last executing test programs:

9m42.782252344s ago: executing program 1 (id=2848):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r1, &(0x7f0000001980)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r1, &(0x7f0000001a00)='O', 0x1, 0x80, &(0x7f0000001a40)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000001a80), &(0x7f0000001ac0)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket(0x5, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000018c0)={r3, @in={{0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x97}}}, 0x1, 0xb2}, 0x90)
preadv(r2, &(0x7f0000001800)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/227, 0xe3}, {&(0x7f00000016c0)=""/2, 0x2}, {&(0x7f0000001700)=""/174, 0xae}, {&(0x7f00000017c0)=""/17, 0x11}], 0x9, 0xfffffff8, 0x8fb)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000540)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f00000019c0)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000001a00)=ANY=[], 0x9)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0)

9m42.493641215s ago: executing program 1 (id=2852):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b70400000000ffb0bf0500000000efff85000000630000001500020000000000bf010000000000008500000056000000b70000000200100095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m42.347164584s ago: executing program 1 (id=2854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r3}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d17b5a0cbebe96eb250beaae03b96300e9c4122ab4803bfeaf42498b6002fd9c0f0c2842081cd50d3"], &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r4, &(0x7f0000000300), 0x40000000000009f, 0x0) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r1, 0x83625fc5352ba305, 0x70bd2a, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f00000000c0)=0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

9m42.010266304s ago: executing program 1 (id=2855):
unshare(0x6020400)
r0 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f00000005c0)=[{r0, 0x210}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000640)={@local, @random="cd778175c157", @val={@void}, {@generic={0x8906}}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000380), 0x1000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000400)=0x10, 0x4)
r4 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000)
recvfrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000c40)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x80)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000cc0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x0, 0xfc, 0x9a, &(0x7f00000007c0)="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", &(0x7f00000008c0)=""/154, 0x9, 0x0, 0x93, 0xe0, &(0x7f0000000980)="0ba908e234606c9ca852cf3983752c1e4f48b2fb92d915a62e806ec3c833f975f84a49e35e7898abee87b6041e9dec14aae9736acc538f425a3d621a5f3317574292ddaf0607c3271d4487bd970002a892b4ad8f787c1ddd75e8ce50ab217db25dd08fb56aff38341ce4c77915d1106e05d25efa1edc7813df795d2db3995385b0b767842d3bde22527a93d5d98a14d50086c9", &(0x7f0000000a40)="4c4d725fe754700d2fc4a18c323fda164e2460188dc930db01b1dcddac3cf06a6d50291037efd88c712709433a59f230cfd6fe436ed03cd243bf512d286385fbb1a3d3116d53bbfdc8a1345c1f0d90174370b08c60e417b08c1276ffe1d298ad273b90aa12d54f7b99974446d9a58db0ce1e657ed2a1849386bc3da7bcee1cda9ec24ab225f8b4354503d78b77604027d7e981a09bcd985dbb086b2a637014bfee3d538fb5f41ffb728e2042957fa1075aee1b666163b95c8efdf020ad82ba027e1c23471de1b3bbb3b01c9b80977047c472b61cb0845915df956f0298a74d58", 0x5, 0x0, 0x8}, 0x50)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000440)=0x10, 0x4)
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2, 0x0, 0x1, r1}, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000380), &(0x7f0000000580)=0x4)

9m40.988798835s ago: executing program 1 (id=2865):
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x4f}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000002800000095"], &(0x7f0000001c00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xe, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x65}]}, &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000001700)=0x84, 0xfde1)
bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48)
sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000001740)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
sendto$inet6(r1, 0x0, 0xfffffe83, 0x40804, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)

9m37.500113349s ago: executing program 1 (id=2881):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x0, 0x0, 0x41cf, 0x3ff, 0x7, 0x7, 0x9, 0x4}, {0x2, 0x0, 0x2, 0x7, 0x4, 0x2, 0xfffffffffffffff7, 0xf64}], 0x2, 0x38, 0x1, 0x8})
write(r0, &(0x7f0000000100)="12df8fcf93", 0x5)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0xe1b, 0x7})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'rose0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7f, 0xa, 0x5ab9, 0x23020, r1, 0x9, '\x00', r2, r1, 0x0, 0x2, 0x3, 0xe}, 0x50)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={<r5=>r1, &(0x7f0000000300)='\x00', 0x202, &(0x7f0000000340)={@_ha_fsid={[0xd32c, 0x4]}, {0x0, 0x4, 0x23f06d1b, 0x7fffffff}}, 0x0, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={<r6=>r1, 0x4, 0xffffffffffffffff, 0x71})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)=r6}, 0x20)
ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000000700)={&(0x7f0000000540)=[{0x3, 0x0, 0x800, 0x1, 0xfffffffffffffff8, 0x200, 0xd6e6, 0x2}, {0x1, 0x0, 0x6, 0x3ff, 0x0, 0x6, 0xa, 0x3ce7}, {0x2, 0x0, 0x5, 0x8000000000000000, 0xfffffffffffffe01, 0x400, 0x0, 0x3ff}, {0x2, 0x0, 0x7fffffff, 0x400, 0xa, 0xc, 0x8, 0x4}, {0x2, 0x0, 0x0, 0x9, 0x100, 0xfffffffffffffffa, 0x8, 0xfffffffffffffffd}, {0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0x400, 0xfa}, {0x1, 0x0, 0x40, 0x7, 0x6, 0x5, 0x1, 0x4}], 0x7, 0x38, 0xee36a3a84d1de76d, 0x2})
socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r8=>r3, 0x2, 0x2, 0x3d8})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000800)={0x6, [0x0, <r9=>0x0, 0x0, 0x0, 0x0, <r10=>0x0]}, &(0x7f0000000840)=0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000880)={r10, 0x40, 0x400, 0x2}, 0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000008c0)={r9, 0x70, 0x1, [0x3]}, 0xa)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc880)
r11 = accept$inet6(r6, &(0x7f0000000a00)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000a40)=0x1c)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000a80)={r9, 0xa4}, 0x8)
epoll_pwait(r1, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4, &(0x7f0000000b40), 0x8)
close(r0)
r12 = accept4(r1, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000c00)=0x80, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000003580)={'sit0\x00', &(0x7f0000003480)={'syztnl0\x00', <r13=>r2, 0x10, 0x8, 0x2, 0x9d, {{0x33, 0x4, 0x0, 0xd, 0xcc, 0x64, 0x0, 0x5a, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp_prespec={0x44, 0x34, 0x53, 0x3, 0x0, [{@empty, 0x80000000}, {@multicast2, 0x4}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@empty}, {@multicast1, 0x3}]}, @generic={0x7, 0xa, "a830db942ad5d1d3"}, @timestamp_prespec={0x44, 0x1c, 0x48, 0x3, 0x5, [{@private=0xa010101, 0x7}, {@multicast1, 0x731}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8}]}, @timestamp={0x44, 0x20, 0x77, 0x0, 0xd, [0xfffffffd, 0x3, 0x101, 0x80000001, 0xffffffff, 0xff, 0x1e6c]}, @timestamp={0x44, 0x28, 0x7c, 0x0, 0x5, [0x4, 0x80000001, 0x8, 0xcdea, 0xbae, 0xfff, 0x4, 0x2, 0x8]}, @rr={0x7, 0x13, 0xfb, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @local, @loopback]}]}}}}})
sendmmsg$inet(r12, &(0x7f0000003640)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="dd381e9f9cb05edc4610390f76fd6d0d6c126cb8c53dfb80644b38a1d5681217dc558e229badaa3e67e00707ba9e078915db68971ac3c17bd6cc30bd93b9d01d6ed7b659f4d6e98ef1db3b69cb552436694943af3ac568e455b9680e7107f35c2616297c6b32566fbde345b7a9cbb9d48bc56091f4e282ab417e5b87512f16c235d2a63e8fc8f499120765aa1f355bfa20427b4248d63ed83d2c83bb8be49df76e7e0219fba6fd6f0e7b52ac5c7eec51a7", 0xb1}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x29, 0x0, 0x7, [0x8000]}, @noop, @lsrr={0x83, 0x7, 0x25, [@empty]}, @lsrr={0x83, 0x17, 0x13, [@remote, @multicast2, @remote, @local, @multicast2]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf9, [@loopback, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xb, "77b7e9c0da696e9ff3"}, @timestamp_addr={0x44, 0x34, 0xde, 0x1, 0xd, [{@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x6}, {@multicast2, 0x3}, {@broadcast, 0x81}]}, @end, @lsrr={0x83, 0xb, 0xe7, [@remote, @remote]}]}}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@cipso={0x86, 0x1f, 0x3, [{0xc145ed5ed38dbb16, 0x4, "7806"}, {0x0, 0x8, "aea8c2feeac0"}, {0x1, 0x6, "b48e5dc2"}, {0x1, 0x7, "a6b2e392f8"}]}, @lsrr={0x83, 0x13, 0x45, [@loopback, @remote, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xf5, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x4, 0x0}, 0x8}]}, @noop, @cipso={0x86, 0x30, 0x3, [{0x0, 0xb, "bd8bff7598a4e32ffb"}, {0x2, 0x7, "d50ff78a83"}, {0x6, 0x8, "1736ed1d8a34"}, {0x1, 0x10, "30844eda77fcff974b14a99b4acf"}]}, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x1, [{@broadcast, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x54, 0x92, 0x3, 0x2, [{@rand_addr=0x64010100, 0x645}, {@broadcast, 0x7f}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1f}, {@private=0xa010102, 0x3}, {@private=0xa010101, 0x2}, {@remote, 0x7}, {@local, 0xfffffff7}, {@multicast1, 0x9}, {@private=0xa010100, 0x5}]}]}}}], 0x220}}, {{&(0x7f0000000fc0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001000)="4931dd310b1eeed6b54a7d40b40286794f7852666d1b06a437b3", 0x1a}, {&(0x7f0000001040)="04b2dc28ff835142b2a3d58bcfc37c93567be7e5d54fa9b051f23572c1955e8e980943843cb36b6458a73fa6b83eb0e90e61f12cdc5224fd9a33bc67b70bbd9d3f9077fa4a122e4bbd2473c2adbf3ba570fdccf72c978fe9d45fc5982a5963517a9978f075a1594155c3c50d6fa07e7fcadd23e9ca5c040f9041addcac3236b85c488f2fdc12c592af10eaa14eb1c7ae531ce9429893d9b7ee117edfd9f6d0ed528584195041810ea4", 0xa9}, {&(0x7f0000001100)="c915da7844770b0f4e7cab6200a6405e1e436f70f6a4d3f2925471195c3a74e2c29bf068675ad19d16adbad079919cd28d25658580d7d326c60c4d", 0x3b}, {&(0x7f0000001140)="60b9601ac75849246eb250bb9ed1cc77a15105e25c5a523f0fc646af1bc589dabecfb0ba4d266bce0c3d25ae2b14419d6328e45b8ad528e22f7542977b25a5f988e2f667474221900b0af31200b3fb7f29c84e5a39d1b73ea4e899292baf5f8910bc3623e3ecbedcac5d551f47cf074d4d39cf319a64e1fa532f4f352716d5f77b03d8e7e563c6133d5b207060878e1428191b44af76094ea95e29d056eaaafefc43f3e220544291402da6e85c7137df95387cc6aec6469f3093dee362d55fd249cff33be99191e7ee5f13afb9f5a1045bb00454a90c988b99430fc6ec26c0a751db02cb43893b73034d4c2a358472d02784f50b1d9aad14c0227e07", 0xfc}, {&(0x7f0000001240)="3f00fbd403bf014abfbfa607e1af2f132a20a7ae9f922bb168ab571b74b53727e5c52ab6e46c16b05947ef3874502d6855d23b630d15170e3a0a6e928084ea00bcf256d3aca435747418afbd74e46d012b950112264f77813bda3ce7251e1fa1d23574458e0f3c57318e1d3a009747b504c0c4faddcde79e9a05ace0a661f973dcd91dfc4cc4f0e0c8e0297ff8e679080a6a3c9937767d6d0a98790f8cd4b82ecdbbe057cb2ebdd7fb7a86b14ecdf11d6765b44fb18060e5ba8c8a40d5341995aba242f8b76c1fc312965c2b6ecc3734246b7329", 0xd4}, {&(0x7f0000001340)="2a09d864016cf00fb86712ca5083d474e9bc74649f14d57d676e83fd0e3983a0d2cba2e06012bde4945c717636bcba71b6975759b657bfc286531fd9f1a5f11187ced810e789f054381666eabd8818d7a3bd77f9d4c7d7b6de6744e36d255463ba834c", 0x63}, {&(0x7f00000013c0)="8eac67dc3794d753767d72dfd8201b4c50fe7b9d8f807b3931250d489adfbb0b62556961e5f51cda7e999befee2af885f6ea9743243a57a2e8617b67f7d5cc56c5212174d4707e480338b6abd82b5b0bbba397d605be788721ecd2103e23c0fb1d8b7290ed61a4e079980e79148b8c0f3fd0375896093a919ce6fb7be314b0dcfd2d7a2e239cd7329d3e3d9117e1aa87a53b67e2e47273921c4d191742e6925284a22eb028435b0eba", 0xa9}, {&(0x7f0000001480)}], 0x8}}, {{&(0x7f0000001540)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001580)="921a9e35f6ff807b64b177e02e8dc63112f949c9bc83f5c42995ed3ce4820110e62a353c182d1e95cf221314da3682f8762eecbfa17e925893c66a3e6694b1623d0087c0c0ee975d2f4347afb1ae90d7bed19804782d007c8f612da0f4ee239133025628f0c1253e7b9863843a3a7be4cceea2c16a3b76808a099495ae05300147470a9eaebd1dd05c6dda1fc4b899bbc2562f4a1d832e76f4b0377d94601172c0196aabdff5bc60892dd86a1dbd9661eabffc97a5691eb707920087f458fad4e8b6", 0xc2}, {&(0x7f0000001680)="2ee1a36ccddc9749cdf4178a981e144724b3323af31e79a51a3bd9423ef7880c81181841ffe1be3882fc16f940c2de78cb8cac99edc27ad28c285d0fe17484aa19224cdfc1d7f93dbcd0d83d19cbec03e71de7e1180028608e7380bd9d3a1ffdd618a0676c8da5a8034613a74356a3094f614300434b6aa13e608bd0da2f59b0b137f96a5e16ee13da7d6dd6a1a09c963d5605e12d51813251805c7a9f31abc25cc25ded0597ea5b65a4", 0xaa}, {&(0x7f0000001740)="b8aee7b348785d558a08754bc24abdddd62bb1be738ce675c61cae85a9ed79411bd176659b841440dbff7427731c079c99d9d8c9eb0aae89878af412d3f14be135b6fbdd7159ef0aa9129c42cadefbca7b07fafbd27f9cfdafda068df4eac213ae82a695c524c7a7247e80ab495b0f5f6574da69452706ab72677cddd0e7b16d990343af18ef1eff7868e025", 0x8c}, {&(0x7f0000001800)="1c01bdfb043e1d9afa91a3f46a9aa1729a6d83c47b517be3e8fb699523b84cbb51c9a8ea30624b0b7df033c69fcc04989e47c1c4393dfb85d9e01fc1f51d5d568dd6a828ab7e126c449f5a25f4b5c8f0c8af904c2f", 0x55}, {&(0x7f0000001880)="976d16e7f09d108875d7969b16b8bab7580e800ff9829356c468ed2eb721ecf3db427b6d5c768be51ec9d1db0548189a706a653ff7443878a99c78aa4317075351b42db15fe8e6ed0001dcc00dc3cac85cef8cad04ff32eea0a11206d9457b6bdb2a7b7817a406f3a2092678201bedf2538ee34d182697cd9e", 0x79}], 0x5, &(0x7f0000001980)=[@ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xa7, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x3, [{@rand_addr=0x64010100, 0x30}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x8001}, {@local, 0x7}, {@broadcast, 0x7d0279b8}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1f}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x6, 0x0, 0xb, [0x9c38, 0xfd, 0x6, 0x5, 0x0, 0xcb, 0x1000, 0x4]}, @timestamp_addr={0x44, 0x44, 0xdd, 0x1, 0x2, [{@local}, {@multicast2, 0xe0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@loopback, 0x6}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}, {@empty, 0x101}, {@rand_addr=0x64010100, 0xff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x1a0}}, {{&(0x7f0000001b40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x18}}, {{&(0x7f0000001c00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000001c40)="73731ee9297cdb936a035ccd707e72cf783df6ca61339fd56853b3d2f21391d1b3dc80eec45f16e811d4fbea5f9cd5ba26ce8b04852bf3fc4c0be0040816c3eb470ddb8611df7752a89f0142de6138a041e09d11c7aba4e4ea7d9f4fb58efb400100596774ddc2384f7cfef9b619d28027b7a53f54345f2438aed2d1cafc069aec1b61c1b83d3a0d7a1c8fb52a0fc37e", 0x90}, {&(0x7f0000001d00)="a8b7ab5c7d2bf621d933e9ade29bfb7347db8d111c7480bcbe51b4877cffa0cc7011097e295f3586a511d753fa4e400fdd240d4a5d1f5b915e7e68edda4135bda1733d7c5c4b3572584c523baa561efe882220952e9c1f", 0x57}, {&(0x7f0000001d80)="89d7bd56bea32c0bcf486330b6139a5c882c567519578b98894bce46485a4c9da672b9", 0x23}, {&(0x7f0000001dc0)="afea4594548d6a12feea68e907f5eec33697b3e847fc820ff9828d9517cda21b034633aa2f9bb7f3ba331e1c1af1b109ceea5f9105c9ea6e7e43320d59394985e9c9a106cb9686f2813d45fa5142ffedb4afdf17f4599ed5b84ee44d6c264f521e11d92a1be2bef8b2d308a97d54df807f69a89639a3f0ab6ba4827d75aa6e95a1f14921a0d1c174180eab8faefee7537577f36e2e9e69406b351ac5b9863a7e885a83905e4556bd3e24bbf44e842e6d8bf89fa5164375482a9e2bb475d87da189ae44", 0xc3}, {&(0x7f0000001ec0)="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", 0x1000}], 0x5, &(0x7f0000002f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf23a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x98}}, {{&(0x7f0000003000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003040)="aa50933f89f5da", 0x7}, {&(0x7f0000003080)="cad4a399b6c5f0be18b4f902df7df013417dd9579666b5b8753e90f5a4b1f24f26a0c4e3da8415562cfce2876a8a74e39b2f0c17ae95fdc60f8301738b6bc113460e79104699120bb60b03f4aa967d9f50ea104dc2d3f982d80fed984759105376313109d59f1a4765a510d5aacf5497d12685bc68ddbf5424aa6381d3c6ecc849e9900072d483a7111d9acd0f221bffb23a5189321e898c67f009ff9884bcdea893f207e2eac7ae213a451a40b6c63b678dac74dda77ea5644db239", 0xbc}, {&(0x7f0000003140)="ccbed51e6f39b35fd72556af71d0165ff24b9213f890d1e8ec102c7494afc509584dd99c83f6e44cf415d6aea67b8c5fdecb156ae780193b7c497b1d77d8d0efc9b77021f885d64a2942deafc41dc98983e2a09db4b90c3334d34401b5", 0x5d}, {&(0x7f00000031c0)="d6e4f2da5e17c519e9b680d44b734e126a022c652361ceb4a456280f30457b3b0e1465161df118dad5c6a02a82c703c54cf20957ee72edb140fd332234ad70453f58513e275c6720243b19a48b49d9defd7d65bb14e68e961d1742209da6a122f71a9f696bc09d25234efc527e611937d107fc1ce45cfa4f711587eb88569381691fc5c6e9891e8f95bba9c56873e96645feafc3efb1cfa7ce2ba3172ab572107961fe1a6b0df17e09d714ba867b41243d4116021356c1bf6832310b2aad7235a6a3cad1", 0xc4}, {&(0x7f00000032c0)="8071379269546271e09e9dd562702af276d59ab86268240c744bf37e7ddaa554d7f6847a187f6439cac785df84fbedd9ed0fa32f733f53781c24a0d6f52635dd28b3adf0feda6354144bf70bdcdd1eb07bc75b0d94f2b77f9429865af61ce8751cc7adde3a379654dfbfc6d8e84a249c696d", 0x72}, {&(0x7f0000003340)="04666ac0902196a20eb363acc9f4f63502b19e8487bd32a9d48e12209663cc0f493d3b29059e42499598fce4c219f9c98a271b84bd2726b61701be6334a75070ddea222d7de0800c627d6f06057c187b961ed432d2532f1289bc82a168a4a9420cc1843ddd772fb9988ecb170c733b78c1fa090ae29fe7ba8248cd45a2b43a958d4d670a6e27d21774e7da68d086ccfe1b4cc971e7", 0x95}], 0x6, &(0x7f00000035c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @cipso={0x86, 0x1a, 0x0, [{0x2, 0x4, "9a45"}, {0x5, 0x2}, {0x7, 0xe, "6e56e4ab2acf022c792d8629"}]}]}}}], 0x50}}], 0x6, 0x4040040)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000037c0)={0x3, 0x200, 0xc, 0x8001, r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003880)={{r7}, &(0x7f0000003800), &(0x7f0000003840)=r6}, 0x20)
getgid()

9m36.94912405s ago: executing program 32 (id=2881):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x0, 0x0, 0x41cf, 0x3ff, 0x7, 0x7, 0x9, 0x4}, {0x2, 0x0, 0x2, 0x7, 0x4, 0x2, 0xfffffffffffffff7, 0xf64}], 0x2, 0x38, 0x1, 0x8})
write(r0, &(0x7f0000000100)="12df8fcf93", 0x5)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0xe1b, 0x7})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'rose0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7f, 0xa, 0x5ab9, 0x23020, r1, 0x9, '\x00', r2, r1, 0x0, 0x2, 0x3, 0xe}, 0x50)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={<r5=>r1, &(0x7f0000000300)='\x00', 0x202, &(0x7f0000000340)={@_ha_fsid={[0xd32c, 0x4]}, {0x0, 0x4, 0x23f06d1b, 0x7fffffff}}, 0x0, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={<r6=>r1, 0x4, 0xffffffffffffffff, 0x71})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)=r6}, 0x20)
ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000000700)={&(0x7f0000000540)=[{0x3, 0x0, 0x800, 0x1, 0xfffffffffffffff8, 0x200, 0xd6e6, 0x2}, {0x1, 0x0, 0x6, 0x3ff, 0x0, 0x6, 0xa, 0x3ce7}, {0x2, 0x0, 0x5, 0x8000000000000000, 0xfffffffffffffe01, 0x400, 0x0, 0x3ff}, {0x2, 0x0, 0x7fffffff, 0x400, 0xa, 0xc, 0x8, 0x4}, {0x2, 0x0, 0x0, 0x9, 0x100, 0xfffffffffffffffa, 0x8, 0xfffffffffffffffd}, {0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0x400, 0xfa}, {0x1, 0x0, 0x40, 0x7, 0x6, 0x5, 0x1, 0x4}], 0x7, 0x38, 0xee36a3a84d1de76d, 0x2})
socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r8=>r3, 0x2, 0x2, 0x3d8})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000800)={0x6, [0x0, <r9=>0x0, 0x0, 0x0, 0x0, <r10=>0x0]}, &(0x7f0000000840)=0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000880)={r10, 0x40, 0x400, 0x2}, 0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000008c0)={r9, 0x70, 0x1, [0x3]}, 0xa)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc880)
r11 = accept$inet6(r6, &(0x7f0000000a00)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000a40)=0x1c)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000a80)={r9, 0xa4}, 0x8)
epoll_pwait(r1, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4, &(0x7f0000000b40), 0x8)
close(r0)
r12 = accept4(r1, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000c00)=0x80, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000003580)={'sit0\x00', &(0x7f0000003480)={'syztnl0\x00', <r13=>r2, 0x10, 0x8, 0x2, 0x9d, {{0x33, 0x4, 0x0, 0xd, 0xcc, 0x64, 0x0, 0x5a, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp_prespec={0x44, 0x34, 0x53, 0x3, 0x0, [{@empty, 0x80000000}, {@multicast2, 0x4}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@empty}, {@multicast1, 0x3}]}, @generic={0x7, 0xa, "a830db942ad5d1d3"}, @timestamp_prespec={0x44, 0x1c, 0x48, 0x3, 0x5, [{@private=0xa010101, 0x7}, {@multicast1, 0x731}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8}]}, @timestamp={0x44, 0x20, 0x77, 0x0, 0xd, [0xfffffffd, 0x3, 0x101, 0x80000001, 0xffffffff, 0xff, 0x1e6c]}, @timestamp={0x44, 0x28, 0x7c, 0x0, 0x5, [0x4, 0x80000001, 0x8, 0xcdea, 0xbae, 0xfff, 0x4, 0x2, 0x8]}, @rr={0x7, 0x13, 0xfb, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @local, @loopback]}]}}}}})
sendmmsg$inet(r12, &(0x7f0000003640)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="dd381e9f9cb05edc4610390f76fd6d0d6c126cb8c53dfb80644b38a1d5681217dc558e229badaa3e67e00707ba9e078915db68971ac3c17bd6cc30bd93b9d01d6ed7b659f4d6e98ef1db3b69cb552436694943af3ac568e455b9680e7107f35c2616297c6b32566fbde345b7a9cbb9d48bc56091f4e282ab417e5b87512f16c235d2a63e8fc8f499120765aa1f355bfa20427b4248d63ed83d2c83bb8be49df76e7e0219fba6fd6f0e7b52ac5c7eec51a7", 0xb1}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x29, 0x0, 0x7, [0x8000]}, @noop, @lsrr={0x83, 0x7, 0x25, [@empty]}, @lsrr={0x83, 0x17, 0x13, [@remote, @multicast2, @remote, @local, @multicast2]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf9, [@loopback, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xb, "77b7e9c0da696e9ff3"}, @timestamp_addr={0x44, 0x34, 0xde, 0x1, 0xd, [{@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x6}, {@multicast2, 0x3}, {@broadcast, 0x81}]}, @end, @lsrr={0x83, 0xb, 0xe7, [@remote, @remote]}]}}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@cipso={0x86, 0x1f, 0x3, [{0xc145ed5ed38dbb16, 0x4, "7806"}, {0x0, 0x8, "aea8c2feeac0"}, {0x1, 0x6, "b48e5dc2"}, {0x1, 0x7, "a6b2e392f8"}]}, @lsrr={0x83, 0x13, 0x45, [@loopback, @remote, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xf5, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x4, 0x0}, 0x8}]}, @noop, @cipso={0x86, 0x30, 0x3, [{0x0, 0xb, "bd8bff7598a4e32ffb"}, {0x2, 0x7, "d50ff78a83"}, {0x6, 0x8, "1736ed1d8a34"}, {0x1, 0x10, "30844eda77fcff974b14a99b4acf"}]}, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x1, [{@broadcast, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x54, 0x92, 0x3, 0x2, [{@rand_addr=0x64010100, 0x645}, {@broadcast, 0x7f}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1f}, {@private=0xa010102, 0x3}, {@private=0xa010101, 0x2}, {@remote, 0x7}, {@local, 0xfffffff7}, {@multicast1, 0x9}, {@private=0xa010100, 0x5}]}]}}}], 0x220}}, {{&(0x7f0000000fc0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001000)="4931dd310b1eeed6b54a7d40b40286794f7852666d1b06a437b3", 0x1a}, {&(0x7f0000001040)="04b2dc28ff835142b2a3d58bcfc37c93567be7e5d54fa9b051f23572c1955e8e980943843cb36b6458a73fa6b83eb0e90e61f12cdc5224fd9a33bc67b70bbd9d3f9077fa4a122e4bbd2473c2adbf3ba570fdccf72c978fe9d45fc5982a5963517a9978f075a1594155c3c50d6fa07e7fcadd23e9ca5c040f9041addcac3236b85c488f2fdc12c592af10eaa14eb1c7ae531ce9429893d9b7ee117edfd9f6d0ed528584195041810ea4", 0xa9}, {&(0x7f0000001100)="c915da7844770b0f4e7cab6200a6405e1e436f70f6a4d3f2925471195c3a74e2c29bf068675ad19d16adbad079919cd28d25658580d7d326c60c4d", 0x3b}, {&(0x7f0000001140)="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", 0xfc}, {&(0x7f0000001240)="3f00fbd403bf014abfbfa607e1af2f132a20a7ae9f922bb168ab571b74b53727e5c52ab6e46c16b05947ef3874502d6855d23b630d15170e3a0a6e928084ea00bcf256d3aca435747418afbd74e46d012b950112264f77813bda3ce7251e1fa1d23574458e0f3c57318e1d3a009747b504c0c4faddcde79e9a05ace0a661f973dcd91dfc4cc4f0e0c8e0297ff8e679080a6a3c9937767d6d0a98790f8cd4b82ecdbbe057cb2ebdd7fb7a86b14ecdf11d6765b44fb18060e5ba8c8a40d5341995aba242f8b76c1fc312965c2b6ecc3734246b7329", 0xd4}, {&(0x7f0000001340)="2a09d864016cf00fb86712ca5083d474e9bc74649f14d57d676e83fd0e3983a0d2cba2e06012bde4945c717636bcba71b6975759b657bfc286531fd9f1a5f11187ced810e789f054381666eabd8818d7a3bd77f9d4c7d7b6de6744e36d255463ba834c", 0x63}, {&(0x7f00000013c0)="8eac67dc3794d753767d72dfd8201b4c50fe7b9d8f807b3931250d489adfbb0b62556961e5f51cda7e999befee2af885f6ea9743243a57a2e8617b67f7d5cc56c5212174d4707e480338b6abd82b5b0bbba397d605be788721ecd2103e23c0fb1d8b7290ed61a4e079980e79148b8c0f3fd0375896093a919ce6fb7be314b0dcfd2d7a2e239cd7329d3e3d9117e1aa87a53b67e2e47273921c4d191742e6925284a22eb028435b0eba", 0xa9}, {&(0x7f0000001480)}], 0x8}}, {{&(0x7f0000001540)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001580)="921a9e35f6ff807b64b177e02e8dc63112f949c9bc83f5c42995ed3ce4820110e62a353c182d1e95cf221314da3682f8762eecbfa17e925893c66a3e6694b1623d0087c0c0ee975d2f4347afb1ae90d7bed19804782d007c8f612da0f4ee239133025628f0c1253e7b9863843a3a7be4cceea2c16a3b76808a099495ae05300147470a9eaebd1dd05c6dda1fc4b899bbc2562f4a1d832e76f4b0377d94601172c0196aabdff5bc60892dd86a1dbd9661eabffc97a5691eb707920087f458fad4e8b6", 0xc2}, {&(0x7f0000001680)="2ee1a36ccddc9749cdf4178a981e144724b3323af31e79a51a3bd9423ef7880c81181841ffe1be3882fc16f940c2de78cb8cac99edc27ad28c285d0fe17484aa19224cdfc1d7f93dbcd0d83d19cbec03e71de7e1180028608e7380bd9d3a1ffdd618a0676c8da5a8034613a74356a3094f614300434b6aa13e608bd0da2f59b0b137f96a5e16ee13da7d6dd6a1a09c963d5605e12d51813251805c7a9f31abc25cc25ded0597ea5b65a4", 0xaa}, {&(0x7f0000001740)="b8aee7b348785d558a08754bc24abdddd62bb1be738ce675c61cae85a9ed79411bd176659b841440dbff7427731c079c99d9d8c9eb0aae89878af412d3f14be135b6fbdd7159ef0aa9129c42cadefbca7b07fafbd27f9cfdafda068df4eac213ae82a695c524c7a7247e80ab495b0f5f6574da69452706ab72677cddd0e7b16d990343af18ef1eff7868e025", 0x8c}, {&(0x7f0000001800)="1c01bdfb043e1d9afa91a3f46a9aa1729a6d83c47b517be3e8fb699523b84cbb51c9a8ea30624b0b7df033c69fcc04989e47c1c4393dfb85d9e01fc1f51d5d568dd6a828ab7e126c449f5a25f4b5c8f0c8af904c2f", 0x55}, {&(0x7f0000001880)="976d16e7f09d108875d7969b16b8bab7580e800ff9829356c468ed2eb721ecf3db427b6d5c768be51ec9d1db0548189a706a653ff7443878a99c78aa4317075351b42db15fe8e6ed0001dcc00dc3cac85cef8cad04ff32eea0a11206d9457b6bdb2a7b7817a406f3a2092678201bedf2538ee34d182697cd9e", 0x79}], 0x5, &(0x7f0000001980)=[@ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xa7, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x3, [{@rand_addr=0x64010100, 0x30}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x8001}, {@local, 0x7}, {@broadcast, 0x7d0279b8}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1f}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x6, 0x0, 0xb, [0x9c38, 0xfd, 0x6, 0x5, 0x0, 0xcb, 0x1000, 0x4]}, @timestamp_addr={0x44, 0x44, 0xdd, 0x1, 0x2, [{@local}, {@multicast2, 0xe0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@loopback, 0x6}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}, {@empty, 0x101}, {@rand_addr=0x64010100, 0xff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x1a0}}, {{&(0x7f0000001b40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x18}}, {{&(0x7f0000001c00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000001c40)="73731ee9297cdb936a035ccd707e72cf783df6ca61339fd56853b3d2f21391d1b3dc80eec45f16e811d4fbea5f9cd5ba26ce8b04852bf3fc4c0be0040816c3eb470ddb8611df7752a89f0142de6138a041e09d11c7aba4e4ea7d9f4fb58efb400100596774ddc2384f7cfef9b619d28027b7a53f54345f2438aed2d1cafc069aec1b61c1b83d3a0d7a1c8fb52a0fc37e", 0x90}, {&(0x7f0000001d00)="a8b7ab5c7d2bf621d933e9ade29bfb7347db8d111c7480bcbe51b4877cffa0cc7011097e295f3586a511d753fa4e400fdd240d4a5d1f5b915e7e68edda4135bda1733d7c5c4b3572584c523baa561efe882220952e9c1f", 0x57}, {&(0x7f0000001d80)="89d7bd56bea32c0bcf486330b6139a5c882c567519578b98894bce46485a4c9da672b9", 0x23}, {&(0x7f0000001dc0)="afea4594548d6a12feea68e907f5eec33697b3e847fc820ff9828d9517cda21b034633aa2f9bb7f3ba331e1c1af1b109ceea5f9105c9ea6e7e43320d59394985e9c9a106cb9686f2813d45fa5142ffedb4afdf17f4599ed5b84ee44d6c264f521e11d92a1be2bef8b2d308a97d54df807f69a89639a3f0ab6ba4827d75aa6e95a1f14921a0d1c174180eab8faefee7537577f36e2e9e69406b351ac5b9863a7e885a83905e4556bd3e24bbf44e842e6d8bf89fa5164375482a9e2bb475d87da189ae44", 0xc3}, {&(0x7f0000001ec0)="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", 0x1000}], 0x5, &(0x7f0000002f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf23a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x98}}, {{&(0x7f0000003000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003040)="aa50933f89f5da", 0x7}, {&(0x7f0000003080)="cad4a399b6c5f0be18b4f902df7df013417dd9579666b5b8753e90f5a4b1f24f26a0c4e3da8415562cfce2876a8a74e39b2f0c17ae95fdc60f8301738b6bc113460e79104699120bb60b03f4aa967d9f50ea104dc2d3f982d80fed984759105376313109d59f1a4765a510d5aacf5497d12685bc68ddbf5424aa6381d3c6ecc849e9900072d483a7111d9acd0f221bffb23a5189321e898c67f009ff9884bcdea893f207e2eac7ae213a451a40b6c63b678dac74dda77ea5644db239", 0xbc}, {&(0x7f0000003140)="ccbed51e6f39b35fd72556af71d0165ff24b9213f890d1e8ec102c7494afc509584dd99c83f6e44cf415d6aea67b8c5fdecb156ae780193b7c497b1d77d8d0efc9b77021f885d64a2942deafc41dc98983e2a09db4b90c3334d34401b5", 0x5d}, {&(0x7f00000031c0)="d6e4f2da5e17c519e9b680d44b734e126a022c652361ceb4a456280f30457b3b0e1465161df118dad5c6a02a82c703c54cf20957ee72edb140fd332234ad70453f58513e275c6720243b19a48b49d9defd7d65bb14e68e961d1742209da6a122f71a9f696bc09d25234efc527e611937d107fc1ce45cfa4f711587eb88569381691fc5c6e9891e8f95bba9c56873e96645feafc3efb1cfa7ce2ba3172ab572107961fe1a6b0df17e09d714ba867b41243d4116021356c1bf6832310b2aad7235a6a3cad1", 0xc4}, {&(0x7f00000032c0)="8071379269546271e09e9dd562702af276d59ab86268240c744bf37e7ddaa554d7f6847a187f6439cac785df84fbedd9ed0fa32f733f53781c24a0d6f52635dd28b3adf0feda6354144bf70bdcdd1eb07bc75b0d94f2b77f9429865af61ce8751cc7adde3a379654dfbfc6d8e84a249c696d", 0x72}, {&(0x7f0000003340)="04666ac0902196a20eb363acc9f4f63502b19e8487bd32a9d48e12209663cc0f493d3b29059e42499598fce4c219f9c98a271b84bd2726b61701be6334a75070ddea222d7de0800c627d6f06057c187b961ed432d2532f1289bc82a168a4a9420cc1843ddd772fb9988ecb170c733b78c1fa090ae29fe7ba8248cd45a2b43a958d4d670a6e27d21774e7da68d086ccfe1b4cc971e7", 0x95}], 0x6, &(0x7f00000035c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @cipso={0x86, 0x1a, 0x0, [{0x2, 0x4, "9a45"}, {0x5, 0x2}, {0x7, 0xe, "6e56e4ab2acf022c792d8629"}]}]}}}], 0x50}}], 0x6, 0x4040040)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000037c0)={0x3, 0x200, 0xc, 0x8001, r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003880)={{r7}, &(0x7f0000003800), &(0x7f0000003840)=r6}, 0x20)
getgid()

6.660415692s ago: executing program 2 (id=6751):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff, 0xfffffff0}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffffffffffff}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x4, 0x5, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000010201030000000000000000020000072400018004000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000040)=0x80, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e)
sendmmsg$inet(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000580)='*', 0x1}], 0x2}}], 0x1, 0x2400c8c0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c)
listen(r3, 0xf58e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000f80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10)
socket$kcm(0xa, 0x3, 0x87)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000380)={0x0, @phonet={0x23, 0x1, 0x22, 0x81}, @in={0x2, 0x4e23, @empty}, @qipcrtr={0x2a, 0xffffffff00000002, 0x7ffe}, 0x5000, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='tunl0\x00', 0x1, 0x0, 0x5})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000180)={0x100000003, 0x200008, 0x100000000, 0x1, 0xfffffffffffffffc, 0x8, 0x1000000000000007, 0x2}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000300)={0x3, 0x6}, 0x4)
write$tun(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x28, r6, 0x7, 0xffffffff, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x28}}, 0x0)

6.132193822s ago: executing program 2 (id=6757):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x10000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x6004000}, 0x40840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="183000000000000000000000030000001830000000000000000000000000000018000000000000000000000000000000000000000000000000000000080000001800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x44}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01072bbd74000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1)

5.827947745s ago: executing program 2 (id=6758):
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={<r3=>0x0, 0x5}, &(0x7f00000002c0)=0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304fdffffff0000d598cd2a0000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d06001400128009000100766574680000000004000280080020000900000008001f0004"], 0x44}, 0x1, 0xba01}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000300)={r3, 0xf2}, &(0x7f0000000340)=0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0x1, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x1}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0xfff2, 0x7540}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
unshare(0x68040000)

3.946799534s ago: executing program 5 (id=6773):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac, {0x0, 0xff3}}, 0x0, @default, 0x5, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@random={0x1, 0x9, "2421fd45efaa9a157e"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x74}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000580)=0x9, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e24, 0x202, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd460104000000000000131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c388df6"}, 0xd8)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="ec", 0xfdef}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000380)={'vlan1\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2e0}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000a80)='syzkaller\x00', 0x5, 0x1d, &(0x7f0000000540)=""/29, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0xad}, 0x94)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f0000000480)=0x8)

3.425671833s ago: executing program 0 (id=6777):
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, &(0x7f0000000100))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000000c0)="07000000010003", 0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_udp(0x2, 0x2, 0x0) (async)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, &(0x7f0000000100)) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f00000000c0)="07000000010003", 0x7) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

3.209552212s ago: executing program 0 (id=6779):
r0 = socket$inet6(0xa, 0x5, 0x5) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000013c0)=0x5a6, 0x4) (async)
bind$inet(r1, &(0x7f0000001400)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r1, &(0x7f0000001440)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64)
sendmmsg(r1, &(0x7f0000001480), 0x800001d, 0x300) (async, rerun: 64)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f00000014c0)=0x5, 0x4) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000001480)={0x8, 'batadv0\x00', {'caif0\x00'}, 0x7})
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000001500)=0x40, 0x4)
recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/64, 0x40}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4a23, 0x1, @empty, 0xffffff5d}, 0x1c) (async)
listen(r0, 0x50) (async, rerun: 64)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001a40)={{<r2=>r1, &(0x7f0000000040)='GPL\x00', 0x62780, &(0x7f0000001300)={@align=0xffffffff, {0x8, 0x4adf, 0x4, 0x2}}, 0x6, &(0x7f0000001380)={@_ha_fsid}, &(0x7f0000001780)=0xce99}, {[0x7f, 0x9, 0x5, 0x4]}, 0x80000001, 0xa3, &(0x7f0000001980)=""/163}) (rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000bc0bffffffffffff181105538f828fc713943fc4781ea586cb5109e630f57ca88a2ff46bd2f3c44a330ff0dc45b47e17a30260128dc50caf725da45f0f865955ab96a84e52cc98297206a6d7934b1a75fc260a40748794db37a2590283c3112efed0494583aa259743dfa991131947ef3f14e60446625f8209d10fd1af28813bcd7f34706287c93ba65a3f24c28e6f4724905799d196c6b11d4b9daef7bdd7c41cfed06074fdc32d1f2b33aded0c0a1ef4", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000001940)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000015c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x8000000000000001, 0x8000})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000001340)=0x3fa, 0x4) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), r4)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async)
r7 = socket(0x15, 0x80005, 0x0)
connect$inet6(r7, &(0x7f0000001bc0)={0xa, 0x4e24, 0xf, @remote, 0xffffff5f}, 0x1c) (async)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000001c00)) (async)
listen(0xffffffffffffffff, 0x40050) (async, rerun: 32)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 32)
ioctl(r8, 0x400452c8, &(0x7f0000000080)="000000000000000003000000000000000000000001") (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x1f, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESOCT=r9, @ANYBLOB="0000070000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

2.859866349s ago: executing program 5 (id=6781):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x344c3}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="18010000260001030000000000000000050100800c0001000000000000f400a489160a1150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43db2df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8"], 0x118}], 0x1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="5272987d4426f6522e2c9e7d07dc7826c28fda03ba949d99cb0e29cf520ca0aff13b488c823765fab0c1fafd2e5dbcc9f5e1d1b2a261e86ae125c1ce5c91facbdf7713a208503bed109e75108fd0ea80f406454f4eb387f402d3c582af424f293a6c4493fe84bf5cc05b27341640836a762d35f71c4df4258c71e017073f90ec60b63df8ee062bb6f9e00a1969ef506af82c68d1be6a7d2bc90b265a1e72bc93a52bddc1a0c241146cca75e1119951e5f57c638b6d5b4513c3642a97268d949d76340366d272ce2b155cb7619fc31f080d2f0e7cfbcbb108c7d3cbb6dc0f0dc8c8e7c8e992eb5fc1130f8dfefc4d40c380f718c12ab5068359f0ccfa2e485846ec5b086b5b49990f28c6234795e37d3271c40e017f112a17b3d0d08882869b51c32afe00"/306], 0x3c}}, 0x10)

2.429369964s ago: executing program 5 (id=6782):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, 0x28)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x72a, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000480)={0x30000008})
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0xb486a296cdd8088a, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="500000002c5a680811377001f640fe44087f58b96ca9825b237f798c0ea5483b26dbc48cad45c71988d182d648bd319c25157dedb56813846c1488f2ea654178d5b3363820e73ea5bc21cf7c", @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf25190000000c0099000d0000001e00000005006000080000000500a300000000000500a3000100000005001e0058000000050060000400000006006d0079060000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048800)
socket$kcm(0x2, 0x200000000000001, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c773a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$kcm(0x2, 0x7, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000640)="43c6f51198dfa3d21d087a2b2a0874d4a3852c1d2d15d16aa61a59413b2837c7e8201e0da9a93590279572e6813dbae944ab51bac728db7c3c7eba21cb9de11051833a9d9c29fc016467c50c803b6bb28fcdb70e35f135a2da0801db0025d650905c65602654b1e345d2b68c15b5d4b82296a8659985360b5c10b8cb736c148001aa2df82bd53aa69fd33068cfb76b", 0x8f}, {&(0x7f0000000f40)="9e48a8a698a042dcb2362147cc437809011457e8f4cfa9c148ae65e2befae14aaf6846d5fd2221497ddd94d684d975c846597563b4b951374b9c2143426c0aa3b40fd0416be98e83618dc4da10010eed8f03f3f8af455827cd9824fc9c998a4e80d69fec25af2323582cdce6e410e5118cba7d8bc6a438f129b85c8528c7fa3ab75d3e0b1b11afa7f8d97debff4b33249535b27bba163c03faec5872e2ab9ff9b1f9114433bb1a150540c9e30342e8698308dff00d50fc54a3a862faee9635a138698cf610b2e28e0adf7e9df5076dadd54a6c316022496a875f61846d9ee54ef97d6540288819dfe9b75edd23", 0xed}, {&(0x7f0000001140)="7db27ff1fcea54c67ccc2817afb9705076a0639ec92fbefdedc570e4138b86e8e34c6fea3fa08b2ed0afa84d37420100496bb999f98abb0626ce7d1ab56dcc2893380af92f6a09b5ec88330a7c9705f5de621a7739000f80eced227f9818038297afc660b6347644c72758bc6aed286de17b6eb7c22e487e5e646f2c7eba8eda0ac420e6d703c83d2ded779960e06bef5c88d54c9e9c71890c0a23e3c398842748b0e7e6235d5a6d753ff5b067d06e37f68d16670b5219722e524a66f924a76c0dfd90b9ebe1b1bf95700c", 0xcb}], 0x3)
getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000002c0)={@loopback, @rand_addr, <r9=>0x0}, &(0x7f0000000840)=0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newchain={0x34, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x10, 0x6}, {0x0, 0xffff}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4000800)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x30, r10, 0x304, 0x70bd2a, 0x25dfdbfd, {{}, {0x0, 0x4000}, {0x14, 0x19, {0x5, 0x8, 0xfffffff7, 0xfffffffe}}}}, 0xfffffe84}, 0x1, 0x0, 0x0, 0x20004805}, 0x8800)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40c4c3, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x8000004, 0x20000000000, 0xf, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x9c3, 0x0, 0x80000001}, 0x0, 0x0)

2.427947851s ago: executing program 3 (id=6783):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000140)=0x2, 0x38c6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="d5c27622087d4fa3258240dcbddade50d705fb393f1c92c407aac6466373a90cc9442aa74d1d4263663d99065f4b3a5dc96018a132f02c71f96de4345fc7b5e2bddcc3572a2673b3d92cec0ca892da24396b8dddd5a3da214c3fd30bc96e281668e233c7eaf1a3b6ec8e9e335696ad1359bc072398d9e4da02b8894ee71559b87d34be63c7d64b1a0600000037c32c6d9613d2b91abf6a5814004ddbd3b4ac0bcd050000000000000009da6ddceebb884f6a81652852b6639092287a942ca506df5375dacffdeaa561686f8b28e9f750e9d12b6dd861383bb4833beee5c98900d411da9414946b6429fac9a9cd91b26f0db7fff92b259e6f33335425b879d4a778ea02ef2b2a2ae733ad055fe2c9f67821b9e300e216b4d0fb261786ae93c852c13f1f7ee06156ca4a3898b10ad01eca014f60fe668b6e8286e2cdc3f380e9fd397394b45c6f8bcd74c3698c0e542cc28a9b1e25dcd5273477d5b157b0e1a28313807f10925d31fb19cee53918904a6ff5c82605d1a0accc14896e4e887895d018ab4ca816e0c55ea285afaf45161413a863450adc404bc1819cb9e8115ac4f4a5d2a062a5e63583c9c006b8773127de1f7d4be4074bc84a85b5efeadd09e9a8cf9f4c63021f2a6532f204d9894617569376d5fb70293e074aa0aec8caf18c9f7b06a4f26b01e2dc3f1d6a17c50f04414a1a905d1a57582c1bea944191ac5bdf95a6570d3d2784d452039357", @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8effb964f9636b59, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @value=r2}, 0x94)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r2, r3})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000003c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000540)={0x1, {{0xa, 0x4e20, 0x1b, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}}, {{0xa, 0x0, 0x855b, @private1, 0x6}}}, 0x108)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000700)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000740), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0), 0x200002, 0x0)
r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14, 0x80000)
getsockopt$sock_buf(r9, 0x1, 0x1f, &(0x7f0000000880)=""/41, &(0x7f00000008c0)=0x29)
r10 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r10, &(0x7f0000000900)={&(0x7f0000000940)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000980)=[{&(0x7f00000009c0)='r', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="11000000000000000040030011000000000000000000004cc2131e04bfd21b30f0b60010000000000000008400000007000000"], 0x28}, 0x0)
r11 = openat$cgroup_procs(r8, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000a80), 0x12)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="767863616e773ef95f"], 0x9)

2.250707143s ago: executing program 0 (id=6784):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x1}}, 0x10)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c00e5ffb604000000000000b705000000000000850000006300000015000200000000008101180000000000850000005600000095000000000000002b2f8f73316ac57a9b007f26e038082aadc5903560e1cf54b1fdd698c409c0237fdc68cb992d144da2a8577803a6a95999831e245d415b0fad2fba72fb57d3a051d95120"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80800)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000480)="05000000010001", 0x7)
write(r5, &(0x7f00000004c0)="0d000000010001", 0x7)
ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000500))
read(r5, &(0x7f0000000540)=""/128, 0x80)
read(r5, &(0x7f00000005c0)=""/128, 0x80)
read(r5, &(0x7f0000000700)=""/128, 0x80)
write(r5, &(0x7f0000000780)="3400f400070000000000000000", 0xd)
read(r5, &(0x7f00000007c0)=""/128, 0x80)
close(r5)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000840)={'NETMAP\x00'}, &(0x7f0000000880)=0x1e)
sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000905000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r3)
syz_genetlink_get_family_id$team(&(0x7f0000000b00), r3)
socket$nl_route(0x10, 0x3, 0x0)

2.154951043s ago: executing program 3 (id=6785):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c0000001000010856bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000800000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000100000/0x3000)=nil, 0x3000, 0x1000009, 0x10010, 0xffffffffffffffff, 0xb965f000)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0), 0x171}}], 0x400000000000172, 0x4000000)
sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000)
sendto$inet6(r2, &(0x7f0000000440)=']', 0x1, 0x4000000, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r5=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14)

2.070975099s ago: executing program 4 (id=6786):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="08001fc26692598d", 0x8}], 0x1, &(0x7f0000000300)=[@ip_retopts={{0x10}}], 0x10}, 0x24048894)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x1, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080)

1.844782257s ago: executing program 4 (id=6787):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x20000003}, 0x1c)
setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="16000a0069000b00"/24], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c02000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="0000000000000000010000000000000010000000000000000400000000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100000300000000"], 0x28c}, 0x1, 0x0, 0x0, 0x81}, 0x10) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c02000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000006000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000000000028bd7000000a000040000000000000000005000000050000000c000f00ff01000000000000080028000000000008000c001eca0000b60003006465666c61fb7ae4dbbbf27d0e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000700300003c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c277bf00759bbab180f703934cf67200971c0ba64d04de8e88d450888000014000d00ac1e0001000000000000000000000000ac00070020010000000000000000000000000002640101010000000000000000000000004e2000ff000900010a00a0c000000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="0000000000000000010000000000000010000000000000000400000000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100000300000000"], 0x28c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3800000019183f6cf38dac7c02000000000000000c000340000000000000000408000b400000000108000a400000000108000b40fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x8004)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7002ffdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="5e8654a40c0000002d3c8b6da411e7aea29e5d"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8810)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_80211_join_ibss(&(0x7f0000000a00)='wlan0\x00', &(0x7f0000000a40)=@default_ibss_ssid, 0x6, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'dummy0\x00', <r7=>0x0})
bind$xdp(r5, &(0x7f0000000ac0)={0x2c, 0x0, r7}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r6, &(0x7f0000000140)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=""/4095, 0xfff}, 0x1) (async)
recvmsg(r6, &(0x7f0000000140)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=""/4095, 0xfff}, 0x1)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001cc0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x8000, 0x0, 0x0, 0x9, 0x8000]}}, 0x5c)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000001d40)={0x0, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, 0x0)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001e40)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001e40)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001ec0)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000001f40)=0x6, 0x4) (async)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000001f40)=0x6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r10, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0)

1.7218004s ago: executing program 3 (id=6788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4ff, 0x4)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010026"], &(0x7f00000001c0)=""/212, 0x26, 0xd4, 0xa}, 0x28)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x590, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x28040680)
r3 = socket$packet(0x11, 0x3, 0x300)
bind(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000040)
sendto(r0, &(0x7f0000000080)="a80000004100010003000000eaff0000030100002a0000003200010000112233445566778899aabb88a84500894f000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020005000300010000001000010000008899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0)

1.586389498s ago: executing program 4 (id=6789):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = accept$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000680)=0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b0, 0xd0, 0x5802, 0x294, 0xd0, 0x294, 0x1e0, 0x378, 0x378, 0x1e0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x24}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xfffb, 0x3, 0x5}, {0xffff, 0x5, 0x4}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x6, 0x4b8e48a2, 0x101, 'syz0\x00', 'syz0\x00', {0x10101}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x30)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4)

1.577282865s ago: executing program 3 (id=6790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a310000000028000480080002401886c3010800014000000005140003006d60637674617030000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0xce4ba1d7b79b5cfb, r3, 0xd44de000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth0_macvtap\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x15, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x2, {0x2, 0x0, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4c084)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000000)="d22f8dedd91ec109be9153af3b56b1443c970e4bc1d256e96753ac0d02b44ca9b36f6288afaa5984b9598767f0701df8481291f7a94a7948f2cd67114166a94bdd9b634ff02cef44ca123af314f3565119e5a041d33a75ee8ee18b2618b5d97b8fa9c6efd50a57c097786d0f5ab2169c9a126b0ffac250d3fcbeedaa50b4a1809602879e8bb56941805459eca5901153a00f8477ead54a1a3c6f7dac6be084b2f74441cdfb3045e0f5bb170700221e1695ed4496eb3adacd1dd56b7db361967e58f0fa1e4837346e2947dcc4f352868ebfa571f9", &(0x7f0000000180)=""/219}, 0x20)

1.439099162s ago: executing program 4 (id=6791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}]}}]}, 0x170}}, 0x0)

1.425182998s ago: executing program 4 (id=6792):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], <r0=>0x0, 0x9e, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000700), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000680)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000780)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/81, 0x7ffff000}, {&(0x7f00000009c0)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
write$nbd(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="6744660001000e00030001c9ea0c60a0"], 0x10)

1.248396389s ago: executing program 0 (id=6793):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f0803000000e8c94ef56491ee54be0e1c7491b1c7289f0e78686c84", 0x1d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=@framed={{}, [@alu={0x7, 0x0, 0xc, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe0a}, 0x94)
sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003401108004500003800000000000190780a010102ac1414aa0b00907812000228250000000000000000000088be00"/70], 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.103201897s ago: executing program 3 (id=6794):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000a40)={0x1f, 0xffff, 0x3}, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2074, 0x0, 0x0, 0x0, 0x5e09}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x640, &(0x7f0000000d00)=""/4106, 0x41100, 0xc}, 0x94)
write(r0, &(0x7f0000000a80)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x42090)

1.041965124s ago: executing program 5 (id=6795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0xfffffffd, 0x20000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x7ffffffe, 0x5}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x54}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="0e5a25", 0x3}], 0x1}}], 0x1, 0x40015)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x2, 0x2)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

874.276757ms ago: executing program 2 (id=6796):
socket$rds(0x15, 0x5, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x92f5e}, 0x6d)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/168, 0xa8, 0x0, &(0x7f0000000480)=""/151, 0x97}}, 0x10)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000020fc0))

763.151813ms ago: executing program 5 (id=6797):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240)='%pK    \x00'}, 0x20) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40)
unshare(0x8040480) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$LINK_DETACH(0x22, &(0x7f0000000540)=r5, 0x4) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f0", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000900)={0x9, 0x4, 0x6, 0x5, 0x5, 0x3, 0x9, 0x5, 0x7, 0xf4, 0x64, 0x8, 0xfb, 0x10}, 0xe) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000cc0)={<r8=>0x0, 0x10, &(0x7f0000000d00)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000001240)=0x10)
setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000001280)={r8, 0xd1}, 0x8)

730.343143ms ago: executing program 3 (id=6798):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet(0x2, 0xa, 0xd)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0xe6905000)
mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xf, 0x12, r1, 0xfffff000)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r4, 0x8971, &(0x7f00000004c0)={'dummy0\x00', @ifru_mtu=0x6})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000048bd995090000000000010071120100000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x70, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4)
bind$bt_hci(r0, &(0x7f0000000a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000a80)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x42090)

590.042336ms ago: executing program 2 (id=6799):
r0 = socket$kcm(0x21, 0x2, 0xa)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7100fcdbdf25020000000b0001005c5b3a57"], 0x20}}, 0x4c880)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40)

315.825311ms ago: executing program 2 (id=6800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
write(r0, &(0x7f0000000340)="ff7f0000ffff0011223344554305000f32001800000100112233445500001000000000391cfe", 0x26)

287.859579ms ago: executing program 4 (id=6801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x7}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r2, 0x2)
accept(r2, &(0x7f0000000300)=@in={0x2, 0x0, @loopback}, &(0x7f0000000380)=0x80)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180400000000000000000000001f1cd7ce000000000000009500000800000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000600)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x38)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000780), &(0x7f0000000880)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000900)={r5, &(0x7f0000000940), &(0x7f0000000980)=""/6, 0x2}, 0x20)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='highspeed', 0x6)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000780)={0x1, 0x8}, 0x8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000009c0)={r5, &(0x7f0000000a00)}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x1, 0x70bd27, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x42885}, 0x4004000)

211.2298ms ago: executing program 0 (id=6802):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000000)=0x60)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62a050000f69e1ba1e3482e6e2bb35e140602000000000e000a0010001a0002800000128cb831d54ca5e189be4eaaf9a0316cbc837d82f84ed59bd3116af494854cba98199b53c4e8", 0xffffffffffffff2c}, {&(0x7f0000000180)="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"}, {&(0x7f00000002c0)="7637eb6e13a1a0f0b0906a4963d1b852e0da273b3a7ef825bf105b0fc9b9e0f664a9c03b5a8391dea83fd698dc554f8ba27a2582cd121158d910a681d4571ddad9640c3108cb7908bf201e2a998180bab47cbe09f9715e426583610cddff3d528e3136e96e73e6ae8b15564bb407b23d7d02d07856583c31a139ad9c71e54cf1201da66ec8e28c7a53e666f755dfd543e9d07e60f704edc700e7be9a82691b9735f1ad3234037aded381c73a097eaac11c8f9ab7a2d30ebc57c6c735e1842d0c22f93bbcd2c87b733cf12acd51224a9586a9d9308b1213ff51072eaf814cb57f367e5aa166a30d4c7e", 0x41}], 0x1}, 0x24040011)

19.548306ms ago: executing program 5 (id=6803):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280"], 0x78}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000500)=0x10, 0x4)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000540)={<r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x4000)
sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8044}, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000900)=0x10, 0x4)
bind$xdp(r6, &(0x7f0000000940)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
bind$packet(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x8}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004000000080018000aac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

0s ago: executing program 0 (id=6804):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f00000000c0)={'wlan1\x00', @random="060000001000"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @link_local})
r3 = socket$xdp(0x2c, 0x3, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
mmap$xdp(0x0, 0x0, 0x3, 0x30, r3, 0x80000000)
syz_emit_ethernet(0xc2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0)

kernel console output (not intermixed with test programs):

tion bad kind
[  881.521711][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6018'.
[  881.576232][T29301] netlink: 'syz.5.6016': attribute type 5 has an invalid length.
[  881.669604][T29152] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  881.669652][T29152] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  881.669681][T29152] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  882.067961][T19562] Bluetooth: hci5: command tx timeout
[  882.126073][T29304] syzkaller0: entered promiscuous mode
[  882.126101][T29304] syzkaller0: entered allmulticast mode
[  884.153752][T19562] Bluetooth: hci5: command tx timeout
[  886.285112][T29152] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  886.285152][T29152] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  886.285181][T29152] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  886.330847][T29315] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  886.330874][T29315] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  886.401722][T29152] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  886.401762][T29152] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  886.401790][T29152] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  886.605121][T29315] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  886.605147][T29315] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  886.655681][T29152] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  886.655720][T29152] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  886.655746][T29152] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  887.002013][T29366] netlink: 'syz.4.6030': attribute type 1 has an invalid length.
[  887.198530][T29377] netlink: 'syz.5.6029': attribute type 5 has an invalid length.
[  887.489123][T29152] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  887.798696][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  887.933292][T29152] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  887.959496][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  887.965354][T29152] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  888.020872][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  888.021887][T29152] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  888.083572][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  888.434790][T29152] 8021q: adding VLAN 0 to HW filter on device bond0
[  888.497597][T29408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6038'.
[  888.505610][T29408] ip_tables: iptables: counters copy to user failed while replacing table
[  888.514640][T29152] 8021q: adding VLAN 0 to HW filter on device team0
[  888.553498][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.553611][ T7347] bridge0: port 1(bridge_slave_0) entered forwarding state
[  888.627275][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.627412][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state
[  888.904411][T29413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  888.962905][T29417] ip_tables: iptables: counters copy to user failed while replacing table
[  889.387885][T29423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6042'.
[  889.583305][T29436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6045'.
[  889.863417][T29446] netlink: 'syz.5.6047': attribute type 4 has an invalid length.
[  889.955548][T29152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.343640][T29445] syz_tun: entered promiscuous mode
[  890.363510][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'.
[  890.532675][T29152] veth0_vlan: entered promiscuous mode
[  890.581068][T29152] veth1_vlan: entered promiscuous mode
[  890.803050][T29468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6053'.
[  890.832176][T29152] veth0_macvtap: entered promiscuous mode
[  890.866058][T29473] ip_tables: iptables: counters copy to user failed while replacing table
[  890.866381][T29152] veth1_macvtap: entered promiscuous mode
[  890.920266][T29152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  890.958598][T29152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  890.998332][ T7358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.008761][ T7358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.008821][ T7358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.008866][ T7358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.451813][ T7347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.451841][ T7347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.553361][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.553387][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  892.041598][T29511] bridge0: entered promiscuous mode
[  892.041670][T29511] bridge0: entered allmulticast mode
[  892.150385][T29514] bridge6: entered promiscuous mode
[  892.150413][T29514] bridge6: entered allmulticast mode
[  892.716448][T29523] ip_tables: iptables: counters copy to user failed while replacing table
[  892.781558][T29527] FAULT_INJECTION: forcing a failure.
[  892.781558][T29527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  892.781595][T29527] CPU: 0 UID: 0 PID: 29527 Comm: syz.4.6066 Not tainted syzkaller #0 PREEMPT(full) 
[  892.781619][T29527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  892.781632][T29527] Call Trace:
[  892.781641][T29527]  <TASK>
[  892.781650][T29527]  dump_stack_lvl+0xe8/0x150
[  892.781688][T29527]  should_fail_ex+0x410/0x560
[  892.781725][T29527]  _copy_from_user+0x2d/0xb0
[  892.781756][T29527]  ___sys_sendmsg+0x1c6/0x360
[  892.781788][T29527]  ? __lock_acquire+0x747/0x2de0
[  892.781816][T29527]  ? __pfx____sys_sendmsg+0x10/0x10
[  892.781887][T29527]  ? __fget_files+0x3a2/0x420
[  892.781911][T29527]  ? __fget_files+0x2a/0x420
[  892.781943][T29527]  __x64_sys_sendmsg+0x1b1/0x290
[  892.781967][T29527]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  892.782022][T29527]  do_syscall_64+0x166/0x520
[  892.782043][T29527]  ? trace_irq_disable+0x3b/0x140
[  892.782066][T29527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.782087][T29527]  ? clear_bhb_loop+0x70/0xc0
[  892.782114][T29527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.782135][T29527] RIP: 0033:0x7fe67dd9f559
[  892.782155][T29527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  892.782174][T29527] RSP: 002b:00007fe67ed03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  892.782198][T29527] RAX: ffffffffffffffda RBX: 00007fe67e025fa0 RCX: 00007fe67dd9f559
[  892.782213][T29527] RDX: 00000000000008c4 RSI: 0000200000000280 RDI: 0000000000000004
[  892.782227][T29527] RBP: 00007fe67ed03090 R08: 0000000000000000 R09: 0000000000000000
[  892.782240][T29527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  892.782253][T29527] R13: 00007fe67e026038 R14: 00007fe67e025fa0 R15: 00007ffea9f3a708
[  892.782285][T29527]  </TASK>
[  893.120089][T19562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  893.126192][T19562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  893.128053][T19562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  893.133617][T29534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5978'.
[  893.139568][T19562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  893.154008][T19562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  894.247929][T29532] rxe_eth0 speed is unknown, defaulting to 1000
[  894.562420][ T7335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.562448][ T7335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.778568][T29561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6075'.
[  894.818603][T29568] ip_tables: iptables: counters copy to user failed while replacing table
[  895.270500][T28356] Bluetooth: hci1: command tx timeout
[  895.523947][T29532] wg2 speed is unknown, defaulting to 1000
[  895.721960][T29581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6081'.
[  895.738678][T29583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6081'.
[  896.100999][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6084'.
[  897.078133][T29611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6086'.
[  897.078164][T29611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6086'.
[  897.078881][T29532] bridge0: port 1(bridge_slave_0) entered blocking state
[  897.080041][T29532] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.080199][T29532] bridge_slave_0: entered allmulticast mode
[  897.082705][T29532] bridge_slave_0: entered promiscuous mode
[  897.132186][T29532] bridge0: port 2(bridge_slave_1) entered blocking state
[  897.132416][T29532] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.132572][T29532] bridge_slave_1: entered allmulticast mode
[  897.134488][T29532] bridge_slave_1: entered promiscuous mode
[  897.207981][T29532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  897.211724][T29532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  897.261133][T29617] ip_tables: iptables: counters copy to user failed while replacing table
[  897.264512][T29532] team0: Port device team_slave_0 added
[  897.283920][T29532] team0: Port device team_slave_1 added
[  897.324132][T29532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  897.324152][T29532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.324175][T29532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  897.362099][T28356] Bluetooth: hci1: command tx timeout
[  897.363378][T29532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  897.363396][T29532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.363426][T29532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  897.484688][T29532] hsr_slave_0: entered promiscuous mode
[  897.485877][T29532] hsr_slave_1: entered promiscuous mode
[  897.486689][T29532] debugfs: 'hsr0' already exists in 'hsr'
[  897.486711][T29532] Cannot create hsr debugfs directory
[  898.689714][T29649] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.6095'.
[  898.722664][T29635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6094'.
[  898.725221][T29641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  898.885027][T29532] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.939592][T29649] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  898.941590][T29649] 0ªX¹¦Dö»: entered allmulticast mode
[  899.083541][T29655] ip6gre1: entered allmulticast mode
[  899.116139][T29532] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.303060][T29532] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.428906][T28356] Bluetooth: hci1: command tx timeout
[  899.451984][T29662] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6097'.
[  899.501548][T29532] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.613910][T29671] ip_tables: iptables: counters copy to user failed while replacing table
[  899.960631][T29678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6101'.
[  900.099429][T29680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6103'.
[  900.212656][T29532] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  900.226401][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  900.230833][T29532] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  900.266309][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  900.275575][T29532] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  900.292502][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  900.316789][T29684] netlink: 'syz.0.6104': attribute type 1 has an invalid length.
[  900.326717][T29532] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  900.343500][T29688] netlink: 'syz.4.6106': attribute type 3 has an invalid length.
[  900.348436][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  900.398499][T29684] bond1: entered promiscuous mode
[  900.398993][T29684] 8021q: adding VLAN 0 to HW filter on device bond1
[  900.402229][T29686] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  900.515992][T29705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6107'.
[  900.629886][T29684] bond1: (slave bridge1): making interface the new active one
[  900.629912][T29684] bridge1: entered promiscuous mode
[  900.651742][T29684] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  900.995473][T29532] 8021q: adding VLAN 0 to HW filter on device bond0
[  901.051664][T29532] 8021q: adding VLAN 0 to HW filter on device team0
[  901.076044][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.076170][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.208023][T29724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6114'.
[  901.439554][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.439680][ T7355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.508634][T28356] Bluetooth: hci1: command tx timeout
[  901.964742][T29733] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  902.133861][T29740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6116'.
[  902.135593][T29742] FAULT_INJECTION: forcing a failure.
[  902.135593][T29742] name failslab, interval 1, probability 0, space 0, times 0
[  902.135628][T29742] CPU: 0 UID: 0 PID: 29742 Comm: syz.2.6119 Not tainted syzkaller #0 PREEMPT(full) 
[  902.135652][T29742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  902.135664][T29742] Call Trace:
[  902.135673][T29742]  <TASK>
[  902.135683][T29742]  dump_stack_lvl+0xe8/0x150
[  902.135721][T29742]  should_fail_ex+0x410/0x560
[  902.135767][T29742]  should_failslab+0xa8/0x100
[  902.135800][T29742]  __kmalloc_cache_noprof+0x9e/0x600
[  902.135824][T29742]  ? __pfx___mutex_lock+0x10/0x10
[  902.135846][T29742]  ? genl_start+0x1c9/0x6d0
[  902.135865][T29742]  ? genl_start+0x1c9/0x6d0
[  902.135891][T29742]  genl_start+0x1c9/0x6d0
[  902.135921][T29742]  __netlink_dump_start+0x442/0x7b0
[  902.135955][T29742]  genl_family_rcv_msg_dumpit+0x213/0x310
[  902.135992][T29742]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  902.136020][T29742]  ? genl_get_cmd+0x82f/0x960
[  902.136062][T29742]  ? __pfx_genl_start+0x10/0x10
[  902.136090][T29742]  ? __pfx_genl_dumpit+0x10/0x10
[  902.136107][T29742]  ? __pfx_genl_done+0x10/0x10
[  902.136129][T29742]  ? __lock_acquire+0x747/0x2de0
[  902.136166][T29742]  genl_rcv_msg+0x5e1/0x7a0
[  902.136205][T29742]  ? __pfx_genl_rcv_msg+0x10/0x10
[  902.136234][T29742]  ? __pfx_netlbl_mgmt_listall+0x10/0x10
[  902.136417][T29742]  netlink_rcv_skb+0x226/0x4a0
[  902.136448][T29742]  ? __pfx_genl_rcv_msg+0x10/0x10
[  902.136482][T29742]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  902.136528][T29742]  ? down_read+0x2b9/0x320
[  902.136559][T29742]  genl_rcv+0x28/0x40
[  902.136589][T29742]  netlink_unicast+0x8ef/0xa80
[  902.136636][T29742]  netlink_sendmsg+0x7f0/0xb20
[  902.136671][T29742]  ? __pfx_netlink_sendmsg+0x10/0x10
[  902.136704][T29742]  ? aa_sock_msg_perm+0x144/0x210
[  902.136739][T29742]  ? apparmor_socket_sendmsg+0x98/0x360
[  902.136776][T29742]  ? __pfx_netlink_sendmsg+0x10/0x10
[  902.136802][T29742]  sock_sendmsg_nosec+0x14e/0x190
[  902.136835][T29742]  ____sys_sendmsg+0x54e/0x850
[  902.136875][T29742]  ? __pfx_____sys_sendmsg+0x10/0x10
[  902.136920][T29742]  ? import_iovec+0x73/0xa0
[  902.136957][T29742]  ___sys_sendmsg+0x2a5/0x360
[  902.136986][T29742]  ? __lock_acquire+0x747/0x2de0
[  902.137015][T29742]  ? __pfx____sys_sendmsg+0x10/0x10
[  902.137089][T29742]  ? __fget_files+0x3a2/0x420
[  902.137112][T29742]  ? __fget_files+0x2a/0x420
[  902.137147][T29742]  __x64_sys_sendmsg+0x1b1/0x290
[  902.137174][T29742]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  902.137230][T29742]  do_syscall_64+0x166/0x520
[  902.137250][T29742]  ? trace_irq_disable+0x3b/0x140
[  902.137271][T29742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.137292][T29742]  ? clear_bhb_loop+0x70/0xc0
[  902.137319][T29742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.137341][T29742] RIP: 0033:0x7ff0a979f559
[  902.137364][T29742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  902.137383][T29742] RSP: 002b:00007ff0aa5c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  902.137406][T29742] RAX: ffffffffffffffda RBX: 00007ff0a9a25fa0 RCX: 00007ff0a979f559
[  902.137421][T29742] RDX: 00000000000008c4 RSI: 0000200000000280 RDI: 0000000000000004
[  902.137434][T29742] RBP: 00007ff0aa5c7090 R08: 0000000000000000 R09: 0000000000000000
[  902.137448][T29742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  902.137462][T29742] R13: 00007ff0a9a26038 R14: 00007ff0a9a25fa0 R15: 00007fff5fd789a8
[  902.137501][T29742]  </TASK>
[  902.785527][T29758] netlink: 'syz.2.6123': attribute type 1 has an invalid length.
[  902.792946][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6121'.
[  902.792974][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6121'.
[  902.882926][T29758] 8021q: adding VLAN 0 to HW filter on device bond2
[  902.916963][T29763] bond2: (slave dummy0): making interface the new active one
[  902.927185][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6125'.
[  902.927575][T29758] netlink: 'syz.2.6123': attribute type 10 has an invalid length.
[  902.927594][T29758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6123'.
[  902.958965][T29763] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  902.985195][T29758] dummy0: entered promiscuous mode
[  903.010556][T29758] bond2: (slave dummy0): Releasing active interface
[  903.134908][T29774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6127'.
[  903.571071][T29532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.104256][T29796] lo: entered promiscuous mode
[  904.111062][T29796] tunl0: entered promiscuous mode
[  904.119415][T29796] gre0: entered promiscuous mode
[  904.147184][T29796] gretap0: entered promiscuous mode
[  904.179483][   T30] audit: type=1804 audit(1793124663.690:26): pid=29802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6137" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=100 res=1 errno=0
[  904.211372][T29796] erspan0: entered promiscuous mode
[  904.250462][T29796] ip_vti0: entered promiscuous mode
[  904.258381][T29796] ip6_vti0: entered promiscuous mode
[  904.268681][T29796] sit0: entered promiscuous mode
[  904.286740][T29796] ip6tnl0: entered promiscuous mode
[  904.297060][T29796] ip6gre0: entered promiscuous mode
[  904.312575][T29796] ip6gretap0: entered promiscuous mode
[  904.334995][T29796] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.335746][T29796] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.344393][T29796] bridge0: entered promiscuous mode
[  904.352700][T29796] vcan0: entered promiscuous mode
[  904.363423][T29796] bond0: entered promiscuous mode
[  904.363448][T29796] bond_slave_0: entered promiscuous mode
[  904.363676][T29796] bond_slave_1: entered promiscuous mode
[  904.371834][T29796] team0: entered promiscuous mode
[  904.371858][T29796] team_slave_0: entered promiscuous mode
[  904.372059][T29796] team_slave_1: entered promiscuous mode
[  904.391168][T29796] dummy0: entered promiscuous mode
[  904.409705][T29796] nlmon0: entered promiscuous mode
[  904.420838][T29796] batadv0: entered promiscuous mode
[  904.434309][T29796] vxcan0: entered promiscuous mode
[  904.444040][T29796] vxcan1: entered promiscuous mode
[  904.456104][T29796] veth0: entered promiscuous mode
[  904.470332][T29796] veth1: entered promiscuous mode
[  904.475118][T29796] wg0: entered promiscuous mode
[  904.489582][T29796] wg1: entered promiscuous mode
[  904.493411][T29796] wg2: entered promiscuous mode
[  904.495900][T29796] veth0_to_bridge: entered promiscuous mode
[  904.522547][T29796] veth1_to_bridge: entered promiscuous mode
[  904.538313][T29796] veth0_to_bond: entered promiscuous mode
[  904.544448][T29796] veth1_to_bond: entered promiscuous mode
[  904.562618][T29796] veth0_to_team: entered promiscuous mode
[  904.578927][T29796] veth1_to_team: entered promiscuous mode
[  904.585158][T29796] veth0_to_batadv: entered promiscuous mode
[  904.595153][T29796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  904.595213][T29796] batadv_slave_0: entered promiscuous mode
[  904.600691][T29796] veth1_to_batadv: entered promiscuous mode
[  904.604273][T29796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  904.604339][T29796] batadv_slave_1: entered promiscuous mode
[  904.607581][T29796] xfrm0: entered promiscuous mode
[  904.611528][T29796] veth0_to_hsr: entered promiscuous mode
[  904.617215][T29796] veth1_to_hsr: entered promiscuous mode
[  904.626804][T29796] hsr0: entered promiscuous mode
[  904.630151][T29796] veth1_virt_wifi: entered promiscuous mode
[  904.633684][T29796] veth0_virt_wifi: entered promiscuous mode
[  904.636913][T29796] virt_wifi0: entered promiscuous mode
[  904.662147][T29796] vlan0: entered promiscuous mode
[  904.666180][T29796] vlan1: entered promiscuous mode
[  904.690619][T29796] macvlan0: entered promiscuous mode
[  904.694110][T29796] macvlan1: entered promiscuous mode
[  904.702713][T29796] ipvlan0: entered promiscuous mode
[  904.702899][T29796] ipvlan1: entered promiscuous mode
[  904.721932][T29796] macvtap0: entered promiscuous mode
[  904.727568][T29796] macsec0: entered promiscuous mode
[  904.742779][T29796] geneve0: entered promiscuous mode
[  904.751312][T29796] geneve1: entered promiscuous mode
[  904.760351][T29796] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  904.766278][T29796] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  904.785296][T29796] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  904.799629][T29796] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  904.810054][T29796] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode
[  904.810270][T29796] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode
[  904.810444][T29796] gre1: entered promiscuous mode
[  904.810600][T29796] ip6erspan0: entered promiscuous mode
[  904.810726][T29796] geneve2: entered promiscuous mode
[  904.813747][T29796] mac80211_hwsim hwsim48 wlan2: entered promiscuous mode
[  904.833093][T29796] dummy1: entered promiscuous mode
[  904.889769][ T7347] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  904.889963][ T7347] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  904.890001][ T7347] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  904.890036][ T7347] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  905.310840][T29831] netlink: 'syz.3.6143': attribute type 4 has an invalid length.
[  905.374647][T29532] veth0_vlan: entered promiscuous mode
[  905.391350][T29532] veth1_vlan: entered promiscuous mode
[  905.432484][T29835] netlink: 'syz.3.6143': attribute type 21 has an invalid length.
[  905.447193][T29832] netlink: 'syz.3.6143': attribute type 21 has an invalid length.
[  905.492514][T29839] __nla_validate_parse: 1 callbacks suppressed
[  905.492539][T29839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6142'.
[  905.545554][T29532] veth0_macvtap: entered promiscuous mode
[  905.575841][T29532] veth1_macvtap: entered promiscuous mode
[  905.617110][T29532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  905.654208][T29532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  905.696031][T29841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6144'.
[  905.727878][T29841] vlan2: entered promiscuous mode
[  905.727906][T29841] macvlan0: entered promiscuous mode
[  905.868547][T24559] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  905.868848][T24559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.868887][T24559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  905.868922][T24559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.087605][T24559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.094732][T24559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.146436][T29854] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  906.236518][T29850] udevd[29850]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  906.265326][ T7325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.265351][ T7325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.344106][T29854] netlink: 'syz.4.6148': attribute type 8 has an invalid length.
[  906.816054][T29877] netlink: 'syz.0.6153': attribute type 2 has an invalid length.
[  906.966705][T29887] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode
[  906.979496][T29887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6156'.
[  906.987555][T29896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6155'.
[  908.054087][T19562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  908.061151][T19562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  908.075604][T19562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  908.090173][T19562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  908.090906][T19562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  908.127035][T29912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6159'.
[  908.556410][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6162'.
[  908.556663][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6162'.
[  908.556898][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6162'.
[  908.581496][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6162'.
[  908.581729][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6162'.
[  908.806464][T29942] netlink: 'syz.2.6163': attribute type 16 has an invalid length.
[  908.806493][T29942] netlink: 'syz.2.6163': attribute type 17 has an invalid length.
[  908.860586][T29940] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.882394][T29940] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.320085][T29942] dummy0: left promiscuous mode
[  909.475007][T29942] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.475155][T29942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.503671][T29942] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.503806][T29942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.516622][T29850] udevd[29850]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  909.596862][T29942] mac80211_hwsim hwsim44 wlan0: left allmulticast mode
[  909.666034][T29942] bridge1: left promiscuous mode
[  909.676137][T29942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  909.796297][T29956] sit1: entered promiscuous mode
[  909.796325][T29956] sit1: entered allmulticast mode
[  910.229202][T28356] Bluetooth: hci4: command tx timeout
[  910.414811][T29909] rxe_eth0 speed is unknown, defaulting to 1000
[  910.552910][T29986] __nla_validate_parse: 32 callbacks suppressed
[  910.552937][T29986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6172'.
[  910.641065][T29989] syzkaller0: entered promiscuous mode
[  910.641092][T29989] syzkaller0: entered allmulticast mode
[  910.671412][T29989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6173'.
[  910.832413][T29909] wg2 speed is unknown, defaulting to 1000
[  910.944476][T29992] netlink: 'syz.5.6174': attribute type 4 has an invalid length.
[  911.412232][T30011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6180'.
[  911.413503][T30011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6180'.
[  911.443927][T30012] xt_CT: You must specify a L4 protocol and not use inversions on it
[  911.549078][T30014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6181'.
[  911.721699][T30018] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.6182'.
[  911.880505][T30029] ÿÿÿ: renamed from bond_slave_0
[  912.141189][T30040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6188'.
[  912.310447][T28356] Bluetooth: hci4: command tx timeout
[  912.354632][T29909] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.355427][T29909] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.355949][T29909] bridge_slave_0: entered allmulticast mode
[  912.359195][T29909] bridge_slave_0: entered promiscuous mode
[  912.394219][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6192'.
[  912.404688][T29909] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.406508][T29909] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.406706][T29909] bridge_slave_1: entered allmulticast mode
[  912.418018][T26039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  912.429128][T29909] bridge_slave_1: entered promiscuous mode
[  912.484473][T29909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  912.500482][T29909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  912.557563][T29909] team0: Port device team_slave_0 added
[  912.570652][T29909] team0: Port device team_slave_1 added
[  912.623929][T29909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.623951][T29909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.623979][T29909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.626254][T29909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.626271][T29909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.626299][T29909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.661266][ T7325] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  912.792771][T29909] hsr_slave_0: entered promiscuous mode
[  912.793960][T29909] hsr_slave_1: entered promiscuous mode
[  912.794789][T29909] debugfs: 'hsr0' already exists in 'hsr'
[  912.794809][T29909] Cannot create hsr debugfs directory
[  913.189083][T26031] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  913.287107][T30065] netlink: 'syz.0.6196': attribute type 3 has an invalid length.
[  913.287134][T30065] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6196'.
[  913.402180][T30067] x_tables: duplicate underflow at hook 3
[  913.497353][T30067] syzkaller0: entered promiscuous mode
[  913.497380][T30067] syzkaller0: entered allmulticast mode
[  913.544677][T30072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6200'.
[  913.678949][T24559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  913.679254][T24559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  914.113879][T30093] netlink: 'syz.5.6204': attribute type 10 has an invalid length.
[  914.188983][T26031] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  914.275996][T30093] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  914.290406][T30093] team0: Port device netdevsim1 added
[  914.365421][T29909] bond0: (slave netdevsim0): Releasing backup interface
[  914.391751][T28356] Bluetooth: hci4: command tx timeout
[  914.606231][T30104] tc_dump_action: action bad kind
[  914.860781][T30120] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  915.572023][T30139] __nla_validate_parse: 4 callbacks suppressed
[  915.572042][T30139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6214'.
[  916.354984][T30146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6216'.
[  916.469970][T28356] Bluetooth: hci4: command tx timeout
[  917.517955][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  917.776859][T30115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  917.804128][T29909] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  917.841634][T29909] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  917.842732][T29909] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  917.907090][T29909] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  917.915711][T29909] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  917.962548][T29909] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  917.963114][T29909] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  918.021104][T29909] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  918.076930][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6222'.
[  918.102563][T30180] ifb0: entered allmulticast mode
[  918.215838][T30188] syzkaller0: entered promiscuous mode
[  918.215866][T30188] syzkaller0: entered allmulticast mode
[  918.371377][T29909] 8021q: adding VLAN 0 to HW filter on device bond0
[  918.435771][T29909] 8021q: adding VLAN 0 to HW filter on device team0
[  918.465079][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.465197][ T7325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  918.511074][T24559] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.511207][T24559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  918.521056][T30199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6224'.
[  919.075865][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'.
[  919.346147][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6228'.
[  919.346188][T30215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6228'.
[  919.413162][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6228'.
[  919.413203][T30220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6228'.
[  919.449019][ T7347] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0
[  919.471268][ T7347] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0
[  919.471455][ T7347] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0
[  919.471533][ T7347] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0
[  920.272529][T30255] ip_tables: iptables: counters copy to user failed while replacing table
[  920.345802][T30261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6237'.
[  920.571410][T29909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  920.601756][T30270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6238'.
[  921.741773][T29909] veth0_vlan: entered promiscuous mode
[  921.772485][T29909] veth1_vlan: entered promiscuous mode
[  921.830230][T30294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6244'.
[  921.875120][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6242'.
[  921.935976][T29909] veth0_macvtap: entered promiscuous mode
[  921.962352][T29909] veth1_macvtap: entered promiscuous mode
[  921.974999][T30294] IPv6: addrconf: prefix option has invalid lifetime
[  922.026814][T29909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  922.056123][T29909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  922.111632][ T7335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  922.112151][ T7335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  922.112193][ T7335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  922.272618][T30304] ip_tables: iptables: counters copy to user failed while replacing table
[  922.529801][ T7358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  922.894273][ T7355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  922.894299][ T7355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  922.974572][ T7355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  922.974597][ T7355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  923.142655][T30319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  923.285361][T30331] netlink: 'syz.0.6254': attribute type 32 has an invalid length.
[  923.294672][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6254'.
[  923.294698][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6254'.
[  923.466207][T30341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6252'.
[  923.646173][T30345] netlink: 'syz.0.6256': attribute type 1 has an invalid length.
[  923.695826][T30349] ip_tables: iptables: counters copy to user failed while replacing table
[  923.761328][T30345] 8021q: adding VLAN 0 to HW filter on device bond2
[  923.937154][T30356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6259'.
[  923.937186][T30356] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  924.081696][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'.
[  924.234679][T30370] syzkaller0: entered promiscuous mode
[  924.234707][T30370] syzkaller0: entered allmulticast mode
[  924.396719][T30372] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6266'.
[  924.499385][T30376] netlink: 'syz.5.6267': attribute type 5 has an invalid length.
[  924.639203][ T7335] IPVS: starting estimator thread 0...
[  924.659086][T30384] FAULT_INJECTION: forcing a failure.
[  924.659086][T30384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  924.659121][T30384] CPU: 1 UID: 0 PID: 30384 Comm: syz.5.6270 Not tainted syzkaller #0 PREEMPT(full) 
[  924.659146][T30384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  924.659159][T30384] Call Trace:
[  924.659168][T30384]  <TASK>
[  924.659177][T30384]  dump_stack_lvl+0xe8/0x150
[  924.659214][T30384]  should_fail_ex+0x410/0x560
[  924.659249][T30384]  _copy_from_iter+0x1d3/0x1660
[  924.659280][T30384]  ? __alloc_skb+0x27a/0x7a0
[  924.659313][T30384]  ? __alloc_skb+0x27a/0x7a0
[  924.659345][T30384]  ? __alloc_skb+0x27a/0x7a0
[  924.659374][T30384]  ? __pfx__copy_from_iter+0x10/0x10
[  924.659400][T30384]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  924.659426][T30384]  ? __alloc_skb+0x27a/0x7a0
[  924.659457][T30384]  ? __alloc_skb+0x27a/0x7a0
[  924.659494][T30384]  ? netlink_sendmsg+0x64f/0xb20
[  924.659521][T30384]  ? skb_put+0x112/0x210
[  924.659554][T30384]  netlink_sendmsg+0x6bb/0xb20
[  924.659598][T30384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  924.659631][T30384]  ? aa_sock_msg_perm+0x144/0x210
[  924.659664][T30384]  ? apparmor_socket_sendmsg+0x98/0x360
[  924.659696][T30384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  924.659722][T30384]  sock_sendmsg_nosec+0x14e/0x190
[  924.659752][T30384]  ____sys_sendmsg+0x54e/0x850
[  924.659791][T30384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  924.659834][T30384]  ? import_iovec+0x73/0xa0
[  924.659869][T30384]  ___sys_sendmsg+0x2a5/0x360
[  924.659898][T30384]  ? __lock_acquire+0x747/0x2de0
[  924.659929][T30384]  ? __pfx____sys_sendmsg+0x10/0x10
[  924.660001][T30384]  ? __fget_files+0x3a2/0x420
[  924.660024][T30384]  ? __fget_files+0x2a/0x420
[  924.660058][T30384]  __x64_sys_sendmsg+0x1b1/0x290
[  924.660083][T30384]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  924.660139][T30384]  do_syscall_64+0x166/0x520
[  924.660161][T30384]  ? trace_irq_disable+0x3b/0x140
[  924.660186][T30384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.660208][T30384]  ? clear_bhb_loop+0x70/0xc0
[  924.660234][T30384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.660256][T30384] RIP: 0033:0x7feca9b9f559
[  924.660277][T30384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  924.660297][T30384] RSP: 002b:00007fecaa9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  924.660321][T30384] RAX: ffffffffffffffda RBX: 00007feca9e25fa0 RCX: 00007feca9b9f559
[  924.660336][T30384] RDX: 0000000000000800 RSI: 0000200000000940 RDI: 0000000000000004
[  924.660349][T30384] RBP: 00007fecaa9e5090 R08: 0000000000000000 R09: 0000000000000000
[  924.660362][T30384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.660374][T30384] R13: 00007feca9e26038 R14: 00007feca9e25fa0 R15: 00007ffc9d20bc48
[  924.660408][T30384]  </TASK>
[  924.745718][T30382] IPVS: using max 31 ests per chain, 74400 per kthread
[  924.765802][T30389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6271'.
[  925.347897][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  926.125603][T30437] __nla_validate_parse: 2 callbacks suppressed
[  926.125625][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6284'.
[  926.125704][T30437] bridge_slave_1: left allmulticast mode
[  926.125955][T30437] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.130769][T30437] bridge_slave_0: left allmulticast mode
[  926.131004][T30437] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.206700][T30443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6285'.
[  926.404567][T30450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6289'.
[  926.663300][T30459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  926.992446][T30470] xt_cgroup: invalid path, errno=-2
[  927.188447][T30482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6296'.
[  927.345573][T30485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  927.359266][T30485] netlink: 'syz.3.6297': attribute type 10 has an invalid length.
[  927.380647][T30485] 8021q: adding VLAN 0 to HW filter on device team0
[  927.387445][T30485] bond0: (slave team0): Enslaving as an active interface with an up link
[  927.753796][T30388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  928.120233][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6302'.
[  928.148077][T30506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6305'.
[  928.152993][T30505] ip6erspan0: entered allmulticast mode
[  928.156112][T30505] FAULT_INJECTION: forcing a failure.
[  928.156112][T30505] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  928.156219][T30505] CPU: 1 UID: 0 PID: 30505 Comm: syz.4.6304 Not tainted syzkaller #0 PREEMPT(full) 
[  928.156241][T30505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  928.156253][T30505] Call Trace:
[  928.156262][T30505]  <TASK>
[  928.156272][T30505]  dump_stack_lvl+0xe8/0x150
[  928.156310][T30505]  should_fail_ex+0x410/0x560
[  928.156345][T30505]  _copy_to_user+0x31/0xb0
[  928.156375][T30505]  simple_read_from_buffer+0xe1/0x170
[  928.156405][T30505]  proc_fail_nth_read+0x1bb/0x230
[  928.156437][T30505]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  928.156467][T30505]  ? rw_verify_area+0x24a/0x4c0
[  928.156491][T30505]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  928.156516][T30505]  vfs_read+0x213/0xa80
[  928.156553][T30505]  ? __pfx___mutex_lock+0x10/0x10
[  928.156577][T30505]  ? __pfx_vfs_read+0x10/0x10
[  928.156600][T30505]  ? __fget_files+0x2a/0x420
[  928.156620][T30505]  ? __fget_files+0x3a2/0x420
[  928.156638][T30505]  ? __fget_files+0x2a/0x420
[  928.156663][T30505]  ? fdget+0x1ac/0x250
[  928.156691][T30505]  ksys_read+0x150/0x270
[  928.156716][T30505]  ? __pfx_ksys_read+0x10/0x10
[  928.156750][T30505]  do_syscall_64+0x166/0x520
[  928.156768][T30505]  ? trace_irq_disable+0x3b/0x140
[  928.156791][T30505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.156811][T30505]  ? clear_bhb_loop+0x70/0xc0
[  928.156835][T30505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.156853][T30505] RIP: 0033:0x7fecd0d5fd8e
[  928.156871][T30505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  928.156887][T30505] RSP: 002b:00007fecceff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  928.156909][T30505] RAX: ffffffffffffffda RBX: 00007fecceff66c0 RCX: 00007fecd0d5fd8e
[  928.156922][T30505] RDX: 000000000000000f RSI: 00007fecceff60a0 RDI: 000000000000000a
[  928.156935][T30505] RBP: 00007fecceff6090 R08: 0000000000000000 R09: 0000000000000000
[  928.156947][T30505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  928.156958][T30505] R13: 00007fecd1026038 R14: 00007fecd1025fa0 R15: 00007fff51d61038
[  928.156991][T30505]  </TASK>
[  928.404377][T30510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6303'.
[  928.558860][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6306'.
[  928.850432][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6309'.
[  928.850529][T30522] bridge_slave_1: left allmulticast mode
[  928.850551][T30522] bridge_slave_1: left promiscuous mode
[  928.850809][T30522] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.971168][T30522] bridge_slave_0: left allmulticast mode
[  928.971200][T30522] bridge_slave_0: left promiscuous mode
[  928.971474][T30522] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.553843][T30548] netlink: 'syz.2.6316': attribute type 5 has an invalid length.
[  929.835028][T30561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6318'.
[  930.859153][T30580] netlink: 'syz.4.6323': attribute type 29 has an invalid length.
[  930.859181][T30580] netlink: 'syz.4.6323': attribute type 13 has an invalid length.
[  931.236809][T30572] __nla_validate_parse: 2 callbacks suppressed
[  931.236831][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'.
[  931.416430][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6325'.
[  931.451146][T30602] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6328'.
[  931.537096][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.557273][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.883324][T30587] ip6erspan0: left allmulticast mode
[  931.883801][T30587] macsec1: left promiscuous mode
[  931.886445][T30587] ip6gre1: left allmulticast mode
[  931.915175][T30587] ifb0: left allmulticast mode
[  931.947866][ T7355] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.947918][ T7355] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.947955][ T7355] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.947990][ T7355] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.976445][ T7355] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  931.976497][ T7355] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  931.976534][ T7355] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  931.976569][ T7355] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  932.403854][T30620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  932.820241][T30629] syzkaller0: entered promiscuous mode
[  932.820268][T30629] syzkaller0: entered allmulticast mode
[  933.093141][T30644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6334'.
[  933.812483][T30659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6336'.
[  938.129704][T30684] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  938.145458][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6341'.
[  938.312746][T30697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6342'.
[  938.367432][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6345'.
[  938.467301][T30712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6347'.
[  938.492262][T30703] vlan2: entered promiscuous mode
[  938.840490][T30730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6351'.
[  938.885082][T30728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6349'.
[  939.355706][T30746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6355'.
[  939.377164][T30748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6356'.
[  939.396989][T30746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6355'.
[  939.435670][T30752] netlink: 'syz.2.6357': attribute type 1 has an invalid length.
[  939.489783][T30748] netlink: 'syz.5.6356': attribute type 2 has an invalid length.
[  939.861353][T30761] netlink: 'syz.5.6360': attribute type 10 has an invalid length.
[  939.937039][T30763] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6360'.
[  940.147092][T30759] netdevsim netdevsim0 
€Â: renamed from netdevsim0
[  940.707994][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  941.019487][T30806] batman_adv: batadv0: Adding interface: syzkaller0
[  941.019506][T30806] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.019541][T30806] batman_adv: batadv0: Interface activated: syzkaller0
[  941.026703][T30805] batman_adv: batadv0: Interface deactivated: syzkaller0
[  941.087136][T30805] batman_adv: batadv0: Removing interface: syzkaller0
[  941.172497][T30808] syzkaller0: entered promiscuous mode
[  941.172516][T30808] syzkaller0: entered allmulticast mode
[  941.340848][T30808] tipc: Started in network mode
[  941.340882][T30808] tipc: Node identity 8a52bb53b146, cluster identity 4711
[  941.341435][T30808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  941.346704][T30808] tipc: Resetting bearer <eth:syzkaller0>
[  942.777405][T30831] ip_tables: iptables: counters copy to user failed while replacing table
[  945.218312][T30807] tipc: Resetting bearer <eth:syzkaller0>
[  945.243056][T30807] tipc: Disabling bearer <eth:syzkaller0>
[  945.259453][   T24] tipc: Node number set to 991214419
[  945.523727][T30847] __nla_validate_parse: 2 callbacks suppressed
[  945.523750][T30847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6384'.
[  945.603917][T30846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6380'.
[  946.052190][ T7335] IPVS: starting estimator thread 0...
[  946.081160][T30869] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  946.097351][T30869] netlink: 'syz.5.6387': attribute type 1 has an invalid length.
[  946.102940][T30872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6387'.
[  946.149119][T30874] IPVS: using max 33 ests per chain, 79200 per kthread
[  946.156294][T30869] 8021q: adding VLAN 0 to HW filter on device bond1
[  946.410584][T30842] digital: digital_start_poll: Unknown protocol
[  946.601853][T30882] syzkaller0: entered promiscuous mode
[  946.601883][T30882] syzkaller0: entered allmulticast mode
[  947.046652][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6392'.
[  947.210877][ T7358] IPVS: starting estimator thread 0...
[  947.297890][T30916] IPVS: using max 27 ests per chain, 64800 per kthread
[  947.754707][T30935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6397'.
[  947.899894][T30941] netlink: 'syz.3.6398': attribute type 1 has an invalid length.
[  947.926418][T30941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6398'.
[  948.063042][T30947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6400'.
[  948.933348][T30954] bond2: option resend_igmp: invalid value (2878)
[  948.933369][T30954] bond2: option resend_igmp: allowed values 0 - 255
[  948.935332][T30954] bond2 (unregistering): Released all slaves
[  948.998138][T30956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6403'.
[  949.920924][T30903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  950.549273][T30977] netlink: 'syz.2.6411': attribute type 5 has an invalid length.
[  950.573317][T30981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6408'.
[  951.078778][T30995] bond0: (slave bond_slave_0): Releasing backup interface
[  951.144266][T30995] bond0: (slave bond_slave_1): Releasing backup interface
[  951.182782][T30995] team0: Port device team_slave_0 removed
[  951.191284][T31002] netlink: 'syz.4.6413': attribute type 15 has an invalid length.
[  951.212433][T30995] team0: Port device team_slave_1 removed
[  951.212852][T30995] batman_adv: batadv0: Removing interface: batadv_slave_0
[  951.244419][T30995] batman_adv: batadv0: Removing interface: batadv_slave_1
[  951.256941][T30995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  951.472219][T31007] bridge0: port 1(syz_tun) entered blocking state
[  951.472423][T31007] bridge0: port 1(syz_tun) entered disabled state
[  951.472604][T31007] syz_tun: entered allmulticast mode
[  951.635508][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6415'.
[  951.785366][T31023] xt_hashlimit: size too large, truncated to 1048576
[  951.922727][T31030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6421'.
[  952.242217][T31037] FAULT_INJECTION: forcing a failure.
[  952.242217][T31037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  952.242258][T31037] CPU: 0 UID: 0 PID: 31037 Comm: syz.0.6422 Not tainted syzkaller #0 PREEMPT(full) 
[  952.242286][T31037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  952.242298][T31037] Call Trace:
[  952.242307][T31037]  <TASK>
[  952.242316][T31037]  dump_stack_lvl+0xe8/0x150
[  952.242399][T31037]  should_fail_ex+0x410/0x560
[  952.242437][T31037]  _copy_from_user+0x2d/0xb0
[  952.242469][T31037]  sockptr_to_sockopt+0xc0/0x3a0
[  952.242508][T31037]  ? __pfx_sockptr_to_sockopt+0x10/0x10
[  952.242552][T31037]  do_sock_getsockopt+0x36c/0x640
[  952.242586][T31037]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  952.242637][T31037]  ? __fget_files+0x3a2/0x420
[  952.242659][T31037]  ? __fget_files+0x2a/0x420
[  952.242691][T31037]  __x64_sys_getsockopt+0x1a4/0x240
[  952.242733][T31037]  do_syscall_64+0x166/0x520
[  952.242753][T31037]  ? trace_irq_disable+0x3b/0x140
[  952.242778][T31037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.242800][T31037]  ? clear_bhb_loop+0x70/0xc0
[  952.242826][T31037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.242844][T31037] RIP: 0033:0x7f44eab9f559
[  952.242863][T31037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  952.242883][T31037] RSP: 002b:00007f44eba46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  952.242907][T31037] RAX: ffffffffffffffda RBX: 00007f44eae25fa0 RCX: 00007f44eab9f559
[  952.242923][T31037] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  952.242937][T31037] RBP: 00007f44eba46090 R08: 0000200000020fc0 R09: 0000000000000000
[  952.242952][T31037] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000001
[  952.242966][T31037] R13: 00007f44eae26038 R14: 00007f44eae25fa0 R15: 00007ffdd1109f28
[  952.243002][T31037]  </TASK>
[  952.382895][T31036] geneve1: entered promiscuous mode
[  952.405478][T31036] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  952.405516][T31036] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  952.405553][T31036] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  952.715524][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.715658][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.715768][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.715880][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.715988][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.716093][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.730712][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.730906][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.731021][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.731130][T31052] xt_TCPMSS: Only works on TCP SYN packets
[  952.798337][T31053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6426'.
[  953.204855][T31066] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  953.215947][T31066] netlink: 'syz.0.6429': attribute type 1 has an invalid length.
[  953.446984][T31066] 8021q: adding VLAN 0 to HW filter on device bond3
[  953.621592][T31071] bond3: (slave geneve3): making interface the new active one
[  953.625275][T31071] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  953.628652][ T7321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  953.629729][ T7321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  953.629831][ T7321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  953.629866][ T7321] netdevsim netdevsim0 
€Â: set [1, 0] type 2 family 0 port 6081 - 0
[  953.841158][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6436'.
[  954.083120][T31094] netlink: set zone limit has 4 unknown bytes
[  954.157374][T31107] ip_tables: iptables: counters copy to user failed while replacing table
[  954.207202][T31097] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6437'.
[  954.377383][T31092] syzkaller0: entered promiscuous mode
[  954.377414][T31092] syzkaller0: entered allmulticast mode
[  954.408765][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6439'.
[  954.488493][T31112] bond3: option lacp_active: invalid value (5)
[  954.492095][T31112] bond3 (unregistering): Released all slaves
[  955.035714][T31148] ip_tables: iptables: counters copy to user failed while replacing table
[  955.055446][T31148] block nbd0: reconnected socket
[  955.100983][T28356] block nbd0: Receive control failed (result -32)
[  955.784291][T31150] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.6447'.
[  957.099572][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6450'.
[  959.442135][T31136] 8021q: adding VLAN 0 to HW filter on device bond0
[  959.444125][T31136] 8021q: adding VLAN 0 to HW filter on device team0
[  959.450435][T31136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  959.524118][T31175] ip_tables: iptables: counters copy to user failed while replacing table
[  959.532700][T31136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  959.532735][T31136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  959.558445][T31136] veth1_vlan: left promiscuous mode
[  959.559796][T31136] veth0_vlan: left promiscuous mode
[  959.566737][T31136] veth0_vlan: entered promiscuous mode
[  959.576784][T31136] veth1_vlan: entered promiscuous mode
[  959.585736][T31136] veth1_macvtap: left promiscuous mode
[  959.587030][T31136] veth0_macvtap: left promiscuous mode
[  959.590549][T31136] veth0_macvtap: entered promiscuous mode
[  959.591779][T31136] veth1_macvtap: entered promiscuous mode
[  959.600917][T31136] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  959.602611][T31136] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  959.604258][T31136] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  959.607311][T31136] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  959.647188][T31136] 8021q: adding VLAN 0 to HW filter on device bond1
[  959.653239][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  959.771050][T31150] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  959.773604][T31150] 0ªX¹¦Dö»: entered allmulticast mode
[  959.774949][T31171] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  959.779264][ T7307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  959.779907][ T7307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  959.779946][ T7307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  959.780904][T31172] netlink: 'syz.5.6450': attribute type 62 has an invalid length.
[  959.789483][ T7361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.096520][T31180] netlink: zone id is out of range
[  960.096540][T31180] netlink: zone id is out of range
[  960.096550][T31180] netlink: zone id is out of range
[  960.096559][T31180] netlink: zone id is out of range
[  960.096569][T31180] netlink: zone id is out of range
[  960.096578][T31180] netlink: zone id is out of range
[  960.096587][T31180] netlink: zone id is out of range
[  960.096596][T31180] netlink: zone id is out of range
[  960.313465][T31189] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6458'.
[  960.361112][T31189] netlink: 'syz.5.6458': attribute type 5 has an invalid length.
[  960.405685][T31197] veth0_vlan: entered allmulticast mode
[  960.808197][T31213] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  961.770429][T31241] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  962.216049][T31254] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 0, id = 0
[  962.232719][T31255] lo speed is unknown, defaulting to 1000
[  962.232795][T31255] lo speed is unknown, defaulting to 1000
[  962.235649][T31255] lo speed is unknown, defaulting to 1000
[  962.238477][T31255] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  962.238513][T31255] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  962.238549][T31255] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  962.307393][T31255] lo speed is unknown, defaulting to 1000
[  962.315706][T31255] lo speed is unknown, defaulting to 1000
[  962.325068][T31255] lo speed is unknown, defaulting to 1000
[  962.381418][T31255] lo speed is unknown, defaulting to 1000
[  962.405810][T31255] lo speed is unknown, defaulting to 1000
[  962.445172][T31255] lo speed is unknown, defaulting to 1000
[  962.454663][T31255] lo speed is unknown, defaulting to 1000
[  962.483782][T31255] lo speed is unknown, defaulting to 1000
[  962.495040][T31255] lo speed is unknown, defaulting to 1000
[  962.515829][T31255] lo speed is unknown, defaulting to 1000
[  962.526071][T31255] lo speed is unknown, defaulting to 1000
[  962.671438][T31266] netlink: 'syz.5.6481': attribute type 8 has an invalid length.
[  962.671465][T31266] sch_fq: defrate 0 ignored.
[  962.793237][T31269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6484'.
[  962.902909][T31275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6483'.
[  963.710087][T31314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6496'.
[  963.891476][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6497'.
[  964.164328][T31328] bond0: (slave macvlan2): Opening slave failed
[  964.273228][T31335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6502'.
[  964.386987][T31343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6504'.
[  964.628762][T31355] net_ratelimit: 7 callbacks suppressed
[  964.628789][T31355] ip_tables: iptables: counters copy to user failed while replacing table
[  965.285100][T31384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6507'.
[  965.727086][T31394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6507'.
[  965.746405][T31335] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  965.796230][T31359] tipc: Started in network mode
[  965.796265][T31359] tipc: Node identity c68a3157708a, cluster identity 4711
[  965.796445][T31359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  965.797129][T31353] syzkaller0: entered promiscuous mode
[  965.797149][T31353] syzkaller0: entered allmulticast mode
[  965.826766][T31356] syzkaller0: entered promiscuous mode
[  965.826795][T31356] syzkaller0: entered allmulticast mode
[  965.869597][T31380] tipc: Resetting bearer <eth:syzkaller0>
[  966.092159][T31332] tipc: Resetting bearer <eth:syzkaller0>
[  966.161594][T31332] tipc: Disabling bearer <eth:syzkaller0>
[  966.205224][T31408] syz_tun: left allmulticast mode
[  966.205472][T31408] bridge0: port 1(syz_tun) entered disabled state
[  966.262558][T31408] bond0: (slave 
1
7ÿÿÿ): Releasing backup interface
[  966.319222][T31408] bond0: (slave bond_slave_1): Releasing backup interface
[  966.422081][T31408] team0: Port device team_slave_0 removed
[  966.446123][T31408] team0: Port device team_slave_1 removed
[  966.446648][T31408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  966.459181][T31408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  966.479828][T31408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  966.576258][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.576335][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.577140][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.587426][T31412] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  966.587461][T31412] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  966.587495][T31412] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  966.679484][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.696384][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.722358][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.724513][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.726385][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.777526][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.812335][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.814285][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.816267][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.840226][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  966.842131][T31412] virt_wifi0 speed is unknown, defaulting to 1000
[  967.105081][T31436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6516'.
[  967.244731][T31441] netlink: 34 bytes leftover after parsing attributes in process `syz.4.6520'.
[  967.474024][T31455] netlink: 'syz.4.6523': attribute type 1 has an invalid length.
[  967.512553][T31455] batman_adv: batadv0: Adding interface: dummy0
[  967.512579][T31455] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.512614][T31455] batman_adv: batadv0: Interface activated: dummy0
[  967.586647][T31455] batadv0: mtu less than device minimum
[  967.588361][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.589897][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.591508][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.592980][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.594463][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.595930][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.597442][T31455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.684531][T31463] netlink: 'syz.4.6523': attribute type 10 has an invalid length.
[  967.684578][T31463] batadv0: entered promiscuous mode
[  967.684597][T31463] batadv0: entered allmulticast mode
[  967.698849][T31463] bridge0: port 3(batadv0) entered blocking state
[  967.699043][T31463] bridge0: port 3(batadv0) entered disabled state
[  967.735748][T31455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  967.735772][T31455] IPv6: NLM_F_CREATE should be set when creating new route
[  967.735821][T31455] IPv6: NLM_F_CREATE should be set when creating new route
[  967.782709][T31463] batadv0: failed to initialize vlan filtering on this port
[  968.091459][T31478] xt_socket: unknown flags 0x8
[  968.204230][T31484] __nla_validate_parse: 2 callbacks suppressed
[  968.204255][T31484] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6532'.
[  968.602776][T31499] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6535'.
[  968.865391][ T7335] IPVS: starting estimator thread 0...
[  968.939967][T31509] xt_IDLETIMER: label is empty or not nul-terminated
[  968.949466][T31512] IPVS: using max 27 ests per chain, 64800 per kthread
[  969.517903][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  969.613287][T31553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6546'.
[  970.058157][T31566] hsr0: entered allmulticast mode
[  970.058186][T31566] hsr_slave_0: entered allmulticast mode
[  970.058205][T31566] hsr_slave_1: entered allmulticast mode
[  972.992925][T31566] hsr0: left allmulticast mode
[  972.992952][T31566] hsr_slave_0: left allmulticast mode
[  972.992969][T31566] hsr_slave_1: left allmulticast mode
[  973.173406][T31612] netlink: 'syz.0.6553': attribute type 1 has an invalid length.
[  973.262522][T31618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6553'.
[  973.306556][T31618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6553'.
[  973.320814][T31618] 8021q: adding VLAN 0 to HW filter on device bond4
[  973.387571][T31627] x_tables: duplicate entry at hook 3
[  973.396574][T31612] bridge3: entered promiscuous mode
[  973.419511][T31612] bond4: (slave bridge3): making interface the new active one
[  973.424892][T31612] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  973.434260][T31628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6555'.
[  973.790285][T31628] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6555'.
[  973.950722][T31651] netlink: 'syz.0.6561': attribute type 30 has an invalid length.
[  974.364015][T31663] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.6565'.
[  974.614398][T31668] net_ratelimit: 16 callbacks suppressed
[  974.614421][T31668] ip_tables: iptables: counters copy to user failed while replacing table
[  974.616148][T31668] ip_tables: iptables: counters copy to user failed while replacing table
[  974.644119][T31674] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  974.923591][T31688] ipvlan0: left promiscuous mode
[  974.928968][T31688] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  974.948207][T31691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6574'.
[  975.649004][T31714] ip_tables: iptables: counters copy to user failed while replacing table
[  975.974691][T31719] netlink: 'syz.3.6581': attribute type 1 has an invalid length.
[  976.352139][T31743] FAULT_INJECTION: forcing a failure.
[  976.352139][T31743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  976.352175][T31743] CPU: 0 UID: 0 PID: 31743 Comm: syz.4.6587 Not tainted syzkaller #0 PREEMPT(full) 
[  976.352199][T31743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  976.352222][T31743] Call Trace:
[  976.352232][T31743]  <TASK>
[  976.352242][T31743]  dump_stack_lvl+0xe8/0x150
[  976.352276][T31743]  should_fail_ex+0x410/0x560
[  976.352312][T31743]  _copy_from_user+0x2d/0xb0
[  976.352344][T31743]  ___sys_recvmsg+0x173/0x5a0
[  976.352373][T31743]  ? __pfx____sys_recvmsg+0x10/0x10
[  976.352399][T31743]  ? lock_acquire+0x115/0x350
[  976.352458][T31743]  do_recvmmsg+0x31a/0x800
[  976.352510][T31743]  ? __pfx_do_recvmmsg+0x10/0x10
[  976.352545][T31743]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  976.352574][T31743]  ? fdget+0x1ac/0x250
[  976.352606][T31743]  __x64_sys_recvmmsg+0x198/0x250
[  976.352632][T31743]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  976.352667][T31743]  do_syscall_64+0x166/0x520
[  976.352688][T31743]  ? trace_irq_disable+0x3b/0x140
[  976.352712][T31743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.352734][T31743]  ? clear_bhb_loop+0x70/0xc0
[  976.352759][T31743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.352780][T31743] RIP: 0033:0x7fecd0d9f559
[  976.352801][T31743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  976.352820][T31743] RSP: 002b:00007fecceff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  976.352844][T31743] RAX: ffffffffffffffda RBX: 00007fecd1025fa0 RCX: 00007fecd0d9f559
[  976.352860][T31743] RDX: 00000000040001af RSI: 0000200000000ac0 RDI: 0000000000000004
[  976.352874][T31743] RBP: 00007fecceff6090 R08: 0000000000000000 R09: 0000000000000000
[  976.352887][T31743] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002
[  976.352900][T31743] R13: 00007fecd1026038 R14: 00007fecd1025fa0 R15: 00007fff51d61038
[  976.352933][T31743]  </TASK>
[  976.501487][T31744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6588'.
[  976.501512][T31744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6588'.
[  976.634794][T31753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  976.821481][T31759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'.
[  977.060239][T31770] FAULT_INJECTION: forcing a failure.
[  977.060239][T31770] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  977.060382][T31770] CPU: 1 UID: 0 PID: 31770 Comm: syz.5.6597 Not tainted syzkaller #0 PREEMPT(full) 
[  977.060408][T31770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  977.060422][T31770] Call Trace:
[  977.060432][T31770]  <TASK>
[  977.060441][T31770]  dump_stack_lvl+0xe8/0x150
[  977.060479][T31770]  should_fail_ex+0x410/0x560
[  977.060514][T31770]  prepare_alloc_pages+0x21e/0x5f0
[  977.060551][T31770]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  977.060584][T31770]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  977.060617][T31770]  ? __pfx_policy_nodemask+0x10/0x10
[  977.060725][T31770]  ? __lock_acquire+0x747/0x2de0
[  977.060754][T31770]  alloc_pages_mpol+0x21e/0x390
[  977.060793][T31770]  folio_alloc_mpol_noprof+0x39/0x160
[  977.060825][T31770]  vma_alloc_folio_noprof+0xe1/0x1e0
[  977.060861][T31770]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  977.060893][T31770]  ? lock_acquire+0x115/0x350
[  977.060924][T31770]  do_pte_missing+0x173a/0x34b0
[  977.060969][T31770]  handle_mm_fault+0x1a53/0x3750
[  977.061007][T31770]  ? handle_mm_fault+0xf1/0x3750
[  977.061040][T31770]  ? __pfx_handle_mm_fault+0x10/0x10
[  977.061063][T31770]  ? follow_page_pte+0x748/0xf10
[  977.061096][T31770]  ? __pfx_follow_page_pte+0x10/0x10
[  977.061132][T31770]  __get_user_pages+0x1670/0x2750
[  977.061203][T31770]  __gup_longterm_locked+0xe24/0x16f0
[  977.061242][T31770]  ? sanity_check_pinned_pages+0x817/0x8d0
[  977.061284][T31770]  gup_fast_fallback+0x1d92/0x20e0
[  977.061343][T31770]  ? __pfx_gup_fast_fallback+0x10/0x10
[  977.061365][T31770]  ? rds_info_getsockopt+0x254/0x730
[  977.061468][T31770]  ? rcu_is_watching+0x16/0xb0
[  977.061501][T31770]  ? is_valid_gup_args+0x11f/0x200
[  977.061540][T31770]  ? pin_user_pages_fast+0x4d/0xb0
[  977.061565][T31770]  iov_iter_extract_pages+0x3a1/0x690
[  977.061611][T31770]  rds_info_getsockopt+0x289/0x730
[  977.061662][T31770]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  977.061724][T31770]  rds_getsockopt+0x38b/0x600
[  977.061756][T31770]  ? __pfx_rds_getsockopt+0x10/0x10
[  977.061797][T31770]  do_sock_getsockopt+0x40c/0x640
[  977.061840][T31770]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  977.061891][T31770]  ? __fget_files+0x3a2/0x420
[  977.061917][T31770]  ? __fget_files+0x2a/0x420
[  977.061951][T31770]  __x64_sys_getsockopt+0x1a4/0x240
[  977.061996][T31770]  do_syscall_64+0x166/0x520
[  977.062018][T31770]  ? trace_irq_disable+0x3b/0x140
[  977.062044][T31770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.062066][T31770]  ? clear_bhb_loop+0x70/0xc0
[  977.062094][T31770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.062116][T31770] RIP: 0033:0x7feca9b9f559
[  977.062138][T31770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.062157][T31770] RSP: 002b:00007fecaa9e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  977.062183][T31770] RAX: ffffffffffffffda RBX: 00007feca9e25fa0 RCX: 00007feca9b9f559
[  977.062199][T31770] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  977.062215][T31770] RBP: 00007fecaa9e5090 R08: 0000200000020fc0 R09: 0000000000000000
[  977.062230][T31770] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000002
[  977.062245][T31770] R13: 00007feca9e26038 R14: 00007feca9e25fa0 R15: 00007ffc9d20bc48
[  977.062279][T31770]  </TASK>
[  978.012846][T31789] tipc: Started in network mode
[  978.012882][T31789] tipc: Node identity a6ff4f362083, cluster identity 4711
[  978.013064][T31789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  978.015728][T31789] syzkaller0: entered promiscuous mode
[  978.015750][T31789] syzkaller0: entered allmulticast mode
[  978.086869][T31788] tipc: Resetting bearer <eth:syzkaller0>
[  978.130462][T31788] tipc: Disabling bearer <eth:syzkaller0>
[  978.170010][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6603'.
[  978.398336][T31807] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6602'.
[  978.398807][T31800] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6602'.
[  978.404673][T31810] netlink: 'syz.5.6605': attribute type 1 has an invalid length.
[  978.685637][T31818] syzkaller1: entered promiscuous mode
[  978.685664][T31818] syzkaller1: entered allmulticast mode
[  978.702610][T31818] ip_tables: iptables: counters copy to user failed while replacing table
[  978.856446][T31800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6602'.
[  978.856598][T31803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6602'.
[  978.931010][T31813] netlink: 'syz.0.6606': attribute type 21 has an invalid length.
[  979.703414][T31829] netlink: 'syz.5.6611': attribute type 1 has an invalid length.
[  979.743589][T31821] batman_adv: batadv0: Adding interface: syzkaller0
[  979.743610][T31821] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  979.743646][T31821] batman_adv: batadv0: Interface activated: syzkaller0
[  979.779298][T31813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6606'.
[  979.806639][T31819] batman_adv: batadv0: Interface deactivated: syzkaller0
[  979.889925][T31819] batman_adv: batadv0: Removing interface: syzkaller0
[  979.941307][T31832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6611'.
[  980.002000][T31829] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6611'.
[  980.094556][T31830] syzkaller1: entered promiscuous mode
[  980.094585][T31830] syzkaller1: entered allmulticast mode
[  980.215252][T31839] syzkaller1: entered promiscuous mode
[  980.215278][T31839] syzkaller1: entered allmulticast mode
[  980.368873][T31844] TC_ACT_REPEAT abuse ?
[  980.896610][T31877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6626'.
[  981.410225][T31886] FAULT_INJECTION: forcing a failure.
[  981.410225][T31886] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  981.410265][T31886] CPU: 1 UID: 0 PID: 31886 Comm: syz.0.6627 Not tainted syzkaller #0 PREEMPT(full) 
[  981.410291][T31886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  981.410304][T31886] Call Trace:
[  981.410313][T31886]  <TASK>
[  981.410323][T31886]  dump_stack_lvl+0xe8/0x150
[  981.410362][T31886]  should_fail_ex+0x410/0x560
[  981.410400][T31886]  prepare_alloc_pages+0x21e/0x5f0
[  981.410437][T31886]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  981.410472][T31886]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  981.410507][T31886]  ? __pfx_policy_nodemask+0x10/0x10
[  981.410548][T31886]  ? __lock_acquire+0x747/0x2de0
[  981.410577][T31886]  alloc_pages_mpol+0x21e/0x390
[  981.410614][T31886]  folio_alloc_mpol_noprof+0x39/0x160
[  981.410659][T31886]  vma_alloc_folio_noprof+0xe1/0x1e0
[  981.410695][T31886]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  981.410730][T31886]  ? lock_acquire+0x115/0x350
[  981.410762][T31886]  do_pte_missing+0x173a/0x34b0
[  981.410814][T31886]  handle_mm_fault+0x1a53/0x3750
[  981.410851][T31886]  ? handle_mm_fault+0xf1/0x3750
[  981.410888][T31886]  ? __pfx_handle_mm_fault+0x10/0x10
[  981.410912][T31886]  ? follow_page_pte+0x748/0xf10
[  981.410945][T31886]  ? __pfx_follow_page_pte+0x10/0x10
[  981.410981][T31886]  __get_user_pages+0x1670/0x2750
[  981.411055][T31886]  __gup_longterm_locked+0xe24/0x16f0
[  981.411093][T31886]  ? sanity_check_pinned_pages+0x817/0x8d0
[  981.411133][T31886]  gup_fast_fallback+0x1d92/0x20e0
[  981.411192][T31886]  ? __pfx_gup_fast_fallback+0x10/0x10
[  981.411215][T31886]  ? rds_info_getsockopt+0x254/0x730
[  981.411246][T31886]  ? rcu_is_watching+0x16/0xb0
[  981.411275][T31886]  ? is_valid_gup_args+0x11f/0x200
[  981.411310][T31886]  ? pin_user_pages_fast+0x4d/0xb0
[  981.411335][T31886]  iov_iter_extract_pages+0x3a1/0x690
[  981.411377][T31886]  rds_info_getsockopt+0x289/0x730
[  981.411416][T31886]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  981.411477][T31886]  rds_getsockopt+0x38b/0x600
[  981.411508][T31886]  ? __pfx_rds_getsockopt+0x10/0x10
[  981.411549][T31886]  do_sock_getsockopt+0x40c/0x640
[  981.411589][T31886]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  981.411648][T31886]  ? __fget_files+0x3a2/0x420
[  981.411672][T31886]  ? __fget_files+0x2a/0x420
[  981.411705][T31886]  __x64_sys_getsockopt+0x1a4/0x240
[  981.411747][T31886]  do_syscall_64+0x166/0x520
[  981.411769][T31886]  ? trace_irq_disable+0x3b/0x140
[  981.411794][T31886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.411816][T31886]  ? clear_bhb_loop+0x70/0xc0
[  981.411844][T31886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.411865][T31886] RIP: 0033:0x7f44eab9f559
[  981.411886][T31886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  981.411905][T31886] RSP: 002b:00007f44eba46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  981.411930][T31886] RAX: ffffffffffffffda RBX: 00007f44eae25fa0 RCX: 00007f44eab9f559
[  981.411945][T31886] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  981.411959][T31886] RBP: 00007f44eba46090 R08: 0000200000020fc0 R09: 0000000000000000
[  981.411974][T31886] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000002
[  981.411988][T31886] R13: 00007f44eae26038 R14: 00007f44eae25fa0 R15: 00007ffdd1109f28
[  981.412025][T31886]  </TASK>
[  981.631707][T31880] batman_adv: batadv0: Adding interface: syzkaller0
[  981.631726][T31880] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.633429][T31880] batman_adv: batadv0: Interface activated: syzkaller0
[  981.652447][T31888] netlink: 'syz.0.6628': attribute type 12 has an invalid length.
[  981.666729][T31873] batman_adv: batadv0: Interface deactivated: syzkaller0
[  981.929231][T31873] batman_adv: batadv0: Removing interface: syzkaller0
[  982.551152][T31927] FAULT_INJECTION: forcing a failure.
[  982.551152][T31927] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  982.551195][T31927] CPU: 1 UID: 0 PID: 31927 Comm: syz.3.6638 Not tainted syzkaller #0 PREEMPT(full) 
[  982.551220][T31927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  982.551233][T31927] Call Trace:
[  982.551242][T31927]  <TASK>
[  982.551253][T31927]  dump_stack_lvl+0xe8/0x150
[  982.551291][T31927]  should_fail_ex+0x410/0x560
[  982.551329][T31927]  prepare_alloc_pages+0x21e/0x5f0
[  982.551367][T31927]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  982.551402][T31927]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  982.551435][T31927]  ? __pfx_policy_nodemask+0x10/0x10
[  982.551471][T31927]  ? __lock_acquire+0x747/0x2de0
[  982.551498][T31927]  alloc_pages_mpol+0x21e/0x390
[  982.551537][T31927]  folio_alloc_mpol_noprof+0x39/0x160
[  982.551581][T31927]  vma_alloc_folio_noprof+0xe1/0x1e0
[  982.551617][T31927]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  982.551651][T31927]  ? lock_acquire+0x115/0x350
[  982.551684][T31927]  do_pte_missing+0x173a/0x34b0
[  982.551734][T31927]  handle_mm_fault+0x1a53/0x3750
[  982.551770][T31927]  ? handle_mm_fault+0xf1/0x3750
[  982.551806][T31927]  ? __pfx_handle_mm_fault+0x10/0x10
[  982.551831][T31927]  ? follow_page_pte+0x748/0xf10
[  982.551864][T31927]  ? __pfx_follow_page_pte+0x10/0x10
[  982.551900][T31927]  __get_user_pages+0x1670/0x2750
[  982.551973][T31927]  __gup_longterm_locked+0xe24/0x16f0
[  982.552011][T31927]  ? sanity_check_pinned_pages+0x817/0x8d0
[  982.552051][T31927]  gup_fast_fallback+0x1d92/0x20e0
[  982.552109][T31927]  ? __pfx_gup_fast_fallback+0x10/0x10
[  982.552131][T31927]  ? rds_info_getsockopt+0x254/0x730
[  982.552164][T31927]  ? rcu_is_watching+0x16/0xb0
[  982.552192][T31927]  ? is_valid_gup_args+0x11f/0x200
[  982.552228][T31927]  ? pin_user_pages_fast+0x4d/0xb0
[  982.552254][T31927]  iov_iter_extract_pages+0x3a1/0x690
[  982.552298][T31927]  rds_info_getsockopt+0x289/0x730
[  982.552338][T31927]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  982.552399][T31927]  rds_getsockopt+0x38b/0x600
[  982.552430][T31927]  ? __pfx_rds_getsockopt+0x10/0x10
[  982.552467][T31927]  do_sock_getsockopt+0x40c/0x640
[  982.552508][T31927]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  982.552566][T31927]  ? __fget_files+0x3a2/0x420
[  982.552590][T31927]  ? __fget_files+0x2a/0x420
[  982.552623][T31927]  __x64_sys_getsockopt+0x1a4/0x240
[  982.552666][T31927]  do_syscall_64+0x166/0x520
[  982.552687][T31927]  ? trace_irq_disable+0x3b/0x140
[  982.552711][T31927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.552734][T31927]  ? clear_bhb_loop+0x70/0xc0
[  982.552760][T31927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.552782][T31927] RIP: 0033:0x7f8a3b79f559
[  982.552804][T31927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.552822][T31927] RSP: 002b:00007f8a3c655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  982.552848][T31927] RAX: ffffffffffffffda RBX: 00007f8a3ba25fa0 RCX: 00007f8a3b79f559
[  982.552863][T31927] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  982.552878][T31927] RBP: 00007f8a3c655090 R08: 0000200000020fc0 R09: 0000000000000000
[  982.552893][T31927] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000002
[  982.552906][T31927] R13: 00007f8a3ba26038 R14: 00007f8a3ba25fa0 R15: 00007ffd095aeb98
[  982.552943][T31927]  </TASK>
[  982.991328][T31902] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  982.991353][T31902] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  983.330370][T31902] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  983.330398][T31902] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  983.431108][T31951] bridge4: entered allmulticast mode
[  983.475077][T31951] pimreg: entered allmulticast mode
[  983.499481][T31952] batman_adv: batadv0: Adding interface: syzkaller0
[  983.499503][T31952] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  983.499537][T31952] batman_adv: batadv0: Interface activated: syzkaller0
[  983.499556][T31952] batadv0: mtu less than device minimum
[  983.501237][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.502889][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.504517][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.506054][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.507663][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.509073][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.510472][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.511839][T31952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  983.738355][ T7309] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  983.738407][ T7309] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  983.738441][ T7309] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  983.738474][ T7309] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  983.882958][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6648'.
[  983.936603][T31968] FAULT_INJECTION: forcing a failure.
[  983.936603][T31968] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  983.936641][T31968] CPU: 1 UID: 0 PID: 31968 Comm: syz.5.6649 Not tainted syzkaller #0 PREEMPT(full) 
[  983.936664][T31968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  983.936677][T31968] Call Trace:
[  983.936686][T31968]  <TASK>
[  983.936696][T31968]  dump_stack_lvl+0xe8/0x150
[  983.936733][T31968]  should_fail_ex+0x410/0x560
[  983.936771][T31968]  prepare_alloc_pages+0x21e/0x5f0
[  983.936812][T31968]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  983.936847][T31968]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  983.936880][T31968]  ? __pfx_policy_nodemask+0x10/0x10
[  983.936917][T31968]  ? __lock_acquire+0x747/0x2de0
[  983.936944][T31968]  alloc_pages_mpol+0x21e/0x390
[  983.936982][T31968]  folio_alloc_mpol_noprof+0x39/0x160
[  983.937017][T31968]  vma_alloc_folio_noprof+0xe1/0x1e0
[  983.937053][T31968]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  983.937088][T31968]  ? lock_acquire+0x115/0x350
[  983.937120][T31968]  do_pte_missing+0x173a/0x34b0
[  983.937179][T31968]  handle_mm_fault+0x1a53/0x3750
[  983.937214][T31968]  ? handle_mm_fault+0xf1/0x3750
[  983.937249][T31968]  ? __pfx_handle_mm_fault+0x10/0x10
[  983.937273][T31968]  ? follow_page_pte+0x748/0xf10
[  983.937307][T31968]  ? __pfx_follow_page_pte+0x10/0x10
[  983.937344][T31968]  __get_user_pages+0x1670/0x2750
[  983.937415][T31968]  __gup_longterm_locked+0xe24/0x16f0
[  983.937453][T31968]  ? sanity_check_pinned_pages+0x817/0x8d0
[  983.937493][T31968]  gup_fast_fallback+0x1d92/0x20e0
[  983.937553][T31968]  ? __pfx_gup_fast_fallback+0x10/0x10
[  983.937574][T31968]  ? rds_info_getsockopt+0x254/0x730
[  983.937604][T31968]  ? rcu_is_watching+0x16/0xb0
[  983.937630][T31968]  ? is_valid_gup_args+0x11f/0x200
[  983.937662][T31968]  ? pin_user_pages_fast+0x4d/0xb0
[  983.937687][T31968]  iov_iter_extract_pages+0x3a1/0x690
[  983.937730][T31968]  rds_info_getsockopt+0x289/0x730
[  983.937770][T31968]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  983.937830][T31968]  rds_getsockopt+0x38b/0x600
[  983.937861][T31968]  ? __pfx_rds_getsockopt+0x10/0x10
[  983.937901][T31968]  do_sock_getsockopt+0x40c/0x640
[  983.937941][T31968]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  983.937990][T31968]  ? __fget_files+0x3a2/0x420
[  983.938014][T31968]  ? __fget_files+0x2a/0x420
[  983.938047][T31968]  __x64_sys_getsockopt+0x1a4/0x240
[  983.938090][T31968]  do_syscall_64+0x166/0x520
[  983.938112][T31968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.938144][T31968]  ? clear_bhb_loop+0x70/0xc0
[  983.938169][T31968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.938189][T31968] RIP: 0033:0x7feca9b9f559
[  983.938211][T31968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  983.938230][T31968] RSP: 002b:00007fecaa9e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  983.938254][T31968] RAX: ffffffffffffffda RBX: 00007feca9e25fa0 RCX: 00007feca9b9f559
[  983.938270][T31968] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  983.938284][T31968] RBP: 00007fecaa9e5090 R08: 0000200000020fc0 R09: 0000000000000000
[  983.938298][T31968] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000002
[  983.938312][T31968] R13: 00007feca9e26038 R14: 00007feca9e25fa0 R15: 00007ffc9d20bc48
[  983.938350][T31968]  </TASK>
[  984.519386][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.519815][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.520046][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.520278][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.520527][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.520789][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.585564][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.585826][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.587371][T31978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  984.903748][T31950] pimreg: left allmulticast mode
[  985.378004][T32002] netlink: 'syz.0.6657': attribute type 4 has an invalid length.
[  985.405725][T32002] netlink: 'syz.0.6657': attribute type 4 has an invalid length.
[  985.784141][T32011] bond6: entered promiscuous mode
[  985.784170][T32011] bond6: entered allmulticast mode
[  985.802683][T32011] 8021q: adding VLAN 0 to HW filter on device bond6
[  986.100915][T32016] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  986.106196][T32016] bond1 (unregistering): Released all slaves
[  986.490355][T32028] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  986.509454][T32028] bond1 (unregistering): Released all slaves
[  986.576729][T32048] FAULT_INJECTION: forcing a failure.
[  986.576729][T32048] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  986.576767][T32048] CPU: 0 UID: 0 PID: 32048 Comm: syz.0.6662 Not tainted syzkaller #0 PREEMPT(full) 
[  986.576791][T32048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  986.576804][T32048] Call Trace:
[  986.576813][T32048]  <TASK>
[  986.576824][T32048]  dump_stack_lvl+0xe8/0x150
[  986.576868][T32048]  should_fail_ex+0x410/0x560
[  986.576907][T32048]  prepare_alloc_pages+0x21e/0x5f0
[  986.576944][T32048]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  986.576977][T32048]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  986.577009][T32048]  ? __pfx_policy_nodemask+0x10/0x10
[  986.577044][T32048]  ? __lock_acquire+0x747/0x2de0
[  986.577072][T32048]  alloc_pages_mpol+0x21e/0x390
[  986.577107][T32048]  folio_alloc_mpol_noprof+0x39/0x160
[  986.577140][T32048]  vma_alloc_folio_noprof+0xe1/0x1e0
[  986.577176][T32048]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  986.577209][T32048]  ? lock_acquire+0x115/0x350
[  986.577242][T32048]  do_pte_missing+0x173a/0x34b0
[  986.577292][T32048]  handle_mm_fault+0x1a53/0x3750
[  986.577329][T32048]  ? handle_mm_fault+0xf1/0x3750
[  986.577365][T32048]  ? __pfx_handle_mm_fault+0x10/0x10
[  986.577389][T32048]  ? follow_page_pte+0x748/0xf10
[  986.577423][T32048]  ? __pfx_follow_page_pte+0x10/0x10
[  986.577468][T32048]  __get_user_pages+0x1670/0x2750
[  986.577540][T32048]  __gup_longterm_locked+0xe24/0x16f0
[  986.577579][T32048]  ? sanity_check_pinned_pages+0x817/0x8d0
[  986.577616][T32048]  gup_fast_fallback+0x1d92/0x20e0
[  986.577672][T32048]  ? __pfx_gup_fast_fallback+0x10/0x10
[  986.577693][T32048]  ? rds_info_getsockopt+0x254/0x730
[  986.577726][T32048]  ? rcu_is_watching+0x16/0xb0
[  986.577754][T32048]  ? is_valid_gup_args+0x11f/0x200
[  986.577788][T32048]  ? pin_user_pages_fast+0x4d/0xb0
[  986.577813][T32048]  iov_iter_extract_pages+0x3a1/0x690
[  986.577858][T32048]  rds_info_getsockopt+0x289/0x730
[  986.577897][T32048]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  986.577954][T32048]  rds_getsockopt+0x38b/0x600
[  986.577985][T32048]  ? __pfx_rds_getsockopt+0x10/0x10
[  986.578025][T32048]  do_sock_getsockopt+0x40c/0x640
[  986.578065][T32048]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  986.578115][T32048]  ? __fget_files+0x3a2/0x420
[  986.578138][T32048]  ? __fget_files+0x2a/0x420
[  986.578171][T32048]  __x64_sys_getsockopt+0x1a4/0x240
[  986.578215][T32048]  do_syscall_64+0x166/0x520
[  986.578236][T32048]  ? trace_irq_disable+0x3b/0x140
[  986.578261][T32048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.578281][T32048]  ? clear_bhb_loop+0x70/0xc0
[  986.578309][T32048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.578330][T32048] RIP: 0033:0x7f44eab9f559
[  986.578353][T32048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.578371][T32048] RSP: 002b:00007f44eba46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  986.578396][T32048] RAX: ffffffffffffffda RBX: 00007f44eae25fa0 RCX: 00007f44eab9f559
[  986.578413][T32048] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  986.578427][T32048] RBP: 00007f44eba46090 R08: 0000200000020fc0 R09: 0000000000000000
[  986.578450][T32048] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000002
[  986.578465][T32048] R13: 00007f44eae26038 R14: 00007f44eae25fa0 R15: 00007ffdd1109f28
[  986.578502][T32048]  </TASK>
[  986.705835][T32039] batman_adv: batadv0: Adding interface: syzkaller0
[  986.705855][T32039] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  986.705885][T32039] batman_adv: batadv0: Interface activated: syzkaller0
[  986.746028][T32018] batman_adv: batadv0: Interface deactivated: syzkaller0
[  986.883187][T32018] batman_adv: batadv0: Removing interface: syzkaller0
[  987.114523][T32053] syzkaller0: entered promiscuous mode
[  987.114552][T32053] syzkaller0: entered allmulticast mode
[  987.176448][T32053] net_ratelimit: 11 callbacks suppressed
[  987.176473][T32053] ip_tables: iptables: counters copy to user failed while replacing table
[  987.284185][T32059] syzkaller1: entered promiscuous mode
[  987.284212][T32059] syzkaller1: entered allmulticast mode
[  987.292707][T32059] ip_tables: iptables: counters copy to user failed while replacing table
[  987.499726][T32065] block nbd0: reconnected socket
[  987.500656][T32065] block nbd0: reconnected socket
[  987.523701][T19562] block nbd0: Receive control failed (result -32)
[  987.524023][T28356] block nbd0: Receive control failed (result -32)
[  987.590287][ T7318] pim6reg99999999: left allmulticast mode
[  987.736714][ T7318] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  987.737327][ T7318] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[  987.763797][ T7318] ip6gretap1 (unregistering): left allmulticast mode
[  988.334328][ T7318] bond9 (unregistering): (slave geneve5): Releasing backup interface
[  988.361190][ T7318] bond8 (unregistering): (slave geneve2): Releasing active interface
[  988.435064][ T7318] bond1 (unregistering): Released all slaves
[  988.449020][ T7318] bond2 (unregistering): Released all slaves
[  988.465498][ T7318] bond3 (unregistering): Released all slaves
[  988.485164][ T7318] bond4 (unregistering): Released all slaves
[  988.511197][ T7318] bond5 (unregistering): Released all slaves
[  988.521577][ T7318] bond6 (unregistering): Released all slaves
[  988.534665][ T7318] bond7 (unregistering): Released all slaves
[  988.546780][ T7318] bond8 (unregistering): Released all slaves
[  988.564282][ T7318] bond0 (unregistering): Released all slaves
[  988.597112][ T7318] bond9 (unregistering): Released all slaves
[  988.610359][ T7318] bond10 (unregistering): Released all slaves
[  988.625342][ T7318] bond11 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  988.626328][ T7318] bond11 (unregistering): Released all slaves
[  988.672531][ T7318] bond12 (unregistering): Released all slaves
[  988.784340][T32101] FAULT_INJECTION: forcing a failure.
[  988.784340][T32101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  988.784378][T32101] CPU: 1 UID: 0 PID: 32101 Comm: syz.2.6676 Not tainted syzkaller #0 PREEMPT(full) 
[  988.784403][T32101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  988.784416][T32101] Call Trace:
[  988.784425][T32101]  <TASK>
[  988.784435][T32101]  dump_stack_lvl+0xe8/0x150
[  988.784474][T32101]  should_fail_ex+0x410/0x560
[  988.784658][T32101]  _copy_from_iter+0x1d3/0x1660
[  988.784693][T32101]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  988.784727][T32101]  ? __pfx_policy_nodemask+0x10/0x10
[  988.784757][T32101]  ? lock_acquire+0x115/0x350
[  988.784779][T32101]  ? __pfx__copy_from_iter+0x10/0x10
[  988.784809][T32101]  ? alloc_pages_mpol+0x256/0x390
[  988.784848][T32101]  copy_page_from_iter+0x219/0x2d0
[  988.784881][T32101]  tun_get_user+0x212d/0x4470
[  988.785025][T32101]  ? tun_get_user+0x6f9/0x4470
[  988.785063][T32101]  ? aa_file_perm+0x4ed/0x15f0
[  988.785093][T32101]  ? __pfx_tun_get_user+0x10/0x10
[  988.785149][T32101]  ? __lock_acquire+0x747/0x2de0
[  988.785189][T32101]  ? ref_tracker_alloc+0x172/0x530
[  988.785237][T32101]  ? lock_acquire+0x115/0x350
[  988.785260][T32101]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  988.785297][T32101]  ? lock_acquire+0x115/0x350
[  988.785320][T32101]  ? tun_get+0x1c/0x2f0
[  988.785354][T32101]  ? tun_get+0x1c/0x2f0
[  988.785395][T32101]  ? tun_get+0x1c/0x2f0
[  988.785425][T32101]  tun_chr_write_iter+0x113/0x200
[  988.785456][T32101]  vfs_write+0x612/0xba0
[  988.785493][T32101]  ? __pfx_vfs_write+0x10/0x10
[  988.785521][T32101]  ? __fget_files+0x3a2/0x420
[  988.785543][T32101]  ? __fget_files+0x2a/0x420
[  988.785569][T32101]  ? fdget+0x1ac/0x250
[  988.785600][T32101]  ksys_write+0x150/0x270
[  988.785629][T32101]  ? __pfx_ksys_write+0x10/0x10
[  988.785668][T32101]  do_syscall_64+0x166/0x520
[  988.785691][T32101]  ? trace_irq_disable+0x3b/0x140
[  988.785716][T32101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.785739][T32101]  ? clear_bhb_loop+0x70/0xc0
[  988.785765][T32101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.785786][T32101] RIP: 0033:0x7ff0a975fd8e
[  988.785808][T32101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  988.785826][T32101] RSP: 002b:00007ff0aa5c6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  988.785849][T32101] RAX: ffffffffffffffda RBX: 00007ff0aa5c76c0 RCX: 00007ff0a975fd8e
[  988.785865][T32101] RDX: 000000000000002a RSI: 0000200000000280 RDI: 00000000000000c8
[  988.785880][T32101] RBP: 00007ff0aa5c7090 R08: 0000000000000000 R09: 0000000000000000
[  988.785904][T32101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  988.785918][T32101] R13: 00007ff0a9a26038 R14: 00007ff0a9a25fa0 R15: 00007fff5fd789a8
[  988.785954][T32101]  </TASK>
[  989.213484][T32109] netlink: 'syz.3.6677': attribute type 4 has an invalid length.
[  989.256736][T32111] netlink: 'syz.3.6677': attribute type 4 has an invalid length.
[  989.286146][ T7318] tipc: Disabling bearer <udp:syz2>
[  989.286309][ T7318] tipc: Left network mode
[  989.300403][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  989.333187][T26028] lo speed is unknown, defaulting to 1000
[  989.333235][T26028] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  989.380824][T32115] ip_tables: iptables: counters copy to user failed while replacing table
[  989.392957][T32108] __nla_validate_parse: 31 callbacks suppressed
[  989.392979][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6678'.
[  989.639874][T32128] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000
[  989.741880][ T7318] IPVS: stopping master sync thread 20459 ...
[  989.777033][ T7318] IPVS: stopping backup sync thread 19514 ...
[  989.787489][T32119] 8021q: adding VLAN 0 to HW filter on device bond2
[  989.885344][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6684'.
[  990.012567][T32138] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.013454][T32138] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.234804][T32143] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  990.252918][T32148] bridge: RTM_NEWNEIGH with invalid state 0x20
[  990.259376][T32135] batman_adv: batadv0: Adding interface: syzkaller0
[  990.259395][T32135] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  990.259435][T32135] batman_adv: batadv0: Interface activated: syzkaller0
[  990.307939][T14317] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  990.421931][T32157] ip_tables: iptables: counters copy to user failed while replacing table
[  990.432879][T32158] ip_tables: iptables: counters copy to user failed while replacing table
[  990.649592][T32135] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  990.751052][T32165] netlink: 'syz.4.6696': attribute type 21 has an invalid length.
[  990.751082][T32165] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6696'.
[  990.756604][T32134] batman_adv: batadv0: Interface deactivated: syzkaller0
[  990.828284][T32134] batman_adv: batadv0: Removing interface: syzkaller0
[  990.872920][T32165] netlink: 'syz.4.6696': attribute type 4 has an invalid length.
[  990.872949][T32165] netlink: 'syz.4.6696': attribute type 3 has an invalid length.
[  990.872963][T32165] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6696'.
[  991.255171][T32177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6698'.
[  991.496286][T32181] netlink: 'syz.5.6701': attribute type 10 has an invalid length.
[  991.546711][T32181] team0: Port device netdevsim1 removed
[  991.581503][T32181] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  991.604762][T32181] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  992.010781][ T7318] batman_adv: batadv0: Removing interface: veth0
[  992.051015][T32193] ip_tables: iptables: counters copy to user failed while replacing table
[  992.710718][T32214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6706'.
[  993.171717][T19562] block nbd4: Receive control failed (result -32)
[  993.176345][T28356] block nbd4: Receive control failed (result -32)
[  994.490883][ T7318] IPVS: stop unused estimator thread 0...
[  994.595380][T32237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6718'.
[  994.663075][T32234] syzkaller1: entered promiscuous mode
[  994.663102][T32234] syzkaller1: entered allmulticast mode
[  994.725280][T32237] syzkaller1: entered promiscuous mode
[  994.725307][T32237] syzkaller1: entered allmulticast mode
[  995.041212][T32258] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6724'.
[  995.181810][T32263] netlink: 'syz.5.6727': attribute type 1 has an invalid length.
[  995.181837][T32263] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6727'.
[  995.472109][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6730'.
[  995.857042][T32259] netlink: 'syz.2.6726': attribute type 4 has an invalid length.
[  996.020516][T32286] netlink: 'syz.0.6736': attribute type 178 has an invalid length.
[  996.361784][T32304] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6740'.
[  996.389975][T32305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  996.390715][T32305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  996.950154][T32332] xt_CONNSECMARK: invalid mode: 0
[  996.975502][T32334] Cannot find del_set index 4 as target
[  997.139507][T32341] FAULT_INJECTION: forcing a failure.
[  997.139507][T32341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  997.140466][T32341] CPU: 0 UID: 0 PID: 32341 Comm: syz.5.6753 Not tainted syzkaller #0 PREEMPT(full) 
[  997.140494][T32341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  997.140507][T32341] Call Trace:
[  997.140517][T32341]  <TASK>
[  997.140527][T32341]  dump_stack_lvl+0xe8/0x150
[  997.140567][T32341]  should_fail_ex+0x410/0x560
[  997.140605][T32341]  _copy_to_user+0x31/0xb0
[  997.140640][T32341]  simple_read_from_buffer+0xe1/0x170
[  997.140677][T32341]  proc_fail_nth_read+0x1bb/0x230
[  997.140712][T32341]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  997.140747][T32341]  ? rw_verify_area+0x24a/0x4c0
[  997.140775][T32341]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  997.140805][T32341]  vfs_read+0x213/0xa80
[  997.140837][T32341]  ? __pfx___mutex_lock+0x10/0x10
[  997.140861][T32341]  ? __pfx_vfs_read+0x10/0x10
[  997.140888][T32341]  ? __fget_files+0x2a/0x420
[  997.140910][T32341]  ? __fget_files+0x3a2/0x420
[  997.140932][T32341]  ? __fget_files+0x2a/0x420
[  997.140969][T32341]  ? fdget+0x1ac/0x250
[  997.141002][T32341]  ksys_read+0x150/0x270
[  997.141030][T32341]  ? __pfx_ksys_read+0x10/0x10
[  997.141069][T32341]  do_syscall_64+0x166/0x520
[  997.141090][T32341]  ? trace_irq_disable+0x3b/0x140
[  997.141116][T32341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.141138][T32341]  ? clear_bhb_loop+0x70/0xc0
[  997.141165][T32341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.141186][T32341] RIP: 0033:0x7feca9b5fd8e
[  997.141208][T32341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  997.141227][T32341] RSP: 002b:00007fecaa9e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  997.141252][T32341] RAX: ffffffffffffffda RBX: 00007fecaa9e56c0 RCX: 00007feca9b5fd8e
[  997.141268][T32341] RDX: 000000000000000f RSI: 00007fecaa9e50a0 RDI: 0000000000000005
[  997.141282][T32341] RBP: 00007fecaa9e5090 R08: 0000000000000000 R09: 0000000000000000
[  997.141296][T32341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.141310][T32341] R13: 00007feca9e26038 R14: 00007feca9e25fa0 R15: 00007ffc9d20bc48
[  997.141346][T32341]  </TASK>
[  997.578878][T32355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6756'.
[  998.025641][T32363] veth3: entered promiscuous mode
[  998.243966][T32372] rxe_eth0 speed is unknown, defaulting to 1000
[  998.284419][T32378] FAULT_INJECTION: forcing a failure.
[  998.284419][T32378] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  998.284468][T32378] CPU: 0 UID: 0 PID: 32378 Comm: syz.4.6763 Not tainted syzkaller #0 PREEMPT(full) 
[  998.284493][T32378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  998.284507][T32378] Call Trace:
[  998.284516][T32378]  <TASK>
[  998.284526][T32378]  dump_stack_lvl+0xe8/0x150
[  998.284565][T32378]  should_fail_ex+0x410/0x560
[  998.284602][T32378]  prepare_alloc_pages+0x21e/0x5f0
[  998.284639][T32378]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  998.284673][T32378]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  998.284707][T32378]  ? __pfx_policy_nodemask+0x10/0x10
[  998.284744][T32378]  ? __lock_acquire+0x747/0x2de0
[  998.284771][T32378]  alloc_pages_mpol+0x21e/0x390
[  998.284809][T32378]  folio_alloc_mpol_noprof+0x39/0x160
[  998.284843][T32378]  vma_alloc_folio_noprof+0xe1/0x1e0
[  998.284878][T32378]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  998.284911][T32378]  ? lock_acquire+0x115/0x350
[  998.284941][T32378]  do_pte_missing+0x173a/0x34b0
[  998.284989][T32378]  handle_mm_fault+0x1a53/0x3750
[  998.285026][T32378]  ? handle_mm_fault+0xf1/0x3750
[  998.285062][T32378]  ? __pfx_handle_mm_fault+0x10/0x10
[  998.285085][T32378]  ? follow_page_pte+0x748/0xf10
[  998.285119][T32378]  ? __pfx_follow_page_pte+0x10/0x10
[  998.285154][T32378]  __get_user_pages+0x1670/0x2750
[  998.285224][T32378]  __gup_longterm_locked+0xe24/0x16f0
[  998.285260][T32378]  ? sanity_check_pinned_pages+0x817/0x8d0
[  998.285298][T32378]  gup_fast_fallback+0x1d92/0x20e0
[  998.285357][T32378]  ? __pfx_gup_fast_fallback+0x10/0x10
[  998.285378][T32378]  ? rds_info_getsockopt+0x254/0x730
[  998.285409][T32378]  ? rcu_is_watching+0x16/0xb0
[  998.285435][T32378]  ? is_valid_gup_args+0x11f/0x200
[  998.285479][T32378]  ? pin_user_pages_fast+0x4d/0xb0
[  998.285504][T32378]  iov_iter_extract_pages+0x3a1/0x690
[  998.285547][T32378]  rds_info_getsockopt+0x289/0x730
[  998.285591][T32378]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  998.285652][T32378]  rds_getsockopt+0x38b/0x600
[  998.285682][T32378]  ? __pfx_rds_getsockopt+0x10/0x10
[  998.285722][T32378]  do_sock_getsockopt+0x40c/0x640
[  998.285763][T32378]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  998.285813][T32378]  ? __fget_files+0x3a2/0x420
[  998.285836][T32378]  ? __fget_files+0x2a/0x420
[  998.285869][T32378]  __x64_sys_getsockopt+0x1a4/0x240
[  998.285912][T32378]  do_syscall_64+0x166/0x520
[  998.285934][T32378]  ? trace_irq_disable+0x3b/0x140
[  998.285958][T32378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.285979][T32378]  ? clear_bhb_loop+0x70/0xc0
[  998.286006][T32378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.286028][T32378] RIP: 0033:0x7fecd0d9f559
[  998.286050][T32378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  998.286069][T32378] RSP: 002b:00007fecceff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  998.286093][T32378] RAX: ffffffffffffffda RBX: 00007fecd1025fa0 RCX: 00007fecd0d9f559
[  998.286110][T32378] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004
[  998.286124][T32378] RBP: 00007fecceff6090 R08: 0000200000020fc0 R09: 0000000000000000
[  998.286138][T32378] R10: 0000200000007fc0 R11: 0000000000000246 R12: 0000000000000002
[  998.286153][T32378] R13: 00007fecd1026038 R14: 00007fecd1025fa0 R15: 00007fff51d61038
[  998.286190][T32378]  </TASK>
[  998.323375][T32379] bridge_slave_0: left allmulticast mode
[  998.323405][T32379] bridge_slave_0: left promiscuous mode
[  998.323626][T32379] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.470729][T32379] bridge_slave_1: left allmulticast mode
[  998.470760][T32379] bridge_slave_1: left promiscuous mode
[  998.471037][T32379] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.673264][T32379] bond0: (slave bond_slave_0): Releasing backup interface
[  998.746034][T32379] bond0: (slave bond_slave_1): Releasing backup interface
[  998.817478][T32379] team0: Port device team_slave_0 removed
[  998.873884][T32379] team0: Port device team_slave_1 removed
[  998.876742][T32379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  998.876768][T32379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  998.903067][T32379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  998.903096][T32379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  998.931257][T32379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  998.942371][T32381] team0: Mode changed to "activebackup"
[  999.187142][T32397] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  999.302813][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6769'.
[  999.349717][T32372] wg2 speed is unknown, defaulting to 1000
[  999.380542][T32408] netlink: 'syz.5.6770': attribute type 1 has an invalid length.
[  999.421973][T32408] 8021q: adding VLAN 0 to HW filter on device bond3
[  999.425503][T32410] netlink: 'syz.3.6771': attribute type 1 has an invalid length.
[  999.544472][T32412] bond3: (slave gretap1): making interface the new active one
[  999.559794][T32412] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  999.610393][T32416] veth3: entered allmulticast mode
[  999.628253][T32416] bond2: (slave veth3): Enslaving as an active interface with a down link
[  999.711626][T32418] ip6erspan1: entered allmulticast mode
[  999.986169][T32429] ip_tables: iptables: counters copy to user failed while replacing table
[ 1000.159562][T32434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6776'.
[ 1000.399773][T32422] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[ 1000.459127][T32422] sit1: left promiscuous mode
[ 1000.459154][T32422] sit1: left allmulticast mode
[ 1000.495417][T32372] lo speed is unknown, defaulting to 1000
[ 1000.506027][T32372] virt_wifi0 speed is unknown, defaulting to 1000
[ 1000.632995][T32448] batman_adv: batadv0: Adding interface: syzkaller0
[ 1000.633019][T32448] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.633053][T32448] batman_adv: batadv0: Interface activated: syzkaller0
[ 1000.648233][T32441] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1000.754130][T32441] batman_adv: batadv0: Removing interface: syzkaller0
[ 1000.810416][T32457] netlink: 'syz.5.6781': attribute type 1 has an invalid length.
[ 1000.810442][T32457] netlink: 248 bytes leftover after parsing attributes in process `syz.5.6781'.
[ 1000.814691][T32457] nbd5: detected capacity change from 0 to 63
[ 1000.818714][T28356] block nbd5: Receive control failed (result -32)
[ 1000.835675][ T2489] block nbd5: Dead connection, failed to find a fallback
[ 1000.835703][ T2489] block nbd5: shutting down sockets
[ 1000.839209][ T2489] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1000.839412][ T2489] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1000.840010][ T7325] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.840052][ T7325] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.840085][ T7325] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.840117][ T7325] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.845640][ T2489] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1000.845673][ T2489] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1000.846093][ T2489] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1000.846119][ T2489] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1000.847221][ T2489] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1000.847245][ T2489] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1000.851616][ T2489] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1000.851649][ T2489] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1000.852217][ T2489] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1000.852244][ T2489] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1000.855202][ T2489] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[ 1000.855232][ T2489] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1000.855249][ T2489] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1000.856882][ T2489] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1000.856908][ T2489] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1000.856924][ T2489] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1000.862839][ T2489] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1000.863825][ T2489] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1000.870297][T31918] ldm_validate_partition_table(): Disk read failed.
[ 1000.874181][T31918] Dev nbd5: unable to read RDB block 0
[ 1000.887492][T31918]  nbd5: unable to read partition table
[ 1000.969476][T31918] ldm_validate_partition_table(): Disk read failed.
[ 1000.975231][T31918] Dev nbd5: unable to read RDB block 0
[ 1000.982509][T31918]  nbd5: unable to read partition table
[ 1001.818694][T32482] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6787'.
[ 1001.820283][T32483] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6787'.
[ 1001.924146][T32481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6787'.
[ 1001.924502][T32482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6787'.
[ 1001.951788][T32486] openvswitch: netlink: Key 3 has unexpected len 1 expected 4
[ 1002.903216][   T30] audit: type=1804 audit(1793124762.420:27): pid=32514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6798" name="/newroot/144/cgroup.controllers" dev="tmpfs" ino=774 res=1 errno=0
[ 1002.903588][   T30] audit: type=1800 audit(1793124762.420:28): pid=32514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6798" name="cgroup.controllers" dev="tmpfs" ino=774 res=0 errno=-22
[ 1002.906171][   T30] audit: type=1800 audit(1793124762.420:29): pid=32514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6798" name="cgroup.controllers" dev="tmpfs" ino=774 res=0 errno=-22
[ 1002.982587][T32514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'.
[ 1003.020139][T32514] ip6erspan0: entered promiscuous mode
[ 1003.506260][T32524] batman_adv: batadv0: Adding interface: syzkaller0
[ 1003.506283][T32524] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.506413][T32524] batman_adv: batadv0: Interface activated: syzkaller0
[ 1003.554591][T32520] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1003.682940][T32520] batman_adv: batadv0: Removing interface: syzkaller0
[ 1003.852062][ T7357] 
[ 1003.854470][ T7357] ======================================================
[ 1003.861544][ T7357] WARNING: possible circular locking dependency detected
[ 1003.868712][ T7357] syzkaller #0 Not tainted
[ 1003.873160][ T7357] ------------------------------------------------------
[ 1003.880252][ T7357] kworker/u8:53/7357 is trying to acquire lock:
[ 1003.886554][ T7357] ffffffff8fe8de00 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600
[ 1003.888915][T32532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6803'.
[ 1003.888943][T32532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6803'.
[ 1003.914222][ T7357] 
[ 1003.914222][ T7357] but task is already holding lock:
[ 1003.921611][ T7357] ffff88807af03960 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[ 1003.931397][ T7357] 
[ 1003.931397][ T7357] which lock already depends on the new lock.
[ 1003.931397][ T7357] 
[ 1003.941808][ T7357] 
[ 1003.941808][ T7357] the existing dependency chain (in reverse order) is:
[ 1003.950830][ T7357] 
[ 1003.950830][ T7357] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1003.958798][ T7357]        lock_sock_nested+0x41/0x100
[ 1003.964123][ T7357]        __inet6_bind+0x301/0xf30
[ 1003.969233][ T7357]        mptcp_bind+0x110/0x1d0
[ 1003.974144][ T7357]        __sys_bind+0x2e3/0x410
[ 1003.979008][ T7357]        __x64_sys_bind+0x7a/0x90
[ 1003.984038][ T7357]        do_syscall_64+0x166/0x520
[ 1003.989162][ T7357]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.995778][ T7357] 
[ 1003.995778][ T7357] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1004.003540][ T7357]        lock_sock_nested+0x41/0x100
[ 1004.009617][ T7357]        inet_shutdown+0x6a/0x390
[ 1004.014651][ T7357]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1004.020372][ T7357]        sock_shutdown+0x15e/0x260
[ 1004.025539][ T7357]        nbd_clear_sock+0x24/0x170
[ 1004.030685][ T7357]        nbd_config_put+0x477/0x7e0
[ 1004.035900][ T7357]        nbd_genl_connect+0x19b8/0x1cd0
[ 1004.041458][ T7357]        genl_family_rcv_msg_doit+0x233/0x340
[ 1004.047538][ T7357]        genl_rcv_msg+0x614/0x7a0
[ 1004.052585][ T7357]        netlink_rcv_skb+0x226/0x4a0
[ 1004.058150][ T7357]        genl_rcv+0x28/0x40
[ 1004.062666][ T7357]        netlink_unicast+0x8ef/0xa80
[ 1004.067952][ T7357]        netlink_sendmsg+0x7f0/0xb20
[ 1004.073249][ T7357]        sock_sendmsg_nosec+0x14e/0x190
[ 1004.078803][ T7357]        ____sys_sendmsg+0x54e/0x850
[ 1004.084110][ T7357]        ___sys_sendmsg+0x2a5/0x360
[ 1004.089314][ T7357]        __x64_sys_sendmsg+0x1b1/0x290
[ 1004.094794][ T7357]        do_syscall_64+0x166/0x520
[ 1004.099914][ T7357]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.106330][ T7357] 
[ 1004.106330][ T7357] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1004.114001][ T7357]        __mutex_lock+0x197/0x15a0
[ 1004.119118][ T7357]        nbd_queue_rq+0x373/0xff0
[ 1004.124164][ T7357]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1004.130306][ T7357]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1004.137170][ T7357]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1004.143857][ T7357]        blk_mq_run_work_fn+0x167/0x2f0
[ 1004.149415][ T7357]        process_scheduled_works+0xc3d/0x1630
[ 1004.155490][ T7357]        worker_thread+0xa47/0xfb0
[ 1004.160610][ T7357]        kthread+0x38b/0x480
[ 1004.165301][ T7357]        ret_from_fork+0x514/0xb70
[ 1004.170452][ T7357]        ret_from_fork_asm+0x1a/0x30
[ 1004.175742][ T7357] 
[ 1004.175742][ T7357] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1004.182957][ T7357]        __mutex_lock+0x197/0x15a0
[ 1004.188105][ T7357]        nbd_queue_rq+0xc1/0xff0
[ 1004.193056][ T7357]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1004.199127][ T7357]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1004.205983][ T7357]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1004.212490][ T7357]        blk_mq_run_work_fn+0x167/0x2f0
[ 1004.218047][ T7357]        process_scheduled_works+0xc3d/0x1630
[ 1004.224118][ T7357]        worker_thread+0xa47/0xfb0
[ 1004.229235][ T7357]        kthread+0x38b/0x480
[ 1004.233835][ T7357]        ret_from_fork+0x514/0xb70
[ 1004.238949][ T7357]        ret_from_fork_asm+0x1a/0x30
[ 1004.244234][ T7357] 
[ 1004.244234][ T7357] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1004.251455][ T7357]        __synchronize_srcu+0xca/0x2f0
[ 1004.256919][ T7357]        elevator_switch+0x1e8/0x7b0
[ 1004.262253][ T7357]        elevator_change+0x2fa/0x480
[ 1004.267549][ T7357]        elevator_set_default+0x375/0x440
[ 1004.273307][ T7357]        blk_register_queue+0x404/0x4f0
[ 1004.278914][ T7357]        __add_disk+0x6b8/0xdb0
[ 1004.283773][ T7357]        add_disk_fwnode+0x100/0x3a0
[ 1004.289067][ T7357]        nbd_dev_add+0x733/0xb60
[ 1004.294014][ T7357]        nbd_init+0x168/0x1f0
[ 1004.298781][ T7357]        do_one_initcall+0x250/0x870
[ 1004.304170][ T7357]        do_initcall_level+0x10a/0x1a0
[ 1004.309711][ T7357]        do_initcalls+0x59/0xa0
[ 1004.314566][ T7357]        kernel_init_freeable+0x29d/0x3e0
[ 1004.320287][ T7357]        kernel_init+0x22/0x1d0
[ 1004.325145][ T7357]        ret_from_fork+0x514/0xb70
[ 1004.330258][ T7357]        ret_from_fork_asm+0x1a/0x30
[ 1004.335555][ T7357] 
[ 1004.335555][ T7357] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1004.343394][ T7357]        __mutex_lock+0x197/0x15a0
[ 1004.348511][ T7357]        elevator_change+0x1af/0x480
[ 1004.353801][ T7357]        elevator_set_none+0xb5/0x140
[ 1004.359180][ T7357]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1004.365545][ T7357]        nbd_start_device+0x189/0xb30
[ 1004.370926][ T7357]        nbd_genl_connect+0x167d/0x1cd0
[ 1004.376484][ T7357]        genl_family_rcv_msg_doit+0x233/0x340
[ 1004.382561][ T7357]        genl_rcv_msg+0x614/0x7a0
[ 1004.387686][ T7357]        netlink_rcv_skb+0x226/0x4a0
[ 1004.392993][ T7357]        genl_rcv+0x28/0x40
[ 1004.397529][ T7357]        netlink_unicast+0x8ef/0xa80
[ 1004.402837][ T7357]        netlink_sendmsg+0x7f0/0xb20
[ 1004.408160][ T7357]        sock_sendmsg_nosec+0x14e/0x190
[ 1004.413718][ T7357]        ____sys_sendmsg+0x54e/0x850
[ 1004.419034][ T7357]        ___sys_sendmsg+0x2a5/0x360
[ 1004.424246][ T7357]        __x64_sys_sendmsg+0x1b1/0x290
[ 1004.429710][ T7357]        do_syscall_64+0x166/0x520
[ 1004.434826][ T7357]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.441358][ T7357] 
[ 1004.441358][ T7357] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1004.449991][ T7357]        blk_alloc_queue+0x544/0x690
[ 1004.455287][ T7357]        __blk_mq_alloc_disk+0x194/0x390
[ 1004.460928][ T7357]        nbd_dev_add+0x494/0xb60
[ 1004.465878][ T7357]        nbd_init+0x168/0x1f0
[ 1004.470647][ T7357]        do_one_initcall+0x250/0x870
[ 1004.475947][ T7357]        do_initcall_level+0x10a/0x1a0
[ 1004.481412][ T7357]        do_initcalls+0x59/0xa0
[ 1004.486271][ T7357]        kernel_init_freeable+0x29d/0x3e0
[ 1004.492012][ T7357]        kernel_init+0x22/0x1d0
[ 1004.496879][ T7357]        ret_from_fork+0x514/0xb70
[ 1004.502024][ T7357]        ret_from_fork_asm+0x1a/0x30
[ 1004.507325][ T7357] 
[ 1004.507325][ T7357] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1004.514542][ T7357]        __lock_acquire+0x164c/0x2de0
[ 1004.519924][ T7357]        lock_acquire+0x115/0x350
[ 1004.524952][ T7357]        fs_reclaim_acquire+0x71/0x100
[ 1004.530416][ T7357]        kmem_cache_alloc_node_noprof+0x5f/0x600
[ 1004.536759][ T7357]        __alloc_skb+0x1db/0x7a0
[ 1004.541703][ T7357]        tcp_stream_alloc_skb+0x3f/0x580
[ 1004.547419][ T7357]        tcp_connect+0x1646/0x54e0
[ 1004.552590][ T7357]        tcp_v6_connect+0x15dc/0x1e60
[ 1004.558036][ T7357]        __inet_stream_connect+0x28c/0xf50
[ 1004.563854][ T7357]        inet_stream_connect+0x66/0xa0
[ 1004.569321][ T7357]        kernel_connect+0x141/0x1c0
[ 1004.574519][ T7357]        rds_tcp_conn_path_connect+0x6e9/0x920
[ 1004.580762][ T7357]        rds_connect_worker+0x1d8/0x290
[ 1004.586316][ T7357]        process_scheduled_works+0xc3d/0x1630
[ 1004.592387][ T7357]        worker_thread+0xa47/0xfb0
[ 1004.597507][ T7357]        kthread+0x38b/0x480
[ 1004.602102][ T7357]        ret_from_fork+0x514/0xb70
[ 1004.607235][ T7357]        ret_from_fork_asm+0x1a/0x30
[ 1004.612525][ T7357] 
[ 1004.612525][ T7357] other info that might help us debug this:
[ 1004.612525][ T7357] 
[ 1004.622768][ T7357] Chain exists of:
[ 1004.622768][ T7357]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[ 1004.622768][ T7357] 
[ 1004.635799][ T7357]  Possible unsafe locking scenario:
[ 1004.635799][ T7357] 
[ 1004.643300][ T7357]        CPU0                    CPU1
[ 1004.648686][ T7357]        ----                    ----
[ 1004.654049][ T7357]   lock(k-sk_lock-AF_INET6);
[ 1004.658734][ T7357]                                lock(sk_lock-AF_INET6);
[ 1004.665808][ T7357]                                lock(k-sk_lock-AF_INET6);
[ 1004.673050][ T7357]   lock(fs_reclaim);
[ 1004.677061][ T7357] 
[ 1004.677061][ T7357]  *** DEADLOCK ***
[ 1004.677061][ T7357] 
[ 1004.685291][ T7357] locks held by kworker/u8:53/7357: 4, last CPU#0:
[ 1004.691961][ T7357]  #0: ffff8880376a0148 ((wq_completion)krds_cp_wq#23/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1004.704010][ T7357]  #1: ffffc900056bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1004.716839][ T7357]  #2: ffff88805350e180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1004.727916][ T7357]  #3: ffff88807af03960 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[ 1004.738024][ T7357] 
[ 1004.738024][ T7357] stack backtrace:
[ 1004.743918][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: kworker/u8:53 Not tainted syzkaller #0 PREEMPT(full) 
[ 1004.753464][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1004.763617][ T7357] Workqueue: krds_cp_wq#23/0 rds_connect_worker
[ 1004.769898][ T7357] Call Trace:
[ 1004.773206][ T7357]  <TASK>
[ 1004.776142][ T7357]  dump_stack_lvl+0xe8/0x150
[ 1004.780753][ T7357]  print_circular_bug+0x2e2/0x300
[ 1004.785790][ T7357]  check_noncircular+0x12f/0x150
[ 1004.790736][ T7357]  __lock_acquire+0x164c/0x2de0
[ 1004.795597][ T7357]  ? __lock_acquire+0x747/0x2de0
[ 1004.800546][ T7357]  lock_acquire+0x115/0x350
[ 1004.805054][ T7357]  ? kmem_cache_alloc_node_noprof+0x5f/0x600
[ 1004.811043][ T7357]  ? lock_acquire+0x115/0x350
[ 1004.815729][ T7357]  ? __alloc_skb+0x1db/0x7a0
[ 1004.820338][ T7357]  fs_reclaim_acquire+0x71/0x100
[ 1004.825284][ T7357]  ? kmem_cache_alloc_node_noprof+0x5f/0x600
[ 1004.831272][ T7357]  kmem_cache_alloc_node_noprof+0x5f/0x600
[ 1004.837104][ T7357]  ? lock_acquire+0x115/0x350
[ 1004.841782][ T7357]  ? __alloc_skb+0x1db/0x7a0
[ 1004.846386][ T7357]  __alloc_skb+0x1db/0x7a0
[ 1004.850900][ T7357]  tcp_stream_alloc_skb+0x3f/0x580
[ 1004.856015][ T7357]  ? __asan_memset+0x22/0x50
[ 1004.860612][ T7357]  tcp_connect+0x1646/0x54e0
[ 1004.865221][ T7357]  ? irqentry_exit+0x2a0/0x9b0
[ 1004.869991][ T7357]  ? ktime_get_with_offset+0x93/0x2d0
[ 1004.875373][ T7357]  ? __pfx_tcp_connect+0x10/0x10
[ 1004.880319][ T7357]  ? seqcount_lockdep_reader_access+0xea/0x100
[ 1004.886482][ T7357]  ? seqcount_lockdep_reader_access+0xec/0x100
[ 1004.892649][ T7357]  ? __asan_memset+0x22/0x50
[ 1004.897249][ T7357]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[ 1004.903575][ T7357]  ? inet6_hash_connect+0xeb/0x170
[ 1004.908783][ T7357]  tcp_v6_connect+0x15dc/0x1e60
[ 1004.913655][ T7357]  ? __pfx_tcp_v6_connect+0x10/0x10
[ 1004.918876][ T7357]  ? preempt_schedule_thunk+0x16/0x40
[ 1004.924258][ T7357]  __inet_stream_connect+0x28c/0xf50
[ 1004.929557][ T7357]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1004.934594][ T7357]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1004.940428][ T7357]  ? inet_stream_connect+0x51/0xa0
[ 1004.945552][ T7357]  ? __local_bh_enable_ip+0xd6/0x140
[ 1004.950851][ T7357]  inet_stream_connect+0x66/0xa0
[ 1004.955804][ T7357]  kernel_connect+0x141/0x1c0
[ 1004.960515][ T7357]  ? __pfx_kernel_connect+0x10/0x10
[ 1004.965723][ T7357]  ? __local_bh_enable_ip+0xd6/0x140
[ 1004.971013][ T7357]  rds_tcp_conn_path_connect+0x6e9/0x920
[ 1004.976674][ T7357]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[ 1004.982853][ T7357]  rds_connect_worker+0x1d8/0x290
[ 1004.987884][ T7357]  ? process_scheduled_works+0x97a/0x1630
[ 1004.993611][ T7357]  process_scheduled_works+0xc3d/0x1630
[ 1004.999175][ T7357]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1005.005164][ T7357]  ? assign_work+0x3cf/0x5d0
[ 1005.009762][ T7357]  worker_thread+0xa47/0xfb0
[ 1005.014375][ T7357]  kthread+0x38b/0x480
[ 1005.018452][ T7357]  ? __pfx_worker_thread+0x10/0x10
[ 1005.023743][ T7357]  ? __pfx_kthread+0x10/0x10
[ 1005.028334][ T7357]  ret_from_fork+0x514/0xb70
[ 1005.032955][ T7357]  ? save_fpregs_to_fpstate+0x176/0x200
[ 1005.038512][ T7357]  ? __pfx_ret_from_fork+0x10/0x10
[ 1005.043715][ T7357]  ? __switch_to+0xc78/0x1410
[ 1005.048400][ T7357]  ? __pfx_kthread+0x10/0x10
[ 1005.052995][ T7357]  ret_from_fork_asm+0x1a/0x30
[ 1005.057774][ T7357]  </TASK>
[ 1005.071976][T32532] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht'