
[  526.197616][T23745] C speed is unknown, defaulting to 1000
[  526.582260][T23803] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5403'.
[  526.611559][T23804] netlink: 'syz.0.5402': attribute type 1 has an invalid length.
[  526.876311][T23804] veth93: entered promiscuous mode
[  526.890262][T23804] bond44: (slave veth93): Enslaving as a backup interface with a down link
[  526.972904][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5409'.
[  526.988027][ T5836] Bluetooth: hci4: command tx timeout
[  527.203797][T23823] xt_CT: No such helper "pptp"
[  527.232709][T23836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5411'.
[  527.261610][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5411'.
[  527.568959][T23745] chnl_net:caif_netlink_parms(): no params data found
[  527.724018][   T99] block nbd0: Possible stuck request ffff888024a17000: control (read@0,4096B). Runtime 330 seconds
[  527.810784][T23874] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  527.945597][T23745] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.953720][T23745] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.984604][T23745] bridge_slave_0: entered allmulticast mode
[  528.012906][T23745] bridge_slave_0: entered promiscuous mode
[  528.048370][T23745] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.062857][T23745] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.080257][T23745] bridge_slave_1: entered allmulticast mode
[  528.100744][T23745] bridge_slave_1: entered promiscuous mode
[  528.125548][T23893] netlink: 'syz.1.5425': attribute type 1 has an invalid length.
[  528.242037][T23901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5427'.
[  528.255340][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  528.281628][T23745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.358766][T23893] veth91: entered promiscuous mode
[  528.368095][T23893] bond44: (slave veth91): Enslaving as a backup interface with a down link
[  528.399675][T23745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.522521][T23745] team0: Port device team_slave_0 added
[  528.574146][T23745] team0: Port device team_slave_1 added
[  528.697121][T23924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5431'.
[  528.735717][T23745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.743781][T23745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.774624][T23745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.787003][T23929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5432'.
[  528.806715][T23745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.823540][T23745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.882555][T23745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.010605][T23745] hsr_slave_0: entered promiscuous mode
[  529.042247][T23745] hsr_slave_1: entered promiscuous mode
[  529.065355][ T5836] Bluetooth: hci4: command tx timeout
[  529.211162][T23945] vlan0: Device is already in use.
[  529.226293][T23952] netlink: 'syz.0.5440': attribute type 1 has an invalid length.
[  529.392779][T23952] veth95: entered promiscuous mode
[  529.405958][T23952] bond45: (slave veth95): Enslaving as a backup interface with a down link
[  530.413203][T24013] netlink: 'syz.2.5454': attribute type 1 has an invalid length.
[  530.416841][T23745] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  530.454943][T24015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5455'.
[  530.645676][T23745] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  530.733861][T24024] veth87: entered promiscuous mode
[  530.774846][T24024] bond48: (slave veth87): Enslaving as a backup interface with a down link
[  530.790641][T23745] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  530.850867][T23745] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  530.910568][T24038] atomic_op ffff88806fa6b198 conn xmit_atomic 0000000000000000
[  531.145823][ T5836] Bluetooth: hci4: command tx timeout
[  531.244607][T23745] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.382479][T23745] 8021q: adding VLAN 0 to HW filter on device team0
[  531.493717][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.500930][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.555351][T21118] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.562521][T21118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.678635][T24077] netlink: 'syz.4.5472': attribute type 1 has an invalid length.
[  531.758784][T24088] __nla_validate_parse: 1 callbacks suppressed
[  531.758802][T24088] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5471'.
[  531.882135][T24088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5471'.
[  531.899839][T24077] veth67: entered promiscuous mode
[  531.934187][T24077] bond40: (slave veth67): Enslaving as a backup interface with a down link
[  532.002568][T24102] sctp: [Deprecated]: syz.2.5475 (pid 24102) Use of struct sctp_assoc_value in delayed_ack socket option.
[  532.002568][T24102] Use struct sctp_sack_info instead
[  532.742375][T23745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.933945][T24157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5486'.
[  532.958885][T23745] veth0_vlan: entered promiscuous mode
[  532.993392][T24158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5487'.
[  533.040407][T23745] veth1_vlan: entered promiscuous mode
[  533.150884][T23745] veth0_macvtap: entered promiscuous mode
[  533.180452][T23745] veth1_macvtap: entered promiscuous mode
[  533.226650][ T5836] Bluetooth: hci4: command tx timeout
[  533.258950][T23745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.312085][T23745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.570635][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5494'.
[  533.627526][T23745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.648378][T24188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5494'.
[  533.649576][T23745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.686967][T23745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.706125][T24188] netlink: 'syz.4.5494': attribute type 7 has an invalid length.
[  533.709743][T23745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.049269][T24204] xt_CT: No such helper "pptp"
[  534.078588][T24211] netlink: 'syz.2.5499': attribute type 3 has an invalid length.
[  534.101596][T18671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.136676][T18671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.281160][T21118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.313149][T21118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.369653][T24226] netlink: 'syz.4.5503': attribute type 1 has an invalid length.
[  534.529105][T24231] veth69: entered promiscuous mode
[  534.549333][T24231] bond41: (slave veth69): Enslaving as a backup interface with a down link
[  534.753560][T24246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5507'.
[  534.769598][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5507'.
[  534.990297][ T3578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.061289][T24240] syzkaller1: entered promiscuous mode
[  535.071679][T24240] syzkaller1: entered allmulticast mode
[  535.227393][ T3578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.267495][T24258] syzkaller1: entered promiscuous mode
[  535.273012][T24258] syzkaller1: entered allmulticast mode
[  535.369738][ T3578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.701436][ T3578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.882437][ T3578] bridge_slave_1: left allmulticast mode
[  535.889784][ T3578] bridge_slave_1: left promiscuous mode
[  535.895986][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.906760][ T3578] bridge_slave_0: left allmulticast mode
[  535.912438][ T3578] bridge_slave_0: left promiscuous mode
[  535.918564][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.324319][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.341352][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.358986][ T3578] bond0 (unregistering): Released all slaves
[  536.667485][T24308] netlink: 'syz.1.5512': attribute type 3 has an invalid length.
[  536.742243][T24313] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5514'.
[  536.869404][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5515'.
[  536.917666][T24318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5515'.
[  537.273801][ T3578] hsr_slave_0: left promiscuous mode
[  537.299559][ T3578] hsr_slave_1: left promiscuous mode
[  537.315797][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.332962][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.351507][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.365185][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.464051][ T3578] veth1_macvtap: left promiscuous mode
[  537.476431][ T3578] veth0_macvtap: left promiscuous mode
[  537.488826][ T3578] veth1_vlan: left promiscuous mode
[  537.515751][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  537.518587][ T3578] veth0_vlan: left promiscuous mode
[  537.529822][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  537.542072][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  537.554913][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  537.564221][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  537.809876][T24340] xt_CT: No such helper "pptp"
[  538.181907][T24363] netlink: 'syz.4.5525': attribute type 1 has an invalid length.
[  538.290884][T24368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5526'.
[  538.520259][ T3578] team0 (unregistering): Port device team_slave_1 removed
[  538.559755][ T3578] team0 (unregistering): Port device team_slave_0 removed
[  539.036475][T24369] veth71: entered promiscuous mode
[  539.053326][T24369] bond42: (slave veth71): Enslaving as a backup interface with a down link
[  539.172365][T24335] C speed is unknown, defaulting to 1000
[  539.183209][T24382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5529'.
[  539.202151][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5529'.
[  539.235295][   T31] INFO: task udevd:5850 blocked for more than 143 seconds.
[  539.242539][   T31]       Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0
[  539.267846][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  539.281604][   T31] task:udevd           state:D stack:22184 pid:5850  tgid:5850  ppid:5202   task_flags:0x400140 flags:0x00004006
[  539.296382][   T31] Call Trace:
[  539.299698][   T31]  <TASK>
[  539.302645][   T31]  __schedule+0x16e2/0x4cd0
[  539.312508][   T31]  ? schedule+0x165/0x360
[  539.317000][   T31]  ? __lock_acquire+0xaac/0xd20
[  539.321889][   T31]  ? __pfx___schedule+0x10/0x10
[  539.330330][   T31]  ? schedule+0x91/0x360
[  539.330882][T24390] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  539.334720][   T31]  schedule+0x165/0x360
[  539.347191][   T31]  io_schedule+0x81/0xe0
[  539.351460][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  539.356862][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  539.362698][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  539.385215][   T31]  ? __filemap_get_folio+0x790/0xaf0
[  539.390558][   T31]  ? do_read_cache_folio+0x4ed/0x590
[  539.395779][T24389] netlink: 'syz.4.5530': attribute type 10 has an invalid length.
[  539.424943][T24389] veth0_macvtap: left promiscuous mode
[  539.440168][T24389] team0: Device veth0_macvtap failed to register rx_handler
[  539.445230][   T31]  do_read_cache_folio+0x1ae/0x590
[  539.452610][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  539.491474][   T31]  read_part_sector+0xb6/0x270
[  539.496474][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  539.501878][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  539.511833][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  539.525135][   T31]  ? set_page_refcounted+0xa0/0x1e0
[  539.530393][   T31]  bdev_disk_changed+0x75c/0x14b0
[  539.545156][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  539.550664][   T31]  ? wait_on_inode+0xc0/0x230
[  539.565250][   T31]  blkdev_get_whole+0x380/0x510
[  539.570159][   T31]  bdev_open+0x31e/0xd30
[  539.574437][   T31]  blkdev_open+0x3a8/0x510
[  539.595178][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  539.600173][   T31]  do_dentry_open+0xdf0/0x1970
[  539.604979][   T31]  vfs_open+0x3b/0x340
[  539.625245][ T5836] Bluetooth: hci4: command tx timeout
[  539.631598][   T31]  ? path_openat+0x2ecd/0x3830
[  539.636494][   T31]  path_openat+0x2ee5/0x3830
[  539.641108][   T31]  ? arch_stack_walk+0xfc/0x150
[  539.656850][   T31]  ? __pfx_path_openat+0x10/0x10
[  539.661965][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.675524][   T31]  do_filp_open+0x1fa/0x410
[  539.680083][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  539.690730][   T31]  ? _raw_spin_unlock+0x28/0x50
[  539.695942][   T31]  ? alloc_fd+0x64c/0x6c0
[  539.700325][   T31]  do_sys_openat2+0x121/0x1c0
[  539.709496][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  539.714759][   T31]  __x64_sys_openat+0x138/0x170
[  539.720156][   T31]  do_syscall_64+0xf6/0x210
[  539.725065][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  539.731242][   T31]  ? clear_bhb_loop+0x45/0xa0
[  539.740071][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.746299][   T31] RIP: 0033:0x7f6f990a7407
[  539.754872][   T31] RSP: 002b:00007ffc19a61f40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  539.767395][   T31] RAX: ffffffffffffffda RBX: 00007f6f9974e880 RCX: 00007f6f990a7407
[  539.777612][   T31] RDX: 00000000000a0800 RSI: 00005603b9bc5300 RDI: ffffffffffffff9c
[  539.788903][   T31] RBP: 00005603b9bc4910 R08: 0000000000000000 R09: 0000000000000000
[  539.799843][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005603b9bdcdd0
[  539.814334][   T31] R13: 00005603b9bdc3e0 R14: 0000000000000000 R15: 00005603b9bdcdd0
[  539.824057][   T31]  </TASK>
[  539.830060][   T31] 
[  539.830060][   T31] Showing all locks held in the system:
[  539.840135][   T31] 1 lock held by khungtaskd/31:
[  539.876266][   T31]  #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  539.890801][   T31] 5 locks held by kworker/u8:10/3578:
[  539.896580][   T31]  #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  539.912123][   T31]  #1: ffffc9000c697c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  539.922923][   T31]  #2: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0
[  539.932874][   T31]  #3: ffff8880511854e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0
[  539.943086][   T31]  #4: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  539.953197][   T31] 1 lock held by klogd/5191:
[  539.958237][   T31]  #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  539.968392][   T31] 2 locks held by getty/5597:
[  539.973148][   T31]  #0: ffff8880349a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  539.983074][   T31]  #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  539.993568][   T31] 1 lock held by udevd/5850:
[  539.998347][   T31]  #0: ffff8880248d5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  540.007698][   T31] 3 locks held by kworker/u8:2/18671:
[  540.013150][   T31]  #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  540.025829][   T31]  #1: ffffc90003367c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  540.037205][   T31]  #2: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  540.046511][   T31] 2 locks held by syz-executor/24335:
[  540.052047][   T31]  #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590
[  540.062278][   T31]  #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  540.072114][   T31] 2 locks held by dhcpcd/24386:
[  540.077317][   T31]  #0: ffff8880544ac408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  540.088200][   T31]  #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  540.099429][   T31] 2 locks held by syz.4.5530/24389:
[  540.110527][   T31]  #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  540.120136][   T31]  #1: ffff8880425b8e00 (team->team_lock_key){+.+.}-{4:4}, at: team_add_slave+0xb4/0x2840
[  540.130448][   T31] 2 locks held by dhcpcd-run-hook/24395:
[  540.136708][   T31]  #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  540.147275][   T31]  #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0
[  540.160137][   T31] 
[  540.162490][   T31] =============================================
[  540.162490][   T31] 
[  540.188996][   T31] NMI backtrace for cpu 0
[  540.189013][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  540.189032][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  540.189043][   T31] Call Trace:
[  540.189050][   T31]  <TASK>
[  540.189058][   T31]  dump_stack_lvl+0x189/0x250
[  540.189081][   T31]  ? __wake_up_klogd+0xd9/0x110
[  540.189103][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.189124][   T31]  ? __pfx__printk+0x10/0x10
[  540.189154][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  540.189175][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  540.189189][   T31]  ? _printk+0xcf/0x120
[  540.189208][   T31]  ? __pfx__printk+0x10/0x10
[  540.189224][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  540.189242][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  540.189261][   T31]  watchdog+0xfee/0x1030
[  540.189283][   T31]  ? watchdog+0x1de/0x1030
[  540.189309][   T31]  kthread+0x70e/0x8a0
[  540.189332][   T31]  ? __pfx_watchdog+0x10/0x10
[  540.189350][   T31]  ? __pfx_kthread+0x10/0x10
[  540.189368][   T31]  ? __pfx_kthread+0x10/0x10
[  540.189382][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.189399][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.189416][   T31]  ? __pfx_kthread+0x10/0x10
[  540.189433][   T31]  ret_from_fork+0x4b/0x80
[  540.189448][   T31]  ? __pfx_kthread+0x10/0x10
[  540.189464][   T31]  ret_from_fork_asm+0x1a/0x30
[  540.189492][   T31]  </TASK>
[  540.189500][   T31] Sending NMI from CPU 0 to CPUs 1:
[  540.345656][    C1] NMI backtrace for cpu 1
[  540.345678][    C1] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  540.345697][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  540.345708][    C1] Workqueue: events_unbound toggle_allocation_gate
[  540.345732][    C1] RIP: 0010:insn_get_displacement+0x45/0x9f0
[  540.345752][    C1] Code: 00 fc ff df e8 0c 47 6a f6 4d 8d 6e 34 4c 89 eb 48 c1 eb 03 42 0f b6 04 3b 84 c0 0f 85 1d 07 00 00 45 0f b6 7d 00 31 ed 31 ff <44> 89 fe e8 e3 49 6a f6 45 85 ff 74 0a e8 d9 46 6a f6 e9 74 06 00
[  540.345765][    C1] RSP: 0018:ffffc90000bf7718 EFLAGS: 00000246
[  540.345778][    C1] RAX: 0000000000000000 RBX: 1ffff9200017ef16 RCX: ffff88801feebc00
[  540.345790][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  540.345799][    C1] RBP: 0000000000000000 R08: ffffc90000bf78ef R09: 0000000000000000
[  540.345810][    C1] R10: ffffc90000bf7880 R11: fffff5200017ef1e R12: ffffc90000bf78bc
[  540.345822][    C1] R13: ffffc90000bf78b4 R14: ffffc90000bf7880 R15: 0000000000000000
[  540.345833][    C1] FS:  0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000
[  540.345846][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  540.345857][    C1] CR2: 00007fc73657d2d8 CR3: 000000006ee98000 CR4: 00000000003526f0
[  540.345871][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  540.345879][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  540.345890][    C1] Call Trace:
[  540.345896][    C1]  <TASK>
[  540.345908][    C1]  insn_get_immediate+0x64/0x1280
[  540.345929][    C1]  insn_decode+0x30e/0x4f0
[  540.345947][    C1]  text_poke_loc_init+0xf3/0x820
[  540.345967][    C1]  ? __kmalloc_node_noprof+0xec/0x4e0
[  540.345986][    C1]  ? __pfx_text_poke_loc_init+0x10/0x10
[  540.346012][    C1]  ? text_poke_queue+0x140/0x190
[  540.346033][    C1]  arch_jump_label_transform_queue+0x8b/0x110
[  540.346050][    C1]  __jump_label_update+0x185/0x3a0
[  540.346073][    C1]  static_key_disable_cpuslocked+0xc5/0x1b0
[  540.346093][    C1]  static_key_disable+0x1a/0x20
[  540.346111][    C1]  toggle_allocation_gate+0x1a1/0x240
[  540.346127][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  540.346144][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  540.346165][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  540.346184][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  540.346204][    C1]  process_scheduled_works+0xadb/0x17a0
[  540.346236][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  540.346264][    C1]  worker_thread+0x8a0/0xda0
[  540.346290][    C1]  kthread+0x70e/0x8a0
[  540.346308][    C1]  ? __pfx_worker_thread+0x10/0x10
[  540.346322][    C1]  ? __pfx_kthread+0x10/0x10
[  540.346338][    C1]  ? __pfx_kthread+0x10/0x10
[  540.346353][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.346367][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.346384][    C1]  ? __pfx_kthread+0x10/0x10
[  540.346399][    C1]  ret_from_fork+0x4b/0x80
[  540.346421][    C1]  ? __pfx_kthread+0x10/0x10
[  540.346437][    C1]  ret_from_fork_asm+0x1a/0x30
[  540.346458][    C1]  </TASK>
[  540.366017][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  540.366039][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) 
[  540.366063][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  540.366074][   T31] Call Trace:
[  540.366083][   T31]  <TASK>
[  540.366091][   T31]  dump_stack_lvl+0x99/0x250
[  540.366117][   T31]  ? __asan_memcpy+0x40/0x70
[  540.366135][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.366156][   T31]  ? __pfx__printk+0x10/0x10
[  540.366184][   T31]  panic+0x2db/0x790
[  540.366210][   T31]  ? __pfx_panic+0x10/0x10
[  540.366230][   T31]  ? __pfx_delay_tsc+0x10/0x10
[  540.366244][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  540.366267][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  540.366286][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  540.366309][   T31]  watchdog+0x102d/0x1030
[  540.366332][   T31]  ? watchdog+0x1de/0x1030
[  540.366359][   T31]  kthread+0x70e/0x8a0
[  540.366381][   T31]  ? __pfx_watchdog+0x10/0x10
[  540.366400][   T31]  ? __pfx_kthread+0x10/0x10
[  540.366419][   T31]  ? __pfx_kthread+0x10/0x10
[  540.366436][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.366454][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.366473][   T31]  ? __pfx_kthread+0x10/0x10
[  540.366490][   T31]  ret_from_fork+0x4b/0x80
[  540.366506][   T31]  ? __pfx_kthread+0x10/0x10
[  540.366523][   T31]  ret_from_fork_asm+0x1a/0x30
[  540.366553][   T31]  </TASK>
[  540.793466][   T31] Kernel Offset: disabled
[  540.797787][   T31] Rebooting in 86400 seconds..