last executing test programs:

18.472363576s ago: executing program 0 (id=854):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv4_newnexthop={0x1c, 0x5e, 0xa25, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x4}, [@NHA_RES_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0xa0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r6}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x3c}}, 0x800)

17.599791139s ago: executing program 0 (id=856):
unshare(0x40020000)
mmap(&(0x7f0000498000/0x1000)=nil, 0x1000, 0xb, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="10110000", @ANYRES16=r3, @ANYBLOB="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"], 0x1110}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$packet(0x11, 0x3, 0x300)
close(r4)
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000600000000060000000180c2000000aaaaaaaaaabb"], 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})

16.784737219s ago: executing program 0 (id=868):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%-5lx  \x00'}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000680)={r0, r3}, 0xc)
socket$netlink(0x10, 0x3, 0xc)

16.482280409s ago: executing program 0 (id=870):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, 0xe, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40040000}, 0x40000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0xb, 0x6, 0x4000, @void, @value}, 0x20)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40)
syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x4e23, 0x4d, 0x0, @opaque="f2eee374dc40c8c74aded76eadb89719eacf6745b300c9b9d418299ffff94a2067a1d75f0e1d15ad2153ffdcf3466cee885446eb60f86db32de1c92c01d33a732592bb1f97"}}}}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
socketpair(0x10, 0x1, 0x5, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x2f, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="8345050001000000180012800b00010067656e65766500000800028004000600"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x7)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c02000010000b0500000200000000006f6d8864d22a3e2f00a46c887c090200002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff"], 0x22c}], 0x1}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7fffffff}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0xb, 0x7, 0xa, 0xc9a7260e25ebe1f2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x9, 0xb9, &(0x7f0000000380)=""/185, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x9, 0x4, 0x401}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)=[{0x2, 0x3, 0xe, 0x7}, {0x2, 0x1, 0x2, 0xb}, {0x4, 0x5, 0x10, 0xb}, {0x4000003, 0x2, 0x5, 0x8}, {0x2, 0x4, 0xa, 0xa}, {0x2, 0x4, 0x5, 0xc}], 0x10, 0x5, @void, @value}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x82}}}}}}}, 0x0)

16.397842989s ago: executing program 0 (id=872):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
unshare(0xc040480)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='hybla\x00', 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

7.521775044s ago: executing program 0 (id=872):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
unshare(0xc040480)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='hybla\x00', 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

5.300730192s ago: executing program 2 (id=960):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x1, 0xffffffff}, {0x6}]})
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000006c0)=0x5)
write$ppp(r1, &(0x7f0000000480)='3I', 0x2)

4.85068553s ago: executing program 2 (id=965):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000390400"/20, @ANYBLOB="8308000000000000380012800b000100697036746e6c0000280002800500090004000000140003"], 0x58}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=r0, @ANYBLOB="996e06004d02000054f3ba4d280001006873722f480002800500030008000000050003000500e013c041b94abe4ec5f6b6dc000300fd00000008000200", @ANYRESDEC, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff0180c2105df70800450000610000000000889078ac1e0001ac1414aa000000000040c8c74aded7ffffffff19eacf6745b300c9b9d418299ffff94a2067a1d75f0e1d15ad3753ffdcf3466cee885446eb60f86db32de1c92c01d33a732592bbc9888d3e733443d6623dbacfe1a80b1d2e631eb4aa88a041e4ed8de4e67e64dc36b9f408a0fad351"], 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
unshare(0x68060200)
socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000340)={'raw\x00', 0x2, [{}, {}]}, 0x48)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040))
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0xd, 0x51, &(0x7f00000002c0)="dffbfe1e0c681694777220b8a4", &(0x7f0000000740)=""/81, 0x1, 0x0, 0xaa, 0xe2, &(0x7f00000007c0)="22c9b8f3e9a2c4c05f101f1e3af91318952e4976bbdd114e055eabb3eda689f08e97c0ae1c5c5e9b6307e3167e996fa6cedebc85d566f4f1082f43b51799584f1416a4fe04881d15b261bb6ddb0d0ed952379410ff74d2056790bd853753613b6b657196e7b7984751bae649e684f607a3e6fb3cd0c703be7f58903dff177671f55cdbbe56d12110bca59236ab3f6ffa382bcf12e8503719dbd3fb9507bd98b44c81046ec4ea2ea3ad0e", &(0x7f0000000880)="e125389eeaa42faac27ea1b750e68340ffd132a7160b01ad4be595d34733ce3ce3fb3afd3232bc4e81992b2f2e70b497543605ead493f37c1ce3f32c9ec85f32c11426c15886a4f728c7197e71a17e74308b474667f371f1ee04a8759bd9848e4ffd667134f6d154e8068b5e2e836bc7125aced9a4eeb829e654ee2145779b500c79ceefd40de1439e014d14c51e817c18ec7352c5e9fd492434b1366113a3f9cd73bc020bf455273e67f5acaf484480015599ba65f7963db00f2360ba6777f51b6ac819aca312354f025dcb1424127a94b849c0ec1b980c5a44f22a714f82837395", 0x1, 0x0, 0x9}, 0x50)
bind$802154_dgram(r8, &(0x7f0000000080)={0x24, @long}, 0xe)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10)
connect$phonet_pipe(r9, &(0x7f0000000200), 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000009000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf099500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000113bcfb80ade809bcc0259d1b5e681e9b5edaa3278a4d609025a793756d7ade530070e2fea746a1a1cb22f62070cc652cac53a15386f6516e88a0883", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000004000000850000007f00000018000000810000000000000080000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.211234676s ago: executing program 3 (id=980):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x20040040)

3.03087206s ago: executing program 3 (id=982):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

2.776729707s ago: executing program 3 (id=985):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYBLOB="6c1f3f1467cad3592ea6756ba13b7e39f0ded77174651c97ec6b221af1afb1622e60a1a13a13b771574defc4edf0acf686042e2c727afa055096ee4bb46e7f68664d531b3bc6fcc6b1783a09e0747a5e7d3a8c0ea511a079ca7999988bc044c72db8cde926f12e53d6bb7cc40413", @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000180)}}], 0x2, 0x0) (async)
sendmmsg$inet6(r4, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000180)}}], 0x2, 0x0)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, 0x8)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84) (async)
r6 = socket$inet(0x2, 0x80001, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa, 0x0, 0x0, @void, @value}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r9, 0x80000001}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r9, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x9, 0x8}, 0x90)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'caif0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="4b146f3d737db2a868a97000fbdbdf25000000001822380fdc2c94e24032159817f9ee890bcccdae4441514927c6d27aa1fc257a52d7050a809ea9987eb202f99e2d2912d63f346b080c768f6bd4602e8a929e0e03d6d8c8449d8348127091e3126be800268baab50b22dc64820609891c0128e39b553c57f61756491427f58462dcc163896b9dc6ce73b52ffcddbd6af84bf24a8a7f3cf9da51350c007cf47c7903330115b6757b5cbaf00aede222155f1b0740213cbe9515d96afa86705290a21ca48919cda31dc7105fd3661ae2b910dbd80ae897e8e5dc906c26567f2a4f0f2610cee41694111964f24ea1a5c64e524dc19aa191960a000000000000000fbcdf081e059d09121c933790ddcefa968e24776fb2af376b122ff336eebc47d97a67cefb7d258d044d593946d0d52c5511a34fa96b70270eae21f14af03ab67c22c69de1832ee4b7961e3e5ff470df608c6507c2ebe0a2af94631cbc5662b3d9332025fb68a3ac6616c145f347d35266", @ANYRES32=r12, @ANYBLOB="0001000010400200"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880)

2.698294741s ago: executing program 4 (id=986):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4008000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x2c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6   \x00'}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000001500)={0x1194, 0x17, 0x10, 0x70bd27, 0x25dfdbfc, {0x5}, [@generic="464b679ac558277c19400204bddfb51aca5afa68cd4432087fa172c0b7ead57b6db3743505010842729c82436d", @generic="6015ad428a38858f38e186bddc546e438662215c129a3c2be2e0f7a4f7d29b4e9fc85d4ba48bf6898f5bbda0957698eb2b9b5918b9d3b9b55ffe1fc539de0b174b", @nested={0x1108, 0x16, 0x0, 0x1, [@typed={0x7, 0x11f, 0x0, 0x0, @str='#{\x00'}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xd2, 0xac, 0x0, 0x0, @binary="554a6b5a9d66a1d934f06a599ad811397e2425563bdb9c10b808d0b93a69e865044098561c9c02af1f24d77c490d9934fa12f8b5f6d4fc35fcd27d91b21a048b19df9564065ce0184719d516f18c37dc52a3b58b416b222372120d7221d6293383810f9412bd78c9aee5c40a4816a63d92997b9d00855db796e999080a53ab4965123979fee326d7a36527b568f5ade94db8592f17385c0c30ad4c60c8392ada1a06e64f7272b7ac7bf6c5b9b1a08b08706e36d919478720ddd197734ceeebe3f1fbefe8253b7a5d680d84b82c4c"}, @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="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", @nested={0x4, 0x66}]}, @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1194}, 0x1, 0x0, 0x0, 0x2000800}, 0x40000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = epoll_create(0x80)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x4})
sendmmsg$inet6(r5, &(0x7f0000001140)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x2, @empty, 0xd}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="f45f8a9f8ef828f25186816f9b076a2c4158c1e0a044abd10291370128c1baf793d191f3b2c3cb43dedf14a85c34368c7ed090f74c460c43356697edaa5b071dd237d3bfca5c38b50acc441c1c8d3daf6d7fc81b047901780e9658", 0x5b}, {&(0x7f0000000400)="c0f3db3a2116c7d616d3f53a32379b6144ade305af697d6a0684d56716d0ade20e8dec263e0767fb87056de4f5fc3424", 0x30}, {&(0x7f0000000440)="03096eeca0e56e81dc1f600f1d56467cf6639e3fc029f4ace0c5d1c8cdd95bc32362e00918a93a7e12b66d1394470643b5b604005ee1431df4669f7d6c62cc08109411b8ee2ee214a20a6d0f07290eb24f91cff7134692c10209f7fad37c6744bd19b2dd7e0277df84c9c6dd1c29", 0x6e}, {&(0x7f00000004c0)="fb3e5a92a7cdb77e42e08bbf5a0c8e238e0e9e9186f7d2f58f7b16d8d30347e90493469b22fe4c7e667ed6321896b52b4b1f95d12ad59bde3809d6fa03dd2e57cf3651ed9be948e5c8500bceeaa1c153d91d20359af3db9848a998736dbd3b83", 0x60}, {&(0x7f0000000540)="40af1db9fbdc449efe43c7de2f59ae81b98a1699d87a05af7950b8d06d8093ef0b5eabcc10d94d48933b2d44fac59aca9b1678dfd6f7f7f4db148a1359dff00fe8c7c898124fc7c08cc897db401e304803b94598537d5fdf04658fa16d67ce89c13cd0e570b07cff5effc9f882f52c6225c02334e4", 0x75}, {&(0x7f00000005c0)="c06a1ecc6c211d0fae7e4d2921ba914e9053ccaf91c36874d655ef8e5a6d403f82a5da1921939dadcea678e95e0ff4859c43573b55e54866163cd34f4d828918", 0x40}], 0x6, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x98, 0x29, 0x37, {0x33, 0xf, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x2, [0x3, 0x3, 0x6, 0xc, 0x80, 0x9]}}, @padn={0x1, 0x1, [0x0]}, @generic={0x9, 0x29, "de014bf268154827eb7a5c07e3b102a0af16fc644cdd2012b1aff0fc050658f6d79970230b724dfc69"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xb0}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x95e9, @remote, 0xfa}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000800)="e46a1060d65ff02c96f88080a3d2fd57e6075ed6ae80ca8b18c124b1489450d7e4398f461238fc405e5f0eebebef368a5c28ea2a2e082ae09578034ed922d6da0dbdf41d002a4881caaea5d7cfc3133003299dcb02cf532b360d18de68fe7b029db65708248b9fcc2289cca3870df25ae5a64759", 0x74}, {&(0x7f0000000880)="ecfff57b7784476bba14921aca3be435c24ee317a554914cc4a1b475bbeec19efa684e38639151062d6dc785660776e283083e78a6ff0095d3fda8982af1aceb553033134eb801905a90fa9b40fae109d71ebb8506e7981b90aae8001e5e30156fd3371feeab02e48fb8dd9c2297482fb757d03dc435265897b6bb75e59779dbb4095192f172613e35dac591f62bb98dce8b87f2f0c505b674e9241a2e1ad13c35ca953b485ed22bacd8a092757087fad03a9211dd", 0xb5}], 0x2}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000026c0)="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", 0x1000}, {&(0x7f0000000980)="a1184520b5c18b2738f1e8d839123116e9a2a77a2eef46435f499f2823e34686f48f3db35f7257224a1d5282267f15089b936684a8ed09baee02dd983fe375", 0x3f}, {&(0x7f00000009c0)="a5286d7efccb2642b3e3733189f8e4633c86a4a7e68979e7d00b3d37e28088972bb2a364ccf768ec367ea22759954237", 0x30}, {&(0x7f0000000a00)="13ca90d33cd3246ac666f7f45aa41f9fddb224d28807d73f587d43d205939c2aff26528e2c4c0e97b2bab7a6c36212ce053ab564467db718a6db21040b905691eb20616eb5c7ca889dd007ea7c845c127b00e379e71f8be793a68b98370d66335b4f74e5383d07344893c2da3f58544ff065f4ee206baf9e7cfd8e1c2b482374d9190912c916b4c15800981142777f7e93e46cf01e36ff4c81ad17247c94c3cd6e79e7a89d4aa1e5ad2ae31114d959b437e29b0aadef1b39ad62ff72e0b57f0010af4c2b20cfac487244", 0xca}], 0x4, &(0x7f0000000c80)=[@hoplimit={{0x14, 0x29, 0x34, 0xf00}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x88, 0x10, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x55, "e312064dcde61d79e48a0e9ed90f07dd72e37509c957eb15b9e0b1c4d0b2f911f6ef85534a05a82bc99df86e3147b63d988581c9e922c004a3743d79c6e6f00c0ee4768b39d180379e8ce69a844a9eaeb4bbe95d4f"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x4}, @pad1]}}}, @hopopts={{0x90, 0x29, 0x36, {0x82, 0xe, '\x00', [@generic={0x1, 0x71, "db38038154d85e8b2476855178e71de859ed3233aa9c30a6bcce7cdff6f0e4c1bd956a3580101538edc72f850a144ad71b19477361ca4126c4a1e3eea2108f8cbe3708e6c15b58087d96959e0781a5e9e27ac45357179e2c25a063577012d0951185d6fa6e4a61fdc6cef3a2d2d658485a"}]}}}], 0x160}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x86d, @private2, 0x9}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000b80)="9b88df5f87a81f655ab1d96de813d387c437bfdcde5b6ec566ec2d12dd804b68f5fb731ba567e0fae221ad7069f4deefb3c31c5208cec93f89ff5041079aeb398b85a9847b0d5e7cb02e898ab14422ef6f2ecdc19010c17e40364725e6811dfb18a3e05e9d", 0x65}, {&(0x7f0000000c00)="bac910cb36515d5904b666780f85613d2d555e", 0x13}, {&(0x7f0000000e80)="1028f3dfdea359e3eee1b661a6b3e79de5b2e18b023a9418b502cf497cc36fd7034da52910c01848229e21227ff9f04d87de5062db363c0a997b139248e29131fb3c5db40674de86a12c", 0x4a}, {&(0x7f0000000f00)="a7194abb9ea3d2c4eb685916aba33448c4613007955d07841192c7f6c0933d6c897b73a2ea407f4e2ac6759d62a7fd350e772b8d9f74d69314dff1bfa13d7ec07e5d72ca70ad0ecdbb1c282d23679ad59d74449b7ff8f4e008948474a0db118a947360185d7d9273947c1efe43260a3f02547cfa2bbd99e0963692dc681899062eb4ea10f403e271be3d5cbf234d63289a80a0ca763a75d6f98a2d0930af87ed85bd6b02e7e43b64e502110c04d9a1", 0xaf}, {&(0x7f0000000fc0)="1bc7e993d6369d179c6bfcc277f30c23c3336e77e217b52972ca09a0af3faf02b2a24c1aac27b858f4b90e96cf5d75da93b04eb1bff4dab88ed7ed889acaa40b3bba8a8a11ca9c356769ea9fcd354c76020d3440df08ded269ab17b243e896c501a4a9d0d77d601c0f16e427832a38a823ee9dff92879427cab4bef0184881d4528fbc31b4e0196cec3a3f4596a0469d03eac4a75a98ee6ce86f5536dc854223475445340065e45a484ece86be0be76e0a552155f2622b6a914a43937ee461ecbcbbe981c447d4598511c4969977bea0d7b7235cd106f1a058", 0xd9}], 0x5}}], 0x4, 0x20000000)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}})
r8 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000000c40)=[{{0x0, 0x0, 0xfffffffffffffffc, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
ioctl$sock_bt_hci(r8, 0x400448df, &(0x7f0000000200)="694a7bde496bba755e9de1e4e2b79fcdcdcd75f18c4ac64a7f0dbe0e438619dacf8fe56a8210d23b1716e719c4497363dff05008366eb1fa02fd8fba7163fe7e30efe124a6855329d6db1e0cc06f1c71ff7fb153c9e90c0a093c229005ae021a88bae3546ce7e0a40cfc6deb5c3a52c21e6ac8b48c1eb5f34bb8a327e7e9bdfdf85eae2036f5cda86952fa2de51be4087d2f10f8a04a030c01a000c968094f68a537510428306b9f2f22d024b0e51869064d6e9cd93c46e2d3f578ae22265df79968a2208832b5601350d229d64b6a")
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

2.567788009s ago: executing program 3 (id=988):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000080)={<r3=>0x0, 0x99f, 0x1, [0xffff, 0x3, 0xfffffffffffff548, 0x5], [0xffffffffffff7fff, 0xf, 0x7ff, 0x2, 0x7c, 0x3, 0x2, 0x5, 0x1, 0xe, 0x1, 0x9, 0x8, 0xf5, 0x81, 0x800, 0x3, 0x3, 0x3, 0x0, 0x5, 0x5, 0x10001, 0x0, 0x1, 0xc5, 0x8, 0x9, 0x0, 0x6, 0x6, 0x1, 0x9, 0x7085, 0x7, 0x6, 0x2, 0xb, 0xc81, 0x0, 0x8, 0x2, 0x3, 0x3, 0x7, 0xeaec, 0x5, 0x491, 0x8, 0x9, 0x2, 0x1, 0x6, 0x5, 0x7, 0x569b, 0xffff, 0x9, 0x0, 0x3, 0x8000000000000001, 0x8c, 0x7, 0x6, 0x5, 0x69, 0xc61, 0xc, 0x2, 0xc, 0x5, 0x4, 0x100, 0x5, 0x8, 0xbe, 0x761e, 0x800, 0x400, 0x2, 0x7fffffff, 0x8, 0x5, 0x1, 0x0, 0x1, 0xee, 0x5, 0x1644c00000, 0xfffffffffffffffc, 0x8, 0xc12f, 0x8e2, 0x6, 0x3, 0x200, 0x5711, 0x0, 0xf306, 0x5, 0x5, 0x6, 0x42627bb8, 0x40, 0x5, 0xffffffff, 0x4d8, 0x6, 0x0, 0x40, 0x473d, 0x4, 0x7f, 0x1b, 0x6, 0xfff, 0x0, 0xe, 0xcf0, 0x3, 0xdf]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000009c0)={r3, 0x9, 0x1})
r4 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.209616174s ago: executing program 3 (id=990):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', <r2=>0x0})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000040)=""/9, 0x9}, 0x0, 0x70}}], 0x30, 0x20000000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000001140)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xa, 0x3, 0x3, 0x1a, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x6, 0x8c, 0x2, 0x60000000}, @sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x9}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@broadcast, 0x10, 0x10, 0x14}, @sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x6e6bbd, 0x2, {0x6, 0x2b, 0x3, 0x3, 0x0, 0xd, 0x0, @in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_address={0x3, 0x5, 0x32, 0x20, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast2}}]}, 0xd0}}, 0xc040)
sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r6], 0x44}}, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty, r2}, 0x14)
close(r1)

1.133414871s ago: executing program 4 (id=991):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)='\x00'/16, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r3 = socket(0x10, 0x2, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000fffb00000000"], 0x2c}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000079d80000ffff0000005b8f00080008008107"], 0x34}}, 0x0)

960.7052ms ago: executing program 1 (id=993):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

923.770086ms ago: executing program 4 (id=994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000010005a800c00"], 0x38}}, 0x0)

865.727475ms ago: executing program 1 (id=995):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000016c0)={0x0, 0x37, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x840fca6cdad20cbf}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x4000090)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', 0xffffffffffffffff, 0x0, 0x800000000}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9)
r6 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x5, 0x1, 0x81, 0x20, r3, 0x8, '\x00', 0x0, r7, 0x0, 0x0, 0x3, 0x4, @void, @value, @void, @value}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000b06010800009cd000000800060000020500010007000000e8ff020073797a310000e8ffaccf9d88af6a4baa6b1ac3ee9c74daa670294900142ccfa2c3159a4e73c11145f8c08020866900efcef6e489866e9f14070000004d7516f7f70bb7cd917327c8ed5f9103e47c2a759b589e92bfe172b3d4530265f9879155d9719d1dcde3c08c60521160e9c54ca3524e23f1b5fd332e0266ce6f74430c4941952ad7f6756f4d68114da5044d879d0a989286e8030172528c371610f1e4ab733ac2b4f5041a7cf1d8d78a37d416e3cb7eddff8bcb869ed0b23148193797031973258c5d6cc82e7c172c12f1dd88e400c3826a4d000000000000000000000058e4f9b46ad045dfbc169af50842e1a916193a40c4db1a57f1cd14493936cc1db393e3436546a1a0c824640517f6ee096a39ec0ac0172e0a2ed7d0f33a933192bd79fcd0"], 0x28}}, 0x4800)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg(r10, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000000000)="9636d58d897e54cb666a329f38ea48c50f42dc6ce94b63a561abceb259ef973b7fbd983710eab89101d93a", 0x2b}, {&(0x7f00000001c0)="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", 0x115}], 0x2}}], 0x1, 0x40080)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r11 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)

746.935675ms ago: executing program 2 (id=996):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x4000000)
socket$inet_udplite(0x2, 0x2, 0x88)

674.413048ms ago: executing program 1 (id=997):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)

648.382883ms ago: executing program 4 (id=998):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x2c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000600060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)

539.754428ms ago: executing program 1 (id=999):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c00028006000500810000001c0004800c00010006000000000000000c00019f0f0c0000090000000c0002000000000005000000060001000400000008000500", @ANYRES32=r3], 0x74}}, 0x0)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f00000000c0)=0x7, 0x1)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r5=>0x0, 0x9}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0x5, 0xe04f, 0xfffffffe, 0xb7, 0xe, 0x6}, &(0x7f00000000c0)=0x9c)

411.777777ms ago: executing program 4 (id=1000):
r0 = socket(0x1, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d4, 0x0)
ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000000)) (async)
ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000000))
ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000080)={'vxcan1\x00', 0x10})
listen(r1, 0x8001)

380.321225ms ago: executing program 4 (id=1001):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) (async)
socket$kcm(0x2b, 0x1, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="0349ee4707", 0x5}], 0x1}}], 0x1, 0x8090) (async)
shutdown(r0, 0x1)

358.514757ms ago: executing program 2 (id=1002):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x44)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48080)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x20004000)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xbffffff4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3e, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x4, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x44) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48080) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x20004000) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xbffffff4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, 0x1c) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3e, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) (async)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x4, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async)

246.260845ms ago: executing program 1 (id=1003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

245.163733ms ago: executing program 3 (id=1004):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0)
pselect6(0x42, &(0x7f0000000400)={0x0, 0x3, 0x2, 0xffffffff, 0x10001, 0xa, 0x3, 0x100000000}, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)={[0x81]}, 0x8})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, &(0x7f0000000100), &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88bb6d13", @ANYRES16=r5, @ANYBLOB="200029bd7000fddbdfa501000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="14000000040000000400000002000200006590d9e25eba3d0800000000000000f5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000fbdbdfc5020000008800010002000000080002000200000057ea36304f61c867fa35359e38490000000000000000e700000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c840}, 0x8098)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

132.15056ms ago: executing program 2 (id=1005):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

79.76284ms ago: executing program 2 (id=1006):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x44, 0x0, &(0x7f00000000c0))
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x1)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x1}}, 0x10, 0x0}, 0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r6=>0xffffffffffffffff}, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000200)="057337f1396e0e80663c933d7049ef099defbc6f45799bbf30b93e4d9dbdb473c71e045a5b5cc11e342703eb64926e33c2c7489f4aa74a23985a0adbd9583c03b3ac7a007283f0b363c7e72146736921890629f85d18c61844820b0dc2e13f0f6b73a3683891215eef9a9e044f480f5dde5ddf3c84f1e25afc48306f4821a37e3e37b5f80ccf37dbacce3f18107fc31fe2c4f426251533e3", &(0x7f0000000180)=@udp=r7, 0x4}, 0x20)

0s ago: executing program 1 (id=1007):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000880)="8476eded0c5111410dcfda2713c63aab668904e66e89c09bfe11ed2de1b716b076ac24a78d0e87204f4ea2528987222b185853678c365d092d42ac64d474c2cad3908a959e5b3e354c1c5e439ac1219aae91e1a78d71c2b062bafc659cf630d47c0d7f0813db1103f62bf833b4463cb6161cc7be725bb00f77d0299d89665aa9af39fb8e711dc2000b16083347250344d8b499415b72663cf18fd636725db1ade6abfffb31ae6509287bde1b399e2f8ba869931f976d0e0bc07737235f8c4bdb0b0daa976958aec26d81f08a179d850cb6e263658faab7f029524628807a6e92e88ae482f4d09518c2ec9bf9755d8644b71a55e3fe", &(0x7f0000000380)=""/188}, 0x20) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="080901"], 0x30}}, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

t device team_slave_0 added
[   81.385106][ T5849] Bluetooth: hci1: command tx timeout
[   81.419690][ T5845] team0: Port device team_slave_1 added
[   81.438153][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.445560][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.472738][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.489894][ T5841] team0: Port device team_slave_0 added
[   81.512098][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.520395][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.547076][ T5849] Bluetooth: hci2: command tx timeout
[   81.548476][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.572770][ T5841] team0: Port device team_slave_1 added
[   81.588501][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.595632][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.622038][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.638426][ T5849] Bluetooth: hci4: command tx timeout
[   81.638434][   T55] Bluetooth: hci3: command tx timeout
[   81.660808][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.667861][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.694209][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.730725][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.737783][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.763971][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.812313][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.820551][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.847235][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.873313][ T5844] hsr_slave_0: entered promiscuous mode
[   81.879758][ T5844] hsr_slave_1: entered promiscuous mode
[   81.886033][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.893633][ T5844] Cannot create hsr debugfs directory
[   81.917682][ T5845] hsr_slave_0: entered promiscuous mode
[   81.923960][ T5845] hsr_slave_1: entered promiscuous mode
[   81.930134][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.937877][ T5845] Cannot create hsr debugfs directory
[   81.989234][ T5841] hsr_slave_0: entered promiscuous mode
[   81.995914][ T5841] hsr_slave_1: entered promiscuous mode
[   82.001984][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.010148][ T5841] Cannot create hsr debugfs directory
[   82.028527][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.060766][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.099935][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.128123][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.233053][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.269729][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.281999][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.318755][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.434784][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.470010][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.484737][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.516495][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.535058][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.565393][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.583857][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.600149][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.675499][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.688610][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.717254][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.727945][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.772279][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.840694][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.876844][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   82.889757][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.897082][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.910531][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.942945][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.950166][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.962530][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.976578][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   83.012269][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   83.043419][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.050557][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.063254][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.070418][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.112036][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   83.122045][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.129194][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.144956][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.152066][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.188459][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.195655][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.230931][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.238117][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.261071][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.278165][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.384892][ T5849] Bluetooth: hci0: command tx timeout
[   83.421535][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.464757][ T5849] Bluetooth: hci1: command tx timeout
[   83.549094][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   83.587030][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.625172][ T5849] Bluetooth: hci2: command tx timeout
[   83.634579][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.641725][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.682191][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.689455][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.704457][ T5849] Bluetooth: hci4: command tx timeout
[   83.714490][ T5849] Bluetooth: hci3: command tx timeout
[   83.757495][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.803217][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.881929][ T5838] veth0_vlan: entered promiscuous mode
[   83.921638][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.936064][ T5838] veth1_vlan: entered promiscuous mode
[   84.036393][ T5844] veth0_vlan: entered promiscuous mode
[   84.065389][ T5844] veth1_vlan: entered promiscuous mode
[   84.119589][ T5838] veth0_macvtap: entered promiscuous mode
[   84.157314][ T5838] veth1_macvtap: entered promiscuous mode
[   84.198537][ T5834] veth0_vlan: entered promiscuous mode
[   84.228062][ T5844] veth0_macvtap: entered promiscuous mode
[   84.247683][ T5834] veth1_vlan: entered promiscuous mode
[   84.257240][ T5844] veth1_macvtap: entered promiscuous mode
[   84.270213][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.300383][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.323317][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.339192][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.352494][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.362146][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.371167][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.396370][ T5834] veth0_macvtap: entered promiscuous mode
[   84.423680][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.439328][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.450993][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.465463][ T5834] veth1_macvtap: entered promiscuous mode
[   84.472444][ T5841] veth0_vlan: entered promiscuous mode
[   84.484768][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.495807][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.507811][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.534892][ T5841] veth1_vlan: entered promiscuous mode
[   84.559131][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.579473][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.588890][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.599414][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.621321][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.633556][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.644396][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.655399][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.667046][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.704214][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.715388][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.726459][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.737519][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.749426][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.763673][ T5845] veth0_vlan: entered promiscuous mode
[   84.786222][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.795401][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.804832][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.813582][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.852026][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.861823][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.909730][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.918206][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.936838][ T5841] veth0_macvtap: entered promiscuous mode
[   84.946194][ T5845] veth1_vlan: entered promiscuous mode
[   84.960223][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.981358][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.025520][ T5841] veth1_macvtap: entered promiscuous mode
[   85.033159][ T5845] veth0_macvtap: entered promiscuous mode
[   85.064806][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.072686][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.073146][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.105497][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.121356][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.132033][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.141891][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.152668][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.171509][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.185599][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.188299][ T5845] veth1_macvtap: entered promiscuous mode
[   85.225165][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.239847][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.250077][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.260836][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.271013][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.282214][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.296250][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.307088][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.316902][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.326415][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.335231][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.366536][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.384484][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.395280][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.407496][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.424571][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.438342][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.448501][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.464375][ T5849] Bluetooth: hci0: command tx timeout
[   85.473311][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.491863][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.495316][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.519963][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.531906][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.542739][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.554155][ T5849] Bluetooth: hci1: command tx timeout
[   85.559688][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.569777][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.580319][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.594204][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.605205][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.617089][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.693192][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.697736][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.705216][ T5849] Bluetooth: hci2: command tx timeout
[   85.717477][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.738632][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.739815][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.764780][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.785747][ T5849] Bluetooth: hci3: command tx timeout
[   85.787439][   T55] Bluetooth: hci4: command tx timeout
[   85.825137][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'.
[   85.861876][ T5918] team_slave_0: entered promiscuous mode
[   85.867999][ T5918] team_slave_1: entered promiscuous mode
[   85.885505][ T5918] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.895023][ T5918] team_slave_0: left promiscuous mode
[   85.900474][ T5918] team_slave_1: left promiscuous mode
[   85.961533][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.990146][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.077615][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.109670][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.149436][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.163727][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.239499][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.272148][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.375710][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.414903][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.642451][ T5932] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   86.998109][   T26] cfg80211: failed to load regulatory.db
[   87.100894][ T5936] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.544588][   T55] Bluetooth: hci0: command tx timeout
[   87.624425][   T55] Bluetooth: hci1: command tx timeout
[   87.677271][ T5957] Zero length message leads to an empty skb
[   87.760424][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   87.807103][   T55] Bluetooth: hci2: command tx timeout
[   87.856393][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'.
[   87.864570][   T55] Bluetooth: hci3: command tx timeout
[   87.866014][ T5849] Bluetooth: hci4: command tx timeout
[   88.332331][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'.
[   88.490230][ T5973] nbd: socks must be embedded in a SOCK_ITEM attr
[   89.499087][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   89.938199][ T5999] ip6tnl1: entered promiscuous mode
[   89.943481][ T5999] ip6tnl1: entered allmulticast mode
[   90.012462][ T5999] team0: Device ip6tnl1 is of different type
[   90.414943][ T6022] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.23'.
[   90.733544][ T6033] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   90.762426][ T6037] netlink: 'syz.1.26': attribute type 10 has an invalid length.
[   90.882495][ T6037] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   91.299265][ T6047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'.
[   91.615283][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'.
[   91.755865][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.852986][ T6065] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET)
[   91.936688][ T6075] netlink: 'syz.2.33': attribute type 27 has an invalid length.
[   92.206786][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.215392][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.457006][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.470734][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.599131][ T6075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.611084][ T6075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.623044][ T6075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.633804][ T6075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.723488][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.731467][ T6068] 8021q: adding VLAN 0 to HW filter on device team0
[   92.742681][ T6068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.730756][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'.
[   93.926247][ T6068] syz.2.33 (6068) used greatest stack depth: 17400 bytes left
[   94.383986][ T6150] netlink: 188 bytes leftover after parsing attributes in process `syz.2.48'.
[   94.528921][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[   94.554998][ T6155] vxcan1: entered allmulticast mode
[   94.611052][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   94.647725][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[   94.674248][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'.
[   94.704275][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.51'.
[   94.795310][ T6160] FAULT_INJECTION: forcing a failure.
[   94.795310][ T6160] name failslab, interval 1, probability 0, space 0, times 1
[   94.850097][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.0.51 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[   94.850138][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   94.850154][ T6160] Call Trace:
[   94.850162][ T6160]  <TASK>
[   94.850171][ T6160]  dump_stack_lvl+0x241/0x360
[   94.850206][ T6160]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.850230][ T6160]  ? __pfx__printk+0x10/0x10
[   94.850254][ T6160]  ? fs_reclaim_acquire+0x93/0x130
[   94.850277][ T6160]  ? __pfx___might_resched+0x10/0x10
[   94.850312][ T6160]  should_fail_ex+0x40a/0x550
[   94.850368][ T6160]  should_failslab+0xac/0x100
[   94.850399][ T6160]  __kmalloc_cache_noprof+0x70/0x390
[   94.850428][ T6160]  ? nbd_add_socket+0x368/0xad0
[   94.850461][ T6160]  nbd_add_socket+0x368/0xad0
[   94.850496][ T6160]  ? __pfx_nbd_genl_size_set+0x10/0x10
[   94.850525][ T6160]  ? __pfx_nbd_add_socket+0x10/0x10
[   94.850556][ T6160]  ? __nla_parse+0x40/0x60
[   94.850585][ T6160]  nbd_genl_connect+0x145b/0x1c80
[   94.850628][ T6160]  ? __pfx_nbd_genl_connect+0x10/0x10
[   94.850671][ T6160]  ? __nla_parse+0x40/0x60
[   94.850699][ T6160]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[   94.850738][ T6160]  genl_rcv_msg+0xb1f/0xec0
[   94.850775][ T6160]  ? __pfx_genl_rcv_msg+0x10/0x10
[   94.850835][ T6160]  ? __pfx_lock_acquire+0x10/0x10
[   94.850867][ T6160]  ? __pfx_nbd_genl_connect+0x10/0x10
[   94.850896][ T6160]  ? __pfx___might_resched+0x10/0x10
[   94.850937][ T6160]  netlink_rcv_skb+0x206/0x480
[   94.850971][ T6160]  ? __pfx_genl_rcv_msg+0x10/0x10
[   94.850999][ T6160]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   94.851077][ T6160]  genl_rcv+0x28/0x40
[   94.851100][ T6160]  netlink_unicast+0x7f6/0x990
[   94.851140][ T6160]  ? __pfx_netlink_unicast+0x10/0x10
[   94.851168][ T6160]  ? __virt_addr_valid+0x45f/0x530
[   94.851190][ T6160]  ? __phys_addr_symbol+0x2f/0x70
[   94.851209][ T6160]  ? __check_object_size+0x47a/0x730
[   94.851244][ T6160]  netlink_sendmsg+0x8de/0xcb0
[   94.851280][ T6160]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.851306][ T6160]  ? aa_sock_msg_perm+0x91/0x160
[   94.851348][ T6160]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.851367][ T6160]  __sock_sendmsg+0x221/0x270
[   94.851405][ T6160]  ____sys_sendmsg+0x53a/0x860
[   94.851442][ T6160]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.851466][ T6160]  ? __fget_files+0x2a/0x410
[   94.851501][ T6160]  ? __fget_files+0x2a/0x410
[   94.851543][ T6160]  __sys_sendmsg+0x269/0x350
[   94.851576][ T6160]  ? __pfx___sys_sendmsg+0x10/0x10
[   94.851619][ T6160]  ? do_sys_openat2+0x17a/0x1d0
[   94.851684][ T6160]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   94.851718][ T6160]  ? do_syscall_64+0x100/0x230
[   94.851754][ T6160]  ? do_syscall_64+0xb6/0x230
[   94.851789][ T6160]  do_syscall_64+0xf3/0x230
[   94.851819][ T6160]  ? clear_bhb_loop+0x35/0x90
[   94.851853][ T6160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.851890][ T6160] RIP: 0033:0x7fa97b38d169
[   94.851912][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.851928][ T6160] RSP: 002b:00007fa97c17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.851950][ T6160] RAX: ffffffffffffffda RBX: 00007fa97b5a5fa0 RCX: 00007fa97b38d169
[   94.851964][ T6160] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d
[   94.851976][ T6160] RBP: 00007fa97c17f090 R08: 0000000000000000 R09: 0000000000000000
[   94.851989][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.852000][ T6160] R13: 0000000000000000 R14: 00007fa97b5a5fa0 R15: 00007ffe1e82c5d8
[   94.852040][ T6160]  </TASK>
[   94.872970][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   96.615352][ T6207] Bluetooth: MGMT ver 1.23
[   96.715387][ T6214] __nla_validate_parse: 4 callbacks suppressed
[   96.715407][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'.
[   96.917642][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'.
[   96.966094][ T6219] nbd: socks must be embedded in a SOCK_ITEM attr
[   97.043345][ T6223] syz.3.68 uses old SIOCAX25GETINFO
[   97.773611][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.77'.
[   97.869923][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'.
[   97.908345][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'.
[   97.919106][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'.
[   98.040329][ T6246] team0 (unregistering): Port device team_slave_0 removed
[   98.068901][ T6246] team0 (unregistering): Port device team_slave_1 removed
[   98.077345][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'.
[   98.121167][ T6254] bridge0: entered promiscuous mode
[   98.129696][ T6247] netlink: 'syz.0.77': attribute type 10 has an invalid length.
[   98.134619][ T6254] ip6gretap0: entered promiscuous mode
[   98.190561][ T6264] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4)
[   98.221510][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.321367][ T6247] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   98.543198][ T6271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.080562][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'.
[   99.190215][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'.
[   99.260738][ T6299] bridge_slave_1: left allmulticast mode
[   99.286061][ T6299] bridge_slave_1: left promiscuous mode
[   99.293040][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.396652][ T6299] bridge_slave_0: left allmulticast mode
[   99.407529][ T6299] bridge_slave_0: left promiscuous mode
[   99.445059][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.755609][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.93'.
[  100.279618][ T6323] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  101.007666][ T6349] openvswitch: netlink: IP tunnel dst address not specified
[  101.031031][ T6349] 8021q: VLANs not supported on wg2
[  101.486900][ T5883] IPVS: starting estimator thread 0...
[  101.604424][ T6364] IPVS: using max 19 ests per chain, 45600 per kthread
[  101.825376][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.838251][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.720265][ T6393] __nla_validate_parse: 3 callbacks suppressed
[  102.720284][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'.
[  102.825116][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'.
[  102.884234][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.118'.
[  102.971079][ T6393] FAULT_INJECTION: forcing a failure.
[  102.971079][ T6393] name failslab, interval 1, probability 0, space 0, times 0
[  103.019889][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.4.118 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  103.019918][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.019931][ T6393] Call Trace:
[  103.019938][ T6393]  <TASK>
[  103.019947][ T6393]  dump_stack_lvl+0x241/0x360
[  103.019979][ T6393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.020002][ T6393]  ? __pfx__printk+0x10/0x10
[  103.020026][ T6393]  ? __kmalloc_noprof+0xb5/0x4c0
[  103.020102][ T6393]  ? __pfx___might_resched+0x10/0x10
[  103.020138][ T6393]  should_fail_ex+0x40a/0x550
[  103.020185][ T6393]  should_failslab+0xac/0x100
[  103.020217][ T6393]  __kmalloc_noprof+0xdd/0x4c0
[  103.020246][ T6393]  ? kobject_get_path+0xc1/0x2c0
[  103.020285][ T6393]  kobject_get_path+0xc1/0x2c0
[  103.020326][ T6393]  kobject_uevent_env+0x2a5/0x8e0
[  103.020361][ T6393]  set_disk_ro+0x20c/0x280
[  103.020383][ T6393]  ? __pfx_set_disk_ro+0x10/0x10
[  103.020406][ T6393]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  103.020429][ T6393]  ? nbd_add_socket+0x659/0xad0
[  103.020468][ T6393]  nbd_start_device+0x202/0xab0
[  103.020501][ T6393]  ? __nla_parse+0x40/0x60
[  103.020530][ T6393]  nbd_genl_connect+0x157c/0x1c80
[  103.020573][ T6393]  ? __pfx_nbd_genl_connect+0x10/0x10
[  103.020616][ T6393]  ? __nla_parse+0x40/0x60
[  103.020644][ T6393]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  103.020682][ T6393]  genl_rcv_msg+0xb1f/0xec0
[  103.020717][ T6393]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.020783][ T6393]  ? __pfx_lock_acquire+0x10/0x10
[  103.020815][ T6393]  ? __pfx_nbd_genl_connect+0x10/0x10
[  103.020845][ T6393]  ? __pfx___might_resched+0x10/0x10
[  103.020886][ T6393]  netlink_rcv_skb+0x206/0x480
[  103.020921][ T6393]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.020950][ T6393]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.021021][ T6393]  genl_rcv+0x28/0x40
[  103.021044][ T6393]  netlink_unicast+0x7f6/0x990
[  103.021094][ T6393]  ? __pfx_netlink_unicast+0x10/0x10
[  103.021122][ T6393]  ? __virt_addr_valid+0x45f/0x530
[  103.021144][ T6393]  ? __phys_addr_symbol+0x2f/0x70
[  103.021164][ T6393]  ? __check_object_size+0x47a/0x730
[  103.021198][ T6393]  netlink_sendmsg+0x8de/0xcb0
[  103.021234][ T6393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.021261][ T6393]  ? aa_sock_msg_perm+0x91/0x160
[  103.021302][ T6393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.021321][ T6393]  __sock_sendmsg+0x221/0x270
[  103.021358][ T6393]  ____sys_sendmsg+0x53a/0x860
[  103.021396][ T6393]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.021420][ T6393]  ? __fget_files+0x2a/0x410
[  103.021455][ T6393]  ? __fget_files+0x2a/0x410
[  103.021498][ T6393]  __sys_sendmsg+0x269/0x350
[  103.021531][ T6393]  ? __pfx___sys_sendmsg+0x10/0x10
[  103.021574][ T6393]  ? do_sys_openat2+0x17a/0x1d0
[  103.021639][ T6393]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  103.021674][ T6393]  ? do_syscall_64+0x100/0x230
[  103.021710][ T6393]  ? do_syscall_64+0xb6/0x230
[  103.021745][ T6393]  do_syscall_64+0xf3/0x230
[  103.021777][ T6393]  ? clear_bhb_loop+0x35/0x90
[  103.021811][ T6393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.021852][ T6393] RIP: 0033:0x7f5d44d8d169
[  103.021870][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.021886][ T6393] RSP: 002b:00007f5d45baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.021908][ T6393] RAX: ffffffffffffffda RBX: 00007f5d44fa6080 RCX: 00007f5d44d8d169
[  103.021922][ T6393] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d
[  103.021934][ T6393] RBP: 00007f5d45baf090 R08: 0000000000000000 R09: 0000000000000000
[  103.021947][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  103.021958][ T6393] R13: 0000000000000000 R14: 00007f5d44fa6080 R15: 00007ffeee51e578
[  103.021991][ T6393]  </TASK>
[  103.671431][ T5849] block nbd0: Receive control failed (result -107)
[  103.957613][ T6393] nbd0: detected capacity change from 0 to 256
[  103.967972][ T5837] block nbd0: Dead connection, failed to find a fallback
[  103.994248][ T5837] block nbd0: shutting down sockets
[  104.020785][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.070564][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'.
[  104.094484][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.102446][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.168492][ T6405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  104.201203][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.230070][ T6405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  104.239309][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.268744][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.316693][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.355014][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.397157][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.496457][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.517211][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.538058][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.775716][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.816780][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.876797][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.958471][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.994677][ T5837] ldm_validate_partition_table(): Disk read failed.
[  105.038508][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.082381][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  105.148982][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.167042][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  105.186599][ T5837] Dev nbd0: unable to read RDB block 0
[  105.193854][ T5837]  nbd0: unable to read partition table
[  105.216094][ T5837] ldm_validate_partition_table(): Disk read failed.
[  105.217841][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'.
[  105.231788][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[  105.250655][ T5837] Dev nbd0: unable to read RDB block 0
[  105.275065][ T6439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'.
[  105.281862][ T5837]  nbd0: unable to read partition table
[  105.336431][ T5849] block nbd1: Receive control failed (result -107)
[  105.374410][ T6439] nbd1: detected capacity change from 0 to 256
[  105.403559][ T5837] block nbd1: Dead connection, failed to find a fallback
[  105.450780][ T5837] block nbd1: shutting down sockets
[  105.477947][ T5837] ldm_validate_partition_table(): Disk read failed.
[  105.524709][ T5837] Dev nbd1: unable to read RDB block 0
[  105.551819][ T5837]  nbd1: unable to read partition table
[  105.568690][ T5837] ldm_validate_partition_table(): Disk read failed.
[  105.577068][ T5837] Dev nbd1: unable to read RDB block 0
[  105.583039][ T5837]  nbd1: unable to read partition table
[  133.067740][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  133.074379][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  155.385839][ T5849] Bluetooth: hci4: link tx timeout
[  155.391340][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  155.401390][ T5849] Bluetooth: hci4: link tx timeout
[  155.406657][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.465334][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  159.545171][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  194.507411][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.514028][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  201.704354][ T5149] Bluetooth: hci1: command 0x0406 tx timeout
[  201.710865][ T5149] Bluetooth: hci3: command 0x0406 tx timeout
[  201.714274][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  201.722922][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  215.294152][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'.
[  215.391481][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'.
[  216.332976][ T6657] netlink: 'syz.2.165': attribute type 12 has an invalid length.
[  216.350510][ T6658] xt_hashlimit: size too large, truncated to 1048576
[  217.205598][ T6674] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  217.784164][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.180'.
[  219.448847][ T6762] netlink: 'syz.0.213': attribute type 1 has an invalid length.
[  220.732383][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'.
[  220.934018][ T6774] netlink: 'syz.4.216': attribute type 1 has an invalid length.
[  220.942235][ T6774] netlink: 224 bytes leftover after parsing attributes in process `syz.4.216'.
[  221.057006][ T6780] netlink: 192 bytes leftover after parsing attributes in process `syz.3.219'.
[  221.369465][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'.
[  221.387781][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'.
[  222.136017][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'.
[  222.210462][ T6817] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  222.266169][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'.
[  222.761061][ T6842] lo: entered promiscuous mode
[  222.912653][ T6849] netlink: 'syz.3.239': attribute type 1 has an invalid length.
[  222.999076][ T6856] netlink: 277 bytes leftover after parsing attributes in process `syz.2.238'.
[  223.008962][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'.
[  223.065037][ T6859] netem: change failed
[  223.299494][ T6868] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[  223.320877][ T6868] netlink: 224 bytes leftover after parsing attributes in process `syz.1.242'.
[  223.548486][ T5836] block nbd2: Receive control failed (result -107)
[  223.574435][ T6871] nbd2: detected capacity change from 0 to 256
[  223.665070][ T6601] block nbd2: Dead connection, failed to find a fallback
[  223.686032][ T6601] block nbd2: shutting down sockets
[  223.702750][ T6601] blk_print_req_error: 64 callbacks suppressed
[  223.702972][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.740191][ T6601] buffer_io_error: 64 callbacks suppressed
[  223.740214][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  223.833349][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.857264][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  223.904373][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.913473][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  223.982893][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.007368][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.032641][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.057816][ T6892] openvswitch: netlink: IP tunnel dst address not specified
[  224.065426][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.073346][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.116385][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.134342][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.144603][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.152520][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.165268][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.173233][ T6601] ldm_validate_partition_table(): Disk read failed.
[  224.180150][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.189450][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.197543][ T6601] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.198098][ T6898] netlink: 'syz.0.250': attribute type 2 has an invalid length.
[  224.229035][ T6601] Buffer I/O error on dev nbd2, logical block 0, async page read
[  224.241133][ T6898] netlink: 'syz.0.250': attribute type 4 has an invalid length.
[  224.265993][ T6601] Dev nbd2: unable to read RDB block 0
[  224.272357][ T6601]  nbd2: unable to read partition table
[  224.290746][ T6601] ldm_validate_partition_table(): Disk read failed.
[  224.299624][ T6900] netlink: 'syz.1.251': attribute type 10 has an invalid length.
[  224.311394][ T6601] Dev nbd2: unable to read RDB block 0
[  224.324860][ T6601]  nbd2: unable to read partition table
[  224.351392][ T6900] bond0: (slave netdevsim0): Releasing backup interface
[  224.376163][ T6900] team0: Port device netdevsim0 added
[  224.388567][ T6900] netlink: 'syz.1.251': attribute type 10 has an invalid length.
[  224.402291][ T6900] team0: Port device netdevsim0 removed
[  224.410635][ T6900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  224.523541][ T6906] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[  224.844425][ T6916] netlink: 'syz.0.257': attribute type 10 has an invalid length.
[  224.994790][ T6916] team0: Port device dummy0 added
[  225.186751][ T6925] macvtap1: entered promiscuous mode
[  225.193106][ T6925] bond_slave_0: entered promiscuous mode
[  225.199064][ T6925] bond_slave_1: entered promiscuous mode
[  225.206573][ T6925] bond0: entered promiscuous mode
[  225.218260][ T6925] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  225.231619][ T6929] nbd: socks must be embedded in a SOCK_ITEM attr
[  225.239764][ T6925] team0: Device macvtap1 failed to register rx_handler
[  225.251950][ T6925] bond0: left promiscuous mode
[  225.271880][ T6925] bond_slave_0: left promiscuous mode
[  225.277434][ T6925] bond_slave_1: left promiscuous mode
[  225.713491][ T6944] netlink: 'syz.0.266': attribute type 10 has an invalid length.
[  226.190687][ T6969] netlink: 'syz.3.272': attribute type 8 has an invalid length.
[  226.497497][ T6976] netlink: zone id is out of range
[  226.502895][ T6976] netlink: zone id is out of range
[  226.510055][ T6976] netlink: zone id is out of range
[  226.515790][ T6976] netlink: zone id is out of range
[  226.521136][ T6976] netlink: zone id is out of range
[  226.527174][ T6976] netlink: zone id is out of range
[  226.532573][ T6976] netlink: zone id is out of range
[  226.538386][ T6976] netlink: zone id is out of range
[  226.543754][ T6976] netlink: zone id is out of range
[  226.835230][ T6982] __nla_validate_parse: 10 callbacks suppressed
[  226.835254][ T6982] netlink: 192 bytes leftover after parsing attributes in process `syz.1.277'.
[  227.100494][ T6996] netlink: 508 bytes leftover after parsing attributes in process `syz.0.279'.
[  227.220013][ T6999] netlink: 224 bytes leftover after parsing attributes in process `syz.3.281'.
[  227.246260][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'.
[  227.280958][ T7000] nbd: socks must be embedded in a SOCK_ITEM attr
[  227.297625][ T6782] block nbd64: NBD_DISCONNECT
[  227.582721][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'.
[  227.608224][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'.
[  227.618415][ T7013] netlink: 32 bytes leftover after parsing attributes in process `syz.3.285'.
[  227.719652][ T5836] block nbd3: Receive control failed (result -107)
[  227.744683][ T7013] nbd3: detected capacity change from 0 to 256
[  227.753004][ T6782] block nbd3: Dead connection, failed to find a fallback
[  227.768982][ T6782] block nbd3: shutting down sockets
[  227.786204][ T6782] ldm_validate_partition_table(): Disk read failed.
[  227.809957][ T6782] Dev nbd3: unable to read RDB block 0
[  227.830562][ T6782]  nbd3: unable to read partition table
[  227.929196][ T6782] ldm_validate_partition_table(): Disk read failed.
[  227.938101][ T6782] Dev nbd3: unable to read RDB block 0
[  227.951681][ T6782]  nbd3: unable to read partition table
[  228.136839][ T7024] validate_nla: 1 callbacks suppressed
[  228.136858][ T7024] netlink: 'syz.2.289': attribute type 10 has an invalid length.
[  228.191240][ T7024] team0: Port device dummy0 added
[  228.414777][ T5882] IPVS: starting estimator thread 0...
[  228.451520][ T7044] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[  228.466384][ T7044] netlink: 224 bytes leftover after parsing attributes in process `syz.0.294'.
[  228.534815][ T7041] IPVS: using max 18 ests per chain, 43200 per kthread
[  228.659554][ T7053] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  228.875086][ T7053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.897353][ T7053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.925413][ T7053] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  228.956541][ T7053] bond0 (unregistering): Released all slaves
[  229.322851][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'.
[  229.438062][ T7069] nbd: socks must be embedded in a SOCK_ITEM attr
[  229.585152][ T7079] netlink: 'syz.4.302': attribute type 10 has an invalid length.
[  229.658529][ T7079] team0: Port device dummy0 added
[  229.751461][ T7088] netlink: 'syz.2.305': attribute type 1 has an invalid length.
[  229.912522][ T7093] netlink: 'syz.4.306': attribute type 1 has an invalid length.
[  229.965214][ T7093] netlink: 'syz.4.306': attribute type 1 has an invalid length.
[  230.009979][ T7093] netlink: 'syz.4.306': attribute type 2 has an invalid length.
[  230.038345][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'.
[  230.064937][ T7093] netlink: 'syz.4.306': attribute type 1 has an invalid length.
[  230.096774][ T7093] netlink: 'syz.4.306': attribute type 2 has an invalid length.
[  230.116280][ T7093] netlink: 'syz.4.306': attribute type 1 has an invalid length.
[  231.655374][ T7146] nbd: socks must be embedded in a SOCK_ITEM attr
[  231.873240][ T5882] IPVS: starting estimator thread 0...
[  231.879674][ T7153] net_ratelimit: 4 callbacks suppressed
[  231.879698][ T7153] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  231.974521][ T7163] IPVS: using max 18 ests per chain, 43200 per kthread
[  232.510396][ T7181] lo: entered allmulticast mode
[  232.524351][ T7181] lo: left allmulticast mode
[  232.578789][ T7194] __nla_validate_parse: 36 callbacks suppressed
[  232.578811][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'.
[  232.657954][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[  232.720801][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'.
[  233.512853][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'.
[  233.606815][ T7228] nbd: socks must be embedded in a SOCK_ITEM attr
[  233.715862][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'.
[  233.731828][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'.
[  233.734207][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  233.756933][ T7231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.348'.
[  233.830453][ T5836] block nbd4: Receive control failed (result -107)
[  233.870142][ T7231] nbd4: detected capacity change from 0 to 256
[  233.895313][ T6782] block nbd4: Dead connection, failed to find a fallback
[  233.902880][ T6782] block nbd4: shutting down sockets
[  233.908737][ T6782] blk_print_req_error: 64 callbacks suppressed
[  233.908755][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  233.924880][ T6782] buffer_io_error: 64 callbacks suppressed
[  233.924896][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  233.941960][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  233.952023][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.014490][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.042246][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.063771][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.080731][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.099302][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.114152][ T7248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  234.118933][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.121752][ T7248] IPv6: NLM_F_CREATE should be set when creating new route
[  234.154728][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.185643][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.213537][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.258296][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.266897][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'.
[  234.297688][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.319708][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.369509][ T6782] ldm_validate_partition_table(): Disk read failed.
[  234.388701][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.439620][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.475133][ T6782] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  234.540222][ T6782] Buffer I/O error on dev nbd4, logical block 0, async page read
[  234.562505][ T6782] Dev nbd4: unable to read RDB block 0
[  234.569779][ T7266] netlink: 192 bytes leftover after parsing attributes in process `syz.2.355'.
[  234.589264][ T6782]  nbd4: unable to read partition table
[  234.609003][ T6782] ldm_validate_partition_table(): Disk read failed.
[  234.623727][ T6782] Dev nbd4: unable to read RDB block 0
[  234.641418][ T6782]  nbd4: unable to read partition table
[  234.877255][ T5836] block nbd5: Receive control failed (result -107)
[  234.924301][ T7283] nbd5: detected capacity change from 0 to 256
[  234.932230][ T6601] block nbd5: Dead connection, failed to find a fallback
[  234.940076][ T6601] block nbd5: shutting down sockets
[  234.981958][ T6601] ldm_validate_partition_table(): Disk read failed.
[  234.990333][ T6601] Dev nbd5: unable to read RDB block 0
[  234.997020][ T6601]  nbd5: unable to read partition table
[  235.008097][ T6601] ldm_validate_partition_table(): Disk read failed.
[  235.015355][ T6601] Dev nbd5: unable to read RDB block 0
[  235.397845][ T6601]  nbd5: unable to read partition table
[  235.792725][ T7302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  235.814168][ T7302] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  236.294249][ T7319] syzkaller1: entered promiscuous mode
[  236.303483][ T7319] syzkaller1: entered allmulticast mode
[  236.317508][ T5836] block nbd6: Receive control failed (result -107)
[  236.374572][ T7318] nbd6: detected capacity change from 0 to 256
[  236.399321][ T6601] block nbd6: Dead connection, failed to find a fallback
[  236.434870][ T6601] block nbd6: shutting down sockets
[  236.461265][ T6601] ldm_validate_partition_table(): Disk read failed.
[  236.491414][ T6601] Dev nbd6: unable to read RDB block 0
[  236.511485][ T6601]  nbd6: unable to read partition table
[  236.541215][ T6601] ldm_validate_partition_table(): Disk read failed.
[  236.557724][ T6601] Dev nbd6: unable to read RDB block 0
[  236.595129][ T6601]  nbd6: unable to read partition table
[  236.995053][ T7336] FAULT_INJECTION: forcing a failure.
[  236.995053][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  237.057381][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.0.380 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  237.057409][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  237.057422][ T7336] Call Trace:
[  237.057429][ T7336]  <TASK>
[  237.057437][ T7336]  dump_stack_lvl+0x241/0x360
[  237.057490][ T7336]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.057515][ T7336]  ? __pfx__printk+0x10/0x10
[  237.057542][ T7336]  ? snprintf+0xda/0x120
[  237.057569][ T7336]  should_fail_ex+0x40a/0x550
[  237.057608][ T7336]  _copy_to_user+0x31/0xb0
[  237.057640][ T7336]  simple_read_from_buffer+0xca/0x150
[  237.057671][ T7336]  proc_fail_nth_read+0x1e9/0x250
[  237.057704][ T7336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.057737][ T7336]  ? rw_verify_area+0x243/0x630
[  237.057759][ T7336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.057790][ T7336]  vfs_read+0x1f8/0xb40
[  237.057814][ T7336]  ? fdget_pos+0x254/0x320
[  237.057847][ T7336]  ? __pfx___mutex_lock+0x10/0x10
[  237.057879][ T7336]  ? __pfx_vfs_read+0x10/0x10
[  237.057898][ T7336]  ? do_sys_openat2+0x17a/0x1d0
[  237.057932][ T7336]  ? __fget_files+0x2a/0x410
[  237.057965][ T7336]  ? __fget_files+0x395/0x410
[  237.057994][ T7336]  ? __fget_files+0x2a/0x410
[  237.058035][ T7336]  ksys_read+0x18f/0x2b0
[  237.058060][ T7336]  ? __pfx_ksys_read+0x10/0x10
[  237.058084][ T7336]  ? do_syscall_64+0x100/0x230
[  237.058119][ T7336]  ? do_syscall_64+0xb6/0x230
[  237.058154][ T7336]  do_syscall_64+0xf3/0x230
[  237.058184][ T7336]  ? clear_bhb_loop+0x35/0x90
[  237.058217][ T7336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.058245][ T7336] RIP: 0033:0x7fa97b38bb7c
[  237.058270][ T7336] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  237.058285][ T7336] RSP: 002b:00007fa97c17f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.058315][ T7336] RAX: ffffffffffffffda RBX: 00007fa97b5a5fa0 RCX: 00007fa97b38bb7c
[  237.058329][ T7336] RDX: 000000000000000f RSI: 00007fa97c17f0a0 RDI: 0000000000000004
[  237.058342][ T7336] RBP: 00007fa97c17f090 R08: 0000000000000000 R09: 0000000000000000
[  237.058354][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.058366][ T7336] R13: 0000000000000000 R14: 00007fa97b5a5fa0 R15: 00007ffe1e82c5d8
[  237.058401][ T7336]  </TASK>
[  237.070500][ T7340] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  237.427366][ T7346] validate_nla: 66 callbacks suppressed
[  237.427387][ T7346] netlink: 'syz.1.384': attribute type 1 has an invalid length.
[  237.805345][ T7353] sctp: [Deprecated]: syz.1.386 (pid 7353) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.805345][ T7353] Use struct sctp_sack_info instead
[  237.851761][ T7353] sctp: [Deprecated]: syz.1.386 (pid 7353) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.851761][ T7353] Use struct sctp_sack_info instead
[  237.884758][ T7353] __nla_validate_parse: 11 callbacks suppressed
[  237.884779][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'.
[  238.419053][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'.
[  238.541644][ T7375] syzkaller1: entered promiscuous mode
[  238.560732][ T7375] syzkaller1: entered allmulticast mode
[  238.702739][ T7347] netlink: 'syz.0.383': attribute type 39 has an invalid length.
[  238.844606][ T7385] FAULT_INJECTION: forcing a failure.
[  238.844606][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.870933][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.3.396 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  238.870961][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  238.870974][ T7385] Call Trace:
[  238.870980][ T7385]  <TASK>
[  238.870989][ T7385]  dump_stack_lvl+0x241/0x360
[  238.871021][ T7385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.871045][ T7385]  ? __pfx__printk+0x10/0x10
[  238.871074][ T7385]  ? snprintf+0xda/0x120
[  238.871102][ T7385]  should_fail_ex+0x40a/0x550
[  238.871140][ T7385]  _copy_to_user+0x31/0xb0
[  238.871172][ T7385]  simple_read_from_buffer+0xca/0x150
[  238.871203][ T7385]  proc_fail_nth_read+0x1e9/0x250
[  238.871237][ T7385]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.871271][ T7385]  ? rw_verify_area+0x243/0x630
[  238.871293][ T7385]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.871334][ T7385]  vfs_read+0x1f8/0xb40
[  238.871358][ T7385]  ? fdget_pos+0x254/0x320
[  238.871390][ T7385]  ? __pfx___mutex_lock+0x10/0x10
[  238.871422][ T7385]  ? __pfx_vfs_read+0x10/0x10
[  238.871448][ T7385]  ? __fget_files+0x2a/0x410
[  238.871481][ T7385]  ? __fget_files+0x395/0x410
[  238.871510][ T7385]  ? __fget_files+0x2a/0x410
[  238.871551][ T7385]  ksys_read+0x18f/0x2b0
[  238.871576][ T7385]  ? __pfx_ksys_read+0x10/0x10
[  238.871599][ T7385]  ? do_syscall_64+0x100/0x230
[  238.871634][ T7385]  ? do_syscall_64+0xb6/0x230
[  238.871668][ T7385]  do_syscall_64+0xf3/0x230
[  238.871700][ T7385]  ? clear_bhb_loop+0x35/0x90
[  238.871734][ T7385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.871762][ T7385] RIP: 0033:0x7fc79e58bb7c
[  238.871781][ T7385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  238.871797][ T7385] RSP: 002b:00007fc79c3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  238.871820][ T7385] RAX: ffffffffffffffda RBX: 00007fc79e7a6080 RCX: 00007fc79e58bb7c
[  238.871835][ T7385] RDX: 000000000000000f RSI: 00007fc79c3f60a0 RDI: 000000000000000a
[  238.871848][ T7385] RBP: 00007fc79c3f6090 R08: 0000000000000000 R09: 0000000000000000
[  238.871860][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  238.871872][ T7385] R13: 0000000000000000 R14: 00007fc79e7a6080 R15: 00007ffcc37afdf8
[  238.871903][ T7385]  </TASK>
[  239.152482][ T7389] warning: `syz.1.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  239.484279][ T7395] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  239.536724][ T7396] netlink: 188 bytes leftover after parsing attributes in process `syz.3.399'.
[  239.647702][ T7400] bridge: RTM_NEWNEIGH with invalid ether address
[  240.713903][ T7434] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  240.813316][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'.
[  240.854524][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'.
[  240.884393][ T7441] netlink: 80 bytes leftover after parsing attributes in process `syz.2.413'.
[  240.926734][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[  240.927581][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[  240.975531][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[  241.312428][ T7465] netlink: 244 bytes leftover after parsing attributes in process `syz.1.420'.
[  241.464261][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  241.545290][ T7471] team0: Port device dummy0 removed
[  241.557487][ T7471] bridge_slave_0: left allmulticast mode
[  241.563222][ T7471] bridge_slave_0: left promiscuous mode
[  241.596115][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.646231][ T7471] bridge_slave_1: left allmulticast mode
[  241.692162][ T7471] bridge_slave_1: left promiscuous mode
[  241.729840][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.780506][ T7471] team0: Port device team_slave_0 removed
[  241.832618][ T7471] team0: Port device team_slave_1 removed
[  241.860152][ T7471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.872812][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.890787][ T7471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.901092][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.945514][ T7484] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.169617][ T7530] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.436515][ T7537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.466052][ T7504] __nla_validate_parse: 4 callbacks suppressed
[  243.466071][ T7504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.431'.
[  243.691274][ T7537] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  243.748239][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.757079][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.866514][ T7552] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004
[  243.900313][ T7552] netlink: 'syz.4.446': attribute type 6 has an invalid length.
[  244.116137][ T7559] netlink: 'syz.0.449': attribute type 1 has an invalid length.
[  244.183822][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  244.239408][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  244.258170][ T7567] IPVS: set_ctl: invalid protocol: 137 172.20.20.66:20002
[  244.304990][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'.
[  244.338878][ T7561] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[  244.366695][ T7561] nbd: error processing sock list
[  244.454380][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'.
[  244.518428][ T7575] syzkaller1: entered promiscuous mode
[  244.537723][ T7575] syzkaller1: entered allmulticast mode
[  244.712711][ T7584] netlink: 'syz.0.458': attribute type 10 has an invalid length.
[  244.730160][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.738371][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.772672][ T7588] xt_cgroup: invalid path, errno=-2
[  244.868398][ T7592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'.
[  244.933905][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.957547][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.078411][ T7575] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.091157][ T7575] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.102935][ T7575] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.122191][ T7575] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.258465][ T7602] netlink: 'syz.3.462': attribute type 1 has an invalid length.
[  245.296986][ T7604] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[  245.357848][ T7584] team0: Port device dummy0 added
[  245.614855][ T7613] netlink: 'syz.2.465': attribute type 2 has an invalid length.
[  245.959302][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[  246.091703][ T7631] netlink: 192 bytes leftover after parsing attributes in process `syz.1.470'.
[  246.452945][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'.
[  246.487104][ T7648] nbd: socks must be embedded in a SOCK_ITEM attr
[  246.497573][ T6782] block nbd64: NBD_DISCONNECT
[  246.727845][ T7653] netlink: 'syz.2.476': attribute type 10 has an invalid length.
[  246.926152][ T7659] sctp: [Deprecated]: syz.2.478 (pid 7659) Use of int in max_burst socket option.
[  246.926152][ T7659] Use struct sctp_assoc_value instead
[  246.945464][ T7660] sctp: [Deprecated]: syz.1.479 (pid 7660) Use of int in max_burst socket option.
[  246.945464][ T7660] Use struct sctp_assoc_value instead
[  247.708915][ T7692] netlink: 'syz.2.488': attribute type 10 has an invalid length.
[  247.739951][ T7694] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[  248.939334][ T7731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  249.711809][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'.
[  249.747376][ T7750] validate_nla: 1 callbacks suppressed
[  249.747395][ T7750] netlink: 'syz.3.507': attribute type 16 has an invalid length.
[  249.783764][ T7750] netlink: 'syz.3.507': attribute type 17 has an invalid length.
[  249.825124][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.832332][ T7750] bridge0: port 2(bridge_slave_1) entered listening state
[  249.839779][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.846965][ T7750] bridge0: port 1(bridge_slave_0) entered listening state
[  249.900792][ T7750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.959288][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.132082][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'.
[  250.171143][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.511'.
[  250.308322][ T7769] netlink: 'syz.0.512': attribute type 1 has an invalid length.
[  250.673958][ T7781] netlink: 'syz.3.516': attribute type 10 has an invalid length.
[  251.131779][ T7793] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0
[  251.133982][ T7791] IPVS: stopping backup sync thread 7793 ...
[  251.165619][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'.
[  251.182359][ T7794] bridge0: entered promiscuous mode
[  251.189184][ T7794] bridge0: port 1(macvlan2) entered blocking state
[  251.200036][ T7794] bridge0: port 1(macvlan2) entered disabled state
[  251.207905][ T7794] macvlan2: entered allmulticast mode
[  251.213413][ T7794] bridge0: entered allmulticast mode
[  251.220740][ T7794] macvlan2: left allmulticast mode
[  251.275344][ T7794] bridge0: left allmulticast mode
[  251.327046][ T7794] bridge0: left promiscuous mode
[  251.369413][ T7800] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  251.387678][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  251.610096][ T7805] netlink: 'syz.3.525': attribute type 1 has an invalid length.
[  251.895741][ T7815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.527'.
[  251.899589][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'.
[  252.317532][ T7822] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.347001][ T7822] bridge0: port 3(bond1) entered blocking state
[  252.374309][ T7822] bridge0: port 3(bond1) entered disabled state
[  252.384379][ T7822] bond1: entered allmulticast mode
[  252.401179][ T7822] bond1: entered promiscuous mode
[  252.423010][ T7822] bridge0: port 3(bond1) entered blocking state
[  252.429535][ T7822] bridge0: port 3(bond1) entered listening state
[  252.477858][ T1145] bridge0: port 3(bond1) entered disabled state
[  252.633395][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'.
[  252.704875][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'.
[  252.789122][ T7833] team0: Port device dummy0 removed
[  253.043482][ T7841] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  253.133147][ T7842] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  253.608927][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'.
[  254.923257][ T7890] __nla_validate_parse: 3 callbacks suppressed
[  254.923277][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'.
[  255.269631][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'.
[  255.319095][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'.
[  255.328765][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[  255.346579][ T7896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.549'.
[  255.418545][ T5836] block nbd7: Receive control failed (result -107)
[  255.485077][ T7896] nbd7: detected capacity change from 0 to 256
[  255.535161][ T7868] block nbd7: Dead connection, failed to find a fallback
[  255.542263][ T7868] block nbd7: shutting down sockets
[  255.607449][ T7868] blk_print_req_error: 101 callbacks suppressed
[  255.607470][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.661744][ T7868] buffer_io_error: 101 callbacks suppressed
[  255.661765][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.704398][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.729035][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.754342][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.781770][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.551'.
[  255.802940][ T7918] netlink: 192 bytes leftover after parsing attributes in process `syz.1.552'.
[  255.815816][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.861689][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.873555][ T7916] nbd: socks must be embedded in a SOCK_ITEM attr
[  255.874306][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.894944][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.904212][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.912138][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.921415][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.929622][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.938814][ T6782] block nbd64: NBD_DISCONNECT
[  255.950182][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.954546][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  255.964857][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.974788][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  256.037974][ T7868] ldm_validate_partition_table(): Disk read failed.
[  256.077047][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.102152][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  256.144450][ T7868] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.153560][ T7868] Buffer I/O error on dev nbd7, logical block 0, async page read
[  256.222821][ T7868] Dev nbd7: unable to read RDB block 0
[  256.246219][ T7868]  nbd7: unable to read partition table
[  256.262651][ T7868] ldm_validate_partition_table(): Disk read failed.
[  256.270063][ T7868] Dev nbd7: unable to read RDB block 0
[  256.283970][ T7868]  nbd7: unable to read partition table
[  256.605484][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'.
[  256.633083][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'.
[  256.658343][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'.
[  256.987327][ T7961] netlink: 'syz.1.561': attribute type 10 has an invalid length.
[  256.997760][ T7963] netlink: 'syz.3.560': attribute type 32 has an invalid length.
[  257.083501][ T7961] team0: Port device dummy0 added
[  257.130647][ T7970] lo speed is unknown, defaulting to 1000
[  257.199178][ T7970] lo speed is unknown, defaulting to 1000
[  257.264719][ T7970] lo speed is unknown, defaulting to 1000
[  257.298187][ T7972] syzkaller1: entered allmulticast mode
[  257.476761][ T7970] infiniband syz0: set active
[  257.481804][ T7970] infiniband syz0: added lo
[  257.524732][ T7970] RDS/IB: syz0: added
[  257.529555][ T7970] smc: adding ib device syz0 with port count 1
[  257.536114][ T7970] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  257.557633][ T5885] lo speed is unknown, defaulting to 1000
[  257.560290][ T5836] block nbd8: Receive control failed (result -107)
[  257.565903][ T7970] lo speed is unknown, defaulting to 1000
[  257.578063][ T5317] lo speed is unknown, defaulting to 1000
[  257.625140][ T7987] nbd8: detected capacity change from 0 to 256
[  257.647874][ T7868] block nbd8: Dead connection, failed to find a fallback
[  257.658658][ T7868] block nbd8: shutting down sockets
[  257.668394][ T7868] ldm_validate_partition_table(): Disk read failed.
[  257.675979][ T7868] Dev nbd8: unable to read RDB block 0
[  257.681927][ T7868]  nbd8: unable to read partition table
[  257.699172][ T7868] ldm_validate_partition_table(): Disk read failed.
[  257.728756][ T7868] Dev nbd8: unable to read RDB block 0
[  257.745510][ T7868]  nbd8: unable to read partition table
[  258.407997][ T7970] lo speed is unknown, defaulting to 1000
[  258.708828][ T8029] netlink: 'syz.4.575': attribute type 10 has an invalid length.
[  259.166238][ T8036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.241271][ T7970] lo speed is unknown, defaulting to 1000
[  259.386072][ T8036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.590044][ T8036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.793176][ T8036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.819864][ T8063] sctp: [Deprecated]: syz.1.583 (pid 8063) Use of int in max_burst socket option.
[  259.819864][ T8063] Use struct sctp_assoc_value instead
[  259.853861][ T7970] lo speed is unknown, defaulting to 1000
[  259.873272][ T8073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.083132][ T8077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  260.112561][ T8036] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.182435][ T8036] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.263988][ T8036] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.277012][ T8085] __nla_validate_parse: 9 callbacks suppressed
[  260.277031][ T8085] netlink: 152 bytes leftover after parsing attributes in process `syz.2.584'.
[  260.309222][ T8085] pimreg: entered allmulticast mode
[  260.323534][ T7970] lo speed is unknown, defaulting to 1000
[  260.329640][ T8036] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.573385][ T8090] netlink: 'syz.4.587': attribute type 10 has an invalid length.
[  260.657516][ T7970] lo speed is unknown, defaulting to 1000
[  260.700826][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'.
[  262.512543][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[  263.034975][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'.
[  263.075459][ T8137] netlink: 'syz.3.595': attribute type 10 has an invalid length.
[  263.314287][ T8141] lo speed is unknown, defaulting to 1000
[  263.363840][ T8147] netlink: 'syz.0.602': attribute type 10 has an invalid length.
[  263.397420][ T8147] team0: Port device dummy0 added
[  263.435521][ T8149] lo: entered promiscuous mode
[  263.450804][ T8150] netlink: 56 bytes leftover after parsing attributes in process `syz.3.601'.
[  263.481244][ T8153] netlink: 'syz.2.599': attribute type 3 has an invalid length.
[  263.546640][ T8149] tunl0: entered promiscuous mode
[  263.552869][ T8149] gre0: entered promiscuous mode
[  263.647248][ T8153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.599'.
[  263.755131][ T8149] gretap0: entered promiscuous mode
[  263.784408][ T8149] erspan0: entered promiscuous mode
[  263.809569][ T8149] ip_vti0: entered promiscuous mode
[  263.841596][ T8149] ip6_vti0: entered promiscuous mode
[  263.882103][ T8149] sit0: entered promiscuous mode
[  263.941680][ T8149] ip6tnl0: entered promiscuous mode
[  263.966600][ T8149] ip6gre0: entered promiscuous mode
[  263.999849][ T8149] syz_tun: entered promiscuous mode
[  264.019159][ T8149] ip6gretap0: entered promiscuous mode
[  264.040488][ T8149] bridge0: entered promiscuous mode
[  264.057790][ T8149] bond0: entered promiscuous mode
[  264.078740][ T8149] bond_slave_0: entered promiscuous mode
[  264.095554][ T8149] bond_slave_1: entered promiscuous mode
[  264.154543][ T8149] team0: entered promiscuous mode
[  264.161334][ T8149] team_slave_0: entered promiscuous mode
[  264.198484][ T8149] team_slave_1: entered promiscuous mode
[  264.222782][ T8149] dummy0: entered promiscuous mode
[  264.274308][ T8149] nlmon0: entered promiscuous mode
[  264.301217][ T8149] caif0: entered promiscuous mode
[  264.316271][ T8149] batadv0: entered promiscuous mode
[  264.322936][ T8149] vxcan0: entered promiscuous mode
[  264.345019][ T8149] vxcan1: entered promiscuous mode
[  264.357936][ T8149] veth0: entered promiscuous mode
[  264.363189][ T8149] veth1: entered promiscuous mode
[  264.376206][ T8149] wg0: entered promiscuous mode
[  264.382096][ T8149] wg1: entered promiscuous mode
[  264.394007][ T8149] wg2: entered promiscuous mode
[  264.399517][ T8149] veth0_to_bridge: entered promiscuous mode
[  264.409795][ T8149] veth1_to_bridge: entered promiscuous mode
[  264.416247][ T8149] veth0_to_bond: entered promiscuous mode
[  264.422185][ T8149] veth1_to_bond: entered promiscuous mode
[  264.428788][ T8149] veth0_to_team: entered promiscuous mode
[  264.435156][ T8149] veth1_to_team: entered promiscuous mode
[  264.441125][ T8149] veth0_to_batadv: entered promiscuous mode
[  264.447813][ T8149] batadv_slave_0: entered promiscuous mode
[  264.453741][ T8149] veth1_to_batadv: entered promiscuous mode
[  264.460056][ T8149] batadv_slave_1: entered promiscuous mode
[  264.467356][ T8149] veth0_to_hsr: entered promiscuous mode
[  264.473286][ T8149] veth1_to_hsr: entered promiscuous mode
[  264.480084][ T8149] hsr0: entered promiscuous mode
[  264.485418][ T8149] veth1_virt_wifi: entered promiscuous mode
[  264.491432][ T8149] veth0_virt_wifi: entered promiscuous mode
[  264.498026][ T8149] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  264.506802][ T8149] vlan0: entered promiscuous mode
[  264.512143][ T8149] vlan1: entered promiscuous mode
[  264.517604][ T8149] macvlan0: entered promiscuous mode
[  264.523191][ T8149] macvlan1: entered promiscuous mode
[  264.529027][ T8149] ipvlan0: entered promiscuous mode
[  264.534521][ T8149] ipvlan1: entered promiscuous mode
[  264.540244][ T8149] macvtap0: entered promiscuous mode
[  264.546023][ T8149] macsec0: entered promiscuous mode
[  264.551488][ T8149] geneve0: entered promiscuous mode
[  264.557043][ T8149] geneve1: entered promiscuous mode
[  264.562448][ T8149] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  264.570242][ T8149] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  264.577968][ T8149] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  264.586489][ T8149] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  264.597936][ T8149] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  264.619420][ T8149] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  264.627099][ T8149] netdevsim0.1: entered promiscuous mode
[  264.633007][ T8149] bridge1: entered promiscuous mode
[  264.639149][ T8149] pimreg: entered promiscuous mode
[  264.750115][ T8167] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��ؔ�;��E�
^m5�x
[  264.850771][ T8196] smc: net device bond0 applied user defined pnetid SYZ0
[  264.906821][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  264.915019][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  265.631056][ T8233] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  265.936009][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  265.971413][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'.
[  266.047095][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'.
[  266.135685][ T8251] FAULT_INJECTION: forcing a failure.
[  266.135685][ T8251] name failslab, interval 1, probability 0, space 0, times 0
[  266.178609][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.0.622 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  266.178640][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  266.178652][ T8251] Call Trace:
[  266.178659][ T8251]  <TASK>
[  266.178668][ T8251]  dump_stack_lvl+0x241/0x360
[  266.178701][ T8251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.178725][ T8251]  ? __pfx__printk+0x10/0x10
[  266.178748][ T8251]  ? fs_reclaim_acquire+0x93/0x130
[  266.178770][ T8251]  ? __pfx___might_resched+0x10/0x10
[  266.178797][ T8251]  ? dynamic_dname+0x144/0x1b0
[  266.178821][ T8251]  should_fail_ex+0x40a/0x550
[  266.178859][ T8251]  should_failslab+0xac/0x100
[  266.178889][ T8251]  __kmalloc_noprof+0xdd/0x4c0
[  266.178918][ T8251]  ? tomoyo_encode+0x26f/0x540
[  266.178945][ T8251]  tomoyo_encode+0x26f/0x540
[  266.178968][ T8251]  ? __pfx_sockfs_dname+0x10/0x10
[  266.179003][ T8251]  tomoyo_realpath_from_path+0x59e/0x5e0
[  266.179038][ T8251]  tomoyo_path_number_perm+0x239/0x770
[  266.179069][ T8251]  ? __lock_acquire+0x1397/0x2100
[  266.179104][ T8251]  ? tomoyo_path_number_perm+0x209/0x770
[  266.179137][ T8251]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  266.179211][ T8251]  ? __fget_files+0x2a/0x410
[  266.179254][ T8251]  ? __fget_files+0x2a/0x410
[  266.179291][ T8251]  security_file_ioctl+0xc6/0x2a0
[  266.179321][ T8251]  __se_sys_ioctl+0x46/0x170
[  266.179348][ T8251]  do_syscall_64+0xf3/0x230
[  266.179380][ T8251]  ? clear_bhb_loop+0x35/0x90
[  266.179413][ T8251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.179442][ T8251] RIP: 0033:0x7fa97b38d169
[  266.179460][ T8251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.179476][ T8251] RSP: 002b:00007fa97c17f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.179498][ T8251] RAX: ffffffffffffffda RBX: 00007fa97b5a5fa0 RCX: 00007fa97b38d169
[  266.179512][ T8251] RDX: 0000000000000000 RSI: 0000000080108906 RDI: 0000000000000003
[  266.179524][ T8251] RBP: 00007fa97c17f090 R08: 0000000000000000 R09: 0000000000000000
[  266.179536][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.179547][ T8251] R13: 0000000000000000 R14: 00007fa97b5a5fa0 R15: 00007ffe1e82c5d8
[  266.179578][ T8251]  </TASK>
[  266.179596][ T8251] ERROR: Out of memory at tomoyo_realpath_from_path.
[  266.752474][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'.
[  266.901481][ T8279] netlink: 208 bytes leftover after parsing attributes in process `syz.2.630'.
[  266.910641][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[  267.044831][ T8288] tipc: Started in network mode
[  267.050985][ T8288] tipc: Node identity f6e3650b1e35, cluster identity 4711
[  267.089587][ T8288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.119724][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.633'.
[  267.138775][ T8294] netlink: 76 bytes leftover after parsing attributes in process `syz.3.634'.
[  267.227268][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'.
[  268.078711][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'.
[  268.095985][  T976] tipc: Node number set to 3906364683
[  268.127418][ T8326] nbd: socks must be embedded in a SOCK_ITEM attr
[  268.148472][ T6601] block nbd64: NBD_DISCONNECT
[  268.582242][   T53] tipc: Resetting bearer <eth:syzkaller0>
[  269.679506][ T8284] tipc: Resetting bearer <eth:syzkaller0>
[  270.744255][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  270.910734][ T8364] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  272.199112][ T8284] tipc: Disabling bearer <eth:syzkaller0>
[  272.536552][ T8378] __nla_validate_parse: 1 callbacks suppressed
[  272.536574][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'.
[  272.569431][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  272.571399][ T8374] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  272.601982][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'.
[  272.624476][ T8374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  272.636608][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'.
[  272.702786][ T8384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.652'.
[  272.776250][ T5836] block nbd9: Receive control failed (result -107)
[  272.824530][ T8384] nbd9: detected capacity change from 0 to 256
[  272.874382][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'.
[  272.893415][ T8393] block nbd9: Dead connection, failed to find a fallback
[  272.934134][ T8393] block nbd9: shutting down sockets
[  272.951904][ T8393] blk_print_req_error: 64 callbacks suppressed
[  272.951923][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.015042][ T8393] buffer_io_error: 64 callbacks suppressed
[  273.015061][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.034374][ T8399] nbd: socks must be embedded in a SOCK_ITEM attr
[  273.069583][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.080334][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.656'.
[  273.096392][ T8404] nbd: device at index 64 is going down
[  273.121616][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.158088][ T8409] xt_bpf: check failed: parse error
[  273.158845][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.227692][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.230094][ T8409] Bluetooth: MGMT ver 1.23
[  273.253074][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.300881][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.333083][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.389788][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.404016][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.434164][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.451131][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.463951][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.472272][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.481756][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.491857][ T8393] ldm_validate_partition_table(): Disk read failed.
[  273.507104][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.531276][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.539691][ T8393] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  273.549167][ T8393] Buffer I/O error on dev nbd9, logical block 0, async page read
[  273.557707][ T8393] Dev nbd9: unable to read RDB block 0
[  273.564499][ T8393]  nbd9: unable to read partition table
[  273.595645][ T8393] ldm_validate_partition_table(): Disk read failed.
[  273.602854][ T8393] Dev nbd9: unable to read RDB block 0
[  273.613024][ T8393]  nbd9: unable to read partition table
[  273.758906][ T8431] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[  273.816942][ T8434] netlink: 'syz.3.664': attribute type 1 has an invalid length.
[  273.847894][ T8434] netlink: 240 bytes leftover after parsing attributes in process `syz.3.664'.
[  274.069932][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'.
[  274.079411][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[  275.381748][ T8471] nbd: socks must be embedded in a SOCK_ITEM attr
[  275.525235][ T8477] netlink: 'syz.4.675': attribute type 1 has an invalid length.
[  275.706262][ T8482] netlink: 'syz.4.676': attribute type 1 has an invalid length.
[  275.865210][ T8484] netlink: 'syz.4.677': attribute type 10 has an invalid length.
[  276.409602][ T8454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.598236][ T8454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.667070][ T8499] lo speed is unknown, defaulting to 1000
[  276.848658][ T8454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.055648][ T8454] bond0: (slave netdevsim0): Releasing backup interface
[  277.080780][ T8454] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.247810][ T8517] netlink: 'syz.4.685': attribute type 10 has an invalid length.
[  277.491789][ T8517] team0: entered promiscuous mode
[  277.516596][ T8517] team_slave_0: entered promiscuous mode
[  277.543065][ T8517] team_slave_1: entered promiscuous mode
[  277.573319][ T8517] dummy0: entered promiscuous mode
[  277.606296][ T8517] 8021q: adding VLAN 0 to HW filter on device team0
[  277.625950][ T8517] bridge0: port 3(team0) entered blocking state
[  277.643362][ T8517] bridge0: port 3(team0) entered disabled state
[  277.663525][ T8517] team0: entered allmulticast mode
[  277.683204][ T8517] team_slave_0: entered allmulticast mode
[  277.703612][ T8517] team_slave_1: entered allmulticast mode
[  277.717462][ T8517] dummy0: entered allmulticast mode
[  277.771629][ T8530] __nla_validate_parse: 10 callbacks suppressed
[  277.771651][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'.
[  277.822428][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'.
[  277.850431][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.687'.
[  277.894380][ T8535] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  277.956940][ T5836] block nbd10: Receive control failed (result -107)
[  278.014603][ T8530] nbd10: detected capacity change from 0 to 256
[  278.040774][ T8405] block nbd10: Dead connection, failed to find a fallback
[  278.053013][ T8405] block nbd10: shutting down sockets
[  278.058797][ T8405] blk_print_req_error: 27 callbacks suppressed
[  278.058815][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.074746][ T8405] buffer_io_error: 27 callbacks suppressed
[  278.074763][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.088999][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.112711][ T8454] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.119282][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.162429][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.203860][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.221283][ T8454] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.244420][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.272179][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.288788][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.308354][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.309382][ T8454] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.327355][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.351053][ T8545] netlink: 'syz.4.691': attribute type 10 has an invalid length.
[  278.360714][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.391669][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.420491][ T8454] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.428738][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.428913][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.428942][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.429008][ T8405] ldm_validate_partition_table(): Disk read failed.
[  278.429074][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.429100][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.429289][ T8405] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  278.559963][ T8546] lo speed is unknown, defaulting to 1000
[  278.632135][ T8405] Buffer I/O error on dev nbd10, logical block 0, async page read
[  278.664599][ T8405] Dev nbd10: unable to read RDB block 0
[  278.679479][ T8405]  nbd10: unable to read partition table
[  278.710098][ T8405] ldm_validate_partition_table(): Disk read failed.
[  278.727529][ T8558] delete_channel: no stack
[  278.752769][ T8405] Dev nbd10: unable to read RDB block 0
[  278.774712][ T8405]  nbd10: unable to read partition table
[  279.019103][ T8576] netlink: 72 bytes leftover after parsing attributes in process `syz.3.700'.
[  279.506966][ T8590] netlink: 'syz.2.705': attribute type 10 has an invalid length.
[  279.777799][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.707'.
[  279.922723][ T8601] nbd: socks must be embedded in a SOCK_ITEM attr
[  279.988064][ T8405] block nbd64: NBD_DISCONNECT
[  280.127483][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[  280.264126][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.271403][    C0] bridge0: topology change detected, propagating
[  280.278158][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.285449][    C0] bridge0: topology change detected, propagating
[  280.438441][ T8624] netlink: 72 bytes leftover after parsing attributes in process `syz.0.714'.
[  280.682292][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.719'.
[  280.768970][ T8645] syzkaller1: entered promiscuous mode
[  280.788213][ T8645] syzkaller1: entered allmulticast mode
[  280.851388][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'.
[  280.910377][ T8651] ieee802154 phy1 wpan1: encryption failed: -90
[  281.011246][ T8658] netlink: 'syz.3.725': attribute type 5 has an invalid length.
[  281.040420][ T8658] : entered promiscuous mode
[  281.090609][ T8667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.726'.
[  281.391400][ T8689] nbd: socks must be embedded in a SOCK_ITEM attr
[  281.417467][ T8393] block nbd64: NBD_DISCONNECT
[  281.882331][ T8720] lo speed is unknown, defaulting to 1000
[  282.871299][ T8732] lo speed is unknown, defaulting to 1000
[  283.169479][ T8755] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  283.249530][ T8758] __nla_validate_parse: 4 callbacks suppressed
[  283.249552][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'.
[  283.419387][ T8758] nbd: socks must be embedded in a SOCK_ITEM attr
[  283.504342][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'.
[  283.513479][ T8393] block nbd64: NBD_DISCONNECT
[  283.747993][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'.
[  283.801290][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'.
[  283.904725][ T8755] lo speed is unknown, defaulting to 1000
[  284.206687][ T8761] netlink: 'syz.4.745': attribute type 39 has an invalid length.
[  284.245508][ T8788] ip6t_srh: unknown srh invflags 4000
[  284.480459][ T8793] netlink: 256 bytes leftover after parsing attributes in process `syz.1.755'.
[  284.511080][ T8793] netlink: 'syz.1.755': attribute type 21 has an invalid length.
[  284.531807][ T8793] netlink: 128 bytes leftover after parsing attributes in process `syz.1.755'.
[  284.565082][ T8793] netlink: 'syz.1.755': attribute type 5 has an invalid length.
[  284.572789][ T8793] netlink: 3 bytes leftover after parsing attributes in process `syz.1.755'.
[  285.006524][ T8799] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  285.187566][ T8806] netlink: 192 bytes leftover after parsing attributes in process `syz.2.758'.
[  285.230787][ T8807] netlink: 'syz.0.759': attribute type 3 has an invalid length.
[  285.267088][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'.
[  285.650857][ T8824] netlink: 52 bytes leftover after parsing attributes in process `syz.1.761'.
[  286.005167][ T8847] netlink: 'syz.4.768': attribute type 12 has an invalid length.
[  286.030930][ T8847] netlink: 'syz.4.768': attribute type 29 has an invalid length.
[  286.046242][ T8847] netlink: 'syz.4.768': attribute type 1 has an invalid length.
[  286.125684][ T8847] netlink: 'syz.4.768': attribute type 2 has an invalid length.
[  286.546347][ T5836] block nbd11: Receive control failed (result -107)
[  286.604423][ T8859] nbd11: detected capacity change from 0 to 256
[  286.996539][ T8884] netlink: 'syz.2.779': attribute type 5 has an invalid length.
[  287.201633][ T8895] x_tables: duplicate underflow at hook 1
[  287.223913][ T8895] netlink: 'syz.2.782': attribute type 3 has an invalid length.
[  287.447923][ T8902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  287.581569][ T8906] syzkaller1: entered promiscuous mode
[  287.592629][ T8906] syzkaller1: entered allmulticast mode
[  287.611658][ T8907] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  287.983392][ T8930] x_tables: duplicate underflow at hook 2
[  287.993652][ T8929] x_tables: duplicate underflow at hook 2
[  288.030181][ T8935] x_tables: duplicate underflow at hook 1
[  288.133684][ T8937] lo speed is unknown, defaulting to 1000
[  288.682076][ T8940] lo speed is unknown, defaulting to 1000
[  288.768947][ T8953] __nla_validate_parse: 10 callbacks suppressed
[  288.768968][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.800'.
[  288.990271][ T8957] netlink: 'syz.4.802': attribute type 1 has an invalid length.
[  289.833780][ T8991] netlink: 'syz.0.812': attribute type 1 has an invalid length.
[  289.947703][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'.
[  290.136571][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'.
[  290.146229][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'.
[  290.157741][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.817'.
[  290.423866][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  290.452226][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  290.484313][ T9011] netlink: 26 bytes leftover after parsing attributes in process `syz.2.820'.
[  290.590035][ T9020] lo speed is unknown, defaulting to 1000
[  290.625532][ T9022] netlink: 'syz.1.824': attribute type 1 has an invalid length.
[  290.632030][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'.
[  290.797923][ T9032] netlink: 48 bytes leftover after parsing attributes in process `syz.2.825'.
[  291.386433][ T9048] lo speed is unknown, defaulting to 1000
[  292.079168][ T9068] bond3: entered promiscuous mode
[  292.085242][ T9068] 8021q: adding VLAN 0 to HW filter on device bond3
[  292.101744][ T9070] netlink: 'syz.0.836': attribute type 1 has an invalid length.
[  292.168227][ T5836] block nbd12: Receive control failed (result -107)
[  292.243952][ T9065] nbd12: detected capacity change from 0 to 256
[  292.289832][ T9073] netlink: 'syz.2.837': attribute type 10 has an invalid length.
[  292.737005][ T9083] 8021q: VLANs not supported on ip_vti0
[  293.162721][ T9101] netlink: 'syz.4.844': attribute type 4 has an invalid length.
[  293.374774][ T9095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.517598][ T5836] block nbd13: Receive control failed (result -107)
[  293.574986][ T9107] nbd13: detected capacity change from 0 to 256
[  293.589727][ T9116] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  293.761251][ T9124] netlink: 'syz.2.853': attribute type 10 has an invalid length.
[  293.829885][ T9127] netlink: 'syz.0.854': attribute type 10 has an invalid length.
[  293.849664][ T9127] team0: Cannot enslave team device to itself
[  293.877606][ T9127] vlan2: entered promiscuous mode
[  293.883129][ T9127] vlan0: entered promiscuous mode
[  293.889769][ T9127] vlan2: entered allmulticast mode
[  293.895200][ T9127] vlan0: entered allmulticast mode
[  293.900465][ T9127] veth0_vlan: entered allmulticast mode
[  293.915081][ T9127] team0: Port device vlan2 added
[  294.182036][ T9132] x_tables: duplicate entry at hook 2
[  294.833936][ T9143] lo speed is unknown, defaulting to 1000
[  295.001602][ T9152] __nla_validate_parse: 15 callbacks suppressed
[  295.001623][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[  295.407885][ T9162] netlink: 'syz.4.864': attribute type 1 has an invalid length.
[  295.504414][ T9169] netlink: 'syz.4.867': attribute type 10 has an invalid length.
[  295.528029][ T9167] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  295.554282][ T9170] netlink: 'syz.3.866': attribute type 13 has an invalid length.
[  295.585964][ T9170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.866'.
[  295.601835][ T9165] lo speed is unknown, defaulting to 1000
[  295.614330][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'.
[  295.687841][ T9167] 8021q: adding VLAN 0 to HW filter on device bond1
[  295.747329][ T9170] syz_tun: refused to change device tx_queue_len
[  295.753988][ T9170] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  295.800311][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.865'.
[  296.068982][ T9182] netlink: 52 bytes leftover after parsing attributes in process `syz.1.871'.
[  296.455279][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'.
[  296.603276][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'.
[  296.653409][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'.
[  296.696548][ T9198] netlink: 26 bytes leftover after parsing attributes in process `syz.4.876'.
[  296.757404][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'.
[  296.798942][ T9206] bond_slave_0: entered promiscuous mode
[  296.805050][ T9206] bond_slave_1: entered promiscuous mode
[  296.821688][ T9206] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  296.839896][ T9206] bond_slave_0: left promiscuous mode
[  296.845467][ T9206] bond_slave_1: left promiscuous mode
[  297.096492][ T9218] xt_CT: No such helper "pptp"
[  297.101064][ T9217] xt_CT: No such helper "pptp"
[  297.111143][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.124913][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.133618][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.144117][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.184382][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  297.201189][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.298742][ T9228] Bluetooth: MGMT ver 1.23
[  297.306779][ T9221] lo speed is unknown, defaulting to 1000
[  297.551270][ T9241] netlink: 'syz.3.885': attribute type 4 has an invalid length.
[  297.591647][ T9241] netlink: 'syz.3.885': attribute type 4 has an invalid length.
[  297.903111][ T9221] chnl_net:caif_netlink_parms(): no params data found
[  298.041663][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.061380][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.080118][ T9221] bridge_slave_0: entered allmulticast mode
[  298.089277][ T9221] bridge_slave_0: entered promiscuous mode
[  298.116827][ T9264] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  298.245543][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.263268][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.273651][ T9277] netlink: 'syz.2.892': attribute type 1 has an invalid length.
[  298.282111][ T9221] bridge_slave_1: entered allmulticast mode
[  298.295550][ T9221] bridge_slave_1: entered promiscuous mode
[  298.347783][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.369915][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.521719][ T9282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.529154][ T9282] IPv6: NLM_F_CREATE should be set when creating new route
[  298.536565][ T9282] IPv6: NLM_F_CREATE should be set when creating new route
[  298.556368][ T9282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.572564][ T9221] team0: Port device team_slave_0 added
[  298.603020][ T9221] team0: Port device team_slave_1 added
[  298.617025][ T9285] lo speed is unknown, defaulting to 1000
[  298.831326][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.849018][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.910722][ T9221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.938429][ T9299] gretap0: entered promiscuous mode
[  298.968302][ T9299] gretap0: left promiscuous mode
[  299.001829][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.016715][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.069010][ T9221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.304418][ T5836] Bluetooth: hci0: command tx timeout
[  299.355428][ T9311] syzkaller0: entered promiscuous mode
[  299.375494][ T9311] syzkaller0: entered allmulticast mode
[  299.418718][ T9221] hsr_slave_0: entered promiscuous mode
[  299.437728][ T9221] hsr_slave_1: entered promiscuous mode
[  299.444011][ T9221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.483246][ T9221] Cannot create hsr debugfs directory
[  299.565597][ T9313] netlink: 'syz.3.895': attribute type 1 has an invalid length.
[  299.705777][ T9290] lo speed is unknown, defaulting to 1000
[  299.894287][ T9334] netlink: 'syz.4.908': attribute type 2 has an invalid length.
[  300.108489][ T9221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.298269][ T9221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.323441][ T9354] __nla_validate_parse: 11 callbacks suppressed
[  300.323462][ T9354] netlink: 56 bytes leftover after parsing attributes in process `syz.2.913'.
[  300.361402][ T9354] netlink: 256 bytes leftover after parsing attributes in process `syz.2.913'.
[  300.380924][ T9350] netlink: 'syz.2.913': attribute type 1 has an invalid length.
[  300.436575][ T9221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.487669][ T9359] lo: left promiscuous mode
[  300.845415][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.861497][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.977767][ T9359] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.995863][ T9359] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.010247][ T9359] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.021174][ T9359] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.080654][ T9359] bond3: left promiscuous mode
[  301.155851][ T9221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.337684][ T9381] netlink: 'syz.4.917': attribute type 10 has an invalid length.
[  301.371226][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'.
[  301.377985][ T9381] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  301.388925][ T5836] Bluetooth: hci0: command tx timeout
[  301.581570][ T9221] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  301.613994][ T9221] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  301.651669][ T9221] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  301.670370][ T9221] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  302.005470][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'.
[  302.088294][ T9389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.129652][ T9389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.142916][ T9389] bond0 (unregistering): Released all slaves
[  302.202031][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'.
[  302.222123][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'.
[  302.252140][ T9417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.924'.
[  302.298292][   T55] block nbd14: Receive control failed (result -107)
[  302.324427][ T9417] nbd14: detected capacity change from 0 to 256
[  302.366421][ T9221] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.400212][ T9221] 8021q: adding VLAN 0 to HW filter on device team0
[  302.418150][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.425384][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.476119][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.483330][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.919990][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.947179][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'.
[  303.015423][ T9441] nbd: socks must be embedded in a SOCK_ITEM attr
[  303.018572][ T9221] veth0_vlan: entered promiscuous mode
[  303.049253][ T9221] veth1_vlan: entered promiscuous mode
[  303.130614][ T9221] veth0_macvtap: entered promiscuous mode
[  303.149817][ T9221] veth1_macvtap: entered promiscuous mode
[  303.213448][ T9221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.231605][ T9221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.252433][ T9221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.295385][ T9221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.320312][ T9221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.339578][ T9221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.370652][ T9221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.396190][ T9221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.464420][   T55] Bluetooth: hci0: command tx timeout
[  303.575908][ T9455] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  303.631346][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.659100][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.685722][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.694380][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.777379][ T9462] netlink: 'syz.4.936': attribute type 10 has an invalid length.
[  303.884486][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'.
[  303.947876][ T9467] macvlan2: entered promiscuous mode
[  303.953277][ T9467] macvlan2: entered allmulticast mode
[  303.975765][ T9467] erspan0: entered allmulticast mode
[  304.065459][ T9474] lo speed is unknown, defaulting to 1000
[  304.220308][ T9480] tipc: Started in network mode
[  304.234778][ T9480] tipc: Node identity 1e442c5a1e3, cluster identity 4711
[  304.245513][ T9480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.292524][ T9483] netlink: 52 bytes leftover after parsing attributes in process `syz.3.943'.
[  304.768580][ T9480] tipc: Disabling bearer <eth:syzkaller0>
[  304.902814][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.501355][ T9507] lo speed is unknown, defaulting to 1000
[  305.567171][ T9510] GUP no longer grows the stack in syz.2.951 (9510): 200000006000-20000000a000 (200000005000)
[  305.578415][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.2.951 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  305.578443][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  305.578467][ T9510] Call Trace:
[  305.578474][ T9510]  <TASK>
[  305.578483][ T9510]  dump_stack_lvl+0x241/0x360
[  305.578517][ T9510]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.578542][ T9510]  ? __pfx__printk+0x10/0x10
[  305.578559][ T9510]  ? find_vma+0xf9/0x170
[  305.578595][ T9510]  __get_user_pages+0x3b07/0x4140
[  305.578630][ T9510]  ? mark_lock+0x9a/0x360
[  305.578680][ T9510]  ? __pfx___get_user_pages+0x10/0x10
[  305.578700][ T9510]  ? __gup_longterm_locked+0xd2f/0x17f0
[  305.578725][ T9510]  ? __pfx_down_read_killable+0x10/0x10
[  305.578752][ T9510]  ? __pfx_lock_acquire+0x10/0x10
[  305.578786][ T9510]  ? try_get_folio+0xf1/0x6f0
[  305.578817][ T9510]  ? __pfx_lock_release+0x10/0x10
[  305.578858][ T9510]  __gup_longterm_locked+0xe64/0x17f0
[  305.578896][ T9510]  ? mark_lock+0x9a/0x360
[  305.578922][ T9510]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  305.578955][ T9510]  ? __pfx___gup_longterm_locked+0x10/0x10
[  305.578980][ T9510]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  305.579020][ T9510]  ? gup_fast_fallback+0x207e/0x29c0
[  305.579045][ T9510]  gup_fast_fallback+0x2266/0x29c0
[  305.579104][ T9510]  ? __pfx_gup_fast_fallback+0x10/0x10
[  305.579126][ T9510]  ? __lock_acquire+0x1397/0x2100
[  305.579196][ T9510]  ? is_valid_gup_args+0x124/0x200
[  305.579223][ T9510]  get_user_pages_fast+0xcc/0x160
[  305.579249][ T9510]  ? __pfx_get_user_pages_fast+0x10/0x10
[  305.579273][ T9510]  ? rcu_is_watching+0x15/0xb0
[  305.579298][ T9510]  ? trace_contention_end+0x3c/0x120
[  305.579328][ T9510]  __iov_iter_get_pages_alloc+0x39c/0xa90
[  305.579363][ T9510]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  305.579394][ T9510]  ? __se_sys_vmsplice+0x4b7/0x14a0
[  305.579429][ T9510]  iov_iter_get_pages2+0xcf/0x130
[  305.579463][ T9510]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  305.579506][ T9510]  __se_sys_vmsplice+0x739/0x14a0
[  305.579534][ T9510]  ? plist_del+0x3f1/0x410
[  305.579585][ T9510]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  305.579620][ T9510]  ? __pfx_futex_wake+0x10/0x10
[  305.579703][ T9510]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  305.579745][ T9510]  ? do_syscall_64+0x100/0x230
[  305.579780][ T9510]  ? do_syscall_64+0xb6/0x230
[  305.579821][ T9510]  do_syscall_64+0xf3/0x230
[  305.579853][ T9510]  ? clear_bhb_loop+0x35/0x90
[  305.579888][ T9510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.579928][ T9510] RIP: 0033:0x7fc90bb8d169
[  305.579947][ T9510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.579966][ T9510] RSP: 002b:00007fc90caba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  305.579989][ T9510] RAX: ffffffffffffffda RBX: 00007fc90bda5fa0 RCX: 00007fc90bb8d169
[  305.580004][ T9510] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  305.580018][ T9510] RBP: 00007fc90bc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  305.580031][ T9510] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  305.580044][ T9510] R13: 0000000000000000 R14: 00007fc90bda5fa0 R15: 00007ffc10052d68
[  305.580078][ T9510]  </TASK>
[  306.290567][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.292788][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.315443][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.323621][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.332810][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.341624][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  306.351677][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.526768][ T9514] lo speed is unknown, defaulting to 1000
[  306.656028][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.686244][ T9521] netlink: 'syz.3.954': attribute type 1 has an invalid length.
[  306.946167][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.088243][ T9534] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  307.097601][ T9534] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  307.232940][ T9542] ip6t_srh: unknown srh match flags  4000
[  307.480039][ T9554] __nla_validate_parse: 2 callbacks suppressed
[  307.480060][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'.
[  307.532614][   T53] bridge_slave_1: left allmulticast mode
[  307.556410][   T53] bridge_slave_1: left promiscuous mode
[  307.561157][ T9558] x_tables: duplicate underflow at hook 1
[  307.564816][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.587180][ T9561] netlink: 112 bytes leftover after parsing attributes in process `syz.2.965'.
[  307.598021][ T9554] nbd: socks must be embedded in a SOCK_ITEM attr
[  307.618652][   T53] bridge_slave_0: left allmulticast mode
[  307.628858][   T53] bridge_slave_0: left promiscuous mode
[  307.637109][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.746842][ T9564] netlink: 'syz.3.967': attribute type 1 has an invalid length.
[  308.171019][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.184626][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.196206][   T53] bond0 (unregistering): Released all slaves
[  308.218561][ T9562] lo speed is unknown, defaulting to 1000
[  308.218833][ T9514] chnl_net:caif_netlink_parms(): no params data found
[  308.261162][ T9569] veth0_vlan: entered allmulticast mode
[  308.424849][   T55] Bluetooth: hci0: command tx timeout
[  308.441041][ T9573] xt_NFQUEUE: number of total queues is 0
[  308.449429][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'.
[  308.821828][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'.
[  308.854541][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.873837][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'.
[  308.883012][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.890547][ T9514] bridge_slave_0: entered allmulticast mode
[  308.912126][ T9514] bridge_slave_0: entered promiscuous mode
[  309.015615][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.029629][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.047013][ T9514] bridge_slave_1: entered allmulticast mode
[  309.056287][ T9514] bridge_slave_1: entered promiscuous mode
[  309.215458][ T9604] netlink: 'syz.4.979': attribute type 29 has an invalid length.
[  309.217755][ T9601] netlink: 596 bytes leftover after parsing attributes in process `syz.4.979'.
[  309.226516][ T9607] netlink: 'syz.4.979': attribute type 29 has an invalid length.
[  309.382483][ T9604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.979'.
[  309.451496][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.563541][   T53] hsr_slave_0: left promiscuous mode
[  309.588829][   T53] hsr_slave_1: left promiscuous mode
[  309.598116][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.611894][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.624875][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.641225][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.644764][ T9624] netlink: 'syz.4.986': attribute type 1 has an invalid length.
[  309.658635][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'.
[  309.673938][ T9621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.729834][   T53] veth1_macvtap: left promiscuous mode
[  309.738232][   T53] veth0_macvtap: left promiscuous mode
[  309.744265][ T9628] Driver unsupported XDP return value 0 on prog  (id 349) dev N/A, expect packet loss!
[  309.749928][   T53] veth1_vlan: left promiscuous mode
[  309.759875][   T53] veth0_vlan: left promiscuous mode
[  310.517591][   T55] Bluetooth: hci0: command tx timeout
[  310.571394][   T53] team0 (unregistering): Port device team_slave_1 removed
[  310.621489][   T53] team0 (unregistering): Port device team_slave_0 removed
[  311.022660][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.043204][ T9633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.988'.
[  311.081966][ T9638] hsr_slave_0: left promiscuous mode
[  311.088483][ T9638] hsr_slave_1: left promiscuous mode
[  311.231629][ T9514] team0: Port device team_slave_0 added
[  311.261484][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'.
[  311.262719][ T9514] team0: Port device team_slave_1 added
[  311.389420][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.412788][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.467217][ T9514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.481218][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.488693][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.532200][ T9514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.691312][ T9514] hsr_slave_0: entered promiscuous mode
[  311.710612][ T9514] hsr_slave_1: entered promiscuous mode
[  311.755871][ T9658] 8021q: adding VLAN 0 to HW filter on device bond2
[  311.773641][ T9658] bond2: entered promiscuous mode
[  311.780706][ T9658] bond0: (slave bond2): Enslaving as an active interface with an up link
[  312.316984][ T9693] ------------[ cut here ]------------
[  312.322734][ T9693] workqueue: cannot queue hci_tx_work on wq hci0
[  312.329189][ T9693] WARNING: CPU: 0 PID: 9693 at kernel/workqueue.c:2258 __queue_work+0xdf6/0x1090
[  312.338359][ T9693] Modules linked in:
[  312.342285][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.2.1006 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  312.353010][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  312.363103][ T9693] RIP: 0010:__queue_work+0xdf6/0x1090
[  312.368531][ T9693] Code: e8 03 80 3c 28 00 74 08 4c 89 ff e8 64 fd 9f 00 49 8b 37 49 81 c5 78 01 00 00 48 c7 c7 60 e7 29 8c 4c 89 ea e8 5b 6f f8 ff 90 <0f> 0b 90 90 e9 66 f4 ff ff e8 7c b4 38 00 90 0f 0b 90 e9 ad fc ff
[  312.388182][ T9693] RSP: 0018:ffffc9000220f488 EFLAGS: 00010046
[  312.394298][ T9693] RAX: 3fc6c416761ff600 RBX: ffff88807dda3c00 RCX: 0000000000080000
[  312.402314][ T9693] RDX: ffffc9000c7f9000 RSI: 000000000000ca0b RDI: 000000000000ca0c
[  312.410333][ T9693] RBP: dffffc0000000000 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c
[  312.418440][ T9693] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: 1ffff1100b653e38
[  312.426453][ T9693] R13: ffff88805b29f178 R14: 0000000000000008 R15: ffff888058d08b28
[  312.434460][ T9693] FS:  00007fc90caba6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  312.443423][ T9693] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  312.450049][ T9693] CR2: 0000200000006038 CR3: 0000000066878000 CR4: 00000000003526f0
[  312.458077][ T9693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  312.466081][ T9693] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  312.474089][ T9693] Call Trace:
[  312.477399][ T9693]  <TASK>
[  312.480363][ T9693]  ? __warn+0x165/0x4d0
[  312.484558][ T9693]  ? __queue_work+0xdf6/0x1090
[  312.489371][ T9693]  ? report_bug+0x2b3/0x500
[  312.493915][ T9693]  ? __queue_work+0xdf6/0x1090
[  312.498741][ T9693]  ? handle_bug+0x60/0x90
[  312.503114][ T9693]  ? exc_invalid_op+0x1a/0x50
[  312.507825][ T9693]  ? asm_exc_invalid_op+0x1a/0x20
[  312.512877][ T9693]  ? __warn_printk+0x292/0x360
[  312.517653][ T9693]  ? __queue_work+0xdf6/0x1090
[  312.522439][ T9693]  ? __queue_work+0xdf5/0x1090
[  312.527227][ T9693]  ? lockdep_hardirqs_on+0x99/0x150
[  312.532460][ T9693]  queue_work_on+0x1c2/0x380
[  312.537070][ T9693]  ? __pfx_queue_work_on+0x10/0x10
[  312.542203][ T9693]  ? l2cap_skbuff_fromiovec+0x470/0x4f0
[  312.547853][ T9693]  ? l2cap_do_send+0x155/0x2c0
[  312.552629][ T9693]  l2cap_chan_send+0x3d6/0x2690
[  312.557497][ T9693]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  312.563505][ T9693]  ? l2cap_sock_sendmsg+0x1a4/0x2c0
[  312.568718][ T9693]  ? __pfx_l2cap_chan_send+0x10/0x10
[  312.574026][ T9693]  ? do_raw_spin_unlock+0x13c/0x8b0
[  312.579254][ T9693]  l2cap_sock_sendmsg+0x1b4/0x2c0
[  312.584303][ T9693]  ? __pfx_l2cap_sock_sendmsg+0x10/0x10
[  312.589870][ T9693]  __sock_sendmsg+0x221/0x270
[  312.594574][ T9693]  ____sys_sendmsg+0x53a/0x860
[  312.599361][ T9693]  ? __pfx_____sys_sendmsg+0x10/0x10
[  312.604661][ T9693]  ? __sys_sendmmsg+0x392/0x720
[  312.609526][ T9693]  ? __might_fault+0xaa/0x120
[  312.614217][ T9693]  __sys_sendmmsg+0x36a/0x720
[  312.618918][ T9693]  ? __pfx___sys_sendmmsg+0x10/0x10
[  312.624162][ T9693]  ? futex_hash+0x1e/0x1f0
[  312.628598][ T9693]  ? futex_wait+0x285/0x360
[  312.633119][ T9693]  ? __pfx_futex_wait+0x10/0x10
[  312.638005][ T9693]  ? do_futex+0x33b/0x560
[  312.642356][ T9693]  ? __sys_connect+0x119/0x2d0
[  312.647139][ T9693]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  312.653141][ T9693]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  312.659486][ T9693]  ? do_syscall_64+0x100/0x230
[  312.664270][ T9693]  __x64_sys_sendmmsg+0xa0/0xb0
[  312.669131][ T9693]  do_syscall_64+0xf3/0x230
[  312.673651][ T9693]  ? clear_bhb_loop+0x35/0x90
[  312.678349][ T9693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.684264][ T9693] RIP: 0033:0x7fc90bb8d169
[  312.688686][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.708320][ T9693] RSP: 002b:00007fc90caba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  312.716766][ T9693] RAX: ffffffffffffffda RBX: 00007fc90bda5fa0 RCX: 00007fc90bb8d169
[  312.724766][ T9693] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000005
[  312.732959][ T9693] RBP: 00007fc90bc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  312.740959][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.748953][ T9693] R13: 0000000000000000 R14: 00007fc90bda5fa0 R15: 00007ffc10052d68
[  312.756961][ T9693]  </TASK>
[  312.759999][ T9693] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  312.767284][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.2.1006 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0
[  312.778009][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  312.788071][ T9693] Call Trace:
[  312.791359][ T9693]  <TASK>
[  312.794300][ T9693]  dump_stack_lvl+0x241/0x360
[  312.798994][ T9693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.804206][ T9693]  ? __pfx__printk+0x10/0x10
[  312.808803][ T9693]  ? _printk+0xd5/0x120
[  312.812971][ T9693]  ? __init_begin+0x41000/0x41000
[  312.818016][ T9693]  ? vscnprintf+0x5d/0x90
[  312.822359][ T9693]  panic+0x349/0x880
[  312.826269][ T9693]  ? __warn+0x174/0x4d0
[  312.830431][ T9693]  ? __pfx_panic+0x10/0x10
[  312.834870][ T9693]  __warn+0x344/0x4d0
[  312.838855][ T9693]  ? __queue_work+0xdf6/0x1090
[  312.843638][ T9693]  report_bug+0x2b3/0x500
[  312.847986][ T9693]  ? __queue_work+0xdf6/0x1090
[  312.852773][ T9693]  handle_bug+0x60/0x90
[  312.856941][ T9693]  exc_invalid_op+0x1a/0x50
[  312.861451][ T9693]  asm_exc_invalid_op+0x1a/0x20
[  312.866315][ T9693] RIP: 0010:__queue_work+0xdf6/0x1090
[  312.871705][ T9693] Code: e8 03 80 3c 28 00 74 08 4c 89 ff e8 64 fd 9f 00 49 8b 37 49 81 c5 78 01 00 00 48 c7 c7 60 e7 29 8c 4c 89 ea e8 5b 6f f8 ff 90 <0f> 0b 90 90 e9 66 f4 ff ff e8 7c b4 38 00 90 0f 0b 90 e9 ad fc ff
[  312.891318][ T9693] RSP: 0018:ffffc9000220f488 EFLAGS: 00010046
[  312.897400][ T9693] RAX: 3fc6c416761ff600 RBX: ffff88807dda3c00 RCX: 0000000000080000
[  312.905381][ T9693] RDX: ffffc9000c7f9000 RSI: 000000000000ca0b RDI: 000000000000ca0c
[  312.913358][ T9693] RBP: dffffc0000000000 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c
[  312.921340][ T9693] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: 1ffff1100b653e38
[  312.929319][ T9693] R13: ffff88805b29f178 R14: 0000000000000008 R15: ffff888058d08b28
[  312.937310][ T9693]  ? __warn_printk+0x292/0x360
[  312.942091][ T9693]  ? __queue_work+0xdf5/0x1090
[  312.946873][ T9693]  ? lockdep_hardirqs_on+0x99/0x150
[  312.952101][ T9693]  queue_work_on+0x1c2/0x380
[  312.956711][ T9693]  ? __pfx_queue_work_on+0x10/0x10
[  312.961839][ T9693]  ? l2cap_skbuff_fromiovec+0x470/0x4f0
[  312.967412][ T9693]  ? l2cap_do_send+0x155/0x2c0
[  312.972189][ T9693]  l2cap_chan_send+0x3d6/0x2690
[  312.977056][ T9693]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  312.983060][ T9693]  ? l2cap_sock_sendmsg+0x1a4/0x2c0
[  312.988285][ T9693]  ? __pfx_l2cap_chan_send+0x10/0x10
[  312.993581][ T9693]  ? do_raw_spin_unlock+0x13c/0x8b0
[  312.998808][ T9693]  l2cap_sock_sendmsg+0x1b4/0x2c0
[  313.003851][ T9693]  ? __pfx_l2cap_sock_sendmsg+0x10/0x10
[  313.009415][ T9693]  __sock_sendmsg+0x221/0x270
[  313.014115][ T9693]  ____sys_sendmsg+0x53a/0x860
[  313.018902][ T9693]  ? __pfx_____sys_sendmsg+0x10/0x10
[  313.024211][ T9693]  ? __sys_sendmmsg+0x392/0x720
[  313.029076][ T9693]  ? __might_fault+0xaa/0x120
[  313.033763][ T9693]  __sys_sendmmsg+0x36a/0x720
[  313.038462][ T9693]  ? __pfx___sys_sendmmsg+0x10/0x10
[  313.043696][ T9693]  ? futex_hash+0x1e/0x1f0
[  313.048129][ T9693]  ? futex_wait+0x285/0x360
[  313.052652][ T9693]  ? __pfx_futex_wait+0x10/0x10
[  313.057534][ T9693]  ? do_futex+0x33b/0x560
[  313.061899][ T9693]  ? __sys_connect+0x119/0x2d0
[  313.066689][ T9693]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  313.072688][ T9693]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  313.079037][ T9693]  ? do_syscall_64+0x100/0x230
[  313.083823][ T9693]  __x64_sys_sendmmsg+0xa0/0xb0
[  313.088690][ T9693]  do_syscall_64+0xf3/0x230
[  313.093210][ T9693]  ? clear_bhb_loop+0x35/0x90
[  313.097980][ T9693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.103895][ T9693] RIP: 0033:0x7fc90bb8d169
[  313.108499][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.128114][ T9693] RSP: 002b:00007fc90caba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  313.136544][ T9693] RAX: ffffffffffffffda RBX: 00007fc90bda5fa0 RCX: 00007fc90bb8d169
[  313.144527][ T9693] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000005
[  313.152510][ T9693] RBP: 00007fc90bc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  313.160487][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.168464][ T9693] R13: 0000000000000000 R14: 00007fc90bda5fa0 R15: 00007ffc10052d68
[  313.176460][ T9693]  </TASK>
[  313.179792][ T9693] Kernel Offset: disabled
[  313.184201][ T9693] Rebooting in 86400 seconds..