last executing test programs:

8.082663899s ago: executing program 4 (id=4646):
syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000240)=@ctrl_frame=@pspoll={{}, @random=0x1, @initial, @device_b}, 0x10)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x11, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xfff2, 0xfff1}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40015}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000000024000e800c000280050001002100000014000180080001"], 0x88}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
accept4(r0, &(0x7f0000000140)=@l2, &(0x7f00000001c0)=0x80, 0x80000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x42}, 0x4002810)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10)
r13 = socket$rds(0x15, 0x5, 0x0)
r14 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$RDS_GET_MR(r13, 0x114, 0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x401, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x0)

7.190772768s ago: executing program 1 (id=4655):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r6], 0x1c}}, 0x4008054)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
connect$can_bcm(r2, &(0x7f0000000180), 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xd, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x154}}, 0x240448c8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x22052, r2, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r11, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff8}, 0x50)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000240)="070000000000eaffa09e08020141fd001900000000004b8c4226f4fb01fda1dbe21ee4d66ae344fc8162180000000000f67e32c5b66de25f3240af73204900000000000000", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

3.966433058s ago: executing program 3 (id=4661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000002100000000002c000000000000000006000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x6}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xc, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRESOCT=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x118, 0x40, 0x1, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="872b8e39ada061e6dc948aea0c3661a9d86cbb1a455aeb35e8380ca658cb774ae7fea455e8bdeffd667aee8597224fea47e9142a7838bd178332eb47a26488fc6b655feb8391e1675480da2f61bac6471e3c2895ffaa1ee8248ad1de22fc627f85d16555d15d90ff35d4d268b77338a6af8354d9318a81816e4f36e279643bd64952c8b731a9f85cded62d42eca3b9cf166792d760b1c29fc13f8efe4dc488c9d45285e57371cb18c447ed02276a3e4359c3aecce80eab8fcd3f88252231f0eee5f2f08ac4bf12c68450a88a6f78424bd98ae7a421861b82a7fa91044ab70c60ad902700acf1"]}, 0x118}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x11, &(0x7f00000004c0)=0x407a, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713d2", 0x33}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1e409dcf247c0e5443a835606df56c8c4c2e6d48b", 0x6e}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0ae", 0x22}, {&(0x7f0000000740)="8fd736b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da381612ab7ffffffff5429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73ae2c0fdea4ffb82500"/94, 0x5e}, {&(0x7f0000000840)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff4708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c", 0xa4}], 0x6}}, {{0x0, 0x0, &(0x7f00000010c0)}}], 0x2, 0x40084)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x804}, 0x20000010)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00)

3.919666497s ago: executing program 1 (id=4662):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028008000100080000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884)

3.817630043s ago: executing program 4 (id=4665):
r0 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x40)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

3.618383207s ago: executing program 3 (id=4668):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000022020000c00602000004e8b66058db1b79"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)}, 0x840)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1405, 0x702, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x30}}, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x3)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20)
r10 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0)
connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10)

3.144071369s ago: executing program 1 (id=4672):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r6], 0x1c}}, 0x4008054)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
connect$can_bcm(r2, &(0x7f0000000180), 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xd, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x154}}, 0x240448c8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x22052, r2, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r11, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff8}, 0x50)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000240)="070000000000eaffa09e08020141fd001900000000004b8c4226f4fb01fda1dbe21ee4d66ae344fc8162180000000000f67e32c5b66de25f3240af73204900000000000000", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

2.376949439s ago: executing program 0 (id=4676):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x306, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

2.162320547s ago: executing program 0 (id=4678):
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000400)={&(0x7f0000000080)=0x1beb1fb4, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f00000003c0)})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4049810}, 0x20004804)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000600)={0x5d, 0x8, 0x3})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x498a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x48cfb5cfb5598333)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x8, 0x602, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4c010)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000880)={<r5=>0x0, @in6={{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x1}}, 0x3ff, 0x7}, &(0x7f0000000940)=0x90)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x3ff, 0x3}, &(0x7f00000009c0)=0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r3, 0x0, 0x72, 0x1000, &(0x7f0000000a00)="08fc441d552c4be93c2bb385a9eca5adcd4d09d5be2295e432b111ac6fe043322820225872db09a364b48cad4d5a1f40a297b3c83917f58a46405db44d673da8864357c50b3a12360129ec026a1eec41482548113bc7a44764ff94c6522cfa88cafba83c1b9c8866a7e348b1c8fe9dedf65e", &(0x7f0000000a80)=""/4096, 0xffff, 0x0, 0x12, 0xa4, &(0x7f0000001a80)="38c9f917c8ba7fb3ccc6800af7b9b1db7de3", &(0x7f0000001ac0)="0b39adc25b5b7b458973ceab0e32d849aecd66465acf4168996d69ef261b4cb962ef3e013dfa931401db145c943ab1e4b828bede20508220b0c968a041af6134a2e6bb3409dcc415a52551b0bc2928c2cd9013ffbdbda0bbb15338f67031b530577a431c7bfb7c26d01ca573e926c2d84de8c957dda8f5b89b21ce1d10e67524b2618a64c608a808479a3c735aaab2cc45b1ff92ad6bd064024225de5231f18041999336", 0x4, 0x0, 0x6}, 0x50)
sendmsg$NFT_BATCH(r4, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004084}, 0x10)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000002040)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002000)={&(0x7f0000001dc0)={0x20c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x10}}, @NFQA_EXP={0xdc, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb5a}, @CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xe4}}, @NFQA_EXP={0x2c, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFQA_PAYLOAD={0x88, 0xa, "00833212568ae8de526c73d3ff8068e9ed20815b05989959e5c0251fc362c9ea3fc2a5c047309e15f722f8034ee96bdbbbf6338085be99ccbb3aa942758f962d097b7c0933e2c8a5a50ca2377781ee187eee42f266a80f60d1d8d19dc56a8507de5bd5818b3124120edc08896ce82b4cceae0ca5153c3e43717275480451ca809009b03e"}, @NFQA_EXP={0x3c, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8001}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)
ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000002080))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff)
ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000002240)={<r8=>r2, &(0x7f0000002140)='+,}\x00', 0x480, &(0x7f0000002180)={@align=0xffffffffffffffff, {0x2, 0x7c9, 0x5}}, 0x9ad7, &(0x7f00000021c0), &(0x7f0000002200)=0x9537})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002280)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000023c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0x84, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002440)={0x144, 0x0, 0x1, 0x100, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0x4132, 0x2, 0xfffffff8, 0x77, 0xb1, 0x10000, 0x7, 0xfffffffb, 0x0, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x3, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x40}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1d6f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x37}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x36}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2ea}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xce}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3774}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4010}, 0xe078096b0558b1d6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000002640), r8)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000002680)=[@in6={0xa, 0x4e21, 0x0, @local, 0x1}, @in6={0xa, 0x4e21, 0x5, @private0, 0x10000}, @in6={0xa, 0x4e22, 0xffffff67, @mcast2, 0xa8}, @in6={0xa, 0x4e24, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x41}, 0x3}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x2, @empty, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e23, 0xfffffffd, @loopback, 0x800}], 0xc8)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000002780)=0x400, 0x4)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002980)={&(0x7f0000002880)={0xcc, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000}, 0x800)

2.116631844s ago: executing program 4 (id=4679):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x2}, 0x0)

1.973975772s ago: executing program 4 (id=4680):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c0007000000000000000000080009"], 0x54}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r10)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c)
listen(r11, 0x6f6)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r14, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})

1.798130124s ago: executing program 3 (id=4681):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.793375145s ago: executing program 0 (id=4682):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=<r2=>r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4})
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r8 = socket$kcm(0x29, 0x5, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000b4f0eb6cf772000000000000000600000c850000006100000085000000070000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendfile(r8, r9, 0x0, 0xffffffff000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r2, @ANYRES16=r11, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e68"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0)

1.771347025s ago: executing program 1 (id=4683):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000140)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x1}, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x0, 0x8, 0xff, 0x800, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x66, 0x0, 0xa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ra={0x94, 0x4}, @end, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x20, [@broadcast]}, @timestamp={0x44, 0xc, 0x10, 0x0, 0x7, [0x8, 0x0]}, @lsrr={0x83, 0xb, 0x89, [@remote, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x0, [{@local, 0x8}, {@multicast2, 0xc}]}]}}}}})

1.584549995s ago: executing program 3 (id=4684):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe11}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.230361258s ago: executing program 1 (id=4685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000b4f0eb6cf772000000000000000600000c850000006100000085000000070000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendfile(r7, r8, 0x0, 0xffffffff000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)

1.228007925s ago: executing program 2 (id=4686):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x71d, 0x3509, 0x3, 0x10000, 0x9, 0x1002, 0x9, 0x3, 0x3, 0x802e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xfffc, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x2, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0xa, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x4, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x82, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x1, 0xff, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x8, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xa, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x4, 0xff, 0x4, 0x7, 0x7, 0x7, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x0, 0x7, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x10000, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x4c000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2}}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bind(r3, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000300))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

1.136275434s ago: executing program 0 (id=4687):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x20004801)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)

1.116090358s ago: executing program 2 (id=4688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket(0x1, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x4000001)
r6 = socket(0x28, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0xb)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e7bdd191486e8e3bf0795161b2"}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000009c8a1f470d2c4007285c7803a56741e990d5f869ffa61696a92affff4678f07baac75a2cc19885e7468a389524fb59752c0998ac3f0f62b088b9e95401c5d83f2d1e94e780f4db1c89959b4ce24ada5026bdb995041ff09cbd6b484685f4e1ee6e3f37b0f20a99db6b6"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xd0ffffff}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
accept4(r0, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000003c0)=0x80, 0x80800)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, 0x0, 0x4080)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x9}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x55}, 0x28)
syz_emit_ethernet(0x76, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

962.322394ms ago: executing program 4 (id=4689):
r0 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffd1}}], 0x18}}], 0x1, 0x40)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

826.075971ms ago: executing program 0 (id=4690):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5f", 0x83f}], 0x2}, 0x0)

823.825841ms ago: executing program 2 (id=4691):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010"], 0x68}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

821.279095ms ago: executing program 4 (id=4692):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000022020000c00602000004e8b66058db1b79"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)}, 0x840)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1405, 0x702, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x30}}, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x3)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20)
r10 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0)
connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10)

723.276231ms ago: executing program 0 (id=4693):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r6], 0x1c}}, 0x4008054)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
connect$can_bcm(r2, &(0x7f0000000180), 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xd, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x154}}, 0x240448c8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x22052, r2, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r11, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff8}, 0x50)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000240)="070000000000eaffa09e08020141fd001900000000004b8c4226f4fb01fda1dbe21ee4d66ae344fc8162180000000000f67e32c5b66de25f3240af73204900000000000000", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

576.293982ms ago: executing program 3 (id=4694):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

485.658064ms ago: executing program 2 (id=4695):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000140)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x1}, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x0, 0x8, 0xff, 0x800, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x66, 0x0, 0xa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ra={0x94, 0x4}, @end, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x20, [@broadcast]}, @timestamp={0x44, 0xc, 0x10, 0x0, 0x7, [0x8, 0x0]}, @lsrr={0x83, 0xb, 0x89, [@remote, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x0, [{@local, 0x8}, {@multicast2, 0xc}]}]}}}}})

397.798896ms ago: executing program 3 (id=4696):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000b4f0eb6cf772000000000000000600000c850000006100000085000000070000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendfile(r7, r8, 0x0, 0xffffffff000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)

228.771877ms ago: executing program 1 (id=4697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=<r2=>r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4})
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r8 = socket$kcm(0x29, 0x5, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000b4f0eb6cf772000000000000000600000c850000006100000085000000070000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendfile(r8, r9, 0x0, 0xffffffff000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r2, @ANYRES16=r11, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db0"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0)

174.085874ms ago: executing program 2 (id=4698):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x71d, 0x3509, 0x3, 0x10000, 0x9, 0x1002, 0x9, 0x3, 0x3, 0x802e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xfffc, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x2, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0xa, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x4, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x82, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x1, 0xff, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x8, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xa, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x4, 0xff, 0x4, 0x7, 0x7, 0x7, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x0, 0x7, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x10000, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x4c000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2}}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bind(r3, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000300))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

0s ago: executing program 2 (id=4699):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800)

kernel console output (not intermixed with test programs):

8
[  554.418270][T17161] RSP: 002b:00007f2a8abbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  554.418283][T17161] RAX: ffffffffffffffda RBX: 00007f2a8a015fa0 RCX: 00007f2a89d9ce59
[  554.418297][T17161] RDX: 000000000000007f RSI: 0000200000000d80 RDI: 000000000000000a
[  554.418309][T17161] RBP: 00007f2a8abbe090 R08: 0000000000000000 R09: 0000000000000000
[  554.418321][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.418331][T17161] R13: 00007f2a8a016038 R14: 00007f2a8a015fa0 R15: 00007ffd39b43be8
[  554.418361][T17161]  </TASK>
[  556.901211][T17136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  557.310210][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3398'.
[  557.587398][T17193] netlink: 'syz.4.3402': attribute type 22 has an invalid length.
[  557.615978][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'.
[  557.638410][T17193] netlink: 'syz.4.3402': attribute type 22 has an invalid length.
[  557.650295][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'.
[  557.695000][T17195] IPVS: persistence engine module ip_vs_pe_À not found
[  557.718884][T17200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3405'.
[  558.535016][T17223] syzkaller0: entered promiscuous mode
[  558.540678][T17223] syzkaller0: entered allmulticast mode
[  560.667161][T17200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  560.906544][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'.
[  560.953698][T17231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3414'.
[  561.033585][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'.
[  561.169264][T17231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3414'.
[  561.175367][T17242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  561.195429][T17242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  561.207269][T17242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  561.218034][T17242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  561.229377][T17242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  561.305384][T17243] sctp: [Deprecated]: syz.2.3413 (pid 17243) Use of int in max_burst socket option deprecated.
[  561.305384][T17243] Use struct sctp_assoc_value instead
[  561.525986][T17252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3419'.
[  561.905705][ T6411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.956500][T17239] lo speed is unknown, defaulting to 1000
[  562.016255][ T6411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.131479][ T6411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.166572][T17239] xfrm0 speed is unknown, defaulting to 1000
[  562.227256][ T6411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.849361][T17289] IPVS: persistence engine module ip_vs_pe_À not found
[  562.959819][ T6411] bridge_slave_1: left allmulticast mode
[  562.982196][ T6411] bridge_slave_1: left promiscuous mode
[  562.994606][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.036856][ T6411] bridge_slave_0: left allmulticast mode
[  563.050533][ T6411] bridge_slave_0: left promiscuous mode
[  563.064388][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.082382][T17304] sctp: [Deprecated]: syz.2.3431 (pid 17304) Use of int in max_burst socket option deprecated.
[  563.082382][T17304] Use struct sctp_assoc_value instead
[  563.164198][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'.
[  563.182776][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3433'.
[  563.201187][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'.
[  563.218960][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3433'.
[  563.298985][T17242] Bluetooth: hci5: command tx timeout
[  563.654058][ T6411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.685707][ T6411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.710895][ T6411] bond0 (unregistering): Released all slaves
[  563.791207][T17239] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.819469][T17239] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.851479][T17239] bridge_slave_0: entered allmulticast mode
[  563.878793][T17239] bridge_slave_0: entered promiscuous mode
[  563.931318][T17239] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.945893][T17239] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.971972][T17239] bridge_slave_1: entered allmulticast mode
[  564.005290][T17239] bridge_slave_1: entered promiscuous mode
[  564.176315][T17239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.245053][T17239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.508117][T17344] sctp: [Deprecated]: syz.2.3444 (pid 17344) Use of int in max_burst socket option deprecated.
[  564.508117][T17344] Use struct sctp_assoc_value instead
[  564.533287][T17239] team0: Port device team_slave_0 added
[  564.589637][T17239] team0: Port device team_slave_1 added
[  564.904051][T17239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.929357][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.031535][T17239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.093867][ T6411] hsr_slave_0: left promiscuous mode
[  565.113267][ T6411] hsr_slave_1: left promiscuous mode
[  565.130003][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.145160][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.159352][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.173482][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.219793][ T6411] veth1_macvtap: left promiscuous mode
[  565.230161][ T6411] veth0_macvtap: left promiscuous mode
[  565.243978][ T6411] veth1_vlan: left promiscuous mode
[  565.255254][ T6411] veth0_vlan: left promiscuous mode
[  565.371967][T17242] Bluetooth: hci5: command tx timeout
[  565.691702][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  565.699096][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  565.809073][ T6411] team0 (unregistering): Port device team_slave_1 removed
[  565.837513][ T6411] team0 (unregistering): Port device team_slave_0 removed
[  566.161373][T17239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.181783][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.261985][T17239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.309144][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  566.334834][    C1] bridge0: port 3(team0) entered learning state
[  566.490761][T17239] hsr_slave_0: entered promiscuous mode
[  566.515460][T17239] hsr_slave_1: entered promiscuous mode
[  567.146832][T17405] FAULT_INJECTION: forcing a failure.
[  567.146832][T17405] name failslab, interval 1, probability 0, space 0, times 0
[  567.195011][T17405] CPU: 1 UID: 0 PID: 17405 Comm: syz.3.3463 Not tainted syzkaller #0 PREEMPT(full) 
[  567.195040][T17405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  567.195052][T17405] Call Trace:
[  567.195060][T17405]  <TASK>
[  567.195069][T17405]  dump_stack_lvl+0xe8/0x150
[  567.195099][T17405]  should_fail_ex+0x40c/0x560
[  567.195131][T17405]  should_failslab+0xa8/0x100
[  567.195156][T17405]  __kmalloc_cache_noprof+0xa8/0x660
[  567.195187][T17405]  ? ip_set_pernet+0x23/0x240
[  567.195332][T17405]  ? ip_set_create+0x38f/0x1a40
[  567.195349][T17405]  ? ip_set_create+0x38f/0x1a40
[  567.195375][T17405]  ip_set_create+0x38f/0x1a40
[  567.195399][T17405]  ? rcu_is_watching+0x15/0xb0
[  567.195439][T17405]  ? __pfx_ip_set_create+0x10/0x10
[  567.195496][T17405]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  567.195516][T17405]  ? unwind_get_return_address+0x4d/0x90
[  567.195543][T17405]  ? nfnetlink_rcv_msg+0x228/0x12b0
[  567.195581][T17405]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  567.195650][T17405]  netlink_rcv_skb+0x226/0x4a0
[  567.195674][T17405]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  567.195696][T17405]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  567.195729][T17405]  ? bpf_lsm_capable+0x9/0x20
[  567.195748][T17405]  ? security_capable+0x7e/0x2c0
[  567.195780][T17405]  nfnetlink_rcv+0x2b9/0x28c0
[  567.195804][T17405]  ? __dev_queue_xmit+0x29b/0x37f0
[  567.195882][T17405]  ? __local_bh_enable_ip+0xd0/0x130
[  567.195910][T17405]  ? lockdep_hardirqs_on+0x7a/0x110
[  567.195940][T17405]  ? __dev_queue_xmit+0x29b/0x37f0
[  567.195961][T17405]  ? __local_bh_enable_ip+0xd0/0x130
[  567.195985][T17405]  ? __dev_queue_xmit+0x29b/0x37f0
[  567.196005][T17405]  ? __dev_queue_xmit+0x1ed7/0x37f0
[  567.196026][T17405]  ? do_syscall_64+0x174/0x580
[  567.196043][T17405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.196074][T17405]  ? __dev_queue_xmit+0x29b/0x37f0
[  567.196097][T17405]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  567.196123][T17405]  ? __pfx___dev_queue_xmit+0x10/0x10
[  567.196151][T17405]  ? ref_tracker_free+0x689/0x830
[  567.196181][T17405]  ? __pfx_ref_tracker_free+0x10/0x10
[  567.196217][T17405]  ? __skb_clone+0x449/0x6c0
[  567.196246][T17405]  ? skb_clone+0x246/0x3a0
[  567.196272][T17405]  ? __netlink_deliver_tap+0x811/0x860
[  567.196293][T17405]  ? netlink_deliver_tap+0x2e/0x1b0
[  567.196322][T17405]  ? netlink_deliver_tap+0x2e/0x1b0
[  567.196343][T17405]  ? netlink_deliver_tap+0x2e/0x1b0
[  567.196371][T17405]  netlink_unicast+0x7bb/0x940
[  567.196403][T17405]  netlink_sendmsg+0x813/0xb40
[  567.196444][T17405]  ? __pfx_netlink_sendmsg+0x10/0x10
[  567.196471][T17405]  ? aa_sock_msg_perm+0xf1/0x1b0
[  567.196501][T17405]  ? __pfx_netlink_sendmsg+0x10/0x10
[  567.196522][T17405]  sock_sendmsg_nosec+0x13a/0x180
[  567.196553][T17405]  ____sys_sendmsg+0x54e/0x850
[  567.196581][T17405]  ? __pfx_____sys_sendmsg+0x10/0x10
[  567.196612][T17405]  ? import_iovec+0x73/0xa0
[  567.196637][T17405]  ___sys_sendmsg+0x2a5/0x360
[  567.196657][T17405]  ? __lock_acquire+0x683/0x2cf0
[  567.196683][T17405]  ? __pfx____sys_sendmsg+0x10/0x10
[  567.196744][T17405]  ? __fget_files+0x2a/0x420
[  567.196763][T17405]  ? __fget_files+0x3a2/0x420
[  567.196793][T17405]  __x64_sys_sendmsg+0x1b1/0x290
[  567.196818][T17405]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  567.196860][T17405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.196882][T17405]  do_syscall_64+0x174/0x580
[  567.196899][T17405]  ? trace_irq_disable+0x3b/0x140
[  567.196918][T17405]  ? clear_bhb_loop+0x40/0x90
[  567.196938][T17405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.196953][T17405] RIP: 0033:0x7fe6e059ce59
[  567.196969][T17405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.196982][T17405] RSP: 002b:00007fe6e14c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  567.197002][T17405] RAX: ffffffffffffffda RBX: 00007fe6e0815fa0 RCX: 00007fe6e059ce59
[  567.197017][T17405] RDX: 0000000000008800 RSI: 0000200000000040 RDI: 0000000000000003
[  567.197030][T17405] RBP: 00007fe6e14c1090 R08: 0000000000000000 R09: 0000000000000000
[  567.197043][T17405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.197055][T17405] R13: 00007fe6e0816038 R14: 00007fe6e0815fa0 R15: 00007fff5cf1aa28
[  567.197088][T17405]  </TASK>
[  567.613422][T17242] Bluetooth: hci5: command tx timeout
[  568.013467][T17239] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  568.031496][T17239] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  568.039618][T17239] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  568.059036][T17239] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  568.075565][T17239] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  568.094939][T17239] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  568.103158][T17239] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  568.120695][T17239] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  568.313214][T17239] 8021q: adding VLAN 0 to HW filter on device bond0
[  568.334762][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'.
[  568.393920][T17239] 8021q: adding VLAN 0 to HW filter on device team0
[  568.481125][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.488352][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  568.543827][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'.
[  568.560945][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.562006][T17445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3469'.
[  568.568203][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.598524][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'.
[  568.636384][T17445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3469'.
[  568.949787][T17461] sctp: [Deprecated]: syz.0.3479 (pid 17461) Use of int in max_burst socket option deprecated.
[  568.949787][T17461] Use struct sctp_assoc_value instead
[  569.171385][T17475] netlink: 'syz.2.3483': attribute type 1 has an invalid length.
[  569.365183][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'.
[  569.411847][T17487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3487'.
[  569.422498][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'.
[  569.468615][T17487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3487'.
[  569.564243][T17505] IPVS: set_ctl: invalid protocol: 0 172.20.20.33:20003
[  569.680260][T17506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3489'.
[  569.691965][T17242] Bluetooth: hci5: command tx timeout
[  569.922987][T17239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  570.007979][T17239] veth0_vlan: entered promiscuous mode
[  570.026319][T17239] veth1_vlan: entered promiscuous mode
[  570.067087][T17532] netlink: 'syz.0.3494': attribute type 1 has an invalid length.
[  570.068634][T17239] veth0_macvtap: entered promiscuous mode
[  570.104790][T17239] veth1_macvtap: entered promiscuous mode
[  570.150699][T17239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.171279][T17239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.211742][ T6413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.227995][ T6413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.249318][ T6413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.286675][ T6413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.634057][T17553] syzkaller0: entered promiscuous mode
[  570.639727][T17553] syzkaller0: entered allmulticast mode
[  572.489306][T17498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.644352][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.674299][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.722398][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.748480][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.749122][T17564] IPVS: persistence engine module ip_vs_pe_À not found
[  572.966186][T17576] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  573.279348][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  573.301168][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  573.314086][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  573.325358][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  573.333336][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  573.606905][T17601] bridge21: entered promiscuous mode
[  573.626851][T17601] bridge21: entered allmulticast mode
[  573.680664][T17601] team0: Port device bridge21 added
[  573.904884][T17615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3509'.
[  574.363395][T17589] lo speed is unknown, defaulting to 1000
[  574.605887][T17589] xfrm0 speed is unknown, defaulting to 1000
[  574.813790][T17633] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  574.960360][T17643] bridge22: entered promiscuous mode
[  574.966077][T17643] bridge22: entered allmulticast mode
[  574.976348][T17643] team0: Port device bridge22 added
[  575.129127][T17589] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.137314][T17589] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.144730][T17589] bridge_slave_0: entered allmulticast mode
[  575.152010][T17589] bridge_slave_0: entered promiscuous mode
[  575.163870][T17589] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.171114][T17589] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.178658][T17589] bridge_slave_1: entered allmulticast mode
[  575.186455][T17589] bridge_slave_1: entered promiscuous mode
[  575.373360][T17242] Bluetooth: hci0: command tx timeout
[  576.748543][T17608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  576.959483][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'.
[  576.978388][T17656] netlink: 'syz.1.3521': attribute type 1 has an invalid length.
[  577.467820][T17242] Bluetooth: hci0: command tx timeout
[  578.096100][T17589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.108770][T17589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.123670][T17652] bridge23: entered promiscuous mode
[  578.129087][T17652] bridge23: entered allmulticast mode
[  578.138769][T17652] team0: Port device bridge23 added
[  578.243499][T17667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3523'.
[  578.280700][T17589] team0: Port device team_slave_0 added
[  578.291490][T17589] team0: Port device team_slave_1 added
[  578.363599][T17589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.384815][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.418180][T17589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.457897][T17589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.478154][T17674] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  578.487314][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.521948][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.529241][    C1] bridge0: topology change detected, propagating
[  578.576024][T17589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.803506][T17589] hsr_slave_0: entered promiscuous mode
[  578.813270][T17589] hsr_slave_1: entered promiscuous mode
[  578.838469][T17589] debugfs: 'hsr0' already exists in 'hsr'
[  578.851167][T17589] Cannot create hsr debugfs directory
[  578.889704][T17697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3530'.
[  579.541838][T17242] Bluetooth: hci0: command tx timeout
[  581.611885][T17242] Bluetooth: hci0: command tx timeout
[  581.718385][T17589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.783415][T17589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.793353][T17685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  581.837568][T17705] bridge24: entered promiscuous mode
[  581.844139][T17705] bridge24: entered allmulticast mode
[  581.855195][T17705] team0: Port device bridge24 added
[  581.921470][T17589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.070980][T17589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.220739][T17718] batadv_slave_0: entered promiscuous mode
[  582.266778][T17717] batadv_slave_0: left promiscuous mode
[  585.858605][T17727] batman_adv: batadv0: Adding interface: vlan2
[  585.864847][T17727] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  586.048596][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.116365][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.136816][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.190841][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.209062][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.225329][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3544'.
[  586.230072][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.243590][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.396715][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.406290][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'.
[  586.917770][T17750] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.925440][T17750] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.977543][T17750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.989216][T17750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.115302][T17765] bridge22: entered promiscuous mode
[  587.129989][T17765] bridge22: entered allmulticast mode
[  587.147433][T17765] team0: Port device bridge22 added
[  587.155298][ T6411] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.164665][ T6411] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.173846][ T6411] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.185211][ T6411] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.104631][T17752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.165490][T17589] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  589.217906][T17589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  589.228234][T17589] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  589.259054][T17589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  589.282667][T17589] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  589.636517][T17798] atomic_op ffff8880787f1998 conn xmit_atomic 0000000000000000
[  589.873463][T17589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  589.900932][T17779] vlan3: entered promiscuous mode
[  589.912174][T17779] veth1_macvtap: entered promiscuous mode
[  590.016275][T17790] syzkaller0: entered promiscuous mode
[  590.026435][T17790] syzkaller0: entered allmulticast mode
[  590.035614][T17589] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  590.071505][T17589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  593.121147][T17816] bridge25: entered promiscuous mode
[  593.126789][T17816] bridge25: entered allmulticast mode
[  593.135586][T17816] team0: Port device bridge25 added
[  593.140989][T17821] __nla_validate_parse: 133 callbacks suppressed
[  593.141008][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'.
[  593.171977][T17824] batadv_slave_0: entered promiscuous mode
[  593.179389][T17824] batadv_slave_0: left promiscuous mode
[  593.394822][T17589] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.458048][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3562'.
[  593.472584][T17589] 8021q: adding VLAN 0 to HW filter on device team0
[  593.496207][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.503444][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.528606][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.535911][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  594.327228][T17589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.453180][T17589] veth0_vlan: entered promiscuous mode
[  594.510539][T17589] veth1_vlan: entered promiscuous mode
[  594.570930][T17589] veth0_macvtap: entered promiscuous mode
[  594.582575][T17589] veth1_macvtap: entered promiscuous mode
[  594.604465][T17589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.619812][T17589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.638223][  T111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  594.656205][  T111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  594.667438][  T111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  594.680515][  T111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.807049][T17874] xt_CT: No such helper "syz1"
[  595.424442][T17885] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  595.771741][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.779017][    C1] bridge0: topology change detected, propagating
[  595.785636][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.792882][    C0] bridge0: topology change detected, propagating
[  596.312448][T17837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  596.411736][    C1] bridge0: port 3(team0) entered forwarding state
[  596.418227][    C1] bridge0: topology change detected, propagating
[  596.475754][  T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.503617][  T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.539170][T17893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3575'.
[  596.592854][  T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.610301][  T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.657907][T17900] atomic_op ffff88806a5df198 conn xmit_atomic 0000000000000000
[  596.852538][T17903] xt_CT: No such helper "syz1"
[  596.923880][T17914] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  597.723235][T17932] bridge1: entered promiscuous mode
[  597.741687][T17932] bridge1: entered allmulticast mode
[  597.752575][T17932] team0: Port device bridge1 added
[  597.770675][T17936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3584'.
[  598.029507][T17945] netlink: 'syz.1.3589': attribute type 1 has an invalid length.
[  600.669986][T17929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  600.898912][T17955] xt_CT: No such helper "syz1"
[  601.209357][T17972] bridge21: entered promiscuous mode
[  601.227283][T17972] bridge21: entered allmulticast mode
[  601.255794][T17972] team0: Port device bridge21 added
[  601.536907][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'.
[  601.631925][T17994] IPVS: persistence engine module ip_vs_pe_À not found
[  601.853511][T18007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3601'.
[  602.201386][T18023] bridge22: entered promiscuous mode
[  602.211881][T18023] bridge22: entered allmulticast mode
[  602.225133][T18023] team0: Port device bridge22 added
[  602.285163][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'.
[  602.294395][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'.
[  604.730999][T17999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  604.891397][T18036] FAULT_INJECTION: forcing a failure.
[  604.891397][T18036] name failslab, interval 1, probability 0, space 0, times 0
[  604.928800][T18035] syzkaller0: entered promiscuous mode
[  604.934586][T18035] syzkaller0: entered allmulticast mode
[  604.942318][T18036] CPU: 0 UID: 0 PID: 18036 Comm: syz.0.3614 Not tainted syzkaller #0 PREEMPT(full) 
[  604.942344][T18036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  604.942356][T18036] Call Trace:
[  604.942364][T18036]  <TASK>
[  604.942372][T18036]  dump_stack_lvl+0xe8/0x150
[  604.942404][T18036]  should_fail_ex+0x40c/0x560
[  604.942436][T18036]  should_failslab+0xa8/0x100
[  604.942462][T18036]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  604.942500][T18036]  ? ima_inode_get+0xea/0x4d0
[  604.942596][T18036]  ? ima_inode_get+0xea/0x4d0
[  604.942627][T18036]  ima_inode_get+0xea/0x4d0
[  604.942653][T18036]  process_measurement+0x45c/0x1c10
[  604.942680][T18036]  ? __pfx_stack_trace_save+0x10/0x10
[  604.942721][T18036]  ? __pfx_process_measurement+0x10/0x10
[  604.942752][T18036]  ? aa_file_perm+0x18b/0x15f0
[  604.942826][T18036]  ima_file_mmap+0x1b0/0x200
[  604.942855][T18036]  ? __pfx_ima_file_mmap+0x10/0x10
[  604.942888][T18036]  ? apparmor_mmap_file+0x2da/0x3e0
[  604.942953][T18036]  security_mmap_file+0x773/0xa20
[  604.942975][T18036]  vm_mmap_pgoff+0x134/0x4e0
[  604.942999][T18036]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  604.943027][T18036]  ? hugetlb_file_setup+0x42c/0x630
[  604.943070][T18036]  ksys_mmap_pgoff+0x57d/0x760
[  604.943098][T18036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.943119][T18036]  do_syscall_64+0x174/0x580
[  604.943139][T18036]  ? trace_irq_disable+0x3b/0x140
[  604.943157][T18036]  ? clear_bhb_loop+0x40/0x90
[  604.943182][T18036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.943201][T18036] RIP: 0033:0x7f601bb9ce59
[  604.943220][T18036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.943237][T18036] RSP: 002b:00007f601c9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  604.943257][T18036] RAX: ffffffffffffffda RBX: 00007f601be15fa0 RCX: 00007f601bb9ce59
[  604.943271][T18036] RDX: 000000000000000d RSI: 0000000000ff5000 RDI: 0000200000000000
[  604.943284][T18036] RBP: 00007f601c9ae090 R08: ffffffffffffffff R09: 0000000000000000
[  604.943297][T18036] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001
[  604.943309][T18036] R13: 00007f601be16038 R14: 00007f601be15fa0 R15: 00007ffec64b67e8
[  604.943340][T18036]  </TASK>
[  605.514753][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3619'.
[  605.609611][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3620'.
[  605.627288][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3620'.
[  605.795832][T18063] bridge2: entered promiscuous mode
[  605.801215][T18063] bridge2: entered allmulticast mode
[  605.809798][T18063] team0: Port device bridge2 added
[  606.188589][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'.
[  606.824590][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'.
[  606.865626][T18104] bridge3: entered promiscuous mode
[  606.870872][T18104] bridge3: entered allmulticast mode
[  606.878501][T18104] team0: Port device bridge3 added
[  606.894294][T18105] xt_hashlimit: size too large, truncated to 1048576
[  606.904031][T18105] xt_hashlimit: invalid interval
[  608.787330][T18065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  608.796882][T18073] netlink: 'syz.3.3625': attribute type 3 has an invalid length.
[  608.818651][T18073] netlink: 'syz.3.3625': attribute type 1 has an invalid length.
[  608.843020][T18073] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3625'.
[  608.997341][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'.
[  609.876639][T18148] bridge24: entered promiscuous mode
[  609.884862][T18148] bridge24: entered allmulticast mode
[  609.897649][T18148] team0: Port device bridge24 added
[  609.944700][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3648'.
[  612.679931][T18139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  613.396360][T18217] xt_CT: No such helper "syz1"
[  613.866948][T18226] bridge4: entered promiscuous mode
[  613.877113][T18226] bridge4: entered allmulticast mode
[  613.902189][T18226] team0: Port device bridge4 added
[  613.967670][T18231] pim6reg: entered allmulticast mode
[  613.978153][T18231] pim6reg: left allmulticast mode
[  614.616215][T18247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3685'.
[  614.726020][T18252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3686'.
[  616.716589][T18283] netlink: 'syz.3.3693': attribute type 1 has an invalid length.
[  617.575883][T18247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  617.818113][T18289] atomic_op ffff888028ff0998 conn xmit_atomic 0000000000000000
[  617.905310][T18296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3696'.
[  619.423911][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'.
[  619.611064][T18318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3703'.
[  619.811968][T18324] atomic_op ffff888033e3b198 conn xmit_atomic 0000000000000000
[  620.403814][T18343] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3711'.
[  620.997482][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'.
[  621.249739][T18351] tipc: Started in network mode
[  621.264086][T18351] tipc: Node identity 26d34cbbbfdb, cluster identity 4711
[  621.280994][T18351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.294748][T18351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3714'.
[  621.306321][T18351] syzkaller0: entered promiscuous mode
[  621.321957][T18351] syzkaller0: entered allmulticast mode
[  621.363203][T18355] atomic_op ffff888035be1998 conn xmit_atomic 0000000000000000
[  621.368216][T18351] tipc: Resetting bearer <eth:syzkaller0>
[  621.397649][T18346] tipc: Resetting bearer <eth:syzkaller0>
[  621.449688][T18346] tipc: Disabling bearer <eth:syzkaller0>
[  621.655282][T18362] FAULT_INJECTION: forcing a failure.
[  621.655282][T18362] name failslab, interval 1, probability 0, space 0, times 0
[  621.669138][T18362] CPU: 0 UID: 0 PID: 18362 Comm: syz.1.3720 Not tainted syzkaller #0 PREEMPT(full) 
[  621.669164][T18362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  621.669175][T18362] Call Trace:
[  621.669183][T18362]  <TASK>
[  621.669190][T18362]  dump_stack_lvl+0xe8/0x150
[  621.669218][T18362]  should_fail_ex+0x40c/0x560
[  621.669248][T18362]  should_failslab+0xa8/0x100
[  621.669272][T18362]  __kmalloc_noprof+0xfe/0x720
[  621.669300][T18362]  ? bpf_test_init+0x9f/0x150
[  621.669319][T18362]  ? bpf_test_init+0x9f/0x150
[  621.669345][T18362]  bpf_test_init+0x9f/0x150
[  621.669367][T18362]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  621.669405][T18362]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  621.669436][T18362]  ? __fget_files+0x2a/0x420
[  621.669461][T18362]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  621.669483][T18362]  bpf_prog_test_run+0x2c5/0x340
[  621.669508][T18362]  __sys_bpf+0xa22/0xd90
[  621.669532][T18362]  ? __pfx___sys_bpf+0x10/0x10
[  621.669560][T18362]  ? __fget_files+0x2a/0x420
[  621.669595][T18362]  ? ksys_write+0x242/0x270
[  621.669621][T18362]  ? __pfx_ksys_write+0x10/0x10
[  621.669648][T18362]  __x64_sys_bpf+0xba/0xd0
[  621.669674][T18362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.669694][T18362]  do_syscall_64+0x174/0x580
[  621.669712][T18362]  ? trace_irq_disable+0x3b/0x140
[  621.669730][T18362]  ? clear_bhb_loop+0x40/0x90
[  621.669753][T18362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.669772][T18362] RIP: 0033:0x7f7918f9ce59
[  621.669790][T18362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.669806][T18362] RSP: 002b:00007f7919e73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  621.669825][T18362] RAX: ffffffffffffffda RBX: 00007f7919215fa0 RCX: 00007f7918f9ce59
[  621.669839][T18362] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  621.669851][T18362] RBP: 00007f7919e73090 R08: 0000000000000000 R09: 0000000000000000
[  621.669873][T18362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.669884][T18362] R13: 00007f7919216038 R14: 00007f7919215fa0 R15: 00007ffd64830108
[  621.669915][T18362]  </TASK>
[  621.966664][T18364] tipc: Enabled bearer <eth:vlan0>, priority 30
[  622.590974][T18382] atomic_op ffff888031b60998 conn xmit_atomic 0000000000000000
[  623.091864][T13523] tipc: Node number set to 1593835523
[  623.923374][T18412] atomic_op ffff8880544d2998 conn xmit_atomic 0000000000000000
[  624.442085][T18418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3743'.
[  625.163471][T18445] netlink: 'syz.3.3750': attribute type 1 has an invalid length.
[  627.422065][T18418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  628.324118][T18475] IPv6: addrconf: prefix option has invalid lifetime
[  633.143205][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  633.161405][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  633.171065][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  633.180986][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  633.190630][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  633.477457][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.510111][T18531] lo speed is unknown, defaulting to 1000
[  633.583513][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.644693][T18531] xfrm0 speed is unknown, defaulting to 1000
[  633.693951][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.797041][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.945852][T18531] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.954064][T18531] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.961360][T18531] bridge_slave_0: entered allmulticast mode
[  633.971526][T18531] bridge_slave_0: entered promiscuous mode
[  633.980132][T18531] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.987406][T18531] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.995163][T18531] bridge_slave_1: entered allmulticast mode
[  634.003100][T18531] bridge_slave_1: entered promiscuous mode
[  634.058936][   T13] bridge_slave_1: left allmulticast mode
[  634.064908][   T13] bridge_slave_1: left promiscuous mode
[  634.072789][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.085455][   T13] bridge_slave_0: left allmulticast mode
[  634.091137][   T13] bridge_slave_0: left promiscuous mode
[  634.097318][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.230843][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.243275][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.258151][   T13] bond0 (unregistering): Released all slaves
[  634.270134][T18531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.283520][T18531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.311838][T18531] team0: Port device team_slave_0 added
[  634.320842][T18531] team0: Port device team_slave_1 added
[  634.389709][T18531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.397096][T18531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.423836][T18531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.436827][T18531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.443910][T18531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.470034][T18531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.539270][T18531] hsr_slave_0: entered promiscuous mode
[  634.546017][T18531] hsr_slave_1: entered promiscuous mode
[  634.552618][T18531] debugfs: 'hsr0' already exists in 'hsr'
[  634.558374][T18531] Cannot create hsr debugfs directory
[  634.773008][T18512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.914460][   T13] hsr_slave_0: left promiscuous mode
[  634.936169][   T13] hsr_slave_1: left promiscuous mode
[  634.949707][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.960575][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.970823][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.986745][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.028599][   T13] veth1_macvtap: left promiscuous mode
[  635.034299][   T13] veth0_macvtap: left promiscuous mode
[  635.040112][   T13] veth1_vlan: left promiscuous mode
[  635.046657][   T13] veth0_vlan: left promiscuous mode
[  635.064967][T18562] netlink: 'syz.4.3773': attribute type 1 has an invalid length.
[  635.215860][T17242] Bluetooth: hci1: command tx timeout
[  635.684218][T18578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3777'.
[  635.713933][   T13] team0 (unregistering): Port device team_slave_1 removed
[  635.734689][   T13] team0 (unregistering): Port device team_slave_0 removed
[  637.301718][T17242] Bluetooth: hci1: command tx timeout
[  638.621510][T18578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  638.662105][T18531] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  638.699314][T18531] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  638.729804][T18531] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  638.768913][T18531] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  638.787506][T18531] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  638.819720][T18531] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  638.835120][T18531] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  638.860706][T18531] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  638.998041][T18531] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.033436][T18531] 8021q: adding VLAN 0 to HW filter on device team0
[  639.051020][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.058241][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.084968][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.092235][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.189014][T18655] lo speed is unknown, defaulting to 1000
[  639.371716][T17242] Bluetooth: hci1: command tx timeout
[  639.802749][T18655] xfrm0 speed is unknown, defaulting to 1000
[  639.878013][T18531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.995681][T18531] veth0_vlan: entered promiscuous mode
[  640.039422][T18531] veth1_vlan: entered promiscuous mode
[  640.108952][T18531] veth0_macvtap: entered promiscuous mode
[  640.130323][T18531] veth1_macvtap: entered promiscuous mode
[  640.204156][T18531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.337362][T18531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.388803][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.422212][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.447045][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.485395][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.451782][T17242] Bluetooth: hci1: command tx timeout
[  641.785784][T18630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  641.888339][ T6411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.937239][ T6411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.987242][T18693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3795'.
[  642.053271][ T6411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.054616][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'.
[  642.073157][ T6411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.110635][T18699] netlink: 'syz.1.3797': attribute type 20 has an invalid length.
[  642.119092][T18699] netlink: 'syz.1.3797': attribute type 21 has an invalid length.
[  642.365738][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  642.383231][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  642.404149][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  642.420735][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  642.429663][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  643.031923][T18711] lo speed is unknown, defaulting to 1000
[  643.386446][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.417322][T18711] xfrm0 speed is unknown, defaulting to 1000
[  643.489429][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.577091][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.655615][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.800729][T18711] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.808559][T18711] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.816129][T18711] bridge_slave_0: entered allmulticast mode
[  643.823955][T18711] bridge_slave_0: entered promiscuous mode
[  643.864042][T18711] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.874868][T18711] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.883342][T18711] bridge_slave_1: entered allmulticast mode
[  643.890560][T18711] bridge_slave_1: entered promiscuous mode
[  643.933652][T18711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.949752][   T13] bridge_slave_1: left promiscuous mode
[  643.955836][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.966486][   T13] bridge_slave_0: left allmulticast mode
[  643.972578][   T13] bridge_slave_0: left promiscuous mode
[  643.978382][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.046544][   T13] dvmrp0: left allmulticast mode
[  644.210942][   T48] smbdirect: ib_dev[syz0] removed
[  644.292318][   T13] batman_adv: batadv0: Removing interface: vlan2
[  644.311309][   T13] team0: Port device bridge1 removed
[  644.320774][   T13] team0: Port device bridge2 removed
[  644.330348][   T13] team0: Port device bridge3 removed
[  644.341931][   T13] team0: Port device bridge4 removed
[  644.355336][   T13] team0: Port device bridge5 removed
[  644.365264][   T13] team0: Port device bridge6 removed
[  644.376629][   T13] team0: Port device bridge7 removed
[  644.387724][   T13] team0: Port device bridge8 removed
[  644.397146][   T13] team0: Port device bridge9 removed
[  644.406798][   T13] team0: Port device bridge10 removed
[  644.417434][   T13] team0: Port device bridge11 removed
[  644.433283][   T13] team0: Port device bridge12 removed
[  644.442848][   T13] team0: Port device bridge13 removed
[  644.452818][   T13] team0: Port device bridge14 removed
[  644.463670][   T13] team0: Port device bridge15 removed
[  644.473433][   T13] bond5 (unregistering): (slave bridge16): Releasing backup interface
[  644.484636][   T13] bridge16 (unregistering): left promiscuous mode
[  644.491078][   T13] bridge16 (unregistering): left allmulticast mode
[  644.498212][ T5643] Bluetooth: hci0: command tx timeout
[  644.509392][   T13] team0: Port device bridge17 removed
[  644.524790][   T13] team0: Port device bridge18 removed
[  644.542165][   T13] team0: Port device bridge21 removed
[  644.554542][   T13] team0: Port device bridge22 removed
[  644.564692][   T13] bond3 (unregistering): (slave bond0): Releasing active interface
[  644.578590][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  644.589182][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  644.599069][   T13] bond0 (unregistering): Released all slaves
[  644.610293][   T13] bond1 (unregistering): (slave lo): Releasing backup interface
[  644.618568][   T13] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  644.632647][   T13] bond1 (unregistering): Released all slaves
[  644.647310][   T13] bond2 (unregistering): Released all slaves
[  644.664031][   T13] bond3 (unregistering): Released all slaves
[  644.679377][   T13] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  644.690285][   T13] bond4 (unregistering): Released all slaves
[  644.708170][   T13] bond5 (unregistering): Released all slaves
[  644.721902][   T13] bond6 (unregistering): Released all slaves
[  644.735900][   T13] bond7 (unregistering): Released all slaves
[  644.757503][   T13] bond8 (unregistering): Released all slaves
[  644.775287][T18711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  644.792525][T13551] xfrm0 speed is unknown, defaulting to 1000
[  644.799980][T13551] infiniband syz0: ib_query_port failed (-19)
[  644.835384][T18711] team0: Port device team_slave_0 added
[  644.854454][T18711] team0: Port device team_slave_1 added
[  644.900188][T18711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  644.912641][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  644.939771][T18711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.952572][T18693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  644.953249][T18711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.992404][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  645.056509][T18711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  645.178182][T18711] hsr_slave_0: entered promiscuous mode
[  645.198708][T18711] hsr_slave_1: entered promiscuous mode
[  645.218063][T18711] debugfs: 'hsr0' already exists in 'hsr'
[  645.236938][T18711] Cannot create hsr debugfs directory
[  645.297173][T18756] bridge1: entered promiscuous mode
[  645.316742][T18756] bridge1: entered allmulticast mode
[  645.357015][T18756] team0: Port device bridge1 added
[  645.488027][T18769] IPVS: persistence engine module ip_vs_pe_À not found
[  645.606968][T18777] netlink: 'syz.2.3812': attribute type 1 has an invalid length.
[  645.713658][T18782] team0: Port device veth0_to_bond added
[  645.807631][T18777] macvlan2: entered promiscuous mode
[  645.832799][T18777] macvlan2: entered allmulticast mode
[  645.841472][T18777] team0: Device macvlan2 is already an upper device of the team interface
[  646.305775][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  646.504278][T18819] bridge26: entered promiscuous mode
[  646.516661][T18819] bridge26: entered allmulticast mode
[  646.527005][T18819] team0: Port device bridge26 added
[  646.571970][ T5643] Bluetooth: hci0: command tx timeout
[  648.651686][ T5643] Bluetooth: hci0: command tx timeout
[  649.070226][T18801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  649.099088][T18711] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  649.116836][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  649.133099][T18711] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  649.172291][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  649.200479][T18711] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  649.267638][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  649.278548][T18711] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  649.310826][T18838] xt_CT: No such helper "syz1"
[  649.323936][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  649.596036][T18711] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.659326][T18711] 8021q: adding VLAN 0 to HW filter on device team0
[  649.703731][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.710928][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.772351][T18862] bridge27: entered promiscuous mode
[  649.791293][T18862] bridge27: entered allmulticast mode
[  649.816515][T18862] team0: Port device bridge27 added
[  649.837668][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.844960][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.518532][T18711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.733666][ T5643] Bluetooth: hci0: command tx timeout
[  650.808632][T18711] veth0_vlan: entered promiscuous mode
[  650.827662][T18711] veth1_vlan: entered promiscuous mode
[  650.867873][T18711] veth0_macvtap: entered promiscuous mode
[  650.879641][T18711] veth1_macvtap: entered promiscuous mode
[  650.908958][T18711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.927677][T18711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.949298][   T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.989842][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.007455][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.019219][   T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  651.463027][T18902] xt_CT: No such helper "syz1"
[  651.528060][T18907] batadv_slave_0: entered promiscuous mode
[  652.361581][T18906] batadv_slave_0: left promiscuous mode
[  652.702259][T18866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  652.833696][  T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.854683][  T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.960760][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.979920][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.274889][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3844'.
[  653.316852][T18932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3848'.
[  653.497872][T17242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  653.513908][T17242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  653.525576][T17242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  653.542801][T17242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  653.550615][T17242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  654.167318][T18937] lo speed is unknown, defaulting to 1000
[  654.756250][T18937] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.763568][T18937] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.770931][T18937] bridge_slave_0: entered allmulticast mode
[  654.779421][T18937] bridge_slave_0: entered promiscuous mode
[  654.788885][T18937] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.796494][T18937] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.804743][T18937] bridge_slave_1: entered allmulticast mode
[  654.818952][T18937] bridge_slave_1: entered promiscuous mode
[  654.858938][T18937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.872465][T18937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.915361][T18937] team0: Port device team_slave_0 added
[  654.927399][T18937] team0: Port device team_slave_1 added
[  654.965314][T18937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.972705][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.000129][T18937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.013038][T18937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.019981][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.046188][T18937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.094212][T18937] hsr_slave_0: entered promiscuous mode
[  655.100663][T18937] hsr_slave_1: entered promiscuous mode
[  655.107777][T18937] debugfs: 'hsr0' already exists in 'hsr'
[  655.113695][T18937] Cannot create hsr debugfs directory
[  655.219643][T18937] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.281150][T18937] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.351855][T18937] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.390461][T18937] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.621755][T17242] Bluetooth: hci4: command tx timeout
[  656.146735][T18920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  656.192709][T18937] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  656.256726][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  656.287978][T18937] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  656.312926][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  656.325796][T18937] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  656.358536][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  656.382494][T18937] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  656.403474][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  656.561114][T18937] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.604501][T18937] 8021q: adding VLAN 0 to HW filter on device team0
[  656.628726][T18989] netlink: 'syz.1.3861': attribute type 1 has an invalid length.
[  656.641198][T18989] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3861'.
[  656.648441][  T111] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.653275][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3861'.
[  656.657422][  T111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.707874][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.715072][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.879348][T19006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3864'.
[  657.126990][T18937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.168223][T18937] veth0_vlan: entered promiscuous mode
[  657.179958][T18937] veth1_vlan: entered promiscuous mode
[  657.209531][T18937] veth0_macvtap: entered promiscuous mode
[  657.219841][T18937] veth1_macvtap: entered promiscuous mode
[  657.238281][T18937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  657.255605][T18937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.269835][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.279926][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.289644][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.303596][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.479823][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3866'.
[  657.701785][T17242] Bluetooth: hci4: command tx timeout
[  659.771744][T17242] Bluetooth: hci4: command tx timeout
[  659.804777][T18995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  659.924077][ T6411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.942730][ T6411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.952794][T19033] netlink: 'syz.2.3871': attribute type 1 has an invalid length.
[  659.969652][T19033] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3871'.
[  660.014869][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'.
[  660.034087][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.049027][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.329800][T19049] xt_CT: No such helper "syz1"
[  660.522566][T19068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3880'.
[  660.536801][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  660.559597][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  660.569007][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  660.586145][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  660.596217][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  660.898165][T19067] lo speed is unknown, defaulting to 1000
[  661.433645][T19067] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.441077][T19067] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.448474][T19067] bridge_slave_0: entered allmulticast mode
[  661.458160][T19067] bridge_slave_0: entered promiscuous mode
[  661.470515][T19067] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.478168][T19067] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.485728][T19067] bridge_slave_1: entered allmulticast mode
[  661.493318][T19067] bridge_slave_1: entered promiscuous mode
[  661.521682][T19067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.535567][T19067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  661.568113][T19067] team0: Port device team_slave_0 added
[  661.576306][T19067] team0: Port device team_slave_1 added
[  661.600883][T19067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.607931][T19067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.635437][T19067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.649230][T19067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.656383][T19067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.683432][T19067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.730200][T19067] hsr_slave_0: entered promiscuous mode
[  661.736660][T19067] hsr_slave_1: entered promiscuous mode
[  661.743259][T19067] debugfs: 'hsr0' already exists in 'hsr'
[  661.749021][T19067] Cannot create hsr debugfs directory
[  661.872492][T17242] Bluetooth: hci4: command tx timeout
[  661.874446][T19067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.964014][T19067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.025100][T19067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.085337][T19067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.651827][T17242] Bluetooth: hci3: command tx timeout
[  663.408666][T19058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  663.447762][T19067] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  663.497291][T19067] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  663.544574][T19067] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  663.611378][T19067] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  663.629291][T19067] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  663.658396][T19067] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  663.678407][T19067] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  663.699156][T19067] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  663.930145][T19120] syzkaller0: entered promiscuous mode
[  663.943410][T19120] syzkaller0: entered allmulticast mode
[  663.979689][T19120] Bluetooth: MGMT ver 1.23
[  663.985897][T19067] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.075439][T19067] 8021q: adding VLAN 0 to HW filter on device team0
[  664.091214][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.098429][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  664.124394][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.131658][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.714292][T19152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3898'.
[  664.732444][T17242] Bluetooth: hci3: command tx timeout
[  664.897221][T19161] netlink: 'syz.4.3900': attribute type 29 has an invalid length.
[  664.960880][T19067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.020811][T19067] veth0_vlan: entered promiscuous mode
[  665.049670][T19067] veth1_vlan: entered promiscuous mode
[  665.098870][T19067] veth0_macvtap: entered promiscuous mode
[  665.116386][T19067] veth1_macvtap: entered promiscuous mode
[  665.152968][T19067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.178002][T19067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.198519][  T111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.219406][  T111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.531190][  T111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.565980][  T111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.021784][T17242] Bluetooth: hci0: command tx timeout
[  666.812253][T17242] Bluetooth: hci3: command tx timeout
[  667.393284][T19129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.522231][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.540888][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.593510][T19182] batman_adv: batadv0: Adding interface: vlan2
[  667.626382][T19182] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.710741][T19182] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  667.813516][T19182] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.822699][T19182] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.827784][T19197] netlink: 'syz.4.3910': attribute type 29 has an invalid length.
[  667.838278][ T6411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.854954][ T6411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.027984][T19205] bridge1: entered promiscuous mode
[  668.033656][T19205] bridge1: entered allmulticast mode
[  668.043191][T19205] team0: Port device bridge1 added
[  668.369841][T19231] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3921'.
[  668.383452][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'.
[  668.523815][T19235] batman_adv: batadv0: Adding interface: vlan2
[  668.533247][T19235] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.561761][T19235] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  668.892096][T17242] Bluetooth: hci3: command tx timeout
[  669.027061][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3928'.
[  671.205071][T19216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  672.727017][T19300] xt_CT: No such helper "syz1"
[  672.967949][T19317] Bluetooth: MGMT ver 1.23
[  673.734249][T19339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3953'.
[  673.966381][T19342] xt_CT: No such helper "syz1"
[  675.442649][T19294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  676.030401][T19373] xt_CT: No such helper "syz1"
[  676.475505][T19404] netlink: 'syz.4.3974': attribute type 1 has an invalid length.
[  676.483394][T19404] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3974'.
[  676.999220][T19419] xt_CT: No such helper "syz1"
[  677.110204][T19423] bridge1: entered promiscuous mode
[  677.115538][T19423] bridge1: entered allmulticast mode
[  677.125537][T19423] team0: Port device bridge1 added
[  677.421050][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3981'.
[  678.299533][T19431] batman_adv: batadv0: Adding interface: vlan2
[  678.305899][T19431] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  678.331419][T19431] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  679.159059][T19385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  679.386951][T19443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3987'.
[  679.387908][T19451] netlink: 'syz.3.3990': attribute type 1 has an invalid length.
[  679.422086][T19451] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3990'.
[  679.455405][T19448] bridge2: entered promiscuous mode
[  679.467558][T19448] bridge2: entered allmulticast mode
[  679.486186][T19448] team0: Port device bridge2 added
[  681.119245][T19494] FAULT_INJECTION: forcing a failure.
[  681.119245][T19494] name failslab, interval 1, probability 0, space 0, times 0
[  681.151700][T19494] CPU: 1 UID: 0 PID: 19494 Comm: syz.3.3999 Not tainted syzkaller #0 PREEMPT(full) 
[  681.151729][T19494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  681.151742][T19494] Call Trace:
[  681.151750][T19494]  <TASK>
[  681.151761][T19494]  dump_stack_lvl+0xe8/0x150
[  681.151792][T19494]  should_fail_ex+0x40c/0x560
[  681.151825][T19494]  should_failslab+0xa8/0x100
[  681.151850][T19494]  __kmalloc_cache_noprof+0xa8/0x660
[  681.151882][T19494]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  681.151999][T19494]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  681.152032][T19494]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  681.152058][T19494]  ? sctp_stream_interleave_init+0x55/0x90
[  681.152113][T19494]  sctp_association_new+0x15be/0x25d0
[  681.152146][T19494]  sctp_connect_new_asoc+0x2e4/0x6b0
[  681.152170][T19494]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  681.152199][T19494]  ? __local_bh_enable_ip+0xd0/0x130
[  681.152230][T19494]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  681.152258][T19494]  ? security_sctp_bind_connect+0x7e/0x2c0
[  681.152283][T19494]  sctp_sendmsg+0x159b/0x2d00
[  681.152319][T19494]  ? __pfx_sctp_sendmsg+0x10/0x10
[  681.152347][T19494]  ? aa_sk_perm+0x6d5/0x900
[  681.152376][T19494]  ? __might_fault+0xaf/0x130
[  681.152407][T19494]  ? sock_rps_record_flow+0x19/0x350
[  681.152441][T19494]  ? inet_sendmsg+0x298/0x320
[  681.152470][T19494]  ? __pfx_inet_sendmsg+0x10/0x10
[  681.152497][T19494]  sock_sendmsg_nosec+0x10e/0x180
[  681.152529][T19494]  ____sys_sendmsg+0x54e/0x850
[  681.152557][T19494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.152588][T19494]  ? import_iovec+0x73/0xa0
[  681.152613][T19494]  ___sys_sendmsg+0x2a5/0x360
[  681.152641][T19494]  ? __lock_acquire+0x683/0x2cf0
[  681.152667][T19494]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.152726][T19494]  ? __fget_files+0x2a/0x420
[  681.152745][T19494]  ? __fget_files+0x3a2/0x420
[  681.152774][T19494]  __x64_sys_sendmsg+0x1b1/0x290
[  681.152798][T19494]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  681.152840][T19494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.152862][T19494]  do_syscall_64+0x174/0x580
[  681.152881][T19494]  ? trace_irq_disable+0x3b/0x140
[  681.152901][T19494]  ? clear_bhb_loop+0x40/0x90
[  681.152925][T19494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.152945][T19494] RIP: 0033:0x7eff42b9ce59
[  681.152964][T19494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.152981][T19494] RSP: 002b:00007eff43b20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.153002][T19494] RAX: ffffffffffffffda RBX: 00007eff42e15fa0 RCX: 00007eff42b9ce59
[  681.153017][T19494] RDX: 0000000006008045 RSI: 0000200000000300 RDI: 0000000000000003
[  681.153038][T19494] RBP: 00007eff43b20090 R08: 0000000000000000 R09: 0000000000000000
[  681.153049][T19494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.153060][T19494] R13: 00007eff42e16038 R14: 00007eff42e15fa0 R15: 00007ffe6a164b98
[  681.153091][T19494]  </TASK>
[  681.648370][T19505] bridge3: entered promiscuous mode
[  681.653766][T19505] bridge3: entered allmulticast mode
[  681.662409][T19505] team0: Port device bridge3 added
[  682.356962][T19443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  682.602504][T19513] netlink: 'syz.2.4006': attribute type 1 has an invalid length.
[  682.622457][T19513] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4006'.
[  683.040217][T19533] bridge3: entered promiscuous mode
[  683.057446][T19533] bridge3: entered allmulticast mode
[  683.093353][T19533] team0: Port device bridge3 added
[  683.334223][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4013'.
[  685.845455][T19559] bridge2: entered promiscuous mode
[  685.859673][T19559] bridge2: entered allmulticast mode
[  685.874637][T19559] team0: Port device bridge2 added
[  685.972414][T19569] netlink: 'syz.4.4021': attribute type 1 has an invalid length.
[  685.980267][T19569] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4021'.
[  686.450110][T19547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  686.836814][T19590] bridge2: entered promiscuous mode
[  686.850823][T19590] bridge2: entered allmulticast mode
[  686.879638][T19590] team0: Port device bridge2 added
[  687.145225][T19603] bridge3: entered promiscuous mode
[  687.158200][T19603] bridge3: entered allmulticast mode
[  687.174770][T19603] team0: Port device bridge3 added
[  688.092805][ T5643] Bluetooth: hci5: command 0x0406 tx timeout
[  690.156346][T19608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  690.570294][T19658] bridge3: entered promiscuous mode
[  690.584304][T19658] bridge3: entered allmulticast mode
[  690.602700][T19658] team0: Port device bridge3 added
[  690.681360][T19666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4047'.
[  690.854553][T19671] netlink: 'syz.3.4048': attribute type 1 has an invalid length.
[  690.938953][T19671] 8021q: adding VLAN 0 to HW filter on device bond1
[  691.062151][T19671] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  691.161431][T19671] macvlan2: entered promiscuous mode
[  691.167029][T19671] macvlan2: entered allmulticast mode
[  691.173954][T19671] bond1: entered promiscuous mode
[  691.187073][T19671] veth0_to_bond: entered promiscuous mode
[  691.212765][T19671] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  691.443586][T19671] bond1: left promiscuous mode
[  691.450185][T19671] veth0_to_bond: left promiscuous mode
[  693.569255][T19661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.590287][T19677] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4048'.
[  694.050977][T19710] atomic_op ffff888052f7c198 conn xmit_atomic 0000000000000000
[  694.248444][T19709] bridge5: entered promiscuous mode
[  694.255514][T19709] bridge5: entered allmulticast mode
[  694.284579][T19709] team0: Port device bridge5 added
[  694.303161][T19717] netdevsim netdevsim0 
€Â: renamed from netdevsim0 (while UP)
[  694.400039][T13532] IPVS: starting estimator thread 0...
[  694.513171][T19725] IPVS: using max 30 ests per chain, 72000 per kthread
[  694.721661][T19740] FAULT_INJECTION: forcing a failure.
[  694.721661][T19740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  694.745492][T19740] CPU: 1 UID: 0 PID: 19740 Comm: syz.1.4068 Not tainted syzkaller #0 PREEMPT(full) 
[  694.745517][T19740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  694.745529][T19740] Call Trace:
[  694.745538][T19740]  <TASK>
[  694.745547][T19740]  dump_stack_lvl+0xe8/0x150
[  694.745578][T19740]  should_fail_ex+0x40c/0x560
[  694.745610][T19740]  _copy_from_user+0x2d/0xb0
[  694.745638][T19740]  ___sys_recvmsg+0x173/0x5a0
[  694.745669][T19740]  ? __pfx____sys_recvmsg+0x10/0x10
[  694.745696][T19740]  ? __fget_files+0x2a/0x420
[  694.745749][T19740]  do_recvmmsg+0x31a/0x7f0
[  694.745781][T19740]  ? __pfx_do_recvmmsg+0x10/0x10
[  694.745815][T19740]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  694.745847][T19740]  ? __fget_files+0x3a2/0x420
[  694.745876][T19740]  __x64_sys_recvmmsg+0x198/0x250
[  694.745898][T19740]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  694.745926][T19740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.745947][T19740]  do_syscall_64+0x174/0x580
[  694.745965][T19740]  ? trace_irq_disable+0x3b/0x140
[  694.745984][T19740]  ? clear_bhb_loop+0x40/0x90
[  694.746008][T19740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.746028][T19740] RIP: 0033:0x7f7918f9ce59
[  694.746047][T19740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.746072][T19740] RSP: 002b:00007f7919e73028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  694.746094][T19740] RAX: ffffffffffffffda RBX: 00007f7919215fa0 RCX: 00007f7918f9ce59
[  694.746107][T19740] RDX: 000000000400023e RSI: 0000200000002740 RDI: 0000000000000004
[  694.746120][T19740] RBP: 00007f7919e73090 R08: 0000000000000000 R09: 0000000000000000
[  694.746132][T19740] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[  694.746142][T19740] R13: 00007f7919216038 R14: 00007f7919215fa0 R15: 00007ffd64830108
[  694.746172][T19740]  </TASK>
[  695.116430][T19745] bridge6: entered promiscuous mode
[  695.122019][T19745] bridge6: entered allmulticast mode
[  695.130158][T19745] team0: Port device bridge6 added
[  695.149802][T19746] FAULT_INJECTION: forcing a failure.
[  695.149802][T19746] name failslab, interval 1, probability 0, space 0, times 0
[  695.206247][T19746] CPU: 0 UID: 0 PID: 19746 Comm: syz.0.4071 Not tainted syzkaller #0 PREEMPT(full) 
[  695.206274][T19746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  695.206286][T19746] Call Trace:
[  695.206294][T19746]  <TASK>
[  695.206302][T19746]  dump_stack_lvl+0xe8/0x150
[  695.206331][T19746]  should_fail_ex+0x40c/0x560
[  695.206362][T19746]  should_failslab+0xa8/0x100
[  695.206387][T19746]  __kmalloc_noprof+0xfe/0x720
[  695.206413][T19746]  ? __kasan_kmalloc+0x93/0xb0
[  695.206434][T19746]  ? nla_strdup+0x9d/0x140
[  695.206450][T19746]  ? nla_strdup+0x9d/0x140
[  695.206474][T19746]  nla_strdup+0x9d/0x140
[  695.206492][T19746]  nf_tables_newchain+0x1aba/0x28b0
[  695.206539][T19746]  ? __pfx_nf_tables_newchain+0x10/0x10
[  695.206595][T19746]  ? nfnl_pernet+0x23/0x240
[  695.206616][T19746]  ? nfnl_pernet+0x23/0x240
[  695.206645][T19746]  ? __nla_parse+0x40/0x60
[  695.206676][T19746]  nfnetlink_rcv+0x1288/0x28c0
[  695.206730][T19746]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  695.206766][T19746]  ? ref_tracker_free+0x689/0x830
[  695.206816][T19746]  ? skb_clone+0x246/0x3a0
[  695.206842][T19746]  ? __netlink_deliver_tap+0x811/0x860
[  695.206873][T19746]  ? netlink_deliver_tap+0x2e/0x1b0
[  695.206894][T19746]  ? netlink_deliver_tap+0x2e/0x1b0
[  695.206921][T19746]  netlink_unicast+0x7bb/0x940
[  695.206951][T19746]  netlink_sendmsg+0x813/0xb40
[  695.206983][T19746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  695.207009][T19746]  ? aa_sock_msg_perm+0xf1/0x1b0
[  695.207038][T19746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  695.207059][T19746]  sock_sendmsg_nosec+0x13a/0x180
[  695.207088][T19746]  ____sys_sendmsg+0x54e/0x850
[  695.207115][T19746]  ? __pfx_____sys_sendmsg+0x10/0x10
[  695.207144][T19746]  ? import_iovec+0x73/0xa0
[  695.207174][T19746]  ___sys_sendmsg+0x2a5/0x360
[  695.207194][T19746]  ? __lock_acquire+0x683/0x2cf0
[  695.207220][T19746]  ? __pfx____sys_sendmsg+0x10/0x10
[  695.207278][T19746]  ? __fget_files+0x2a/0x420
[  695.207296][T19746]  ? __fget_files+0x3a2/0x420
[  695.207326][T19746]  __x64_sys_sendmsg+0x1b1/0x290
[  695.207350][T19746]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  695.207391][T19746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.207412][T19746]  do_syscall_64+0x174/0x580
[  695.207430][T19746]  ? trace_irq_disable+0x3b/0x140
[  695.207449][T19746]  ? clear_bhb_loop+0x40/0x90
[  695.207473][T19746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.207492][T19746] RIP: 0033:0x7fb926d9ce59
[  695.207510][T19746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.207527][T19746] RSP: 002b:00007fb927d05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  695.207547][T19746] RAX: ffffffffffffffda RBX: 00007fb927015fa0 RCX: 00007fb926d9ce59
[  695.207561][T19746] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000005
[  695.207574][T19746] RBP: 00007fb927d05090 R08: 0000000000000000 R09: 0000000000000000
[  695.207586][T19746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  695.207598][T19746] R13: 00007fb927016038 R14: 00007fb927015fa0 R15: 00007ffe28e38658
[  695.207630][T19746]  </TASK>
[  695.221258][T19750] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  695.609314][T19760] bridge4: entered promiscuous mode
[  695.630988][T19760] bridge4: entered allmulticast mode
[  695.668514][T19760] team0: Port device bridge4 added
[  695.769768][T19771] FAULT_INJECTION: forcing a failure.
[  695.769768][T19771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.801010][T19771] CPU: 0 UID: 0 PID: 19771 Comm: syz.1.4079 Not tainted syzkaller #0 PREEMPT(full) 
[  695.801036][T19771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  695.801048][T19771] Call Trace:
[  695.801056][T19771]  <TASK>
[  695.801064][T19771]  dump_stack_lvl+0xe8/0x150
[  695.801094][T19771]  should_fail_ex+0x40c/0x560
[  695.801125][T19771]  _copy_from_user+0x2d/0xb0
[  695.801157][T19771]  kstrtouint_from_user+0xd6/0x180
[  695.801187][T19771]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  695.801227][T19771]  proc_fail_nth_write+0x8e/0x210
[  695.801249][T19771]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  695.801277][T19771]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  695.801296][T19771]  vfs_write+0x296/0xba0
[  695.801329][T19771]  ? __pfx_vfs_write+0x10/0x10
[  695.801353][T19771]  ? __fget_files+0x2a/0x420
[  695.801377][T19771]  ? __fget_files+0x3a2/0x420
[  695.801395][T19771]  ? __fget_files+0x2a/0x420
[  695.801420][T19771]  ksys_write+0x150/0x270
[  695.801447][T19771]  ? __pfx_ksys_write+0x10/0x10
[  695.801478][T19771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.801499][T19771]  do_syscall_64+0x174/0x580
[  695.801520][T19771]  ? trace_irq_disable+0x3b/0x140
[  695.801537][T19771]  ? clear_bhb_loop+0x40/0x90
[  695.801558][T19771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.801576][T19771] RIP: 0033:0x7f7918f5d68e
[  695.801594][T19771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  695.801608][T19771] RSP: 002b:00007f7919e72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  695.801629][T19771] RAX: ffffffffffffffda RBX: 00007f7919e736c0 RCX: 00007f7918f5d68e
[  695.801642][T19771] RDX: 0000000000000001 RSI: 00007f7919e730a0 RDI: 0000000000000003
[  695.801655][T19771] RBP: 00007f7919e73090 R08: 0000000000000000 R09: 0000000000000000
[  695.801666][T19771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.801677][T19771] R13: 00007f7919216038 R14: 00007f7919215fa0 R15: 00007ffd64830108
[  695.801708][T19771]  </TASK>
[  696.336824][T19777] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  697.646774][T19807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4087'.
[  699.401396][T19802] lo speed is unknown, defaulting to 1000
[  699.509361][T19812] bridge4: entered promiscuous mode
[  699.522087][T19812] bridge4: entered allmulticast mode
[  699.545564][T19812] team0: Port device bridge4 added
[  699.674501][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'.
[  699.870692][T19836] syzkaller0: entered promiscuous mode
[  699.881677][T19836] syzkaller0: entered allmulticast mode
[  699.986693][T19840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4101'.
[  700.100061][T19845] netlink: 'syz.1.4101': attribute type 13 has an invalid length.
[  700.140052][T19845] netlink: 'syz.1.4101': attribute type 17 has an invalid length.
[  700.277828][T19845] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.293259][T19845] 8021q: adding VLAN 0 to HW filter on device team0
[  700.317827][T19845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.466431][T19845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  700.486499][T19845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.517856][T19845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  700.538648][T19845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  700.561947][T19845] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  700.629918][T14762] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.637189][T14762] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.679518][T14762] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.686769][T14762] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.992274][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'.
[  701.016663][T19867] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  701.046620][T19867] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  701.076534][T19867] ipt_ECN: cannot use operation on non-tcp rule
[  701.335727][T19884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4114'.
[  701.958745][T19896] syzkaller0: entered promiscuous mode
[  701.976709][T19896] syzkaller0: entered allmulticast mode
[  702.511773][T19917] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  704.250639][T19880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  704.520609][T19925] xt_CT: No such helper "syz1"
[  704.534347][T19923] atomic_op ffff888033e44198 conn xmit_atomic 0000000000000000
[  704.694701][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'.
[  704.713412][T19931] netlink: 'syz.3.4133': attribute type 1 has an invalid length.
[  705.032657][T19953] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  705.073205][T19953] 8021q: adding VLAN 0 to HW filter on device bond2
[  705.090223][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4139'.
[  705.129827][T19953] bond1: (slave veth0_to_bond): Releasing backup interface
[  705.195783][T19958] netlink: 'syz.3.4140': attribute type 1 has an invalid length.
[  705.216943][T19958] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4140'.
[  705.262747][T19953] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  705.301322][T19951] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.309056][T19951] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.637537][T19970] atomic_op ffff888034fd1998 conn xmit_atomic 0000000000000000
[  705.847513][T19976] xt_CT: No such helper "syz1"
[  706.182837][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'.
[  706.419004][T20008] atomic_op ffff888069a73998 conn xmit_atomic 0000000000000000
[  706.928906][T20026] xt_CT: No such helper "syz1"
[  711.618643][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'.
[  711.643619][T20036] pim6reg1: entered promiscuous mode
[  711.658070][T20036] pim6reg1: entered allmulticast mode
[  711.789676][T20041] netlink: 'syz.2.4169': attribute type 1 has an invalid length.
[  711.899359][T20041] 8021q: adding VLAN 0 to HW filter on device bond1
[  711.911138][T20048] atomic_op ffff888029451998 conn xmit_atomic 0000000000000000
[  712.016904][T20061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'.
[  712.207088][T20060] xt_CT: No such helper "syz1"
[  712.298963][T20041] 8021q: adding VLAN 0 to HW filter on device bond1
[  712.316504][T20041] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  712.334861][T20041] bond1: (slave ip_vti0): Error -95 calling set_mac_address
[  713.160537][T20093] netlink: 'syz.3.4187': attribute type 1 has an invalid length.
[  713.168879][T20093] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4187'.
[  713.346162][T20098] atomic_op ffff888054a50998 conn xmit_atomic 0000000000000000
[  714.662247][T20136] atomic_op ffff88802a31e998 conn xmit_atomic 0000000000000000
[  714.923276][T20143] lo speed is unknown, defaulting to 1000
[  715.006719][T20150] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  715.333982][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4208'.
[  716.172262][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4210'.
[  716.211872][T20167] netlink: 'syz.0.4210': attribute type 1 has an invalid length.
[  718.029131][T20187] atomic_op ffff888050872198 conn xmit_atomic 0000000000000000
[  719.123863][T20213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  720.154581][T20179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  720.409218][T20224] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  721.332768][T20255] atomic_op ffff888076d6d198 conn xmit_atomic 0000000000000000
[  723.883381][T20277] nbd2: detected capacity change from 0 to 63
[  723.912247][T20280] block nbd2: NBD_DISCONNECT
[  723.925145][T20280] block nbd2: Disconnected due to user request.
[  723.951470][T20280] block nbd2: shutting down sockets
[  723.980040][    C1] blk_print_req_error: 269 callbacks suppressed
[  723.980100][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  723.995637][    C1] buffer_io_error: 286 callbacks suppressed
[  723.995656][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  724.012692][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  724.014984][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4241'.
[  724.021924][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  724.021958][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  724.022027][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  724.022047][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  724.022110][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  724.072851][ T4952] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  724.083714][ T4952] Buffer I/O error on dev nbd2, logical block 0, async page read
[  724.094472][ T4952] Buffer I/O error on dev nbd2, logical block 1, async page read
[  724.102626][ T4952] Buffer I/O error on dev nbd2, logical block 2, async page read
[  724.110912][ T4952] Buffer I/O error on dev nbd2, logical block 3, async page read
[  724.121864][ T4952] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  724.131049][ T4952] Buffer I/O error on dev nbd2, logical block 0, async page read
[  724.139124][ T4952] Buffer I/O error on dev nbd2, logical block 1, async page read
[  724.147860][ T4952] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  724.157517][ T4952] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  724.166995][ T4952] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  724.177198][ T4952] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  724.188123][T20044] ldm_validate_partition_table(): Disk read failed.
[  724.197669][T20044] Dev nbd2: unable to read RDB block 0
[  724.206035][T20044]  nbd2: unable to read partition table
[  724.221410][T20044] ldm_validate_partition_table(): Disk read failed.
[  724.235041][T20044] Dev nbd2: unable to read RDB block 0
[  724.244155][T20044]  nbd2: unable to read partition table
[  724.427695][T20290] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  725.913100][T20324] netlink: 'syz.4.4253': attribute type 1 has an invalid length.
[  726.045427][T20332] netlink: 'syz.4.4253': attribute type 1 has an invalid length.
[  726.081730][T20332] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4253'.
[  726.122455][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4253'.
[  728.415259][T20324] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  728.419080][T20327] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  728.459793][T20327] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  728.485985][T20327] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  728.697118][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'.
[  728.711942][T20355] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  729.044625][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'.
[  729.654057][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4273'.
[  729.688989][T20393] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.696762][T20393] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.923132][T20408] sctp: [Deprecated]: syz.1.4274 (pid 20408) Use of int in max_burst socket option.
[  729.923132][T20408] Use struct sctp_assoc_value instead
[  730.118720][T20411] atomic_op ffff88807791b198 conn xmit_atomic 0000000000000000
[  730.435741][T20419] atomic_op ffff88807d841198 conn xmit_atomic 0000000000000000
[  730.517232][T20426] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  730.579792][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4284'.
[  730.840085][T20439] atomic_op ffff88802a31b198 conn xmit_atomic 0000000000000000
[  731.075218][T20442] batman_adv: batadv0: Adding interface: vlan2
[  731.091108][T20442] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  731.141812][T20442] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  731.212347][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'.
[  731.250820][T20442] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.258515][T20450] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  731.258675][T20442] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.610542][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4297'.
[  731.720136][T20471] atomic_op ffff888069856998 conn xmit_atomic 0000000000000000
[  731.879815][T20483] FAULT_INJECTION: forcing a failure.
[  731.879815][T20483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  731.910824][T20483] CPU: 1 UID: 0 PID: 20483 Comm: syz.2.4300 Not tainted syzkaller #0 PREEMPT(full) 
[  731.910852][T20483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  731.910864][T20483] Call Trace:
[  731.910872][T20483]  <TASK>
[  731.910880][T20483]  dump_stack_lvl+0xe8/0x150
[  731.910908][T20483]  should_fail_ex+0x40c/0x560
[  731.910937][T20483]  _copy_from_iter+0x1d3/0x1660
[  731.910961][T20483]  ? kmem_cache_alloc_node_noprof+0x1b1/0x610
[  731.910990][T20483]  ? rcu_is_watching+0x15/0xb0
[  731.911014][T20483]  ? trace_kmem_cache_alloc+0x29/0xe0
[  731.911042][T20483]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  731.911069][T20483]  ? __pfx__copy_from_iter+0x10/0x10
[  731.911097][T20483]  ? __alloc_skb+0x276/0x7a0
[  731.911114][T20483]  ? __alloc_skb+0x276/0x7a0
[  731.911134][T20483]  ? netlink_sendmsg+0x650/0xb40
[  731.911155][T20483]  ? skb_put+0x112/0x210
[  731.911174][T20483]  netlink_sendmsg+0x6c0/0xb40
[  731.911203][T20483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  731.911235][T20483]  ? aa_sock_msg_perm+0xf1/0x1b0
[  731.911264][T20483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  731.911286][T20483]  sock_sendmsg_nosec+0x13a/0x180
[  731.911314][T20483]  ____sys_sendmsg+0x54e/0x850
[  731.911340][T20483]  ? __pfx_____sys_sendmsg+0x10/0x10
[  731.911371][T20483]  ? import_iovec+0x73/0xa0
[  731.911395][T20483]  ___sys_sendmsg+0x2a5/0x360
[  731.911415][T20483]  ? __lock_acquire+0x683/0x2cf0
[  731.911440][T20483]  ? __pfx____sys_sendmsg+0x10/0x10
[  731.911496][T20483]  ? __fget_files+0x2a/0x420
[  731.911513][T20483]  ? __fget_files+0x3a2/0x420
[  731.911539][T20483]  __x64_sys_sendmsg+0x1b1/0x290
[  731.911562][T20483]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  731.911599][T20483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.911620][T20483]  do_syscall_64+0x174/0x580
[  731.911637][T20483]  ? trace_irq_disable+0x3b/0x140
[  731.911655][T20483]  ? clear_bhb_loop+0x40/0x90
[  731.911686][T20483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.911705][T20483] RIP: 0033:0x7f0c2e39ce59
[  731.911724][T20483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.911741][T20483] RSP: 002b:00007f0c2c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  731.911764][T20483] RAX: ffffffffffffffda RBX: 00007f0c2e615fa0 RCX: 00007f0c2e39ce59
[  731.911779][T20483] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000003
[  731.911792][T20483] RBP: 00007f0c2c5f6090 R08: 0000000000000000 R09: 0000000000000000
[  731.911804][T20483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  731.911816][T20483] R13: 00007f0c2e616038 R14: 00007f0c2e615fa0 R15: 00007ffd16649808
[  731.911845][T20483]  </TASK>
[  732.185249][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4299'.
[  732.335860][T20480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4299'.
[  732.351993][T20493] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  733.145084][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'.
[  733.161601][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'.
[  734.017558][T20535] syzkaller0: entered promiscuous mode
[  734.035073][T20535] syzkaller0: entered allmulticast mode
[  734.371973][T20547] batman_adv: batadv0: Adding interface: vlan2
[  734.383597][T20547] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  734.430491][T20547] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  734.493667][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'.
[  734.532090][T20547] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.539440][T20547] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.711454][T20556] FAULT_INJECTION: forcing a failure.
[  734.711454][T20556] name failslab, interval 1, probability 0, space 0, times 0
[  734.725637][T20556] CPU: 0 UID: 0 PID: 20556 Comm: syz.2.4323 Not tainted syzkaller #0 PREEMPT(full) 
[  734.725665][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  734.725676][T20556] Call Trace:
[  734.725684][T20556]  <TASK>
[  734.725692][T20556]  dump_stack_lvl+0xe8/0x150
[  734.725721][T20556]  should_fail_ex+0x40c/0x560
[  734.725750][T20556]  ? nf_hook_entries_grow+0x287/0x740
[  734.725864][T20556]  should_failslab+0xa8/0x100
[  734.725888][T20556]  __kvmalloc_node_noprof+0x176/0x860
[  734.725913][T20556]  ? __nf_register_net_hook+0x232/0x930
[  734.725937][T20556]  ? nf_hook_entries_grow+0x287/0x740
[  734.725961][T20556]  ? __pfx___mutex_lock+0x10/0x10
[  734.725985][T20556]  nf_hook_entries_grow+0x287/0x740
[  734.726024][T20556]  __nf_register_net_hook+0x2c9/0x930
[  734.726059][T20556]  nf_register_net_hook+0xb2/0x190
[  734.726095][T20556]  nf_register_net_hooks+0x44/0x1b0
[  734.726123][T20556]  nf_ct_netns_do_get+0x3bf/0x5c0
[  734.726184][T20556]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  734.726209][T20556]  ? trace_contention_end+0x3d/0x140
[  734.726242][T20556]  ? nf_ct_netns_get+0xe9/0x320
[  734.726269][T20556]  connmark_mt_check+0x53/0xf0
[  734.726344][T20556]  xt_check_match+0x602/0xce0
[  734.726397][T20556]  ? __pfx_xt_check_match+0x10/0x10
[  734.726422][T20556]  ? pcpu_alloc_noprof+0x1036/0x1900
[  734.726454][T20556]  ? xt_find_match+0x213/0x260
[  734.726482][T20556]  translate_table+0x1498/0x1f80
[  734.726546][T20556]  ? __pfx_translate_table+0x10/0x10
[  734.726566][T20556]  ? __might_fault+0xaf/0x130
[  734.726591][T20556]  ? __might_fault+0xaf/0x130
[  734.726640][T20556]  ? _copy_from_user+0x94/0xb0
[  734.726666][T20556]  do_ipt_set_ctl+0xa53/0xe20
[  734.726695][T20556]  ? rcu_is_watching+0x15/0xb0
[  734.726719][T20556]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  734.726756][T20556]  ? __mutex_unlock_slowpath+0x731/0x900
[  734.726786][T20556]  ? aa_sk_perm+0x6d5/0x900
[  734.726811][T20556]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  734.726844][T20556]  ? __pfx_aa_sk_perm+0x10/0x10
[  734.726873][T20556]  nf_setsockopt+0x26f/0x290
[  734.726904][T20556]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  734.726933][T20556]  do_sock_setsockopt+0x17c/0x1b0
[  734.726958][T20556]  __x64_sys_setsockopt+0x13d/0x1b0
[  734.726980][T20556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.727001][T20556]  do_syscall_64+0x174/0x580
[  734.727018][T20556]  ? trace_irq_disable+0x3b/0x140
[  734.727036][T20556]  ? clear_bhb_loop+0x40/0x90
[  734.727061][T20556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.727080][T20556] RIP: 0033:0x7f0c2e39ce59
[  734.727107][T20556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.727123][T20556] RSP: 002b:00007f0c2c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  734.727144][T20556] RAX: ffffffffffffffda RBX: 00007f0c2e615fa0 RCX: 00007f0c2e39ce59
[  734.727159][T20556] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  734.727171][T20556] RBP: 00007f0c2c5f6090 R08: 00000000000003d0 R09: 0000000000000000
[  734.727184][T20556] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000002
[  734.727196][T20556] R13: 00007f0c2e616038 R14: 00007f0c2e615fa0 R15: 00007ffd16649808
[  734.727230][T20556]  </TASK>
[  735.054168][T20556] cannot load conntrack support for proto=2
[  735.096154][T20561] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  735.573546][T20580] syzkaller0: entered promiscuous mode
[  735.604536][T20580] syzkaller0: entered allmulticast mode
[  735.974683][T20593] netlink: 'syz.0.4331': attribute type 1 has an invalid length.
[  736.189558][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'.
[  736.506392][T20611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4338'.
[  737.956082][T20654] netlink: 'syz.3.4349': attribute type 1 has an invalid length.
[  738.208360][T20667] syzkaller1: entered promiscuous mode
[  738.233626][T20667] syzkaller1: entered allmulticast mode
[  738.869763][T20695] xt_CT: No such helper "syz1"
[  739.436617][T20720] netlink: 'syz.2.4367': attribute type 1 has an invalid length.
[  739.912458][T20732] syzkaller1: tun_chr_ioctl cmd 1074025677
[  739.926829][T20732] syzkaller1: linktype set to 773
[  740.018952][T20735] xt_CT: No such helper "syz1"
[  741.445508][T20782] netlink: 'syz.4.4384': attribute type 1 has an invalid length.
[  743.766683][T20795] netlink: 'syz.2.4387': attribute type 1 has an invalid length.
[  743.974086][T20800] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  744.010309][T20809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4392'.
[  744.107177][T20800] bond2 (unregistering): Released all slaves
[  744.794307][T20832] atomic_op ffff888035b7e998 conn xmit_atomic 0000000000000000
[  745.174088][T20840] netlink: 'syz.2.4401': attribute type 1 has an invalid length.
[  745.367904][T20850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4404'.
[  745.445200][T20851] bridge4: entered promiscuous mode
[  745.450590][T20851] bridge4: entered allmulticast mode
[  745.466674][T20851] team0: Port device bridge4 added
[  745.534203][T20854] syzkaller0: entered promiscuous mode
[  745.539994][T20854] syzkaller0: entered allmulticast mode
[  745.551182][T20854] syz_tun: entered allmulticast mode
[  745.575441][T20858] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4407'.
[  745.592458][T20858] nbd: must specify a size in bytes for the device
[  745.607481][T20853] syz_tun: left allmulticast mode
[  745.779070][T20861] atomic_op ffff8880341e3998 conn xmit_atomic 0000000000000000
[  746.324033][T20890] netlink: 'syz.1.4419': attribute type 1 has an invalid length.
[  747.069959][T20901] atomic_op ffff88805419d998 conn xmit_atomic 0000000000000000
[  747.081863][T20904] batadv_slave_0: entered promiscuous mode
[  747.149843][T20902] batadv_slave_0: left promiscuous mode
[  747.596166][T20922] netlink: 'syz.4.4432': attribute type 1 has an invalid length.
[  747.967782][T20924] lo speed is unknown, defaulting to 1000
[  748.465801][T20926] netlink: 'syz.2.4433': attribute type 4 has an invalid length.
[  748.515721][T20941] netlink: 'syz.2.4433': attribute type 4 has an invalid length.
[  748.711992][T20941] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4433'.
[  748.837318][T20945] atomic_op ffff88803442a198 conn xmit_atomic 0000000000000000
[  749.042836][T20951] FAULT_INJECTION: forcing a failure.
[  749.042836][T20951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.075680][T20951] CPU: 1 UID: 0 PID: 20951 Comm: syz.4.4439 Not tainted syzkaller #0 PREEMPT(full) 
[  749.075709][T20951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  749.075721][T20951] Call Trace:
[  749.075729][T20951]  <TASK>
[  749.075738][T20951]  dump_stack_lvl+0xe8/0x150
[  749.075769][T20951]  should_fail_ex+0x40c/0x560
[  749.075801][T20951]  _copy_from_user+0x2d/0xb0
[  749.075824][T20951]  bpf_test_init+0xd8/0x150
[  749.075851][T20951]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  749.075888][T20951]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  749.075916][T20951]  ? __fget_files+0x2a/0x420
[  749.075941][T20951]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  749.075965][T20951]  bpf_prog_test_run+0x2c5/0x340
[  749.075989][T20951]  __sys_bpf+0xa22/0xd90
[  749.076016][T20951]  ? __pfx___sys_bpf+0x10/0x10
[  749.076044][T20951]  ? __fget_files+0x2a/0x420
[  749.076079][T20951]  ? ksys_write+0x242/0x270
[  749.076105][T20951]  ? __pfx_ksys_write+0x10/0x10
[  749.076134][T20951]  __x64_sys_bpf+0xba/0xd0
[  749.076162][T20951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.076183][T20951]  do_syscall_64+0x174/0x580
[  749.076202][T20951]  ? trace_irq_disable+0x3b/0x140
[  749.076221][T20951]  ? clear_bhb_loop+0x40/0x90
[  749.076245][T20951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.076265][T20951] RIP: 0033:0x7f79cf99ce59
[  749.076283][T20951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.076301][T20951] RSP: 002b:00007f79d0782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  749.076321][T20951] RAX: ffffffffffffffda RBX: 00007f79cfc15fa0 RCX: 00007f79cf99ce59
[  749.076335][T20951] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  749.076348][T20951] RBP: 00007f79d0782090 R08: 0000000000000000 R09: 0000000000000000
[  749.076361][T20951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.076373][T20951] R13: 00007f79cfc16038 R14: 00007f79cfc15fa0 R15: 00007fff5925a688
[  749.076411][T20951]  </TASK>
[  749.707549][T20959] bridge9: entered promiscuous mode
[  749.722860][T20959] bridge9: entered allmulticast mode
[  749.780370][T20961] xt_CT: No such helper "syz1"
[  749.792154][T20959] team0: Port device bridge9 added
[  750.169780][T20973] netlink: 'syz.1.4447': attribute type 1 has an invalid length.
[  750.378111][T20978] atomic_op ffff88801db97198 conn xmit_atomic 0000000000000000
[  750.707422][T20990] xt_CT: No such helper "syz1"
[  750.905064][T21001] FAULT_INJECTION: forcing a failure.
[  750.905064][T21001] name failslab, interval 1, probability 0, space 0, times 0
[  750.930069][T21001] CPU: 0 UID: 0 PID: 21001 Comm: syz.2.4457 Not tainted syzkaller #0 PREEMPT(full) 
[  750.930096][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  750.930108][T21001] Call Trace:
[  750.930116][T21001]  <TASK>
[  750.930125][T21001]  dump_stack_lvl+0xe8/0x150
[  750.930154][T21001]  should_fail_ex+0x40c/0x560
[  750.930184][T21001]  should_failslab+0xa8/0x100
[  750.930209][T21001]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  750.930238][T21001]  ? skb_clone+0x212/0x3a0
[  750.930257][T21001]  ? skb_clone+0x212/0x3a0
[  750.930284][T21001]  skb_clone+0x212/0x3a0
[  750.930308][T21001]  __netlink_deliver_tap+0x413/0x860
[  750.930352][T21001]  ? netlink_deliver_tap+0x2e/0x1b0
[  750.930376][T21001]  netlink_deliver_tap+0x19c/0x1b0
[  750.930400][T21001]  netlink_unicast+0x77f/0x940
[  750.930432][T21001]  netlink_sendmsg+0x813/0xb40
[  750.930464][T21001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  750.930491][T21001]  ? aa_sock_msg_perm+0xf1/0x1b0
[  750.930520][T21001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  750.930541][T21001]  sock_sendmsg_nosec+0x13a/0x180
[  750.930570][T21001]  ____sys_sendmsg+0x54e/0x850
[  750.930597][T21001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  750.930627][T21001]  ? import_iovec+0x73/0xa0
[  750.930652][T21001]  ___sys_sendmsg+0x2a5/0x360
[  750.930672][T21001]  ? __lock_acquire+0x683/0x2cf0
[  750.930698][T21001]  ? __pfx____sys_sendmsg+0x10/0x10
[  750.930756][T21001]  ? __fget_files+0x2a/0x420
[  750.930775][T21001]  ? __fget_files+0x3a2/0x420
[  750.930804][T21001]  __x64_sys_sendmsg+0x1b1/0x290
[  750.930827][T21001]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  750.930867][T21001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.930888][T21001]  do_syscall_64+0x174/0x580
[  750.930907][T21001]  ? trace_irq_disable+0x3b/0x140
[  750.930925][T21001]  ? clear_bhb_loop+0x40/0x90
[  750.930950][T21001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.930969][T21001] RIP: 0033:0x7f0c2e39ce59
[  750.930988][T21001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.931005][T21001] RSP: 002b:00007f0c2c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  750.931025][T21001] RAX: ffffffffffffffda RBX: 00007f0c2e615fa0 RCX: 00007f0c2e39ce59
[  750.931039][T21001] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000005
[  750.931052][T21001] RBP: 00007f0c2c5f6090 R08: 0000000000000000 R09: 0000000000000000
[  750.931065][T21001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  750.931077][T21001] R13: 00007f0c2e616038 R14: 00007f0c2e615fa0 R15: 00007ffd16649808
[  750.931109][T21001]  </TASK>
[  751.436756][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'.
[  751.508721][T21009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  751.716761][T21016] atomic_op ffff888033f48198 conn xmit_atomic 0000000000000000
[  751.876405][T21028] netlink: 'syz.0.4461': attribute type 1 has an invalid length.
[  752.371469][T21037] xt_CT: No such helper "syz1"
[  752.767531][T21060] atomic_op ffff88804678d198 conn xmit_atomic 0000000000000000
[  752.978720][T21073] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  753.040741][T21074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  753.799404][T21093] netlink: 'syz.4.4480': attribute type 1 has an invalid length.
[  754.272345][T21112] atomic_op ffff888055824198 conn xmit_atomic 0000000000000000
[  754.438055][T21118] netlink: 'syz.0.4491': attribute type 1 has an invalid length.
[  754.962908][T21133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  755.889006][T21159] bridge5: entered promiscuous mode
[  755.894524][T21159] bridge5: entered allmulticast mode
[  755.908014][T21159] team0: Port device bridge5 added
[  756.005237][T21164] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  758.564568][T21141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  758.804624][T21176] netlink: 'syz.0.4502': attribute type 1 has an invalid length.
[  759.196963][T21188] syzkaller0: entered promiscuous mode
[  759.221728][T21188] syzkaller0: entered allmulticast mode
[  759.340043][T21190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  759.772137][ T5640] Bluetooth: hci1: command 0x0406 tx timeout
[  759.797801][T21209] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  760.040535][T21218] netlink: 'syz.2.4519': attribute type 1 has an invalid length.
[  760.427043][T21223] IPVS: persistence engine module ip_vs_pe_À not found
[  760.679415][T21228] syzkaller0: entered promiscuous mode
[  760.698724][T21228] syzkaller0: entered allmulticast mode
[  760.783852][T21237] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[  761.594354][T21263] netlink: 'syz.0.4532': attribute type 1 has an invalid length.
[  761.933727][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4534'.
[  764.755107][T21285] syzkaller0: entered promiscuous mode
[  764.776106][T21285] syzkaller0: entered allmulticast mode
[  764.891756][ T5640] Bluetooth: hci0: command 0x0406 tx timeout
[  765.065479][T21294] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11
[  765.536502][T21320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4545'.
[  765.564131][T21322] netlink: 'syz.3.4548': attribute type 1 has an invalid length.
[  765.660331][T21325] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  765.681025][T21324] batadv_slave_0: entered promiscuous mode
[  765.780448][T21323] batadv_slave_0: left promiscuous mode
[  765.909895][T21333] syz_tun: entered allmulticast mode
[  765.925441][T21331] syz_tun: left allmulticast mode
[  766.120376][T21344] batadv_slave_0: entered promiscuous mode
[  766.185334][T21342] batadv_slave_0: left promiscuous mode
[  766.213765][T21345] IPVS: persistence engine module ip_vs_pe_À not found
[  766.490613][T21361] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12
[  766.641014][T21371] FAULT_INJECTION: forcing a failure.
[  766.641014][T21371] name failslab, interval 1, probability 0, space 0, times 0
[  766.663031][T21371] CPU: 0 UID: 0 PID: 21371 Comm: syz.4.4564 Not tainted syzkaller #0 PREEMPT(full) 
[  766.663058][T21371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  766.663069][T21371] Call Trace:
[  766.663077][T21371]  <TASK>
[  766.663086][T21371]  dump_stack_lvl+0xe8/0x150
[  766.663115][T21371]  should_fail_ex+0x40c/0x560
[  766.663146][T21371]  should_failslab+0xa8/0x100
[  766.663169][T21371]  __kmalloc_cache_noprof+0xa8/0x660
[  766.663198][T21371]  ? __xdp_reg_mem_model+0x1e9/0x5a0
[  766.663299][T21371]  ? __xdp_reg_mem_model+0x1e9/0x5a0
[  766.663324][T21371]  __xdp_reg_mem_model+0x1e9/0x5a0
[  766.663350][T21371]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  766.663381][T21371]  xdp_reg_mem_model+0x22/0x40
[  766.663402][T21371]  bpf_test_run_xdp_live+0x292/0x1c20
[  766.663429][T21371]  ? bpf_dispatcher_change_prog+0xc4a/0xf20
[  766.663455][T21371]  ? __mutex_unlock_slowpath+0x731/0x900
[  766.663490][T21371]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  766.663522][T21371]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  766.663545][T21371]  ? bpf_dispatcher_xdp+0x800/0x1000
[  766.663618][T21371]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  766.663646][T21371]  ? _copy_from_user+0x94/0xb0
[  766.663666][T21371]  ? bpf_test_init+0x113/0x150
[  766.663684][T21371]  ? xdp_convert_md_to_buff+0x5b/0x330
[  766.663707][T21371]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  766.663745][T21371]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  766.663772][T21371]  ? __fget_files+0x2a/0x420
[  766.663796][T21371]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  766.663818][T21371]  bpf_prog_test_run+0x2c5/0x340
[  766.663843][T21371]  __sys_bpf+0xa22/0xd90
[  766.663871][T21371]  ? __pfx___sys_bpf+0x10/0x10
[  766.663899][T21371]  ? __fget_files+0x2a/0x420
[  766.663932][T21371]  ? ksys_write+0x242/0x270
[  766.663957][T21371]  ? __pfx_ksys_write+0x10/0x10
[  766.663984][T21371]  __x64_sys_bpf+0xba/0xd0
[  766.664012][T21371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.664034][T21371]  do_syscall_64+0x174/0x580
[  766.664052][T21371]  ? trace_irq_disable+0x3b/0x140
[  766.664070][T21371]  ? clear_bhb_loop+0x40/0x90
[  766.664091][T21371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.664110][T21371] RIP: 0033:0x7f79cf99ce59
[  766.664128][T21371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  766.664144][T21371] RSP: 002b:00007f79d0782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  766.664163][T21371] RAX: ffffffffffffffda RBX: 00007f79cfc15fa0 RCX: 00007f79cf99ce59
[  766.664178][T21371] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  766.664189][T21371] RBP: 00007f79d0782090 R08: 0000000000000000 R09: 0000000000000000
[  766.664201][T21371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  766.664212][T21371] R13: 00007f79cfc16038 R14: 00007f79cfc15fa0 R15: 00007fff5925a688
[  766.664240][T21371]  </TASK>
[  767.060781][T21375] netlink: 'syz.0.4565': attribute type 1 has an invalid length.
[  767.199495][T21380] syz_tun: entered allmulticast mode
[  767.234935][T21384] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13
[  767.346763][T21377] syz_tun: left allmulticast mode
[  767.922523][T21405] batadv_slave_0: entered promiscuous mode
[  768.185789][T21404] batadv_slave_0: left promiscuous mode
[  768.457484][T21425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14
[  768.559451][T21433] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4581'.
[  768.720600][T21440] netlink: 'syz.1.4583': attribute type 1 has an invalid length.
[  768.819008][T21443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4584'.
[  769.265379][   T30] audit: type=1804 audit(1782459117.012:10): pid=21463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4591" name="/newroot/147/cgroup.controllers" dev="tmpfs" ino=772 res=1 errno=0
[  769.325009][   T30] audit: type=1800 audit(1782459117.012:11): pid=21463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4591" name="cgroup.controllers" dev="tmpfs" ino=772 res=0 errno=0
[  769.446517][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4595'.
[  769.918208][T21488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15
[  769.959355][T21490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4600'.
[  769.973365][T21490] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  773.484880][T21526] netlink: 'syz.0.4606': attribute type 1 has an invalid length.
[  773.498182][T21526] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4606'.
[  773.562812][T21514] lo speed is unknown, defaulting to 1000
[  773.774845][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4608'.
[  773.878986][T21544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4612'.
[  773.900997][T21542] syzkaller0: entered promiscuous mode
[  773.917009][T21542] syzkaller0: entered allmulticast mode
[  774.247009][T21560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16
[  774.272224][T21562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4619'.
[  774.285465][T21562] netlink: 'syz.0.4619': attribute type 1 has an invalid length.
[  774.649936][T21572] gre1: entered allmulticast mode
[  774.709242][T21572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'.
[  775.223967][T21596] syzkaller0: entered promiscuous mode
[  775.233987][T21596] syzkaller0: entered allmulticast mode
[  775.495352][T21605] sctp: [Deprecated]: syz.0.4633 (pid 21605) Use of int in max_burst socket option.
[  775.495352][T21605] Use struct sctp_assoc_value instead
[  775.713367][T21612] netlink: 'syz.0.4636': attribute type 1 has an invalid length.
[  775.741732][T21612] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4636'.
[  776.514417][T21631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  776.548499][T21631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  776.948104][T21642] syzkaller0: entered promiscuous mode
[  776.955396][T21642] syzkaller0: entered allmulticast mode
[  776.968277][T14762] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.974525][T21656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  776.996013][T14762] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  777.228122][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4646'.
[  777.794297][T21655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  778.162170][T21671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  780.256616][ T5643] Bluetooth: hci4: command 0x0406 tx timeout
[  781.011861][T14762] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.020951][T14762] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.126107][T21713] netlink: 'syz.3.4661': attribute type 1 has an invalid length.
[  781.164880][T21713] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4661'.
[  781.436626][T21728] netlink: 'syz.1.4662': attribute type 1 has an invalid length.
[  781.487819][T21728] 8021q: adding VLAN 0 to HW filter on device bond2
[  781.526014][T21728] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  781.574304][T21728] netlink: 'syz.1.4662': attribute type 1 has an invalid length.
[  781.617312][T21735] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  781.631927][T21728] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4662'.
[  781.632144][T21737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4662'.
[  782.534796][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4674'.
[  783.097614][T21774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4680'.
[  783.153355][T21774] netlink: 'syz.4.4680': attribute type 1 has an invalid length.
[  785.011927][   T13] unregister_netdevice: waiting for bond1 to become free. Usage count = 2